Word Press honeypot

Word Press fake login page


Word Press honeypot. Fake logon page. We noticed that bots search for Word Press login page. Check details here. We did not waited long for first attempts.
Fake WP login page is here

Check full password list (Updated 2017-03-23) here


scan from: 134.249.54.x

1. Username: "admin" - default username
2. Passowrd dictionary:
2.1. Directed: epg1, epg2, epg3, epg.org.pl
2.2. General: admin, admin1, password, test, 1234
2.3. English dictionary: iloveyou, secret, pokemon, dragon, welcome, eminem
2.4. ?Japan? dictionary: xiatian, thienthien, naruto
2.5. PL Dictionary: jagiellonia (at least one :) )
2.6. Vendors stupid passwords: cisco12
2.7. Strange: PE#5GZ29PTZMSE, DIOSESFIEL, SEGUNDO-ASI

Whole dictionary was downloaded from: www.securrity.ru/worstpwdz.html :)


Check full dictionary here

scan from: 192.200.204.x

Very shory attack based on domain + iloveyou :)
Check full dictionary here

scan from: 46.118.122.x

Check full dictionary here

scan from: 77.121.232.x

Check full dictionary here

scan from: 213.14.72.x

Check full dictionary here

scan from: 104.194.26.x

Check full dictionary here

Other

Single shots :)
Check full dictionary here


UPDATE
Summary after 1 year

Top logins
admin 11932
Admin 6132
org 2367
East 1986
administrator 1185
epg 1103
test 465
Administrator 207
demo 153
123456 112
abc123 112
111111 81


Top origins
88.150.220.x (UK) 8135
185.87.121.x (Turkey) 3687
91.200.12.x (Ukraine) 2188
104.194.26.x (US) 1582
195.154.240.x (France) 1467
91.200.12.x (Ukraine 1442
104.194.26.x (US) 1172
180.150.226.x (Korea) 882
77.121.232.x (Ukraine) 813
178.137.16.x (Ukraine) 710
78.182.235.x (Turkey) 626
88.252.173.x (Turkey) 626
134.249.54.x (Ukraine) 537
46.118.122.x (Ukraine) 307
69.12.77.x (US) 270
85.108.31.x (Turkey) 170
213.14.72.x (Turkey) 147
31.206.89.x (Turkey) 139
121.33.50.x (China) 135
130.185.155.x (Sweden) 130


Top passwords
admin 404
111111 392
123456 359
123123 321
admin1 315
password 305
abc123 303
123456789 286
admin123 286
1234554321 263
monkey 254
iloveyou 244
administrator 239
pass 232
1234567 220
master 219
qwe123 202
12345678 198
dragon 191
michael 183
123321 176
1qaz2wsx 174
123qwe 173
asd123 173
baseball 170
welcome 167
1q2w3e 163
555555 162
666666 160
qwerty 160
112233 159
12341234 159
777777 155
999999 154
1111 151
1qazxsw2 148
55555 147
7777777 146
qwert 146
mustang 145
5555 144
admin321 144
11111 143
6666666 142
9999 142
@admin 142
66666 141
adm1n 141
asdqwe 141
0123 140
0123456 140
999 140
01234567 139
12345 139
12345678a 138
012345 137
5555555 137
9999999 137
159159 136
6666 136
7777 135
admin123456789 135
admin@ 135
99999 134
abc987 134
spacebar 134
12312423 133
123456as 133
Love12 133
p4ssw0rd 133
space 133
12qw12 132
love123 132
ninja 132
r00ted 132
xadminx 132
123-123 131
123456789a 131
123admin123 131
423423 131
Admin 131
h4ck3r 131
332211 130
55446622 130
mit123 130
1243324 129
12qw21 129
garfield 129
123*123 128
4dm1n 126
root 112
pass123 92
user 89
password1 88
demo 86
qwerty123 82
qazwsx 81
epg 77
password123 76

Check full password list here
Check full password list (Updated 2017-01-22) here
Check full password list (Updated 2017-03-23) here
Python parser txt -> DB here