Security Events

Timestamp	Event	Category	IP	Method	Severity	URI
2026-09-13 12:00:00	WEB_APP_ATTACK	XSS	198.51.100.12 DEGermany	GET	High	/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E
Full URI `/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E` Full Details `rule_id=WPA-XSS-003 confidence=86 source=query parameter=html transform=raw findings=1 rules=WPA-XSS-003` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-13 10:30:00	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	198.51.100.12 DEGermany	GET	High	/?cmd=shell_exec%28ls%29&exec=whoami
Full URI `/?cmd=shell_exec%28ls%29&exec=whoami` Full Details `rule_id=WPA-RCE-005 confidence=88 source=query parameter=exec transform=raw findings=1 rules=WPA-RCE-005` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-78 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-13 09:00:00	UNUSUAL_HTTP_METHOD	Unusual HTTP	198.51.100.12 DEGermany	OPTIONS	Medium	/
Full URI `/` Full Details MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 21:00:00	WEB_APP_ATTACK	XSS	198.51.100.12 DEGermany	GET	High	/?q=%3Cscript%3Ealert(1)%3C/script%3E
Full URI `/?q=%3Cscript%3Ealert(1)%3C/script%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 20:04:37	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	198.51.100.12 DEGermany	GET	Critical	/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29
Full URI `/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29` Full Details `rule_id=WPA-RCE-004 confidence=96 source=query parameter=run transform=raw findings=2 rules=WPA-RCE-004,WPA-OBF-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-95 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 19:09:14	WEB_APP_ATTACK	XSS	192.0.2.75 CACanada	GET	High	/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E
Full URI `/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 18:13:51	WEB_APP_ATTACK	LFI_RFI	192.0.2.75 CACanada	GET	High	/?file=../../../../etc/passwd
Full URI `/?file=../../../../etc/passwd` Full Details `rule_id=WPA-LFI-001 confidence=83 source=query parameter=file transform=raw findings=1 rules=WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 17:18:28	WEB_APP_ATTACK	SQL_INJECTION	192.0.2.75 CACanada	GET	Low	/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1
Full URI `/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1` Full Details `rule_id=WPA-SQLI-008 confidence=49 source=query parameter=s transform=raw findings=2 rules=WPA-SQLI-008,WPA-SQLI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-89 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 16:23:05	WEB_APP_ATTACK	LFI_RFI	192.0.2.75 CACanada	GET	High	/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd
Full URI `/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd` Full Details `rule_id=WPA-LFI-001 confidence=83 source=query parameter=file transform=raw findings=1 rules=WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 15:27:42	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	192.0.2.75 CACanada	GET	High	/?cmd=shell_exec%28ls%29&exec=whoami
Full URI `/?cmd=shell_exec%28ls%29&exec=whoami` Full Details `rule_id=WPA-RCE-005 confidence=88 source=query parameter=exec transform=raw findings=1 rules=WPA-RCE-005` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-78 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 14:32:18	WEB_APP_ATTACK	XSS	192.0.2.59 INIndia	GET	High	/?q=%3Cscript%3Ealert(1)%3C/script%3E
Full URI `/?q=%3Cscript%3Ealert(1)%3C/script%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 13:36:55	WEB_APP_ATTACK	XSS	192.0.2.59 INIndia	GET	High	/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E
Full URI `/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 12:41:32	WEB_APP_ATTACK	SQL_INJECTION	192.0.2.59 INIndia	GET	Low	/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1
Full URI `/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1` Full Details `rule_id=WPA-SQLI-008 confidence=49 source=query parameter=s transform=raw findings=2 rules=WPA-SQLI-008,WPA-SQLI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-89 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 11:46:09	WEB_APP_ATTACK	WORDPRESS_EXPLOITS	192.0.2.59 INIndia	GET	High	/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check
Full URI `/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check` Full Details `rule_id=WPA-WP-001 confidence=88 source=query parameter=action transform=raw findings=1 rules=WPA-WP-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 10:50:46	WEB_APP_ATTACK	WORDPRESS_RECON	192.0.2.59 INIndia	GET	Low	/?rest_route=%2Fwp%2Fv2%2Fusers
Full URI `/?rest_route=%2Fwp%2Fv2%2Fusers` Full Details `rule_id=WPA-WP-RECON-001 confidence=45 source=query parameter=rest_route transform=raw findings=1 rules=WPA-WP-RECON-001` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 09:55:23	WEB_APP_ATTACK	TOOL_FINGERPRINTS	192.0.2.43 BDBangladesh	GET	Medium	/phpmyadmin/
Full URI `/phpmyadmin/` Full Details `rule_id=WPA-RECON-001 confidence=52 source=path parameter=_path transform=raw findings=1 rules=WPA-RECON-001` MITRE ATT&CK T1595 Reconnaissance OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-12 09:00:00	WEB_APP_ATTACK	XSS	192.0.2.43 BDBangladesh	GET	High	/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E
Full URI `/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E` Full Details `rule_id=WPA-XSS-003 confidence=86 source=query parameter=html transform=raw findings=1 rules=WPA-XSS-003` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-11 21:00:00	WEB_APP_ATTACK	XSS	192.0.2.43 BDBangladesh	GET	High	/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E
Full URI `/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E` Full Details `rule_id=WPA-XSS-003 confidence=86 source=query parameter=html transform=raw findings=1 rules=WPA-XSS-003` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-11 19:54:33	UNUSUAL_HTTP_METHOD	Unusual HTTP	192.0.2.43 BDBangladesh	OPTIONS	Medium	/
Full URI `/` Full Details MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent WPAuditor-ThreatSimulator/1.1
2026-09-11 18:49:05	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	192.0.2.43 BDBangladesh	GET	Critical	/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29
Full URI `/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29` Full Details `rule_id=WPA-RCE-004 confidence=96 source=query parameter=run transform=raw findings=2 rules=WPA-RCE-004,WPA-OBF-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-95 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-11 17:43:38	WEB_APP_ATTACK	LFI_RFI	192.0.2.27 GBUnited Kingdom	GET	High	/?file=../../../../etc/passwd
Full URI `/?file=../../../../etc/passwd` Full Details `rule_id=WPA-LFI-001 confidence=83 source=query parameter=file transform=raw findings=1 rules=WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-11 16:38:11	WEB_APP_ATTACK	LFI_RFI	192.0.2.27 GBUnited Kingdom	GET	High	/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd
Full URI `/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd` Full Details `rule_id=WPA-LFI-001 confidence=83 source=query parameter=file transform=raw findings=1 rules=WPA-LFI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A01:2025 - Broken Access Control CWE-22 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-11 15:32:44	WEB_APP_ATTACK	REMOTE_CODE_EXECUTION	192.0.2.27 GBUnited Kingdom	GET	High	/?cmd=shell_exec%28ls%29&exec=whoami
Full URI `/?cmd=shell_exec%28ls%29&exec=whoami` Full Details `rule_id=WPA-RCE-005 confidence=88 source=query parameter=exec transform=raw findings=1 rules=WPA-RCE-005` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-78 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-11 14:27:16	WEB_APP_ATTACK	XSS	192.0.2.27 GBUnited Kingdom	GET	High	/?q=%3Cscript%3Ealert(1)%3C/script%3E
Full URI `/?q=%3Cscript%3Ealert(1)%3C/script%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-11 13:21:49	WEB_APP_ATTACK	XSS	192.0.2.27 GBUnited Kingdom	GET	High	/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E
Full URI `/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E` Full Details `rule_id=WPA-XSS-001 confidence=90 source=query parameter=q transform=raw findings=1 rules=WPA-XSS-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-79 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-11 12:16:22	WEB_APP_ATTACK	SQL_INJECTION	192.0.2.11 USUnited States	GET	Low	/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1
Full URI `/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1` Full Details `rule_id=WPA-SQLI-008 confidence=49 source=query parameter=s transform=raw findings=2 rules=WPA-SQLI-008,WPA-SQLI-001` MITRE ATT&CK T1190 Initial Access OWASP Top 10 (2025) A05:2025 - Injection CWE-89 User Agent WPAuditor-ThreatSimulator/1.1
2026-09-11 11:10:55	POST_CREATED	POST	192.0.2.11 USUnited States	GET	Info	/wp-admin/post-new.php
Full URI `/wp-admin/post-new.php` Full Details `post_id=63 title=Auto Draft type:post` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-11 10:05:27	LOGIN_SUCCESS	AUTH	192.0.2.11 USUnited States	POST	Info	/wp-login.php
Full URI `/wp-login.php` Full Details `user=admin` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
2026-09-11 09:00:00	LOGIN_FAILED	AUTH	192.0.2.11 USUnited States	POST	Low	/wp-login.php
Full URI `/wp-login.php` Full Details `user=admin` MITRE ATT&CK N/A OWASP Top 10 (2025) N/A User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36

1 2 3 4 5

Security Events

Block this IP?

Continue with this action?

Security Events

Start live refresh