topsyde

CountryLock provides a simple, lightweight way to allow or block countries from accessing your WordPress site.
It’s designed to be “set it and forget it” with no upsells, ads, or complex configurations.
<h3>✨ Key Features</h3>
<ul>
<li>Master Toggle: Enable or disable the firewall with a single click.</li>
<li>Allowed Countries List: Specify which two-letter country codes (e.g., <code>US</code>, <code>CA</code>) are allowed. Everyone else is blocked.</li>
<li>Admin Bypass: Logged-in administrators can always bypass the block (toggleable).</li>
<li>IP Allowlist: A simple list of IPs or CIDR ranges (like <code>123.45.67.89</code> or <code>10.0.0.0/8</code>) that are always allowed.</li>
<li>Block Logging: See which countries and IPs are being blocked (toggleable).</li>
<li>Zero-Lookup Detection: Automatically uses Cloudflare (<code>HTTP_CF_IPCOUNTRY</code>) and other common server-level GEO headers for instant decisions with zero performance impact.</li>
<li>Remote Lookup: As a fallback, it can query an external service (<code>ipapi.co</code>) if no headers are found.</li>
</ul>
<h3>External Services</h3>
This plugin uses one external service as a fallback to determine a visitor’s country if no local GEO headers (like those from Cloudflare or a server-level GeoIP module) are present.
<ul>
<li>Service: <code>ipapi.co</code></li>
<li>What it’s used for: To look up the country of origin for a visitor’s IP address.</li>
<li>Data Sent: The visitor’s IP address is sent to the service. This happens only if the “Use remote lookup if no geo headers” setting is enabled AND no local GeoIP headers are detected.</li>
<li>Service Policies:
<ul>
<li><a href="https://ipapi.co/terms/" rel="nofollow ugc">Terms of Service</a></li>
<li><a href="https://ipapi.co/privacy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
</li>
</ul>

CountryLock

Block/allow countries with one toggle. Lightweight, no upsells. Includes admin bypass, IP allowlist, and block stats.

IP2Location

This plugin will NOT work if any cache plugin is enabled.
This plugin enables user to block unwanted traffic from accessing your frontend (blog pages) or backend (admin area) by countries or proxy servers. It helps to reduce spam and unwanted sign ups easily by preventing unwanted visitors from browsing a particular page or entire website.
Key Features
<ul>
<li>Allow you to block the access from multiple countries.</li>
<li>Allow you to block the access by country grouping, such as EU, APAC, and so on.</li>
<li>Allow you to block the access from anonymous proxies.</li>
<li>Allow you to block the access by IP ranges.</li>
<li>Allow you to whitelist the crawler, for example, Google, Bing, Yandex, and so on, to index your pages (SEO friendly).</li>
<li>Supports IPv4 and IPv6</li>
<li>Default to 403 error (Permission Denied) display</li>
<li>Allow you to customize your own 403 page.</li>
<li>Send you an email notification if some one is trying to access your admin area.</li>
<li>Provide you statistical report of traffics blocked.</li>
</ul>
This plugin supports both IP2Location BIN data and web service for IP geolocation lookup. If you would like to use the IP2Location geolocation BIN data, you can easily download and update the BIN data via the plugin settings page. Alternatively, you can also download and update the BIN data file manually using the below links:
IP Geolocation file download: 
<a href="https://lite.ip2location.com" title="IP2Location LITE database" rel="nofollow ugc">IP2Location & IP2Proxy LITE database (Free)</a> 
<a href="https://ip2location.com" title="IP2Location commercial database" rel="nofollow ugc">IP2Location & IP2Proxy Commercial database (Comprehensive)</a>
To use the IP2Location IP geolocation web service (REST API) for geolocation, you’ll need to register an account at <a href="https://www.ip2location.io" title="IP2Location.io IP Geolocation API" rel="nofollow ugc">IP2Location.io IP Geolocation API</a>. A free plan is available.
<h4>More Information</h4>
Please visit us at <a href="https://www.ip2location.com" title="https://www.ip2location.com" rel="nofollow ugc">https://www.ip2location.com</a>

IP2Location Country Blocker

Plugin does it job, it blocks unwanted countries
Although it misses some functionality:
1. Not possible to set a threshold after which the IP gets blocked forever.
2. The email sent is not very clear from which part of the site it is coming frontend or backend


Great plugin for blocking foreighn countries

Blocks unwanted visitors from accessing your frontend (blog pages) or backend (admin area) by countries or proxy servers.

CountryLock vs IP2Location Country Blocker