Skip to content
Zonify

IP blocking

Shopify IP Blocker

Zonify is an IP blocker for Shopify. When the same address keeps causing trouble, block it in seconds, with no code. IPv4 and IPv6 both work, and every visit from a blocked address shows up in your Shopify admin with your note as the reason.

Free to install · No code · Nothing is blocked until you add a rule

  • IPv4 and IPv6, in bulk

    Paste a whole list. Bad entries are skipped.

  • A note on every rule

    It shows as the reason in Analytics.

  • Always allow yourself

    One click, and no rule can lock you out.

What IP blocking does on Shopify

An IP address is the number a device uses on the internet. Your store sees it on every visit. IP blocking turns away visits from the addresses you list, and leaves everyone else alone.

Shopify's admin has no setting to block storefront visitors by IP address, so you need an app. Zonify records the address of every visit, so you can find the one causing trouble and block it from the same place.

Block one address, or a whole list

  • IPv4 and IPv6

    Addresses like 203.0.113.9 and 2001:db8:4f2a::17 both work, in the same list. Most devices today have both kinds.

  • Paste a list

    Paste addresses one per line or separated by commas. Anything that isn't a valid address is skipped and counted, so a messy paste doesn't save junk.

  • A note on every rule

    Write down why you blocked an address. In Analytics, the note becomes the reason shown for that block.

  • Your message, or a redirect

    Blocked visitors see your message, or go to a page you choose, with a live preview under the fields.

  • Always on, never half-on

    IP rules always apply. There's no pause switch, so a list that looks active is active. Remove an address to stop blocking it.

  • Checked after country rules

    A blocked address stays blocked even from a country you allow. An always-allowed address gets in even from a country you blocked.

Find the address that's causing trouble

Open Analytics in Zonify. The Visits table lists each visit with its address, country, device and whether it was blocked, and you can show only the blocked ones. Most blocked IPs shows the addresses that keep running into your rules, with how many attempts and when each was last seen.

To match a problem to an address, use the time: find the visit that happened when the trouble did. For a closer look, download the full log as a CSV file, up to 10,000 visits at a time.

Always allow your own address

An always-allowed address gets in every time, even from a country you blocked, and nobody else is affected. It's the safe way to make sure a rule can never lock out you, your team, your agency or your test devices.

On the IP addresses page, click + Add my IP in the Add IP addresses panel and choose Always allow. The Dashboard shows an Always allow my IP button whenever your IP isn't always allowed, and Zonify's Onboarding page asks for the same step.

When to block an IP address

Block an address when you've seen the same address cause trouble more than once.

  • Orders that never get paid

    One address keeps placing orders that are never paid, or keeps trying cards that fail.

  • Someone who keeps coming back

    A visitor you've already dealt with returns from the same address again and again.

  • Your team, never blocked

    Always allow the addresses of your office, your agency and your test devices, so a country rule can never turn them away.

Block an IP address in three steps

The full walkthrough is in how to block an IP address on Shopify.

  1. 1

    Install Zonify

    Install it free from the Shopify App Store. It asks for no access to your orders, products or customers, because it doesn't need any.

  2. 2

    Turn on the app embed

    In your theme editor, open App embeds and switch Zonify on. Nothing runs on your store until you do. Zonify's Onboarding page links straight there.

  3. 3

    Add the address

    Open IP addresses in Zonify, click Add IP addresses, choose Block, paste the address and add a note. It applies on the visitor's next page load.

Add to Shopify — FreeFree to install · No code · Nothing is blocked until you add a rule

Good to know

What an IP block can't do

An IP block is a good tool for repeat trouble from one address. It isn't a wall.

We list the limits before you install, so nothing about how Zonify works comes as a surprise later.

  • Addresses change

    Home connections get new addresses from time to time, and phones change address as they move between networks.

  • Addresses can be shared

    An office, a college or a mobile network can put many people behind one address. Blocking it may block real shoppers too.

  • Anyone can switch networks

    A determined person can use another connection or a VPN and arrive on a new address. Zonify doesn't detect VPNs.

  • Exact addresses only

    Zonify matches exact addresses. It doesn't block ranges written like 203.0.113.0/24, so paste a list instead.

  • Bots are a separate setting

    IP rules block the addresses you list. To block fake search engines, scrapers or automated browsers by type, wherever they come from, use bot blocking.

Questions

IP blocking questions

Can't find your answer? More answers are in the Zonify FAQ, or contact us and we'll reply.

Can Shopify block an IP address on its own?

Not for storefront visitors. Shopify's admin has no setting to block visits to your online store by IP address. Stores use an app like Zonify, or code in the theme, which usually can't see addresses without an outside lookup service.

How do I block several IP addresses at once?

Paste them into the IP addresses box in Zonify, one per line or separated by commas, and save once. IPv4 and IPv6 addresses can go in the same paste. Entries that aren't valid addresses are skipped, and Zonify tells you how many.

Which is checked first, country rules or IP rules?

Four checks run on every page load, in this order: always-allowed IPs, then the bot types you block, then the country rules, then blocked IPs. So an always-allowed address gets in even from a blocked country, and a blocked address stays blocked even from a country you allow.

What message does a blocked IP address see?

A page that says “Store not available”, with your message under it. The default is “Your IP address has been blocked from accessing this store.” If you set a redirect, the visitor is sent to that page instead.

Decide who gets into your store.

Add to Shopify — Free
  • Free to install
  • No code
  • No access to your orders