| When (Central) | Attack type | What it means | Events |
| Nov 4, 2:19 PM CST | Looking for admin pages | Searching for login/admin panels (phpMyAdmin, /admin, etc.). | 3 |
| Nov 4, 2:19 PM CST | Known bad bot / scanner | The visitor identified itself as a known attack tool or scanner. | 2 |
| Nov 4, 2:19 PM CST | Web probing | Requesting many pages that do not exist, looking for something to attack. | 11 |
| Nov 4, 2:19 PM CST | Path traversal attempts | Using ../ tricks to read files outside the website. | 4 |
| Nov 4, 2:19 PM CST | Aggressive web crawling | A bot hammering many pages very fast. | 43 |
| Nov 4, 2:19 PM CST | Looking for secret files | Trying to download files like .env, .git or backups. | 5 |