TrustBrain

<p>TrustBrain IP Access Control is a security plugin for WordPress that provides comprehensive IP-based access control:</p>
<h4>Access Control Features</h4>
<ul>
<li>Country-based access control (whitelist/blacklist)</li>
<li>IP address and CIDR whitelist/blacklist</li>
<li>ASN (Autonomous System Number) based blocking</li>
<li>Separate settings for backend (admin area) and frontend</li>
<li>XML-RPC and REST API protection</li>
<li>Comment and trackback spam protection</li>
<li>Access logging and statistics</li>
<li>Emergency access URL for lockout recovery</li>
</ul>
<h4>GeoIP Integration</h4>
<p>This plugin uses MaxMind GeoLite2 databases for IP geolocation. You need to obtain a free license key from <a href="https://www.maxmind.com/en/geolite2/signup" rel="nofollow ugc">MaxMind</a> to use the geolocation features.</p>
<h3>Privacy Policy</h3>
<p>This plugin stores access logs including IP addresses for security purposes. The logs are stored locally in your WordPress database and can be configured to auto-delete after a specified retention period.</p>
<p>This plugin uses MaxMind GeoLite2 databases for IP geolocation. The databases are stored locally and no IP data is sent to external services during normal operation.</p>
<h3>Third-Party Services</h3>
<p>This plugin optionally connects to MaxMind servers to download GeoLite2 database updates. This only occurs when you manually trigger an update or enable automatic updates. No visitor data is transmitted.</p>
<ul>
<li>MaxMind GeoLite2: https://www.maxmind.com/en/geolite2/eula</li>
<li>Privacy Policy: https://www.maxmind.com/en/privacy-policy</li>
</ul>


TrustBrain IP Access Control

GeoIP-based access control plugin with country blocking, IP whitelist/blacklist, and access logging.

CordonAI

<p>CordonAI Geo Access and Redirect lets you decide who can reach your WordPress<br />
site based on the visitor’s country and IP address. Everything runs through<br />
standard WordPress hooks — the plugin never modifies <code>wp-config.php</code>,<br />
    .htaccess, or any core file.</p>
<p>Country lookups use a bundled MaxMind GeoLite2 database that ships with the<br />
plugin, so <strong>no external request is made when a visitor is checked</strong>. If you<br />
want fresher data you can add a free MaxMind license key and update the<br />
database on demand or weekly.</p>
<p><strong>Features</strong></p>
<ul>
<li>Block (or allow) front-end visitors by country and by IP address.</li>
<li>Protect the login page and admin area by country/IP, with brute-force-friendly<br />
defaults — established administrators are never locked out of the dashboard.</li>
<li>IP rules support exact addresses, wildcards (<code>203.0.113.*</code>) and CIDR ranges<br />
(<code>203.0.113.0/24</code>), for both IPv4 and IPv6.</li>
<li>Allow-list that always wins over any block rule.</li>
<li>Crawler allow-list (Google, Bing, Yandex, and more) so blocking a country<br />
never hurts your search visibility.</li>
<li>Country redirects, including “keep the current path” (<code>%PATH%</code>) redirects.</li>
<li>Language-prefix URL rewriting for multilingual sites (e.g. <code>/en/</code> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <code>/it/</code>).</li>
<li>Logs and at-a-glance charts of blocked activity (24 hours / 7 days / 30 days).</li>
<li>Fully customisable block screen with a live preview.</li>
<li>Offline by design — privacy friendly, no tracking, no ads, no upsells.</li>
<li>Optional MaxMind GeoLite2 auto-update with your own license key.</li>
</ul>
<h3>External services</h3>
<p>This plugin can optionally connect to one external service, MaxMind, to update<br />
its bundled GeoIP database. It is used only for downloading database updates and<br />
is never contacted during normal visitor lookups.</p>
<ul>
<li>What it is and what it is used for: MaxMind GeoLite2 provides the<br />
IP-to-country database the plugin uses to detect a visitor’s country. The<br />
bundled copy works fully offline; this service is only used to download a newer<br />
copy of that database when you choose to.</li>
<li>What data is sent and when: a request is sent to<br />
https://download.maxmind.com/app/geoip_download only when a site administrator<br />
has entered a MaxMind license key and then either clicks “Update database now”<br />
on the Settings tab or has enabled the weekly automatic update. The request<br />
includes your MaxMind license key (so MaxMind can authorise the download) and,<br />
as with any HTTP request, your server’s IP address. No visitor data and no site<br />
content are ever sent. If you do not enter a license key, the plugin makes no<br />
external requests at all.</li>
<li>Service provider: MaxMind, Inc.<br />
GeoLite2 End User License Agreement: https://www.maxmind.com/en/geolite2/eula<br />
Privacy Policy: https://www.maxmind.com/en/privacy-policy</li>
</ul>


CordonAI Geo Access and Redirect

Block or allow WordPress visitors by country and IP, redirect by location, and log activity using an offline GeoIP database.

TrustBrain IP Access Control vs CordonAI Geo Access and Redirect