High number of threat requests (81%) targeting wp-login.php, indicating brute-force or credential stuffing attempt. WAF triggered alerts.