JezK

Edit File: ncro.ngo.afghandevelopers.net

144.217.135.187 - - [26/Sep/2026:12:04:07 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 65.181.111.180 - - [26/Sep/2026:12:05:23 +0000] "POST /wp-cron.php?doing_wp_cron=1790424323.5240368843078613281250 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 149.56.150.118 - - [26/Sep/2026:12:05:22 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 20.194.97.74 - - [26/Sep/2026:12:24:21 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 65.181.111.180 - - [26/Sep/2026:12:24:23 +0000] "POST /wp-cron.php?doing_wp_cron=1790425463.6465349197387695312500 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.194.97.74 - - [26/Sep/2026:12:24:22 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:24 +0000] "GET /kbqhb.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:27 +0000] "GET /0mzrlfdt.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:29 +0000] "GET /ot.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:31 +0000] "GET /edorxrr.php HTTP/1.1" 404 208955 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:33 +0000] "GET /ilex.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:35 +0000] "GET /632e19b36dindex.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:37 +0000] "GET /20.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:39 +0000] "GET /js.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:41 +0000] "GET /xrp.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:43 +0000] "GET /w1px.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:45 +0000] "GET /goods.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:48 +0000] "GET /b8.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:50 +0000] "GET /unzip.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:53 +0000] "GET /c3c427fa59.php HTTP/1.1" 404 208961 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:54 +0000] "GET /3.php HTTP/1.1" 403 31013 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:55 +0000] "GET /c3c427fa59index.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:57 +0000] "GET /e219b53abbindex.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:59 +0000] "GET /simple.php HTTP/1.1" 404 208953 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:01 +0000] "GET /wo.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:04 +0000] "GET /4cdf8c8db0index.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:06 +0000] "GET /zoo1.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:08 +0000] "GET /zoo2.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:10 +0000] "GET /kgblegacy.php HTTP/1.1" 404 208959 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:12 +0000] "GET /dot.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:14 +0000] "GET /wp-trackback.php HTTP/1.1" 404 135 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:15 +0000] "GET /83a907c742index.php HTTP/1.1" 404 208971 "-" "-" 65.181.111.180 - - [26/Sep/2026:12:25:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790425519.3021368980407714843750 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.194.97.74 - - [26/Sep/2026:12:25:17 +0000] "GET /samll.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:21 +0000] "GET /php8.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:23 +0000] "GET /abde5e1996.php HTTP/1.1" 404 208961 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:25 +0000] "GET /curldect.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:27 +0000] "GET /go.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:29 +0000] "GET /pep.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:31 +0000] "GET /fsfrl.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:34 +0000] "GET /faiy.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:36 +0000] "GET /hypo.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:38 +0000] "GET //ho.php HTTP/1.1" 301 0 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:40 +0000] "GET /ho.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:45 +0000] "GET /XrdbXydefault.php HTTP/1.1" 404 208967 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:47 +0000] "GET /jj.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:50 +0000] "GET /or.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:54 +0000] "GET /cjhnp.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:56 +0000] "GET /gif.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:58 +0000] "GET /local.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:00 +0000] "GET /xz7l6w5h.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:03 +0000] "GET /bn.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:05 +0000] "GET /df.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:07 +0000] "GET /ho.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:09 +0000] "GET /esp.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:11 +0000] "GET /felnggg.php HTTP/1.1" 404 208955 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:13 +0000] "GET /aqotrjkg.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:15 +0000] "GET /mar.php HTTP/1.1" 403 1242 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:15 +0000] "GET /02d4cc85caindex.php HTTP/1.1" 404 208971 "-" "-" 65.181.111.180 - - [26/Sep/2026:12:26:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790425579.9738829135894775390625 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.194.97.74 - - [26/Sep/2026:12:26:18 +0000] "GET /84300819ebindex.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:20 +0000] "GET /zwso.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:22 +0000] "GET /cilus.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:35 +0000] "GET /bhigtouj.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:40 +0000] "GET /gecho.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:41 +0000] "GET /coffe.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:43 +0000] "GET /ssdg.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:45 +0000] "GET /82.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:46 +0000] "GET /12.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:48 +0000] "GET /sm.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:50 +0000] "GET /css.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:51 +0000] "GET /abde5e1996index.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:53 +0000] "GET /a65.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:54 +0000] "GET /tvbxn.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:56 +0000] "GET /ccc.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:59 +0000] "GET /2fa307c31b.php HTTP/1.1" 404 208961 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:01 +0000] "GET /f35.update.php HTTP/1.1" 403 31013 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:01 +0000] "GET /29.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:03 +0000] "GET /eb06f5f3c7index.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:05 +0000] "GET /pqfpcelx.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:07 +0000] "GET /UT6UJndefault.php HTTP/1.1" 404 208967 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:10 +0000] "GET /jlex.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:12 +0000] "GET /cnsk.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:14 +0000] "GET /ded.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:16 +0000] "GET /acf1ced8aec2.php HTTP/1.1" 404 208965 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:18 +0000] "GET /accesson.php HTTP/1.1" 403 1242 "-" "-" 65.181.111.180 - - [26/Sep/2026:12:27:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790425639.7794470787048339843750 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.194.97.74 - - [26/Sep/2026:12:27:18 +0000] "GET /kerang.php HTTP/1.1" 404 208953 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:20 +0000] "GET /gix.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:22 +0000] "GET /hywzd.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:24 +0000] "GET /asax.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:26 +0000] "GET /ORVX-55jkI7.php HTTP/1.1" 404 208967 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:28 +0000] "GET /.cache.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:31 +0000] "GET /xmini4.php HTTP/1.1" 404 208953 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:33 +0000] "GET //000.php HTTP/1.1" 301 0 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:35 +0000] "GET /000.php HTTP/1.1" 403 31013 "-" "-" 43.153.135.208 - - [26/Sep/2026:12:59:00 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.253.248.163 - - [26/Sep/2026:13:36:11 +0000] "GET /.aws/config%EF%BF%BD HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:11 +0000] "GET /.aws/credentials%EF%BF%BD HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:12 +0000] "GET /.aws/credentials\\xef\\xbf\\xbd HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:12 +0000] "GET /.aws/config\\xef\\xbf\\xbd HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:13:36:12 +0000] "GET /.aws/config%EF%BF%BD%A0 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:12 +0000] "GET /.aws/credentials%EF%BF%BD%A0 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:13 +0000] "GET /.aws/config%EF%BF%BD%85 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:13 +0000] "GET /.aws/credentials%EF%BF%BD%85 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:13 +0000] "GET /.aws/credentials%EF%BF%BD%09 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:13 +0000] "GET /.aws/config%EF%BF%BD%09 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:14 +0000] "GET /.aws/credentials%EF%BF%BD%0C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:14 +0000] "GET /.aws/config%EF%BF%BD%0C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:25 +0000] "GET /.aws/credentials%EF%BF%BD%1D HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:25 +0000] "GET /.aws/config%EF%BF%BD%1D HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:13:36:25 +0000] "GET /.aws/credentials%EF%BF%BD%1C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:13:36:25 +0000] "GET /.aws/config%EF%BF%BD%1C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:13:36:26 +0000] "GET /.aws/config%EF%BF%BD%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:26 +0000] "GET /.aws/credentials%EF%BF%BD%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:26 +0000] "GET /.aws/credentials%EF%BF%BD; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:26 +0000] "GET /.aws/config%EF%BF%BD; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:28 +0000] "GET /.aws/config; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:13:36:28 +0000] "GET /.aws/config;%A0 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:13:36:29 +0000] "POST /wp-cron.php?doing_wp_cron=1790429789.0808620452880859375000 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 192.253.248.163 - - [26/Sep/2026:13:36:28 +0000] "GET /.azure/credentials%EF%BF%BD HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:29 +0000] "GET /.aws/config;%85 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:49 +0000] "GET /.aws/config;%1E HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:13:36:50 +0000] "POST /wp-cron.php?doing_wp_cron=1790429810.5872650146484375000000 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 65.181.111.180 - - [26/Sep/2026:13:36:50 +0000] "POST /wp-cron.php?doing_wp_cron=1790429810.6599590778350830078125 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 192.253.248.163 - - [26/Sep/2026:13:36:49 +0000] "GET /.azure/credentials%EF%BF%BD%0C HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:50 +0000] "GET /.aws/config;%1D HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:56 +0000] "GET /.aws/config;%1C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:13:36:56 +0000] "GET /.aws/config;%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:13:36:57 +0000] "GET /.aws/config;; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:56 +0000] "GET /.azure/credentials%EF%BF%BD%1F HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:13:36:57 +0000] "GET /.azure/credentials%EF%BF%BD%1E HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:58 +0000] "GET /.aws/credentials; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:37:18 +0000] "GET /.aws/credentials;%0C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:37:19 +0000] "GET /.aws/credentials;%1F HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 65.181.111.180 - - [26/Sep/2026:13:37:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790429839.6541180610656738281250 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 192.253.248.163 - - [26/Sep/2026:13:37:18 +0000] "GET /.azure/credentials%EF%BF%BD; HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:37:19 +0000] "GET /.aws/credentials;%1E HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:37:19 +0000] "GET /.aws/credentials;%1D HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:13:37:20 +0000] "GET /.aws/credentials;%1C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:37:25 +0000] "GET /.aws/credentials;%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 43.165.126.130 - - [26/Sep/2026:13:54:10 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 8.234.214.61 - - [26/Sep/2026:15:26:08 +0000] "GET /.git/config HTTP/1.1" 403 1242 "-" "-" 65.181.111.180 - - [26/Sep/2026:16:15:06 +0000] "POST /wp-cron.php?doing_wp_cron=1790439306.0647521018981933593750 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 43.173.176.152 - - [26/Sep/2026:16:15:04 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" 20.213.164.196 - - [26/Sep/2026:16:34:07 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:08 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:10 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:12 +0000] "GET /adminfuns.php HTTP/1.1" 404 208959 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:14 +0000] "GET //av.php HTTP/1.1" 301 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:16 +0000] "GET /av.php HTTP/1.1" 404 208945 "-" "-" 65.181.111.180 - - [26/Sep/2026:16:34:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790440459.6302249431610107421875 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.213.164.196 - - [26/Sep/2026:16:34:18 +0000] "GET /dex.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:20 +0000] "GET /chosen.php HTTP/1.1" 403 31013 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:20 +0000] "GET /radio.php HTTP/1.1" 403 31013 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:20 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 208969 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:23 +0000] "GET /k.php?p= HTTP/1.1" 301 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:24 +0000] "GET /k.php HTTP/1.1" 403 31013 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:25 +0000] "GET /133.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:27 +0000] "GET /wsd.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:29 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 208957 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:31 +0000] "GET /wmore1.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:33 +0000] "GET /177.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:36 +0000] "GET /ccc.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:38 +0000] "GET /0xD.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:40 +0000] "GET /sallu.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:42 +0000] "GET /ops.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:45 +0000] "GET /mac.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:47 +0000] "GET /myglu.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:49 +0000] "GET /7003b158aa4b6e.php HTTP/1.1" 404 208969 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:51 +0000] "GET /4edfe5rr.php HTTP/1.1" 404 208957 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:53 +0000] "GET /aboutt.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:56 +0000] "GET /dz0.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:58 +0000] "GET /matcha.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:00 +0000] "GET /32x1337.php HTTP/1.1" 404 208955 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:03 +0000] "GET /advance.php HTTP/1.1" 404 208955 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:05 +0000] "GET /laki.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:07 +0000] "GET /wp-X1s2e6h3p7.php HTTP/1.1" 404 208971 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:10 +0000] "GET /ezfhylnt.php HTTP/1.1" 404 208957 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:12 +0000] "GET /wp-admin/includes/class-wp-site-list.php HTTP/1.1" 302 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:17 +0000] "GET /wp-content/upgrade/wp-firewall.php HTTP/1.1" 200 0 "-" "-" 65.181.111.180 - - [26/Sep/2026:16:35:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790440519.1745870113372802734375 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.213.164.196 - - [26/Sep/2026:16:35:17 +0000] "GET /zeta.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:20 +0000] "GET /file-mancvgertdxz.php HTTP/1.1" 404 208979 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:22 +0000] "GET /wp-filemanager1.php HTTP/1.1" 404 208975 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:24 +0000] "GET /wp-whe.php HTTP/1.1" 404 208957 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:26 +0000] "GET /fms.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:28 +0000] "GET /oa.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:30 +0000] "GET /esc.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:32 +0000] "GET /yich.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:34 +0000] "GET /wp-xmlgal.php HTTP/1.1" 404 208963 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:36 +0000] "GET /Cdefault.php HTTP/1.1" 404 208957 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:38 +0000] "GET /sehryhv.php HTTP/1.1" 404 208955 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:40 +0000] "GET /1ac.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:43 +0000] "GET /yuca_cytgi.php HTTP/1.1" 404 208961 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:45 +0000] "GET /hao.php?p= HTTP/1.1" 301 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:46 +0000] "GET /hao.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:48 +0000] "GET /asw.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:50 +0000] "GET /olpsa.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:52 +0000] "GET /ega7IvFSLKi.php HTTP/1.1" 404 208963 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:55 +0000] "GET /kgb.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:57 +0000] "GET /upgrtfg.php HTTP/1.1" 404 208955 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:59 +0000] "GET /wp-content/OMrMKfSU.php HTTP/1.1" 200 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:59 +0000] "GET /fiu.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:02 +0000] "GET /chomu.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:04 +0000] "GET /cx.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:06 +0000] "GET /wp-pp.php HTTP/1.1" 404 208955 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:08 +0000] "GET /ssixta.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:11 +0000] "GET /wax.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:13 +0000] "GET /tesla.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:15 +0000] "GET /wp-x.php HTTP/1.1" 404 208953 "-" "-" 65.181.111.180 - - [26/Sep/2026:16:36:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790440579.6395230293273925781250 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.213.164.196 - - [26/Sep/2026:16:36:17 +0000] "GET /miru1.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:20 +0000] "GET /122.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:22 +0000] "GET /199.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:24 +0000] "GET /kuj8rl.php?p= HTTP/1.1" 301 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:26 +0000] "GET /kuj8rl.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:28 +0000] "GET /yyu.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:30 +0000] "GET /wp-feob.php HTTP/1.1" 404 208959 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:32 +0000] "GET /tphp.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:34 +0000] "GET /il.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:36 +0000] "GET /ct.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:39 +0000] "GET /bc.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:41 +0000] "GET /CDX2.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:43 +0000] "GET /SrHD3odefault.php HTTP/1.1" 404 208967 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:45 +0000] "GET /zoper.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:47 +0000] "GET /novax.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:49 +0000] "GET /albrt.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:51 +0000] "GET /fs6.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:53 +0000] "GET /f222.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:55 +0000] "GET /dass.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:57 +0000] "GET /fone1.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:00 +0000] "GET /HsFPDcD.php HTTP/1.1" 404 208955 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:02 +0000] "GET /huya.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:04 +0000] "GET /dodo.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:06 +0000] "GET /gool.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:08 +0000] "GET /wp-includes/rest-api/search/222.php HTTP/1.1" 404 1251 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:08 +0000] "GET /wp-content/plugins/elementor/theme.php HTTP/1.1" 200 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:08 +0000] "GET /wp-includes/wp-db-framework.php HTTP/1.1" 404 1251 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:09 +0000] "GET /x2x.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:11 +0000] "GET /xoot.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:13 +0000] "GET /sl.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:16 +0000] "GET ///admin.php HTTP/1.1" 301 0 "-" "-" 65.181.111.180 - - [26/Sep/2026:16:37:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790440639.3515319824218750000000 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 65.181.111.180 - - [26/Sep/2026:16:37:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790440639.3932299613952636718750 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 65.181.111.180 - - [26/Sep/2026:16:37:20 +0000] "POST /wp-cron.php?doing_wp_cron=1790440640.2427411079406738281250 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.213.164.196 - - [26/Sep/2026:16:37:18 +0000] "GET /admin.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:21 +0000] "GET /222.php HTTP/1.1" 404 208947 "-" "-" 65.181.111.180 - - [26/Sep/2026:17:09:54 +0000] "POST /wp-cron.php?doing_wp_cron=1790442594.4818980693817138671875 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 43.135.130.202 - - [26/Sep/2026:17:09:53 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 65.181.111.180 - - [26/Sep/2026:18:05:31 +0000] "POST /wp-cron.php?doing_wp_cron=1790445931.8344728946685791015625 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 49.51.180.2 - - [26/Sep/2026:18:05:30 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.70.1.101 - - [26/Sep/2026:19:07:39 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 65.181.111.180 - - [26/Sep/2026:19:07:41 +0000] "POST /wp-cron.php?doing_wp_cron=1790449661.5096120834350585937500 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 13.70.1.101 - - [26/Sep/2026:19:07:40 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:43 +0000] "GET /adminfuns.php HTTP/1.1" 404 208959 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:46 +0000] "GET /goods.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:49 +0000] "GET /100.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:51 +0000] "GET /about.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:52 +0000] "GET /admin.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:54 +0000] "GET /themes.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:56 +0000] "GET /biufile.php HTTP/1.1" 404 208955 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:58 +0000] "GET /coffexium.php HTTP/1.1" 404 208959 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:01 +0000] "GET /coffee.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:03 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:04 +0000] "GET /classwithtostring.php HTTP/1.1" 404 208975 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:06 +0000] "GET /wp-ws68.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:08 +0000] "GET /wp-ws68.php HTTP/1.1" 404 208959 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:10 +0000] "GET /mgrr.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:12 +0000] "GET /ws13.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:13 +0000] "GET /ws13.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:16 +0000] "GET /btx25.php HTTP/1.1" 404 208951 "-" "-" 65.181.111.180 - - [26/Sep/2026:19:08:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790449699.4824860095977783203125 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 13.70.1.101 - - [26/Sep/2026:19:08:18 +0000] "GET /SDsadqwrf.php HTTP/1.1" 404 208959 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:20 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 208957 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:22 +0000] "GET /file5.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:24 +0000] "GET /xyn.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:26 +0000] "GET /inso.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:28 +0000] "GET /puc.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:31 +0000] "GET /b8.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:33 +0000] "GET /133.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:35 +0000] "GET /blurbs.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:38 +0000] "GET /ano.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:40 +0000] "GET /sf.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:42 +0000] "GET /xx.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:44 +0000] "GET /signon.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:45 +0000] "GET /signon.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:47 +0000] "GET /file61.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:49 +0000] "GET /nano.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:52 +0000] "GET /.mopj.php HTTP/1.1" 404 208955 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:54 +0000] "GET /file2.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:56 +0000] "GET /ws55.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:58 +0000] "GET /m.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:59 +0000] "GET /m.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:59 +0000] "GET /33.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:01 +0000] "GET /wp-content/uploads/ HTTP/1.1" 404 1251 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:02 +0000] "GET /w.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:02 +0000] "GET /ccc.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:04 +0000] "GET /file15.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:06 +0000] "GET /f35.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:08 +0000] "GET /shiny.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:11 +0000] "GET /images.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:13 +0000] "GET /82.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:15 +0000] "GET /files.php/new.php HTTP/1.1" 404 208975 "-" "-" 65.181.111.180 - - [26/Sep/2026:19:09:18 +0000] "POST /wp-cron.php?doing_wp_cron=1790449758.6413180828094482421875 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 13.70.1.101 - - [26/Sep/2026:19:09:17 +0000] "GET /mghnhykio.php/new.php HTTP/1.1" 404 208983 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:19 +0000] "GET /admin.php/nope.php HTTP/1.1" 404 208977 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:21 +0000] "GET /lib.php/new.php HTTP/1.1" 404 208971 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:23 +0000] "GET /info.php/new.php HTTP/1.1" 404 208973 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:25 +0000] "GET /db.php/new.php HTTP/1.1" 404 208969 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:28 +0000] "GET /222.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:30 +0000] "GET /ops.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:32 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:34 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:36 +0000] "GET /opsh.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:38 +0000] "GET /gigi.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:40 +0000] "GET /ab.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:42 +0000] "GET /indo.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:45 +0000] "GET /sallu.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:47 +0000] "GET /radio.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:47 +0000] "GET /mac.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:49 +0000] "GET /simple.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:51 +0000] "GET /k.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:53 +0000] "GET /k.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:53 +0000] "GET /dex.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:55 +0000] "GET /222.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:57 +0000] "GET //av.php HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:59 +0000] "GET /av.php HTTP/1.1" 404 208945 "-" "-" 8.138.207.158 - - [26/Sep/2026:19:16:52 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.194.5.96 - - [26/Sep/2026:19:33:51 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:33:51 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:33:53 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:33:56 +0000] "GET /adminfuns.php HTTP/1.1" 404 208959 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:33:58 +0000] "GET //av.php HTTP/1.1" 301 0 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:00 +0000] "GET /av.php HTTP/1.1" 404 208945 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:02 +0000] "GET /dex.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:04 +0000] "GET /chosen.php HTTP/1.1" 403 31013 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:05 +0000] "GET /radio.php HTTP/1.1" 403 31013 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:05 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 208969 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:08 +0000] "GET /k.php?p= HTTP/1.1" 301 0 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:09 +0000] "GET /k.php HTTP/1.1" 403 31013 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:09 +0000] "GET /133.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:12 +0000] "GET /wsd.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:14 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 208957 "-" "-" 65.181.111.180 - - [26/Sep/2026:19:34:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790451259.1949300765991210937500 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.194.5.96 - - [26/Sep/2026:19:34:17 +0000] "GET /wmore1.php HTTP/1.1" 404 208953 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:19 +0000] "GET /177.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:23 +0000] "GET /ccc.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:25 +0000] "GET /0xD.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:27 +0000] "GET /sallu.php HTTP/1.1" 404 208951 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:30 +0000] "GET /ops.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:32 +0000] "GET /mac.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:35 +0000] "GET /myglu.php HTTP/1.1" 404 208951 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:38 +0000] "GET /7003b158aa4b6e.php HTTP/1.1" 404 208969 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:40 +0000] "GET /aboutt.php HTTP/1.1" 404 208953 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:43 +0000] "GET /wp-whe.php HTTP/1.1" 404 208957 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:45 +0000] "GET /ssixta.php HTTP/1.1" 404 208953 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:47 +0000] "GET /tesla.php HTTP/1.1" 404 208951 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:49 +0000] "GET /122.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:51 +0000] "GET /199.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:54 +0000] "GET ///admin.php HTTP/1.1" 301 0 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:55 +0000] "GET /admin.php HTTP/1.1" 404 208951 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:58 +0000] "GET /222.php HTTP/1.1" 404 208947 "-" "-" 65.181.111.180 - - [26/Sep/2026:22:13:36 +0000] "POST /wp-cron.php?doing_wp_cron=1790460816.0929970741271972656250 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 43.153.62.161 - - [26/Sep/2026:22:13:35 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 65.181.111.180 - - [26/Sep/2026:22:16:07 +0000] "POST /wp-cron.php?doing_wp_cron=1790460967.5742149353027343750000 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 43.172.197.42 - - [26/Sep/2026:22:16:06 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:23:09:20 +0000] "POST /wp-cron.php?doing_wp_cron=1790464160.2963759899139404296875 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 170.106.152.218 - - [26/Sep/2026:23:09:19 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.231.69.245 - - [27/Sep/2026:00:19:56 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 65.181.111.180 - - [27/Sep/2026:00:19:58 +0000] "POST /wp-cron.php?doing_wp_cron=1790468398.5315370559692382812500 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 52.231.69.245 - - [27/Sep/2026:00:19:57 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:00 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:03 +0000] "GET //aa.php HTTP/1.1" 301 0 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:05 +0000] "GET /aa.php HTTP/1.1" 404 208945 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:07 +0000] "GET /z70.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:10 +0000] "GET /f35.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:12 +0000] "GET /adminfuns.php HTTP/1.1" 404 208959 "-" "-" 65.181.111.180 - - [27/Sep/2026:00:20:18 +0000] "POST /wp-cron.php?doing_wp_cron=1790468418.7484660148620605468750 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 52.231.69.245 - - [27/Sep/2026:00:20:17 +0000] "GET //av.php HTTP/1.1" 301 0 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:18 +0000] "GET /av.php HTTP/1.1" 404 208945 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:22 +0000] "GET /dex.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:24 +0000] "GET /chosen.php HTTP/1.1" 403 31013 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:25 +0000] "GET /1.php?p= HTTP/1.1" 301 0 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:26 +0000] "GET /1.php HTTP/1.1" 403 31013 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:27 +0000] "GET /radio.php HTTP/1.1" 403 31013 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:27 +0000] "GET /blacks.php HTTP/1.1" 404 208953 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:29 +0000] "GET /alfa.php HTTP/1.1" 404 208949 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:32 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 208969 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:34 +0000] "GET /b8.php HTTP/1.1" 404 208945 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:36 +0000] "GET /xex.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:38 +0000] "GET /ass.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:40 +0000] "GET /wsd.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:43 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 208957 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:45 +0000] "GET /wmore1.php HTTP/1.1" 404 208953 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:47 +0000] "GET /z60.php?p= HTTP/1.1" 301 0 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:49 +0000] "GET /z60.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:51 +0000] "GET /pJPoKA.php HTTP/1.1" 404 208953 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:53 +0000] "GET /24.php HTTP/1.1" 404 208945 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:55 +0000] "GET /xxw.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:57 +0000] "GET /bnmtp.php HTTP/1.1" 404 208951 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:20:59 +0000] "GET /ebkid.php HTTP/1.1" 404 208951 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:01 +0000] "GET /133.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:03 +0000] "GET /x33.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:05 +0000] "GET /cae.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:07 +0000] "GET /txets.php HTTP/1.1" 403 31013 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:07 +0000] "GET /wp-update.php HTTP/1.1" 404 208963 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:10 +0000] "GET /foxv10.php HTTP/1.1" 404 208953 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:11 +0000] "GET /177.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:13 +0000] "GET /ccc.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:15 +0000] "GET /0xD.php HTTP/1.1" 404 208947 "-" "-" 65.181.111.180 - - [27/Sep/2026:00:21:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790468479.3314781188964843750000 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 52.231.69.245 - - [27/Sep/2026:00:21:17 +0000] "GET /sallu.php HTTP/1.1" 404 208951 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:20 +0000] "GET /01.php HTTP/1.1" 404 208945 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:22 +0000] "GET /ab.php HTTP/1.1" 404 208945 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:24 +0000] "GET /xwpg.php HTTP/1.1" 404 208949 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:26 +0000] "GET /flamini.php HTTP/1.1" 404 208955 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:28 +0000] "GET /themes.php HTTP/1.1" 404 208953 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:30 +0000] "GET /0.php HTTP/1.1" 403 31013 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:31 +0000] "GET /opsh.php HTTP/1.1" 404 208949 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:32 +0000] "GET /media.php HTTP/1.1" 404 208951 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:36 +0000] "GET /images.php HTTP/1.1" 404 208953 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:39 +0000] "GET /ops.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:41 +0000] "GET /mac.php HTTP/1.1" 404 208947 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:44 +0000] "GET /pass4.php?p= HTTP/1.1" 301 0 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:45 +0000] "GET /pass4.php HTTP/1.1" 404 208951 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:48 +0000] "GET /drttewyh.php HTTP/1.1" 404 208957 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:50 +0000] "GET /sh.php HTTP/1.1" 404 208945 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:52 +0000] "GET /groud1.php HTTP/1.1" 404 208953 "-" "-" 52.231.69.245 - - [27/Sep/2026:00:21:54 +0000] "GET /bro.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:30:49 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:30:49 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:30:52 +0000] "GET /f35.update.php HTTP/1.1" 403 31013 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:30:52 +0000] "GET //adminfuns.php HTTP/1.1" 301 0 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:30:53 +0000] "GET /adminfuns.php HTTP/1.1" 404 208959 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:30:56 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:30:58 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:00 +0000] "GET //av.php HTTP/1.1" 301 0 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:02 +0000] "GET /av.php HTTP/1.1" 404 208945 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:04 +0000] "GET /dex.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:06 +0000] "GET /chosen.php HTTP/1.1" 403 31013 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:06 +0000] "GET /1.php?p= HTTP/1.1" 301 0 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:07 +0000] "GET /1.php HTTP/1.1" 403 31013 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:08 +0000] "GET /radio.php HTTP/1.1" 403 31013 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:08 +0000] "GET /blacks.php HTTP/1.1" 404 208953 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:10 +0000] "GET /run.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:13 +0000] "GET /vpn.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:15 +0000] "GET /alfa.php HTTP/1.1" 404 208949 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:18 +0000] "GET /wp-content/uploads/ HTTP/1.1" 404 1251 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:18 +0000] "GET /w.php HTTP/1.1" 403 31013 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:18 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 208969 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:21 +0000] "GET /robot.php HTTP/1.1" 404 208951 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:23 +0000] "GET /sss.php?p= HTTP/1.1" 301 0 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:25 +0000] "GET /sss.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:27 +0000] "GET /or.php HTTP/1.1" 404 208945 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:31 +0000] "GET /b8.php HTTP/1.1" 404 208945 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:33 +0000] "GET /xex.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:35 +0000] "GET //CAE-2.5.php HTTP/1.1" 301 0 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:37 +0000] "GET /CAE-2.5.php HTTP/1.1" 404 208963 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:39 +0000] "GET /ass.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:41 +0000] "GET /felnggg.php HTTP/1.1" 404 208955 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:44 +0000] "GET /felnggg.update.php HTTP/1.1" 404 208973 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:46 +0000] "GET /jybkxer.php HTTP/1.1" 404 208955 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:48 +0000] "GET /edit-tags.php?p= HTTP/1.1" 301 0 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:50 +0000] "GET /edit-tags.php HTTP/1.1" 404 208963 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:52 +0000] "GET /nauik.php HTTP/1.1" 404 208951 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:54 +0000] "GET /wander.php HTTP/1.1" 404 208953 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:56 +0000] "GET /wsd.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:31:58 +0000] "GET /media.php HTTP/1.1" 404 208951 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:01 +0000] "GET /images.php HTTP/1.1" 404 208953 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:03 +0000] "GET /ops.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:06 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 208957 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:08 +0000] "GET /mac.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:10 +0000] "GET /wmore1.php HTTP/1.1" 404 208953 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:12 +0000] "GET /wp-ainefgskk.php HTTP/1.1" 404 208969 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:15 +0000] "GET /ab.php HTTP/1.1" 404 208945 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:17 +0000] "GET /dairg.php HTTP/1.1" 404 208951 "-" "-" 65.181.111.180 - - [27/Sep/2026:01:32:20 +0000] "POST /wp-cron.php?doing_wp_cron=1790472740.6540410518646240234375 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 104.208.65.139 - - [27/Sep/2026:01:32:19 +0000] "GET /z60.php?p= HTTP/1.1" 301 0 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:20 +0000] "GET /z60.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:23 +0000] "GET /imageskir.php HTTP/1.1" 404 208959 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:29 +0000] "GET /backup-helper.php HTTP/1.1" 404 208971 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:31 +0000] "GET /1xmomo.php HTTP/1.1" 404 208953 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:34 +0000] "GET /almafkew.php HTTP/1.1" 404 208957 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:37 +0000] "GET //database2.php HTTP/1.1" 301 0 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:38 +0000] "GET /database2.php HTTP/1.1" 404 208959 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:40 +0000] "GET /aa.php HTTP/1.1" 404 208945 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:43 +0000] "GET //pJPoKA.php HTTP/1.1" 301 0 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:44 +0000] "GET /pJPoKA.php HTTP/1.1" 404 208953 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:46 +0000] "GET /24.php HTTP/1.1" 404 208945 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:48 +0000] "GET /42b5827789index.php HTTP/1.1" 404 208971 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:50 +0000] "GET /mmq.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:52 +0000] "GET /fryvbbn.php HTTP/1.1" 404 208955 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:55 +0000] "GET /ff.update.php HTTP/1.1" 404 208963 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:57 +0000] "GET /lzlhihzi.php HTTP/1.1" 404 208957 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:32:59 +0000] "GET /bfdghfgv.php HTTP/1.1" 404 208957 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:33:01 +0000] "GET /Dss.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:33:04 +0000] "GET /uploaxa1.php HTTP/1.1" 404 208957 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:33:06 +0000] "GET /uploartg.php HTTP/1.1" 404 208957 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:33:08 +0000] "GET /bgbagbcw.php HTTP/1.1" 404 208957 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:33:10 +0000] "GET /tegubsiu.php HTTP/1.1" 404 208957 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:33:12 +0000] "GET /xxw.php HTTP/1.1" 404 208947 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:33:14 +0000] "GET /router.php HTTP/1.1" 404 208953 "-" "-" 65.181.111.180 - - [27/Sep/2026:01:33:18 +0000] "POST /wp-cron.php?doing_wp_cron=1790472798.5161409378051757812500 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 104.208.65.139 - - [27/Sep/2026:01:33:17 +0000] "GET /cibrkysaeng.php HTTP/1.1" 404 208963 "-" "-" 104.208.65.139 - - [27/Sep/2026:01:33:19 +0000] "GET /wp-wpbak.php HTTP/1.1" 404 208961 "-" "-" 65.181.111.180 - - [27/Sep/2026:02:07:41 +0000] "POST /New/wp-cron.php?doing_wp_cron=1790474861.3323459625244140625000 HTTP/1.1" 200 0 "-" "WordPress/7.0.2; http://ncro.ngo/New" 65.181.111.180 - - [27/Sep/2026:02:07:47 +0000] "POST /new/wp-cron.php?doing_wp_cron=1790474867.6186769008636474609375 HTTP/1.1" 200 0 "-" "WordPress/7.0.2; http://ncro.ngo/new" 65.181.111.180 - - [27/Sep/2026:03:03:25 +0000] "POST /wp-cron.php?doing_wp_cron=1790478205.9340589046478271484375 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 43.131.45.213 - - [27/Sep/2026:03:03:24 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.70.1.101 - - [27/Sep/2026:03:09:31 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 65.181.111.180 - - [27/Sep/2026:03:09:33 +0000] "POST /wp-cron.php?doing_wp_cron=1790478573.5098819732666015625000 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 13.70.1.101 - - [27/Sep/2026:03:09:32 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 123.207.65.62 - - [27/Sep/2026:03:09:33 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.70.1.101 - - [27/Sep/2026:03:09:34 +0000] "GET /adminfuns.php HTTP/1.1" 404 208959 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:36 +0000] "GET /goods.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:39 +0000] "GET /100.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:41 +0000] "GET /about.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:41 +0000] "GET /themes.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:43 +0000] "GET /biufile.php HTTP/1.1" 404 208955 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:45 +0000] "GET /coffexium.php HTTP/1.1" 404 208959 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:47 +0000] "GET /coffee.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:49 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:51 +0000] "GET /classwithtostring.php HTTP/1.1" 404 208975 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:53 +0000] "GET /wp-ws68.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:55 +0000] "GET /wp-ws68.php HTTP/1.1" 404 208959 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:57 +0000] "GET /mgrr.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:09:59 +0000] "GET /ws13.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:01 +0000] "GET /ws13.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:03 +0000] "GET /btx25.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:06 +0000] "GET /SDsadqwrf.php HTTP/1.1" 404 208959 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:08 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 208957 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:10 +0000] "GET /file5.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:13 +0000] "GET /xyn.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:15 +0000] "GET /inso.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:17 +0000] "GET /puc.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:20 +0000] "GET /b8.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:22 +0000] "GET /133.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:24 +0000] "GET /blurbs.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:26 +0000] "GET /ano.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:28 +0000] "GET /sf.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:31 +0000] "GET /xx.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:33 +0000] "GET /signon.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:34 +0000] "GET /signon.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:36 +0000] "GET /file61.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:38 +0000] "GET /nano.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:40 +0000] "GET /.mopj.php HTTP/1.1" 404 208955 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:43 +0000] "GET /file2.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:45 +0000] "GET /ws55.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:47 +0000] "GET /m.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:48 +0000] "GET /m.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:49 +0000] "GET /33.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:51 +0000] "GET /wp-content/uploads/ HTTP/1.1" 404 1251 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:51 +0000] "GET /w.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:51 +0000] "GET /ccc.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:53 +0000] "GET /file15.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:56 +0000] "GET /f35.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:10:58 +0000] "GET /shiny.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:00 +0000] "GET /images.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:02 +0000] "GET /82.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:04 +0000] "GET /files.php/new.php HTTP/1.1" 404 208975 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:06 +0000] "GET /mghnhykio.php/new.php HTTP/1.1" 404 208983 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:08 +0000] "GET /admin.php/nope.php HTTP/1.1" 404 208977 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:10 +0000] "GET /lib.php/new.php HTTP/1.1" 404 208971 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:13 +0000] "GET /info.php/new.php HTTP/1.1" 404 208973 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:15 +0000] "GET /db.php/new.php HTTP/1.1" 404 208969 "-" "-" 65.181.111.180 - - [27/Sep/2026:03:11:18 +0000] "POST /wp-cron.php?doing_wp_cron=1790478678.3970758914947509765625 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 13.70.1.101 - - [27/Sep/2026:03:11:17 +0000] "GET /222.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:19 +0000] "GET /ops.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:21 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:23 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:25 +0000] "GET /opsh.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:27 +0000] "GET /gigi.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:30 +0000] "GET /ab.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:32 +0000] "GET /indo.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:34 +0000] "GET /sallu.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:36 +0000] "GET /radio.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:37 +0000] "GET /mac.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:39 +0000] "GET /simple.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:41 +0000] "GET /k.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:42 +0000] "GET /k.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:43 +0000] "GET /dex.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:45 +0000] "GET /222.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:47 +0000] "GET //av.php HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [27/Sep/2026:03:11:49 +0000] "GET /av.php HTTP/1.1" 404 208945 "-" "-" 187.15.162.203 - - [27/Sep/2026:03:20:15 +0000] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" 187.15.162.203 - - [27/Sep/2026:03:20:16 +0000] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" 20.213.164.196 - - [27/Sep/2026:03:43:29 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 65.181.111.180 - - [27/Sep/2026:03:43:31 +0000] "POST /wp-cron.php?doing_wp_cron=1790480611.7129070758819580078125 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.213.164.196 - - [27/Sep/2026:03:43:30 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:32 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:34 +0000] "GET /adminfuns.php HTTP/1.1" 404 208959 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:37 +0000] "GET //av.php HTTP/1.1" 301 0 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:38 +0000] "GET /av.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:40 +0000] "GET /dex.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:42 +0000] "GET /chosen.php HTTP/1.1" 403 31013 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:43 +0000] "GET /radio.php HTTP/1.1" 403 31013 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:43 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 208969 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:45 +0000] "GET /k.php?p= HTTP/1.1" 301 0 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:47 +0000] "GET /k.php HTTP/1.1" 403 31013 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:48 +0000] "GET /133.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:50 +0000] "GET /wsd.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:52 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 208957 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:55 +0000] "GET /wmore1.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:57 +0000] "GET /177.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:43:59 +0000] "GET /ccc.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:01 +0000] "GET /0xD.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:03 +0000] "GET /sallu.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:06 +0000] "GET /ops.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:08 +0000] "GET /mac.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:10 +0000] "GET /myglu.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:12 +0000] "GET /7003b158aa4b6e.php HTTP/1.1" 404 208969 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:14 +0000] "GET /aboutt.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:16 +0000] "GET /wp-whe.php HTTP/1.1" 404 208957 "-" "-" 65.181.111.180 - - [27/Sep/2026:03:44:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790480659.9493160247802734375000 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.213.164.196 - - [27/Sep/2026:03:44:18 +0000] "GET /ssixta.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:20 +0000] "GET /tesla.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:23 +0000] "GET /122.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:25 +0000] "GET /199.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:27 +0000] "GET ///admin.php HTTP/1.1" 301 0 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:29 +0000] "GET /admin.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:31 +0000] "GET /222.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [27/Sep/2026:03:44:33 +0000] "GET /media.php HTTP/1.1" 404 208951 "-" "-" 43.159.136.201 - - [27/Sep/2026:04:07:46 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 65.181.111.180 - - [27/Sep/2026:04:32:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790483539.1965730190277099609375 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 43.172.196.172 - - [27/Sep/2026:04:32:18 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 144.172.99.14 - - [27/Sep/2026:05:00:03 +0000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; Linux x86_64)" 144.172.99.14 - - [27/Sep/2026:05:33:21 +0000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; Linux x86_64)" 65.181.111.180 - - [27/Sep/2026:05:46:02 +0000] "GET /.well-known/acme-challenge/NVLMMSUXCVS-2Q2K56XP6KUC19TFPIDB HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:05:46:11 +0000] "GET /.well-known/acme-challenge/K281RV0J72SA4ZCH2A5X8Q60NLQD0_OE HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:05:46:15 +0000] "GET /.well-known/acme-challenge/RWS5L8Q0R9WZA8M2JU84625MOTDYTTAZ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:05:46:20 +0000] "GET /.well-known/acme-challenge/F8UK1JZ3X8G3ULYND-H6PLFPG92YLO2K HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:05:46:24 +0000] "GET /.well-known/acme-challenge/HJ0VYL5LJOU00LPOSO95C01R05LEOQL3 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:05:46:24 +0000] "GET /.well-known/acme-challenge/XHTAOENNKA_WC1KPWO7C7JGZBQZQRNZZ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:05:46:37 +0000] "GET /.well-known/acme-challenge/5C7C570TSILNHR94O05VETSGQ88YXZY6 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:05:46:37 +0000] "GET /.well-known/acme-challenge/7YWOYX9LAA6YUC3L_R8_QLPG0FTLF_6B HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:05:46:40 +0000] "GET /.well-known/acme-challenge/K5QJ_XEGJJI666WSX80Q2TPDVF20TQR2 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:05:46:43 +0000] "GET /.well-known/acme-challenge/9D_XVW5TE693QH5534-9O7JL1WQ3SZT- HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 20.219.14.152 - - [27/Sep/2026:06:27:32 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 65.181.111.180 - - [27/Sep/2026:06:27:34 +0000] "POST /wp-cron.php?doing_wp_cron=1790490454.4944500923156738281250 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.219.14.152 - - [27/Sep/2026:06:27:33 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:35 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:37 +0000] "GET //aa.php HTTP/1.1" 301 0 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:39 +0000] "GET /aa.php HTTP/1.1" 404 208945 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:41 +0000] "GET /z70.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:43 +0000] "GET /f35.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:46 +0000] "GET /adminfuns.php HTTP/1.1" 404 208959 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:49 +0000] "GET //av.php HTTP/1.1" 301 0 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:50 +0000] "GET /av.php HTTP/1.1" 404 208945 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:52 +0000] "GET /dex.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:54 +0000] "GET /chosen.php HTTP/1.1" 403 31013 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:55 +0000] "GET /1.php?p= HTTP/1.1" 301 0 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:56 +0000] "GET /1.php HTTP/1.1" 403 31013 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:56 +0000] "GET /radio.php HTTP/1.1" 403 31013 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:56 +0000] "GET /blacks.php HTTP/1.1" 404 208953 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:27:59 +0000] "GET /alfa.php HTTP/1.1" 404 208949 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:01 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 208969 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:03 +0000] "GET /b8.php HTTP/1.1" 404 208945 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:06 +0000] "GET /xex.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:08 +0000] "GET /ass.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:10 +0000] "GET /wsd.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:12 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 208957 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:15 +0000] "GET /wmore1.php HTTP/1.1" 404 208953 "-" "-" 65.181.111.180 - - [27/Sep/2026:06:28:18 +0000] "POST /wp-cron.php?doing_wp_cron=1790490498.5808498859405517578125 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.219.14.152 - - [27/Sep/2026:06:28:17 +0000] "GET /z60.php?p= HTTP/1.1" 301 0 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:18 +0000] "GET /z60.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:21 +0000] "GET /pJPoKA.php HTTP/1.1" 404 208953 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:23 +0000] "GET /24.php HTTP/1.1" 404 208945 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:25 +0000] "GET /xxw.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:28 +0000] "GET /bnmtp.php HTTP/1.1" 404 208951 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:30 +0000] "GET /ebkid.php HTTP/1.1" 404 208951 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:32 +0000] "GET /133.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:35 +0000] "GET /x33.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:37 +0000] "GET /cae.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:39 +0000] "GET /txets.php HTTP/1.1" 403 31013 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:39 +0000] "GET /wp-update.php HTTP/1.1" 404 208963 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:42 +0000] "GET /foxv10.php HTTP/1.1" 404 208953 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:44 +0000] "GET /177.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:46 +0000] "GET /ccc.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:49 +0000] "GET /0xD.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:51 +0000] "GET /sallu.php HTTP/1.1" 404 208951 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:53 +0000] "GET /01.php HTTP/1.1" 404 208945 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:55 +0000] "GET /ab.php HTTP/1.1" 404 208945 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:28:58 +0000] "GET /xwpg.php HTTP/1.1" 404 208949 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:00 +0000] "GET /flamini.php HTTP/1.1" 404 208955 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:02 +0000] "GET /themes.php HTTP/1.1" 404 208953 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:05 +0000] "GET /0.php HTTP/1.1" 403 31013 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:05 +0000] "GET /opsh.php HTTP/1.1" 404 208949 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:08 +0000] "GET /media.php HTTP/1.1" 404 208951 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:10 +0000] "GET /images.php HTTP/1.1" 404 208953 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:13 +0000] "GET /ops.php HTTP/1.1" 404 208947 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:15 +0000] "GET /mac.php HTTP/1.1" 404 208947 "-" "-" 65.181.111.180 - - [27/Sep/2026:06:29:18 +0000] "POST /wp-cron.php?doing_wp_cron=1790490558.8736519813537597656250 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.219.14.152 - - [27/Sep/2026:06:29:17 +0000] "GET /pass4.php?p= HTTP/1.1" 301 0 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:19 +0000] "GET /pass4.php HTTP/1.1" 404 208951 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:21 +0000] "GET /drttewyh.php HTTP/1.1" 404 208957 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:23 +0000] "GET /sh.php HTTP/1.1" 404 208945 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:25 +0000] "GET /groud1.php HTTP/1.1" 404 208953 "-" "-" 20.219.14.152 - - [27/Sep/2026:06:29:28 +0000] "GET /bro.php HTTP/1.1" 404 208947 "-" "-" 65.181.111.180 - - [27/Sep/2026:06:44:27 +0000] "POST /new/wp-cron.php?doing_wp_cron=1790491467.3230869770050048828125 HTTP/1.1" 200 0 "-" "WordPress/7.0.2; http://ncro.ngo/new" 65.181.111.180 - - [27/Sep/2026:06:44:32 +0000] "POST /new/wp-cron.php?doing_wp_cron=1790491472.2017920017242431640625 HTTP/1.1" 200 0 "-" "WordPress/7.0.2; http://ncro.ngo/new" 65.181.111.180 - - [27/Sep/2026:06:44:33 +0000] "HEAD /new HTTP/1.1" 301 0 "-" "-" 65.181.111.180 - - [27/Sep/2026:06:44:33 +0000] "HEAD /new/ HTTP/1.1" 200 0 "-" "-" 65.181.111.180 - - [27/Sep/2026:07:10:29 +0000] "POST /wp-cron.php?doing_wp_cron=1790493029.1636040210723876953125 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 94.228.214.38 - - [27/Sep/2026:07:10:27 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:45.0) Gecko/20100101 Firefox/45.0" 65.181.111.180 - - [27/Sep/2026:07:13:51 +0000] "POST /New/wp-cron.php?doing_wp_cron=1790493231.0104548931121826171875 HTTP/1.1" 200 0 "-" "WordPress/7.0.2; http://ncro.ngo/New" 65.181.111.180 - - [27/Sep/2026:07:13:57 +0000] "HEAD /New HTTP/1.1" 301 0 "-" "-" 65.181.111.180 - - [27/Sep/2026:07:13:57 +0000] "HEAD /New/ HTTP/1.1" 200 0 "-" "-" 65.181.111.180 - - [27/Sep/2026:07:17:51 +0000] "POST /New/wp-cron.php?doing_wp_cron=1790493471.8965289592742919921875 HTTP/1.1" 200 0 "-" "WordPress/7.0.2; http://ncro.ngo/New" 65.181.111.180 - - [27/Sep/2026:08:18:35 +0000] "POST /wp-cron.php?doing_wp_cron=1790497115.8051691055297851562500 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 159.203.4.220 - - [27/Sep/2026:08:18:34 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 159.203.4.220 - - [27/Sep/2026:08:18:35 +0000] "GET /favicon.ico HTTP/1.1" 404 1251 "http://ncro.ngo/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 43.135.36.201 - - [27/Sep/2026:08:18:46 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 65.181.111.180 - - [27/Sep/2026:08:39:04 +0000] "GET /.well-known/acme-challenge/7M12BJL2ZZP006MW1IMWT5AZA6RG4KDT HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:08:39:10 +0000] "GET /.well-known/acme-challenge/QCB5-LONCEIWA80NVT2_4ZM6HN6DQKHY HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:08:39:12 +0000] "GET /.well-known/acme-challenge/OBS0MQK4SAXDU_MJ4Y93K-032RUDUFJZ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:08:39:17 +0000] "GET /.well-known/acme-challenge/7XT3QDNU9QP0PIX_9SVQG_1ZMUMIVYF4 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:08:39:21 +0000] "GET /.well-known/acme-challenge/GDR32RCL-ID3_JCI2XQK2FLFAQVS5C0M HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:08:39:21 +0000] "GET /.well-known/acme-challenge/D4-JQAX-QD74NPLQLKQYQ-S4_3_LKD5I HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:08:39:34 +0000] "GET /.well-known/acme-challenge/SHGU6AIZWNNK93YLU_G5V9_DWBPM3WWJ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:08:39:34 +0000] "GET /.well-known/acme-challenge/TB4GY8FA5N_HLPKHK3X1BA9Y2FRU8BAA HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:08:39:36 +0000] "GET /.well-known/acme-challenge/HV0Q59U-E49_NMOJ6DSL6LCWLFPY303I HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 65.181.111.180 - - [27/Sep/2026:08:39:39 +0000] "GET /.well-known/acme-challenge/US1AFLCZNWA3OWCZZUCVPDPTOMP-SK7M HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 43.161.217.205 - - [27/Sep/2026:09:18:40 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"