CordonAI Geo Access and Redirect

CordonAI Geo Access and Redirect lets you decide who can reach your WordPress
site based on the visitor’s country and IP address. Everything runs through
standard WordPress hooks — the plugin never modifies wp-config.php,
.htaccess, or any core file.

Country lookups use a bundled MaxMind GeoLite2 database that ships with the
plugin, so no external request is made when a visitor is checked. If you
want fresher data you can add a free MaxMind license key and update the
database on demand or weekly.

Features

• Block (or allow) front-end visitors by country and by IP address.
• Protect the login page and admin area by country/IP, with brute-force-friendly
  defaults — established administrators are never locked out of the dashboard.
• IP rules support exact addresses, wildcards (203.0.113.*) and CIDR ranges
  (203.0.113.0/24), for both IPv4 and IPv6.
• Allow-list that always wins over any block rule.
• Crawler allow-list (Google, Bing, Yandex, and more) so blocking a country
  never hurts your search visibility.
• Country redirects, including “keep the current path” (%PATH%) redirects.
• Language-prefix URL rewriting for multilingual sites (e.g. /en/ → /it/).
• Logs and at-a-glance charts of blocked activity (24 hours / 7 days / 30 days).
• Fully customisable block screen with a live preview.
• Offline by design — privacy friendly, no tracking, no ads, no upsells.
• Optional MaxMind GeoLite2 auto-update with your own license key.

External services

This plugin can optionally connect to one external service, MaxMind, to update
its bundled GeoIP database. It is used only for downloading database updates and
is never contacted during normal visitor lookups.

• What it is and what it is used for: MaxMind GeoLite2 provides the
  IP-to-country database the plugin uses to detect a visitor’s country. The
  bundled copy works fully offline; this service is only used to download a newer
  copy of that database when you choose to.
• What data is sent and when: a request is sent to
  https://download.maxmind.com/app/geoip_download only when a site administrator
  has entered a MaxMind license key and then either clicks “Update database now”
  on the Settings tab or has enabled the weekly automatic update. The request
  includes your MaxMind license key (so MaxMind can authorise the download) and,
  as with any HTTP request, your server’s IP address. No visitor data and no site
  content are ever sent. If you do not enter a license key, the plugin makes no
  external requests at all.
• Service provider: MaxMind, Inc.
  GeoLite2 End User License Agreement: https://www.maxmind.com/en/geolite2/eula
  Privacy Policy: https://www.maxmind.com/en/privacy-policy