Investigation Workspace

Entity: 3%7e2891d83539e8d2fd (Tls)

Entity Details
Type
Tls
Linked Entities
IPs Linked to TLS Fingerprint (50)
Hostnames Targeted
Hostname Request Count
akamai.darcherif.fr 3540
www.darcherif.fr 108
Paths Targeted (with Request Counts)
Path Request Count
_sec/cp_challenge/challenge 1041
/ 233
xmlrpc.php 144
test/wp-includes/wlwmanifest.xml 132
web/wp-includes/wlwmanifest.xml 132
wp/wp-includes/wlwmanifest.xml 132
site/wp-includes/wlwmanifest.xml 132
wordpress/wp-includes/wlwmanifest.xml 132
cms/wp-includes/wlwmanifest.xml 132
blog/wp-includes/wlwmanifest.xml 132
wp1/wp-includes/wlwmanifest.xml 132
shop/wp-includes/wlwmanifest.xml 130
2019/wp-includes/wlwmanifest.xml 130
website/wp-includes/wlwmanifest.xml 119
news/wp-includes/wlwmanifest.xml 119
sito/wp-includes/wlwmanifest.xml 119
wp-includes/wlwmanifest.xml 119
wp2/wp-includes/wlwmanifest.xml 119
2018/wp-includes/wlwmanifest.xml 102
media/wp-includes/wlwmanifest.xml 102
2020/wp-includes/wlwmanifest.xml 28
feed/ 13
2021/wp-includes/wlwmanifest.xml 13
wp-includes/ID3/license.txt 13
blog/ 12
wp/ 12
blog/robots.txt 12
wordpress/ 12
🚫

Block

Extremely high number of detected threat requests and extensive WordPress enumeration, triggering multiple WAF alerts, bot impersonation, and a critical 'IPBLOCK-BURST4' deny rule.

2025-12-16 15:59:12