the incutio xml-rpc php library -- wordpress/7.1.3

[[TODO: MAP ONE SENTENCE SUMMARY]]

Category: [[TODO: MAP CATEGORY]] Avg 19.0 req/min Seen on 5 systems 8 observed requests 5 exact variants First seen August 8, 2026 Last seen October 18, 2026

[[TODO: MAP INTRODUCTION PARAGRAPH 1]]

[[TODO: MAP INTRODUCTION PARAGRAPH 2]]

What is the incutio xml-rpc php library -- wordpress/7.1.3?

[[TODO: MAP DEFINITION SUMMARY]]

[[TODO: MAP SHORT REFERENCE SUMMARY]]

Analyst summary: [[TODO: MAP ANALYST REPORT SUMMARY]]
User-agent
the incutio xml-rpc php library -- wordpress/7.1.3
Observed source IPs
0
Observed requests
8
Source networks
6
Exact variants
5
Latest hit count
0
Latest miss count
96
Latest 404 count
0
Unique paths
0
Related campaigns
[[TODO: MAP RELATED CAMPAIGN COUNT]]

Observed exact user-agent strings

the incutio xml-rpc php library -- wordpress/7.1.3 First seen October 18, 2026 · Last seen October 18, 2026
the incutio xml-rpc php library -- wordpress/7.0 First seen October 2, 2026 · Last seen October 2, 2026
the incutio xml-rpc php library -- wordpress/6.8.10 First seen September 24, 2026 · Last seen September 24, 2026
the incutio xml-rpc php library -- wordpress/7.0.4 First seen August 16, 2026 · Last seen August 19, 2026
the incutio xml-rpc php library -- wordpress/7.0.2 First seen August 8, 2026 · Last seen August 9, 2026

Behavior profile

[[TODO: MAP BEHAVIOR PROFILE INTRO]]

Category
[[TODO: MAP CATEGORY]]
Average request rate
19.0 requests per minute
HTTP and HTTPS support
[[TODO: MAP HTTP HTTPS SUPPORT]]
HTTP version support
[[TODO: MAP PROTOCOL SUPPORT SUMMARY]]
Redirect behavior
[[TODO: MAP REDIRECT BEHAVIOR]]
Robots.txt behavior
[[TODO: MAP ROBOTS TXT BEHAVIOR]]
Crawl-rate behavior
[[TODO: MAP CRAWL RATE BEHAVIOR]]
JavaScript execution
[[TODO: MAP JAVASCRIPT SUPPORT]]
Form submission activity
[[TODO: MAP FORM SUBMISSION ACTIVITY]]
Malformed URL requests
[[TODO: MAP MALFORMED URL BEHAVIOR]]
HTTP/1.0: [[TODO: MAP HTTP 1.0 SUPPORT]] HTTP/1.1: [[TODO: MAP HTTP 1.1 SUPPORT]] HTTP/2: [[TODO: MAP HTTP 2 SUPPORT]] HTTP/3: [[TODO: MAP HTTP 3 SUPPORT]] [[TODO: MAP HEADER ORDER FINGERPRINTED]]

Source distribution

[[TODO: MAP SOURCE DISTRIBUTION INTRO]]

Top countries

Country Networks Site sightings Share
Denmark 1 1 25.0%
Malaysia 1 1 25.0%
Germany 2 2 25.0%
Hungary 1 1 12.5%
Poland 1 1 12.5%

Top ASNs

ASN Organization Networks Share
AS48854 [[TODO: MAP ASN ORGANIZATION]] 1 25.0%
AS45839 [[TODO: MAP ASN ORGANIZATION]] 1 25.0%
AS208154 [[TODO: MAP ASN ORGANIZATION]] 1 12.5%
AS47583 [[TODO: MAP ASN ORGANIZATION]] 1 12.5%
AS28753 [[TODO: MAP ASN ORGANIZATION]] 1 12.5%
AS41079 [[TODO: MAP ASN ORGANIZATION]] 1 12.5%

Top datacenters

Provider Type Snapshots Share

Representative source IPs

[[TODO: MAP REPRESENTATIVE IPS INTRO]]

HTTP fingerprint and request characteristics

[[TODO: MAP HTTP FINGERPRINT INTRO]]

Observed header order
[[TODO: MAP HTTP HEADER ORDER SUMMARY]]
Common headers sent
[[TODO: MAP COMMON HEADERS SUMMARY]]
TLS and HTTPS behavior
[[TODO: MAP TLS HTTPS SUMMARY]]
URL normalization behavior
[[TODO: MAP URL NORMALIZATION SUMMARY]]
Malformed request patterns
[[TODO: MAP MALFORMED REQUEST SUMMARY]]
[[TODO: MAP OBSERVED HTTP HEADERS]]

Observed sample requests

[[TODO: MAP SAMPLE REQUESTS INTRO]]

HEAD
/497f37bd-8315-41fa-aba5-1391e52712e3
Status pattern: HTTP 404
Seen 2 times, Last seen August 16, 2026
HEAD
/cd584674-3867-43e2-80d1-94b7f739aa73
Status pattern: HTTP 404
Seen 2 times, Last seen August 16, 2026
HEAD
/0501df6e-f917-4f9a-a62b-7cc30a98e4cf
Status pattern: HTTP 404
Seen 2 times, Last seen August 16, 2026
POST
/xmlrpc.php?%3C%3Fxml_version=%221.0%22%3F%3E%0A%3CmethodCall%3E%0A%3CmethodName%3Epingback.ping%3C%2FmethodName%3E%0A%3Cparams%3E%0A%3Cparam%3E%3Cvalue%3E%3Cstring%3Ehttps%3A%2F%2Fxn--if-kka.
Status pattern: HTTP 403
Seen 5 times, Last seen August 16, 2026
HEAD
/c6ee8b10-0487-4b58-bbfa-f935cc3bdbdc
Status pattern: HTTP 404
Seen 2 times, Last seen August 16, 2026
GET
/497f37bd-8315-41fa-aba5-1391e52712e3
Status pattern: HTTP 404
Seen 1 times, Last seen August 16, 2026
HEAD
/48befd8f-4630-4e82-8aaf-b44d8d8ef972
Status pattern: HTTP 404
Seen 1 times, Last seen August 16, 2026
HEAD
/d70fa59f-f34c-4fc3-97c9-d3a32288d853
Status pattern: HTTP 404
Seen 1 times, Last seen August 16, 2026
GET
/0501df6e-f917-4f9a-a62b-7cc30a98e4cf
Status pattern: HTTP 404
Seen 1 times, Last seen August 16, 2026
GET
/cd584674-3867-43e2-80d1-94b7f739aa73
Status pattern: HTTP 404
Seen 1 times, Last seen August 16, 2026
GET
/d70fa59f-f34c-4fc3-97c9-d3a32288d853
Status pattern: HTTP 404
Seen 1 times, Last seen August 16, 2026
GET
/c6ee8b10-0487-4b58-bbfa-f935cc3bdbdc
Status pattern: HTTP 404
Seen 1 times, Last seen August 16, 2026

Related campaigns and associations

[[TODO: MAP RELATED CAMPAIGNS INTRO]]

[[TODO: MAP RELATED CAMPAIGN NAME]]

[[TODO: MAP RELATED CAMPAIGN SUMMARY]]
Related IPs: [[TODO: MAP RELATED CAMPAIGN IP COUNT]], Systems seen: [[TODO: MAP RELATED CAMPAIGN SYSTEMS SEEN]]
Confidence: [[TODO: MAP RELATED CAMPAIGN CONFIDENCE]]

Detailed analyst report

[[TODO: MAP ANALYST REPORT PARAGRAPH 1]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 2]]

[[TODO: MAP ANALYST REPORT PARAGRAPH 3]]

Frequently asked questions about the incutio xml-rpc php library -- wordpress/7.1.3

What is the incutio xml-rpc php library -- wordpress/7.1.3?

[[TODO: MAP FAQ WHAT IS ANSWER]]

Is the incutio xml-rpc php library -- wordpress/7.1.3 considered malicious?

[[TODO: MAP FAQ MALICIOUS ANSWER]]

Does the incutio xml-rpc php library -- wordpress/7.1.3 respect robots.txt and crawl-rate controls?

[[TODO: MAP FAQ ROBOTS ANSWER]]

What infrastructure is commonly associated with the incutio xml-rpc php library -- wordpress/7.1.3?

[[TODO: MAP FAQ INFRASTRUCTURE ANSWER]]