I made a honeypot / tar pit that emulates a generic wordpress install to waste bad actor's time and monitor their behavior.
its a simple app that can run independently. you don't need WP or anything else installed for this to work.
There is a dashboard that shows the attacks, the creds used etc. its very much an alpha at this time. contributions welcome.
tangled repo
https://tangled.org/bkb.arcnode.xyz/pitcherplant
Github
https://github.com/Cache8063/pitcherplant
docker
docker pull ghcr.io/cache8063/pitcherplant:latest docker run -d -p 8080:80 ghcr.io/cache8063/pitcherplant:latest
