IP blocking
Shopify IP Blocker
Zonify is an IP blocker for Shopify. When the same address keeps causing trouble, block it in seconds, with no code. IPv4 and IPv6 both work, and every visit from a blocked address shows up in your Shopify admin with your note as the reason.
Free to install · No code · Nothing is blocked until you add a rule
IPv4 and IPv6, in bulk
Paste a whole list. Bad entries are skipped.
A note on every rule
It shows as the reason in Analytics.
Always allow yourself
One click, and no rule can lock you out.
What IP blocking does on Shopify
An IP address is the number a device uses on the internet. Your store sees it on every visit. IP blocking turns away visits from the addresses you list, and leaves everyone else alone.
Shopify's admin has no setting to block storefront visitors by IP address, so you need an app. Zonify records the address of every visit, so you can find the one causing trouble and block it from the same place.
Block one address, or a whole list
IPv4 and IPv6
Addresses like 203.0.113.9 and 2001:db8:4f2a::17 both work, in the same list. Most devices today have both kinds.
Paste a list
Paste addresses one per line or separated by commas. Anything that isn't a valid address is skipped and counted, so a messy paste doesn't save junk.
A note on every rule
Write down why you blocked an address. In Analytics, the note becomes the reason shown for that block.
Your message, or a redirect
Blocked visitors see your message, or go to a page you choose, with a live preview under the fields.
Always on, never half-on
IP rules always apply. There's no pause switch, so a list that looks active is active. Remove an address to stop blocking it.
Checked after country rules
A blocked address stays blocked even from a country you allow. An always-allowed address gets in even from a country you blocked.
Find the address that's causing trouble
Open Analytics in Zonify. The Visits table lists each visit with its address, country, device and whether it was blocked, and you can show only the blocked ones. Most blocked IPs shows the addresses that keep running into your rules, with how many attempts and when each was last seen.
To match a problem to an address, use the time: find the visit that happened when the trouble did. For a closer look, download the full log as a CSV file, up to 10,000 visits at a time.
Always allow your own address
An always-allowed address gets in every time, even from a country you blocked, and nobody else is affected. It's the safe way to make sure a rule can never lock out you, your team, your agency or your test devices.
On the IP addresses page, click + Add my IP in the Add IP addresses panel and choose Always allow. The Dashboard shows an Always allow my IP button whenever your IP isn't always allowed, and Zonify's Onboarding page asks for the same step.
When to block an IP address
Block an address when you've seen the same address cause trouble more than once.
Orders that never get paid
One address keeps placing orders that are never paid, or keeps trying cards that fail.
Someone who keeps coming back
A visitor you've already dealt with returns from the same address again and again.
Your team, never blocked
Always allow the addresses of your office, your agency and your test devices, so a country rule can never turn them away.
Block an IP address in three steps
The full walkthrough is in how to block an IP address on Shopify.
- 1
Install Zonify
Install it free from the Shopify App Store. It asks for no access to your orders, products or customers, because it doesn't need any.
- 2
Turn on the app embed
In your theme editor, open App embeds and switch Zonify on. Nothing runs on your store until you do. Zonify's Onboarding page links straight there.
- 3
Add the address
Open IP addresses in Zonify, click Add IP addresses, choose Block, paste the address and add a note. It applies on the visitor's next page load.
Good to know
What an IP block can't do
An IP block is a good tool for repeat trouble from one address. It isn't a wall.
We list the limits before you install, so nothing about how Zonify works comes as a surprise later.
Addresses change
Home connections get new addresses from time to time, and phones change address as they move between networks.
Addresses can be shared
An office, a college or a mobile network can put many people behind one address. Blocking it may block real shoppers too.
Anyone can switch networks
A determined person can use another connection or a VPN and arrive on a new address. Zonify doesn't detect VPNs.
Exact addresses only
Zonify matches exact addresses. It doesn't block ranges written like 203.0.113.0/24, so paste a list instead.
Bots are a separate setting
IP rules block the addresses you list. To block fake search engines, scrapers or automated browsers by type, wherever they come from, use bot blocking.
Questions
IP blocking questions
Can't find your answer? More answers are in the Zonify FAQ, or contact us and we'll reply.
Can Shopify block an IP address on its own?
Not for storefront visitors. Shopify's admin has no setting to block visits to your online store by IP address. Stores use an app like Zonify, or code in the theme, which usually can't see addresses without an outside lookup service.
How do I block several IP addresses at once?
Paste them into the IP addresses box in Zonify, one per line or separated by commas, and save once. IPv4 and IPv6 addresses can go in the same paste. Entries that aren't valid addresses are skipped, and Zonify tells you how many.
Which is checked first, country rules or IP rules?
Four checks run on every page load, in this order: always-allowed IPs, then the bot types you block, then the country rules, then blocked IPs. So an always-allowed address gets in even from a blocked country, and a blocked address stays blocked even from a country you allow.
What message does a blocked IP address see?
A page that says “Store not available”, with your message under it. The default is “Your IP address has been blocked from accessing this store.” If you set a redirect, the visitor is sent to that page instead.