Rick Curran

This plugin restricts access to the login page of your WordPress Admin based on the location of the user trying to access it. Restricting access in this way can be a useful way of reducing unwanted login attempts. 
To get the location of the user the plugin gets the IP address of the user attempting to access the login page and geo-locates their location by using a geolocation API, currently there are three options available to use:
<ul>
<li>IPStack: http://ipstack.com</li>
<li>IPGeolocation: https://ipgeolocation.io</li>
<li>OpenLiteSpeed’s local GeoIP variables</li>
</ul>
Please note: an active API Key is required for <code>IPStack</code> and <code>IPGeolocation</code> for the plugin to function correctly. You can register a free account at either of the website addresses above. Please note they offer varying amounts of location API requests for their free and paid plans, it may be necessary to upgrade to a paid plan to provide an increased amount of requests if your site gets a huge amount of login attempts. The <code>OpenLiteSpeed’s local GeoIP variables</code> option can be used if you are using OpenLiteSpeed server and have a properly configured geolocation database, more information about configuring that is available here: https://docs.openlitespeed.org/config/advanced/geolocation/#enabling-geolocation
<h3>Example usage:</h3>
Enable the plugin and access the “RC Geo Access” page in the Settings menu in your WordPress Admin to configure the required settings. Note: an active API Key is required for this plugin to function, currently there are two external Geolocation services available to use, you can choose from either ‘IPStack’ – http://ipstack.com and ‘IPGeolocation’ – https://ipgeolocation.io as the geolocation providers. The <code>OpenLiteSpeed’s local GeoIP variables</code> option can be used if you are using OpenLiteSpeed server and have a properly configured geolocation database, more information about configuring that is available here: https://docs.openlitespeed.org/config/advanced/geolocation/#enabling-geolocation

RC Geo Access Plugin

This plugin restricts access to the login page of your WordPress Admin based on the location of the user trying to access it.

brstefanovic

Advanced Country Blocker helps you secure your WordPress site by restricting access based on the visitor’s geolocation (country) or IP address. Upon activation, the plugin detects the activating admin’s country and automatically sets that as the only allowed country. All other visitors from different countries are blocked, unless they use a secret key parameter to temporarily whitelist their IP. Country detection uses the privacy-friendly ip-api.com service by default but can be switched to a fully offline MaxMind GeoLite2 (or compatible) database file once you configure a local copy.
Key Features:
<ul>
<li>Automatically allows the admin’s country on plugin activation.</li>
<li>Flexible IP-to-country lookups – start with the built-in ip-api.com integration and optionally switch to an offline MaxMind GeoLite2 Country (or compatible) <code>.mmdb</code> database file.</li>
<li>Allowlist or blacklist mode – choose whether the country list acts as an allowlist or blocklist without re-entering countries.</li>
<li>Temporary access via a customizable secret URL parameter (e.g., <code>?MySecretKey=1</code>).</li>
<li>CAPTCHA Challenge – allow blocked visitors to solve a CAPTCHA to gain temporary access (supports Google reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile).</li>
<li>Real-Time Activity Monitor – live dashboard showing active visitors, recent blocks, and traffic statistics.</li>
<li>Analytics Dashboard – comprehensive charts and statistics about blocked attempts.</li>
<li>Manual blacklisting and safelisting of IPs for added security and to accommodate uptime monitors.</li>
<li>Optional email alerts when new visitors are blocked.</li>
<li>Admin bypass so logged-in admins can always access the site (toggleable in the code).</li>
<li>Detailed logging of blocked attempts in a custom database table, displayed in the WP admin.</li>
<li>Custom response controls – personalise the block page title/message, choose the HTTP status (403, 410, 451) or redirect to any URL.</li>
<li>Automatic log cleanup with configurable retention plus a one-click “Clear Logs” button.</li>
</ul>
Use the plugin settings page (Country Blocker menu in WP admin) to configure the list of allowed countries, blacklisted countries, blacklisted IPs, and whether email alerts are enabled.
<h3>License</h3>
This plugin is open-sourced software licensed under the <a href="https://www.gnu.org/licenses/gpl-3.0.html" rel="nofollow ugc">GPLv3 or later</a>.
<h3>External Services</h3>
By default this plugin contacts the ip-api.com geolocation service to detect visitor countries. You can disable all external lookups by switching the IP lookup method to the local MaxMind database in the settings.

Advanced Country Blocker


It's a simple plugin that simply works. 



Also, I made it, so ofc 5 stars. =D


Simply works

An advanced security plugin that blocks website visitors by country, with additional features like blacklisting, logging blocked attempts, admin bypas …

RC Geo Access Plugin vs Advanced Country Blocker