| When (Central) | Attack type | What it means | Events |
| Nov 6, 8:52 PM CST | Looking for admin pages | Searching for login/admin panels (phpMyAdmin, /admin, etc.). | 4 |
| Nov 6, 8:52 PM CST | Software fingerprinting | Checking which web software you run, usually before attacking. | 1 |
| Nov 6, 8:51 PM CST | WordPress scanning | Probing for WordPress pages and plugins. | 5 |
| Nov 6, 8:51 PM CST | Looking for admin pages | Searching for login/admin panels (phpMyAdmin, /admin, etc.). | 4 |
| Nov 6, 8:51 PM CST | Web probing | Requesting many pages that do not exist, looking for something to attack. | 11 |