Country Blocker and Geoblocker FREE

Country Blocker is the easiest way to block website visitors by country, region, or IP address. No API keys required, no complicated setup – just activate, select countries to block, and protect your site instantly.

Perfect for compliance, security, and content licensing:

• GDPR compliance – Block EU countries to avoid cookie consent requirements
• CCPA compliance – Block California traffic if you can’t meet data privacy requirements
• Gambling & gaming sites – Restrict access from prohibited jurisdictions
• Streaming & licensed content – Enforce geographic licensing restrictions
• Financial services – Block countries you’re not licensed to operate in
• Reduce spam & attacks – Block high-risk countries and VPN traffic

Why Choose Country Blocker?

✅ One-click setup – No API keys or database downloads to start blocking ✅ Actually works – Automatic failover across 4 geolocation providers ensures reliability ✅ VPN & proxy detection – Optional blocking of VPNs, proxies, data centers, and hosting providers ✅ SEO friendly – Automatically allows Google, Bing, and other search engine crawlers ✅ Won’t lock you out – WordPress admin and login pages always remain accessible ✅ Privacy focused – Minimal data storage with IP hashing for security

Key Features

Blocking & Access Control: * Block visitors from any country with a simple checkbox (250+ countries) * Optional VPN, proxy, and datacenter detection and blocking * Search engine crawler bypass (Google, Bing, DuckDuckGo, etc.) * Choose to allow or block visitors when country cannot be determined * Emergency bypass URL parameter for troubleshooting * WordPress admin and login pages are never blocked

Geolocation & Accuracy: * Works instantly without API keys * Automatic failover across 4 free geolocation APIs * Optional MaxMind GeoLite2 database support (requires free license key) * Cloudflare IP detection support * Supports proxy headers (X-Forwarded-For, X-Real-IP, CF-Connecting-IP)

Logging & Monitoring: * Track all blocked and allowed access attempts * View visitor country codes and decision reasons * Automatic log cleanup (configurable retention period) * Rate limiting to prevent log spam

Privacy & Security: * IP addresses are hashed by default for privacy * GDPR and CCPA friendly minimal data storage * Configurable data retention policies * No tracking scripts or external cookies

Pro Version

Need more granular control? Country Blocker Pro includes:

Region-Level Blocking: * 🇺🇸 Block specific US states (all 50 states + DC, Puerto Rico, Guam, US Virgin Islands) * 🇨🇦 Block Canadian provinces and territories * 🇬🇧 Block UK regions (England, Scotland, Wales, Northern Ireland) * 🇦🇺 Block Australian states and territories * 🇩🇪 Block German states (Bundesländer) * 🇮🇳 Block Indian states and union territories * 🇨🇳 Block Chinese provinces and municipalities * 🌍 Block entire continents with one click

Advanced Features: * IP whitelist – Never block specific IPs (supports CIDR notation) * IP blacklist – Always block specific IPs regardless of location * Custom block page with full color customization * Custom CSS editor for complete design control * Redirect blocked visitors to any URL * Advanced logging with CSV export * Smart log retention and database optimization * Priority email support

Get Country Blocker Pro →

External Services

This plugin connects to external services for geolocation functionality and optional feedback collection. By using this plugin, you acknowledge that data will be sent to these third-party services.

1. IP Geolocation Services

To determine a visitor’s country, the plugin sends the visitor’s IP address to one or more of the following geolocation providers (in failover order):

ipwhois.is * Service: IP geolocation lookup * Data sent: Visitor IP address * When: On each unique visitor’s first page load (cached for 24 hours) * Terms of Service: https://ipwhois.io/terms * Privacy Policy: https://ipwhois.io/privacy

ip-api.com * Service: IP geolocation lookup (fallback provider) * Data sent: Visitor IP address * When: If ipwhois.is fails * Terms of Service: https://ip-api.com/docs/legal * Privacy Policy: https://ip-api.com/privacy

ipapi.co * Service: IP geolocation lookup (fallback provider) * Data sent: Visitor IP address * When: If previous providers fail * Terms of Service: https://ipapi.co/terms/ * Privacy Policy: https://ipapi.co/privacy/

ipinfo.io * Service: IP geolocation lookup (fallback provider) * Data sent: Visitor IP address * When: If previous providers fail * Terms of Service: https://ipinfo.io/terms-of-service * Privacy Policy: https://ipinfo.io/privacy-policy

2. Deactivation Feedback Service

When you deactivate the plugin, you have the option to submit feedback about why you’re deactivating. This is completely optional.

Simple tools for wp Feedback API * Service: Plugin deactivation feedback collection * Data sent (only if you submit feedback): Plugin slug, your site URL, deactivation reason, optional text feedback, WordPress version, PHP version, plugin version * When: Only when you voluntarily submit the deactivation survey form * Endpoint: https://plugins-for-wp.com/wp-json/ssp-feedback/v1/submit * Privacy: No personal data or visitor information is collected. Only technical site information and your voluntary feedback are sent. * Purpose: To help us improve the plugin based on user feedback

3. Optional: MaxMind GeoLite2 Database

If you provide a MaxMind license key in settings, the plugin will download the GeoLite2 database to your server for local geolocation lookups, reducing external API calls.

MaxMind GeoLite2 * Service: Geolocation database download * Data sent: Your MaxMind license key * When: Once per week when you configure a license key * Downloaded to: wp-content/uploads/GeoLite2-City.mmdb * Terms: https://www.maxmind.com/en/geolite2/eula * Privacy: https://www.maxmind.com/en/privacy-policy

Data Retention: The plugin stores minimal data on your WordPress database: hashed IP addresses (for rate limiting), country codes, access decisions (blocked/allowed), and timestamps. You can configure automatic log cleanup in settings. The plugin does not track individual visitors or create profiles.

Privacy & Data Usage

This plugin is designed with privacy in mind:

• IP addresses are hashed by default before storage
• Only country codes and access decisions are logged, not full visitor profiles
• Logs can be automatically cleaned up after a configurable retention period
• No cookies are set on the visitor’s browser
• No tracking scripts are loaded
• Geolocation lookups are cached to minimize external API calls
• Deactivation feedback is completely optional and only submitted if you choose to provide it

For GDPR compliance, the plugin blocks visitors from specified countries, which may reduce your data collection obligations. However, you should still review your complete privacy obligations with a legal professional.