Articles on: [Shopify Platform] Blockify - Fraud IP Blocker

Visitor logs: allowed, blocked, redirected and bot visitors

Overview

The Visitors tab in Analytics lists every visitor Blockify recorded, one row per IP address. Use it to check why a visitor got in or was stopped, to see which rule stopped them, and to block or allow one IP address without leaving the log.

This article follows the order you work in: pick which visitors to see, narrow the list, read a row, rearrange the table, dig into one address, act on it, then take the list out of the app.

Choose which visitors to see

Open Analytics > Visitors. The strip above the table counts the date range you picked and switches the table at the same time. Click a number to see those visitors; the one you are looking at is underlined.

Click	Who you get
Total visitors	Everything in one table: allowed, blocked and redirected, with a Status column. This is where the tab opens.
Allowed visitors	Visitors who got into your store because no block rule stopped them.
Blocked visitors	Visitors a block rule or one of Blockify's auto-block features stopped.
Redirected visitors	Visitors a redirect rule sent to another web address.
Allowed bots	Bots currently allowed in, such as search engines and content tools. Bots your rules stopped stay under blocked and redirected.

Each number carries a trend line and its change against the period before. A rise in bots is marked orange rather than green, because more bots is rarely good news.

Tip: One IP address can appear twice in Total visitors, once allowed and once blocked, when a rule changed between visits. Each row counts its own visits.

Narrow the list with search and filters

The search box and the filters sit under the strip and stay visible, so you can always see which list you are filtering.

Search by IP address. On Allowed bots it also searches bot names.
Country, Risk level, ISP, VPN/Proxy and Tor are always on the bar.
Add filter holds the rest, including device, browser, traffic type, block reason and total access.

Each list keeps its own filters, search text and page size, so a filter you set on blocked visitors does not follow you to allowed visitors.

Tip: To count how many visitors one rule stopped, open Block & Re-director and read the Visitors · 30d column on that rule. Clicking the number opens this log filtered to that rule over the same 30 days.

Read the table

The columns

Column	Meaning
IP address	The visitor's IP address, with its IP range underneath and a copy button. On Blocked visitors the heading reads IP blocked.
Status	Total visitors only: whether this row was allowed, blocked or redirected.
Bot	Allowed bots only: the name the bot gives itself and how far to trust it.
Country / State/Province/City	Where the IP address is located.
Total access	Visits from that IP address in the dates you picked. Click it to see each visit.
Last seen on	Date and time of the most recent visit.
Risk score	How risky Blockify thinks the IP address is, 0 to 100.
VPN/Proxy	Whether the visitor hid their location with a VPN or a proxy. Tor visitors read No here and Yes in the Tor column.
Reason	Why the visitor was stopped, for example Country or VPN/Proxy. The heading reads Block reason on blocked visitors and Redirect reason on redirected visitors. Allowed rows show a dash.
Rule	The rule that acted, as a link to that rule. A rule you have since deleted shows its name with (deleted) and no link. A dash means no rule applied.
Internet provider	The internet provider or server company that owns the IP address.
Action	Add to the blacklist on allowed rows, Unblock on blocked rows, Add to Whitelist on redirected rows.

What the risk score means

Blockify gives every IP address a score from 0 to 100, based on how that address has behaved and who owns it:

0 to 34: low risk, normal shoppers.
35 to 66: high risk, suspicious but unproven. Review before you block.
67 to 100: dangerous, bots and known fraud sources.

The same levels drive the Low risk IP, High risk IP and Dangerous IP numbers on the Bots & risk tab and the Risk level filter here.

Bot names and how far to trust them

In Allowed bots, the Bot column gives the name the bot declares, with one of three labels:

Verified good bot: one of the crawler families Blockify recognises.
Allowed by you: a bot you added to the Allowed bot list.
Unverified: everything else, however familiar the name looks.

Important: A bot name is a claim, not proof. Blockify does not check the name against the addresses that bot really uses, so a tool copying your content can call itself Googlebot. Check the Internet provider column before you block or allow a bot.

Arrange the table your way

Sort and columns, at the right of the search box, controls both.

Sort by: Last seen on, Total access or Risk score, with a button to flip the direction.
Columns: the eye icon shows or hides a column, and dragging a row changes the order. With the keyboard, select a row and press Alt and the up or down arrow. IP address is always shown. Reset puts everything back.

Columns you can add include Tor, Bot, Related IPs, First seen on, ASN, Network type, Device, OS, Browser, User agent, Last page and Source. Your choice is remembered on this browser.

See every visit from one IP address

Click the Total access number on a row to open the visit history: one line per visit with the time, time on site, the website the visitor came from and the pages they opened. Each visit offers Block URL and Block Internet provider. Blocked and redirected rows show the same history plus the time and reason for each attempt.

Block or allow a visitor from the log

The Action column creates a rule for one IP address without leaving the log.

Block a visitor who got in

Step 1: Open Analytics > Visitors, click Allowed visitors and find the address with search or the filters.

Step 2: In the row's Action column, click the block icon and confirm with Block in the Block IP dialog. To block several at once, tick their rows and use the action above the table.

Allow a visitor you blocked

Step 1: Click Blocked visitors and check the Reason and Rule columns to confirm a real customer was stopped by mistake.

Step 2: Click the Unblock icon in that row and confirm. Blockify adds the address to your whitelist rules and greys the icon out. On redirected rows the same action reads Add to Whitelist.

What happens in your rule list

Each action creates one active IP address rule under Block & Re-director > Blacklist or Block & Re-director > Whitelist, which you can edit, turn off or delete like any other rule. It covers that one address, so a visitor whose address keeps changing needs an IP start with or IP range rule instead.

Important: Rows already in the log do not move. The visitor's list, reason and rule change on their next visit. Blockify checks whitelist rules before block rules, so a whitelisted address gets in even when a country or VPN rule would stop it.

Export the list

Export csv at the top right of the table emails you the log as a spreadsheet.

Step 1: Choose the list, the dates and the filters you want. The export covers exactly what is on screen.

Step 2: Click Export csv.

Step 3: In Export Options, check the recipient email (Blockify fills in your Shopify contact address) and tick the columns you want under Select Columns. More fields holds the less common ones, and IP address is always included.

Step 4: Click Export Data. Blockify emails the file when it is ready.

Some columns exist only in the export, including URL Visited, Referral URL, Session ID, Time on site (last visit), Pages visited, Action Status and Access reason, which names the whitelist rule that let a visitor in.

Important: The file arrives by email, so your browser does not download it. If no visitors match your filters, Blockify sends nothing. You can only export as far back as the date picker reaches, so export regularly if you need a longer record.

Who can use this feature?

The log, the Action shortcuts and the export are on every plan. On the Free plan Blockify records your first 200 unique visitors and then stops recording, while your rules keep blocking, and a rule you create from the log counts towards the Free rule limit. The date range on Free covers the last 7 days.

FAQs

A visitor from a country I blocked is in Allowed visitors. Is the rule broken?

Check the Last seen on date against when you created the rule, and look for a whitelist rule covering that address: Blockify checks whitelist rules before block rules. Good bots are also let in before your block rules are checked.

Why does my store seem to have fewer bots than I expected?

Allowed bots only lists bots getting in. Bots your rules stopped are under Blocked visitors and Redirected visitors. Bots stopped by the Block spam bots setting never reach Blockify's records at all.

Why is the Rule column empty on some blocked rows?

Some blocks come from a setting rather than a rule you wrote, for example the Tor blocker. Those rows show the reason with no rule.

I whitelisted an IP address but it is still under Blocked visitors.

The row stays until that visitor comes back. If the next visit is still blocked, check in Block & Re-director > Whitelist that the rule is on and the address is exactly right.

Which visits are never recorded?

Your own visits through the Admin access URL, visits Blockify let through while it briefly could not read your rules, and every visit while analytics is turned off.

The export email has not arrived. What should I check?

Confirm the recipient address, check the spam folder, and give large exports a few minutes.

Updated on: 05/11/2026

Was this article helpful?

Thank you!