Investigation Workspace

Entity: 45.94.31.197 (Ip)

Entity Details
Type
Ip
ASN
AS210558 - 1337 Services GmbH
Threat Intelligence
This IP is actively engaging in WordPress enumeration attempts by repeatedly accessing 'wlwmanifest.xml' paths across various directories. It has triggered multiple WAF alerts, including bot impersonation, and has been subject to IP blocking due to suspicious activity bursts.
Linked Entities
TLS Fingerprints (1)
Hostnames Targeted
Hostname Request Count
akamai.darcherif.fr 32
Paths Targeted (with Request Counts)
Path Request Count
_sec/cp_challenge/challenge 11
/ 3
xmlrpc.php 1
wp/wp-includes/wlwmanifest.xml 1
website/wp-includes/wlwmanifest.xml 1
site/wp-includes/wlwmanifest.xml 1
shop/wp-includes/wlwmanifest.xml 1
news/wp-includes/wlwmanifest.xml 1
media/wp-includes/wlwmanifest.xml 1
sito/wp-includes/wlwmanifest.xml 1
cms/wp-includes/wlwmanifest.xml 1
wp-includes/wlwmanifest.xml 1
blog/wp-includes/wlwmanifest.xml 1
2019/wp-includes/wlwmanifest.xml 1
wp2/wp-includes/wlwmanifest.xml 1
wp1/wp-includes/wlwmanifest.xml 1
2018/wp-includes/wlwmanifest.xml 1
wordpress/wp-includes/wlwmanifest.xml 1
web/wp-includes/wlwmanifest.xml 1
test/wp-includes/wlwmanifest.xml 1
🚫

Block

This IP is actively engaging in WordPress enumeration attempts by repeatedly accessing 'wlwmanifest.xml' paths across various directories. It has triggered multiple WAF alerts, including bot impersonation, and has been subject to IP blocking due to suspicious activity bursts.

2026-03-10 07:07:17