WordPress Form Honeypot: Stop Spam Bots Without a Captcha
How the ReportedIP Hive form honeypot and execution proof stop spam bots on comments, sign-ups and form plugins, what a refused visitor sees and what each plan covers.
Read moreNews & Updates
Release announcements, threat intelligence updates, and security news from the ReportedIP team.
ReportedIP Hive 2.1.54: Form Execution Proof and a One-Page Quickstart
Hive 2.1.53 added a form execution proof against scripted comment, sign-up and password-reset spam, and 2.1.54 replaced the ten-step setup wizard with a one-page quickstart. With notes on what has changed up to 2.1.67.
Read more
Hive 2.1.51: Registration Defence and Access Lockdown for WordPress
Hive 2.1.51 brought registration rules, access lockdown switches, a readiness register, adaptive two-factor triggers and account blocking with a session manager. Three of the five are free on every plan. With notes on what has changed up to 2.1.67.
Read more
WordPress Sites Get Attacked Just for Being Online: 356 Attacks in 7 Hours
21 new WordPress honeypots nobody knew about took 356 attacks from 84 IPs in seven hours on 6 September 2026. The first attack came 15 minutes after go-live.
Read more
CVE-2026-19949: All-in-One WP Migration SQL Injection and What to Do
CVE-2026-19949 lets attackers plant SQL in trackbacks that fires when a backup is restored in All-in-One WP Migration up to 7.109. Affected versions, the fix in 7.110, how to spot an attack and what the Hive firewall covers.
Read more
ReportedIP Hive 2.1.49: Security Audit, Settings Standard and Fleet Management
Nine security findings closed, plugin updates restored for remote dashboards, one settings registry and signed fleet management for every site you run. What Hive 2.1.42 to 2.1.49 shipped, with notes on what has changed up to 2.1.67.
Read more
ReportedIP Hive Nears 100 Installations in Four Months
Four months after its first release, 88 WordPress sites had connected ReportedIP Hive to the community network by August 20, 2026. The HIVE50 coupon takes 50% off the first year of Hive PRO until November 20, 2026.
Read more
Block Tor Exit Nodes in WordPress and Get the Real Client IP Right
When blocking Tor exit nodes in WordPress makes sense, how ReportedIP Hive does it, where the limits are and how to set up the real client IP behind Cloudflare.
Read more
YubiKey 5C NFC for WordPress 2FA: Setup, Login and Troubleshooting
How to use the YubiKey 5C NFC as a second factor in WordPress with ReportedIP Hive: setup, USB-C and NFC login, lost keys and the error messages you will meet.
Read more
WordPress Attack Report: 1.69 Million Attacks, May to July 2026
From May 1 to July 21, 2026, the ReportedIP network recorded 1,692,650 attacks from 206,388 unique IPs. Login brute force led the WordPress categories, and wp2shell showed up in the data.
Read more
Protect Your Web Server With a Live IP Blacklist
Sync the ReportedIP blacklist into ipset or nftables yourself: five port-scoped lists, hourly ETag polling that costs no quota, fail2ban reports back, and when the Linux Agent is the better route.
Read more
wp2shell: Unauthenticated WordPress RCE and How to Block It
wp2shell chains two WordPress core CVEs into unauthenticated code execution. Affected and fixed versions, 601 attack reports from our honeypots and how Hive blocks it on every plan.
Read more
Security Focused
GDPR Compliant
Made in Germany