Automatically insert Project Honeypot links into your pages and block IP addresses that are listed on various block lists you can choose from.
As of April 2026, Honeypot Toolkit is a WordPress honeypot plugin with 400 active installations and a 4.5/5 rating from 8 reviews. It has been downloaded 19K+ times in total. Requires WordPress 4.6.0+ and PHP false+. Available on WordPress.org since 2017. Recently updated within the last 3 months. Top alternative: CF7 Apps – Honeypot, Database….
This plugin allows you to automatically insert your Project Honeypot links into all of your pages and block IP addresses that are listed on the Http:BL list from Project Honeypot. There is an option to block IP addresses that have been blocked by Spamcop using their blacklist and the SANS Internet Storm Center API as well.
To prevent bots from using brute force attacks and scanning your site there is an option to block users that fail to login a set number of times or use blocked user names. You can also block IP addresses that generate a large number of 404 errors. This plugin will also prevent WordPress User Enumeration and automatically block anyone attempting it.
| WordPress | 4.6.0+ requiredTested up to 6.9.4 |
| PHP | false+ required |
Added option to allow IP V6 address checking to be turned off for the Internet Storm Center API as they can report false positives.
Changed from using count to using attacks variable in Internet Storm Center API response.
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.