manifest / security / ipwhois-blacklist-for-wordpress

IPWhois Blacklist

WordPress plugin: check commenter and login IPs against the free IPWhois.net community blacklist, block or flag known abusers, and optionally report spam.

by IPWhois.net · github.com/brkicsivan-wq/ipwhois-blacklist-for-wordpress · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/brkicsivan-wq/ipwhois-blacklist-for-wordpress/archive/refs/heads/main.zip

No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Readme github.com/brkicsivan-wq/ipwhois-blacklist-for-wordpress ↗

A small WordPress plugin that checks commenter and login IP addresses against the free IPWhois.net community blacklist and turns away known abusers. No API key, no account, 500 requests/day per site.

What it does

Blocks blacklisted IPs from posting comments (on by default)
Optionally blocks blacklisted IPs from logging in
Optionally reports spam-marked comments back to the community feed
Caches results for 6 hours, so a comment flood is one API call
Fails open: a real visitor is never blocked because the API blipped

Install

Copy the folder into wp-content/plugins/, activate it, then open Settings → IPWhois Blacklist.

How the check works

Every comment (and optional login) runs the visitor IP through GET https://bl.ipwhois.net/api/check?ip=…. The same IP lookup is available on the website if you want to inspect an address by hand, with the network owner, ASN and geolocation alongside its blacklist status.

Full API docs and integration guides (fail2ban, CSF, Nginx and others): ipwhois.net/blacklist/docs.

License

GPL-2.0-or-later.