WordPress站点domain.com/wp-admin跳转至cgi-sys/denied.shtml问题求助

Hey Digvijay, let's break down why you're hitting that cgi-sys/denied.shtml page when accessing your WordPress admin from your current network—especially since it works fine elsewhere and your IP isn't listed in the WP database. Here are the most probable causes and how to dig into them:

• Hosting Provider Firewall/IP Blocking
  That cgi-sys directory is a clear sign this is likely a cPanel-based hosting restriction. Many hosts run server-level firewalls that block IPs for suspected malicious activity (even if you didn't do anything wrong—your IP might be part of a flagged range). Reach out to your host's support team and ask them to check if your IP is on their server's blacklist or being blocked by their firewall. You can also test this by running a command like curl -I https://yourdomain.com/wp-admin -H "X-Forwarded-For: YOUR_PUBLIC_IP" (replace YOUR_PUBLIC_IP with your actual external IP) from a different machine to see if the redirect still happens.

• ModSecurity or Web Application Firewall (WAF) Rules
  Hosts often use tools like ModSecurity to block suspicious requests. It's possible your IP or network triggered a rule (e.g., too many failed login attempts in the past, or a request pattern that matches a threat signature). Ask your host to temporarily disable ModSecurity for your site to test if that fixes the issue, or check your hosting control panel for WAF logs that might show details of the blocked request.

• Local Network/ISP Restrictions
  Sometimes your home network or ISP might filter or redirect requests to /wp-admin (rare, but possible). Test accessing the admin page using a mobile hotspot or a different network—if it works there, the problem is definitely tied to your local network setup. You could also try using a VPN to route your traffic through a different IP and see if that bypasses the redirect.

• CDN Firewall Rules (if you're using one)
  If you have a CDN like Cloudflare in front of your site, its firewall might be blocking your IP. Log into your CDN dashboard, check the firewall rules and IP access lists, and make sure your IP isn't being blocked. You can also temporarily pause the CDN to see if the issue goes away.

• .htaccess File Restrictions
  Even though the WP database doesn't have your IP, check your site's root .htaccess file for any IP-based deny rules. Look for lines like deny from 123.45.67.89 (replace with your IP) or RewriteRules that might redirect traffic away from /wp-admin. If you find anything suspicious, back up the file first, then comment out those lines to test.

Start with the local network test first—it's the quickest way to narrow down whether the issue is on your end or the server's. If that checks out, reaching out to your hosting support is usually the fastest path to resolution since they have access to server-level logs.

内容的提问来源于stack exchange，提问作者Daga