brstefanovic

Advanced Country Blocker helps you secure your WordPress site by restricting access based on the visitor’s geolocation (country) or IP address. Upon activation, the plugin detects the activating admin’s country and automatically sets that as the only allowed country. All other visitors from different countries are blocked, unless they use a secret key parameter to temporarily whitelist their IP. Country detection uses the privacy-friendly ip-api.com service by default but can be switched to a fully offline MaxMind GeoLite2 (or compatible) database file once you configure a local copy.
Key Features:
<ul>
<li>Automatically allows the admin’s country on plugin activation.</li>
<li>Flexible IP-to-country lookups – start with the built-in ip-api.com integration and optionally switch to an offline MaxMind GeoLite2 Country (or compatible) <code>.mmdb</code> database file.</li>
<li>Allowlist or blacklist mode – choose whether the country list acts as an allowlist or blocklist without re-entering countries.</li>
<li>Temporary access via a customizable secret URL parameter (e.g., <code>?MySecretKey=1</code>).</li>
<li>CAPTCHA Challenge – allow blocked visitors to solve a CAPTCHA to gain temporary access (supports Google reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile).</li>
<li>Real-Time Activity Monitor – live dashboard showing active visitors, recent blocks, and traffic statistics.</li>
<li>Analytics Dashboard – comprehensive charts and statistics about blocked attempts.</li>
<li>Manual blacklisting and safelisting of IPs for added security and to accommodate uptime monitors.</li>
<li>Optional email alerts when new visitors are blocked.</li>
<li>Admin bypass so logged-in admins can always access the site (toggleable in the code).</li>
<li>Detailed logging of blocked attempts in a custom database table, displayed in the WP admin.</li>
<li>Custom response controls – personalise the block page title/message, choose the HTTP status (403, 410, 451) or redirect to any URL.</li>
<li>Automatic log cleanup with configurable retention plus a one-click “Clear Logs” button.</li>
</ul>
Use the plugin settings page (Country Blocker menu in WP admin) to configure the list of allowed countries, blacklisted countries, blacklisted IPs, and whether email alerts are enabled.
<h3>License</h3>
This plugin is open-sourced software licensed under the <a href="https://www.gnu.org/licenses/gpl-3.0.html" rel="nofollow ugc">GPLv3 or later</a>.
<h3>External Services</h3>
By default this plugin contacts the ip-api.com geolocation service to detect visitor countries. You can disable all external lookups by switching the IP lookup method to the local MaxMind database in the settings.

Advanced Country Blocker


It's a simple plugin that simply works. 



Also, I made it, so ofc 5 stars. =D


Simply works

An advanced security plugin that blocks website visitors by country, with additional features like blacklisting, logging blocked attempts, admin bypas …

JkmAS

Plugin records failed login attempts 
and in case of exceeding the setting number of failed attempts blocks all login attempts from that IP address.
In the administration shows a list of failed records with detailed overview (username, IP address, geolocation data).
<h3>Features</h3>
<ul>
<li>Records failed login attempts</li>
<li>Blocking the logging in from the recorded IP addresses</li>
<li>Displays the list of failed attempts with the detailed overview (ip address, nickname, geolocation data)</li>
</ul>

Login Watchdog

Plugin records failed login attempts and in case of exceeding the setting number of failed attempts blocks all login attempts from that IP address.

Advanced Country Blocker vs Login Watchdog