How do I block an IP address?

Go to Admin › Administration › Security › Blocked IP addresses, type the IP address and a reason, and press Submit. From then on, your website refuses any order placed from that IP address.

Where to find it

Admin › Administration › Security › Blocked IP addresses (প্রশাসন › নিরাপত্তা › ব্লক করা IP).

The store owner always sees it. A staff member needs the Block IPs & phone numbers tick in Users & logins. The link shows in the sidebar only when they also have Users & access.

Step by step

Find the IP address to block. Open the suspicious order: the table at the bottom of the order page lists the orders from the same phone number with their IP Address.
Open Blocked IP addresses.
Type the address in IP Address, for example 103.XX.XX.XX.
Write a short Reason, for example "Three fake orders in one week". Both boxes must be filled.
Press Submit. You see "IP address blocked." and the address appears at the top of the list below.

How it works

When someone presses order on your website, the IP address is checked against your list. If it is blocked, no order is taken and the buyer sees: "Sorry, we cannot take this order. Please call the shop."
A blocked order is not even kept as an unfinished order.
Blocked visitors can still open and look at your website. Only ordering is stopped.
Your list is your store's only. Other stores never see it, and their lists never block your customers.

Good to know

Edit opens a small box to change the address or the reason. Press Update: you see "IP address block updated." and the list reloads. If something is wrong, the message shows inside the box.
Delete first asks "Are you sure?". Press Yes, do it! to unblock the address ("IP address unblocked.").
An IP address can change. Many mobile and home connections get a new address from time to time, and several people can share one. Use IP blocking for repeat trouble, and also block the phone number.
An address that is already on the list is refused with "That IP address is already blocked."

Common problems

A red message shows after Submit and the address is not added. Read the message. Check that both boxes are filled and that the address is only numbers and dots (or an IPv6 address), with no spaces or words. Then submit again.
A real customer cannot order. They may share an IP address with someone you blocked. Find the address in the list and press Delete.
The fake orders keep coming. The person's IP address changes. Block their phone number too, and use the customer fraud check.

Still need help? Ask in our Facebook group — the team and other shop owners answer there.

Ask the community →