| When (Central) | Attack type | What it means | Events |
|---|
| Nov 3, 3:16 PM CST | Software fingerprinting | Checking which web software you run, usually before attacking. | 1 |
| Nov 3, 3:16 PM CST | Looking for admin pages | Searching for login/admin panels (phpMyAdmin, /admin, etc.). | 3 |
| Nov 3, 3:16 PM CST | Aggressive web crawling | A bot hammering many pages very fast. | 43 |
| Nov 3, 3:16 PM CST | Web probing | Requesting many pages that do not exist, looking for something to attack. | 11 |
| Nov 3, 3:16 PM CST | Looking for secret files | Trying to download files like .env, .git or backups. | 5 |