Skip to main content

IP Blocking

IP blocking prevents access from specific IP addresses identified by an Administrator as suspicious or hostile. Blocks operate at the middleware layer - once an IP is blocked, every request from that address is rejected before reaching application logic, not only login attempts.

Accessing IP Blocking​

Navigate to Admin > IP Blocking (route: /admin/ip-blocking). This feature requires Administrator access with 2FA enabled.

How It Works​

Administrators manually add IPs to the block list - for example after a Fraud Alert surfaces suspicious activity from a specific address. There is no automatic IP-block on repeated failed logins today; the operator triages alerts and decides whether to block. Blocks are cached for 30 seconds at the middleware layer for performance.

Blocking an IP Address​

  1. Go to Admin > IP Blocking
  2. Click Block New IP
  3. Enter the details:
    • IP Address - The IP to block
    • Reason - Why this IP is being blocked
    • Expiration - Optional expiration date and time (leave empty for permanent block)
    • Notes - Additional context
  4. Click Block

Viewing Blocked IPs​

The IP blocking dashboard shows:

  • Active blocks - Currently blocked IPs
  • Expired blocks - Previously blocked IPs whose block period has ended
  • Statistics - Active count, expired count, total blocked attempts, permanent blocks

Unblocking an IP​

  1. Find the active block in the list
  2. Click Unblock
  3. The IP is immediately removed from the block list

Statistics​

The dashboard displays key metrics:

  • Active - Number of currently blocked IPs
  • Expired - Blocks that have expired
  • Total Blocked Attempts - Cumulative login attempts prevented
  • Permanent Blocks - IPs blocked indefinitely

Next Steps​