The blocked IP addresses page is the single source of truth for which IPs the platform is currently rejecting at the edge — whether by automatic banning, manual admin action, or imported deny-lists.
What's Shown
- IP address — IPv4 or IPv6, with optional CIDR notation for ranges (e.g.
203.0.113.0/24). - Reason — automatic (login attempts, suspicious activity), admin-flagged, or imported.
- Blocked at — timestamp when the block began.
- Expires — when the block lifts automatically (blank = permanent).
- Hit count — how many times this IP has been turned away since the block began.
Filtering and Search
Filter by reason (auto-banned vs admin-blocked), by date range, or search for a specific IP. Useful when investigating: “did we block this customer's office?”.
Worked Examples
- Customer can't sign in: Their office has just been auto-banned because someone there tried the wrong password 50 times. Search for the IP, view the hit count, decide whether to unblock or extend.
- Suspicious traffic: Sort by hit count descending. The top 10 IPs are probably bots or scanners. Confirm their geolocation against your expected user base.
- Audit: Filter blocks created in the last 24 hours to see what the auto-ban engine has caught overnight.
Note: Blocking a corporate NAT IP affects every user behind that IP. If a single bad actor inside a large office triggers a block, everyone there is locked out until the block expires or you unblock manually.