Fix 'Bandwidth Limit Exceeded' in cPanel Hosting

You open your site and instead of your homepage, there's a plain page that says something like "This Account Has Been Suspended" or "Bandwidth Limit Exceeded." No warning email reached you in time, or it went to a spam folder, and now every visitor is seeing the same blank suspension notice. Here's what's actually going on, how to check it yourself, and how to stop it from happening again next month.

What "Bandwidth Limit Exceeded" Actually Means

Bandwidth (also called data transfer) is the total amount of data your account sends out to visitors, bots, and API callers over a billing cycle — usually a calendar month. It's not the same as disk space. You could have a 2GB website and still burn through 500GB of bandwidth if enough people (or bots) are downloading files from it.

Every shared hosting plan has a bandwidth cap set in WHM. When your account crosses it, cPanel doesn't slow the site down gracefully — it suspends the account entirely until the cycle resets or you request more allowance. That's why the outage feels sudden even though the usage crept up gradually.

Common Causes

• Hotlinking — other websites embedding your images or PDFs directly, so every one of their visitors pulls the file from your server.
• A viral post or promotion — a genuine traffic spike from social media, an email campaign, or a news mention.
• Bot and scraper traffic — content scrapers, aggressive SEO crawlers, or vulnerability scanners hammering every URL on the site.
• Large, uncompressed media — big product photos, videos, or downloadable PDFs served without compression or a CDN.
• Backup and migration tools — a plugin or script that repeatedly zips and re-downloads the full site (uploads folder, database dumps) counts against bandwidth too.
• A compromised site — malware sometimes turns a hacked account into a file server or spam relay, which shows up as an unexplained bandwidth spike.

How to Check What's Actually Using Your Bandwidth

Don't guess — cPanel already tracks this for you.

1. Log in to cPanel and open Bandwidth under the Metrics section. This shows month-by-month usage split into HTTP, FTP, POP/IMAP, and SMTP.
2. Open AWStats or Visitors (also under Metrics) to see which URLs and files pulled the most traffic, and where the requests came from.
3. Check the raw access logs if you need finer detail: /home/username/access-logs/yourdomain.com. A quick way to find the heaviest hitters:

awk '{print $1}' access-logs/yourdomain.com | sort | uniq -c | sort -rn | head -20

If one IP range or user agent dominates the list, that's usually your bot or hotlinking culprit, not real visitors.

The Fix

Symptom: Site shows a suspension page, cPanel login still works, WHM shows the account status as "Suspended – Bandwidth Limit Exceeded."

Cause: Confirmed via the Bandwidth graph and AWStats above — usually hotlinked media, a bot swarm, or a genuine traffic surge past the plan's cap.

Fix, in order:

1. Ask for a temporary unsuspend. If you're on SkyServer hosting, open a support ticket — we can lift a bandwidth suspension immediately once you've acknowledged the cause, so you're not stuck waiting for the billing cycle to roll over.
2. Stop hotlinking by adding a hotlink protection rule in .htaccess:

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^https?://(www\.)?yourdomain\.com [NC]
RewriteRule \.(jpg|jpeg|png|gif|pdf|mp4)$ - [F,L]

cPanel also has a built-in Hotlink Protection tool under the Security section if you'd rather not edit the file directly.

3. Block obvious bot traffic at the firewall level (WHM > ConfigServer Security & Firewall) using the IP addresses or ranges you found in the logs.
4. Put static assets behind a CDN such as Cloudflare's free tier. Once images, CSS, and JS are served from Cloudflare's edge, only cache-miss requests hit your server — this alone can cut bandwidth usage by 60–80% on media-heavy sites.
5. Compress and resize media. A 4000px-wide product photo serving as a 300px thumbnail wastes bandwidth on every single page load. Run images through a plugin like ShortPixel or resize them at upload time.
6. Rule out malware if the spike has no obvious explanation — scan the account (WHM's ClamAV or a plugin like Wordfence) and check for unfamiliar cron jobs or files in public_html.

Bandwidth vs. Disk Quota vs. Inode Limit

They get confused often because all three end in some form of account restriction, but the fix for each is different — clearing disk space won't help a bandwidth suspension, and vice versa.

Prevention Checklist

• Turn on hotlink protection before it becomes a problem, not after.
• Put a CDN in front of any site with meaningful image or download traffic.
• Set up a WHM notification (or ask SkyServer support to enable one) at 80% of your bandwidth allowance, so you get warned mid-month instead of finding out via a suspension.
• Review AWStats monthly, especially after a marketing push or press mention.
• If you're consistently near the cap on a legitimate, growing site, it's usually cheaper to move to a VPS or a higher-tier plan than to keep firefighting bandwidth suspensions.

Frequently Asked Questions

Will my emails still work while the account is suspended for bandwidth?

Usually not — a full bandwidth suspension typically stops HTTP, FTP, and mail services together, since they all draw from the same account-level cap. Confirm with your host; some suspension types leave mail running.

Does bandwidth reset automatically?

Yes, it resets at the start of your next billing cycle as configured in WHM, which is usually the calendar month but can be tied to your account's creation date on some setups.

Can I see how close I am to the limit before it happens?

Yes — check cPanel's Bandwidth page regularly, or ask your host to configure a usage-threshold alert so you get warned automatically before a suspension happens.

Is hotlinking illegal or against the rules?

It's not illegal, but it's your bandwidth being consumed by someone else's website without permission. Blocking it with the methods above is standard practice and won't affect your own visitors.

Would a CDN completely eliminate bandwidth suspensions?

It won't eliminate the risk entirely, but it removes the biggest single driver on most sites — repeated downloads of the same static files — so it's the single most effective prevention step for media-heavy or high-traffic sites.