WP Manifestindependent plugin directory
manifest / security / ipblock-wordpress

IP Block Protection

IP Block protection for WordPress — ip-block.com integration. Untested at the moment; please feel free to modify. GPLv3.

by IP Block Ltd · github.com/ip-block-ltd/ipblock-wordpress · website

★ 0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/ip-block-ltd/ipblock-wordpress/archive/refs/heads/main.zip

Readme

⚠️ Status: untested. This extension is provided as-is and has not been tested in production. Please feel free to fork, modify, improve, and open pull requests.

Licensed under GNU GPLv3 (see LICENSE).

IP Block Protection (WordPress 7.0)

WordPress plugin that screens every front-end visitor against the ip-block.com service and blocks flagged IP addresses before your site renders.

Admin configuration

Settings → IP Block

Field Purpose
Enable IP Protection Master on/off switch
Site ID Your 12-character ip-block.com site identifier
API Key Your 48-character key (leave blank to keep the saved one)
API Endpoint URL Defaults to https://api.ip-block.com/v1/check
If service is unreachable Fail open (allow) or closed (block)
Decision Cache Lifetime Seconds a decision is cached; 0 = check every request
Behind a proxy / CDN Read the real IP from CF-Connecting-IP / X-Forwarded-For
When a visitor is blocked Redirect to ip-block.com, or show a local 403
Block Message Local 403 text
Allowlisted IPs One IP per line — never blocked

Install

  1. Copy the ip-block-protection folder into wp-content/plugins/.
  2. Plugins → Installed Plugins → Activate "IP Block Protection".
  3. Configure under Settings → IP Block and tick Enable.

How it works

  • Hooks plugins_loaded (priority 1) so blocked IPs are stopped before heavy work.
  • Admin, cron, WP-CLI and AJAX requests are never screened.
  • IPBlock_Checker handles allowlisting, transient caching and fail-open/closed.
  • IPBlock_Client speaks the ip-block.com API (POST /v1/check → {"action":...}).

Notes

  • Allowlist your own IP before enabling so you cannot lock yourself out of the front end.
  • The API key is stored in the wp_options table (standard WordPress practice).

Read the full README on GitHub →