---
title: "Which connection attempts get blocked?"
description: "How IP Access Protection decides when a source IP goes on the deny list, which connection methods it covers, and how to keep your own IP off the list"
canonical_url: "https://docs.ardge.com/en/knowledge/arx-os/blocked-connections"
---
# Which connection attempts get blocked?

> How IP Access Protection decides when a source IP goes on the deny list, which connection methods it covers, and how to keep your own IP off the list

## Short answer

With IP Access Protection enabled under **Control Panel › Security**, a source IP that fails to sign in a set number of times in a row within a set time window is added to the **Deny List**, and every connection from it after that is blocked.

## Details

### What triggers a block

Two settings together set the threshold:

<table>
<thead>
  <tr>
    <th>
      Setting
    </th>
    
    <th>
      What it means
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <strong>
        Login attempt
      </strong>
    </td>
    
    <td>
      The number of consecutive failed sign-ins that triggers a block
    </td>
  </tr>
  
  <tr>
    <td>
      <strong>
        Within (minutes)
      </strong>
    </td>
    
    <td>
      The time window over which failures are counted
    </td>
  </tr>
</tbody>
</table>

### Which connection methods are covered

IP Access Protection covers both HTTP(S) and SSH. Sign-in attempts over either method count toward the threshold, and once an IP is on the Deny List, **both methods refuse** its connections.

### Clearing a block

With **blocked expired** enabled, the IP is removed from the Deny List automatically once its block period — set in days — runs out. Without it, the IP stays blocked until you remove the entry yourself from the **Deny List** on the **Control Panel › Security** page.

## How to avoid blocking yourself

On the **Control Panel › Security** page, add the internal IP you use day to day to the **Allow List**. An IP on the Allow List is never added to the Deny List, even when its failed sign-ins reach the threshold — so forgetting your password never locks you out of the device.


## Sitemap

See the full [sitemap](https://docs.ardge.com/sitemap.md) for all pages.