Usage Analyzer Stats

Detailed IP classifications shown one section at a time, so you can scan likely intrusion attempts, automation, mixed behavior, and legitimate website usage without the summary map getting in the way.

Cache refreshes hourly.
Last build: 2026-07-14T01:07:01+00:00

Target website filter

Scope the stats to one inferred website target.

Requests parsed
1,362
Across 115 IPs
Legitimate usage IPs
72
944 requests
Automation IPs
2
40 requests
Intrusion IPs
7
343 requests

Likely intrusion attempts

IPs whose requests emphasized probes, attack tooling, or heavy error-driven scanning.

IP Requests Location Signals
103.73.46.160
Likely intrusion attempt
146
POST (145), GET (1) 		Dhaka, Dhaka Division, Bangladesh Why:
  • Targets included /xmlrpc.php
Paths: /xmlrpc.php, /wp-json/wp/v2/users
2400:1a00:4b21:b68e:9812:9bd1:ae42:2c7
Likely intrusion attempt
107
POST (107) 		Kathmandu, Bagmati Province, Nepal Why:
  • Targets included /xmlrpc.php
Paths: /xmlrpc.php
103.186.11.70
Likely intrusion attempt
70
POST (69), GET (1) 		Indonesia Why:
  • Targets included /xmlrpc.php
Paths: /wp-json/wp/v2/users, /xmlrpc.php
45.148.10.200
Likely intrusion attempt
7
GET (7) 		Amsterdam, North Holland, The Netherlands Why:
  • 86% of requests ended in 4xx/5xx responses
  • Targets included /.env.staging, /storage/.env, /core/.env
Paths: /, /.env.staging, /env, /storage/.env, /core/.env
147.93.168.73
Likely intrusion attempt
6
GET (6) 		Mumbai, Maharashtra, India Why:
  • Scanner-style user agents were present
  • Targets included /wp-includes/css/buttons.css
Paths: /wp-includes/css/buttons.css
45.92.229.122
Likely intrusion attempt
5
GET (5) 		New York, New York, United States Why:
  • Scanner-style user agents were present
  • Targets included /, /administrator/, /administrator/manifests/files/joomla.xml
Paths: /, /administrator/, /administrator/manifests/files/joomla.xml, /language/en-GB/en-GB.xml, /robots.txt
45.130.83.116
Likely intrusion attempt
2
GET (2) 		New York, New York, United States Why:
  • Scanner-style user agents were present
  • 50% of requests ended in 4xx/5xx responses
  • Targets included /, /administrator/
Paths: /, /administrator/

Automation and crawlers

Monitors, bots, and scheduled jobs that looked programmatic rather than human.

IP Requests Location Signals
192.0.84.117
Automation or crawler
20
HEAD (20) 		Dallas, Texas, United States Why:
  • Traffic matches uptime monitoring
  • User agents match crawlers or scheduled jobs
  • Most requests completed successfully
Paths: /
192.0.91.228
Automation or crawler
20
HEAD (20) 		Dallas, Texas, United States Why:
  • Traffic matches uptime monitoring
  • User agents match crawlers or scheduled jobs
  • Most requests completed successfully
Paths: /

Mixed signals

IPs with a blend of normal traffic and suspicious or automated behavior.

IP Requests Location Signals
104.23.217.125
Mixed signals
2
GET (2) 		Stockholm, Stockholm County, Sweden Why:
  • Some requests matched probe patterns
Paths: /wp-admin/install.php?step=1
172.68.10.92
Mixed signals
1
GET (1) 		Moscow, Moscow, Russia Why:
  • Some requests matched probe patterns
Paths: /wp-admin/install.php?step=1
172.68.10.93
Mixed signals
1
GET (1) 		Moscow, Moscow, Russia Why:
  • Some requests matched probe patterns
Paths: /wp-admin/install.php?step=1
192.0.112.238
Mixed signals
1
POST (1) 		Los Angeles, California, United States Why:
  • Some requests matched probe patterns
Paths: /xmlrpc.php?for=jetpack&token=IaXbYS%23d%28%23%5EgrAz1%26X%29pRUv40YBsU%5Er9%3A1%3A1&timestamp=1783990402&nonce=WiGyLottUr&body-hash=1hmRBevfvYFcT9d1FUas6OiJASQ%3D&signature=Cao8Upg0wt7qVUR3Yp%2B3IjoPqgM%3D
192.0.112.239
Mixed signals
1
POST (1) 		Los Angeles, California, United States Why:
  • Some requests matched probe patterns
Paths: /xmlrpc.php?for=jetpack&token=IaXbYS%23d%28%23%5EgrAz1%26X%29pRUv40YBsU%5Er9%3A1%3A1&timestamp=1783990402&nonce=XULlR0gRgx&body-hash=zIngGyVuLVbQ6372cybTPIn20M0%3D&signature=ZvCR%2FB%2F7KX%2BN4u%2BuCaVHveTEypg%3D
192.0.113.79
Mixed signals
1
POST (1) 		Los Angeles, California, United States Why:
  • Some requests matched probe patterns
Paths: /xmlrpc.php?for=jetpack&token=IaXbYS%23d%28%23%5EgrAz1%26X%29pRUv40YBsU%5Er9%3A1%3A1&timestamp=1783990402&nonce=3NK457PJou&body-hash=QJIDY52SBOR%2B%2F1pXKJzRc%2FcjlXU%3D&signature=LwRimy9vFuvnoFsQyoEOOxjMGYw%3D
192.0.116.112
Mixed signals
1
POST (1) 		Los Angeles, California, United States Why:
  • Some requests matched probe patterns
Paths: /xmlrpc.php?for=jetpack&token=IaXbYS%23d%28%23%5EgrAz1%26X%29pRUv40YBsU%5Er9%3A1%3A1&timestamp=1783985449&nonce=aAzaNiLmgA&body-hash=1hmRBevfvYFcT9d1FUas6OiJASQ%3D&signature=GE6twHPiUiCcrMq8KvdAfPTA5Ng%3D
192.0.116.16
Mixed signals
1
POST (1) 		Los Angeles, California, United States Why:
  • Some requests matched probe patterns
Paths: /xmlrpc.php?for=jetpack&token=IaXbYS%23d%28%23%5EgrAz1%26X%29pRUv40YBsU%5Er9%3A1%3A1&timestamp=1783990402&nonce=qFc0J4bgLF&body-hash=gA116f2QQmYmvlQtejlTbFI8WAE%3D&signature=HT%2BxDpCHy1QbgrBlHKcMrXGGgng%3D
192.0.116.238
Mixed signals
1
POST (1) 		Los Angeles, California, United States Why:
  • Some requests matched probe patterns
Paths: /xmlrpc.php?for=jetpack&token=IaXbYS%23d%28%23%5EgrAz1%26X%29pRUv40YBsU%5Er9%3A1%3A1&timestamp=1783985448&nonce=Jkc1hjsJAt&body-hash=QJIDY52SBOR%2B%2F1pXKJzRc%2FcjlXU%3D&signature=dYxGEW627nVzta2ud7x2xxVpqpM%3D
192.0.116.81
Mixed signals
1
POST (1) 		Los Angeles, California, United States Why:
  • Some requests matched probe patterns
Paths: /xmlrpc.php?for=jetpack&token=IaXbYS%23d%28%23%5EgrAz1%26X%29pRUv40YBsU%5Er9%3A1%3A1&timestamp=1783990402&nonce=SYq6Ou3s2Y&body-hash=ZcMLn7rjgwOz%2F1x2dZRHF6vnWpE%3D&signature=5Hf4LwMHoeVPJsOvE2iMSvGLR%2Fg%3D
192.0.118.46
Mixed signals
1
POST (1) 		Los Angeles, California, United States Why:
  • Some requests matched probe patterns
Paths: /xmlrpc.php?for=jetpack&token=IaXbYS%23d%28%23%5EgrAz1%26X%29pRUv40YBsU%5Er9%3A1%3A1&timestamp=1783985449&nonce=TmQkESrBiT&body-hash=zIngGyVuLVbQ6372cybTPIn20M0%3D&signature=cW%2BGjkdhiRPyqVk2U5Zhx2gPISY%3D
192.0.91.22
Mixed signals
1
POST (1) 		Dallas, Texas, United States Why:
  • Some requests matched probe patterns
Paths: /xmlrpc.php?for=jetpack&token=IaXbYS%23d%28%23%5EgrAz1%26X%29pRUv40YBsU%5Er9%3A1%3A1&timestamp=1783985530&nonce=JUljFHTEdT&body-hash=nKpp5WLBRratkjd8I4Lpr8CmBOE%3D&signature=tw2oNxxGZsS36jUQL94wNiET1uk%3D
20.46.251.132
Mixed signals
1
GET (1) 		Des Moines, Iowa, United States Why:
  • Some requests matched probe patterns
  • Some traffic still looked like normal browsing
Paths: /
20.98.140.180
Mixed signals
1
GET (1) 		Des Moines, Iowa, United States Why:
  • Some requests matched probe patterns
  • Some traffic still looked like normal browsing
Paths: /owa/auth/x.js
45.130.83.105
Mixed signals
1
GET (1) 		New York, New York, United States Why:
  • Some requests matched probe patterns
Paths: /language/en-GB/en-GB.xml
45.130.83.89
Mixed signals
1
GET (1) 		New York, New York, United States Why:
  • Some requests matched probe patterns
Paths: /robots.txt
45.130.83.90
Mixed signals
1
GET (1) 		New York, New York, United States Why:
  • Some requests matched probe patterns
Paths: /
45.131.194.115
Mixed signals
1
POST (1) 		San Francisco, California, United States Why:
  • Some requests matched probe patterns
  • Some traffic still looked like normal browsing
Paths: /wp-login.php
45.146.54.40
Mixed signals
1
POST (1) 		San Francisco, California, United States Why:
  • Some requests matched probe patterns
  • Some traffic still looked like normal browsing
Paths: /wp-login.php
45.146.54.43
Mixed signals
1
POST (1) 		San Francisco, California, United States Why:
  • Some requests matched probe patterns
  • Some traffic still looked like normal browsing
Paths: /wp-login.php

Legitimate website usage

IPs that mostly behaved like browsers fetching pages and assets.

IP Requests Location Signals
20.63.63.128
Legitimate website usage
331
GET (331) 		Toronto, Ontario, Canada Why:
  • Normal page-view patterns outweighed suspicious probes
Paths: /wp-content/plugins/hellopress/wp_filemanager.php, /this_is_a_new_hello_world.php, /wp-conflg.php, /k2.php, /wp-admin/wpyfiavs.php
2601:600:827f:19f0:6c00:d364:922a:9c3f
Legitimate website usage
309
GET (298), UNKNOWN (7), POST (4) 		Kirkland, Washington, United States Why:
  • Browser user agents dominated the activity
  • Requests arrived with human-style referers
  • Most requests were successful page or asset fetches
  • Requests focused on pages and assets rather than admin surfaces
Paths: /wp-admin, /wp-admin/, /wp-login.php?redirect_to=https%3A%2F%2Fbradcentral.net%2Fwp-admin%2F&reauth=1, /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-connection/dist/jetpack-sso-login.js?minify=false&ver=8.7.6, /wp-includes/css/dashicons.min.css?ver=7.0.1
20.195.184.45
Legitimate website usage
100
GET (100) 		Campinas, São Paulo, Brazil Why:
  • Browser user agents dominated the activity
Paths: /inputs.php, /admin.php, /goods.php, /file.php, /adminfuns.php
188.166.187.116
Legitimate website usage
36
GET (36) 		Singapore, Singapore Why:
  • Requests arrived with human-style referers
  • Most requests were successful page or asset fetches
Paths: /images/images/cache.php, /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php, /images/images/images/images/images/images/images/images/cache.php, /images/images/images/images/images/images/images/cache.php, /images/images/images/images/images/images/cache.php
34.186.229.72
Legitimate website usage
15
HEAD (15) 		Columbus, Ohio, United States Why:
  • Browser user agents dominated the activity
  • Requests arrived with human-style referers
  • Most requests were successful page or asset fetches
  • Requests focused on pages and assets rather than admin surfaces
Paths: /, /backup/, /blog/, /wordpress/, /wp/
2601:600:827f:19f0:dff:84e3:a3e8:5491
Legitimate website usage
10
GET (7), UNKNOWN (3) 		Kirkland, Washington, United States Why:
  • Browser user agents dominated the activity
  • Requests arrived with human-style referers
  • Most requests were successful page or asset fetches
  • Requests focused on pages and assets rather than admin surfaces
Paths: /usage/, /usage/assets/styles.css, /, /myip, /myip/
216.73.216.144
Legitimate website usage
8
GET (8) 		Columbus, Ohio, United States Why:
  • Browser user agents dominated the activity
  • Requests arrived with human-style referers
  • Most requests were successful page or asset fetches
Paths: /robots.txt, /mxlookup/, /whois, /whois/, /usage/
2601:600:827f:19f0:14c7:a67f:d7c0:f42a
Legitimate website usage
6
GET (6) 		Kirkland, Washington, United States Why:
  • Most requests were successful page or asset fetches
Paths: /wp-json/wp/v2/themes?context=edit&status=active, /wp-json/wp/v2/users/me?context=edit, /wp-json, /wp-json/wp/v2/settings?context=edit, /wp-json/wp/v2/users/me/application-passwords/introspect?context=view
2601:600:827f:19f0:9d11:ab35:ba79:fc2a
Legitimate website usage
6
GET (6) 		Kirkland, Washington, United States Why:
  • Most requests were successful page or asset fetches
Paths: /wp-json/wp/v2/users/me?context=edit, /wp-json/wp/v2/themes?context=edit&status=active, /wp-json/wp/v2/settings?context=edit, /wp-json/wp/v2/users/me/application-passwords/introspect?context=view, /wp-json
2602:80d:1008::43
Legitimate website usage
6
GET (3), UNKNOWN (2), PRI (1) 		United States Why:
  • Browser user agents dominated the activity
  • Requests focused on pages and assets rather than admin surfaces
Paths: \x16\x03\x01, /, *, /favicon.ico, /wiki
45.205.1.223
Legitimate website usage
6
GET (6) 		Brazil Why:
  • Browser user agents dominated the activity
  • Requests focused on pages and assets rather than admin surfaces
Paths: /, /favicon.ico
66.132.172.34
Legitimate website usage
6
GET (3), UNKNOWN (2), PRI (1) 		United States Why:
  • Browser user agents dominated the activity
  • Requests focused on pages and assets rather than admin surfaces
Paths: \x16\x03\x01, /, *, /favicon.ico, /wiki
137.184.83.108
Legitimate website usage
4
GET (4) 		Santa Clara, California, United States Why:
  • Browser user agents dominated the activity
  • Most requests were successful page or asset fetches
  • Requests focused on pages and assets rather than admin surfaces
Paths: /wp-login.php, /?author=1, /?author=2
142.93.97.116
Legitimate website usage
4
GET (4) 		Frankfurt am Main, Hesse, Germany Why:
  • Browser user agents dominated the activity
  • Most requests were successful page or asset fetches
  • Requests focused on pages and assets rather than admin surfaces
Paths: /wp-login.php, /?author=1, /?author=2
143.198.137.114
Legitimate website usage
4
GET (4) 		Santa Clara, California, United States Why:
  • Browser user agents dominated the activity
  • Requests arrived with human-style referers
  • Most requests were successful page or asset fetches
  • Requests focused on pages and assets rather than admin surfaces
Paths: /, /favicon.ico
147.45.125.75
Legitimate website usage
4
GET (2), POST (2) 		Russia Why:
  • Browser user agents dominated the activity
  • Requests focused on pages and assets rather than admin surfaces
Paths: /.env, /
152.42.137.63
Legitimate website usage
4
GET (4) 		Amsterdam, North Holland, The Netherlands Why:
  • Browser user agents dominated the activity
  • Most requests were successful page or asset fetches
  • Requests focused on pages and assets rather than admin surfaces
Paths: /wp-login.php, /?author=1, /?author=2
66.249.69.102
Legitimate website usage
4
GET (4) 		United States Why:
  • Browser user agents dominated the activity
  • Requests arrived with human-style referers
  • Requests focused on pages and assets rather than admin surfaces
Paths: /robots.txt, /usage/index.php, /usage/assets/styles.css, /favicon.ico
2602:80d:1008::81
Legitimate website usage
3
GET (3) 		United States Why:
  • Browser user agents dominated the activity
  • Requests focused on pages and assets rather than admin surfaces
Paths: /, /favicon.ico, /wiki
43.134.91.35
Legitimate website usage
3
GET (3) 		Singapore, Singapore Why:
  • Browser user agents dominated the activity
  • Requests arrived with human-style referers
  • Most requests were successful page or asset fetches
  • Requests focused on pages and assets rather than admin surfaces
Paths: /