We have removed this feature since January 2020, see https://www.akeeba.com/news/1727-removal-of-geographic-ip-features-from-akeeba-software.html
The obvious matter is, as explained in the news article, the change in MaxMind's licensing of the GeoIP database.
On top of that, GeoIP blocking has never been a security feature.
All you have is an IP address, and a database which is about 90% to 95% accurate on IPv4 addresses. This means that one in 10 to 20 requests using IPv4 will be misidentified as being from the wrong country.
If your server supports IPv6 and the user accesses your site over IPv6 then you simply don't have any usable information on where they came from as the database does not cover IPv6.
It is also trivial for a malicious actor to use a VPN, or a hacked computer, in an allowed country to effectively spoof their origin IP address. In fact, that's exactly what attackers do.
Even if you somehow had a way to perfectly attribute an IP address to a country it means pretty much nothing at all. It would only identify the Internet connection's country, which country the user is connecting from. This might be different than the person's country of residence, or country of citizenship.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
