Articles on: [Shopify Platform] Blockify - Fraud IP Blocker

Visitor logs: allowed, blocked, redirected and bot visitors

Overview

The Visitors tab in Analytics lists every visitor Blockify recorded, one row per IP address, split into four tabs by what happened to them: Allowed visitors, Blocked visitors, Redirected visitors and Bot visitors. Use it to check why a visitor got in or was stopped, to find the rule that blocked someone, and to block or allow one IP address without leaving the log.

What you'll learn

The four tabs
Columns in the log
What the risk score means
How Blockify sorts visitors into tabs
Filters and search
Access detail and Blocked detail
Block or whitelist a visitor from the log
Export visitor data
Who can use this feature?

The four tabs

Open Analytics > Visitors. The date picker, Refresh and the Search, Filter and Export tools at the top right work the same way on every tab; each tab keeps its own filters and page size.

Tab	Who is listed	Extra columns
Allowed visitors (default)	Real people who got into your store because no block rule stopped them.	Average durations, Action (add the IP address to the blacklist).
Blocked visitors	Visitors stopped by a block rule or by one of Blockify's auto-block features.	Block reason (the most recent reason), Action (add the IP address to the whitelist).
Redirected visitors	Visitors that a redirect rule sent to another web address instead of your store.	Redirect reason, Action.
Bot visitors	Bots that are currently allowed in: programs that visit your store on their own, such as search engines, tools that copy your content, and AI bots. Bots that were blocked or redirected stay in the other two tabs; use the Traffic type filter there to find them.	Bot name with a trust badge.

Whitelist tick on Allowed visitors

A small tick icon right after the IP address means this visitor got in because of a whitelist rule you created. Hover the icon to see Allowed by your whitelist rule and the rule ID. Rows without the tick were not let in by a whitelist rule; Blockify checked your block rules as usual.

Tip: The tick only appears for a normal whitelist match. Visitors let in because a rule has Whitelist if these accesses use VPN ticked, good bots, and IP addresses left out of a block rule get in without a tick. Older rows, and rows from stores on the Free plan, never show it; in an export their Access reason column reads "Not recorded".

Bot name and trust badge on Bot visitors

Bot name is the name the bot gives itself in its browser and device information (Googlebot, AhrefsBot, GPTBot and so on); rows where Blockify found no name show Unknown. The badge under the name tells you how far to trust that name:

Verified good bot: one of the well-known bots Blockify recognises (Google, Bing, Facebook, Lighthouse, Ahrefs, Clearscope, Slack, TrustedSite).
Allowed by you: a bot you added to the Allowed bot list.
Unverified: everything else, even if the name looks familiar.

Important: A bot name is what the visitor claims to be, not proof of who it is. Blockify does not check the name against the IP addresses that bot really uses, so a bot copying your content can call itself Googlebot. Check the Internet provider column before you block or allow a bot. The Traffic type: Bot filter is always on for this tab and cannot be removed.

Columns in the log

Column	Meaning
IP address	The visitor's IP address, with the whitelist tick or bot icon when they apply.
Bot name	Bot visitors only: the declared bot name and its trust badge.
Country / State/Province/City	Where the IP address is located.
Internet provider	The internet provider or server company that owns the IP address.
Total access	Number of visits from that IP address in the dates you picked. Click it to see each visit.
Last seen on	Date and time of the most recent visit.
Risk score	How risky Blockify thinks the IP address is, 0–100 (see below).
VPN/Proxy	Whether the visitor hid their real location with a VPN, a proxy or the Tor browser.
Average durations	Allowed visitors only: average time on site per visit, in seconds.
Block reason / Redirect reason	The most recent reason the visitor was blocked or redirected (the kind of rule, or the auto-block feature).
Action	An icon button: Add to the blacklist on allowed rows; Unblock on blocked rows (Add to Whitelist on redirected rows). See Block or whitelist a visitor from the log.

Tip: The table is wide. On screens of 1280 px or narrower, scroll sideways to reach the Action column.

What the risk score means

Blockify gives every IP address a risk score from 0 to 100: how risky it thinks the visitor is, based on the IP address's past behaviour and who owns it:

0–34: low risk, normal shoppers.
35–66: high risk, suspicious but unproven; review before you block.
67–100: dangerous, bots and known fraud sources.

The same levels are used for the Low risk IP, High risk IP and Dangerous IP cards on the Overview tab and the Risk level filter in the log.

How Blockify sorts visitors into tabs

When a visitor arrives, Blockify looks up their IP address with an outside service that knows which addresses are risky (proxycheck.io) and checks it against your rules. Visitors that no block or redirect rule stops go to Allowed visitors (or Bot visitors when Blockify recognises a bot); visitors stopped by a rule or an auto-block feature go to Blocked visitors, and visitors sent elsewhere by a redirect rule go to Redirected visitors. The most recent visit decides a row's tab, reason and tick.

Some visits are not recorded on purpose: your own visits through the Admin access URL, visits Blockify let in because it briefly could not load your rules, and every visit while Visitor Analytics is turned off.

Filters and search

Search finds a visitor by IP address (on Bot visitors, by IP address or bot name). Filter lets you narrow the list by several things at once:

On every tab: Location, Country, Risk level (Low, High or Dangerous), ISP, IP address, Device, Browser (common browsers only) and Total access, plus Per page.
Average duration on Allowed visitors and Bot visitors.
Traffic type (Human or Bot) on Allowed, Blocked and Redirected visitors; pinned to Bot on the Bot visitors tab.
Block reason on Blocked visitors and Redirected visitors: the kind of rule, or the auto-block feature, that stopped the visitor.
VPN / Proxy (Yes or No) on Blocked visitors and Redirected visitors: show only visitors who did, or did not, use a VPN or proxy. Clicking Total blocked VPN & Proxy on the Overview tab opens Blocked visitors with this filter set to Yes.
Whitelisted on Allowed visitors only: Only show visitors allowed by a whitelist rule.

Tip: Rules do not show how many visitors they blocked. To count how many visitors a rule stopped, open Blocked visitors, filter by Block reason and set the dates; the number of rows is your answer. Filters also apply to the export (see Export visitor data).

Access detail and Blocked detail

Click the Total access number on an allowed row to open Access detail: one line per visit with the time, Time on site, Referring URL (the website they came from) and Visited URLs (the pages they opened). The Action column on each visit offers Block URL (a block rule for the website the visitor came from; greyed out when Blockify does not know where they came from) and Block Internet provider (a block rule for everyone using the visitor's internet provider).

Clicking a blocked row opens Blocked detail, which shows the same visit history plus the Blocked time and Access denied reason for each attempt. Redirected rows open Redirected detail in the same way.

Block or whitelist a visitor from the log

The Action column creates a rule for one IP address without leaving the log: block an allowed visitor who looks risky, or let in a real customer that a rule stopped.

Block an allowed visitor

Step 1: Open Analytics > Visitors > Allowed visitors and find the IP address with Search or Filter.

Step 2: In the row's Action column, click the block icon (tooltip Add to the blacklist). In the Block IP dialog, click Block. To block several visitors at once, tick their rows and click Add IP to blacklist above the table.

Whitelist a blocked visitor

Step 1: Open Analytics > Visitors > Blocked visitors. Check Block reason to make sure Blockify blocked a real customer by mistake.

Step 2: In the row's Action column, click the Unblock icon. The Unblock dialog says "This IP address will be added to the whitelist for access. You can remove it at any time."; click Unblock. Blockify shows "IP added to your Whitelist rules." and the icon greys out with the tooltip Unblocked. On Redirected visitors the same action is labelled Add to Whitelist (Already in your Whitelist once done).

Step 3: On their next visit the IP address appears in Allowed visitors with a tick icon after the address; hover it to see the whitelist rule and its ID.

What happens in the rule list

Each action creates one active IP address rule for that exact IP address, under Block & Re-director > Blacklist or Block & Re-director > Whitelist. Edit, disable or delete it there like any other rule. The shortcut covers one IP address only: it does not catch visitors whose IP address keeps changing (use an IP start with or IP range rule for them), and it cannot allow a whole internet provider or country; create those rules under Block & Re-director > Whitelist (see Create a whitelist rule).

Important: Rows already in the log do not move; the visitor's tab, reason and tick change on their next visit. Blockify checks whitelist rules before block rules, so a whitelisted IP address gets in even if a country or VPN rule would block it.

Export visitor data

Export emails you the visitor log as a spreadsheet file, with only the columns you choose and only the rows you see for that tab, dates and filters.

Steps

Step 1: Open Analytics > Visitors, select the tab to export (Allowed visitors, Blocked visitors, Redirected visitors or Bot visitors) and set the dates and filters. Each export covers the open tab only.

Step 2: Click Export (the upload icon) at the top right of the table.

Step 3: In Export Options, tick the columns under Select Columns (at least one; Select All and Deselect All are available) and check Recipient Email. Blockify fills in your Shopify contact email; you can change it.

Step 4: Click Export Data. When the file is ready, Blockify emails it to the recipient; download it from the email.

Important: The file comes by email; your browser does not download it. If no visitors match your filters, Blockify sends nothing. You can export as far back as the date picker allows (about two months), so export regularly if you need a longer record.

How filters apply to the export

The export has exactly the rows on screen: the current tab, the dates and every active filter. For example, Blocked visitors over the last 60 days with Risk level: Dangerous exports only dangerous blocked visitors from those 60 days.

While you are editing a filter the Export button is hidden; click Cancel or apply the filter to bring it back.

Some columns exist only in the export:

Column	Tab	Values
Action Status	Allowed / Blocked	Blocked if you added an allowed IP address to the blacklist; Allowed if you added a blocked IP address to the whitelist; otherwise the tab's own state.
Access reason	Allowed	The whitelist rule (with ID) that let the visitor in, "no rule", or "Not recorded" (older rows, Free plan).
Bot name and trust level	Bot visitors	The name the bot gives itself plus Verified good bot / Allowed by you / Unverified.

Who can use this feature?

The visitor log, the Action shortcuts and Export are available on every plan that has the log. On the Free plan Blockify stops recording after the first 200 unique visitors, while blocking keeps working, and a rule created from the log counts towards the Free rule limit.

FAQs

A visitor from a country I blocked is in Allowed visitors. Is the rule broken?

Look for the tick next to the IP address: it means one of your own whitelist rules let them in; hover it to see which. Blockify checks whitelist rules before block rules. If there is no tick, compare the Last seen on date with when you created the rule, and remember that Blockify lets good bots in before it checks your block rules.

Why does my store seem to have fewer bots than I expected?

Bot visitors only lists bots that are currently allowed in. Bots your rules blocked or redirected stay in Blocked visitors and Redirected visitors; filter those tabs by Traffic type: Bot.

How do I see how many visitors one rule blocked?

Open Blocked visitors, add the Block reason filter for that kind of rule and set the dates. There is no counter on the rule itself.

Why does an IP address show Unknown as its bot name?

The bot did not give a name in its browser and device information, or the row is older than the Bot visitors tab.

I whitelisted an IP address but it is still in Blocked visitors.

The row stays until the visitor comes back. If a new visit is still blocked, check in Block & Re-director > Whitelist that the rule is turned on and the IP address is exactly right.

The export email has not arrived. What should I check?

Confirm the Recipient Email, check the spam folder and allow a few minutes for large exports.

Updated on: 16/10/2026

Was this article helpful?

Thank you!