Investigation Workspace

Entity: 149.102.225.179 (Ip)

Entity Details
Type
Ip
ASN
AS212238 - Datacamp Limited
Threat Intelligence
IP exhibiting aggressive WordPress enumeration, bot impersonation, high threat requests (95/31), all accessed paths flagged by WAF, and triggered a critical WAF deny rule (IPBLOCK-BURST4-318403), consistent with other blocklisted IPs from similar malicious campaigns.
Linked Entities
TLS Fingerprints (1)
Hostnames Targeted
Hostname Request Count
akamai.darcherif.fr 31
Paths Targeted (with Hostname Counts)
Path Distinct Hostnames
xmlrpc.php 1
wp/wp-includes/wlwmanifest.xml 1
website/wp-includes/wlwmanifest.xml 1
site/wp-includes/wlwmanifest.xml 1
shop/wp-includes/wlwmanifest.xml 1
news/wp-includes/wlwmanifest.xml 1
media/wp-includes/wlwmanifest.xml 1
sito/wp-includes/wlwmanifest.xml 1
cms/wp-includes/wlwmanifest.xml 1
_sec/cp_challenge/challenge 1
wp-includes/wlwmanifest.xml 1
blog/wp-includes/wlwmanifest.xml 1
2019/wp-includes/wlwmanifest.xml 1
wp2/wp-includes/wlwmanifest.xml 1
wp1/wp-includes/wlwmanifest.xml 1
2018/wp-includes/wlwmanifest.xml 1
wordpress/wp-includes/wlwmanifest.xml 1
web/wp-includes/wlwmanifest.xml 1
test/wp-includes/wlwmanifest.xml 1
🚫

Block

IP exhibiting aggressive WordPress enumeration, bot impersonation, high threat requests (95/31), all accessed paths flagged by WAF, and triggered a critical WAF deny rule (IPBLOCK-BURST4-318403), consistent with other blocklisted IPs from similar malicious campaigns.

2026-01-21 01:59:39