---

How to block countries in WS Form?

Spam entries from certain countries can quickly overwhelm your forms and lead to wasted time, fake leads, or even malicious attacks. If you’re using WS Form, there are two main ways to restrict form submissions by location: using WS Form’s built-in IP Blocklist feature and integrating the OOPSpam Anti-Spam plugin for advanced country-level filtering. Here’s how each method works.

Does WS Form Have Built-In Country Blocking?

WS Form doesn’t include a direct country-blocking feature out of the box. However, it does allow you to block specific IP addresses using its IP Blocklist. This can be useful for blocking repeat offenders or known spam IPs, but isn’t ideal for wide-scale geographic restrictions like blocking entire countries.

If you’re looking for true country-level control, skip to the OOPSpam section below. But if you’re just trying to block a few problem IPs, here’s how to do it in WS Form:

How to Block IPs in WS Form

Open your form in the WS Form editor and go to Form Settings. Navigate to the Spam tab. Enable the IP Blocklist setting.

You’ll see a section to add IP addresses. Click the plus (+) icon to add IPs one at a time. You can enter IPv4 or IPv6 addresses. Repeat this for every IP you want to block.

Keep in mind: This method only blocks IPs you already know. It does not detect or block new spam sources based on geography or behavior.

1. Block Countries Using OOPSpam Anti-Spam Plugin

For more comprehensive protection, the OOPSpam Anti-Spam (that’s us 👋)  gives you advanced filtering options for WS Form, including:

• Country Filtering: Block or allow submissions based on the country of origin.
• Language Filtering: Reject submissions written in specific languages.
• VPN, Tor, Proxy Blocking: Automatically filter spam from anonymized or server-based sources.
• Submission Logs: View blocked and allowed submissions to monitor spam activity.

WS Form works seamlessly with OOPSpam once it’s installed and configured.

How to Set Up Country Blocking in WS Form with OOPSpam

Start by installing the OOPSpam WordPress plugin from the Plugin Directory. After activation, head to OOPSpam Anti-Spam > Settings in your dashboard. 

Paste in your API key from your OOPSpam account.

Scroll to the Country Filtering section. Choose whether you want to allow only selected countries or block specific ones. Then select the countries from the dropdown menu and save your settings.

Toggle Activate Spam Protection to turn it on.

That’s it! OOPSpam will now apply these filters to your WS Form submissions.

Why OOPSpam Works Better Than Manual Blocking

Unlike IP-based blocklists, OOPSpam dynamically evaluates every submission using machine learning and multiple data points:

• It detects spam patterns even from rotating IPs or proxy networks.
• It maintains an internal threat database to identify abusive traffic.
• It applies language, region, and source checks in real time.

All this means you get better protection without constantly updating blocklists.

Monitor What’s Blocked (or Allowed)

Within your WordPress admin area, you’ll find two sections: Form Spam Entries (blocked) and Form Ham Entries (clean).

Meanwhile, your OOPSpam dashboard provides in-depth logs, showing details like submission content, IP address, spam score, timestamp, and more.

Below is a preview of how the log view appears in your OOPSpam account:

This visibility helps you spot patterns, fine-tune your filters, and ensure legitimate leads aren’t being rejected.

2. Block Countries at the Server Level with Cloudflare (Optional)

If you’re experiencing attacks or high traffic from certain countries across your entire website, not just on forms—Cloudflare offers DNS-level country blocking.

This method prevents visitors from even loading your website based on their IP geolocation.

To do this:

• Log into your Cloudflare account.
• Choose your website and go to Security > WAF.
• Create a new Firewall Rule.
• Set the Field to “Country,” the Operator to “is in,” and select the countries you want to block.
• Set the Action to “Block,” then save and deploy the rule.

Cloudflare’s country blocks affect your entire website. If you’re only targeting form spam, stick with OOPSpam.

Which Method Should You Use?

Method	Blocks	Best For
WS Form IP Blocklist	Individual IP addresses	Blocking known spam IPs manually
OOPSpam Plugin	Form submissions by region	Advanced filtering, full control, and visibility
Cloudflare WAF	Entire website by country	Site-wide blocks for legal, compliance, or attack mitigation

Final thoughts

While WS Form doesn’t natively support country-based restrictions, pairing it with OOPSpam Anti-Spam gives you tools to filter spam by region, language, rate limiting, IP filtering, and behavior.

Use the IP Blocklist if you already know which IPs you want to block. For automated filtering that actually keeps spam out without blocking legitimate users, OOPSpam is the way to go.

And if you need to block access to your entire site from specific regions, Cloudflare can add that extra layer of protection.