by
Valentin Constantinescu
0 (0 reviews)
Visitor Sentinel
Monitors visitors, detects bots and attackers, plants honeypots, checks threat intel, and blocks malicious IPs in real time.
Visitor Sentinel ranks #60,026 among WordPress.org plugins with 0+ active installations, is #3,855 of 5,058 in the Security category, and was last updated Aug 12, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Tested up to WP 7.0.8 (Current: 7.1.4)
v3.0.3
Current Version v3.0.3
Updated 2 months ago
Last Update on 12 Aug, 2026
Refreshed 1 week ago
Last Refreshed on
#3,855 of 5,058 in Security
Rank
#60,026
—
No change
Active Installs
0+
-100%
KW Avg Position
121.5
1.5 worse
Downloads
520
+41 today
Support Resolved
0%
—
No change
Rating
0%
Review 0 out of 5
0
(0 reviews)
Next Milestone 10
0+
10+
32,458
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 8 more installs to reach 10+
Rank Changes
Current
#60,026
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
0.0
0 reviews
Overall
0%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 3.0.3
- Last Updated
- Aug 12, 2026
- Requires WP
- 5.8+
- Tested Up To
- 7.0.8
- PHP Version
- 7.4 or higher
- Author
- Valentin Constantinescu
Support & Rating
- Rating
- ☆ ☆ ☆ ☆ ☆ 0
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#18
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#36
Frequently Asked Questions
Common questions about Visitor Sentinel
Thresholds default to conservative values so that regular visitors are not affected, and a block always requires genuine evidence of an attack — never browsing volume alone. Medium-risk visitors get a JavaScript verification challenge first, not an instant block. Note that every hard block is permanent and applies to the IP itself with no exceptions, including for logged-in administrators, so add your own trusted IPs to the whitelist in Settings first. If you ever lock yourself out, remove the block from your site's database (the wp_visise_bans table).
They are fake bait, generated automatically per site and never linked or displayed to real visitors: a decoy backup file at a random URL, a decoy admin username, a decoy API key handed out by a fake internal endpoint, and a decoy admin login page at a random URL. Because no genuine visitor has any reason to ever touch them, any interaction is treated as certain evidence of an attacker, and results in an immediate block. You can see the exact generated values, and turn the whole layer off, in Settings.
By default, no. Three optional, off-by-default features can make external requests once you explicitly enable them in Settings: AbuseIPDB lookups (requires your own API key), Tor exit-node list checks, and IP-to-country lookups via ip-api.com. Results are cached locally so the same IP is not looked up repeatedly. If none of these are enabled, the plugin makes no external requests.
An optional, off-by-default feature (Settings -> Device recognition). It never decides a ban by itself: a block is still only ever applied through the same evidence-based rules described above. The fingerprint is only recorded afterwards, on an IP that was already blocked, so that the same browser is still recognized if it later returns from a different IP address. Because it can identify a specific browser, treat it as personal data in your privacy policy, the same as an IP address.
Enable the "Site behind a proxy/CDN" option in Settings so the plugin can correctly identify the visitor's real IP address.
By default, yes — it shows the live "online now" count to guests as well as logged-in members. You can turn off "Show to guests too" in Settings to restrict it to logged-in users only, and choose which role can see it there.
