For some reason, I triggered the block from my accessing the File Manager in cPanel. I wasn’t able to download or edit wp-config.php and since the past day, there have been maybe 30 automatic blocks, despite my having whitelisted my own IP.
Thank you for your suggestion, however, in this case, I have simply 3-4 IPs that the rule looks IN to whitelist.
It has worked fine for months — it happened for some reason last night but it may turn out to be an issue with the hosting server after all. But I was hoping that someone might give some new info… just in case
From my experience, cPanel / File Manager sometimes triggers some WAF rules and you would have issue when you try to upload or download larger stuff.
The cPanel related DNS records (hostnames) should be unproxied (DNS-only).
Or even better, remove them from DNS tab of Cloudflare dashboard for your website and ask your web hosting provider to provide you their URL through which you can login & access the cPanel for your domain without exposing the cpanel.mydomain.com or the IP (unproxied), etc.
May I ask if you added those IPs to Security → Tools → IP Access Rules with the action “allow” or rather using a Firewall Rule?