I made a honeypot / tar pit that emulates a generic wordpress install to waste bad actor's time and monitor their behavior.
its a simple app that can run independently. you don't need WP or anything else installed for this to work.
There is a dashboard that shows the attacks, the creds used etc. its very much an alpha at this time. contributions welcome.