This feature lets you block IP addresses and user agents from your site without managing your server configuration. Any banned IP addresses or user agents will not be allowed any access to your site.
Note that the Ban Users module is not available if IP Detection has not been configured for your site.
Default Ban List
Enable this feature to include the excellent ban list developed by Jim Walker of HackRepair.com. See the ban list here.
Enable Ban Lists
Enable this feature to limit the number of banned IP addresses in your server and to ban user agents.
Limit Banned IPs in Server Configuration Files
Set the limit of banned IP addresses allowed in your Server Configuration Files (.htaccess and nginx.conf) to reduce the chances of having a server timeout. The default limit is 100.
Ban User Agents
Enter the User-Agent Strings that will not be allowed access to your site. To learn more about User-Agent Strings, refer to these guides:
- https://developer.chrome.com/docs/multidevice/user-agent/
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/User-Agent
Banned Users Card
You can add or remove specific IP addresses from accessing the site in your Security Dashboard's Banned Users Card. You can also add, edit, and delete notes with each blocked IP address.
Banning Hosts
Use the guidelines below to enter hosts that will not be allowed access to your site. Note you cannot ban your own IP address.
- You may ban users by individual IP address or IP address range.
- Individual IP addresses must be in IPV4 standard format (i.e. ###.###.###.### or ###.###.###.###/##). Wildcards (*) or a netmask is allowed to specify a range of IP addresses.
- If using a wildcard (*), you must start with the right-most number in the IP field. For example ###.###.###.* and ###.###.*.* are permitted but ###.###.*.### is not.
- Enter only 1 IP address or 1 IP address range per line.