Investigation Workspace

Entity: 124.198.132.28 (Ip)

Entity Details
Type
Ip
ASN
AS210558 - 1337 Services GmbH
Threat Intelligence
All 19 requests from this IP address were flagged by WAF, hitting a deny rule (REP_1654538), and involved scanning common WordPress manifest files (wlwmanifest.xml). This indicates a highly confident malicious reconnaissance or attack attempt.
Linked Entities
TLS Fingerprints (1)
Hostnames Targeted
Hostname Request Count
www.darcherif.fr 19
Paths Targeted (with Request Counts)
Path Request Count
/ 1
xmlrpc.php 1
wp/wp-includes/wlwmanifest.xml 1
website/wp-includes/wlwmanifest.xml 1
site/wp-includes/wlwmanifest.xml 1
shop/wp-includes/wlwmanifest.xml 1
news/wp-includes/wlwmanifest.xml 1
media/wp-includes/wlwmanifest.xml 1
sito/wp-includes/wlwmanifest.xml 1
cms/wp-includes/wlwmanifest.xml 1
wp-includes/wlwmanifest.xml 1
blog/wp-includes/wlwmanifest.xml 1
2019/wp-includes/wlwmanifest.xml 1
wp2/wp-includes/wlwmanifest.xml 1
wp1/wp-includes/wlwmanifest.xml 1
2018/wp-includes/wlwmanifest.xml 1
wordpress/wp-includes/wlwmanifest.xml 1
web/wp-includes/wlwmanifest.xml 1
test/wp-includes/wlwmanifest.xml 1
🚫

Block

All 19 requests from this IP address were flagged by WAF, hitting a deny rule (REP_1654538), and involved scanning common WordPress manifest files (wlwmanifest.xml). This indicates a highly confident malicious reconnaissance or attack attempt.

2026-03-12 09:21:05