Login IP & Country Restriction hooks into the WordPress authentication system to give you complete control over who can even attempt to access your login page. By default, all access is allowed until you configure specific rules to whitelist or blacklist logins by explicit IP addresses or entire countries.

This plugin is highly effective at stopping massive botnet brute-force attempts before they strain your server resources.

🔒 Core Features (100% Free)

IP Restriction: Allow or block specific IP addresses (supports local loops like 127.0.0.1 and IPv6).
Country Restriction: Whitelist or blacklist entire countries from accessing the authentication filters.
Independent Logic: Run IP rules only, country rules only, or combine both together for maximum security.
Smart Redirects: Configure custom behavior to automatically redirect restricted traffic back to the front page.
XML-RPC Protection: Secure authentication methods beyond standard web forms.
Data Portability: Quickly export and import your security settings, and check status details for debugging.

💎 Take Your Security Further with Pro

Login IP & Country Restriction Pro adds:
* Additional rule types
* Redirect restricted login (404 or 403 with a custom message)
* Lockout duration and individual user lockout
* WooCommerce integration (automatically allow the countries of new customers)
* Bypass the IP and country restrictions for specific roles
* Single IP login per user
* Simulate an IP or country to test your rules

Explore Login IP & Country Restriction Pro

Important Safety Note: Please ensure you always configure the plugin to allow your own IP address or country before locking down settings so you do not accidentally lock yourself out!

License

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.