TrustBrain

TrustBrain IP Access Control is a security plugin for WordPress that provides comprehensive IP-based access control:
<h4>Access Control Features</h4>
<ul>
<li>Country-based access control (whitelist/blacklist)</li>
<li>IP address and CIDR whitelist/blacklist</li>
<li>ASN (Autonomous System Number) based blocking</li>
<li>Separate settings for backend (admin area) and frontend</li>
<li>XML-RPC and REST API protection</li>
<li>Comment and trackback spam protection</li>
<li>Access logging and statistics</li>
<li>Emergency access URL for lockout recovery</li>
</ul>
<h4>GeoIP Integration</h4>
This plugin uses MaxMind GeoLite2 databases for IP geolocation. You need to obtain a free license key from <a href="https://www.maxmind.com/en/geolite2/signup" rel="nofollow ugc">MaxMind</a> to use the geolocation features.
<h3>Privacy Policy</h3>
This plugin stores access logs including IP addresses for security purposes. The logs are stored locally in your WordPress database and can be configured to auto-delete after a specified retention period.
This plugin uses MaxMind GeoLite2 databases for IP geolocation. The databases are stored locally and no IP data is sent to external services during normal operation.
<h3>Third-Party Services</h3>
This plugin optionally connects to MaxMind servers to download GeoLite2 database updates. This only occurs when you manually trigger an update or enable automatic updates. No visitor data is transmitted.
<ul>
<li>MaxMind GeoLite2: https://www.maxmind.com/en/geolite2/eula</li>
<li>Privacy Policy: https://www.maxmind.com/en/privacy-policy</li>
</ul>

TrustBrain IP Access Control

GeoIP-based access control plugin with country blocking, IP whitelist/blacklist, and access logging.

stupidsimpleplugins

Trying to comply with every law in every country or state can be overwhelming. For many websites, blocking traffic from specific regions is a faster and more reliable alternative to implementing dozens of complex legal requirements individually.
Examples of compliance areas where blocking can help include:
<ul>
<li>Age verification rules for adult, gaming, or alcohol-related content </li>
<li>Data privacy regulations such as GDPR (EU), LGPD (Brazil), or CCPA (California) </li>
<li>Content restrictions for gambling, streaming, or licensed media </li>
<li>Financial regulations affecting payments, crypto, or banking services </li>
<li>Tax obligations that differ across borders </li>
<li>Advertising and marketing restrictions unique to certain jurisdictions </li>
</ul>
Instead of building compliance systems for every region, simply block the ones you don’t serve.
Plug and Play Geoblocker Lite makes this simple, fast, and private. Activate, select countries to block, and it immediately restricts access with a clean 403 page — no complicated setup.
If you need more power, the Pro version adds state-level blocking (U.S. states, Canadian provinces, UK regions, and more), visual message customization with full color control, advanced logs and analytics, and support for a local MaxMind GeoLite2 database for full independence from remote APIs.
<h3>Features</h3>
<ul>
<li>Country-level blocking – Block visitors from any country with a simple checkbox</li>
<li>Allow search crawlers – Let Google, Bing, and other search engines bypass blocking</li>
<li>VPN/datacenter detection – Optional blocking of known hosting providers and VPN services</li>
<li>Unknown IP policy – Choose to allow or block visitors when country can’t be determined</li>
<li>MaxMind GeoLite2 support – Use local database for more accurate geolocation (requires free license key)</li>
<li>Basic logging – Track blocked and allowed access attempts</li>
<li>Emergency bypass – Special URL parameter to temporarily bypass blocking if needed</li>
<li>Admin/login always allowed – WordPress admin and login pages are never blocked</li>
</ul>
<h3>External services</h3>
This plugin uses third-party IP geolocation APIs to detect a visitor’s country. The visitor’s IP is sent to one or more providers to retrieve the country code and ASN. Lite mode stores no permanent logs — only basic entries in the admin “Logs” tab and short-term transient caching to reduce API requests.
Providers used (in failover order), with terms and privacy:
1) IPWHOIS — https://ipwhois.io/terms / https://ipwhois.io/privacy 
2) ip-api — https://ip-api.com/docs/legal / https://ip-api.com/privacy 
3) ipapi — https://ipapi.co/terms/ / https://ipapi.co/privacy/ 
4) IPinfo — https://ipinfo.io/terms-of-service / https://ipinfo.io/privacy-policy

Plug and Play Geoblocker Lite


Great for Blocking unwanted traffic from specific countries


Best Geo Blocker

Fast, privacy-friendly country-level access blocker with optional local MaxMind database, built-in logs, and easy setup.

TrustBrain IP Access Control vs Plug and Play Geoblocker Lite