Seventh Sky

Live Visitor Monitor provides real-time tracking and visualization of visitors on your WordPress site. See where your visitors are coming from on an interactive world map.
Key Features:
<ul>
<li>Real-time World Map – Visualize visitor locations on an interactive map with live markers</li>
<li>Live Visitor List – See active visitors with IP addresses, countries, cities, and pages visited in a sidebar</li>
<li>IP Blocking – Instantly block unwanted IP addresses from accessing your site with a dedicated Blocklist page</li>
<li>Geolocation – Automatic country, region, and city detection using IP geolocation (API or local database)</li>
<li>Auto-refresh – Dashboard updates every 5 seconds to show the latest visitors</li>
<li>Statistics Overlay – Real-time stats box showing online and active visitor counts</li>
<li>Comprehensive Settings – Full control over tracking, geolocation, privacy, and data management</li>
<li>Privacy Compliant – Includes GDPR compliance notices and IP anonymization options</li>
</ul>
How It Works:
The plugin automatically tracks visitors. Visitor data (IP address, current page, referrer) is sent to WordPress via AJAX and stored in the database. Geolocation data can be fetched from the bundled DB-IP Lite MMDB database, external IP geolocation APIs, or browser-provided coordinates when visitors allow location access. Results are cached for 1 hour to reduce API calls.
<h3>Live Visitor Monitor Pro</h3>
Need deeper reporting, bot controls, and local database features? <a href="https://7thskysoftware.com/wordpress-plugins/live-visitor-monitor/" rel="nofollow ugc">Upgrade to Live Visitor Monitor Pro</a>:
Pro Features:
<ul>
<li>Bot Detection – Detect suspicious automated traffic and common crawler patterns</li>
<li>AI Bot Detection – Identify common AI crawler and model-training bot signatures</li>
<li>Cautious Auto-Blocking – Optionally auto-block high-confidence unwanted bots while allowing known helpful crawlers</li>
<li>Bundled Local MMDB Database – Use the heavier local geolocation database only when Pro is installed and licensed</li>
<li>Advanced Analytics Dashboard – KPI cards, traffic graphics, daily visit trends, top pages, top referrers, top countries, unique IPs, and active visitor reporting</li>
<li>Dashboard Widgets – Show quick analytics summaries on the WordPress dashboard and Live Monitor dashboard</li>
<li>Visitor Log – Search visitor history by IP, location, page, referrer, and user agent</li>
<li>Visitor Log Retention Controls – Configure how many logs to keep, how long to keep them, rows per page, cleanup, and delete-all maintenance</li>
</ul>
<h3>External Resources</h3>
This plugin uses <a href="Leaflet.js" rel="nofollow ugc">JavaScript Library</a> & the following external resources:
<a href="https://db-ip.com/db/download/ip-to-city-lite" rel="nofollow ugc">DB-IP City Lite</a>: This local MMDB database performs offline IP geolocation when available. The Lite database is licensed under Creative Commons Attribution 4.0 International License.
<a href="https://ipwho.is" rel="nofollow ugc">ipwho.is</a> and <a href="http://ip-api.com" rel="nofollow ugc">ip-api.com</a>: These services perform IP geolocation (country, region, city, coordinates) when geolocation is enabled and no local database result is available. Results are cached for one hour to reduce API calls.
<a href="https://nominatim.org/release-docs/latest/api/Reverse/" rel="nofollow ugc">OpenStreetMap Nominatim</a>: This service performs reverse geocoding for browser-provided coordinates when visitors allow geolocation. Results are cached for one hour.
<a href="https://www.openstreetmap.org" rel="nofollow ugc">OpenStreetMap</a>: This service provides world map tiles for the dashboard and is used only when the live map is enabled. It has no rate limits, sends no user data (only map tile requests), and can be avoided by disabling the live map in Settings.
Note: External geolocation requests can be avoided by using the bundled local MMDB database and disabling browser coordinate lookup. The plugin will still track visitors, but location accuracy depends on the available source.

Live Visitor Monitor – Real-Time Visitor Monitoring with Smart IP Blocking

Monitor live visitors on your WordPress site with a real-time world map, visitor list, and IP blocking capabilities.

SyntaxCloud

sHub-Logは、WordPressサイトのセキュリティを強化するためのプラグインです。 
主な機能：
<ul>
<li>ログイン試行の記録</li>
<li>設定ファイル探索、裏口探索、プラグイン脆弱性スキャン、管理画面ハッキング、スパムなどのカテゴリ別検知</li>
<li>不正なクエリパラメータ、大量リクエスト、REST API悪用試行のオプション検知</li>
<li>直近7日間のアタック統計サマリーと詳細ログ表示</li>
<li>直近24時間のアタック推移グラフ（1時間 / 2時間 / 3時間間隔）</li>
<li>CSVエクスポートとAJAXカテゴリフィルタリング</li>
<li>アタックログ保存期間（30日 / 90日 / 無期限）の選択</li>
<li>WP-Cronによる古いアタックログの自動削除</li>
<li>アタック統計・一覧の表示期間（7日 / 30日 / 全期間）の選択</li>
<li>アタック急上昇時のメールアラートと通知クールダウン</li>
<li>syn-c.jp 上のアラート定義・メールテンプレート取得に対応（取得失敗時は内蔵デフォルトで動作）</li>
<li>指定回数以上の失敗でIPアドレスをブロック</li>
<li>ブロック時間の設定</li>
<li>カスタムリダイレクトURLの設定</li>
<li>管理画面でのログ確認とIP管理</li>
<li>大量リクエストのしきい値・計測窓のカスタマイズ</li>
<li>攻撃特徴を伴うリクエストのみを計測する誤検知低減モード</li>
<li>ログイン済みユーザー・正規クローラー（FCrDNS検証）のレート計測除外</li>
<li>不審な404多発（巡回スキャン）の検知</li>
<li>IPホワイトリスト（検知・ブロック対象外）</li>
<li>信頼するプロキシ経由時の X-Forwarded-For / CF-Connecting-IP からの実IP取得</li>
<li>URLの多重デコード・パス正規化による難読化リクエストの検知精度向上</li>
<li>IPごとにリスクスコアを時間窓で累積し、記録・ブロックを判定するスコアリング（既定OFF）</li>
<li>配点・しきい値は管理画面で調整可能。syn-c.jp 上の署名付き配点定義の取得にも対応</li>
</ul>

sHub-Log

WordPressの不正ログイン試行、不審な404、不正リクエストを記録し、一定回数でIPをブロックするセキュリティプラグイン。

Live Visitor Monitor – Real-Time Visitor Monitoring with Smart IP Blocking vs sHub-Log