polarmass

Automatically Block Malicious IPs with Cloudflare 
Protect your WordPress site from hackers and brute-force attacks. This free plugin automatically blocks malicious IPs detected by Wordfence and integrates with Cloudflare for real-time security.
<h4>Features</h4>
<ul>
<li>🔒 Automatic IP Blocking – Blocks malicious IPs detected by Wordfence.</li>
<li>⚡ Cloudflare Integration – Uses Cloudflare’s API for real-time threat mitigation.</li>
<li>📉 Reduces Server Load – Shifts security tasks from WordPress to Cloudflare.</li>
<li>🏆 Lightweight & Fast – Security without slowing down your site.</li>
<li>🛠️ Easy Setup – Just enter your Cloudflare API key and Zone ID.</li>
<li>🆓 Free & Open Source – Transparent and continuously improved.</li>
</ul>
<h3>License</h3>
This plugin is licensed under the <a href="https://www.gnu.org/licenses/gpl-2.0.html" rel="nofollow ugc">GPL v2 or later</a>.
<h3>Support</h3>
For support, feature requests, or bug reports, open an issue or reach out via <a href="mailto:contact@polarmass.com" rel="nofollow ugc">email</a>.
<h3>External Services</h3>
To improve the user experience, Polar Mass Advanced IP Blocker may use the following third-party services:
<h4>Cloudflare API (https://api.cloudflare.com/client/v4/)</h4>
This plugin integrates with Cloudflare’s API to manage IP rules and firewall settings, helping block malicious traffic in real-time. 
– Users must manually enter their Cloudflare API Key and Zone ID in the plugin settings to enable this feature. 
– No automatic data collection occurs without user input. 
– When configured, the plugin securely sends user-defined IPs and rules to Cloudflare’s servers. 
– Cloudflare Privacy Policy: <a href="https://www.cloudflare.com/privacypolicy" rel="nofollow ugc">https://www.cloudflare.com/privacypolicy</a>
<h4>Polar Mass API (https://polarmass.com/wp-json/pmip/v1/newsletter/signup)</h4>
This plugin provides an optional newsletter signup form within the admin panel. 
– The only data collected is the email address entered by the user. 
– This data is securely transmitted to our server at polarmass.com. 
– No personal information is shared or processed without explicit user consent. 
– Privacy Policy: <a href="https://polarmass.com/privacy-policy/" rel="nofollow ugc">https://polarmass.com/privacy-policy/</a>
For more details, please review our <a href="https://polarmass.com/terms-and-conditions/" rel="nofollow ugc">Terms and Conditions</a> and <a href="https://polarmass.com/privacy-policy/" rel="nofollow ugc">Privacy Policy</a>.

Polar Mass Advanced IP Blocker

Automatically block threats at the network level by forwarding Wordfence-detected IPs to Cloudflare.

Carl Alberto

Easy IP Blocker is a lightweight security plugin that lets you block unwanted IP addresses directly from your WordPress dashboard. Protect your site from malicious traffic, brute-force login attempts, and spam by maintaining a blocklist with just a few clicks.
Your entire blocklist is stored as a single plain-text option — one entry per line. There is no database table, no import/export workflow, and no complicated UI. Just copy, paste, and save. Back up your list by copying the textarea contents to a text file, or restore it by pasting one back in. It is that simple.
Need to block IPs faster? Use the built-in WP-CLI commands to add, remove, or list entries without ever opening the dashboard.
Features:
<ul>
<li>Block individual IPs, CIDR ranges, or wildcard patterns</li>
<li>CDN/proxy-aware IP detection — supports Cloudflare, Fastly, Akamai, AWS CloudFront, Sucuri, and custom headers</li>
<li>Auto-detects your CDN/proxy and recommends the correct setting</li>
<li>Plain-text flat list — copy and paste to back up, migrate, or restore</li>
<li>WP-CLI support (<code>wp eib add/remove/list/clear</code>) for scripting and automation</li>
<li>Lightweight and fast — no external dependencies, API calls, or extra database tables</li>
<li>Compatible with PHP 7.4 through 8.4</li>
<li>Helps prevent brute-force attacks, spam, and unauthorized access</li>
<li>Comment support — use # to annotate and organize your blocklist</li>
<li>Modern, clean admin interface with tabbed layout</li>
</ul>
Supported CDN / proxy providers:
<ul>
<li>Cloudflare — reads <code>CF-Connecting-IP</code></li>
<li>Fastly — reads <code>Fastly-Client-IP</code></li>
<li>Akamai — reads <code>True-Client-IP</code></li>
<li>AWS CloudFront — reads <code>CloudFront-Viewer-Address</code></li>
<li>Sucuri — reads <code>X-Sucuri-ClientIP</code></li>
<li>Generic proxy — reads <code>X-Forwarded-For</code></li>
<li>Custom header — specify any header name your proxy sets</li>
<li>Direct — uses <code>REMOTE_ADDR</code> when no proxy is in use</li>
</ul>
The plugin auto-detects which CDN or proxy is in front of your site and recommends the correct setting. You can also choose manually from the Settings tab.
Supported blocking formats:
<ul>
<li>Exact IP — <code>192.168.1.1</code></li>
<li>CIDR range — <code>192.168.1.0/24</code> (blocks 192.168.1.0 through 192.168.1.255)</li>
<li>Wildcard — <code>10.0.0.*</code> or <code>172.16.*.*</code> (matches any value in place of *)</li>
<li>Comments — lines starting with <code>#</code> are ignored, useful for notes</li>
</ul>
WP-CLI commands:
<ul>
<li><code>wp eib add <ip>...</code> — Append one or more entries to the blocklist</li>
<li><code>wp eib remove <ip>...</code> — Remove entries from the blocklist</li>
<li><code>wp eib delete <ip>...</code> — Alias for remove</li>
<li><code>wp eib list</code> — Show all blocked IPs and rules</li>
<li><code>wp eib clear</code> — Clear the entire blocklist</li>
</ul>
All commands that accept IPs support multiple entries in a single call. For example:
<pre><code>wp eib add 192.168.1.1 10.0.0.0/24 172.16.0.*
wp eib remove 192.168.1.1 10.0.0.0/24
</code></pre>

Easy IP Blocker

Quickly block unwanted IPs in your WP site with CDN/proxy-aware IP detection

Polar Mass Advanced IP Blocker vs Easy IP Blocker