Carl Alberto

Easy IP Blocker is a lightweight security plugin that lets you block unwanted IP addresses directly from your WordPress dashboard. Protect your site from malicious traffic, brute-force login attempts, and spam by maintaining a blocklist with just a few clicks.
Your entire blocklist is stored as a single plain-text option — one entry per line. There is no database table, no import/export workflow, and no complicated UI. Just copy, paste, and save. Back up your list by copying the textarea contents to a text file, or restore it by pasting one back in. It is that simple.
Need to block IPs faster? Use the built-in WP-CLI commands to add, remove, or list entries without ever opening the dashboard.
Features:
<ul>
<li>Block individual IPs, CIDR ranges, or wildcard patterns</li>
<li>CDN/proxy-aware IP detection — supports Cloudflare, Fastly, Akamai, AWS CloudFront, Sucuri, and custom headers</li>
<li>Auto-detects your CDN/proxy and recommends the correct setting</li>
<li>Plain-text flat list — copy and paste to back up, migrate, or restore</li>
<li>WP-CLI support (<code>wp eib add/remove/list/clear</code>) for scripting and automation</li>
<li>Lightweight and fast — no external dependencies, API calls, or extra database tables</li>
<li>Compatible with PHP 7.4 through 8.4</li>
<li>Helps prevent brute-force attacks, spam, and unauthorized access</li>
<li>Comment support — use # to annotate and organize your blocklist</li>
<li>Modern, clean admin interface with tabbed layout</li>
</ul>
Supported CDN / proxy providers:
<ul>
<li>Cloudflare — reads <code>CF-Connecting-IP</code></li>
<li>Fastly — reads <code>Fastly-Client-IP</code></li>
<li>Akamai — reads <code>True-Client-IP</code></li>
<li>AWS CloudFront — reads <code>CloudFront-Viewer-Address</code></li>
<li>Sucuri — reads <code>X-Sucuri-ClientIP</code></li>
<li>Generic proxy — reads <code>X-Forwarded-For</code></li>
<li>Custom header — specify any header name your proxy sets</li>
<li>Direct — uses <code>REMOTE_ADDR</code> when no proxy is in use</li>
</ul>
The plugin auto-detects which CDN or proxy is in front of your site and recommends the correct setting. You can also choose manually from the Settings tab.
Supported blocking formats:
<ul>
<li>Exact IP — <code>192.168.1.1</code></li>
<li>CIDR range — <code>192.168.1.0/24</code> (blocks 192.168.1.0 through 192.168.1.255)</li>
<li>Wildcard — <code>10.0.0.*</code> or <code>172.16.*.*</code> (matches any value in place of *)</li>
<li>Comments — lines starting with <code>#</code> are ignored, useful for notes</li>
</ul>
WP-CLI commands:
<ul>
<li><code>wp eib add <ip>...</code> — Append one or more entries to the blocklist</li>
<li><code>wp eib remove <ip>...</code> — Remove entries from the blocklist</li>
<li><code>wp eib delete <ip>...</code> — Alias for remove</li>
<li><code>wp eib list</code> — Show all blocked IPs and rules</li>
<li><code>wp eib clear</code> — Clear the entire blocklist</li>
</ul>
All commands that accept IPs support multiple entries in a single call. For example:
<pre><code>wp eib add 192.168.1.1 10.0.0.0/24 172.16.0.*
wp eib remove 192.168.1.1 10.0.0.0/24
</code></pre>

Easy IP Blocker

Quickly block unwanted IPs in your WP site with CDN/proxy-aware IP detection

dynahsty

IP Guard is a robust plugin that provides functionality to lock WordPress registered user accounts based on the IP address limit set by the administrator.
The plugin includes many features with a simple interface and uses the wp_mail function to send emails for notifications on locked and unlocked activities. This approach helps enhance security by monitoring and restricting access based on IP addresses, providing an additional layer of protection for user accounts.
For example, if the administrator set allowed IP address for registered users should be 2, once a user reached the limit which is 2, the account gets automatically locked and display a error message on the login page. The admin can decide to manually unlock the account or the user can wait 7 days for an automatic unlock.
Tested with:- 
Login/Signup Popup (Inline Form + Woocommerce) plugin..
Features of IP Guard
<ol>
<li>
Locking mechanism that automatically locks accounts based on set IP address
</li>
<li>
Automatically sends mail notifications for locked and unlocked activities
</li>
<li>
A admin locked accounts page which displays locked accounts, username and a button for manual unlocking. Note – automatic unlock of user accounts is set to 7 days
</li>
<li>
A admin logs page which displays the detected IP address, username and country
</li>
<li>
A admin settings page for configuration of the plugin such as setting the maximum IP address allowed, body text for locked and unlocked emails, custom mail notification logo and copyright text
</li>
<li>
A user statistics page which displays total number of registered users, administrators and locked accounts
</li>
<li>
Similar IP in pattern, structure or share the same first and second octets wont get locked
</li>
</ol>
<h3>Attributions</h3>
Thanks to the provider for the following services and REST APIs for free.
https://ipinfo.io/ (IPv4, IPv6 / free)
<h3>Contributors</h3>
IPGuard is an open-source project and welcomes all contributors from code to design, and implement new features. For more info <a href="https://developer.wordpress.org/block-editor/contributors/" rel="nofollow ugc">Contributor’s Handbook</a> for all the details on how you can help.

IP Guard

IPGuard is a robust security plugin that empowers administrators to safeguard user accounts by implementing IP address-based lockdowns.

Easy IP Blocker vs IP Guard