ALERT! bulgarian hacker source net

have an eye on your logs!
an IP net from Bulgaria might appear trying to access your servers …

we have constant tries from there:

02/02/2026 11:52:47 | IP: 94.26.106.183 | T: Web-Dev | Req: /wp-login.php
02/02/2026 11:52:57 | IP: 94.26.106.183 | T: Web-Dev | Req: /wp-login.php

owners:
Information related to ‘94.26.106.0 – 94.26.106.255’

Abuse contact for ‘94.26.106.0 – 94.26.106.255’ is ‘abuse@vmheaven.io’

inetnum:        94.26.106.0 – 94.26.106.255
netname:        IPV4
country:        DE
admin-c:        NA9207-RIPE
abuse-c:        AA45092-RIPE
tech-c:         NA9207-RIPE
status:         SUB-ALLOCATED PA
mnt-by:         lir-bg-telco-1-MNT
created:        2025-12-01T10:35:18Z
last-modified:  2025-12-08T10:53:36Z
source:         RIPE

role:           NOC
address:        BULGARIA
address:        Sofia
address:        1000
address:        2 Peter Beron Str
phone:          +359887888951
nic-hdl:        NA9207-RIPE
mnt-by:         lir-bg-telco-1-MNT
created:        2025-04-09T07:40:33Z
last-modified:  2025-04-09T07:40:34Z
source:         RIPE # Filtered

Information related to ‘94.26.106.0/24AS215607’

route:          94.26.106.0/24
origin:         AS215607
mnt-by:         lir-bg-telco-1-MNT
created:        2025-12-01T10:28:34Z
last-modified:  2025-12-01T10:28:34Z
source:         RIPE