Investigation Workspace

Entity: AS209605 (Asn)

Entity Details
Type
Asn
ASN
AS209605
Threat Intelligence
Multiple IPs from this ASN, including '91.224.92.93' and '91.224.92.99', are consistently performing brute-force and enumeration attacks on 'wp-login.php' and triggering critical WAF alerts.
Linked Entities
TLS Fingerprints (10)
Hostnames Targeted
Hostname Request Count
www.darcherif.fr 886
akamai.darcherif.fr 756
Paths Targeted (with Request Counts)
Path Request Count
wp-login.php 800
/ 84
_sec/cp_challenge/challenge 61
js/mpulse.js 32
mail/contact_me.js 32
%5C.js 32
assets/mail/jqBootstrapValidation.js 32
assets/65257_1825232190.js 32
assets/65350_1825232252.js 32
mail/jqBootstrapValidation.js 32
assets/64885_1825232283.js 32
assets/65226_1825232221.js 32
assets/65319_1825232221.js 32
mpulse.js 32
assets/64854_747628186.js 32
scripts.js 32
assets/mail/contact_me.js 32
js/scripts.js 32
index.php/author/admin3157/ 16
test/wp-includes/wlwmanifest.xml 9
feed/ 9
blog/wp-includes/wlwmanifest.xml 9
cms/wp-includes/wlwmanifest.xml 9
2020/wp-includes/wlwmanifest.xml 9
2019/wp-includes/wlwmanifest.xml 9
wp-includes/ID3/license.txt 9
wp1/wp-includes/wlwmanifest.xml 9
shop/wp-includes/wlwmanifest.xml 9
web/wp-includes/wlwmanifest.xml 9
site/wp-includes/wlwmanifest.xml 9
wordpress/wp-includes/wlwmanifest.xml 9
wp/wp-includes/wlwmanifest.xml 9
xmlrpc.php 9
2021/wp-includes/wlwmanifest.xml 9
wp-admin/ 8
administrator/ 5
admin 4
.env 4
postnews.php 4
login 4
css/styles.css 3
styles.css 3
body.css 3
css/heading.css 3
css/body.css 3
sitemap.xml 3
heading.css 3
robots.txt 3
register 2
user/login 2
🚫

Block

Multiple IPs from this ASN, including '91.224.92.93' and '91.224.92.99', are consistently performing brute-force and enumeration attacks on 'wp-login.php' and triggering critical WAF alerts.

2025-12-19 09:42:14