Block Management

Suspicious access attempts are blocked automatically. In Block Management, you can register manual blocks based on IP, IP range, or User-Agent, or check currently blocked IPs, users, and devices and unblock targets that were blocked by mistake.

Before you begin

• Required license: Team or higher to register and remove blocks. On Free, you can only view the block list.

Opening the Block Management Screen

In Security Management on the admin screen, go to the Block Management menu.

Add permanent block

Block access based on an IP address, an IP range, or the User-Agent value of a request.

• Select Type: Select the criterion: IP, IP network, or User-Agent.
• Input value: Enter the IP address to block, the IP range (in CIDR notation), or the User-Agent string.
• Reason (optional): Enter the reason for the block (optional).

After you enter the value, click the Block permanently button to apply the block immediately.

With an IP range, you can also block access from an entire country. Look up the IP ranges assigned to the country you want to block, select IP network (CIDR) · authenticated access in Select Type, and register those ranges.

Tip: You can find IP ranges by country on sites such as IPdeny, which compile lists of IP ranges by country based on Regional Internet Registry (RIR) data. The IP ranges of one country are often split into many segments, so to block the country completely, you need to check and register all of its ranges.

Besides blocking by country, IP range blocking is often used in the following cases.

• Cloud and hosting provider ranges: Traffic from clouds and data centers such as AWS, GCP, and Azure often comes from automated bots or scrapers rather than real users, so the entire range of a provider is sometimes blocked.
• Known malicious IP ranges: Register ranges listed in threat intelligence lists (such as Spamhaus and AbuseIPDB) to block them in advance.
• Tor exit nodes: To block access through the Tor anonymity network, register the published ranges of Tor exit nodes.
• Ranges of a specific carrier or ISP: If attacks repeatedly come from the network of a specific carrier, the entire range is sometimes blocked.
• Networks you no longer trust: When a partner or branch office has changed or the relationship has ended, IP range blocking is also used to cut the connection with the internal network range that organization used.

Active Blocks List

Manage the list of IPs, users, and devices that are currently blocked in the system. Click the Refresh button to load the latest status.

If there are no blocked targets, "No active blocks" is displayed.

Click the Clear All Blocks button to lift all blocks in the list at once.

Unblocking

In the active blocks list, check the target you want to unblock, then click the Unblock button in the Actions column. To lift all blocks at once, use the Clear All Blocks button.

Access is possible again immediately after unblocking.