87.106.142.17 - Wordpress xmlrpc.php

BEGIN OF HTTP DATA:
2015-10-19 13:43:02
Source IP: 87.106.142.17
Country: DE RiskScore: 1 Malware: []
POST /xmlrpc.php HTTP/1.1
Host: 195.169.125.87
Connection: keep-alive
Content-Length: 217
Cache-Control: max-age=0
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; fr; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Content-Type: application/x-www-form-urlencoded
Accept-Language: en-US,en;q=0.8
Cookie: wordpress_test_cookie=WP+Cookie+check

<?xml version="1.0"?><methodCall><methodName>wp.getUsersBlogs</methodName><params><param><value><string>admin</string></value></param><param><value><string>narecumsafie55</string></value></param></params></methodCall>

87.106.142[.]17

Static Source: GeoIP data
• Country: Germany
• ASN: AS8560 1&1 Internet AG

Dynamic Source: SANS Internet Storm Cast
• comment:IP is listed on SANS ISC
• comment:This entry alone does not indicate a threat, please check the link
• Reference: https://isc.sans.edu/api/ip/87.106.142.17