| When (Central) | Attack type | What it means | Events |
|---|
| Nov 5, 7:14 AM CST | Known exploit (CVE) scanning | Trying many published vulnerabilities to see if any work. | 1 |
| Nov 5, 7:13 AM CST | Software fingerprinting | Checking which web software you run, usually before attacking. | 1 |
| Nov 5, 7:13 AM CST | Web probing | Requesting many pages that do not exist, looking for something to attack. | 11 |
| Nov 5, 7:13 AM CST | Looking for secret files | Trying to download files like .env, .git or backups. | 5 |
| Nov 4, 3:29 PM CST | Known exploit (CVE) scanning | Trying many published vulnerabilities to see if any work. | 1 |
| Nov 4, 3:29 PM CST | Software fingerprinting | Checking which web software you run, usually before attacking. | 1 |
| Nov 4, 3:29 PM CST | Web probing | Requesting many pages that do not exist, looking for something to attack. | 11 |
| Nov 4, 3:29 PM CST | Looking for secret files | Trying to download files like .env, .git or backups. | 5 |
| Nov 4, 10:37 AM CST | Known exploit (CVE) scanning | Trying many published vulnerabilities to see if any work. | 1 |
| Nov 4, 10:37 AM CST | WordPress config theft attempt | Trying to download wp-config.php (contains database passwords). | 6 |
| Nov 4, 10:37 AM CST | Web probing | Requesting many pages that do not exist, looking for something to attack. | 11 |
| Nov 4, 10:37 AM CST | Looking for secret files | Trying to download files like .env, .git or backups. | 5 |