| When (Central) | Attack type | What it means | Events |
| Nov 4, 8:46 AM CST | Looking for admin pages | Searching for login/admin panels (phpMyAdmin, /admin, etc.). | 3 |
| Nov 4, 8:46 AM CST | Software fingerprinting | Checking which web software you run, usually before attacking. | 1 |
| Nov 4, 8:46 AM CST | Aggressive web crawling | A bot hammering many pages very fast. | 42 |
| Nov 4, 8:46 AM CST | Web probing | Requesting many pages that do not exist, looking for something to attack. | 11 |
| Nov 4, 8:46 AM CST | Looking for secret files | Trying to download files like .env, .git or backups. | 5 |