funny is when a service company “Server Offers” runs silly wordpress attempts against our site:
27/01/2026 18:47:29 | IP: 141.98.11.98 | T: wpHakka | Req: /wp-login.php
27/01/2026 18:47:29 | IP: 141.98.11.98 | T: wpHakka | Req: /wp-admin/
27/01/2026 18:47:31 | IP: 141.98.11.98 | T: wpHakka | Req: /wp-login.php
27/01/2026 18:47:32 | IP: 141.98.11.98 | T: wpHakka | Req: /wp-admin/
27/01/2026 18:47:33 | IP: 141.98.11.98 | T: wpHakka | Req: /blog/wp-login.php
27/01/2026 18:47:35 | IP: 141.98.11.98 | T: wpHakka | Req: /wp-login.php
27/01/2026 18:47:36 | IP: 141.98.11.98 | T: wpHakka | Req: /wp-admin/
27/01/2026 18:47:37 | IP: 141.98.11.98 | T: wpHakka | Req: /wp-login.php
27/01/2026 18:47:38 | IP: 141.98.11.98 | T: wpHakka | Req: /wp-admin/
27/01/2026 18:47:40 | IP: 141.98.11.98 | T: wpHakka | Req: /blog/wp-login.php
and has an abuse contact in its WHOIS record:
Abuse contact for ‘141.98.11.0 – 141.98.11.255’ is ‘admin@serveroffer.lt’
isn’t it Mr.Paulius?
inetnum: 141.98.11.0 – 141.98.11.255
netname: LT-HOSTBALTIC-11
country: LT
admin-c: PV7242-RIPE
tech-c: PV7242-RIPE
status: ASSIGNED PA
mnt-by: mnt-lt-hostbaltic-1
created: 2019-01-10T13:12:30Z
last-modified: 2019-01-10T13:12:30Z
source: RIPE
person: Paulius Vancugovas
address: Draugystes g. 19
address: 51230
address: Kaunas
address: LITHUANIA
phone: +37067358624
nic-hdl: PV7242-RIPE
mnt-by: mnt-lt-hostbaltic-1
created: 2019-01-08T13:14:38Z
last-modified: 2019-01-09T13:14:40Z
source: RIPE
That are those moments when you discover how serious a company is …
should we try your servers in return?
don’t worry, we don’t do that, we are serious about security
Leave a Reply