๐บ๐ธ
Jason Howell
2026-10-19 11:37:51
(6 days ago)
138.68.50.98 - - [19/Oct/2026:04:59:39 -0500] "POST /wp-login.php HTTP/1.1" 200 5818 "-" "Mozilla/5. ...
show more
138.68.50.98 - - [19/Oct/2026:04:59:39 -0500] "POST /wp-login.php HTTP/1.1" 200 5818 "-" "Mozilla/5.0"
138.68.50.98 - - [19/Oct/2026:06:30:06 -0500] "POST /wp-login.php HTTP/1.1" 200 4977 "-" "Mozilla/5.0"
138.68.50.98 - - [19/Oct/2026:06:30:06 -0500] "POST /wp-login.php HTTP/1.1" 200 5818 "-" "Mozilla/5.0"
138.68.50.98 - - [19/Oct/2026:06:30:06 -0500] "POST /wp-login.php HTTP/1.1" 200 5818 "-" "Mozilla/5.0"
138.68.50.98 - - [19/Oct/2026:06:37:49 -0500] "POST /wp-login.php HTTP/1.1" 200 4977 "-" "Mozilla/5.0"
...
show less
Web App Attack
๐ญ๐บ
bcsaba
2026-10-19 11:04:12
(6 days ago)
CMS (WordPress or Joomla) login attempt.
138.68.50.98 - - [19/Oct/2026:13:04:09 +0200] "POST /wp-log ...
show more
CMS (WordPress or Joomla) login attempt.
138.68.50.98 - - [19/Oct/2026:13:04:09 +0200] "POST /wp-login.php HTTP/1.1" 200 9604 "-" "Mozilla/5.0"
show less
Hacking
Brute-Force
Web App Attack
Anonymous
2026-10-19 11:00:04
(6 days ago)
Attack detected: 138.68.50.98 [2026-10-19]
Categories: 21
--- wp2shell/batch exploit (4 hits) ---
13 ...
show more
Attack detected: 138.68.50.98 [2026-10-19]
Categories: 21
--- wp2shell/batch exploit (4 hits) ---
138.68.50.98 - - [19/Oct/2026:10:36:46 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 301 612 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 155
138.68.50.98 - - [19/Oct/2026:10:36:46 +0000] "GET /wp-json/batch/v1 HTTP/2.0" 403 378 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 589
138.68.50.98 - - [19/Oct/2026:10:36:46 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 622 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 197
138.68.50.98 - - [19/Oct/2026:10:36:47 +0000] "GET /?rest_route=/batch/v1 HTTP/2.0" 403 378 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 560
show less
Web App Attack
๐ซ๐ท
masterguru
2026-10-19 10:27:48
(6 days ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-196)
Hacking
๐ฎ๐น
VHosting
2026-10-19 10:05:03
(6 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
Jason Howell
2026-10-19 09:59:40
(6 days ago)
138.68.50.98 - - [19/Oct/2026:04:55:33 -0500] "POST /wp-login.php HTTP/1.1" 200 4977 "-" "Mozilla/5. ...
show more
138.68.50.98 - - [19/Oct/2026:04:55:33 -0500] "POST /wp-login.php HTTP/1.1" 200 4977 "-" "Mozilla/5.0"
138.68.50.98 - - [19/Oct/2026:04:55:33 -0500] "POST /wp-login.php HTTP/1.1" 200 5818 "-" "Mozilla/5.0"
138.68.50.98 - - [19/Oct/2026:04:55:33 -0500] "POST /wp-login.php HTTP/1.1" 200 5818 "-" "Mozilla/5.0"
138.68.50.98 - - [19/Oct/2026:04:59:39 -0500] "POST /wp-login.php HTTP/1.1" 200 4977 "-" "Mozilla/5.0"
138.68.50.98 - - [19/Oct/2026:04:59:39 -0500] "POST /wp-login.php HTTP/1.1" 200 5818 "-" "Mozilla/5.0"
...
show less
Web App Attack
๐ญ๐บ
bcsaba
2026-10-19 09:57:30
(6 days ago)
CMS (WordPress or Joomla) login attempt.
138.68.50.98 - - [19/Oct/2026:11:57:28 +0200] "POST /wp-log ...
show more
CMS (WordPress or Joomla) login attempt.
138.68.50.98 - - [19/Oct/2026:11:57:28 +0200] "POST /wp-login.php HTTP/1.1" 200 9604 "-" "Mozilla/5.0"
show less
Hacking
Brute-Force
Web App Attack
๐ธ๐ช
nekopavel
2026-10-19 08:37:33
(6 days ago)
138.68.50.98 - - [19/Oct/2026:10:37:31 +0200]"POST /wp-json/batch/v1 HTTP/1.1" 301 162"-" pavel.gg " ...
show more
138.68.50.98 - - [19/Oct/2026:10:37:31 +0200]"POST /wp-json/batch/v1 HTTP/1.1" 301 162"-" pavel.gg "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36""0.160" "-""Santa Clara" "US"
138.68.50.98 - - [19/Oct/2026:10:37:31 +0200]"GET /wp-json/batch/v1 HTTP/1.1" 200 4153"-" pavel.gg "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36""0.000" "-""Santa Clara" "US"
138.68.50.98 - - [19/Oct/2026:10:37:32 +0200]"POST /wp-json/batch/v1 HTTP/1.1" 301 162"-" pavel.gg "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36""0.167" "-""Santa Clara" "US"
...
show less
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
pltcldvlpr
2026-10-19 05:30:12
(1 week ago)
CMS/framework probe: 138.68.50.98 - - [19/Oct/2026:07:30:12 +0200] "GET /wp-login.php HTTP/1.1" 301 ...
show more
CMS/framework probe: 138.68.50.98 - - [19/Oct/2026:07:30:12 +0200] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0" asn=14061 org="DigitalOcean, LLC" country=US
...
show less
Web App Attack