Whitelisting an IP address usually means one of two different things: either you want to restrict a site, folder or admin area so only certain IP addresses can reach it, or you need to unblock a visitor's IP address that your server's security software has blocked by mistake. The steps below cover both situations.

Restricting a folder to specific IP addresses

This method works with LiteSpeed Web Server on any hosting plan, and is done by editing a file called .htaccess. Put the code in the root folder of your site to protect the whole site, or in the /wp-admin/ folder to protect only the WordPress admin area.

cPanel

  1. Log in to cPanel and open File Manager.
  2. Navigate to public_html (or the subfolder you want to protect, such as public_html/wp-admin).
  3. Find the file named .htaccess. If it is not visible, turn on "Show Hidden Files" in the File Manager settings.
  4. Right-click the file and choose Edit.
  5. Add the following lines at the top of the file, replacing the example IP address with the one you want to allow:

<RequireAny>
Require ip 203.0.113.10
</RequireAny>

  1. Add one Require ip line for each extra IP address you want to allow.
  2. Save the file, then test access from an allowed and a non-allowed connection.

DirectAdmin

  1. Log in to DirectAdmin and open File Manager.
  2. Go to the public_html folder, or the subfolder you want to restrict.
  3. Open the .htaccess file for editing, creating it if it does not already exist.
  4. Add the same Require ip block shown above, listing each IP address you want to allow.
  5. Click Save and test the folder from both an allowed and a blocked connection.

Unblocking an IP flagged by security software

If a legitimate visitor, or you, cannot reach the site because of a firewall block, the fix is to remove that IP address from the block list rather than edit .htaccess. Hostking servers use Imunify360 to automatically block IP addresses that trigger too many failed logins or suspicious requests.

cPanel

  1. Log in to cPanel and open the Imunify360 or Security section.
  2. Choose the option to view blocked or banned IP addresses.
  3. Find the IP address that needs access and select Unblock or Whitelist.
  4. Confirm the change and ask the affected visitor to try again after a few minutes.

DirectAdmin

  1. Log in to DirectAdmin and look for the Imunify360 or firewall section.
  2. Open the list of currently blocked IP addresses.
  3. Select the relevant IP address and choose to unblock or whitelist it.
  4. Save the change and confirm the visitor can reach the site again.

If you cannot find an Imunify360 or security option in your control panel, check your welcome email or the client area for the exact menu name on your plan, or ask support to check the block list for you.

Troubleshooting

  • Still blocked after whitelisting: your device may have a different public IP address than expected, especially on mobile data or a changing home connection; check your current IP address again before adding it.
  • .htaccess changes have no effect: make sure the file was saved in the correct folder and that there is no second .htaccess file overriding it further down the folder structure.
  • Locked out of your own site after editing .htaccess: connect via File Manager or FTP using your hosting login (not the restricted URL) and remove or correct the Require ip lines.
  • IP keeps getting blocked again: this usually means repeated failed login attempts are still happening, often from a saved password or bot traffic, so check for login attempts after unblocking.

If you are still stuck, contact Hostking support through live chat on the website or by opening a support ticket from the client area.

Was this answer helpful? 0 Users Found This Useful (0 Votes)