How to find out why an IP was blocked in CSF

Please Note: This Guide is for VPS/Dedicated Servers that have access to CENTOS/WHM root

To find the exact reason for the block you will need to SSH into the server as root and run the corresponding commands:

Failed IMAP/POP login:

zgrep ip /var/log/maillog* | grep fail

Failed SMTP login:

zgrep ip /var/log/exim_mainlog* | grep fail

Failed cPanel login:

zgrep ip /usr/local/cpanel/logs/access_log* | grep fail

Failed FTP login:

zgrep ip /var/log/messages* | grep fail

Failed SSH login:

zgrep ip /var/log/messages* | grep fail