LowAcknowledgedHomeHaat#4
Scanning from 203.0.113.32
Requests for files the site doesn't have (/.env, /wp-admin…): a bot looking for weaknesses.
What to do
- Usually harmless noise, but check none of the paths returned 200.
- Make sure files like .env or .git are never served by the site.
Demo: Acknowledge and Resolve are switched off here. In the real dashboard they work.
Evidence · 1 event
| Time (IST) | Source | Event | Who | IP | Where |
|---|---|---|---|---|---|
| HomeHaat | Suspicious path | — | 203.0.113.32 DE | GET / |
- Suspicious pathHomeHaat
· 203.0.113.32 DE
GET /
phpmyadmin/ · 404
Details
- MITRE ATT&CK
- T1595 Active Scanning(opens in a new tab)
- About
- 203.0.113.32
- First seen
- 02 Nov, 00:04:16 IST
- Last seen
- 02 Nov, 00:04:16 IST
Timeline
IST
Alert raised (low) with 1 event
IST
Marked acknowledged (was open)
Demo: notes are switched off here. In the real dashboard they work.