CordonAI Geo Access and Redirect

CordonAI Geo Access and Redirect lets you decide who can reach your WordPress site based on the visitor’s country and IP address. Everything runs through standard WordPress hooks — the plugin never modifies wp-config.php, .htaccess, or any core file.

Country lookups use a bundled MaxMind GeoLite2 database that ships with the plugin, so no external request is made when a visitor is checked. If you want fresher data you can add a free MaxMind license key and update the database on demand or weekly.

Features

• Block (or allow) front-end visitors by country and by IP address.
• Protect the login page and admin area by country/IP, with brute-force-friendly defaults — established administrators are never locked out of the dashboard.
• IP rules support exact addresses, wildcards (203.0.113.*) and CIDR ranges (203.0.113.0/24), for both IPv4 and IPv6.
• Allow-list that always wins over any block rule.
• Crawler allow-list (Google, Bing, Yandex, and more) so blocking a country never hurts your search visibility.
• Country redirects, including “keep the current path” (%PATH%) redirects.
• Language-prefix URL rewriting for multilingual sites (e.g. /en/ → /it/).
• Logs and at-a-glance charts of blocked activity (24 hours / 7 days / 30 days).
• Fully customisable block screen with a live preview.
• Offline by design — privacy friendly, no tracking, no ads, no upsells.
• Optional MaxMind GeoLite2 auto-update with your own license key.

External services

This plugin can optionally connect to one external service, MaxMind, to update its bundled GeoIP database. It is used only for downloading database updates and is never contacted during normal visitor lookups.

• What it is and what it is used for: MaxMind GeoLite2 provides the IP-to-country database the plugin uses to detect a visitor’s country. The bundled copy works fully offline; this service is only used to download a newer copy of that database when you choose to.
• What data is sent and when: a request is sent to https://download.maxmind.com/app/geoip_download only when a site administrator has entered a MaxMind license key and then either clicks “Update database now” on the Settings tab or has enabled the weekly automatic update. The request includes your MaxMind license key (so MaxMind can authorise the download) and, as with any HTTP request, your server’s IP address. No visitor data and no site content are ever sent. If you do not enter a license key, the plugin makes no external requests at all.
• Service provider: MaxMind, Inc. GeoLite2 End User License Agreement: https://www.maxmind.com/en/geolite2/eula Privacy Policy: https://www.maxmind.com/en/privacy-policy