Temporary Banned IPs¶
Menu Location: Settings > Security > Temporary Banned IPs
Access Level: Administrator
Last Updated: 2026-03-01
Overview¶
The Temporary Banned IPs page displays IP addresses that have been temporarily blocked from accessing your website due to suspicious activity or security violations. Monitor banned IPs, review ban reasons, and manually unban if needed.
Primary Functions:
- View all temporarily banned IP addresses
- See ban reason and expiration time
- Manually unban IP addresses
- Monitor security events
- Add manual temporary bans
- Review ban history
Page Layout¶
Header Section¶
- Page title and security overview
- Add manual ban button
- Search by IP address
- Filter by ban reason
Currently Banned IPs Table¶
- IP Address
- Ban reason (Failed login attempts, Spam, Bot activity, etc.)
- Banned timestamp
- Expiration timestamp (when auto-unban occurs)
- Time remaining
- Country/location (if available)
- Unban button
Ban History Log¶
- Historical banned IPs
- Ban duration
- Reason for ban
- Whether automatically or manually unbanned
Summary Statistics¶
- Total currently banned IPs
- Bans today
- Top ban reasons
- Geographic distribution of bans
Primary Features¶
Automatic IP Banning¶
System automatically bans IPs that exceed failed login thresholds, exhibit spam behavior, or trigger security rules.
Manual Ban Management¶
Add manual IP bans for troublesome sources not caught by automatic rules. Set custom ban duration and reason.
Automatic Expiration¶
Temporary bans expire automatically after specified duration (typically 1-24 hours depending on violation severity).
Geolocation Insights¶
View geographic location of banned IPs to identify patterns and potential attack sources.
Common Use Cases¶
Use Case 1: Review Currently Banned IPs¶
Goal: Monitor security status
Steps:
- Navigate to Temporary Banned IPs
- Review currently banned list
- Check ban reasons
- Note any concerning patterns
- Verify expected automatic unbans
Normal State: Should see handful of bans from failed logins, few bot attempts
Use Case 2: Unban Legitimate User¶
Goal: Restore access for legitimate user accidentally banned
Steps:
- Customer reports they can't access site
- Get their IP address from customer
- Search for IP in banned list
- Review ban reason
- Click "Unban" button
- Confirm unban action
- Verify customer can access site
- Document incident
Use Case 3: Manually Ban Problematic IP¶
Goal: Block specific IP causing issues
Steps:
- Identify problematic IP from logs
- Click "Add Manual Ban" button
- Enter IP address
- Select ban reason (or enter custom)
- Set ban duration (hours)
- Add notes for reference
- Click "Ban IP"
- Verify IP appears in banned list
Use Case 4: Investigate Security Incident¶
Goal: Review ban patterns during suspected attack
Steps:
- Navigate to Temporary Banned IPs
- Review recent bans
- Filter by time period (e.g., last hour)
- Check for multiple bans from same location
- Note ban reasons and patterns
- Export data for security review
- Escalate if attack pattern detected
Use Case 5: Clean Up False Positives¶
Goal: Unban multiple legitimate IPs incorrectly blocked
Steps:
- Identify affected IPs
- Review ban reasons for each
- Verify they're legitimate users
- Unban each IP
- Document reason for unbanning
- Adjust security rules if needed to prevent recurrence
- Notify affected users access restored
Troubleshooting¶
Customer Can't Access Site¶
Symptoms:
- Customer reports access denied
- Page won't load for customer
- Customer sees security block message
Check:
- Get customer's IP address
- Search in Temporarily Banned IPs
- Check if IP is banned
- Review ban reason
- Unban if legitimate customer
- Investigate why they were banned
- Adjust security rules if false positive
Too Many Legitimate Bans¶
Symptoms:
- High volume of unban requests
- Legitimate users frequently banned
- Security rules too aggressive
Solutions:
- Review ban reasons for pattern
- Identify which security rule is triggering
- Adjust failed login threshold if login-related
- Whitelist specific IPs if needed
- Contact administrator to adjust security rules
- Document false positive patterns
IP Remains Blocked After Unbanning¶
Symptoms:
- Clicked Unban but IP still blocked
- Customer still can't access
- IP appears removed from list but blocking continues
Check:
- Verify unban confirmation message appeared
- Clear any browser cache
- Check if IP was re-banned immediately
- Review firewall logs
- Check for multiple ban entries (IPv4 vs IPv6)
- Contact administrator if persistent
Related Pages¶
- Bad Logins - View failed login attempts
- Admin Users - Manage administrator accounts
- Cloudflare Settings - Configure additional security rules
- System Log - Review security-related system events
Best Practices¶
Daily Monitoring¶
- Review banned IP list daily
- Investigate unusual ban volumes
- Respond to unban requests within 1 hour
- Document significant security events
- Check for geographic patterns
Ban Management¶
- Verify ban reason before unbanning
- Document reason when manually unbanning
- Add notes for unusual bans
- Don't unban obvious threats
- Contact customer before unbanning to confirm identity
Security¶
- Don't permanently whitelist without careful consideration
- Monitor unbanned IPs for re-offending
- Escalate repeated ban attempts from same IP
- Keep records of manual interventions
- Review ban effectiveness monthly
False Positives¶
- Investigate why legitimate users were banned
- Adjust rules to reduce false positives
- Consider whitelisting known good IPs
- Communicate with affected users
- Document patterns for rule improvement
Quick Reference Card¶
| Task | Action/Location |
|---|---|
| View banned IPs | Navigate to Temporary Banned IPs page |
| Search for IP | Use search field in header |
| Unban IP | Click Unban button on IP row |
| Add manual ban | Click "Add Manual Ban" button |
| Check expiration | View "Time Remaining" column |
| View ban history | Scroll to Ban History Log section |
| Export banned list | Click Export CSV button |
| Filter by reason | Use reason filter dropdown |
FAQs¶
How long do temporary bans last?¶
Ban duration varies by violation severity. Failed logins typically result in 1-4 hour bans. Severe violations may result in 24-hour bans. All temporary bans expire automatically.
What happens when a ban expires?¶
The IP is automatically removed from the banned list and can access the site normally. No manual action needed.
Can I permanently ban an IP?¶
This page handles temporary bans only. For permanent bans, contact your system administrator to add IP to permanent block list.
Why was my customer's IP banned?¶
Common reasons include multiple failed login attempts, suspicious bot-like behavior, or triggering anti-spam rules. Review the ban reason column for specifics.
Can someone on same network be banned even if they didn't do anything?¶
Yes, if they share an IP address (common with corporate networks, VPNs, or shared internet). Multiple users behind the same IP can trigger bans through combined activity.
What if I unban someone and they immediately get re-banned?¶
If they continue the behavior that triggered the ban (e.g., failed login attempts), they'll be re-banned. Ensure they know their correct login credentials before unbanning.
End of Documentation
For additional help, contact your system administrator or Kiva Logic support.