Block your website by countries

What you get: suddenly cut off the noise that comes to you from countries where you don’t have customers - brute force attacks, form spam, trackers - without touching anyone’s email.

Before starting

Two things that you need to be clear about before signing anything:

Email is never filtered. The screen itself says it: “those who read your travel emails are not left out”. This only affects those who open your website.
A VPN bypasses it. The panel also warns you: “those who use a VPN or a proxy can appear to be in another country: use it as an additional layer, not as the only defense”.

And think about yourself: if you go on a trip and have left “Only Spain”, you also don’t enter your own WordPress panel from the hotel.

Steps

In the line at your site, press Countries.
Choose what to do:
- No blocking - your website opens from any country.
- Block these countries - those you mark will not be able to open it; the rest, yes. It is the prudent option.
- Only these countries - only those you mark will be able to open it. It is the decisive one, and the one that will turn against you the most.
Mark the countries on the list. If there is one missing, write its two-letter code in Other countries, separated by commas: KR, ZA.
Save.

The changes apply in a second, without restarting anything.

How to check it worked

Open your website normally: you have to keep logging in. That’s the test that really matters, because the expensive error here is blocking you.

To check that the block is working, use a VPN with an outgoing connection to a country you have blocked and see if it lets you through. If you don’t have a VPN, you can just check in a few days if the access attempts have dropped.

Common problems

I have blocked and I have been left out: It mainly happens with “Only these countries” and with mobile operators who go to another country. Enter from another network, or write to us and we will remove it.
I have saved it and people from the blocked country are still entering: If you just saved it, give it a minute. If it has already passed, it is most likely that they will come through VPN or a proxy, and this tool does not see that.
«Select at least one country or change the mode to “Disabled”»: You have chosen to block or allow but you have not marked any. Mark one, or put “Unblocked” if what you want is to remove it.
“The configuration is saved, but it is not yet being applied”: It is saved and will only be applied in a few minutes. If it still looks the same after a while, write to us.
Is this for attacks on wp-login.php?: Cut off those coming from blocked countries, which are usually many. But it is not a complete defense: you still have long passwords and keep what you install updated.
My email has stopped working since I activated it: It can’t be because of this: the mail is never filtered by country. Look at That your emails arrive and do not fall into spam.
I see an alert that the platform blocks countries and I haven’t put anything: There is a global block on our side, apart from yours, against origins that only cause problems. You don’t touch that one. Yours is the one on this screen and it adds up.
I want to block a specific IP address, not an entire country: That is not done here. We handle the IP blocks ourselves: ask for it by ticket with the IP and why.