Protect your website from unauthorized crawlers and malicious bots that ignore your site’s robots.txt directives. Fstyle Honeypot Bot Blocker provides a lightweight yet powerful security layer by automatically detecting and blocking intruders.

Once installed, it sets a hidden trap path in your robots.txt. If a bot attempts to access this forbidden area, its IP address is immediately captured and blocked from accessing your entire site.

It also treats the paths that scanners probe first (.env, .git, credentials.json, phpinfo.php, wp-config.php backups, vendor/phpunit, phpMyAdmin) as traps. A normal WordPress site never serves these files, so the scanner is stopped on its first request, before it tries anything else.

It can also protect Contact Form 7 forms with a hidden field and a fill-in timer (off by default). Nothing is sent to an outside service.

Features

Instant Honeypot Block: Automatically adds a trap path to your robots.txt.
Scanner Path Traps: Blocks bots that probe .env, .git, key files, phpinfo, wp-config backups, phpunit and phpMyAdmin (can be turned off).
Your Own Traps: Add extra trap paths from the settings screen.
Contact Form 7 Protection (off by default): A hidden field and a fill-in timer stop bot submissions without reCAPTCHA. Choose Off, Log only or Block.
IP Management Dashboard: View detailed logs of blocked IP addresses and manage them easily.
Smart Whitelist: Add trusted service IPs to prevent accidental lockouts.
Ultra-Lightweight: Built for performance with minimal database impact.