← appsec.fyi

WordPress Honeypot Report

Updated 2026-05-12 12:07 EDT · Collecting credentials, IPs, and user agents from WordPress scanners

22,311
Total Hits
227
Unique IPs
20,612
Cred Attempts

First hit: 2026-04-13T16:39:47 · Last hit: 2026-05-12T08:12:02

Hits by Day (Last 30 Days)

2026-05-12
118
2026-05-11
129
2026-05-10
81
2026-05-09
150
2026-05-08
1337
2026-05-07
1516
2026-05-06
76
2026-05-05
1275
2026-05-04
3669
2026-05-03
3538
2026-05-02
5065
2026-05-01
130
2026-04-30
242
2026-04-29
1977
2026-04-28
34
2026-04-27
291
2026-04-26
129
2026-04-25
181
2026-04-24
50
2026-04-23
277
2026-04-22
446
2026-04-21
219
2026-04-20
130
2026-04-19
180
2026-04-18
475
2026-04-17
142
2026-04-16
244
2026-04-15
59
2026-04-14
129
2026-04-13
22

Hits by Hour (Eastern)

00
1273
01
1226
02
1268
03
1354
04
2059
05
98
06
131
07
416
08
678
09
1912
10
478
11
379
12
1216
13
1365
14
1394
15
879
16
85
17
238
18
209
19
778
20
1314
21
1143
22
1257
23
1161

Top Usernames

UsernameCount
wp.getUsersBlogs17125
13177
admin72
admin@wordpress.com10
root7
inforena6
administrator1@wordpress.com6
allen-yin5
yoyo-xu4
ever3
backupsystems3
Lara3
wpadminerlzp2
wp-user2
wordpressauto2
web@fingersduke.com2
wadminw2
wadmin2
trumpweiss2
theadmin2
johnelouter2
ivenyyqszj662
depend2
bot2
auditwpmedia2

Top Passwords

PasswordCount
admin9358
marketingfab3532cf38134
appsec.fyi1483
tobias-vale1188
todaykiller337@A7
jiohotstar5
MANOBRAS1234567894
r007p4S5w0rd3
r007p455w0rd3
admin1233
DH!bYsRn6573$3uk3
63a9f0ea73
1234563
!r007p455w0rd!3
rastap455w0rd2
r007pd8skdgSejrd2
r007pas5w0rd2
g4a5J8fWeSfRvNMT2
fZgfj64ffs!32gggfAS2
cyborg2
admin@https://log.topsites.cc2
Jane3922162
Berbagaidata1232
76R2
63a9f0ea7bb98050796b649e854818452

Top Credential Pairs

UsernamePasswordCount
wp.getUsersBlogsmarketingfab3532cf38134
wp.getUsersBlogsadmin7798
1admin1558
1appsec.fyi1483
wp.getUsersBlogstobias-vale1188
wp.getUsersBlogsjiohotstar5
0123456989999999991
1#appsec.fyi1
1105301
1123Appsec.fyi1
1128021
1140821
1187731
12015appsec.fyi1
12016appsec.fyi1
12021!appsec.fyi1
12021%Appsec.fyi1
12022!appsec.fyi1
12022@Appsec.fyi1
12023$Appsec.fyi1
12023@Appsec.fyi1
12024APPSEC.FYI1
12024appsec.fyi1
12026!appsec.fyi1
12026#Appsec.fyi1

Top Countries

CountryUnique IPs
United States62
India16
Germany16
Singapore14
Canada14
France12
Australia7
Netherlands7
Spain7
Andorra7
Brazil5
Switzerland4
Italy4
Sweden4
Norway4

Top IPs

IPLocationHitsCred Attempts
206.189.158.221Singapore, Singapore116271
217.79.116.155Sydney, Australia18601
134.209.100.109Singapore, Singapore11921
34.48.121.4Washington, United States11501
136.107.18.37Washington, United States11311
91.224.92.35Vilnius, Lithuania413186
136.158.123.19Tarlac City, Philippines3791
118.179.177.17Dhaka, Bangladesh1301
196.217.152.79Casablanca, Morocco1301
47.201.68.204Winter Haven, United States1301
59.184.194.127Sāgar, India1301
92.176.213.160Sant Feliu de Codines, Spain1301
182.180.170.250Islamabad, Pakistan1251
24.234.215.29Las Vegas, United States1241
201.27.183.145Limeira, Brazil1171
103.240.206.174Vadodara, India1161
112.134.212.98Colombo, Sri Lanka1161
115.242.246.46Patna, India1161
145.224.119.33Athens, Greece1161
203.212.200.101Mumbai, India1161
221.121.104.161Cebu City, Philippines1161
36.85.216.69Manado, Indonesia1161
41.223.6.132Musoma, Tanzania1161
64.44.86.134Denver, United States1161
104.64.206.48Singapore, Singapore1151

Top Paths

PathHits
/xmlrpc.php20224
/wp-login.php474
/wp-content/plugins/hellopress/wp_filemanager.php67
/wp-content/admin.php46
/wp-json/wp/v2/users44
/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings28
/wp-admin/js/index.php24
/wp-content/themes/index.php22
/wp-includes/Text/Diff/Engine/about.php21
/wp-content/index.php20
/wp-admin/css/bolt.php20
/wp-content/plugins/admin.php19
/wp-content/uploads/18
/wp-includes/SimplePie/17
/wp-content/plugins/index.php17
/wp-content/plugins/pwnd/as.php16
/wp-includes/l10n/15
/wp-includes/js/jquery/15
/wp-includes/css/index.php?p=15
/wp-includes/css/dist/15
/wp-content/uploads/2021/02/index.php15
/wp-admin/maint/index.php15
/wp-admin/js/fi.php15
/wp-includes/Requests/14
/wp-admin/maint/about.php14

Top User Agents

User AgentHits
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…9328
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…5960
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…1868
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…304
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/5…62
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…48
Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)29
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, lik…18
Go-http-client/2.017
Mozilla/5.016
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92…15
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, lik…15
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91…14
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90…14
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Geck…14

Methods

MethodCount
POST20612
GET1680
HEAD19