Magento IP Restriction & Rate Limiting

Install the Magento 2 IP Restriction extension, then add trusted IPs to your allowlist and suspicious ones to your denylist from the admin panel. You can also restrict access by country, all without editing server files or code.

Magento 2 rate limiting caps how many times a visitor can perform sensitive actions like login, registration, or checkout within a set period. It stops brute-force attacks, bots, and abuse at critical checkpoints.

Yes. You can block individual IP addresses, IP ranges, or entire countries using the denylist, and allow only trusted regions with the allowlist.

Yes. Premium supports store- and site-specific rate limiting, so you can apply tailored Magento IP and domain restrictions to each store view.

Licenses are subscription-based and renew annually. Renewal keeps you covered with updates, security patches, and compatibility for the latest Magento versions.

No. miniOrange does not store or transfer your data — everything remains within your own server and premises.

Yes. You can configure rate limits for sensitive actions such as login, registration, password reset, and contact forms. This lets you protect high-risk areas without affecting normal browsing.

When a visitor exceeds the configured limit, the extension can take the defined action, such as blocking the request, displaying a CAPTCHA challenge, or applying a delay before allowing additional requests.

Yes. You can restrict access to the Magento Admin Panel by allowing only trusted IP addresses or regions. This adds an additional layer of protection against unauthorized login attempts and malicious traffic.

Yes. You can combine IP-based access rules with rate limiting to create layered protection. For example, you can block known malicious IPs while limiting repeated login or checkout requests from other visitors.