Block IP Addresses and Ranges

Shieldy supports blocking by single IP, IP range (CIDR or prefix), ISP, and ASN. This article covers each pattern.

Block a single IPv4 or IPv6 address

1. Open Block rules → New rule.
2. Rule type: Block.
3. Criteria: IP address → Equals.
4. Enter the IP (e.g. 192.0.2.45 for IPv4 or 2001:db8::1 for IPv6).
5. Save.

Block an IP range with CIDR notation

CIDR is the standard way to express a contiguous block of IPs:

Steps:

1. New rule → IP address → Equals.
2. Enter the CIDR (e.g. 192.0.2.0/24).
3. Save.

Block by IP prefix (no CIDR knowledge needed)

If CIDR is unfamiliar, use the Starts with operator:

• 192.0.2. blocks the entire 192.0.2.0/24 range.
• 192.0. blocks the entire 192.0.0.0/16 range.

This is easier to maintain and produces the same effect.

Block by ISP or ASN

Sometimes a single ISP or hosting provider generates most of the bad traffic. Block by ISP name:

1. New rule → ISP → Equals.
2. Enter the ISP name (e.g. "Hetzner Online GmbH", "DigitalOcean LLC").
3. Save.

ISP blocking is included in the Enterprise plan.

Block datacenter and hosting IPs

Most bots run on cloud infrastructure. Enable bulk datacenter blocking:

1. Open Bot Killer.
2. Toggle Block datacenter IPs to ON.
3. Save.

This blocks AWS, GCP, Azure, OVH, Hetzner, Digital Ocean, and ~80 other major hosting providers in one click.

Whitelist your own IPs

Before applying broad blocks, add your team's IPs to the whitelist:

1. New rule → Rule type Whitelist → IP address.
2. Enter your office IP.
3. Save.

Whitelisted IPs bypass all block rules.

Find an IP to block

For fraudulent orders:

1. Open the order in Shopify admin.
2. Scroll to Conversion summary.
3. Look for IP address.

For visitor traffic: open Shieldy's Visitor Analytics dashboard, sort by risk score descending.