Name: Threat Intelligence: 112.209.181.210
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelMEDIUM43/1001 rule type

2 incidents on record · seen 7h ago

PTR	112.209.181.210.pldt.net
Org / ASN	AS9299 Philippine Long Distance Telephone Company
Country	🇵🇭 Philippines
City	Manila, Metro Manila
Timezone	Asia/Manila

Attack Analysis

WordPress XML-RPC Abuse

This IP targeted xmlrpc.php, a legacy WordPress endpoint that has been abused for brute-force authentication attacks, credential stuffing, and DDoS amplification. Any direct access to xmlrpc.php is an attack or reconnaissance attempt; modern WordPress sites should disable it entirely.

Reports (2)

Date	Severity	Description
4 Jun 2026 - 10:13	high	Web: xmlrpc.php accessed
4 Jun 2026 - 10:08	high	Web: xmlrpc.php accessed