383
94.0%
43
IP: 37 ASN: 2 TLS: 11
| Entity | Type | Hostnames | Reason | Blocked At | AI Confidence | AI Details |
|---|---|---|---|---|---|---|
| 20.37.96.143 | IP | www.darcherif.fr | All requests from this IP were flagged by WAF, accessing suspicious PHP files including known exploit paths like 'wp-filemanager.php', and triggered a deny security rule (REP_1654538). | 2025-11-10 22:07:17 | 100.0% | Critical |
| AS15169 | ASN | www.darcherif.fr akamai.darcherif.fr | 48% of requests were threatening, all accessed paths flagged by WAF, and a burst-rate IP block rule (IPBLOCK-BURST4-318403) was triggered. | 2025-11-04 15:46:51 | 95.0% | Critical |
| 74.176.185.3 | IP | akamai.darcherif.fr | Extensive probing of suspicious PHP files, 100% of requests flagged by WAF with IPBLOCK deny rule, and associated ASN is already blocked for persistent malicious activity. | 2025-11-01 13:06:18 | 100.0% | Critical |
| 3%7ede8d6a84fab8672b | TLS | - | Confirmed common malicious client fingerprint associated with suspicious access patterns and reconnaissance. | 2025-10-31 13:37:03 | 95.0% | Critical |
| 3%7ede29393936a8dc4153 | TLS | - | Confirmed persistent malicious activity detected using this TLS fingerprint. | 2025-10-31 13:37:03 | 95.0% | Critical |
| 3%7ee35ec11fcbea7346 | TLS | - | Confirmed persistent malicious activity detected using this TLS fingerprint. | 2025-10-31 13:37:03 | 90.0% | Critical |
| 3%7ede293936a8dc4153 | TLS | - | Confirmed persistent malicious activity detected using this TLS fingerprint. | 2025-10-31 13:37:03 | 95.0% | Critical |
| 3%7efe38c35477967146 | TLS | - | Confirmed persistent malicious activity detected using this TLS fingerprint. | 2025-10-31 13:37:03 | 98.0% | Critical |
| UNKNOWN | TLS | - | Confirmed persistent malicious activity detected using an unknown TLS fingerprint. | 2025-10-31 13:37:03 | 100.0% | Critical |
| 205.169.39.130 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 90.0% | Critical |
| AS132203 | ASN | - | Confirmed persistent malicious activity detected from this ASN. | 2025-10-31 13:37:02 | 90.0% | Critical |
| 216.244.66.244 | IP | - | Confirmed consistent malicious probing observed, triggering WAF alerts. | 2025-10-31 13:37:02 | 80.0% | Medium |
| 216.126.227.20 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 100.0% | Critical |
| 217.156.56.11 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 90.0% | Critical |
| 205.169.39.4 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 90.0% | Critical |
| 48.210.236.214 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 100.0% | Critical |
| 51.38.105.105 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 90.0% | Critical |
| 205.169.39.38 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 95.0% | Critical |
| 3%7ebaae1457ad64ff16 | TLS | - | Confirmed persistent malicious activity detected using this TLS fingerprint. | 2025-10-31 13:37:02 | 90.0% | Critical |
| 172.190.142.176 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 100.0% | Critical |
| 3%7ea97fdb0b70d4a7b7 | TLS | - | Confirmed persistent malicious activity detected using this TLS fingerprint. | 2025-10-31 13:37:02 | 98.0% | Critical |
| 205.169.39.125 | IP | - | Confirmed part of a malicious subnet, linked to malicious hostname and TLS fingerprint, and accessed obfuscated paths. | 2025-10-31 13:37:02 | 95.0% | Critical |
| 34.116.246.85 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 85.0% | Medium |
| 2001:bc8:1f90:4:7ec2:55ff:fe9e:8476 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 85.0% | Medium |
| 2001:bc8:1201:19:46a8:42ff:fe1b:ae29 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 85.0% | Medium |
| 2001:4878:8216:510:dddd:b98a:3a76:296c | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 95.0% | Critical |
| 2601:155:80:2a0:de29:81f:6eed:b186 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 98.0% | Critical |
| 3%7e7bcf51bfc0d0b65f | TLS | - | Confirmed persistent malicious activity detected using this TLS fingerprint. | 2025-10-31 13:37:02 | 100.0% | Critical |
| 3%7e788289bd73e01aa4 | TLS | - | Confirmed persistent malicious activity detected using this TLS fingerprint. | 2025-10-31 13:37:02 | 100.0% | Critical |
| 20.244.26.188 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 95.0% | Critical |
| 34.116.172.61 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 85.0% | Medium |
| 62.60.130.211 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 98.0% | Critical |
| 20.193.136.32 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 95.0% | Critical |
| 20.171.207.158 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 85.0% | Medium |
| 196.251.86.207 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 98.0% | Critical |
| 196.251.84.111 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 95.0% | Critical |
| 2604:7c00:18:a:4f37:6f4c:d1bd:f3b5 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 100.0% | Critical |
| 3%7e2faa3a9db1c111de | TLS | - | Confirmed persistent malicious activity detected using this TLS fingerprint. | 2025-10-31 13:37:02 | 100.0% | Critical |
| 196.251.66.28 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 95.0% | Critical |
| 2604:a880:0:202a::62df:9000 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 100.0% | Critical |
| 81.17.20.98 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 95.0% | Critical |
| 195.178.110.75 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 95.0% | Critical |
| 195.178.110.201 | IP | - | Confirmed severe reconnaissance and potential exploit attempts (LFI anomaly, sensitive file access). | 2025-10-31 13:37:02 | 100.0% | Critical |
| 66.249.66.40 | IP | - | Confirmed consistent malicious probing observed, triggering WAF alerts. | 2025-10-31 13:37:02 | 80.0% | Medium |
| 34.1.27.103 | IP | - | Confirmed associated with a known malicious TLS fingerprint, indicating coordinated malicious activity. | 2025-10-31 13:37:02 | 90.0% | Critical |
| 45.153.163.23 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 90.0% | Critical |
| 185.177.72.144 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 100.0% | Critical |
| 185.177.72.11 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 100.0% | Critical |
| 185.177.72.12 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 100.0% | Critical |
| 216.73.216.163 | IP | - | Confirmed persistent malicious IP activity. | 2025-10-31 13:37:02 | 90.0% | Critical |