by Darko G. 4.6 (34 reviews)

IP Location Block

Name: IP Location Block
Rating: 4.6 (34 reviews)
Author: Darko G.

Easily block visitors by country, state or ISP provider. Also, protects your site from spam, login attempts, malicious access & more.

IP Location Block ranks #1,624 among WordPress.org plugins with 10,000+ active installations, is #27 of 878 in the Maps & Location category, a 4.6/5 rating from 34 reviews, and was last updated Jul 5, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.0.2

v1.3.9 Current Version v1.3.9

Updated 3 weeks ago Last Update on 05 Jul, 2026

Refreshed 7 hours ago Last Refreshed on

#27 of 878 in Maps & Location Top 5% by installs Downloads -55.7% this week Actively maintained

View on WordPress.org

Rank

#1,624

— No change

Active Installs

10K+

-43.3%

KW Avg Position

0.4 worse

Downloads

215.8K

+87 today

Support Resolved

50%

— No change

Rating

92%

Review 4.6 out of 5

4.6 (34 reviews)

Next Milestone 20K

Total Progress 76.8%

10K+ 20K+

181

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 2,324 more installs to reach 20K+

Rank Changes

Current #1,624

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.6

34 reviews

Overall 92%

28 (82%)

3 (9%)

0 (0%)

1 (3%)

2 (6%)

Tracked Keywords

Showing 5 of 5

Keyword	Position	Change	Type	Updated
ip geo block	1	—	Tag	19 hours ago
ip address	5	—	Tag	19 hours ago
geolocation	25	—	Tag	19 hours ago
country	35	—	Tag	19 hours ago
block	44	—	Tag	19 hours ago

Unlock Keyword Analytics

Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.

Full keyword position tracking
Historical ranking data
Competitor keyword analysis

Upgrade to Pro

Upgrade Plan

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

50%

Resolution Rate

Security History

Source: WPVulnerability

No known vulnerabilities on record for IP Location Block. Checked 2 days ago.

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.3.9
Last Updated: Jul 05, 2026
Requires WP: 3.7+
Tested Up To: 7.0.2
PHP Version: N/A
Author: Darko G.

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.6
Reviews: 34
Support Threads: 2
Resolved: 50%

Keywords

block country geolocation ip address ip geo block

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

7K+ installs

#2,722

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#991

WP Go Maps - Google Map, OpenStreetMap, Leaflet Map

Advanced Ads – Ad Manager & AdSense

100K+ installs

#435

WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat

Events Manager – Calendar, Bookings, Tickets, and more!

View all Maps-and-location plugins

TL;DR

AI summary of the plugin's readme

IP Location Block is for WordPress site owners who want to control access based on visitor location and defend against common attacks. It blocks or allows visitors by country, state, or ISP, and adds protections against spam, brute-force login attempts, and malicious requests.

Block by country, state or ISP
Native Geo-Location Provider
IP address encryption in logs
Country-based backend entrance protection
Login attempt limiting
Must Use Plugins support
Blocks malicious down/uploading
Blocks bad bots and crawlers

Frequently Asked Questions

Common questions about IP Location Block

This plugin is designed based on the principle of "Privacy by design" so that you can compliantly run it to GDPR. As guarding against personal data breach, IP addresses in this plugin are encrypted and also can be anonymized by default. It also provides some functions not only to manually erase them but also to automatically remove them when those are exceeded a certain amount/time.

Yes, if "IP Geo Block" settings are detected, you will see migrate option in the Settings last in "Plugin Settings" section. This will copy the settings from "IP Geo Block" only.

Yes. You can synchronize the settings with all the sites on the network when you activate on network and enable "Network wide settings" in "Plugin settings" section.

Yes. Please view City/State Level Matching for more details.

The short answer is YES, especially for the purpose of security e.g. blocking malicious access both on the back-end and on the front-end. You can find the long answer and the compatibility list of cache plugins at "Compatibility with cache plugins".

Absolutely, YES. Sometimes, a WordFence Security user would report this type of claim when he/she found some accesses in its Live traffic view. But please don't worry. Before WordPress runs, WordFence cleverly filters out malicious requests to your site using auto_prepend_file directive to include PHP based Web Application Firewall. Then this plugin validates the rest of the requests that pass over Wordfence because those were not in WAF rules. It would also possibly be caused by the accuracy of country code in the geolocation databases. Actually, there is a case that a same IP address has different country code. For more detail, please refer to "I still have access from blacklisted country.".

The easiest way is to use free proxy browser addon. Another one is to use http header browser addon. You can add an IP address to the X-Forwarded-For header to emulate the access behind the proxy. In this case, you should add HTTP_X_FORWARDED_FOR into the "$_SERVER keys for extra IPs" on "Settings" tab. See more details at "How to test prevention of attacks".

Please find the solution in Quick recovery from blocking on your login page at first. You can also find another solution by editing "Emergent Functionality" code section near the bottom of ip-location-block.php. This code block can be activated by replacing /* (opening multi-line comment) at the top of the line to // (single line comment), or * at the end of the line to */ (closing multi-line comment). /** * Invalidate blocking behavior in case yourself is locked out. * * How to use: Activate the following code and upload this file via FTP. */ /* -- ADD '/' TO THE TOP OR END OF THIS LINE TO ACTIVATE THE FOLLOWINGS -- */ function ip_location_block_emergency( $validate, $settings ) { $validate['result'] = 'passed'; return $validate; } add_filter( 'ip-location-block-login', 'ip_location_block_emergency', 1, 2 ); add_filter( 'ip-location-block-admin', 'ip_location_block_emergency', 1, 2 ); // */ Please not that you have to use an appropriate editor. After saving and uploading it to /wp-content/plugins/ip-location-block/ on your server via FTP, you become to be able to login again as an admin. Remember that you should upload the original one after re-configuration to deactivate this feature. This document can also help you.

Yes. Roughly speaking, the strategy of this plugin has been constructed as follows: Block by country It blocks malicious requests from outside your country. Force to load WP core It blocks the request which has not been covered in the above two. Bad signatures in query It blocks the request which has not been covered in the above three. Please try "Best for Back-end" button at the bottom of this plugin's setting page for easy setup. And also see more details in "The best practice of target settings".

Unfortunately, no. This plugin can't handle the requests that are not parsed by WordPress. In other words, a standalone file (PHP, CGI or something executable) that is unrelated to WordPress can't be validated by this plugin even if it is in the WordPress install directory. But there's exceptions: When you enable "Force to load WP core" for Plugins area or Themes area, a standalone PHP file becomes to be able to be blocked. Sometimes this kind of file has some vulnerabilities. This function protects your site against such a case.