Updated: 28 September 2026 · Applies to: WHMCS 9
WHMCS blocks an IP address automatically after three failed admin login attempts, to stop password guessing. If your own address is blocked, remove the ban in the admin area from another connection (for example mobile data), or wait for it to expire.
Remove a ban
- Log in to the WHMCS admin area.
- Open Configuration › System Settings › Banned IPs.
- Find the address (use the Filter tab if the list is long) and click the red delete icon next to it.
Prevent it
Add your fixed office IP to the whitelist in Configuration › System Settings › General Settings › Security tab, and set a sensible ban length there.
Note: If you cannot reach the admin area at all, the ban is stored in the WHMCS database table tblbannedips; delete the row for your IP with phpMyAdmin. Take a database backup first.
