Investigation Workspace

Entity: 20.37.96.143 (Ip)

Entity Details
Type
Ip
ASN
AS8075 - Microsoft Corporation
Threat Intelligence
All requests from this IP were flagged by WAF, accessing suspicious PHP files including known exploit paths like 'wp-filemanager.php', and triggered a deny security rule (REP_1654538).
Linked Entities
Hostnames Targeted
Hostname Request Count
www.darcherif.fr 12
Paths Targeted (with Hostname Counts)
Path Distinct Hostnames
conn.php 1
kki.php 1
e.php 1
xo.php 1
m.php 1
card.php 1
asas.php 1
ze.php 1
dd1.php 1
shoha.php 1
wp-the1me.php 1
wp-content/plugins/hellopress/wp_filemanager.php 1
🚫

Block

All requests from this IP were flagged by WAF, accessing suspicious PHP files including known exploit paths like 'wp-filemanager.php', and triggered a deny security rule (REP_1654538).

2025-11-10 22:07:17