| When (Central) | Attack type | What it means | Events |
| Nov 4, 11:05 AM CST | Known exploit attempt (CVE-2021-41773) | Trying a specific published software vulnerability. | 1 |
| Nov 4, 11:05 AM CST | Aggressive web crawling | A bot hammering many pages very fast. | 51 |
| Nov 4, 11:05 AM CST | Looking for admin pages | Searching for login/admin panels (phpMyAdmin, /admin, etc.). | 3 |
| Nov 4, 11:05 AM CST | Path traversal attempts | Using ../ tricks to read files outside the website. | 4 |
| Nov 4, 11:05 AM CST | Known bad bot / scanner | The visitor identified itself as a known attack tool or scanner. | 2 |
| Nov 4, 11:05 AM CST | Web probing | Requesting many pages that do not exist, looking for something to attack. | 11 |
| Nov 4, 11:05 AM CST | Looking for secret files | Trying to download files like .env, .git or backups. | 5 |