Skip to content
  • Log In
  • Рӯйхат кардан
WordPress.org

Вордпресси тоҷикӣ

  • Themes
  • Plugins
  • News
  • About
  • Contact
  • Get WordPress
Get WordPress

Plugins

  • My Favorites
  • Beta Testing
  • Developers
Download

Honeypot Toolkit

By Jeff Sterup
  • Details
  • Reviews
  • Installation
  • Development
Support

Description

This plugin allows you to automatically insert your Project Honeypot links into all of your pages and block IP addresses that are listed on the Http:BL list from Project Honeypot. There is an option to block IP addresses that have been blocked by Spamcop using their blacklist as well.
To prevent bots from using brute force attacks and scanning your site there is an option to block users that fail to login a set number of times or use blocked user names. You can also block IP addresses that generate a large number of 404 errors. This plugin will also prevent WordPress User Enumeration and automatically block anyone attempting it.

Screenshots

  • Settings page
  • Blocked list page
  • Activity page
  • Whitelist page

Installation

  1. Extract the downloaded Zip file.
  2. Upload the ‘honeypot-toolkit’ directory to the /wp-content/plugins/ directory
  3. Activate the plugin through the ‘Plugins’ menu in WordPress
  4. Use the menu item called Honeypot Toolkit to get the plugin set up.

You should set up an account on the project honeypot website at https://www.projecthoneypot.org if you want to use Project Honeypot.

FAQ

Where do I get the script for my honeypot?

You must sign up for an account on https://www.projecthoneypot.org. Then go to https://www.projecthoneypot.org/manage_honey_pots.php to set up your honeypot and follow the instructions. After the script has been placed on your site enter the url of your script on the Honeypot Toolkit settings page.

Reviews

Unfortunately does not work

thorsten107 January 6, 2023
Nevertheless, 10 messages come to spam on day via the contact form. This plugin does not block anything

Still works

Andrea December 1, 2021
with version 5.8.2 (also multiste)

No logs in Honeypot activity list

Boretsyan February 14, 2021
Hi there, I have installed Honeypot Toolkit plugin on my website, the status is: @ - Honey Pot Active but I haven't any data in activity list in plugin. I have verified script and the dedicated link is on all my pages but now activity yet! What should I do to enable this plugin and make it working?

Lots of fun using the Honeypot

caffeinefiend December 21, 2019
I'm really enjoying using the Honeypot. In the past i was using cloudflare and plugins just to block the little blights. Now its a enjoyable sport to see how many of the pests i caught each morning. So to me this is much like going fishing, but here we are just catching the invasive pests. The plugin works really well and even though my version of Wordpress is quite a bit newer (5.3.2) than the supported i've had no problems at all. Its nice to run a plugin that benefits the larger community whilst making everything so simple to install and use. I've even taken to using an advertisement manager plugin to switch the trap links and allow me to change my trap bait as i call it. Like i said its a great sport!

Great Plugin

jodisolbrig May 25, 2018
This plugin is working very well and gives easy logging of failed logins, spammers, and bots.

Awesome

zandrius February 15, 2018
I've been looking for an easy way to integrate Project Honeypot with my wordpress site. There was a different plugin that was abandoned years ago but I'm not sure how well it would work with the current version of wordpress and it didn't have the same kind of detail as this one does. I'm very happy so far. Already filling my block list with hits from Project Honeypot and Spamcop. And I've had a few bots get blocked from trying to guess usernames on my login page.
Read all 5 reviews

Contributors & Developers

“Honeypot Toolkit” is open source software. The following people have contributed to this plugin.

Contributors
  • Jeff Sterup

“Honeypot Toolkit” has been translated into 2 locales. Thank you to the translators for their contributions.

Translate “Honeypot Toolkit” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

4.4.2

Added DNS_A argument to dns_get_record calls to only pull A records since that is all the plugin uses.
Made the logic a little more efficient for deciding if a DNS record was returned.

4.4.1

Added check to make sure honeypot link isn’t included in post excerpt if the_content hook is used.

4.4

Changed the way activity count is updated to use the primary key so the database table will not get locked.

4.3.1

Fixed missing ajax save function for content honeypot.
Fixed check on settings page to make sure honeypot locations have been saved.

4.3

Added options to set the locations where the honeypot will appear.

4.2.2

Fixed PHP warning when checking for a temporary whitelist entry and one doesn’t exist.

4.2.1

Fixed call to explode that was missing the delimiter

4.2

Changed how the server variables are handled. The variables can be a comma delimited list.
Added rel=”nofollow” to honeypot links.

4.1.2

Fixed deprecated message for PHP 7.x

4.1.1

Fixed issue on multisite installs where the plugin would check for temporary whitelist entries in a database table prefixed with the current site DB prefix. Changed $wpdb->prefix to $wpdb->base_prefix

4.1

Added functionality to temporarily whitelist an IP if it has passed the Project Honeypot and Spamcop blacklist checks. This prevents the same IP being checked multiple times while a user is visiting a site.
Fix for dropdown css on IP list pages.

4.0.9

Added the ability to enter a . in the band username field.
Added functionality to automatically whitelist the web servers IP address so it doesn’t block itself while doing a health check.

4.0.8

Improved input validation and sanatization.
Added a checkbox to the IP lists so all entries can be selected.
Added functionality to submit the search query when the enter key is pressed in the search box.
Changed the way notes are stored so line breaks will not be stripped.

4.0.7

Fixing bug with login monitoring. IP v6 addresses were not properly being blocked.
Added better notes when a user is blocked.

4.0.6

Updating scripts to use my new domain name for documentation links so plugins like wordfence don’t alert users.
Updating readme to reflect compatibility with WP 5.1.

4.0.5

Fixed styling issue with jQuery UI dialog.
Changed IP links in the admin to go to domaintools.com since they can handle IPv6 addresses.

4.0.4

Changed from using wp_get_sites to get_sites to remove a deprecated message and stop using a deprecated function.
Changed functionality when updating the check interval for Project Honeypot and Spamcop lists. Now it will reset the timeout when a new interval is set.

4.0.3

Improved functionality to check blocked IP addresses on the SPamcop and Project Honeypot lists.

4.0.2

Fixed typo to correct DB prefix in activate function

4.0.1

Made change to ensure the activate function is called when a new version is released.

4.0

Added support for blocking IPv6 addresses.
Added better support for blocking proxy addresses.
Changed validation functionality to use filter_var for IP addresses.

3.2.3

Added temporary patch for IP v6 addresses.

3.2.2

Fixed bug with transient set and get for blacklist check.

3.2.1

Fixed bug that prevented IPs on the blacklist from being removed if they weren’t on the Spamcop or Project Honeypot lists anymore.
Fixed a bug that moved the dialog box above the top of the screen during an ajax call.

3.2

Changed the process to hide usernames so that it processes 100 at a time. This way it doesn’t fail if there is a large number of users.
Hid the option to show IP lists on individual sites from the settings page if the site is not a multisite install.

3.1

Forced user nicenames to be md5 hashed when usernames are hidden regardless of whether they match the user login or not.

3.0

Added option to change an authors user nicename to an md5 hash to hide their real username.
Changed the plugin to be a network only plugin. Now all IP lists are managed at the network level for multisite installs.

2.2

Fixed a bug that left details of the IP list entries escaped for MySQL when displaying them on the admin page.
Fixed a bug that prevents the user from selecting Project Honeypot or Spamcop Entry when editing an entry in the blocked list.

2.1

Moved the code to sanitize server variables for use in determining the visitors IP so that it will not throw an undefined index warning.

2.0

Added search functionality to search the different IP lists and make it easier to find an entry.
Fixed a bug that stopped the loading indicator from displaying when data was submitted.

1.2

Added indicator to show sorting direction in ip lists.
Added tabs to the settings page.

1.1

Added options to paging so you can go to any page in the list and change the type of records in the lists.

1.0

Added paging to the ip list pages.

0.2

Adding sanitization to the server keys used to prevent injection from request headers.
Ensuring that the IP being checked is an IP 4 address.
Fixed typo in the spamcop check function that checked the address of the visitor and not the address on the blocked list.

0.1

Initial version.

Meta

  • Version: 4.4.2
  • Last updated: 2 ҳафта ago
  • Active installations: 600+
  • WordPress Version: 4.6.0 or higher
  • Tested up to: 6.2
  • Languages:

    Dutch (Belgium), English (US), and Swedish.

    Translate into your language

  • Tags:
    brute force protectionhoneypotproject honeypotspam prevention
  • Advanced View

Ratings

See all
  • 5 stars 5
  • 4 stars 0
  • 3 stars 0
  • 2 stars 0
  • 1 star 1
Log in to submit a review.

Contributors

  • Jeff Sterup

Support

Issues resolved in last two months:

1 out of 2

View support forum

Donate

Would you like to support the advancement of this plugin?

Donate to this plugin

  • About
  • News
  • Hosting
  • Donate
  • Swag
  • Documentation
  • Developers
  • Get Involved
  • Learn
  • Showcase
  • Plugins
  • Themes
  • Patterns
  • WordCamp
  • WordPress.TV
  • BuddyPress
  • bbPress
  • WordPress.com
  • Matt
  • Privacy
  • Public Code
WordPress.org
WordPress.org

Вордпресси тоҷикӣ

  • Visit our Facebook page
  • Visit our Twitter account
  • Visit our Instagram account
  • Visit our LinkedIn account
Code is Poetry.