How to block specific IP addresses from your website

If you are seeing unwanted activity from a specific source, such as spam submissions, brute-force login attempts, or suspicious behaviour, you can block that visitor's IP address directly from your Web60 admin panel. Once blocked, they will be completely unable to access your website.

What is an IP address?

Every device connected to the internet has a unique address, called an IP address. It looks something like 203.0.113.42. When someone visits your website, their IP address is included in the request. By blocking a specific address, you prevent that device (or network) from reaching your site.

Where to find the IP Block List

The IP Block List is available in the admin panel:

1. Log in to the Web60 admin panel.
2. Go to Sites and select the website you want to protect.
3. Click the IP Block tab.

You will see a text field for adding new addresses and a list of any addresses you have already blocked.

Blocking an IP address

1. In the IP Block tab, type the IP address you want to block into the text field.
2. Click + Add.
3. The address is blocked immediately. No further action is needed.

The blocked address will appear in the list below, marked with a red dot.

Blocking a range of addresses

If you want to block an entire range of addresses (for example, all addresses from a particular network), you can enter a CIDR range. This looks like an IP address followed by a slash and a number, for example 203.0.113.0/24.

The number after the slash determines how large the range is:

• /24 blocks 256 addresses (the most common range size).
• /16 blocks 65,536 addresses.
• Smaller numbers block larger ranges.

If you are not familiar with CIDR notation, our support team can help you work out the correct range to enter.

Removing a block

If you need to unblock an address (for example, if you blocked yourself by mistake), simply click Remove next to the address in the list. Access is restored immediately.

What blocked visitors see

When someone from a blocked IP address tries to visit your website, they receive a 403 Forbidden error. They cannot see any of your pages, images, or files. Your website continues to work normally for everyone else.

Important notes

• Changes take effect immediately. There is no delay. The block is active within seconds of clicking Add.
• Each site has its own list. Blocking an IP on one website does not affect your other websites.
• You cannot block yourself. The system prevents you from blocking IP addresses that belong to the Web60 infrastructure, ensuring you cannot accidentally lock yourself out of your own management tools.
• Up to 50 entries. Each website supports up to 50 blocked addresses or ranges. If you need broader protection, contact our support team.

When to use IP blocking

IP blocking is most useful when you can identify a specific source of unwanted activity. Common scenarios include:

• Repeated spam form submissions from the same address.
• Brute-force login attempts that you have identified in your security logs.
• Scraping or crawling that is putting excessive load on your site.
• A known bad actor whose IP address you have been given by a security tool or service.

For broader threats that come from many different addresses, IP blocking alone may not be sufficient. In those cases, contact our support team. We can recommend additional measures such as rate limiting or geographic restrictions.

Need help?

If you are not sure which IP address to block, or if you are experiencing attacks from many different sources, contact our support team. We can review your site's traffic and recommend the best approach.