Security Events

Timestamp	Event	Category	IP	Method	Severity	URI
2026-09-19 20:00:00	ROLE_CHANGE	USER	203.0.113.13 BRBrazil	POST	Medium	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=demo2 new_role=subscriber` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-19 19:00:00	USER_DELETED	USER	198.51.100.76 AUAustralia	POST	Medium	/wp-admin/users.php?action=delete&user=7&_wpnonce=DEMO
Full URI `/wp-admin/users.php?action=delete&user=7&_wpnonce=DEMO` Full Details `user=demo1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-19 18:00:00	LOGIN_FAILED	AUTH	198.51.100.76 AUAustralia	POST	Low	/wp-login.php
Full URI `/wp-login.php` Full Details `user=demo1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-19 17:00:00	PASSWORD_POLICY_PASSED	AUTH	198.51.100.76 AUAustralia	POST	Info	/wp-admin/profile.php
Full URI `/wp-admin/profile.php` Full Details `user_id=7 policy_status=compliant` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-19 16:00:00	PASSWORD_RESET_REQUIRED	AUTH	198.51.100.60 SGSingapore	POST	Info	/wp-admin/admin.php?page=wpauditor-password-security
Full URI `/wp-admin/admin.php?page=wpauditor-password-security` Full Details `user_id=7 initiated_by=1 sessions_revoked=1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-19 15:00:00	LOGIN_SUCCESS	AUTH	198.51.100.60 SGSingapore	POST	Info	/wp-login.php
Full URI `/wp-login.php` Full Details `user=demo1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-19 14:00:00	PASSWORD_RESET	AUTH	198.51.100.44 JPJapan	POST	Medium	/wp-login.php?action=resetpass
Full URI `/wp-login.php?action=resetpass` Full Details `user=demo1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-19 13:00:00	PROFILE_UPDATED	USER	198.51.100.44 JPJapan	POST	Info	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=demo1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-19 12:00:00	ROLE_CHANGE	USER	198.51.100.44 JPJapan	POST	Medium	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=demo1 new_role=subscriber` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-19 11:00:00	USER_DELETED	USER	198.51.100.44 JPJapan	POST	Medium	/wp-admin/users.php?action=delete&user=6&_wpnonce=DEMO
Full URI `/wp-admin/users.php?action=delete&user=6&_wpnonce=DEMO` Full Details `user=demo` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-19 10:00:00	LOGIN_SUCCESS	AUTH	198.51.100.28 FRFrance	POST	Info	/wp-login.php
Full URI `/wp-login.php` Full Details `user=demo` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-19 09:00:00	PASSWORD_RESET	AUTH	198.51.100.28 FRFrance	POST	Medium	/wp-login.php?action=resetpass
Full URI `/wp-login.php?action=resetpass` Full Details `user=demo` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 21:00:00	ROLE_CHANGE	USER	198.51.100.12 DEGermany	POST	Medium	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=demo new_role=subscriber` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 20:15:00	USER_DELETED	USER	198.51.100.12 DEGermany	POST	Medium	/wp-admin/users.php?action=delete&user=5&_wpnonce=DEMO
Full URI `/wp-admin/users.php?action=delete&user=5&_wpnonce=DEMO` Full Details `user=demo` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 19:30:00	PASSWORD_RESET	AUTH	192.0.2.75 CACanada	POST	Medium	/wp-login.php?action=resetpass
Full URI `/wp-login.php?action=resetpass` Full Details `user=demo` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 18:45:00	USER_REGISTER	USER	192.0.2.75 CACanada	POST	Info	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=demo` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 18:00:00	ROLE_CHANGE	USER	192.0.2.75 CACanada	POST	Medium	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=demo new_role=subscriber` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 17:15:00	USER_DELETED	USER	192.0.2.59 INIndia	POST	Medium	/wp-admin/users.php?action=delete&user=4&_wpnonce=DEMO
Full URI `/wp-admin/users.php?action=delete&user=4&_wpnonce=DEMO` Full Details `user=demo1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 16:30:00	USER_DELETED	USER	192.0.2.59 INIndia	POST	Medium	/wp-admin/users.php?action=delete&user=3&_wpnonce=DEMO
Full URI `/wp-admin/users.php?action=delete&user=3&_wpnonce=DEMO` Full Details `user=demo` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 15:45:00	PASSWORD_RESET_REQUIRED	AUTH	192.0.2.59 INIndia	POST	Info	/wp-admin/admin.php?page=wpauditor-password-security
Full URI `/wp-admin/admin.php?page=wpauditor-password-security` Full Details `user_id=3 initiated_by=1 sessions_revoked=1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 15:00:00	PASSWORD_RESET	AUTH	192.0.2.43 BDBangladesh	POST	Medium	/wp-login.php?action=resetpass
Full URI `/wp-login.php?action=resetpass` Full Details `user=demo1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 14:15:00	PROFILE_UPDATED	USER	192.0.2.43 BDBangladesh	POST	Info	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=demo1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 13:30:00	ROLE_CHANGE	USER	192.0.2.43 BDBangladesh	POST	Medium	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=demo1 new_role=subscriber` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 12:45:00	LOGIN_FAILED	AUTH	192.0.2.11 USUnited States	POST	Low	/wp-login.php
Full URI `/wp-login.php` Full Details `user=demo` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 12:00:00	PROFILE_UPDATED	USER	192.0.2.11 USUnited States	POST	Info	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=demo` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 11:15:00	USER_REGISTER	USER	203.0.113.77 KRSouth Korea	POST	Info	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=demo` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 10:30:00	ROLE_CHANGE	USER	203.0.113.77 KRSouth Korea	POST	Medium	/wp-login.php?action=register
Full URI `/wp-login.php?action=register` Full Details `user=demo new_role=subscriber` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 09:45:00	PASSWORD_POLICY_UPDATED	AUTH	203.0.113.77 KRSouth Korea	POST	Info	/wp-admin/admin.php?page=wpauditor-password-security
Full URI `/wp-admin/admin.php?page=wpauditor-password-security` Full Details `enabled=1 min_length=12 roles=administrator,editor updated_by=1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-18 09:00:00	USER_DELETED	USER	203.0.113.77 KRSouth Korea	POST	Medium	/wp-admin/users.php?action=delete&user=2&_wpnonce=DEMO
Full URI `/wp-admin/users.php?action=delete&user=2&_wpnonce=DEMO` Full Details `user=demo` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-17 21:00:00	LOGIN_SUCCESS	AUTH	203.0.113.77 KRSouth Korea	POST	Info	/wp-login.php
Full URI `/wp-login.php` Full Details `user=admin` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
2026-09-17 19:48:00	WEB_APP_ATTACK	WORDPRESS_EXPLOITS	203.0.113.61 AEUnited Arab Emirates	GET	High	/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check
Full URI `/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check` Full Details `rule_id=WPA-WP-001 confidence=88 source=query parameter=action transform=raw enforcement=score findings=1 rules=WPA-WP-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-17 18:36:00	WEB_APP_ATTACK	WORDPRESS_RECON	203.0.113.61 AEUnited Arab Emirates	GET	Low	/?rest_route=%2Fwp%2Fv2%2Fusers
Full URI `/?rest_route=%2Fwp%2Fv2%2Fusers` Full Details `rule_id=WPA-WP-RECON-001 confidence=45 source=query parameter=rest_route transform=raw enforcement=score findings=1 rules=WPA-WP-RECON-001` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-17 17:24:00	WEB_APP_ATTACK	TOOL_FINGERPRINTS	203.0.113.61 AEUnited Arab Emirates	GET	Medium	/phpmyadmin/
Full URI `/phpmyadmin/` Full Details `rule_id=WPA-RECON-001 confidence=52 source=path parameter=_path transform=raw enforcement=score findings=1 rules=WPA-RECON-001` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-17 16:12:00	WEB_APP_ATTACK	XSS	203.0.113.61 AEUnited Arab Emirates	GET	High	/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E
Full URI `/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E` Full Details `rule_id=WPA-XSS-003 confidence=86 source=query parameter=html transform=raw enforcement=score findings=1 rules=WPA-XSS-003` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-17 15:00:00	WEB_APP_ATTACK	XSS	203.0.113.61 AEUnited Arab Emirates	GET	High	/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E
Full URI `/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E` Full Details `rule_id=WPA-XSS-003 confidence=86 source=query parameter=html transform=raw enforcement=score findings=1 rules=WPA-XSS-003` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-17 13:48:00	UNUSUAL_HTTP_METHOD	Unusual HTTP	203.0.113.45 ZASouth Africa	OPTIONS	Medium	/
Full URI `/` Full Details MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-17 12:36:00	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	203.0.113.45 ZASouth Africa	GET	Critical	/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29
Full URI `/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29` Full Details `rule_id=WPA-RCE-004 confidence=96 source=query parameter=run transform=raw enforcement=score findings=2 rules=WPA-RCE-004,WPA-OBF-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-95 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-17 11:24:00	WEB_APP_ATTACK	LFI_RFI	203.0.113.45 ZASouth Africa	GET	Critical	/?file=../../../../etc/passwd
Full URI `/?file=../../../../etc/passwd` Full Details `rule_id=WPA-LFI-005 confidence=100 source=query parameter=file transform=raw enforcement=block findings=2 rules=WPA-LFI-005,WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-17 10:12:00	WEB_APP_ATTACK	LFI_RFI	203.0.113.45 ZASouth Africa	GET	Critical	/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd
Full URI `/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd` Full Details `rule_id=WPA-LFI-005 confidence=100 source=query parameter=file transform=raw enforcement=block findings=2 rules=WPA-LFI-005,WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-17 09:00:00	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	203.0.113.45 ZASouth Africa	GET	High	/?cmd=shell_exec%28ls%29&exec=whoami
Full URI `/?cmd=shell_exec%28ls%29&exec=whoami` Full Details `rule_id=WPA-RCE-005 confidence=88 source=query parameter=exec transform=raw enforcement=score findings=1 rules=WPA-RCE-005` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-78 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-16 21:00:00	WEB_APP_ATTACK	XSS	203.0.113.29 NLNetherlands	GET	High	/?q=%3Cscript%3Ealert(1)%3C/script%3E
Full URI `/?q=%3Cscript%3Ealert(1)%3C/script%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw enforcement=score findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-16 20:24:00	WEB_APP_ATTACK	XSS	203.0.113.29 NLNetherlands	GET	High	/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E
Full URI `/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw enforcement=score findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-16 19:48:00	WEB_APP_ATTACK	SQL_INJECTION	203.0.113.29 NLNetherlands	GET	Low	/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1
Full URI `/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1` Full Details `rule_id=WPA-SQLI-008 confidence=49 source=query parameter=s transform=raw enforcement=score findings=2 rules=WPA-SQLI-008,WPA-SQLI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-89 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-16 19:12:00	POST_DELETED	POST	203.0.113.13 BRBrazil	POST	Info	/wp-cron.php?doing_wp_cron=1788123061.8277800083160400390625
Full URI `/wp-cron.php?doing_wp_cron=1788123061.8277800083160400390625` Full Details `post_id=15 title= type:post` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent WordPress/7.1; http://localhost/wpauditor-ai
2026-09-16 18:36:00	POST_DELETED	POST	198.51.100.76 AUAustralia	POST	Info	/wp-cron.php?doing_wp_cron=1788123061.8277800083160400390625
Full URI `/wp-cron.php?doing_wp_cron=1788123061.8277800083160400390625` Full Details `post_id=38 title=sdf type:post` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent WordPress/7.1; http://localhost/wpauditor-ai
2026-09-16 18:00:00	POST_DELETED	POST	198.51.100.60 SGSingapore	POST	Info	/wp-cron.php?doing_wp_cron=1788123061.8277800083160400390625
Full URI `/wp-cron.php?doing_wp_cron=1788123061.8277800083160400390625` Full Details `post_id=33 title=sg type:revision` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent WordPress/7.1; http://localhost/wpauditor-ai
2026-09-16 17:24:00	WEB_APP_ATTACK	WORDPRESS_RECON	198.51.100.44 JPJapan	POST	Low	/wp-json/wp/v2/users/me/application-passwords
Full URI `/wp-json/wp/v2/users/me/application-passwords` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 16:48:00	WEB_APP_ATTACK	WORDPRESS_RECON	198.51.100.44 JPJapan	POST	Low	/wp-json/wp/v2/users
Full URI `/wp-json/wp/v2/users` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 16:12:00	POST_UPDATED	POST	198.51.100.44 JPJapan	POST	Info	/wp-json/wp/v2/posts/67/autosaves?_locale=user
Full URI `/wp-json/wp/v2/posts/67/autosaves?_locale=user` Full Details `post_id=73 title=Test Post - Please Ignore type:revision` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 15:36:00	WEB_APP_ATTACK	WORDPRESS_RECON	198.51.100.28 FRFrance	POST	Low	/wp-json/wp/v2/users/me?_locale=user
Full URI `/wp-json/wp/v2/users/me?_locale=user` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36

1 2 3 4 5

Security Events

Block this IP?

Continue with this action?

Security Events

Start live refresh