Imunify360 website protection
All of our cPanel servers run Imunify360, a security suite that protects your website around the clock. It works automatically; you don't need to install or configure anything.
What Imunify360 does
- Web application firewall. Blocks common attacks on websites, such as attempts to exploit WordPress plugins or guess passwords, before they reach your site.
- Malware scanning. Scans new and changed files as soon as they're written, and scans every account regularly. Files found to be infected are cleaned automatically, and a copy of the original is kept for 30 days.
- Proactive Defense. Watches PHP scripts as they run and stops malicious ones, even if the malware is new.
- Login protection. Blocks IP addresses that repeatedly fail to log in to cPanel, email or FTP.
See what Imunify360 found
1. Log in to cPanel. See Log in to cPanel and WHM from the Client Area.
2. In the Security section, click Imunify360.
3. Review any files listed as infected or cleaned.
To run your own scan as well, see Scan your website for malware.
If you or a visitor are blocked
Sometimes a visitor's IP address is blocked, for example after several failed logins or after their network sent suspicious traffic. Instead of the website, they see a page asking them to prove they're human. Completing it unblocks their IP address.
If someone is still blocked, or you can't reach your own website, cPanel, email or FTP, please open a support ticket and include the IP address that's blocked. You can find your IP address by searching "what is my IP" in a search engine.
Keep your website safe
Imunify360 is a strong safety net, but the best protection is keeping your website up to date:
- Update your website software, such as WordPress, and all its plugins and themes regularly. Remove any you don't use.
- Use strong, unique passwords, and turn on two-factor authentication for cPanel and the Client Area. See Secure your Client Area account.
- Keep backups. See Restore files, databases and email with JetBackup.