wordpress/6.8.1; https://wilderheilzauber.de

[[TODO: MAP ONE SENTENCE SUMMARY]]

Category: [[TODO: MAP CATEGORY]] Avg 2.5 req/min Seen on 1 systems 6 observed requests 1 exact variants First seen August 5, 2026 Last seen August 27, 2026

[[TODO: MAP INTRODUCTION PARAGRAPH 1]]

[[TODO: MAP INTRODUCTION PARAGRAPH 2]]

What is wordpress/6.8.1; https://wilderheilzauber.de?

[[TODO: MAP DEFINITION SUMMARY]]

[[TODO: MAP SHORT REFERENCE SUMMARY]]

Analyst summary: [[TODO: MAP ANALYST REPORT SUMMARY]]
User-agent
wordpress/6.8.1; https://wilderheilzauber.de
Observed source IPs
0
Observed requests
6
Source networks
2
Exact variants
1
Latest hit count
26
Latest miss count
18
Latest 404 count
0
Unique paths
16
Related campaigns
[[TODO: MAP RELATED CAMPAIGN COUNT]]

Observed exact user-agent strings

wordpress/6.8.1; https://wilderheilzauber.de First seen August 5, 2026 · Last seen August 27, 2026

Behavior profile

[[TODO: MAP BEHAVIOR PROFILE INTRO]]

Category
[[TODO: MAP CATEGORY]]
Average request rate
2.5 requests per minute
HTTP and HTTPS support
[[TODO: MAP HTTP HTTPS SUPPORT]]
HTTP version support
[[TODO: MAP PROTOCOL SUPPORT SUMMARY]]
Redirect behavior
[[TODO: MAP REDIRECT BEHAVIOR]]
Robots.txt behavior
[[TODO: MAP ROBOTS TXT BEHAVIOR]]
Crawl-rate behavior
[[TODO: MAP CRAWL RATE BEHAVIOR]]
JavaScript execution
[[TODO: MAP JAVASCRIPT SUPPORT]]
Form submission activity
[[TODO: MAP FORM SUBMISSION ACTIVITY]]
Malformed URL requests
[[TODO: MAP MALFORMED URL BEHAVIOR]]
HTTP/1.0: [[TODO: MAP HTTP 1.0 SUPPORT]] HTTP/1.1: [[TODO: MAP HTTP 1.1 SUPPORT]] HTTP/2: [[TODO: MAP HTTP 2 SUPPORT]] HTTP/3: [[TODO: MAP HTTP 3 SUPPORT]] [[TODO: MAP HEADER ORDER FINGERPRINTED]]

Source distribution

[[TODO: MAP SOURCE DISTRIBUTION INTRO]]

Top countries

Country Networks Site sightings Share
Bulgaria 1 1 50.0%
Canada 1 1 50.0%

Top ASNs

ASN Organization Networks Share
AS48090 [[TODO: MAP ASN ORGANIZATION]] 1 50.0%
AS174 [[TODO: MAP ASN ORGANIZATION]] 1 50.0%

Top datacenters

Provider Type Snapshots Share

Representative source IPs

[[TODO: MAP REPRESENTATIVE IPS INTRO]]

HTTP fingerprint and request characteristics

[[TODO: MAP HTTP FINGERPRINT INTRO]]

Observed header order
[[TODO: MAP HTTP HEADER ORDER SUMMARY]]
Common headers sent
[[TODO: MAP COMMON HEADERS SUMMARY]]
TLS and HTTPS behavior
[[TODO: MAP TLS HTTPS SUMMARY]]
URL normalization behavior
[[TODO: MAP URL NORMALIZATION SUMMARY]]
Malformed request patterns
[[TODO: MAP MALFORMED REQUEST SUMMARY]]
[[TODO: MAP OBSERVED HTTP HEADERS]]

Observed sample requests

[[TODO: MAP SAMPLE REQUESTS INTRO]]

GET
/wp-login.php?timestamp=hex_value
Status pattern: HTTP 403
Seen 2 times, Last seen August 27, 2026
POST
/wp-admin/admin-ajax.php?action=imagify_optimize_media&nonce=%2A%2A%2A&chain_id=b88844e1-2359-41f7-8dc4-c58cedd2e7d7
Status pattern: HTTP 403
Seen 1 times, Last seen August 27, 2026
GET
/
Status pattern: HTTP 200
Seen 8 times, Last seen August 27, 2026
GET
/?timestamp=hex_value
Status pattern: HTTP 200
Seen 2 times, Last seen August 27, 2026
POST
/wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=%2A%2A%2A
Status pattern: HTTP 200
Seen 5 times, Last seen August 27, 2026
POST
/wp-admin/admin-ajax.php?action=imagify_optimize_media&nonce=%2A%2A%2A&chain_id=e8f76f17-0e41-4924-850b-8b5fcab7df65
Status pattern: HTTP 403
Seen 1 times, Last seen August 27, 2026
POST
/wp-admin/admin-ajax.php?action=imagify_optimize_media&nonce=%2A%2A%2A&chain_id=e1e3b71e-db8a-4ae8-a97f-a281da4eaea6
Status pattern: HTTP 403
Seen 1 times, Last seen August 27, 2026
POST
/wp-admin/admin-ajax.php?action=imagify_optimize_media&nonce=%2A%2A%2A&chain_id=77462e5a-df28-4399-96f2-b0f0988f1b83
Status pattern: HTTP 403
Seen 1 times, Last seen August 27, 2026
POST
/wp-admin/admin-ajax.php?action=imagify_optimize_media&nonce=%2A%2A%2A&chain_id=b87b31ed-b8c4-4252-aaee-e851535a4da0
Status pattern: HTTP 403
Seen 1 times, Last seen August 27, 2026
POST
/wp-admin/admin-ajax.php?action=imagify_optimize_media&nonce=%2A%2A%2A&chain_id=ec13a327-006f-40e5-9fd2-589c8421b53a
Status pattern: HTTP 403
Seen 1 times, Last seen August 27, 2026
POST
/wp-admin/admin-ajax.php?action=imagify_optimize_media&nonce=%2A%2A%2A&chain_id=b38f0aa3-fa50-470e-8bdd-1fbb87008034
Status pattern: HTTP 403
Seen 1 times, Last seen August 27, 2026
POST
/wp-admin/admin-ajax.php?action=imagify_optimize_media&nonce=%2A%2A%2A&chain_id=06168df7-5384-40b3-9541-00d7288a0313
Status pattern: HTTP 403
Seen 1 times, Last seen August 27, 2026

Related campaigns and associations

[[TODO: MAP RELATED CAMPAIGNS INTRO]]

[[TODO: MAP RELATED CAMPAIGN NAME]]

[[TODO: MAP RELATED CAMPAIGN SUMMARY]]
Related IPs: [[TODO: MAP RELATED CAMPAIGN IP COUNT]], Systems seen: [[TODO: MAP RELATED CAMPAIGN SYSTEMS SEEN]]
Confidence: [[TODO: MAP RELATED CAMPAIGN CONFIDENCE]]

Detailed analyst report

[[TODO: MAP ANALYST REPORT PARAGRAPH 1]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 2]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 3]]

Frequently asked questions about wordpress/6.8.1; https://wilderheilzauber.de

What is wordpress/6.8.1; https://wilderheilzauber.de?

[[TODO: MAP FAQ WHAT IS ANSWER]]

Is wordpress/6.8.1; https://wilderheilzauber.de considered malicious?

[[TODO: MAP FAQ MALICIOUS ANSWER]]

Does wordpress/6.8.1; https://wilderheilzauber.de respect robots.txt and crawl-rate controls?

[[TODO: MAP FAQ ROBOTS ANSWER]]

What infrastructure is commonly associated with wordpress/6.8.1; https://wilderheilzauber.de?

[[TODO: MAP FAQ INFRASTRUCTURE ANSWER]]