Skip to content

Temporary Banned IPs

Menu Location: Settings > Security > Temporary Banned IPs

Access Level: Administrator

Last Updated: 2026-03-01


Overview

The Temporary Banned IPs page displays IP addresses that have been temporarily blocked from accessing your website due to suspicious activity or security violations. Monitor banned IPs, review ban reasons, and manually unban if needed.

Primary Functions:

  • View all temporarily banned IP addresses
  • See ban reason and expiration time
  • Manually unban IP addresses
  • Monitor security events
  • Add manual temporary bans
  • Review ban history

Page Layout

Header Section

  • Page title and security overview
  • Add manual ban button
  • Search by IP address
  • Filter by ban reason

Currently Banned IPs Table

  • IP Address
  • Ban reason (Failed login attempts, Spam, Bot activity, etc.)
  • Banned timestamp
  • Expiration timestamp (when auto-unban occurs)
  • Time remaining
  • Country/location (if available)
  • Unban button

Ban History Log

  • Historical banned IPs
  • Ban duration
  • Reason for ban
  • Whether automatically or manually unbanned

Summary Statistics

  • Total currently banned IPs
  • Bans today
  • Top ban reasons
  • Geographic distribution of bans

Primary Features

Automatic IP Banning

System automatically bans IPs that exceed failed login thresholds, exhibit spam behavior, or trigger security rules.

Manual Ban Management

Add manual IP bans for troublesome sources not caught by automatic rules. Set custom ban duration and reason.

Automatic Expiration

Temporary bans expire automatically after specified duration (typically 1-24 hours depending on violation severity).

Geolocation Insights

View geographic location of banned IPs to identify patterns and potential attack sources.


Common Use Cases

Use Case 1: Review Currently Banned IPs

Goal: Monitor security status

Steps:

  1. Navigate to Temporary Banned IPs
  2. Review currently banned list
  3. Check ban reasons
  4. Note any concerning patterns
  5. Verify expected automatic unbans

Normal State: Should see handful of bans from failed logins, few bot attempts

Use Case 2: Unban Legitimate User

Goal: Restore access for legitimate user accidentally banned

Steps:

  1. Customer reports they can't access site
  2. Get their IP address from customer
  3. Search for IP in banned list
  4. Review ban reason
  5. Click "Unban" button
  6. Confirm unban action
  7. Verify customer can access site
  8. Document incident

Use Case 3: Manually Ban Problematic IP

Goal: Block specific IP causing issues

Steps:

  1. Identify problematic IP from logs
  2. Click "Add Manual Ban" button
  3. Enter IP address
  4. Select ban reason (or enter custom)
  5. Set ban duration (hours)
  6. Add notes for reference
  7. Click "Ban IP"
  8. Verify IP appears in banned list

Use Case 4: Investigate Security Incident

Goal: Review ban patterns during suspected attack

Steps:

  1. Navigate to Temporary Banned IPs
  2. Review recent bans
  3. Filter by time period (e.g., last hour)
  4. Check for multiple bans from same location
  5. Note ban reasons and patterns
  6. Export data for security review
  7. Escalate if attack pattern detected

Use Case 5: Clean Up False Positives

Goal: Unban multiple legitimate IPs incorrectly blocked

Steps:

  1. Identify affected IPs
  2. Review ban reasons for each
  3. Verify they're legitimate users
  4. Unban each IP
  5. Document reason for unbanning
  6. Adjust security rules if needed to prevent recurrence
  7. Notify affected users access restored

Troubleshooting

Customer Can't Access Site

Symptoms:

  • Customer reports access denied
  • Page won't load for customer
  • Customer sees security block message

Check:

  1. Get customer's IP address
  2. Search in Temporarily Banned IPs
  3. Check if IP is banned
  4. Review ban reason
  5. Unban if legitimate customer
  6. Investigate why they were banned
  7. Adjust security rules if false positive

Too Many Legitimate Bans

Symptoms:

  • High volume of unban requests
  • Legitimate users frequently banned
  • Security rules too aggressive

Solutions:

  1. Review ban reasons for pattern
  2. Identify which security rule is triggering
  3. Adjust failed login threshold if login-related
  4. Whitelist specific IPs if needed
  5. Contact administrator to adjust security rules
  6. Document false positive patterns

IP Remains Blocked After Unbanning

Symptoms:

  • Clicked Unban but IP still blocked
  • Customer still can't access
  • IP appears removed from list but blocking continues

Check:

  1. Verify unban confirmation message appeared
  2. Clear any browser cache
  3. Check if IP was re-banned immediately
  4. Review firewall logs
  5. Check for multiple ban entries (IPv4 vs IPv6)
  6. Contact administrator if persistent

  • Bad Logins - View failed login attempts
  • Admin Users - Manage administrator accounts
  • Cloudflare Settings - Configure additional security rules
  • System Log - Review security-related system events

Best Practices

Daily Monitoring

  1. Review banned IP list daily
  2. Investigate unusual ban volumes
  3. Respond to unban requests within 1 hour
  4. Document significant security events
  5. Check for geographic patterns

Ban Management

  1. Verify ban reason before unbanning
  2. Document reason when manually unbanning
  3. Add notes for unusual bans
  4. Don't unban obvious threats
  5. Contact customer before unbanning to confirm identity

Security

  1. Don't permanently whitelist without careful consideration
  2. Monitor unbanned IPs for re-offending
  3. Escalate repeated ban attempts from same IP
  4. Keep records of manual interventions
  5. Review ban effectiveness monthly

False Positives

  1. Investigate why legitimate users were banned
  2. Adjust rules to reduce false positives
  3. Consider whitelisting known good IPs
  4. Communicate with affected users
  5. Document patterns for rule improvement

Quick Reference Card

Task Action/Location
View banned IPs Navigate to Temporary Banned IPs page
Search for IP Use search field in header
Unban IP Click Unban button on IP row
Add manual ban Click "Add Manual Ban" button
Check expiration View "Time Remaining" column
View ban history Scroll to Ban History Log section
Export banned list Click Export CSV button
Filter by reason Use reason filter dropdown

FAQs

How long do temporary bans last?

Ban duration varies by violation severity. Failed logins typically result in 1-4 hour bans. Severe violations may result in 24-hour bans. All temporary bans expire automatically.

What happens when a ban expires?

The IP is automatically removed from the banned list and can access the site normally. No manual action needed.

Can I permanently ban an IP?

This page handles temporary bans only. For permanent bans, contact your system administrator to add IP to permanent block list.

Why was my customer's IP banned?

Common reasons include multiple failed login attempts, suspicious bot-like behavior, or triggering anti-spam rules. Review the ban reason column for specifics.

Can someone on same network be banned even if they didn't do anything?

Yes, if they share an IP address (common with corporate networks, VPNs, or shared internet). Multiple users behind the same IP can trigger bans through combined activity.

What if I unban someone and they immediately get re-banned?

If they continue the behavior that triggered the ban (e.g., failed login attempts), they'll be re-banned. Ensure they know their correct login credentials before unbanning.


End of Documentation

For additional help, contact your system administrator or Kiva Logic support.