Threat LevelHIGH56/1002 rule types across 2 attack categories
3 incidents on record · 2 rule types · active attack detected · active over 6 days · last seen 1d ago
| PTR | N/A |
Attack Analysis
WordPress Username Enumeration
This IP probed the WordPress ?author= parameter to enumerate valid usernames (e.g. ?author=1, ?author=2). Harvested usernames are then fed into credential stuffing or password brute-force attacks. This is purely reconnaissance — there is no legitimate reason to systematically probe author IDs.
WordPress: Cleartext Login Attempt
This IP attempted to log into WordPress over unencrypted HTTP instead of HTTPS. This exposes credentials in transit and is a sign of automated attack tools that ignore TLS. Modern browsers and legitimate users always use HTTPS for authentication.
Reports (3)
| Date | Severity | Description |
|---|---|---|
| 4 Nov 2026 - 10:41 | high | WordPress: Cleartext login attempt over HTTP |
| 29 Oct 2026 - 00:34 | high | WordPress: User enumeration — 3+ author probes in 60s |
| 29 Oct 2026 - 00:33 | high | WordPress: User enumeration — 3+ author probes in 60s |
EagleEye Intelligence