Already done or checked all these. customer not using any login/webmail/out look. customer logged to his directadmin from my whmcs directly and doing some wordpress updations. After few minutes, the ip will block. i dont know the root cause of this issue.?If customer has a static IP add them to allow list in CSF firewall, at least from that address they won't be blocked. If they are getting blocked from SMTP auth they need to fix the client device that is setup wrong.