Tighten your website security and fight against dictionary bot attacks originating from other countries, by denying access.
As of April 2026, Login IP & Country Restriction is a WordPress block ip plugin with 7.0K+ active installations and a 4.6/5 rating from 51 reviews. It has been downloaded 113K+ times in total. Requires WordPress 5.1+ and PHP 7.2+. Available on WordPress.org since 2014. Download volume is stable this week. Support resolution rate: 0%. Top alternative: Country Access Blocker.
This plugin hooks in the authenticate filter. By default, the plugin is set to allow all access and you can configure the plugin to allow the login only from some specified IPs or the specified countries. PLEASE MAKE SURE THAT YOU CONFIGURE THE PLUGIN TO ALLOW YOUR OWN ACCESS. If you set a restriction by IP, then you have to add your own IP (if you are using the plugin in a local setup the IP is 127.0.0.1 or ::1, this is added in your list by default). If you set a restriction by country, then you have to select from the list of countries at least your country. Both types of restrictions work independent, so you can set only one type of restriction or both if you want. Also, you can configure the redirects to frontpage when the URLs are accessed by someone that has a restriction. The rest…
The plugin stopped all bot attempts to log in onto my website, and I am no longer invaded by notifications of those failed attempts.
We use a hosting service that oesn’t allow for easy country restrictions – this plugin is our saviour.
it seems it doesn’t block South Africa
Edit:
Rating changed because the add-on has been updated and now works.
This plugin uses the geoplugin.net service, which is no longer free, so the plugin no longer works either.
This is a message:
“geoPlugin API is no longer available for free use. To continue access, please upgrade to a paid plan”
I had an increase in incorrect login attempts, it started with a few and then quickly escalated to over 600 per day. From another plugin came the hint with GEO blocking by IP, then I came across this plugin and then had everything blocked except for my own country. Finally only 1-2 per day. Thank you
| WordPress | 5.1+ requiredTested up to 6.9.4 |
| PHP | 7.2+ required |
See the changelog for detailed information on changes made in the earlier versions.
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.