If your VPS is unresponsive and ping or traceroute from multiple locations show it's unreachable, your IP address is likely blocked. To restore service, you'll need to diagnose with tools like mtr or online checkers, then potentially change your IP address, which typically takes 5-10 minutes via the control panel.
A blocked IP address on your Virtual Private Server (VPS) is an unfortunate but common issue for website owners, application developers, and other online service providers. The reasons can be numerous: from government regulators to automated security systems of other providers reacting to suspicious activity. It's crucial not to panic, but rather to approach the diagnosis and resolution systematically. In this article, we'll detail how to accurately determine the cause of your server's unavailability and what steps to take to get it back online.
How to tell if your VPS IP address is actually blocked?
First signs: your server is unreachable from certain regions
When your VPS stops responding, the first thought is often complete unavailability. The primary and quickest way to perform an initial check is using the ping command. If you're trying to connect to the server via SSH, open a website hosted on it, or use any other application, and it's not working, start with a ping. Open your command prompt (Windows) or terminal (Linux/macOS) and enter:
ping your_vps_ipIf you receive messages like "Request timed out" or "Destination Host Unreachable," this indicates connectivity problems. However, it's important to understand that a failed ping alone doesn't always mean your server's IP has been blocked. It could also be an OS crash, a network card issue, or even an incorrect firewall configuration on the VPS that's simply dropping ICMP packets.
A key diagnostic step is checking accessibility from different geographical locations. If the server doesn't ping from one region (e.g., Russia) but responds well to pings from Europe or the US (which can be checked via online services), this is a strong indicator of a localized IP address block.
Is your server IP blocked, or is it another problem?
Before taking drastic measures, it's essential to confirm that the issue is indeed an IP block, not other, simpler problems. Here are the main scenarios to rule out:
- Server or OS crash: Your VPS might have simply frozen or shut down. In this case, the server won't respond to pings from anywhere. Check the VPS status in your provider's control panel (e.g., Valebyte.com). A simple reboot might be enough.
- Provider network issues: A rare but possible scenario where an entire segment of the provider's network is experiencing difficulties. Providers usually quickly inform about such incidents.
- Incorrect firewall configuration on the VPS: If you recently changed firewall rules (
iptables,ufw), you might have accidentally blocked necessary ports or even ICMP traffic, leading to no ping responses. Try temporarily disabling the firewall (if you have access via VNC/provider console) or checking its rules. - Resource exhaustion: High CPU, RAM, or disk usage can slow down the server to the point where it stops responding to requests. Check resource usage metrics in the control panel.
Comprehensive diagnosis, which we'll discuss next, helps distinguish an IP block from these other problems.
Diagnosis: How to Distinguish IP Blocking from Other Issues
Checking Accessibility from Various Geographic Locations
For accurate diagnosis, you need to use tools that show the path of packets to your server and allow you to check its availability from different countries. This helps understand at which stage the connection is lost.
Traceroute/MTR:
The traceroute command (Linux/macOS) or tracert (Windows) shows the path network packets take to the target IP address and the response time of each hop along the way. If packets reach a certain hop and then start to get lost or go "nowhere" (* * *), this could indicate a problem at that hop or a block beyond it.
# Linux/macOS
traceroute your_vps_ip
# Windows
tracert your_vps_ipA more advanced tool is mtr (My Traceroute), which combines the functionality of ping and traceroute, continuously sending packets and showing loss and latency statistics in real time. This is especially useful when the server doesn't ping from certain regions:
# Install on Debian/Ubuntu
sudo apt install mtr
# Install on CentOS/Fedora
sudo yum install mtr
# Usage
mtr your_vps_ipIf mtr shows 100% packet loss on the final hops or immediately after leaving your provider's network, this is strong evidence of an IP block.
Online ping and traceroute services:
Many free online tools allow you to check the availability of your IP address from various servers worldwide. Examples include Ping.eu, CA App Synthetic Monitor, Geopeeker (for websites). Use them to get an "external view" of your server. If the server is unreachable from one region (e.g., Russia) but responds without issues from another (e.g., Germany), this is a very strong indicator of a regional block.
Checking IP Blocking in Blacklists and Online Checkers
Once you've confirmed regional unavailability, the next step is to check if your IP address has landed on any blacklists or government blocking registries.
- Government Blacklists: If your server is unreachable only from a specific country (e.g., Russia), there's a high probability that a government regulator has blocked the IP. You can check for your IP address or domain in such registries via official or third-party services, for example, "Registry of Prohibited Sites" (reestr.rublacklist.net). If your IP is there, the problem is evident.
- International Blacklists: IP addresses can be blocked not only by government agencies but also by private organizations that combat spam, phishing, and other malicious activities. Examples of such lists include SPAMHAUS, Barracuda Reputation Block List, SORBS. If your IP is on one of these lists, it can lead to problems with email delivery or access to certain resources. You can check your IP using services like MXToolbox Blacklist Checker.
- Provider Firewalls: Sometimes providers (both yours and your users' providers) may block IP addresses that exhibit anomalous activity (DDoS attacks, port scanning, spamming). Even if you're not at fault, your IP might have been "inherited" from a previous user or fallen under automated filters.
Port Availability: Diagnosing Services
Even if ping fails, it doesn't always mean a complete IP block. Sometimes, only specific ports are blocked. To check the availability of particular ports, you can use the telnet or nc (netcat) utility.
# Check SSH port (22)
telnet your_vps_ip 22
# Check HTTP port (80)
telnet your_vps_ip 80
# Using netcat (more modern)
nc -zv your_vps_ip 22
nc -zv your_vps_ip 80If telnet or nc successfully connects to the port (you see "Connected to..." or "Succeeded!"), it means network traffic is reaching that port. If you receive "Connection refused" or "No route to host," this could indicate either a port block or that the service on that port is not running, or the firewall on the VPS is blocking it.
Looking for a reliable server for your projects?
VPS from $10/month and dedicated servers from $9/month with NVMe, DDoS protection, and 24/7 support.
View offers →What to Do if Your Server's IP Address is Blocked? Solutions and Strategies
After thorough diagnosis, if you've confirmed that your VPS IP is blocked, it's time to act. There are several main scenarios for resolving the problem, each with its advantages and disadvantages.
Changing Your IP with the Provider: A Fast and Effective Solution
The most direct and often quickest way to resolve the issue when your server IP is blocked is to request a new IP address from your hosting provider. Most providers, including Valebyte.com, offer this option. This can usually be done through the server control panel or by contacting support.
How to change your IP via the Valebyte control panel:
In the Valebyte control panel, you can easily change your VPS IP address. This procedure typically takes only a few minutes. Find the network management or IP address section for your specific VPS, select the "Change IP" or "Order additional IP" option, and follow the instructions. In most cases, this is a paid service, but the cost is usually minimal and justified to restore service. You can read more about the process and possible nuances in our article: Your VPS IP is Blocked: How to Change the Address and Avoid Re-Blocking.
After changing the IP, don't forget to update the DNS records for your domains to point to the new address. The DNS update process can take anywhere from a few minutes to several hours (TTL period).
Adding a Secondary IP Address to Your VPS
In some cases, if you don't want to completely abandon the current IP (e.g., if it's used for specific internal purposes) or if you want a backup option, you can add a secondary IP address to your VPS. This allows you to run different services on different IPs or have a "reserve" IP in case the primary one is blocked.
Adding a secondary IP address is also done through the provider's control panel. After obtaining the new IP, you'll need to configure it on the VPS operating system. For Linux, this is usually done by adding a new interface or alias to an existing network interface (e.g., eth0:1).
# Example of adding a temporary IP address in Debian/Ubuntu
sudo ip addr add 192.0.2.10/24 dev eth0 label eth0:1
# For permanent configuration, edit /etc/network/interfaces or /etc/netplan/*.yaml
# Example for /etc/network/interfaces
auto eth0:1
iface eth0:1 inet static
address 192.0.2.10
netmask 255.255.255.0This approach is useful if you want to separate traffic or be able to quickly switch services to another IP in case of problems.
Migrating to a Different Location or Provider
If the blocking is systemic (e.g., affecting entire subnets of your provider in a certain country) or if you constantly face blocks, it might be worth considering migrating your VPS to a different geographical location or another hosting provider. For example, if the server doesn't ping from a specific region due to widespread blocks, moving it to a European data center might resolve the issue for users from that region (via VPN) or for users from other countries.
When choosing a new location or provider, pay attention to:
- Subnet reputation: Some providers are more diligent about maintaining the cleanliness of their IP addresses.
- DDoS protection availability: Robust protection can prevent attacks that often lead to blocks.
- Jurisdiction: The laws of the country where the data center is located can influence the likelihood of blocks.
Migration is a more labor-intensive process, requiring the transfer of all data and configurations, but it can be a long-term solution for chronic blocking issues.
How to Change Your VPS IP and Other Ways to Bypass Blocks
Using Traffic Obfuscation Protocols
If you cannot change your IP or want to ensure service availability even if it's blocked, you can use protocols that obfuscate traffic or bypass standard censorship methods. This is especially relevant if you want to bypass your server's IP address block for end-users.
- VPN Servers: Deploying your own VPN server (OpenVPN, WireGuard, L2TP/IPsec) on another, unblocked VPS allows users to connect to it and then to your primary, blocked server. The traffic is encrypted and appears as regular VPN traffic.
- Proxy Servers: HTTP/SOCKS proxies can redirect user traffic through an unblocked IP.
- Obfuscation Protocols: Shadowsocks, V2Ray (with VMess, VLESS), Trojan use various methods to mask traffic, making it resemble regular HTTPS traffic, which makes it harder to detect and block.
These solutions require additional technical knowledge for setup and maintenance, and may incur additional costs for renting a second VPS. However, they provide a high level of resilience against blocks.
Proxying Traffic via a Domain (CDN, Cloudflare)
For web services (websites, APIs), one of the most effective ways to bypass IP blocks is to use a CDN (Content Delivery Network) or services like Cloudflare. These services act as a reverse proxy:
- Your domain (e.g.,
valebyte.com) points to Cloudflare's IP address. - Cloudflare receives requests from users and forwards them to your real VPS IP address.
- Users only see Cloudflare's IP addresses, while your real IP remains hidden.
If your IP address is blocked but accessible to Cloudflare (which is often the case, as Cloudflare has many IP addresses worldwide), your website will be accessible to users through their network. Cloudflare also provides DDoS protection and other useful features. This solution is ideal for websites and applications operating over HTTP/HTTPS.
To ensure stable operation for services with varying loads that may be subject to blocking, the following VPS configurations are recommended:
| Load (users/traffic) | vCPU | RAM (GB) | Disk (GB, NVMe/SSD) | Network Port | Estimated Price ($/month, May 2024) |
|---|---|---|---|---|---|
| Up to 50 concurrent connections | 2 | 4 | 80 GB NVMe | 1 Gbps | From $15 |
| Up to 200 concurrent connections | 4 | 8 | 160 GB NVMe | 1 Gbps | From $30 |
| Up to 500 concurrent connections | 6 | 16 | 320 GB NVMe | 1 Gbps | From $60 |
| Over 500 concurrent connections or high traffic | 8+ | 32+ | 500+ GB NVMe | 10 Gbps | From $100 |
Prevention: How to Avoid Repeated IP Blocking
The best way to combat blocks is to prevent them. Certain measures can significantly reduce the risk of your VPS IP being blocked again.
Choosing a "Clean" Subnet and Location
Not all IP addresses are created equal. Some subnets have a poor reputation because they were previously used for spam, DDoS attacks, or other undesirable activities. Such "dirty" subnets are much quicker to end up on blacklists and under filters. When choosing a VPS, pay attention to:
- Provider reputation: Reliable providers, such as Valebyte.com, actively monitor and clean their IP subnets, striving to provide clients with "clean" addresses.
- Geography: Some countries or regions have stricter censorship rules, which increases the risk of blocks. If you plan to launch services that might fall under restrictions, choose locations with more liberal network policies.
- IP History: If possible, ask your provider for information about the IP address's cleanliness. While not always feasible, it can help.
Monitoring and Protection Against Attacks
Many IP address blocks occur due to automated systems reacting to suspicious activity. Protecting your server from malware and attacks is critically important.
- Use strong passwords and SSH keys: Ditch password authentication for SSH in favor of SSH keys and use complex, unique passwords for all services.
- Configure a firewall (iptables/ufw): Only allow ports that are truly necessary for your services to operate. For example, if you have a web server, open only 80 (HTTP) and 443 (HTTPS), as well as 22 (SSH) for management. Close all others.
- Regularly update your operating system and applications: Vulnerabilities in outdated software are often used to compromise servers and subsequently send spam or participate in DDoS attacks.
- Use Intrusion Detection/Prevention Systems (IDS/IPS): Tools like Fail2Ban can automatically block IP addresses that attempt to brute-force passwords or scan your server's ports.
- Host critical services on different IPs or even VPSs: If one IP is blocked, other services will continue to function.
- Enable DDoS protection: Many providers offer basic or advanced DDoS protection, which is crucial for maintaining server availability.
Frequently Asked Questions
How quickly can I change my VPS IP?
Changing your VPS IP address via the provider's control panel typically takes 5 to 15 minutes. After a successful IP address change, you may need to update DNS records for your domains, which can also take up to several hours due to DNS propagation time (TTL), but the IP replacement process itself is almost instantaneous.
My server doesn't ping from Russia but is accessible from Europe. What does this mean?
This is a strong indication that a government regulator (e.g., in Russia) has blocked your server's IP, or it has fallen under regional filters of other internet providers. If the server responds to pings and traceroutes from other countries, it rules out a server crash or general network issues with your hosting provider. In this case, changing your IP address or using domain proxying (Cloudflare) are the most effective solutions.
Is there a guarantee that a new IP won't be blocked?
Unfortunately, there is no 100% guarantee against future blocks. However, by choosing a "clean" subnet, configuring robust attack protection, and regularly updating your software, you can significantly reduce the risk. Providers like Valebyte strive to offer IP addresses with a good reputation, but the ultimate responsibility for server usage and security lies with the user.
Which services most often lead to IP blocking?
IP blocks are most often caused by services related to spamming, DDoS attacks, port scanning, phishing, as well as VPN servers and proxies used to bypass censorship. Even if your server was compromised and used by malicious actors for such purposes, its IP address could be blocked.
Conclusion
A blocked VPS IP address is a serious issue requiring prompt action. The key to a successful resolution is accurate diagnosis using ping, traceroute, and online checkers, which helps differentiate a true block from other malfunctions. In most cases, the quickest solution is to change the IP address via the provider's control panel, while for long-term stability, preventive measures—including choosing "clean" subnets and enhanced server security—are critically important.
NVMe VPS with 60-second activation: full root access, 20+ locations, pay by card or crypto.
Choose a plan
