by tokkonopapa
4.1 (96 reviews)
IP Geo Block
It blocks spam posts, login attempts and malicious access to the back-end requested from the specific countries, and also prevents zero-day exploit.
Tested up to WP 5 (Current: 6.9)
v3.0.17.4
Current Version v3.0.17.4
Updated 6 years ago
Last Update on 22 Jan, 2019
Synced 15 hours ago
Last Synced on
Rank
#2,242
—
No change
Active Installs
10K+
-11.9%
KW Avg Position
71.5
—
No change
Downloads
777.1K
+3 today
Support Resolved
0%
—
No change
Rating
82%
Review 4.1 out of 5
4.1
(96 reviews)
Next Milestone 20K
10K+
20K+
741
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 9,149 more installs to reach 20K+
Rank Changes
Current
#2,242
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
4.1
96 reviews
Overall
82%
5
71
(74%)
4
4
(4%)
3
2
(2%)
2
1
(1%)
1
18
(19%)
Tracked Keywords
Showing 2 of 2| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| firewall | 68 | — | Tag | 16 hours ago |
| Brute Force | 75 | — | Tag | 16 hours ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 3.0.17.4
- Last Updated
- Jan 22, 2019
- Requires WP
- 3.7+
- Tested Up To
- 5
- PHP Version
- N/A
- Author
- tokkonopapa
Support & Rating
- Rating
- ★ ★ ★ ★ ☆ 4.1
- Reviews
- 96
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
7K+ installs
#2,735
Master Addons For Elementor - White Label, Free Widgets, Hover Effects, Conditions, & Animations
40K+ installs
#929
User Switching
200K+ installs
#252
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
200K+ installs
#256
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
200K+ installs
#267
Frequently Asked Questions
Common questions about IP Geo Block
This plugin is designed based on the principle of "Privacy by design" so that you can compliantly run it to GDPR. As guarding against personal data breach, IP addresses in this plugin are encrypted and also can be anonymized by default. It also provides some functions not only to manually erase them but also to automatically remove them when those are exceeded a certain amount/time.
Yes. You can synchronize the settings with all the sites on the network when you activate on network and enable "Network wide settings" in "Plugin settings" section.
The short answer is YES, especially for the purpose of security e.g. blocking malicious access both on the back-end and on the front-end. You can find the long answer and the compatibility list of cache plugins at "Compatibility with cache plugins".
Absolutely, YES. Sometimes, a Wordfence Security user would report this type of claim when he/she found some accesses in its Live traffic view. But please don't worry. Before WordPress runs, Wordfence cleverly filters out malicious requests to your site using auto_prepend_file directive to include PHP based Web Application Firewall. Then this plugin validates the rest of the requests that pass over Wordfence because those were not in WAF rules, especially you enables "Prevent Zero-day Exploit". It would also possibly be caused by the accuracy of country code in the geolocation databases. Actually, there is a case that a same IP address has different country code. For more detail, please refer to "I still have access from blacklisted country.".
The easiest way is to use free proxy browser addon. Another one is to use http header browser addon. You can add an IP address to the X-Forwarded-For header to emulate the access behind the proxy. In this case, you should add HTTP_X_FORWARDED_FOR into the "$_SERVER keys for extra IPs" on "Settings" tab. See more details at "How to test prevention of attacks".
Please find the solution in Quick recovery from blocking on your login page at first. You can also find another solution by editing "Emergent Functionality" code section near the bottom of ip-geo-block.php. This code block can be activated by replacing /* (opening multi-line comment) at the top of the line to // (single line comment), or * at the end of the line to */ (closing multi-line comment). /** * Invalidate blocking behavior in case yourself is locked out. * * How to use: Activate the following code and upload this file via FTP. */ /* -- ADD '/' TO THE TOP OR END OF THIS LINE TO ACTIVATE THE FOLLOWINGS -- */ function ip_geo_block_emergency( $validate, $settings ) { $validate['result'] = 'passed'; return $validate; } add_filter( 'ip-geo-block-login', 'ip_geo_block_emergency', 1, 2 ); add_filter( 'ip-geo-block-admin', 'ip_geo_block_emergency', 1, 2 ); // */ Please not that you have to use an appropriate editor. After saving and uploading it to /wp-content/plugins/ip-geo-block/ on your server via FTP, you become to be able to login again as an admin. Remember that you should upload the original one after re-configuration to deactivate this feature. This document can also help you.
Yes. Roughly speaking, the strategy of this plugin has been constructed as follows: Block by country It blocks malicious requests from outside your country. Prevent Zero-day Exploit It blocks malicious requests from your country. Force to load WP core It blocks the request which has not been covered in the above two. Bad signatures in query It blocks the request which has not been covered in the above three. Please try "Best for Back-end" button at the bottom of this plugin's setting page for easy setup. And also see more details in "The best practice of target settings".
Unfortunately, no. This plugin can't handle the requests that are not parsed by WordPress. In other words, a standalone file (PHP, CGI or something excutable) that is unrelated to WordPress can't be validated by this plugin even if it is in the WordPress install directory. But there're exceptions: When you enable "Force to load WP core" for Plugins area or Themes area, a standalone PHP file becomes to be able to be blocked. Sometimes this kind of file has some vulnerabilities. This function protects your site against such a case.
If you encounter this message, please refer to this document to resolve your blocking issue. If you can't solve your issue, please let me know about it on the support forum. Your logs in this plugin and "Installation information" at "Plugin settings" will be a great help to resolve the issue.
When you enable "Force to load WP core" options, this plugin will try to configure .htaccess in your /wp-content/plugins/ and /wp-content/themes/ directory in order to protect your site against the malicous attacks to the OMG plugins and themes. But some servers doesn't give read / write permission against .htaccess to WordPress. In this case, you can configure .htaccess files by your own hand instead of enabling "Force to load WP core" options. Please refer to "How can I fix permission troubles?" in order to fix this error.