Help Center> Host Security Service (Old)> FAQs> Alarm and Event Management> Intrusions> Can I Unblock an IP Address Blocked by HSS, and How?
Updated on 2022-08-11 GMT+08:00

Can I Unblock an IP Address Blocked by HSS, and How?

Whether you can unblock an IP address depends on why it was blocked. An IP address will be blocked if it is regarded as the source of a brute-force attack, listed in the common IP blacklist, or not in the IP whitelist you set.

Brute-force Attack IP Address

  • HSS block attacking IP addresses to prevent intrusions. The blocking duration for suspicious SSH attacks is 12 hours and that for other suspicious attacks is 24 hours. If a blocked IP address does not perform brute-force attacks in the default blocking duration, it will be automatically unblocked.
  • If you are sure that a source IP address can be trusted, you can manually unblock it. Choose Intrusions > Events, click Blocked IP Addresses, and unblock the IP address in the displayed slide-out panel.

    If you manually unblocked an IP address, but incorrect password attempts from this IP address exceed the threshold again, this IP address will be blocked again.

IP Address in the Common IP Blacklist

You cannot manually unblock such IP addresses.

IP Address Not in the SSH Login IP Whitelist

If you have configured the SSH login IP whitelist, the IP addresses not in the whitelist will be blocked. To unblock an IP address, add it to the whitelist.

Intrusions FAQs

more