Security Events

Timestamp	Event	Category	IP	Method	Severity	URI
2026-09-16 15:00:00	POST_CREATED	POST	198.51.100.28 FRFrance	GET	Info	/wp-admin/post-new.php
Full URI `/wp-admin/post-new.php` Full Details `post_id=74 title=Auto Draft type:post` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 14:24:00	POST_UPDATED	POST	198.51.100.12 DEGermany	POST	Info	/wp-json/wp/v2/posts/67?_locale=user
Full URI `/wp-json/wp/v2/posts/67?_locale=user` Full Details `post_id=67 title=Test Post - Please Ignore type:post` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 13:48:00	POST_CREATED	POST	192.0.2.75 CACanada	POST	Info	/wp-json/wp/v2/posts
Full URI `/wp-json/wp/v2/posts` Full Details `post_id=70 title=Test Post - Please Ignore type:post` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 13:12:00	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.75 CACanada	POST	Low	/wp-json/wp/v2/users/me/application-passwords
Full URI `/wp-json/wp/v2/users/me/application-passwords` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 12:36:00	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.75 CACanada	POST	Low	/wp-json/wp/v2/users
Full URI `/wp-json/wp/v2/users` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 12:00:00	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.59 INIndia	POST	Low	/wp-json/wp/v2/users/me/application-passwords
Full URI `/wp-json/wp/v2/users/me/application-passwords` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 11:24:00	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.43 BDBangladesh	POST	Low	/wp-json/wp/v2/users
Full URI `/wp-json/wp/v2/users` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 10:48:00	POST_UPDATED	POST	192.0.2.43 BDBangladesh	POST	Info	/wp-json/wp/v2/posts/66/autosaves?_locale=user
Full URI `/wp-json/wp/v2/posts/66/autosaves?_locale=user` Full Details `post_id=66 title=Test Post - Please Ignore type:post` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 10:12:00	POST_CREATED	POST	192.0.2.43 BDBangladesh	POST	Info	/wp-json/wp/v2/posts
Full URI `/wp-json/wp/v2/posts` Full Details `post_id=66 title=Test Post - Please Ignore type:post` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 09:36:00	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.43 BDBangladesh	POST	Low	/wp-json/wp/v2/users/me/application-passwords
Full URI `/wp-json/wp/v2/users/me/application-passwords` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-16 09:00:00	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.43 BDBangladesh	POST	Low	/wp-json/wp/v2/users
Full URI `/wp-json/wp/v2/users` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-15 21:00:00	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.27 GBUnited Kingdom	POST	Low	/wp-json/wp/v2/users
Full URI `/wp-json/wp/v2/users` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-15 20:08:34	LOGIN_SUCCESS	AUTH	192.0.2.27 GBUnited Kingdom	POST	Info	/wp-login.php
Full URI `/wp-login.php` Full Details `user=admin` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-15 19:17:09	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.27 GBUnited Kingdom	GET	Low	/wp-json/wp/v2/users?per_page=100
Full URI `/wp-json/wp/v2/users?per_page=100` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-15 18:25:43	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.27 GBUnited Kingdom	POST	Low	/wp-json/wp/v2/users
Full URI `/wp-json/wp/v2/users` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-15 17:34:17	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.27 GBUnited Kingdom	POST	Low	/wp-json/wp/v2/users
Full URI `/wp-json/wp/v2/users` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-15 16:42:51	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.11 USUnited States	POST	Low	//wp-json/wp/v2/users
Full URI `//wp-json/wp/v2/users` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-15 15:51:26	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.11 USUnited States	POST	Low	//wp-json/wp/v2/users
Full URI `//wp-json/wp/v2/users` Full Details `rule_id=WPA-WP-RECON-002 confidence=45 source=path parameter=_path transform=raw findings=1 rules=WPA-WP-RECON-002` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-15 15:00:00	LOGIN_FAILED	AUTH	192.0.2.11 USUnited States	POST	Low	/wp-login.php
Full URI `/wp-login.php` Full Details `user=admin` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-15 14:08:34	FILE_FORENSICS_SCAN	FILE_FORENSICS	203.0.113.77 KRSouth Korea	POST	Info	/wp-admin/admin-post.php
Full URI `/wp-admin/admin-post.php` Full Details `scan_id=9b33c1a74075449a9b68dcae9b5f83a5 scope=all findings=6 critical=1 high=4 duration_ms=3148 truncated=0` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-15 13:17:09	WEB_APP_ATTACK	XSS	203.0.113.61 AEUnited Arab Emirates	POST	High	/wp-admin/admin-ajax.php
Full URI `/wp-admin/admin-ajax.php` Full Details `rule_id=WPA-XSS-001 confidence=90 source=form parameter=entry transform=url_decode_1 findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-15 12:25:43	WEB_APP_ATTACK	XSS	203.0.113.61 AEUnited Arab Emirates	GET	High	/?s=%3Cscript%3Ealert%281%29%3C%2Fscript%3E
Full URI `/?s=%3Cscript%3Ealert%281%29%3C%2Fscript%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=s transform=raw findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-15 11:34:17	WEB_APP_ATTACK	WORDPRESS_EXPLOITS	203.0.113.61 AEUnited Arab Emirates	GET	High	/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check
Full URI `/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check` Full Details `rule_id=WPA-WP-001 confidence=88 source=query parameter=action transform=raw findings=1 rules=WPA-WP-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-15 10:42:51	WEB_APP_ATTACK	WORDPRESS_RECON	203.0.113.61 AEUnited Arab Emirates	GET	Low	/?rest_route=%2Fwp%2Fv2%2Fusers
Full URI `/?rest_route=%2Fwp%2Fv2%2Fusers` Full Details `rule_id=WPA-WP-RECON-001 confidence=45 source=query parameter=rest_route transform=raw findings=1 rules=WPA-WP-RECON-001` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-15 09:51:26	WEB_APP_ATTACK	TOOL_FINGERPRINTS	203.0.113.45 ZASouth Africa	GET	Medium	/phpmyadmin/
Full URI `/phpmyadmin/` Full Details `rule_id=WPA-RECON-001 confidence=52 source=path parameter=_path transform=raw findings=1 rules=WPA-RECON-001` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-15 09:00:00	WEB_APP_ATTACK	XSS	203.0.113.45 ZASouth Africa	GET	High	/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E
Full URI `/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E` Full Details `rule_id=WPA-XSS-003 confidence=86 source=query parameter=html transform=raw findings=1 rules=WPA-XSS-003` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-14 21:00:00	WEB_APP_ATTACK	XSS	203.0.113.45 ZASouth Africa	GET	High	/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E
Full URI `/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E` Full Details `rule_id=WPA-XSS-003 confidence=86 source=query parameter=html transform=raw findings=1 rules=WPA-XSS-003` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-14 20:17:39	UNUSUAL_HTTP_METHOD	Unusual HTTP	203.0.113.45 ZASouth Africa	OPTIONS	Medium	/
Full URI `/` Full Details MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-14 19:35:18	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	203.0.113.45 ZASouth Africa	GET	Critical	/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29
Full URI `/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29` Full Details `rule_id=WPA-RCE-004 confidence=96 source=query parameter=run transform=raw findings=2 rules=WPA-RCE-004,WPA-OBF-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-95 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-14 18:52:56	WEB_APP_ATTACK	LFI_RFI	203.0.113.29 NLNetherlands	GET	High	/?file=../../../../etc/passwd
Full URI `/?file=../../../../etc/passwd` Full Details `rule_id=WPA-LFI-001 confidence=83 source=query parameter=file transform=raw findings=1 rules=WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-14 18:10:35	WEB_APP_ATTACK	LFI_RFI	203.0.113.29 NLNetherlands	GET	High	/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd
Full URI `/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd` Full Details `rule_id=WPA-LFI-001 confidence=83 source=query parameter=file transform=raw findings=1 rules=WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-14 17:28:14	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	203.0.113.29 NLNetherlands	GET	High	/?cmd=shell_exec%28ls%29&exec=whoami
Full URI `/?cmd=shell_exec%28ls%29&exec=whoami` Full Details `rule_id=WPA-RCE-005 confidence=88 source=query parameter=exec transform=raw findings=1 rules=WPA-RCE-005` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-78 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-14 16:45:53	WEB_APP_ATTACK	XSS	203.0.113.29 NLNetherlands	GET	High	/?q=%3Cscript%3Ealert(1)%3C/script%3E
Full URI `/?q=%3Cscript%3Ealert(1)%3C/script%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-14 16:03:32	WEB_APP_ATTACK	XSS	203.0.113.29 NLNetherlands	GET	High	/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E
Full URI `/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-14 15:21:11	WEB_APP_ATTACK	SQL_INJECTION	203.0.113.13 BRBrazil	GET	Low	/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1
Full URI `/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1` Full Details `rule_id=WPA-SQLI-008 confidence=49 source=query parameter=s transform=raw findings=2 rules=WPA-SQLI-008,WPA-SQLI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-89 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-14 14:38:49	POST_DELETED	POST	203.0.113.13 BRBrazil	POST	Info	/wp-cron.php?doing_wp_cron=1785949804.7839639186859130859375
Full URI `/wp-cron.php?doing_wp_cron=1785949804.7839639186859130859375` Full Details `post_id=62 title=Auto Draft type:post` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent WordPress/7.0.2; http://localhost/wpauditor-ai
2026-09-14 13:56:28	PLUGIN_ACTIVATED	PLUGIN	198.51.100.76 AUAustralia	GET	Info	/wp-admin/plugins.php?action=activate&plugin=wpauditor+-+Copy%2Fwpauditor.php&plugin_status=all&paged=1&s&_wpnonce=DEMO
Full URI `/wp-admin/plugins.php?action=activate&plugin=wpauditor+-+Copy%2Fwpauditor.php&plugin_status=all&paged=1&s&_wpnonce=DEMO` Full Details `plugin=wpauditor - Copy/wpauditor.php` MITRE ATT&CK T1505 Persistence OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-14 13:14:07	PLUGIN_DEACTIVATED	PLUGIN	198.51.100.76 AUAustralia	GET	Info	/wp-admin/plugins.php?action=deactivate&plugin=wpauditor%2Fwpauditor.php&plugin_status=all&paged=1&s&_wpnonce=DEMO
Full URI `/wp-admin/plugins.php?action=deactivate&plugin=wpauditor%2Fwpauditor.php&plugin_status=all&paged=1&s&_wpnonce=DEMO` Full Details `plugin=wpauditor/wpauditor.php` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-14 12:31:46	FILE_MONITORING_SCAN	FILE_MONITORING	198.51.100.60 SGSingapore	POST	Info	/wp-admin/admin-post.php
Full URI `/wp-admin/admin-post.php` Full Details `scan_id=1da2a255259f43429bad5a8405896341 scope=all days=30 findings=556 high_risk=0 duration_ms=13013 truncated=1` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-14 11:49:25	FILE_FORENSICS_SCAN	FILE_FORENSICS	198.51.100.60 SGSingapore	POST	Info	/wp-admin/admin-post.php
Full URI `/wp-admin/admin-post.php` Full Details `scan_id=738e21bdee0649828d61df168e82f1d5 scope=all findings=6 critical=1 high=4 duration_ms=3214 truncated=0` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-14 11:07:04	LOGIN_SUCCESS	AUTH	198.51.100.44 JPJapan	POST	Info	/wp-login.php
Full URI `/wp-login.php` Full Details `user=admin` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-14 10:24:42	WEB_APP_ATTACK	WORDPRESS_EXPLOITS	198.51.100.44 JPJapan	GET	High	/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check
Full URI `/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check` Full Details `rule_id=WPA-WP-001 confidence=88 source=query parameter=action transform=raw findings=1 rules=WPA-WP-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-14 09:42:21	WEB_APP_ATTACK	WORDPRESS_RECON	198.51.100.44 JPJapan	GET	Low	/?rest_route=%2Fwp%2Fv2%2Fusers
Full URI `/?rest_route=%2Fwp%2Fv2%2Fusers` Full Details `rule_id=WPA-WP-RECON-001 confidence=45 source=query parameter=rest_route transform=raw findings=1 rules=WPA-WP-RECON-001` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-14 09:00:00	WEB_APP_ATTACK	TOOL_FINGERPRINTS	198.51.100.44 JPJapan	GET	Medium	/phpmyadmin/
Full URI `/phpmyadmin/` Full Details `rule_id=WPA-RECON-001 confidence=52 source=path parameter=_path transform=raw findings=1 rules=WPA-RECON-001` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-13 21:00:00	WEB_APP_ATTACK	XSS	198.51.100.44 JPJapan	GET	High	/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E
Full URI `/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E` Full Details `rule_id=WPA-XSS-003 confidence=86 source=query parameter=html transform=raw findings=1 rules=WPA-XSS-003` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-13 19:30:00	WEB_APP_ATTACK	XSS	198.51.100.28 FRFrance	GET	High	/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E
Full URI `/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E` Full Details `rule_id=WPA-XSS-003 confidence=86 source=query parameter=html transform=raw findings=1 rules=WPA-XSS-003` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-13 18:00:00	UNUSUAL_HTTP_METHOD	Unusual HTTP	198.51.100.28 FRFrance	OPTIONS	Medium	/
Full URI `/` Full Details MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-13 16:30:00	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	198.51.100.28 FRFrance	GET	Critical	/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29
Full URI `/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29` Full Details `rule_id=WPA-RCE-004 confidence=96 source=query parameter=run transform=raw findings=2 rules=WPA-RCE-004,WPA-OBF-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-95 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-13 15:00:00	WEB_APP_ATTACK	LFI_RFI	198.51.100.28 FRFrance	GET	High	/?file=../../../../etc/passwd
Full URI `/?file=../../../../etc/passwd` Full Details `rule_id=WPA-LFI-001 confidence=83 source=query parameter=file transform=raw findings=1 rules=WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-13 13:30:00	WEB_APP_ATTACK	LFI_RFI	198.51.100.28 FRFrance	GET	High	/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd
Full URI `/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd` Full Details `rule_id=WPA-LFI-001 confidence=83 source=query parameter=file transform=raw findings=1 rules=WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1

1 2 3 4 5

Security Events

Block this IP?

Continue with this action?

Security Events

Start live refresh