Introduction to the Block Bad IPs/Visitors module
The Shield Security plugin is composed of the several modules. The Block Bad IPs/Visitors is one of its modules. This module allows you to whitelist IP addresses and configure auto-blacklist rules.
It's accessible from within the main navigation menu > Config > IP Blocking:
Block Bad IPs/Visitors module is designed of the following parts (features):
- Auto Blocking Rules
- Antibot System
- CrowdSec
- Login Bots
- Probing Bots
- Bot Behaviors (Mouse Trap)
- User Messages
- IP Management and Analysis tool
Before you take any action, you should carefully review the Auto Blocking Rules settings.
The Auto Blocking Rules settings
The Block Bad IPs/Visitors module's main part is the Automatic IP Black List system (engine). It tracks bad behavior over a set period of time and as soon as it reaches the threshold, the Shield blocks it. No more lengthy and unmaintainable IP black lists.
To set-up the Automatic IP Black List system, use the following options:
- Offense Limit - Visitor IP address will be Black Listed after X bad actions on your site
- Auto Block Expiration - After 1 "X" a black listed IP will be removed from the black list
For more information about the automatic blacklist system, read the blog article here.