In using CiviCRM on a shared server with a local hosting provider, my IP address continually gets blocked by the server's security script. According to my provider my [legitimate CiviCRM] activity is seen as a Brute Force attack on the server.

My question: is this a problem related to the host, or is it related to some misconfiguration of my CiviCRM or Joomla CMS?


Sounds a bit like a problem with mod_security, see also


I have also asked a hoster once of one of my clients to switch it off for that site. But this forum topic even gives options about how to configure mod_security rules to keep it switched on and still have CiviCRM working.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.