Solved Blocked IP Address

R

Rockyuk

Verified User
Joined
Aug 3, 2020
Messages
59
Hi everyone,
I have a weird one here, my home static IP changed and I used to be able to log in to my DirectAdmin fine. Then all of a sudden I was blocked, CSF and LFD are not blocking me as my new IP is whitelisted. BFM does not seem to be blocking me either but I cannot login into DirectAdmin from my static IP still!

Any ideas of anywhere else within DirectAdmin that can block me so I can check and remove the block? I can access DirectAdmin via my VPN but not my static IP.

Thanks

Rockyuk
 
Rockyuk said:
Any ideas of anywhere else within DirectAdmin that can block me so I can check and remove the block?
Click to expand...
Yes, for some reason DA itself is blocking you. The question is why.

However, you can remove yourself from the DA blacklist via SSH.
If I'm correct your static ip is possibly in this file:
/usr/local/directadmin/data/admin/ip_blacklist
remove it from there and then add your ip in this list below to prevent it happening again, if the file does not exist you can create it:
/usr/local/directadmin/data/admin/ip_whitelist

To be sure restart the directadmin service afterwards.
 
Richard G said:
Yes, for some reason DA itself is blocking you. The question is why.

However, you can remove yourself from the DA blacklist via SSH.
If I'm correct your static ip is possibly in this file:
/usr/local/directadmin/data/admin/ip_blacklist
remove it from there and then add your ip in this list below to prevent it happening again, if the file does not exist you can create it:
/usr/local/directadmin/data/admin/ip_whitelist

To be sure restart the directadmin service afterwards.
Click to expand...
Yeah done all of that nothing was in the blacklist and my new IP is already in the Whitelist. I have also restarted directadmin and still being blocked!
 
Rockyuk said:
I have also restarted directadmin and still being blocked!
Click to expand...
That's theoretically not possible, then you must be blocked somewhere.

Try to just remove your ip to see if it's still present somewhere:
csf -dr your.ip.here
csf -tr your.ip.here

Do you have any other protection like immunify360 or how it's called or working with whmcs or anything else which could block you?

Doublecheck your ip on https://www.whatismyip.com/ if you did not already do so and doublecheck for typo's like , instead of . and such.

Try disabling csf with csf -x and see if that helps.
Is firewalld or something also still running?
 
Ok, I found out what it was it was actually my Pfsense blocked my server IP when I was doing an FTP transfer earlier. I have unblocked it and everything is working now.

Thanks everyone for your help
 
You must log in or register to reply here.
Back
Top