Recommended releases

Download Released

Block site vistors by IP address.


To ban an IP address:

  • Navigate to /admin/config/people/ip-blocking.
  • Enter an IP address (for example,
  • Click Add.
  • Note Backdrop will prevent you from banning your own IP address.

To remove the ban from an IP address:

  • Navigate to the Ban IP page (see above).
  • Beside an IP address, click Delete.

IP blocking via settings.php

To bypass database queries for denied IP addresses, use this setting.

Backdrop queries the {blocked_ips} table by default on every page request
for both authenticated and anonymous users. This allows the system to
block IP addresses from within the administrative interface and before any
modules are loaded. However on high traffic websites you may want to avoid
this query, allowing you to bypass database access altogether for anonymous
users under certain caching configurations.

To enable this setting, create an entry in settings.php like this:

  $settings['blocked_ips'] = array(

An empty array will have the effect of disabling IP blocking on your site.

If using this setting, you will need to add back any IP addresses which
you may have blocked via the administrative interface. Each element of this
array represents a blocked IP address.


This project is GPL v2 software. See the LICENSE.txt file in this directory for
complete text.

Current Maintainers


This module was originally part of Drupal CMS core.