Security Timeline ‹ WPAuditor Pro Demo

203.0.113.77 KR flag

KRSouth Korea

Low

Chrome 152 / Windows

1 activity1 security eventScore 20/100Single event

IP203.0.113.77

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-24 10:50:21	WEB_APP_ATTACK	High	`/?s=%3Cstyle%3E%40keyframes+x%7B%7D%3C%2Fstyle%3E%3Cxss+style%3D%22animation-name%3Ax%22+onanimationend%3D%22alert%281%29%22%3E%3C%2Fxss%3E&post_type=post`

203.0.113.77 KR flag

KRSouth Korea

Low

Unidentified client

1 activity1 security eventScore 20/100Single event

IP203.0.113.77

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 10:30:20	WEB_APP_ATTACK	High	`/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E`

203.0.113.61 AE flag

AEUnited Arab Emirates

Low

Unidentified client

1 activity1 security eventScore 20/100Single event

IP203.0.113.61

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 10:10:19	WEB_APP_ATTACK	High	`/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E`

203.0.113.61 AE flag

AEUnited Arab Emirates

High

Unidentified client

1 activity1 security eventScore 70/100Single event

IP203.0.113.61

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 09:50:19	WEB_APP_ATTACK	Critical	`/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29`

203.0.113.45 ZA flag

ZASouth Africa

Low

Unidentified client

1 activity0 security eventsScore 0/100Single event

IP203.0.113.45

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 09:30:18	WEB_APP_ATTACK	Low	`/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1`

203.0.113.45 ZA flag

ZASouth Africa

Low

Unidentified client

1 activity1 security eventScore 30/100Single event

IP203.0.113.45

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 09:10:17	WEB_APP_ATTACK	High	`/?q=%3Cscript%3Ealert(1)%3C/script%3E`

203.0.113.29 NL flag

NLNetherlands

Medium

Unidentified client

1 activity1 security eventScore 50/100Single event

IP203.0.113.29

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 08:50:17	WEB_APP_ATTACK	Critical	`/?file=../../../../etc/passwd`

203.0.113.29 NL flag

NLNetherlands

Low

Unidentified client

1 activity1 security eventScore 30/100Single event

IP203.0.113.29

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 08:30:16	WEB_APP_ATTACK	High	`/?cmd=shell_exec%28ls%29&exec=whoami`

203.0.113.13 BR flag

BRBrazil

Low

Unidentified client

1 activity0 security eventsScore 0/100Single event

IP203.0.113.13

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 08:10:15	WEB_APP_ATTACK	Low	`/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1`

203.0.113.13 BR flag

BRBrazil

Low

Unidentified client

1 activity1 security eventScore 30/100Single event

IP203.0.113.13

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 07:50:15	WEB_APP_ATTACK	High	`/?q=%3Cscript%3Ealert%281%29%3C%2Fscript%3E`

198.51.100.76 AU flag

AUAustralia

Low

Unidentified client

1 activity1 security eventScore 5/100Single event

IP198.51.100.76

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 07:30:14	WEB_APP_ATTACK	Medium	`/phpmyadmin/`

198.51.100.76 AU flag

AUAustralia

Low

Unidentified client

1 activity0 security eventsScore 0/100Single event

IP198.51.100.76

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 07:10:13	WEB_APP_ATTACK	Low	`/?rest_route=%2Fwp%2Fv2%2Fusers`

198.51.100.60 SG flag

SGSingapore

Medium

Unidentified client

1 activity1 security eventScore 50/100Single event

IP198.51.100.60

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 06:50:13	WEB_APP_ATTACK	Critical	`/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd`

198.51.100.60 SG flag

SGSingapore

High

Unidentified client

1 activity1 security eventScore 70/100Single event

IP198.51.100.60

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 06:30:12	WEB_APP_ATTACK	Critical	`/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29`

198.51.100.44 JP flag

JPJapan

Low

Unidentified client

1 activity0 security eventsScore 0/100Single event

IP198.51.100.44

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 06:10:11	WEB_APP_ATTACK	Low	`/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1`

198.51.100.44 JP flag

JPJapan

Low

Unidentified client

1 activity1 security eventScore 20/100Single event

IP198.51.100.44

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 05:50:11	WEB_APP_ATTACK	High	`/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E`

198.51.100.28 FR flag

FRFrance

Low

Unidentified client

1 activity1 security eventScore 5/100Single event

IP198.51.100.28

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 05:30:10	WEB_APP_ATTACK	Medium	`/phpmyadmin/`

198.51.100.28 FR flag

FRFrance

Low

Unidentified client

1 activity1 security eventScore 20/100Single event

IP198.51.100.28

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 05:10:09	WEB_APP_ATTACK	High	`/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check`

198.51.100.12 DE flag

DEGermany

Low

Unidentified client

1 activity0 security eventsScore 0/100Single event

IP198.51.100.12

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 04:50:09	WEB_APP_ATTACK	Low	`/?rest_route=%2Fwp%2Fv2%2Fusers`

198.51.100.12 DE flag

DEGermany

Medium

Unidentified client

1 activity1 security eventScore 50/100Single event

IP198.51.100.12

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 04:30:08	WEB_APP_ATTACK	Critical	`/?file=../../../../etc/passwd`

192.0.2.75 CA flag

CACanada

Low

Unidentified client

1 activity1 security eventScore 30/100Single event

IP192.0.2.75

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 04:10:07	WEB_APP_ATTACK	High	`/?cmd=shell_exec%28ls%29&exec=whoami`

192.0.2.75 CA flag

CACanada

Low

Unidentified client

1 activity0 security eventsScore 0/100Single event

IP192.0.2.75

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 03:50:07	WEB_APP_ATTACK	Low	`/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1`

192.0.2.59 IN flag

INIndia

Low

Unidentified client

1 activity1 security eventScore 20/100Single event

IP192.0.2.59

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 03:30:06	WEB_APP_ATTACK	High	`/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E`

192.0.2.59 IN flag

INIndia

Low

Unidentified client

1 activity1 security eventScore 5/100Single event

IP192.0.2.59

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 03:10:05	WEB_APP_ATTACK	Medium	`/phpmyadmin/`

192.0.2.43 BD flag

BDBangladesh

Low

Unidentified client

1 activity1 security eventScore 20/100Single event

IP192.0.2.43

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 02:50:05	WEB_APP_ATTACK	High	`/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check`

192.0.2.43 BD flag

BDBangladesh

Low

Unidentified client

1 activity0 security eventsScore 0/100Single event

IP192.0.2.43

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 02:30:04	WEB_APP_ATTACK	Low	`/?rest_route=%2Fwp%2Fv2%2Fusers`

192.0.2.27 GB flag

GBUnited Kingdom

Medium

Unidentified client

1 activity1 security eventScore 50/100Single event

IP192.0.2.27

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 02:10:03	WEB_APP_ATTACK	Critical	`/?file=..%2F..%2F..%2F..%2Fetc%2Fpasswd`

192.0.2.27 GB flag

GBUnited Kingdom

High

Unidentified client

1 activity1 security eventScore 70/100Single event

IP192.0.2.27

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 01:50:03	WEB_APP_ATTACK	Critical	`/?run=eval%28base64_decode%28%22ZWNobyBwaW5n%22%29%29`

192.0.2.11 US flag

USUnited States

Low

Unidentified client

1 activity0 security eventsScore 0/100Single event

IP192.0.2.11

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 01:30:02	WEB_APP_ATTACK	Low	`/?s=1%20UNION%20SELECT%201%2C2%20FROM%20information_schema.tables%20OR%201%3D1`

192.0.2.11 US flag

USUnited States

Low

Unidentified client

1 activity1 security eventScore 30/100Single event

IP192.0.2.11

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-24 01:10:01	WEB_APP_ATTACK	High	`/?q=%3Cscript%3Ealert(1)%3C/script%3E`

198.51.100.76 AU flag

AUAustralia

Low

Chrome 153 / Windows

1 activity0 security eventsScore 0/100Single event

IP198.51.100.76

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-24 00:50:01	PLUGIN_DEACTIVATED	Info	`/wp-admin/plugins.php?action=deactivate&plugin=wpauditor-pro%2Fwpauditor-pro.php&plugin_status=all&paged=1&s&_wpnonce=DEMO`

198.51.100.76 AU flag

AUAustralia

Low

Chrome 153 / Windows

1 activity0 security eventsScore 0/100Single event

IP198.51.100.76

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-24 00:30:00	QUARANTINE_DELETED	Info	`/wp-admin/admin.php?page=wpauditor-quarantine-manager`

198.51.100.76 AU flag

AUAustralia

Low

Chrome 153 / Windows

1 activity0 security eventsScore 0/100Single event

IP198.51.100.76

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-23 21:00:00	FILE_MONITORING_SCAN	Info	`/wp-admin/admin-post.php`

198.51.100.60 SG flag

SGSingapore

Low

Chrome 153 / Windows

1 activity0 security eventsScore 0/100Single event

IP198.51.100.60

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-23 20:17:39	FILE_QUARANTINED	Info	`/wp-admin/admin.php?page=wpauditor-file-forensics&scan_id=4a3e856e2b0049fb9746378190478d60`

198.51.100.60 SG flag

SGSingapore

Low

Chrome 153 / Windows

1 activity0 security eventsScore 0/100Single event

IP198.51.100.60

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-23 19:35:18	FILE_FORENSICS_SCAN	Info	`/wp-admin/admin-post.php`

admin198.51.100.44 JP flag

JPJapan

Low

Chrome 152 / Windows

1 activity0 security eventsScore 0/100Single event

IP198.51.100.44

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-23 18:52:56	LOGIN_SUCCESS	Info	`/wp-login.php`

198.51.100.28 FR flag

FRFrance

Low

Unidentified client

1 activity0 security eventsScore 0/100Single event

IP198.51.100.28

DurationSingle event

User agentWordPress/7.1; http://localhost/wpauditor-ai

Timestamp	Event	Severity	URI
2026-09-23 18:10:35	POST_DELETED	Info	`/wp-cron.php?doing_wp_cron=1788957900.7685511112213134765625`

198.51.100.12 DE flag

DEGermany

Low

Chrome 152 / Windows

1 activity0 security eventsScore 0/100Single event

IP198.51.100.12

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-23 17:28:14	PLUGIN_ACTIVATED	Info	`/wp-admin/plugins.php?action=activate&plugin=wpauditor-pro%2Fwpauditor-pro.php&plugin_status=all&paged=1&s&_wpnonce=DEMO`

192.0.2.59 IN flag

INIndia

Low

Chrome 152 / Windows

1 activity0 security eventsScore 0/100Single event

IP192.0.2.59

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-23 16:45:53	PLUGIN_DEACTIVATED	Info	`/wp-admin/plugins.php?action=deactivate&plugin=wpauditor-pro%2Fwpauditor-pro.php&plugin_status=all&paged=1&s&_wpnonce=DEMO`

192.0.2.27 GB flag

GBUnited Kingdom

Low

Chrome 152 / Windows

1 activity0 security eventsScore 0/100Single event

IP192.0.2.27

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-23 16:03:32	PLUGIN_ACTIVATED	Info	`/wp-admin/plugins.php?action=activate&plugin=wpauditor-freeX%2Fwpauditor.php&plugin_status=all&paged=1&s&_wpnonce=DEMO`

203.0.113.77 KR flag

KRSouth Korea

Low

Chrome 152 / Windows

1 activity1 security eventScore 20/100Single event

IP203.0.113.77

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-23 15:21:11	WEB_APP_ATTACK	High	`/?s=%3Cstyle%3E%40keyframes+x%7B%7D%3C%2Fstyle%3E%3Cxss+style%3D%22animation-name%3Ax%22+onanimationend%3D%22alert%281%29%22%3E%3C%2Fxss%3E&post_type=post`

203.0.113.77 KR flag

KRSouth Korea

Low

Chrome 152 / Windows

1 activity0 security eventsScore 0/100Single event

IP203.0.113.77

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-23 14:38:49	THEME_SWITCH	Info	`/wp-admin/themes.php?action=activate&template=wpauditor-blog-theme&stylesheet=wpauditor-blog-theme&_wpnonce=DEMO`

203.0.113.77 KR flag

KRSouth Korea

Low

Chrome 152 / Windows

1 activity0 security eventsScore 0/100Single event

IP203.0.113.77

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-23 13:56:28	MEDIA_DELETED	Info	`/wp-admin/update.php?action=upload-theme`

203.0.113.77 KR flag

KRSouth Korea

Low

Chrome 152 / Windows

1 activity0 security eventsScore 0/100Single event

IP203.0.113.77

DurationSingle event

User agentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36

Timestamp	Event	Severity	URI
2026-09-23 13:14:07	MEDIA_UPLOADED	Info	`/wp-admin/update.php?action=upload-theme`

203.0.113.61 AE flag

AEUnited Arab Emirates

Low

Unidentified client

1 activity1 security eventScore 20/100Single event

IP203.0.113.61

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-23 12:31:46	WEB_APP_ATTACK	High	`/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=check`

203.0.113.61 AE flag

AEUnited Arab Emirates

Low

Unidentified client

1 activity0 security eventsScore 0/100Single event

IP203.0.113.61

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-23 11:49:25	WEB_APP_ATTACK	Low	`/?rest_route=%2Fwp%2Fv2%2Fusers`

203.0.113.61 AE flag

AEUnited Arab Emirates

Low

Unidentified client

1 activity1 security eventScore 5/100Single event

IP203.0.113.61

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-23 11:07:04	WEB_APP_ATTACK	Medium	`/phpmyadmin/`

203.0.113.45 ZA flag

ZASouth Africa

Low

Unidentified client

1 activity1 security eventScore 20/100Single event

IP203.0.113.45

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-23 10:24:42	WEB_APP_ATTACK	High	`/?html=%3Cinput%20value=\'x\'%20onfocus=alert(1)%3E`

203.0.113.45 ZA flag

ZASouth Africa

Low

Unidentified client

1 activity1 security eventScore 20/100Single event

IP203.0.113.45

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-23 09:42:21	WEB_APP_ATTACK	High	`/?html=%3Cinput%20value%3D%27x%27%20onfocus%3Dalert%281%29%3E`

203.0.113.45 ZA flag

ZASouth Africa

Low

Unidentified client

1 activity0 security eventsScore 0/100Single event

IP203.0.113.45

DurationSingle event

User agentWPAuditor-ThreatSimulator/1.1

Timestamp	Event	Severity	URI
2026-09-23 09:00:00	UNUSUAL_HTTP_METHOD	Medium	`/`

Security Timeline

Block this IP?

Continue with this action?

Security Timeline

Start live refresh