Investigation Workspace

Entity: 35.196.98.70 (Ip)

Entity Details
Type
Ip
ASN
AS396982 - Google LLC
Threat Intelligence
Extensive WordPress enumeration and bot impersonation attempts detected, with all accessed paths flagged by WAF, multiple security alerts, and a critical IPBLOCK deny rule triggered. Its associated ASN AS396982 is already blocklisted for identical malicious activity.
Linked Entities
TLS Fingerprints (1)
Hostnames Targeted
Hostname Request Count
akamai.darcherif.fr 32
Paths Targeted (with Hostname Counts)
Path Distinct Hostnames
xmlrpc.php 1
wp/wp-includes/wlwmanifest.xml 1
website/wp-includes/wlwmanifest.xml 1
site/wp-includes/wlwmanifest.xml 1
shop/wp-includes/wlwmanifest.xml 1
news/wp-includes/wlwmanifest.xml 1
media/wp-includes/wlwmanifest.xml 1
sito/wp-includes/wlwmanifest.xml 1
cms/wp-includes/wlwmanifest.xml 1
_sec/cp_challenge/challenge 1
wp-includes/wlwmanifest.xml 1
blog/wp-includes/wlwmanifest.xml 1
2019/wp-includes/wlwmanifest.xml 1
wp2/wp-includes/wlwmanifest.xml 1
wp1/wp-includes/wlwmanifest.xml 1
2018/wp-includes/wlwmanifest.xml 1
wordpress/wp-includes/wlwmanifest.xml 1
web/wp-includes/wlwmanifest.xml 1
test/wp-includes/wlwmanifest.xml 1
🚫

Block

Extensive WordPress enumeration and bot impersonation attempts detected, with all accessed paths flagged by WAF, multiple security alerts, and a critical IPBLOCK deny rule triggered. Its associated ASN AS396982 is already blocklisted for identical malicious activity.

2026-01-13 08:57:29