Nexiby LLC

Atiqur Rahman

NexiGuard – IP & Geo Access Control is a public WordPress access control plugin for administrators who need to restrict site access using local IP rules and optional GeoIP data.
Features include:
<ul>
<li>Block List mode: visitors matching rules are blocked.</li>
<li>Allow List mode: only visitors matching rules are allowed.</li>
<li>Exact IP address rules.</li>
<li>CIDR range rules for IPv4 and IPv6.</li>
<li>Country and region/state rules when a GeoIP provider is configured.</li>
<li>Optional blocking for the frontend, login page, REST API, and XML-RPC.</li>
<li>403, 404, or custom blocked responses.</li>
<li>Custom blocked messages with plain text and basic safe HTML.</li>
<li>Safe visitor IP detection using REMOTE_ADDR by default.</li>
<li>Optional Cloudflare visitor IP detection.</li>
<li>Optional trusted proxy header support.</li>
<li>Bulk import for IP/CIDR rules.</li>
<li>Export and import settings as JSON.</li>
<li>Optional minimal blocked-attempt logs.</li>
<li>Admin lockout protection and an emergency bypass constant.</li>
</ul>
<h4>Privacy and GeoIP</h4>
IP blocking works without any third-party service. Country and region blocking requires either a readable local GeoIP database or an explicitly configured API provider.
Visitor IP addresses are not sent externally unless an administrator selects API provider mode and configures an API endpoint. Optional logs store only date/time, IP address, matched rule type, and requested path.
<h4>Admin safety</h4>
NexiGuard is disabled by default after activation. Logged-in administrators are never blocked by default. The admin screen displays the detected admin IP and requires confirmation before adding an IP/CIDR rule that matches it.
Emergency bypass: define <code>NEXIGUARD_DISABLE</code> as <code>true</code> in <code>wp-config.php</code> to stop all blocking.
<h3>External Services</h3>
NexiGuard does not contact any external service by default.
If an administrator selects API provider mode and configures an API endpoint, NexiGuard sends a GET request to that administrator-configured endpoint to look up country and region data for visitor IP addresses. The visitor IP address is sent in the configured URL using the <code>{ip}</code> placeholder or as an <code>ip</code> query parameter. If an API key is configured, it is sent as a Bearer token in the Authorization header.
Because the API endpoint is entered by the site administrator, the site owner is responsible for reviewing that provider’s terms of service and privacy policy before enabling API provider mode.
Local IP and CIDR blocking do not use any external service. MaxMind mode reads a local database file and does not send visitor IPs externally.
<h3>License</h3>
NexiGuard – IP & Geo Access Control is licensed under GPL-2.0-or-later.

NexiGuard – IP & Geo Access Control

Restrict website access by IP addresses, CIDR ranges, countries, and regions.

inazo

[EN]Tor Blocker
As soon as you enable it it will block any connection to your site for Tor network users.
Please use this plugin only on commercial sites that have no reason to know traffic from Tor. Thank you for not blocking tutorial sites, courses, computer security etc. Which could be used by people in non-free Internet areas.
Tor users will be blocked in front and back office. To unblock access you just need to disable it.
The blocking takes place at the earliest in the execution of the code of your site to limit the consume in resources of this kind of visitor.
For works the plugin send DNS request to *ip-port.exitlist.torproject.org, the request ask to torproject if the user’s IP address is an exit nodes or not.
Term of use of Tor Network : https://www.torproject.org/docs/trademark-faq.html.en
[FR]Tor Blocker
Dès que vous l’activez il va bloquer toute connexion à votre site pour les utilisateurs du réseau Tor.
Merci d’utiliser ce plugin uniquement sur des sites commerciaux qui n’ont aucune raison de connaître du traffic provenant de Tor. Merci de ne pas bloquer les sites de tutos, cours, sécurité informatique etc. qui pourraient être utilisé par des personnes dans des zones d’Internet non libre.
Les utilisateurs de Tor seront bloqués en front et en back office. Pour en débloquer l’accès il vous suffit de le désactiver.
Le blocage à lieu au plus tôt dans l’éxécution du code de votre site pour limiter la consomation en ressources de ce genre de visiteur.
Pour fonctionner le plugin envoi une requête DNS à *ip-port.exitlist.torproject.org. La requête va demander à torproject.org si l’adresse IP de l’utilisateur est un noued de sortie du réseau TOR.
CGU : https://www.torproject.org/docs/trademark-faq.html.en
Copyright icon onion : http://fr.freepik.com/vecteurs-libre/collection-d-39-icones-de-legumes_948406.htm

Tor Blocker by Inazo

This plugin blocks Tor users by preventing them from viewing your website.

NexiGuard – IP & Geo Access Control vs Tor Blocker by Inazo