← appsec.fyi

WordPress Honeypot Report

Updated 2026-06-21 12:05 EDT · Collecting credentials, IPs, and user agents from WordPress scanners

62,635
Total Hits
1,319
Unique IPs
54,572
Cred Attempts

First hit: 2026-04-13T16:39:47 · Last hit: 2026-06-21T11:56:17

Hits by Day (Last 30 Days)

2026-06-21
661
2026-06-20
1005
2026-06-19
1488
2026-06-18
1231
2026-06-17
1577
2026-06-16
1049
2026-06-15
1135
2026-06-14
945
2026-06-13
364
2026-06-12
974
2026-06-11
2424
2026-06-10
754
2026-06-09
738
2026-06-08
252
2026-06-07
45
2026-06-06
185
2026-06-05
923
2026-06-04
2213
2026-06-03
2373
2026-06-02
689
2026-06-01
523
2026-05-31
1811
2026-05-30
1411
2026-05-29
773
2026-05-28
1889
2026-05-27
421
2026-05-26
158
2026-05-25
1391
2026-05-24
1478
2026-05-23
421

Hits by Hour (Eastern)

00
2969
01
3448
02
3779
03
5322
04
3927
05
1097
06
2051
07
3394
08
4363
09
2916
10
1508
11
1739
12
2913
13
3075
14
3494
15
2460
16
425
17
1348
18
1960
19
1517
20
2244
21
1815
22
2444
23
2427

Top Usernames

UsernameCount
wp.getUsersBlogs30440
122612
lukas732
admin299
admin@wordpress.com30
322
222
root19
administrator1@wordpress.com18
administrator12
appsec.fyi10
appsec10
Lara9
wp.getUsers8
johnelouter6
inforena6
backupsystems5
allen-yin5
yoyo-xu4
wordpressauto4
web@fingersduke.com4
wadminw4
44
yanz@1234573
xtw18387f8163

Top Passwords

PasswordCount
admin30885
marketingfab3532cf38134
appsec7526
appsec.fyi4099
tobias-vale1188
lukas831
blog199
12345614
password12
1234567812
r007p455w0rd9
63a9f0ea79
!r007p455w0rd!9
password1238
admin1238
todaykiller337@A7
r007p4S5w0rd7
DH!bYsRn6573$3uk7
rastap455w0rd6
r007pas5w0rd6
g4a5J8fWeSfRvNMT6
fZgfj64ffs!32gggfAS6
admin@https://log.topsites.cc6
Jane3922166
$KH3WSERDfe4yfsfg$6

Top Credential Pairs

UsernamePasswordCount
wp.getUsersBlogsadmin20084
1admin10792
wp.getUsersBlogsmarketingfab3532cf38134
1appsec7523
1appsec.fyi4096
wp.getUsersBlogstobias-vale1188
wp.getUsersBlogslukas830
wp.getUsersBlogsblog199
wp.getUsersBlogsjiohotstar5
ACHObTJGpWvVx3G8WKk3
Administrarot63a9f0ea73
BearyIronWay9!#3
CarezaikeEnjf!p1t23GJ3
EricHocklySureweb0063
GuaUserWa3Arqfosg1@1s2.3@3
Lara7xTp4Lw3
LaraJane3922163
Laraadmin@https://log.topsites.cc3
User$ri$htiR@j@t@20193
ad_ddddinxsacreed@3
admin https://log.topsites.cc3
admin!@#$%^3
admin!@#admin3
admin!QAZxsw23
admin1234563

Top Countries

CountryUnique IPs
United States302
India126
Germany104
Canada79
France78
Brazil62
Vietnam57
Singapore50
United Kingdom45
Spain35
Netherlands26
Australia22
Japan22
The Netherlands21
Bangladesh18

Top IPs

IPLocationHitsCred Attempts
206.189.158.221Singapore, Singapore116271
45.154.98.38Lelystad, Netherlands30091
194.26.192.20Lelystad, Netherlands20061
217.79.116.155Sydney, Australia18601
140.245.121.218Singapore, Singapore15683
34.124.194.173Singapore, Singapore14561
134.209.100.109Singapore, Singapore11921
34.48.121.4Washington, United States11501
136.107.18.37Washington, United States11311
35.231.4.211North Charleston, United States10441
188.214.125.168Paringao, Philippines10031
137.184.130.181North Bergen, United States8331
162.243.42.117Secaucus, United States8331
192.241.244.4Secaucus, United States8331
186.22.17.80Buenos Aires, Argentina6311
91.224.92.35Vilnius, Lithuania413186
136.158.123.19Tarlac City, Philippines3791
146.190.254.54Toronto, Canada3631
177.34.168.80São Carlos, Brazil3501
197.186.75.95Dar es Salaam, Tanzania3001
45.112.71.109Kolkata, India3001
103.184.104.165Dombivali, India2971
161.118.192.143Singapore, Singapore24667
161.118.234.191Singapore, Singapore24667
146.70.194.228Dourdain, France2441

Top Paths

PathHits
/xmlrpc.php52977
/wp-login.php3792
/wp-json/wp/v2/users/me1364
/wp-content/plugins/hellopress/wp_filemanager.php143
/wp-json/wp/v2/users103
/wp-content/admin.php99
/wp-content/uploads/57
/wp-content/themes/index.php48
/wp-admin/js/index.php48
/wp-admin/css/47
/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings45
/wp-admin/js/41
/wp-includes/Requests/40
/wp-content/index.php40
/wp-json/wp/v2/users/39
/wp-json/oembed/1.0/embed?url=https://appsec.fyi/39
/wp-includes/wlwmanifest.xml39
/wp-includes/Text/Diff/Engine/about.php39
/wp-includes/js/jquery/34
/wp-includes/l10n/33
/wp-includes/css/dist/33
/wp-admin/css/colors/blue/33
/wp-includes/block-bindings/30
/wp-includes/blocks/details/29
/wp-includes/blocks/buttons/29

Top User Agents

User AgentHits
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…15468
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…9328
WordPress.com; https://wordpress.com3597
Jetpack by WordPress.com3520
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…3436
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…2499
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…961
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/5…375
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…365
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)…363
Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)256
Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)250
Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)239
Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)235
Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)234

Methods

MethodCount
POST54572
GET8044
HEAD19