Block/allow countries with one toggle. Lightweight, no upsells. Includes admin bypass, IP allowlist, and block stats.

rbonfil

Geosec

Geosec protects your admin panel (wp-admin) by allowing access only from the countries you authorize.

IP2Location

IP2Location Country Blocker

Blocks unwanted visitors from accessing your frontend (blog pages) or backend (admin area) by countries or proxy servers.

Iulia Cazan

Login IP & Country Restriction

Tighten your website security and fight against dictionary bot attacks originating from other countries, by denying access.

Valeri Kluger

Country Access Blocker

Block or allow website visitors from specific countries based on IP geolocation.

nitinmaurya12

Block Country

Set country and IP to block your website. You can also set IP address to unblock for any special IP Address.

Bunty

Bili Plugins

Restrict Country Access

Sometimes we need to block access of WordPress site in some Country.

AA Extensions

AA Block country with redirect

It's a nice plugin with which you can redirect your visitor according to their country.

Maksym Marko

Block by Country

Restrict access to your website to users from certain countries.

topsyde

CountryLock provides a simple, lightweight way to allow or block countries from accessing your WordPress site.
It’s designed to be “set it and forget it” with no upsells, ads, or complex configurations.
<h3>✨ Key Features</h3>
<ul>
<li>Master Toggle: Enable or disable the firewall with a single click.</li>
<li>Allowed Countries List: Specify which two-letter country codes (e.g., <code>US</code>, <code>CA</code>) are allowed. Everyone else is blocked.</li>
<li>Admin Bypass: Logged-in administrators can always bypass the block (toggleable).</li>
<li>IP Allowlist: A simple list of IPs or CIDR ranges (like <code>123.45.67.89</code> or <code>10.0.0.0/8</code>) that are always allowed.</li>
<li>Block Logging: See which countries and IPs are being blocked (toggleable).</li>
<li>Zero-Lookup Detection: Automatically uses Cloudflare (<code>HTTP_CF_IPCOUNTRY</code>) and other common server-level GEO headers for instant decisions with zero performance impact.</li>
<li>Remote Lookup: As a fallback, it can query an external service (<code>ipapi.co</code>) if no headers are found.</li>
</ul>
<h3>External Services</h3>
This plugin uses one external service as a fallback to determine a visitor’s country if no local GEO headers (like those from Cloudflare or a server-level GeoIP module) are present.
<ul>
<li>Service: <code>ipapi.co</code></li>
<li>What it’s used for: To look up the country of origin for a visitor’s IP address.</li>
<li>Data Sent: The visitor’s IP address is sent to the service. This happens only if the “Use remote lookup if no geo headers” setting is enabled AND no local GeoIP headers are detected.</li>
<li>Service Policies:
<ul>
<li><a href="https://ipapi.co/terms/" rel="nofollow ugc">Terms of Service</a></li>
<li><a href="https://ipapi.co/privacy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
</li>
</ul>

Alternatives to CountryLock

Top alternatives