LowResolvedHomeHaat#8
Scanning from 203.0.113.33
Requests for files the site doesn't have (/.env, /wp-admin…): a bot looking for weaknesses.
What to do
- Usually harmless noise, but check none of the paths returned 200.
- Make sure files like .env or .git are never served by the site.
Demo: Acknowledge and Resolve are switched off here. In the real dashboard they work.
Evidence · 1 event
| Time (IST) | Source | Event | Who | IP | Where |
|---|---|---|---|---|---|
| HomeHaat | Suspicious path | — | 203.0.113.33 CN | GET / |
- Suspicious pathHomeHaat
· 203.0.113.33 CN
GET /
.env · 404
Details
- MITRE ATT&CK
- T1595 Active Scanning(opens in a new tab)
- About
- 203.0.113.33
- First seen
- 01 Nov, 17:53:17 IST
- Last seen
- 01 Nov, 17:53:17 IST
Timeline
IST
Alert raised (low) with 1 event
IST
Marked acknowledged (was open)
IST
Marked resolved (was acknowledged)
Demo: notes are switched off here. In the real dashboard they work.