brstefanovic

Advanced Country Blocker helps you secure your WordPress site by restricting access based on the visitor’s geolocation (country) or IP address. Upon activation, the plugin detects the activating admin’s country and automatically sets that as the only allowed country. All other visitors from different countries are blocked, unless they use a secret key parameter to temporarily whitelist their IP. Country detection uses the privacy-friendly ip-api.com service by default but can be switched to a fully offline MaxMind GeoLite2 (or compatible) database file once you configure a local copy.
Key Features:
<ul>
<li>Automatically allows the admin’s country on plugin activation.</li>
<li>Flexible IP-to-country lookups – start with the built-in ip-api.com integration and optionally switch to an offline MaxMind GeoLite2 Country (or compatible) <code>.mmdb</code> database file.</li>
<li>Allowlist or blacklist mode – choose whether the country list acts as an allowlist or blocklist without re-entering countries.</li>
<li>Temporary access via a customizable secret URL parameter (e.g., <code>?MySecretKey=1</code>).</li>
<li>CAPTCHA Challenge – allow blocked visitors to solve a CAPTCHA to gain temporary access (supports Google reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile).</li>
<li>Real-Time Activity Monitor – live dashboard showing active visitors, recent blocks, and traffic statistics.</li>
<li>Analytics Dashboard – comprehensive charts and statistics about blocked attempts.</li>
<li>Manual blacklisting and safelisting of IPs for added security and to accommodate uptime monitors.</li>
<li>Optional email alerts when new visitors are blocked.</li>
<li>Admin bypass so logged-in admins can always access the site (toggleable in the code).</li>
<li>Detailed logging of blocked attempts in a custom database table, displayed in the WP admin.</li>
<li>Custom response controls – personalise the block page title/message, choose the HTTP status (403, 410, 451) or redirect to any URL.</li>
<li>Automatic log cleanup with configurable retention plus a one-click “Clear Logs” button.</li>
</ul>
Use the plugin settings page (Country Blocker menu in WP admin) to configure the list of allowed countries, blacklisted countries, blacklisted IPs, and whether email alerts are enabled.
<h3>License</h3>
This plugin is open-sourced software licensed under the <a href="https://www.gnu.org/licenses/gpl-3.0.html" rel="nofollow ugc">GPLv3 or later</a>.
<h3>External Services</h3>
By default this plugin contacts the ip-api.com geolocation service to detect visitor countries. You can disable all external lookups by switching the IP lookup method to the local MaxMind database in the settings.

Advanced Country Blocker


It's a simple plugin that simply works. 



Also, I made it, so ofc 5 stars. =D


Simply works

An advanced security plugin that blocks website visitors by country, with additional features like blacklisting, logging blocked attempts, admin bypas …

maxhaesslein

Block AI Crawlers directly via their IP addresses or user-agents. The blocking happens directly on the server, and not via robots.txt, so it should also block crawlers that do not respect the robots.txt.
This plugin may not work if you use a caching plugin that hooks before the ‘plugins_loaded’ hook. I may add compatibility in a future update.
After installation you need to activate blocking on the plugin settings page. The default settings should suffice, but you can add additional IP addresses, user agents or even JSON endpoints with lists of ip ranges. 
The visitor ip address server variable can also be customized, if your site is behind a reverse proxy and REMOTE_ADDR is not available.
If you want to delete all data the plugin saves in your database, activate the ‘delete all plugin data on uninstall’ option before uninstalling.

Simple AI Blocker

Block AI Crawlers directly via their IP addresses or user-agents.

Advanced Country Blocker vs Simple AI Blocker