The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Honeypot Toolkit
Automatically insert Project Honeypot links into your pages and block IP addresses that are listed on various block lists you can choose from.
The facts
- Rating
- 4.3★ from 9
- Active installs
- 400+
- Price
- Free
- Last updated
- 6 Feb 2026
- Added
- Dec 2017
- Requires WP
- 4.6.0
- Tested up to
- WP 6.9.7
- Downloads
- 20,306
Our analysis
AI-assistedHoneypot Toolkit is a WordPress plugin designed to enhance website security by integrating Project Honeypot links and blocking malicious IP addresses. It helps to prevent spam and brute force attacks by offering various blocking options, including those based on Spamcop's blacklist and the SANS Internet Storm Center API.
This plugin is suitable for users looking to protect their WordPress sites from unwanted bot activity and spam. It provides features to block users based on failed login attempts and to prevent WordPress User Enumeration.
Best for: This plugin suits WordPress site owners concerned about spam and security threats.
What it does well
- ✓Integrates Project Honeypot links automatically
- ✓Blocks IP addresses from multiple blacklists
- ✓Prevents brute force attacks with login attempt tracking
- ✓Blocks IPs generating excessive 404 errors
- ✓Protects against WordPress User Enumeration
Where it falls short
- •Limited information on additional features or support
- •No details on user interface or ease of use
Verdict
Honeypot Toolkit offers a range of security features for WordPress users, but details on usability and additional support are limited.
From the developer
Jeff Sterup's own description of Honeypot Toolkit, lightly tidied.
This plugin allows you to automatically insert your Project Honeypot links into all of your pages and block IP addresses that are listed on the Http:BL list from Project Honeypot. There is an option to block IP addresses that have been blocked by Spamcop using their blacklist and the SANS Internet Storm Center API as well.
To prevent bots from using brute force attacks and scanning your site there is an option to block users that fail to login a set number of times or use blocked user names. You can also block IP addresses that generate a large number of 404 errors. This plugin will also prevent WordPress User Enumeration and automatically block anyone attempting it.
Tagged as
Alternatives
Other plugins for stopping spam.
Allows administrators to globally disable comments on their site. Comments can be disabled according to post t...
Free
1M+ installs 4.7★ (280)
Antispam Bee
92Sophisticated antispam plugin for effective daily comment and trackback spam-fighting. Built with data protect...
Free
700k+ installs 4.8★ (226)
Top-rated antispam for contact forms, comments, WooCommerce, eCommerce, and login. No CAPTCHAs, no friction, j...
Free
200k+ installs 4.8★ (3,208)
Adds reCaptcha v2 from Contact Form 7 5.0.5 that was dropped on Contact Form 7 5.1
Free
200k+ installs 5★ (89)
Captcha protection against spam comments & brute force login attacks using Google reCAPTCHA.
Free
200k+ installs 4.8★ (430)