For people finding this through Google.
These are false positives. All they are is a bot, hitting the logout url of your site:
https://example.com/wp-login.php?action=logout&_wpnonce=e560c09cf0
and then following the “Do you really want to log out?”.
You can do see this yourself.
Open up your WordPress admin in Chrome and log into and go to the Activity Log. You should see an entry for yourself logging in.
No open up an Incognito Window and paste in the following link:
https://[your wordpress address]/wp-login.php?action=logout&_wpnonce=e560c09cf0
Obviously I don’t have to tell you to replace [your wordpress address] with your actual site address.
You should get a page with the below text:
You are attempting to log out of IT WAS FOUND ONLINE!!!
Do you really want to log out?
Now click the “log out” link. Now go back to your other browser and refresh your Activity Log, you will see the phantom log out entry.