Report for IP: 103.196.9.95

Threat LevelMEDIUM34/1003 rule types
3 incidents on record · 3 rule types · last seen 9d ago
PTR N/A

Attack Analysis

WordPress XML-RPC Abuse
This IP accessed xmlrpc.php on a site where the owner has explicitly disabled it. xmlrpc.php is a legacy WordPress endpoint long abused for brute-force login attempts (via its multicall method) and DDoS pingback amplification; sites that don't need it disable it outright, making any access attempt inherently unwanted.
local blocklist

Reports (3)

Date Severity Description
26 Oct 2026 - 21:11 high WordPress: xmlrpc.php accessed
26 Oct 2026 - 21:10 low local blocklist
26 Oct 2026 - 21:10 medium Query Guard — Xmlrpc Access