Easy IP Blocker is a lightweight security plugin that lets you block unwanted IP addresses directly from your WordPress dashboard. Protect your site from malicious traffic, brute-force login attempts, and spam by maintaining a blocklist with just a few clicks.

Your entire blocklist is stored as a single plain-text option — one entry per line. There is no database table, no import/export workflow, and no complicated UI. Just copy, paste, and save. Back up your list by copying the textarea contents to a text file, or restore it by pasting one back in. It is that simple.

Need to block IPs faster? Use the built-in WP-CLI commands to add, remove, or list entries without ever opening the dashboard.

Features:

Block individual IPs, CIDR ranges, or wildcard patterns
CDN/proxy-aware IP detection — supports Cloudflare, Fastly, Akamai, AWS CloudFront, Sucuri, and custom headers
Auto-detects your CDN/proxy and recommends the correct setting
Plain-text flat list — copy and paste to back up, migrate, or restore
WP-CLI support (wp eib add/remove/list/clear) for scripting and automation
Lightweight and fast — no external dependencies, API calls, or extra database tables
Compatible with PHP 7.4 through 8.4
Helps prevent brute-force attacks, spam, and unauthorized access
Comment support — use # to annotate and organize your blocklist
Modern, clean admin interface with tabbed layout

Supported CDN / proxy providers:

Cloudflare — reads CF-Connecting-IP
Fastly — reads Fastly-Client-IP
Akamai — reads True-Client-IP
AWS CloudFront — reads CloudFront-Viewer-Address
Sucuri — reads X-Sucuri-ClientIP
Generic proxy — reads X-Forwarded-For
Custom header — specify any header name your proxy sets
Direct — uses REMOTE_ADDR when no proxy is in use

The plugin auto-detects which CDN or proxy is in front of your site and recommends the correct setting. You can also choose manually from the Settings tab.

Supported blocking formats:

Exact IP — 192.168.1.1
CIDR range — 192.168.1.0/24 (blocks 192.168.1.0 through 192.168.1.255)
Wildcard — 10.0.0.* or 172.16.*.* (matches any value in place of *)
Comments — lines starting with # are ignored, useful for notes

WP-CLI commands:

wp eib add <ip>... — Append one or more entries to the blocklist
wp eib remove <ip>... — Remove entries from the blocklist
wp eib delete <ip>... — Alias for remove
wp eib list — Show all blocked IPs and rules
wp eib clear — Clear the entire blocklist

All commands that accept IPs support multiple entries in a single call. For example:

wp eib add 192.168.1.1 10.0.0.0/24 172.16.0.*
wp eib remove 192.168.1.1 10.0.0.0/24