What it does: Blocks or allow-lists whole countries at login, XML-RPC and REST. How to access: GuardForge > Geo-IP. Free/PRO: Pro (geo_ip). Notes:

• Resolution order: the Cloudflare CF-IPCountry header, a local MaxMind GeoLite2 database, then the Avakode lookup. An unknown country is never auto-blocked — the false-positive cost is a locked-out owner.