Security Events

Timestamp	Event	Category	IP	Method	Severity	URI
2026-09-22 21:00:00	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	203.0.113.45 ZASouth Africa	GET	Critical	/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29
Full URI `/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29` Full Details `rule_id=WPA-RCE-004 confidence=96 source=query parameter=run transform=raw enforcement=score findings=2 rules=WPA-RCE-004,WPA-OBF-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-95 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 20:04:37	WEB_APP_ATTACK	LFI_RFI	203.0.113.45 ZASouth Africa	GET	Critical	/?file=../../../../etc/passwd
Full URI `/?file=../../../../etc/passwd` Full Details `rule_id=WPA-LFI-005 confidence=100 source=query parameter=file transform=raw enforcement=block findings=2 rules=WPA-LFI-005,WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 19:09:14	WEB_APP_ATTACK	LFI_RFI	203.0.113.29 NLNetherlands	GET	Critical	/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd
Full URI `/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd` Full Details `rule_id=WPA-LFI-005 confidence=100 source=query parameter=file transform=raw enforcement=block findings=2 rules=WPA-LFI-005,WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 18:13:51	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	203.0.113.29 NLNetherlands	GET	High	/?cmd=shell_exec%28ls%29&exec=whoami
Full URI `/?cmd=shell_exec%28ls%29&exec=whoami` Full Details `rule_id=WPA-RCE-005 confidence=88 source=query parameter=exec transform=raw enforcement=score findings=1 rules=WPA-RCE-005` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-78 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 17:18:28	WEB_APP_ATTACK	XSS	203.0.113.29 NLNetherlands	GET	High	/?q=%3Cscript%3Ealert(1)%3C/script%3E
Full URI `/?q=%3Cscript%3Ealert(1)%3C/script%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw enforcement=score findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 16:23:05	WEB_APP_ATTACK	XSS	203.0.113.29 NLNetherlands	GET	High	/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E
Full URI `/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw enforcement=score findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 15:27:42	WEB_APP_ATTACK	SQL_INJECTION	203.0.113.29 NLNetherlands	GET	Low	/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1
Full URI `/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1` Full Details `rule_id=WPA-SQLI-008 confidence=49 source=query parameter=s transform=raw enforcement=score findings=2 rules=WPA-SQLI-008,WPA-SQLI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-89 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 14:32:18	WEB_APP_ATTACK	WORDPRESS_EXPLOITS	203.0.113.13 BRBrazil	GET	High	/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check
Full URI `/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check` Full Details `rule_id=WPA-WP-001 confidence=88 source=query parameter=action transform=raw enforcement=score findings=1 rules=WPA-WP-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 13:36:55	WEB_APP_ATTACK	WORDPRESS_RECON	203.0.113.13 BRBrazil	GET	Low	/?rest_route=%2Fwp%2Fv2%2Fusers
Full URI `/?rest_route=%2Fwp%2Fv2%2Fusers` Full Details `rule_id=WPA-WP-RECON-001 confidence=45 source=query parameter=rest_route transform=raw enforcement=score findings=1 rules=WPA-WP-RECON-001` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 12:41:32	WEB_APP_ATTACK	TOOL_FINGERPRINTS	203.0.113.13 BRBrazil	GET	Medium	/phpmyadmin/
Full URI `/phpmyadmin/` Full Details `rule_id=WPA-RECON-001 confidence=52 source=path parameter=_path transform=raw enforcement=score findings=1 rules=WPA-RECON-001` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 11:46:09	WEB_APP_ATTACK	XSS	203.0.113.13 BRBrazil	GET	High	/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E
Full URI `/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E` Full Details `rule_id=WPA-XSS-003 confidence=86 source=query parameter=html transform=raw enforcement=score findings=1 rules=WPA-XSS-003` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 10:50:46	WEB_APP_ATTACK	XSS	203.0.113.13 BRBrazil	GET	High	/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E
Full URI `/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E` Full Details `rule_id=WPA-XSS-003 confidence=86 source=query parameter=html transform=raw enforcement=score findings=1 rules=WPA-XSS-003` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 09:55:23	UNUSUAL_HTTP_METHOD	Unusual HTTP	198.51.100.76 AUAustralia	OPTIONS	Medium	/
Full URI `/` Full Details MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-22 09:00:00	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	198.51.100.76 AUAustralia	GET	Critical	/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29
Full URI `/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29` Full Details `rule_id=WPA-RCE-004 confidence=96 source=query parameter=run transform=raw enforcement=score findings=2 rules=WPA-RCE-004,WPA-OBF-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-95 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-21 21:00:00	WEB_APP_ATTACK	LFI_RFI	198.51.100.76 AUAustralia	GET	Critical	/?file=../../../../etc/passwd
Full URI `/?file=../../../../etc/passwd` Full Details `rule_id=WPA-LFI-005 confidence=100 source=query parameter=file transform=raw enforcement=block findings=2 rules=WPA-LFI-005,WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-21 20:12:00	WEB_APP_ATTACK	LFI_RFI	198.51.100.76 AUAustralia	GET	Critical	/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd
Full URI `/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd` Full Details `rule_id=WPA-LFI-005 confidence=100 source=query parameter=file transform=raw enforcement=block findings=2 rules=WPA-LFI-005,WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-21 19:24:00	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	198.51.100.76 AUAustralia	GET	High	/?cmd=shell_exec%28ls%29&exec=whoami
Full URI `/?cmd=shell_exec%28ls%29&exec=whoami` Full Details `rule_id=WPA-RCE-005 confidence=88 source=query parameter=exec transform=raw enforcement=score findings=1 rules=WPA-RCE-005` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-78 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-21 18:36:00	WEB_APP_ATTACK	XSS	198.51.100.60 SGSingapore	GET	High	/?q=%3Cscript%3Ealert(1)%3C/script%3E
Full URI `/?q=%3Cscript%3Ealert(1)%3C/script%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw enforcement=score findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-21 17:48:00	WEB_APP_ATTACK	XSS	198.51.100.60 SGSingapore	GET	High	/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E
Full URI `/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw enforcement=score findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-21 17:00:00	WEB_APP_ATTACK	SQL_INJECTION	198.51.100.60 SGSingapore	GET	Low	/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1
Full URI `/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1` Full Details `rule_id=WPA-SQLI-008 confidence=49 source=query parameter=s transform=raw enforcement=score findings=2 rules=WPA-SQLI-008,WPA-SQLI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-89 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-21 16:12:00	FILE_MONITORING_SCAN	FILE_MONITORING	198.51.100.60 SGSingapore	POST	Info	/wp-admin/admin-post.php
Full URI `/wp-admin/admin-post.php` Full Details `scan_id=292e994d9825484a9cc478c0db92c7d7 scope=all days=30 findings=4366 high_risk=1 duration_ms=54215 truncated=1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-21 15:24:00	FILE_FORENSICS_SCAN	FILE_FORENSICS	198.51.100.60 SGSingapore	POST	Info	/wp-admin/admin-post.php
Full URI `/wp-admin/admin-post.php` Full Details `scan_id=870a6a2e629a4603b05fb0cdf6ad1c39 scope=all findings=8 critical=1 high=6 duration_ms=2819 truncated=0` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-21 14:36:00	FILE_FORENSICS_SCAN	FILE_FORENSICS	198.51.100.28 FRFrance	POST	Info	/wp-admin/admin-post.php
Full URI `/wp-admin/admin-post.php` Full Details `scan_id=7c55189a00314fe99ba0da072e25ea23 scope=all findings=8 critical=1 high=6 duration_ms=2651 truncated=0` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-21 13:48:00	FILE_MONITORING_SCAN	FILE_MONITORING	198.51.100.12 DEGermany	POST	Info	/wp-admin/admin-post.php
Full URI `/wp-admin/admin-post.php` Full Details `scan_id=31cc554971624e6aa05bb9ed09dedbcc scope=all days=30 findings=4363 high_risk=0 duration_ms=11128 truncated=1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-21 13:00:00	QUARANTINE_DELETED		198.51.100.12 DEGermany	POST	Info	/wp-admin/admin.php?page=wpauditor-quarantine-manager
Full URI `/wp-admin/admin.php?page=wpauditor-quarantine-manager` Full Details `qid=wpa-100-php-af4f093152edd857` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-21 12:12:00	FILE_FORENSICS_SCAN	FILE_FORENSICS	192.0.2.75 CACanada	POST	Info	/wp-admin/admin-post.php
Full URI `/wp-admin/admin-post.php` Full Details `scan_id=e144ce7266de4df991853a77fa2c1957 scope=all findings=8 critical=1 high=6 duration_ms=4256 truncated=0` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-21 11:24:00	LOGIN_SUCCESS	AUTH	192.0.2.75 CACanada	POST	Info	/wp-login.php
Full URI `/wp-login.php` Full Details `user=admin` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-21 10:36:00	PASSWORD_POLICY_UPDATED	AUTH	192.0.2.59 INIndia	POST	Info	/wp-admin/admin.php?page=wpauditor-password-policy
Full URI `/wp-admin/admin.php?page=wpauditor-password-policy` Full Details `enabled=0 updated_by=1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-21 09:48:00	PASSWORD_POLICY_UPDATED	AUTH	192.0.2.43 BDBangladesh	POST	Info	/wp-admin/admin.php?page=wpauditor-password-security
Full URI `/wp-admin/admin.php?page=wpauditor-password-security` Full Details `enabled=1 min_length=8 roles=administrator,editor,author,contributor,subscriber,tutor_instructor updated_by=1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-21 09:00:00	POST_CREATED	POST	192.0.2.43 BDBangladesh	GET	Info	/wp-admin/index.php
Full URI `/wp-admin/index.php` Full Details `post_id=78 title=Auto Draft type:post` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 21:00:00	LOGIN_FAILED	AUTH	192.0.2.27 GBUnited Kingdom	POST	Low	/wp-login.php
Full URI `/wp-login.php` Full Details `user=test2` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 20:20:00	PASSWORD_RESET_REQUIRED	AUTH	192.0.2.27 GBUnited Kingdom	POST	Info	/wp-admin/admin.php?page=wpauditor-password-security
Full URI `/wp-admin/admin.php?page=wpauditor-password-security` Full Details `user_id=11 initiated_by=1 sessions_revoked=1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 19:40:00	PASSWORD_RESET_REQUIREMENT_CLEARED	AUTH	192.0.2.11 USUnited States	POST	Info	/wp-admin/admin.php?page=wpauditor-password-security
Full URI `/wp-admin/admin.php?page=wpauditor-password-security` Full Details `user_id=11 initiated_by=1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 19:00:00	LOGIN_FAILED	AUTH	192.0.2.11 USUnited States	POST	Low	/wp-login.php
Full URI `/wp-login.php` Full Details `user=test2` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 18:20:00	PASSWORD_RESET_REQUIREMENT_CLEARED	AUTH	192.0.2.11 USUnited States	POST	Info	/wp-admin/admin.php?page=wpauditor-password-security
Full URI `/wp-admin/admin.php?page=wpauditor-password-security` Full Details `user_id=11 initiated_by=1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 17:40:00	LOGIN_SUCCESS	AUTH	192.0.2.11 USUnited States	POST	Info	/wp-login.php
Full URI `/wp-login.php` Full Details `user=test2` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 17:00:00	PASSWORD_RESET	AUTH	203.0.113.77 KRSouth Korea	POST	Medium	/wp-login.php?action=resetpass
Full URI `/wp-login.php?action=resetpass` Full Details `user=test2` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 16:20:00	PASSWORD_POLICY_PASSED	AUTH	203.0.113.77 KRSouth Korea	POST	Info	/wp-login.php?action=resetpass
Full URI `/wp-login.php?action=resetpass` Full Details `user_id=11 policy_status=compliant` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 15:40:00	PROFILE_UPDATED	USER	203.0.113.77 KRSouth Korea	POST	Info	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=test2` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 15:00:00	USER_REGISTER	USER	203.0.113.77 KRSouth Korea	POST	Info	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=test2` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 14:20:00	ROLE_CHANGE	USER	203.0.113.77 KRSouth Korea	POST	Medium	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=test2 new_role=subscriber` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 13:40:00	PASSWORD_RESET	AUTH	203.0.113.61 AEUnited Arab Emirates	POST	Medium	/wp-login.php?action=resetpass
Full URI `/wp-login.php?action=resetpass` Full Details `user=test@test.com` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 13:00:00	PASSWORD_POLICY_PASSED	AUTH	203.0.113.61 AEUnited Arab Emirates	POST	Info	/wp-login.php?action=resetpass
Full URI `/wp-login.php?action=resetpass` Full Details `user_id=10 policy_status=compliant` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 12:20:00	ROLE_CHANGE	USER	203.0.113.45 ZASouth Africa	POST	Medium	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=test@test.com new_role=subscriber` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 11:40:00	ROLE_CHANGE	USER	203.0.113.45 ZASouth Africa	POST	Medium	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=aaa new_role=subscriber` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 11:00:00	LOGIN_FAILED	AUTH	203.0.113.29 NLNetherlands	POST	Low	/wp-login.php
Full URI `/wp-login.php` Full Details `user=demo2` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 10:20:00	PASSWORD_RESET_REQUIREMENT_CLEARED	AUTH	203.0.113.29 NLNetherlands	POST	Info	/wp-admin/admin.php?page=wpauditor-password-security
Full URI `/wp-admin/admin.php?page=wpauditor-password-security` Full Details `user_id=8 initiated_by=1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 09:40:00	LOGIN_SUCCESS	AUTH	203.0.113.29 NLNetherlands	POST	Info	/wp-login.php
Full URI `/wp-login.php` Full Details `user=demo2` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-20 09:00:00	PASSWORD_RESET	AUTH	203.0.113.13 BRBrazil	POST	Medium	/wp-login.php?action=resetpass
Full URI `/wp-login.php?action=resetpass` Full Details `user=demo2` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-19 21:00:00	USER_REGISTER	USER	203.0.113.13 BRBrazil	POST	Info	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=demo2` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36

1 2 3 4 5

Security Events

Block this IP?

Continue with this action?

Security Events

Start live refresh