Admin Country Allowlist
By far the simplest country allowlist plugin available for WordPress. Locks admin panel and XMLRPC access to a given list of allowed countries using QWeb’s IP to country lookup API. This is free open source software (FOSS), which you’re welcome to either use as-is, or fork and further develop under the very permissive terms of the MIT license. Out of the box, this is most likely the simplest, most efficient plugin for restricting access to your WordPress admin panel to an allowlist of specific countries. Simply install and activate the plugin, obtain an access key via the QWeb Ltd API console, and enter your access key in the plugin settings. The plugin will automatically determine your own country and add this to the allowlist, and you can add other countries to the list as you like. Countries are entered as comma separated ISO 3166-1 alpha-2 country codes in a single field, making it super easy to copy & paste the same list across multiple websites. This plugin also restricts access to the WordPress XMLRPC mechanism, using the same country allowlist. You can optionally choose to allow or disallow access through known public proxy servers, even if they’re located in an allowed country. The plugin creates a cache of IP information and automatically clears cache files older than one week. This reduces the number of lookup requests and keeps your website responsive, without creating an unnecessarily large cache. As a single 25kb file, this is an exceptionally lightweight plugin. Built to be efficient, and using QWeb’s incredibly responsive IP lookup API, the Admin Country Allowlist plugin should be a part of your standard security kit for any WordPress websites that you manage. This plugin relies on QWeb’s IP to country lookup API for IP to country lookups, and will not function without an active API key from this service. QWeb does provide a FREE tier for this API service, suitable for most websites. Please refer to the QWeb Ltd API Terms of Use and QWeb Ltd Privacy Policy.
Top keywords
- country9×2.64%
- api7×2.05%
- qweb7×2.05%
- access6×1.76%
- allowlist5×1.47%
- ip5×1.47%
- countries4×1.17%
- lookup4×1.17%
- wordpress4×1.17%
- admin3×0.88%
- cache3×0.88%
- country allowlist3×0.88%
Country Block – Ultimate Geo-Blocker, IP Ban & Login Security
Country Block provides an exceptionally user-friendly, powerful, and modern IP geolocation blocking experience for WordPress. Our mission is to offer incredible value for free, helping you secure your website and control access with precision and ease. Whether you want to block traffic from specific countries to reduce spam and malicious activity, or ensure your content is only accessible to visitors from designated regions, Country Block offers a flexible and robust solution. Core Features: Effortless Country Blocking: Easily block or allow access from multiple countries or pre-defined groups like the European Union. Visitor IP Detection: Uses the connection IP by default. A trusted proxy header can be selected for Cloudflare, Varnish, or Nginx when the host securely configures that header and protects direct origin access. Express Onboarding Setup: A guided wizard gets you up and running in minutes upon activation. Modern “2030 Era” UI: Enjoy an intuitive, clean, and responsive admin interface that’s a pleasure to use. Flexible Geolocation Source: Free Local Database (GeoLite2 by MaxMind): High-performance, reliable country-level blocking using a local MaxMind GeoLite2 database, updated automatically every day to ensure maximum accuracy. Requires a free MaxMind account for database updates. Whitelisting: Exempt specific IP addresses/CIDR ranges, user roles, or URL paths from blocking rules. Author Credit: The footer credit is enabled by default on new installations of this website-distributed build. Existing saved preferences are preserved when updating. Customizable Block Actions: Show a customizable message (supports basic HTML). Redirect blocked visitors to a specific WordPress page. Detailed Logging & Statistics (Opt-in): Keep track of blocked requests (IP, country, reason, timestamp). View statistics on blocked activity. Option to anonymize logged IPs for privacy. Looking to block VPNs, Proxies, or TOR users? For an additional layer of security and anonymity control, check out our companion plugin: VPN Guard! External Services Country lookups use the local database and do not send visitor IP addresses to MaxMind. Database downloads contact MaxMind from your server and send your license key. MaxMind (GeoLite2 Database) Purpose: Used to download the local geolocation database. Data Sent: Your MaxMind License Key is sent to download the database. Links: Terms of Use | Privacy Policy
Top keywords
- database8×2.25%
- maxmind7×1.97%
