Add a Django Admin Honeypot

django-admin-honeypot is a fake Django admin login screen to log and notify admins of attempted unauthorized access. This app was inspired by discussion in and around Paul McMillanÆs security talk at DjangoCon 2011.

• Install django-admin-honeypot from PyPI:

pip install django-admin-honeypot-updated-2021

• Add admin_honeypot to INSTALLED_APPS in settings.py

INSTALLED_APPS = [
    ...
    'admin_honeypot',
    ...
]

• Update your urls.py:

urlpatterns = [
    path('admin/', include('admin_honeypot.urls')),
    path('real_admin_page/', admin.site.urls),
    ...
]

• Database Migration

python manage.py makemigrations
python manage.py migrate

• Test log in on yoursite.come/admin and then check 'ADMIN_HONEYPOT -> Login attempts' after log in with real admin page.