Stop malicious bots and scanners instantly using a smart honeypot trap.
Protect your website from unauthorized crawlers and malicious bots that ignore your site’s robots.txt directives. Fstyle Honeypot Bot Blocker provides a lightweight yet powerful security layer by automatically detecting and blocking intruders.
Once installed, it sets a hidden trap path in your robots.txt. If a bot attempts to access this forbidden area, its IP address is immediately captured and blocked from accessing your entire site.
It also treats the paths that scanners probe first (.env, .git, credentials.json, phpinfo.php, wp-config.php backups, vendor/phpunit, phpMyAdmin) as traps. A normal WordPress site never serves these files, so the scanner is stopped on its first request, before it tries anything else.
Features
- Instant Honeypot Block: Automatically adds a trap path to your robots.txt.
- Scanner Path Traps: Blocks bots that probe .env, .git, key files, phpinfo, wp-config backups, phpunit and phpMyAdmin (can be turned off).
- Your Own Traps: Add extra trap paths from the settings screen.
- IP Management Dashboard: View detailed logs of blocked IP addresses and manage them easily.
- Smart Whitelist: Add trusted service IPs to prevent accidental lockouts.
- Ultra-Lightweight: Built for performance with minimal database impact.
Screenshots
The main dashboard showing blocked IP logs and whitelist settings.