What it detects
Repeated access to wp-login, phpMyAdmin and admin console paths.
Why it fires
Recon for brute-force and default-account attacks.
Worst case
Account takeover
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.