The Scanner Wall
Every day, thousands of automated requests arrive here looking for a WordPress site that does not exist. We count all of them and publish the tally. This is what they tried, how often, and from where.
Daily volume
Scan requests per day. The spikes are single operators working through a path list, not a rising threat level.
Most requested paths
The files they hope to find. None of these exist here — there is no PHP interpreter and no WordPress on this host, so each one returns 404.
| Path | Hits | Share |
|---|---|---|
| Loading… | ||
Where it comes from
Sources are shown as network prefixes, never individual addresses. Scanning hosts are overwhelmingly rented cloud instances — the address holder is a hosting provider, not the person running the scan — so naming a single machine would be both unfair and useless.
| Network prefix | Operator | Hits | Paths tried |
|---|---|---|---|
| Loading… | |||
How they introduce themselves
The user-agent each scanner sends. The largest single group sends no user-agent at all, which is itself a reliable tell.
| User agent | Hits |
|---|---|
| Loading… | |
What they got
| Status | Meaning | Count |
|---|---|---|
| Loading… | ||
House rules
Detection only. No retaliation, ever.
Nothing on this page blocks, throttles, tarpits, or slows anybody down. We do not scan back, we do not attempt to identify the people behind these hosts, and we do not serve anything designed to waste their resources. We count what arrives and we publish the count.
Traffic that trips these counters still receives an ordinary, fast 404 — the same response any mistyped URL would get.
The joke page returns a 404 on purpose.
Scanners that request a WordPress path get a short comedic page.
It is served with HTTP status 404, not 200,
and that distinction is the whole design. Scanners record the status
code, so a 200 would advertise this host as a live WordPress target
and reliably attract heavier traffic. A 404 is both true and boring.
Browsers render the body of a 404 perfectly well, so a human who opens the link still sees the joke. Machines get the honest answer; people get the punchline.
Why publish any of this?
Because background hostility is a normal operating condition of being online, and most sites hide it. Showing the real number makes the point better than a security badge: this is what an ordinary week looks like for an ordinary domain, and it is entirely survivable when there is nothing on the box to break into.