Yoyal Limbu

<p><strong>BruteFort</strong> is your WordPress site’s complete login security solution. Protect against brute force attacks, hide your login page with a custom URL, block countries using geo-blocking, and manage IP restrictions — all in one lightweight, performance-optimized plugin.</p>
<p>Whether you’re running a blog, a WooCommerce store, or a membership site, BruteFort keeps bots, hackers, and unauthorized users out while maintaining fast page speeds.</p>
<h4>🔐 Key Features</h4>
<p><strong>🌐 Geo Blocking (Country-Based Restrictions)</strong><br />
– Block or allow login attempts by country<br />
– Blacklist mode: Block specific countries from accessing wp-login.php<br />
– Whitelist mode: Only allow login from selected countries<br />
– IP geolocation detection (Cloudflare compatible)<br />
– Perfect for region-specific sites or blocking high-risk countries</p>
<p><strong>🔗 Custom Login URL (Hide wp-login.php)</strong><br />
– Hide default WordPress login page (wp-login.php)<br />
– Create custom login slug (e.g., yoursite.com/secure-access)<br />
– Automatically redirect wp-login.php to 404<br />
– Prevent automated bot attacks targeting /wp-login.php<br />
– Easy to remember custom URLs for authorized users</p>
<p><strong>🛡️ Brute Force Protection & Rate Limiting</strong><br />
– Block brute force attacks with smart rate limiting<br />
– Set maximum login attempts per IP address<br />
– Configurable time windows and lockout durations<br />
– Progressive lockout extensions for repeated attacks<br />
– Custom error messages for locked users</p>
<p><strong>📍 IP Whitelist & Blacklist Management</strong><br />
– Manage custom IP whitelists and blacklists<br />
– Add individual IPs or CIDR ranges<br />
– Instantly block suspicious IPs<br />
– Whitelist your own IP to prevent lockouts<br />
– Bulk IP management with easy interface</p>
<p><strong>📊 Real-Time Monitoring & Logs</strong><br />
– View failed login attempts in real-time<br />
– Track IP addresses, usernames, and timestamps<br />
– Filter logs by status, date, or IP<br />
– Manual unlock for accidentally locked users<br />
– Export logs for security audits</p>
<p><strong>⚡ Performance & Compatibility</strong><br />
– Lightweight and performance-optimized<br />
– Works with Cloudflare, proxy servers, and CDNs<br />
– Compatible with most security plugins<br />
– Dark mode UI support<br />
– No impact on page load speeds</p>
<h4>🎯 Perfect For</h4>
<ul>
<li><strong>WooCommerce stores</strong> protecting customer data and preventing unauthorized access</li>
<li><strong>Membership sites</strong> restricting access by geographic location</li>
<li><strong>Corporate websites</strong> blocking countries where business doesn’t operate</li>
<li><strong>Blog owners</strong> hiding login page from automated bots and scanners</li>
<li><strong>Agencies</strong> managing multiple client sites with different security requirements</li>
<li><strong>High-traffic sites</strong> experiencing frequent brute force attacks</li>
<li><strong>International sites</strong> wanting region-specific login restrictions</li>
</ul>
<h4>🚀 Why Choose BruteFort?</h4>
<ul>
<li><strong>All-in-one solution</strong>: Custom login URL + Geo blocking + IP restrictions in one plugin</li>
<li><strong>Easy to use</strong>: Simple, intuitive interface with no complex configuration</li>
<li><strong>Performance-focused</strong>: Minimal resource usage, no site slowdown</li>
<li><strong>SEO-friendly</strong>: Properly handles redirects and 404s</li>
<li><strong>Privacy-conscious</strong>: No external API calls for basic features (optional geo API)</li>
<li><strong>Regular updates</strong>: Actively maintained with new features added regularly</li>
</ul>


BruteFort

BruteFort – Complete WordPress login security with custom login URLs, geo blocking, brute force protection, and IP restrictions in one plugin.

Mohamed Shili

<p>🔐 Block or allow visitors by country. Track access attempts. View analytics. Stay in control — effortlessly.</p>
<h3>🧠 Description</h3>
<p><strong>Geo Blocker</strong> gives you full control over who can access your WordPress site — based on visitor country and IP. Whether you’re protecting content, reducing attack surface, or managing regional access, this plugin does it with precision and clarity.</p>
<p>🎯 Designed for performance, security, and ease of use.<br />
📊 Built-in analytics and access logs.<br />
🧭 Never get locked out — admin-safe bypass included.</p>
<h3>🚀 Features</h3>
<h3>✅ Access Control That Makes Sense</h3>
<ul>
<li><strong>Block Selected Countries</strong> – deny access to specific regions  </li>
<li><strong>Allow Selected Countries</strong> – restrict site only to approved countries  </li>
</ul>
<h3>🧩 Smart Blocking Actions</h3>
<ul>
<li>📜 Show custom message  </li>
<li>🔁 Redirect to a URL  </li>
<li>🚫 Send HTTP 403 Forbidden response  </li>
</ul>
<h3>🌐 Visual Country Selector</h3>
<ul>
<li>Flag icons & search bar for quick targeting  </li>
<li>Filter by continent (Africa, Asia, Europe, etc.)  </li>
<li>One-click select/deselect all  </li>
</ul>
<h3>📈 Analytics Dashboard</h3>
<ul>
<li>Summary cards: total visits, blocks, IPs  </li>
<li>Hourly charts for real-time insights  </li>
<li>Filter by date range & data type (accesses, unique IPs, etc.)  </li>
</ul>
<h3>📋 Detailed Logs</h3>
<ul>
<li>See IP, country, URL, status, user agent  </li>
<li>Filters out common junk (favicon, robots.txt)  </li>
<li>Admin visits are auto-ignored to reduce noise  </li>
</ul>
<h3>🛠️ Admin-Proof Bypass URL</h3>
<ul>
<li>Special URL with bypass parameter to access login anytime  </li>
<li>Prevents accidental lockouts  </li>
</ul>
<h3>🔄 Data Export & Log Management</h3>
<ul>
<li>Export logs in CSV or JSON  </li>
<li>Clear logs with a single click  </li>
<li>Sort & search logs in the UI</li>
</ul>
<h3>🌐 External Services</h3>
<p>This plugin uses a third-party API to determine the visitor’s country based on their IP address.</p>
<ul>
<li><strong>Service used:</strong> <a href="https://ipwho.is" rel="nofollow ugc">IPWho.is</a>  </li>
<li><strong>Purpose:</strong> To perform IP geolocation and detect the country of each visitor, allowing the plugin to block or allow access accordingly.  </li>
<li><strong>Data sent:</strong> The visitor’s IP address is sent to the IPWho.is API on page load when geo-blocking is active.  </li>
<li><strong>Terms of Service:</strong> <a href="https://ipwhois.io/terms" rel="nofollow ugc">https://ipwhois.io/terms</a>  </li>
<li><strong>Privacy Policy:</strong> <a href="https://ipwhois.io/privacy" rel="nofollow ugc">https://ipwhois.io/privacy</a></li>
</ul>
<h3>🖥️ Screenshots</h3>
<ol>
<li><strong>📊 Dashboard Overview</strong> – See country blocks, allowed hits & total attempts   </li>
<li><strong>🔧 Blocking Rules</strong> – Choose block mode, action type, and targets. Enable or disable countries visually</li>
<li><strong>📉 Analytics Graphs</strong> – View access by time, state, and IP 5. <strong>📑 Logs Table</strong> – Deep insights with full logs of visitor attempts. Export CSV/JSON logs with one click</li>
</ol>
<h3>📦 Installation</h3>
<ol>
<li>Upload the plugin folder to <code>/wp-content/plugins/geo-blocker</code>  </li>
<li>Activate via <strong>Plugins <span aria-hidden="true" class="wp-exclude-emoji">→</span> Installed Plugins</strong>  </li>
<li>Go to <strong>Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Geo Blocker</strong>  </li>
<li>Enable Geo Blocking using the toggle  </li>
<li>Choose between <strong>block</strong> or <strong>allow</strong> mode  </li>
<li>Select countries using the visual interface  </li>
<li>Pick your blocking action (message, redirect, or 403)  </li>
<li>Save settings — done!</li>
</ol>
<h3>❓ Frequently Asked Questions</h3>
<h3>How does Geo Blocker detect country?</h3>
<p>It uses the reliable <strong>IpWhoIs API</strong> to fetch country data based on the visitor’s IP.</p>
<h3>Will it slow down my site?</h3>
<p>Nope. It’s optimized with <strong>transient caching</strong> and smart triggers — no unnecessary lookups.</p>
<h3>Can I lock myself out?</h3>
<p>No. There’s a <strong>login bypass URL</strong> generated for administrators — shown right on the dashboard.</p>
<h3>Can I block specific pages?</h3>
<p>Not yet — current version works site-wide. Per-page rules may come in a future update.</p>
<h3>Can I export visitor logs?</h3>
<p>Yes. Logs can be exported in <strong>CSV or JSON</strong> format directly from the Logs tab.</p>
<h3>Does it work with caching plugins?</h3>
<p>Yes, but you may need to <strong>exclude the plugin’s logic</strong> from caching. Dynamic geo checks should not be cached.</p>
<h3>🗂️ Changelog</h3>
<h4>1.0.0</h4>
<ul>
<li>🎉 Initial release with all core features</li>
</ul>
<h3>🛡️ Additional Notes</h3>
<h3>Emergency Bypass</h3>
<p>Every admin gets a custom bypass link to avoid accidental lockouts. It’s always visible in the dashboard.</p>
<h3>Blocking Actions</h3>
<p>Choose the experience blocked users receive:<br />
– Custom message<br />
– Redirect to another URL<br />
– Send 403 Forbidden header</p>
<h3>Logs & Privacy</h3>
<p>Logs are stored locally in your WordPress database. The plugin sends only the visitor’s IP to IPWho.is — no personally identifiable information is shared or stored externally.</p>
<h3>💡 Enjoying Geo Blocker? Try Our Other Free Plugins</h3>
<p>Looking for even more control and peace of mind? Check out our other tools:</p>
<p>🔕 <strong><a href="https://wordpress.org/plugins/notification-blocker/" rel="ugc">Notification Blocker</a></strong> – Hide annoying plugin notices from your dashboard without hacking core files.</p>
<p>🛡️ <strong><a href="https://wordpress.org/plugins/fortress-login-pro/" rel="ugc">Fortress Login Pro</a></strong> – Obscure your login page, add brute-force protection, and block unauthorized access attempts with ease.</p>
<p>If you like Geo Blocker, you’ll probably find these just as helpful. Try them out!</p>


Geo Blocker – Control Site Access by Region and IP

🔐 Block or allow visitors by country. Track access attempts. View analytics. Stay in control — effortlessly.

BruteFort vs Geo Blocker – Control Site Access by Region and IP