← appsec.fyi

WordPress Honeypot Report

Updated 2026-05-21 00:05 EDT · Collecting credentials, IPs, and user agents from WordPress scanners

28,279
Total Hits
401
Unique IPs
25,805
Cred Attempts

First hit: 2026-04-13T16:39:47 · Last hit: 2026-05-20T21:04:32

Hits by Day (Last 30 Days)

2026-05-20
412
2026-05-19
1307
2026-05-18
413
2026-05-17
1066
2026-05-16
268
2026-05-15
387
2026-05-14
796
2026-05-13
1281
2026-05-12
156
2026-05-11
129
2026-05-10
81
2026-05-09
150
2026-05-08
1337
2026-05-07
1516
2026-05-06
76
2026-05-05
1275
2026-05-04
3669
2026-05-03
3538
2026-05-02
5065
2026-05-01
130
2026-04-30
242
2026-04-29
1977
2026-04-28
34
2026-04-27
291
2026-04-26
129
2026-04-25
181
2026-04-24
50
2026-04-23
277
2026-04-22
446
2026-04-21
219

Hits by Hour (Eastern)

00
1411
01
1425
02
1523
03
2760
04
2300
05
250
06
141
07
424
08
1015
09
2038
10
488
11
473
12
1369
13
1464
14
1750
15
1463
16
128
17
444
18
511
19
910
20
1423
21
1166
22
1633
23
1770

Top Usernames

UsernameCount
wp.getUsersBlogs20048
14242
lukas732
admin298
admin@wordpress.com30
322
222
root19
administrator1@wordpress.com18
administrator12
appsec.fyi10
appsec10
Lara9
johnelouter6
inforena6
wp.getUsers5
backupsystems5
allen-yin5
yoyo-xu4
wordpressauto4
web@fingersduke.com4
wadminw4
44
yanz@1234573
xtw18387f8163

Top Passwords

PasswordCount
admin11998
marketingfab3532cf38134
appsec.fyi1980
tobias-vale1188
lukas831
12345614
password12
1234567812
r007p455w0rd9
63a9f0ea79
!r007p455w0rd!9
password1238
admin1238
todaykiller337@A7
r007p4S5w0rd7
DH!bYsRn6573$3uk7
rastap455w0rd6
r007pas5w0rd6
g4a5J8fWeSfRvNMT6
fZgfj64ffs!32gggfAS6
admin@https://log.topsites.cc6
Jane3922166
$KH3WSERDfe4yfsfg$6
jiohotstar5
test4

Top Credential Pairs

UsernamePasswordCount
wp.getUsersBlogsadmin9891
wp.getUsersBlogsmarketingfab3532cf38134
1admin2098
1appsec.fyi1977
wp.getUsersBlogstobias-vale1188
wp.getUsersBlogslukas830
wp.getUsersBlogsjiohotstar5
ACHObTJGpWvVx3G8WKk3
Administrarot63a9f0ea73
BearyIronWay9!#3
CarezaikeEnjf!p1t23GJ3
EricHocklySureweb0063
GuaUserWa3Arqfosg1@1s2.3@3
Lara7xTp4Lw3
LaraJane3922163
Laraadmin@https://log.topsites.cc3
User$ri$htiR@j@t@20193
ad_ddddinxsacreed@3
admin https://log.topsites.cc3
admin!@#$%^3
admin!@#admin3
admin!QAZxsw23
admin1234563
admin123456!@#3
admin1234qwer3

Top Countries

CountryUnique IPs
United States113
Germany31
Canada28
India26
Singapore24
France22
Brazil14
Vietnam11
Netherlands10
Spain10
Australia9
The Netherlands8
Andorra8
Finland6
United Kingdom5

Top IPs

IPLocationHitsCred Attempts
206.189.158.221Singapore, Singapore116271
217.79.116.155Sydney, Australia18601
140.245.121.218Singapore, Singapore15683
134.209.100.109Singapore, Singapore11921
34.48.121.4Washington, United States11501
136.107.18.37Washington, United States11311
35.231.4.211North Charleston, United States10441
192.241.244.4Secaucus, United States8331
91.224.92.35Vilnius, Lithuania413186
136.158.123.19Tarlac City, Philippines3791
161.118.192.143Singapore, Singapore24667
161.118.234.191Singapore, Singapore24667
178.73.101.128Jeddah, Saudi Arabia2321
118.179.177.17Dhaka, Bangladesh1301
196.217.152.79Casablanca, Morocco1301
219.79.250.55Causeway Bay, Hong Kong1301
47.201.68.204Winter Haven, United States1301
59.184.194.127Sāgar, India1301
92.176.213.160Sant Feliu de Codines, Spain1301
182.180.170.250Islamabad, Pakistan1251
24.234.215.29Las Vegas, United States1241
201.27.183.145Limeira, Brazil1171
103.240.206.174Vadodara, India1161
112.134.212.98Colombo, Sri Lanka1161
115.242.246.46Patna, India1161

Top Paths

PathHits
/xmlrpc.php24199
/wp-login.php1826
/wp-json/wp/v2/users/me108
/wp-content/plugins/hellopress/wp_filemanager.php79
/wp-content/admin.php56
/wp-json/wp/v2/users54
/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings31
/wp-admin/js/index.php29
/wp-content/themes/index.php27
/wp-content/uploads/25
/wp-content/index.php25
/wp-admin/css/bolt.php25
/wp-includes/Text/Diff/Engine/about.php24
/wp-content/plugins/admin.php22
/wp-content/plugins/index.php20
/wp-content/plugins/pwnd/as.php19
/wp-includes/l10n/18
/wp-includes/js/jquery/18
/wp-includes/css/index.php?p=18
/wp-includes/css/dist/18
/wp-content/uploads/2021/02/index.php18
/wp-admin/maint/index.php18
/wp-admin/js/18
/wp-json/wp/v2/users/17
/wp-json/oembed/1.0/embed?url=https://appsec.fyi/17

Top User Agents

User AgentHits
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…9328
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…7238
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…3436
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…833
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…315
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/5…127
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…96
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…51
Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)39
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, lik…37
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, lik…34
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Geck…32
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90…30
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) …29
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, lik…28

Methods

MethodCount
POST25805
GET2455
HEAD19