How to block or trust an IP address, range or country from accessing your website
With Astra Website Protection, you can control who can access your websites based on the follwing:
IP Address (IPv4 & IPV6)
IP Range (IPv4 & IPV6)
Country
Other HTTP parameters (using Security Boosters)
If you create a block rule, then the visitors will be shown a "Access Restricted" page. For trust rules all security checks are disabled, so use sparingly.
In the Astra dashboard, go to the Threats page for your website
Scroll down to the Trusted & Blocked List & click on Block/Trust IP button
Select Trust/Block IP Address
Enter the IP address in IPv4/IPv6 format OR the IP Range in CIDR format
You can enter a Note which will help you remember why you created this rule
Now select the action you want to take. Select either Block, or Trust.
Click on Add Rule to activate the rule
CIDR is an industry used notation for IP ranges. You can specify the ranges as per the following:
A range of IPv4 addresses, in CIDR block notation. For example, 203.0.113.0/24
A range of IPv6 addresses, in CIDR block notation. For example, 2001:db8:1234:1a00::/64
Learn more about CIDR
Let’s say you are based out of the UK & have no business in Ukraine but see a lot of traffic from Ukraine – it might be a good idea to block Ukraine as there could be some bots trying to find vulnerabilities in your website from a country where you do not do business.
In the Astra dashboard, go to the Threats page for your website
Scroll down to the Trusted & Blocked List & click on Block/Trust IP button
Select Trust/Block Country
From the dropdown, select the 1 or more countries
You can enter a Note which will help you remember why you created this rule
Now select the action you want to take. Select either Block, or Trust.
Click on Add Rule to activate the rule
IP Address (IPv4 & IPV6)
IP Range (IPv4 & IPV6)
Country
Other HTTP parameters (using Security Boosters)
If you create a block rule, then the visitors will be shown a "Access Restricted" page. For trust rules all security checks are disabled, so use sparingly.
How to Block or Trust an IP address or IP range
In the Astra dashboard, go to the Threats page for your website
Scroll down to the Trusted & Blocked List & click on Block/Trust IP button
Select Trust/Block IP Address
Enter the IP address in IPv4/IPv6 format OR the IP Range in CIDR format
You can enter a Note which will help you remember why you created this rule
Now select the action you want to take. Select either Block, or Trust.
Click on Add Rule to activate the rule
How to use a CIDR range?
CIDR is an industry used notation for IP ranges. You can specify the ranges as per the following:
A range of IPv4 addresses, in CIDR block notation. For example, 203.0.113.0/24
A range of IPv6 addresses, in CIDR block notation. For example, 2001:db8:1234:1a00::/64
Learn more about CIDR
How to Block a Country
Let’s say you are based out of the UK & have no business in Ukraine but see a lot of traffic from Ukraine – it might be a good idea to block Ukraine as there could be some bots trying to find vulnerabilities in your website from a country where you do not do business.
In the Astra dashboard, go to the Threats page for your website
Scroll down to the Trusted & Blocked List & click on Block/Trust IP button
Select Trust/Block Country
From the dropdown, select the 1 or more countries
You can enter a Note which will help you remember why you created this rule
Now select the action you want to take. Select either Block, or Trust.
Click on Add Rule to activate the rule
Updated on: 25/05/2022
Thank you!