by IniLerm 4.9 (27 reviews)

Advanced IP Blocker

Name: Advanced IP Blocker
Rating: 4.9 (27 reviews)
Author: IniLerm

A complete WordPress security firewall: blocks IPs, bots, countries & ASN. Includes an intelligent WAF, Threat Scoring, Geo-Challenge, and 2FA.

Advanced IP Blocker ranks #4,120 among WordPress.org plugins with 3,000+ active installations, is #307 of 5,058 in the Security category, a 4.9/5 rating from 27 reviews, and was last updated Oct 27, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4

v8.13.22 Current Version v8.13.22

Updated 1 week ago Last Update on 27 Oct, 2026

Refreshed 1 week ago Last Refreshed on

#307 of 5,058 in Security Top 5% by installs Downloads -10.1% this week Actively maintained

View on WordPress.org

Rank

#4,120

— No change

Active Installs

3K+

+50%

KW Avg Position

18.6

— No change

Downloads

115.4K

+137 today

Support Resolved

100%

— No change

Rating

98%

Review 4.9 out of 5

4.9 (27 reviews)

Next Milestone 4K

Total Progress 79.5%

3K+ 4K+

511

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 205 more installs to reach 4K+

Rank Changes

Current #4,120

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.9

27 reviews

Overall 98%

26 (96%)

0 (0%)

1 (4%)

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

100%

Resolution Rate

Security History

Source: WPVulnerability

1 known vulnerability on record · 1 in the last 24 months · checked 3 months ago

May 27, 2026

Advanced IP Blocker [advanced-ip-blocker] < 8.10.8

CVE-2026-42739 · Fixed in v8.10.8

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 8.13.22
Last Updated: Oct 27, 2026
Requires WP: 5.9+
Tested Up To: 7.1.4
PHP Version: 8.1 or higher
Author: IniLerm

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.9
Reviews: 27
Support Threads: 14
Resolved: 100%

Keywords

2FA firewall Geoblocking security WAF

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security – Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners and administrators who need to protect their site from malicious traffic. It blocks IPs, bots, countries, and ASNs while offering a web application firewall, threat scoring, geo-challenges, and two-factor authentication.

Web Application Firewall (WAF)
Threat Scoring system
Geo-Challenge for high-risk countries
Two-Factor Authentication (2FA)
Country & ASN Blocking
Cloudflare Edge Defense integration
File Integrity Monitor
AbuseIPDB Integration

Frequently Asked Questions

Common questions about Advanced IP Blocker

By default, all users with the Administrator role can access and configure Advanced IP Blocker. If you have multiple administrators but only want specific users to manage security settings, you can explicitly select them in the "Hardening & Core Protection" tab. The primary admin (ID 1) is always protected from lockouts. Other admins will not even see the "Security" menu.

Yes! In the "Hardening & Core Protection" section, you can enable "Block PHP in Uploads". The plugin will automatically place a specialized .htaccess file in your uploads directory to prevent any uploaded scripts from being executed, which is a common backdoor technique used by attackers.

This is a game-changing feature that automatically synchronizes your site's Web Application Firewall with our Central Security Server. Once a day, the plugin securely downloads the latest zero-day vulnerability signatures (e.g., for critical CVEs or widespread exploits) and injects them directly into the scanning engine. This means your site is protected instantly against new threats without waiting for a plugin update. Importantly, these rules run in a dedicated, invisible layer and will NEVER overwrite or interfere with your own custom WAF rules.

This feature automatically blocks incoming traffic from IP addresses that lack an Autonomous System Number (ASN) and Reverse DNS (rDNS) record. Since legitimate traffic almost always has these identifiers, Ghost IPs are often malicious actors trying to hide. Please note that this can cause false positives if a legitimate Internet Service Provider (ISP) has misconfigured their rDNS.

Our new Captcha Integrations allow you to seamlessly connect modern verification challenges like Cloudflare Turnstile and hCaptcha to your security modules. You can set a Global Default Engine and even apply different challenges granularly per module. To ensure your site never breaks, it includes a smart fallback to our invisible JS Challenge if your API keys are ever misconfigured or missing.

Instead of a single global rate limit for your entire site, Advanced Rules allow you to define custom limits for specific URLs or endpoints. You can define the maximum number of requests, the time window, and the specific action (like returning a 429 error, a 403 block, or triggering a Turnstile/hCaptcha challenge) for each endpoint independently. This is ideal for protecting sensitive areas like login pages or APIs with stricter limits while allowing normal traffic on the rest of the site.

This feature automatically engages a global JavaScript challenge to protect your server resources from massive spikes in malicious traffic. It monitors the number of blocks within a specific time window and, if the threshold is reached, it shields the entire site. Legitimate administrators, verified bots (like Googlebot), and explicitly excluded URLs are bypassed. You can configure the thresholds and notification preferences under Security > Settings > Core Protections.

It is a powerful built-in utility located in your Security menu (and top admin bar) that allows you to manually inspect any IP address or Autonomous System Number (ASN). It instantly cross-references the subject against your Geolocation databases, Threat Scoring system, AbuseIPDB, Spamhaus drops, and local whitelists/blocklists. It is the ultimate tool for investigating suspicious traffic or verifying if a legitimate user was blocked by a specific rule.

The scanner checks your site in two ways: Local Scan: Checks for outdated PHP versions, WordPress core updates, debug mode risks, and SSL status. This runs locally and instantly. Deep Scan (Vulnerability Audit): Checks your installed plugins and themes against our central database of known security vulnerabilities (CVEs). This process is manual (you click a button) to ensure it never slows down your site during normal operation.

The Audit Log is your site's "black box". It records critical administrative actions such as plugin activations, settings changes, and file modifications. This helps you identify "who did what and when," which is essential for troubleshooting and security forensics.