JezK

Edit File: ofsda.ngo.afghandevelopers.net

62.60.130.249 - - [26/Sep/2026:12:07:35 +0000] "GET /wp-admin/css/ HTTP/1.1" 404 1251 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 62.60.130.249 - - [26/Sep/2026:12:07:42 +0000] "GET /.well-known/ HTTP/1.1" 404 1251 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:12:07:47 +0000] "POST /wp-cron.php?doing_wp_cron=1790424467.2876150608062744140625 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 62.60.130.249 - - [26/Sep/2026:12:07:46 +0000] "GET /sites/default/files/ HTTP/1.1" 404 33922 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:12:07:53 +0000] "POST /wp-cron.php?doing_wp_cron=1790424473.7326309680938720703125 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 62.60.130.249 - - [26/Sep/2026:12:07:52 +0000] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 33922 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 62.60.130.249 - - [26/Sep/2026:12:07:59 +0000] "GET /uploads/ HTTP/1.1" 404 33922 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 62.60.130.249 - - [26/Sep/2026:12:08:05 +0000] "GET /images/ HTTP/1.1" 404 33922 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 62.60.130.249 - - [26/Sep/2026:12:08:12 +0000] "GET /files/ HTTP/1.1" 404 33922 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:12:43:36 +0000] "POST /wp-cron.php?doing_wp_cron=1790426616.5507380962371826171875 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 34.187.73.109 - - [26/Sep/2026:12:43:35 +0000] "GET /style.php HTTP/1.1" 404 33922 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:36 +0000] "GET /wp-content/style.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:36 +0000] "GET /wp-admin/style.php HTTP/1.1" 302 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:39 +0000] "GET /wp-includes/style.php HTTP/1.1" 404 1251 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:39 +0000] "GET /wp-content/themes/style.php HTTP/1.1" 403 10745 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:39 +0000] "GET /wp-content/about.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:39 +0000] "GET /wp-admin/css/admin.php HTTP/1.1" 302 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:41 +0000] "GET //wp-admin/css/about.php HTTP/1.1" 302 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:43 +0000] "GET /wp-content/wp-setting.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:43 +0000] "GET /wp-includes/hp2.php HTTP/1.1" 404 1251 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:43 +0000] "GET /bless.php HTTP/1.1" 403 10745 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:44 +0000] "GET /wp-content/goods.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:44 +0000] "GET /blurbs.php HTTP/1.1" 404 33922 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:45 +0000] "GET /wp-admin/css/goods.php HTTP/1.1" 302 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:47 +0000] "GET /abcd.php HTTP/1.1" 404 33922 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:48 +0000] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 302 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:50 +0000] "GET /dex.php HTTP/1.1" 404 33922 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:51 +0000] "GET /wp-admin/admin-ajax.php HTTP/1.1" 400 21 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:51 +0000] "GET /wp-admin/css/index.php HTTP/1.1" 302 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:53 +0000] "GET /wp-admin/index.php HTTP/1.1" 302 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:55 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:56 +0000] "GET /wp-content/index.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:56 +0000] "GET /wp-content/plugins/fix/000.php HTTP/1.1" 403 10745 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:56 +0000] "GET /file.php HTTP/1.1" 404 33922 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:57 +0000] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 403 10745 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:57 +0000] "GET /wp-mail.php HTTP/1.1" 403 1129 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:57 +0000] "GET /ioxi-o.php HTTP/1.1" 404 33922 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:58 +0000] "GET /wp-content/ioxi-o.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:43:59 +0000] "GET /wp-editor.php HTTP/1.1" 404 33922 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:44:00 +0000] "GET /lufix.php HTTP/1.1" 404 33922 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:44:01 +0000] "GET /txets.php HTTP/1.1" 403 10745 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:44:01 +0000] "GET /wp-content/themes/txets.php HTTP/1.1" 403 10745 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:44:01 +0000] "GET /wp-admin/txets.php HTTP/1.1" 403 10745 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:44:01 +0000] "GET /wp-includes/txets.php HTTP/1.1" 404 1251 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:44:01 +0000] "GET /goods.php HTTP/1.1" 404 33922 "-" "Go-http-client/1.1" 34.187.73.109 - - [26/Sep/2026:12:44:02 +0000] "GET /php8.php HTTP/1.1" 404 33922 "-" "Go-http-client/1.1" 65.181.111.180 - - [26/Sep/2026:12:52:30 +0000] "POST /wp-cron.php?doing_wp_cron=1790427150.4824690818786621093750 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 43.153.135.208 - - [26/Sep/2026:12:52:29 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 65.181.111.180 - - [26/Sep/2026:13:17:31 +0000] "POST /wp-cron.php?doing_wp_cron=1790428651.6989989280700683593750 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 34.169.95.24 - - [26/Sep/2026:13:17:31 +0000] "GET / HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 34.169.95.24 - - [26/Sep/2026:13:17:34 +0000] "GET /wp-includes/css/buttons.css HTTP/1.1" 200 2489 "-" "Go-http-client/1.1" 65.181.111.180 - - [26/Sep/2026:13:26:33 +0000] "POST /wp-cron.php?doing_wp_cron=1790429193.1499741077423095703125 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 65.181.111.180 - - [26/Sep/2026:13:26:33 +0000] "POST /wp-cron.php?doing_wp_cron=1790429193.2334389686584472656250 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 198.235.24.47 - - [26/Sep/2026:13:26:32 +0000] "GET / HTTP/1.1" 301 0 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 65.181.111.180 - - [26/Sep/2026:13:44:36 +0000] "POST /wp-cron.php?doing_wp_cron=1790430276.5092411041259765625000 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 43.164.190.124 - - [26/Sep/2026:13:44:35 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 136.69.234.3 - - [26/Sep/2026:13:48:36 +0000] "GET /media/system/js/core.js HTTP/1.1" 404 33922 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:14:12:08 +0000] "POST /wp-cron.php?doing_wp_cron=1790431928.1362540721893310546875 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 136.69.234.3 - - [26/Sep/2026:14:12:07 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:37:17 +0000] "GET /.aws/credentials%EF%BF%BD HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:14:37:17 +0000] "GET /.aws/config%EF%BF%BD HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:37:18 +0000] "GET /.aws/credentials\\xef\\xbf\\xbd HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:37:18 +0000] "GET /.aws/config\\xef\\xbf\\xbd HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:37:39 +0000] "GET /.aws/credentials%EF%BF%BD%0C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:37:39 +0000] "GET /.aws/config%EF%BF%BD%0C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:37:39 +0000] "GET /.aws/credentials%EF%BF%BD%1F HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:37:39 +0000] "GET /.aws/config%EF%BF%BD%1F HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:14:38:00 +0000] "GET /.aws/credentials%EF%BF%BD%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:38:00 +0000] "GET /.aws/config%EF%BF%BD%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 192.253.248.163 - - [26/Sep/2026:14:38:16 +0000] "GET /.aws/config; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 65.181.111.180 - - [26/Sep/2026:14:38:16 +0000] "POST /wp-cron.php?doing_wp_cron=1790433496.9747529029846191406250 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 192.253.248.163 - - [26/Sep/2026:14:38:16 +0000] "GET /.azure/credentials%EF%BF%BD HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:38:17 +0000] "GET /.aws/config;%A0 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:38:17 +0000] "GET /.aws/config;%85 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:38:17 +0000] "GET /.azure/credentials%EF%BF%BD%A0 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:38:18 +0000] "GET /.aws/config;%09 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:38:18 +0000] "GET /.aws/config;%0C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:38:18 +0000] "GET /.aws/config;%1F HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:14:38:18 +0000] "GET /.azure/credentials%EF%BF%BD%85 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:38:19 +0000] "GET /.aws/config;%1E HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:38:24 +0000] "GET /.aws/config;%1D HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:38:24 +0000] "GET /.aws/config;%1C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:38:24 +0000] "GET /.aws/config;%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:38:24 +0000] "GET /.azure/credentials%EF%BF%BD%09 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:14:38:24 +0000] "GET /.aws/config;; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:38:24 +0000] "GET /.azure/credentials%EF%BF%BD%0C HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:38:25 +0000] "GET /.azure/credentials%EF%BF%BD%1F HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:38:25 +0000] "GET /.azure/credentials%EF%BF%BD%1E HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:38:26 +0000] "GET /.azure/credentials%EF%BF%BD%1D HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:38:27 +0000] "GET /.azure/credentials%EF%BF%BD%1C HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:38:27 +0000] "GET /.azure/credentials%EF%BF%BD%0B HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:14:38:28 +0000] "GET /.azure/credentials%EF%BF%BD; HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 195.179.231.91 - - [26/Sep/2026:15:03:25 +0000] "GET /wp-content/uploads/2023/02/about-icon-1.png HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 66.249.73.233 - - [26/Sep/2026:15:03:44 +0000] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Googlebot-Image/1.0"