Block an IP Address From Accessing an Organization Using a Network Zone
Feb 25, 2026
Administration
Okta Classic Engine
Okta Identity Engine
Network Zones
Overview
This article provides steps to block a specific IP address from accessing an organization by creating a Network Zone. This action is a necessary security measure when a malicious actor's activity causes rate limit violations or user lockouts, and the System Log displays messages such as:
Okta Rate Limit Warning
Okta Rate Limit Reached
Okta Burst Rate Limits Activated
Applies To
- Network Zones
- Security
Cause
A malicious actor is using a specific IP address to attack the organization. This activity results in rate limit violations or user lockouts.
Solution
-
Identify the IP address of the threat actor from the Rate Limits Dashboard or the System Log.
- Navigate to the Okta Admin Console.
- Go to Security > Networks.
- Select Add zone and choose IP Zone.
- Enter a descriptive Zone name, such as "IP Addresses Blocked From Accessing Organization".
- Select the checkbox for Block access from IPs matching conditions listed in this zone.
- In the Gateway IPs field, enter the IP address identified in the first step.
- Select Save.
NOTE: When an IP address is blocked, the following event is logged in the System Log:
security.request.blocked Blocked request from IP
