by
Gabor Angyal
0 (0 reviews)
Poke Monitor
See who is poking your site: Cloudflare bypasses, secret-file scans, backdoor access, XML-RPC abuse and scanner user agents.
Poke Monitor ranks #32,077 among WordPress.org plugins with 10+ active installations, is #1,834 of 5,058 in the Security category, and was last updated Oct 13, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.4
v1.0.0
Current Version v1.0.0
Updated 3 weeks ago
Last Update on 13 Oct, 2026
Refreshed 1 week ago
Last Refreshed on
#1,834 of 5,058 in Security
Top 50% by installs
Actively maintained
Rank
#32,077
—
No change
Active Installs
10+
—
No change
KW Avg Position
47
—
No change
Downloads
126
+1 today
Support Resolved
0%
—
No change
Rating
0%
Review 0 out of 5
0
(0 reviews)
Next Milestone 20
10+
20+
8,904
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 2 more installs to reach 20+
Rank Changes
Current
#32,077
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
0.0
0 reviews
Overall
0%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.0.0
- Last Updated
- Oct 13, 2026
- Requires WP
- 6.2+
- Tested Up To
- 7.1.4
- PHP Version
- 7.4 or higher
- Author
- Gabor Angyal
Support & Rating
- Rating
- ☆ ☆ ☆ ☆ ☆ 0
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#18
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#36
Frequently Asked Questions
Common questions about Poke Monitor
No. It only logs them. Use the log to decide what to block at your web server, your host's firewall or in Cloudflare.
Yes. Probing, Direct PHP Access, XML-RPC and Suspicious User Agent logging work on any site. Only Cloudflare Bypass detection needs Cloudflare; turn it off on the Cloudflare card.
The setting is made once, automatically, from the request that activated the plugin (or your first visit to the Poke Monitor page). If that request reached your server directly — through a VPN, a hosts-file entry or a staging domain — the plugin concluded you are not behind Cloudflare. Use the switch to correct it. Poke Monitor never changes it again on its own.
Most likely bypass detection is on but your site is not (or no longer) proxied through Cloudflare — for example the orange cloud is switched off in your Cloudflare DNS settings. Turn the switch off, or fix the Cloudflare setting.
Someone knows your server's real IP address. Configure your server or host firewall to accept web traffic only from Cloudflare's published IP ranges, or turn on Cloudflare's Authenticated Origin Pulls. If the address was leaked recently (for example through an old DNS record or an email header), consider changing it.
Many monitors and tools use HTTP library User-Agents such as curl or python-requests. Click + IP or + UA on its row in the log, choose which types the entry applies to, and save. Allowlist entries match exactly.
Not yet. The retention period is fixed at 30 days in this version.
Requests that don't match any rule cost a few string checks and no database query. Matching requests are written to the database at the very end of the request, after the page has been generated.
Multisite is not tested or supported. Activating it on individual sites is expected to work; network activation is not recommended.
All Poke Monitor tables and settings are deleted. Deactivating keeps your data.
