installatron plugin/10.0.9/605

[[TODO: MAP ONE SENTENCE SUMMARY]]

Category: [[TODO: MAP CATEGORY]] Avg 1.0 req/min Seen on 3 systems 13 observed requests 2 exact variants First seen August 3, 2026 Last seen September 8, 2026

[[TODO: MAP INTRODUCTION PARAGRAPH 1]]

[[TODO: MAP INTRODUCTION PARAGRAPH 2]]

What is installatron plugin/10.0.9/605?

[[TODO: MAP DEFINITION SUMMARY]]

[[TODO: MAP SHORT REFERENCE SUMMARY]]

Analyst summary: [[TODO: MAP ANALYST REPORT SUMMARY]]
User-agent
installatron plugin/10.0.9/605
Observed source IPs
0
Observed requests
13
Source networks
2
Exact variants
2
Latest hit count
0
Latest miss count
72
Latest 404 count
0
Unique paths
0
Related campaigns
[[TODO: MAP RELATED CAMPAIGN COUNT]]

Observed exact user-agent strings

installatron plugin/10.0.9/605 First seen August 18, 2026 · Last seen September 8, 2026
installatron plugin/10.0.6/547 First seen August 3, 2026 · Last seen August 11, 2026

Behavior profile

[[TODO: MAP BEHAVIOR PROFILE INTRO]]

Category
[[TODO: MAP CATEGORY]]
Average request rate
1.0 requests per minute
HTTP and HTTPS support
[[TODO: MAP HTTP HTTPS SUPPORT]]
HTTP version support
[[TODO: MAP PROTOCOL SUPPORT SUMMARY]]
Redirect behavior
[[TODO: MAP REDIRECT BEHAVIOR]]
Robots.txt behavior
[[TODO: MAP ROBOTS TXT BEHAVIOR]]
Crawl-rate behavior
[[TODO: MAP CRAWL RATE BEHAVIOR]]
JavaScript execution
[[TODO: MAP JAVASCRIPT SUPPORT]]
Form submission activity
[[TODO: MAP FORM SUBMISSION ACTIVITY]]
Malformed URL requests
[[TODO: MAP MALFORMED URL BEHAVIOR]]
HTTP/1.0: [[TODO: MAP HTTP 1.0 SUPPORT]] HTTP/1.1: [[TODO: MAP HTTP 1.1 SUPPORT]] HTTP/2: [[TODO: MAP HTTP 2 SUPPORT]] HTTP/3: [[TODO: MAP HTTP 3 SUPPORT]] [[TODO: MAP HEADER ORDER FINGERPRINTED]]

Source distribution

[[TODO: MAP SOURCE DISTRIBUTION INTRO]]

Top countries

Country Networks Site sightings Share
Italy 1 2 76.9%
Netherlands 1 1 23.1%

Top ASNs

ASN Organization Networks Share
AS52030 [[TODO: MAP ASN ORGANIZATION]] 1 76.9%
AS38913 [[TODO: MAP ASN ORGANIZATION]] 1 23.1%

Top datacenters

Provider Type Snapshots Share

Representative source IPs

[[TODO: MAP REPRESENTATIVE IPS INTRO]]

HTTP fingerprint and request characteristics

[[TODO: MAP HTTP FINGERPRINT INTRO]]

Observed header order
[[TODO: MAP HTTP HEADER ORDER SUMMARY]]
Common headers sent
[[TODO: MAP COMMON HEADERS SUMMARY]]
TLS and HTTPS behavior
[[TODO: MAP TLS HTTPS SUMMARY]]
URL normalization behavior
[[TODO: MAP URL NORMALIZATION SUMMARY]]
Malformed request patterns
[[TODO: MAP MALFORMED REQUEST SUMMARY]]
[[TODO: MAP OBSERVED HTTP HEADERS]]

Observed sample requests

[[TODO: MAP SAMPLE REQUESTS INTRO]]

GET
/deleteme.wp420ac906c18a40328cbb509edeb9fb1b.php?include_update_details=1&bootstrap_plugins=1&build=150&cmd=list&connection_id=hex_value&request_method=wp420ac906c18a40328cbb509edeb9fb1b
Status pattern: HTTP 403
Seen 1 times, Last seen August 10, 2026
GET
/deleteme.wp56a8bb5e7d044ce79fccaf15472232a5.php?include_update_details=1&bootstrap_plugins=1&build=150&cmd=list&connection_id=hex_value&request_method=wp56a8bb5e7d044ce79fccaf15472232a5
Status pattern: HTTP 403
Seen 1 times, Last seen August 5, 2026
GET
/deleteme.wpe7274b504d3446e99ae4a7015070dbdb.php?include_update_details=1&bootstrap_plugins=1&build=150&cmd=list&connection_id=hex_value&request_method=wpe7274b504d3446e99ae4a7015070dbdb
Status pattern: HTTP 403
Seen 1 times, Last seen August 4, 2026
GET
/deleteme.wp8ec7ba0c9b924a4a9690a098537192f4.php?include_update_details=1&bootstrap_plugins=1&build=150&cmd=list&connection_id=3a3a1c4007ac4ebc992da7d56451b66b&request_method=wp8ec7ba0c9b924a4
Status pattern: HTTP 403
Seen 1 times, Last seen August 3, 2026

Related campaigns and associations

[[TODO: MAP RELATED CAMPAIGNS INTRO]]

[[TODO: MAP RELATED CAMPAIGN NAME]]

[[TODO: MAP RELATED CAMPAIGN SUMMARY]]
Related IPs: [[TODO: MAP RELATED CAMPAIGN IP COUNT]], Systems seen: [[TODO: MAP RELATED CAMPAIGN SYSTEMS SEEN]]
Confidence: [[TODO: MAP RELATED CAMPAIGN CONFIDENCE]]

Detailed analyst report

[[TODO: MAP ANALYST REPORT PARAGRAPH 1]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 2]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 3]]

Frequently asked questions about installatron plugin/10.0.9/605

What is installatron plugin/10.0.9/605?

[[TODO: MAP FAQ WHAT IS ANSWER]]

Is installatron plugin/10.0.9/605 considered malicious?

[[TODO: MAP FAQ MALICIOUS ANSWER]]

Does installatron plugin/10.0.9/605 respect robots.txt and crawl-rate controls?

[[TODO: MAP FAQ ROBOTS ANSWER]]

What infrastructure is commonly associated with installatron plugin/10.0.9/605?

[[TODO: MAP FAQ INFRASTRUCTURE ANSWER]]