JezK

Edit File: ofsda.ngo.afghandevelopers.net-ssl_log

134.209.81.213 - - [26/Sep/2026:12:17:09 +0000] "GET / HTTP/2" 200 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 ForestEngine/1.0 (+https://forestengine.net/#opt-out)" 65.181.111.180 - - [26/Sep/2026:12:20:46 +0000] "POST /wp-cron.php?doing_wp_cron=1790425246.0728089809417724609375 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 65.181.111.180 - - [26/Sep/2026:12:20:46 +0000] "POST /wp-cron.php?doing_wp_cron=1790425246.6548800468444824218750 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 54.39.203.205 - - [26/Sep/2026:12:20:45 +0000] "GET / HTTP/2" 200 37001 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 54.39.210.116 - - [26/Sep/2026:12:24:52 +0000] "GET /wp-content/uploads/elementor/css/post-27279.css?ver=1778141928 HTTP/2" 200 1463 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 205.210.31.9 - - [26/Sep/2026:12:39:08 +0000] "GET / HTTP/1.1" 200 844 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 57.141.20.73 - - [26/Sep/2026:12:42:13 +0000] "GET /portfolios/access-to-justice-and-good-governance/ HTTP/2" 429 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 34.187.73.109 - - [26/Sep/2026:12:43:37 +0000] "GET /wp-admin/style.php HTTP/2" 302 0 "http://ofsda.ngo/wp-admin/style.php" "Go-http-client/2.0" 34.187.73.109 - - [26/Sep/2026:12:43:38 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fofsda.ngo%2Fwp-admin%2Fstyle.php&reauth=1 HTTP/2" 200 2371 "https://ofsda.ngo/wp-admin/style.php" "Go-http-client/2.0" 34.187.73.109 - - [26/Sep/2026:12:43:40 +0000] "GET /wp-admin/css/admin.php HTTP/2" 302 0 "http://ofsda.ngo/wp-admin/css/admin.php" "Go-http-client/2.0" 34.187.73.109 - - [26/Sep/2026:12:43:40 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fofsda.ngo%2Fwp-admin%2Fcss%2Fadmin.php&reauth=1 HTTP/2" 200 2368 "https://ofsda.ngo/wp-admin/css/admin.php" "Go-http-client/2.0" 34.187.73.109 - - [26/Sep/2026:12:43:42 +0000] "GET //wp-admin/css/about.php HTTP/2" 302 0 "http://ofsda.ngo//wp-admin/css/about.php" "Go-http-client/2.0" 34.187.73.109 - - [26/Sep/2026:12:43:42 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fofsda.ngo%2F%2Fwp-admin%2Fcss%2Fabout.php&reauth=1 HTTP/2" 200 2373 "https://ofsda.ngo//wp-admin/css/about.php" "Go-http-client/2.0" 34.187.73.109 - - [26/Sep/2026:12:43:45 +0000] "GET /wp-admin/css/goods.php HTTP/2" 302 0 "http://ofsda.ngo/wp-admin/css/goods.php" "Go-http-client/2.0" 34.187.73.109 - - [26/Sep/2026:12:43:46 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fofsda.ngo%2Fwp-admin%2Fcss%2Fgoods.php&reauth=1 HTTP/2" 200 2373 "https://ofsda.ngo/wp-admin/css/goods.php" "Go-http-client/2.0" 34.187.73.109 - - [26/Sep/2026:12:43:48 +0000] "GET /wp-admin/css/colors/wp-login.php HTTP/2" 302 0 "http://ofsda.ngo/wp-admin/css/colors/wp-login.php" "Go-http-client/2.0" 34.187.73.109 - - [26/Sep/2026:12:43:49 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fofsda.ngo%2Fwp-admin%2Fcss%2Fcolors%2Fwp-login.php&reauth=1 HTTP/2" 200 2375 "https://ofsda.ngo/wp-admin/css/colors/wp-login.php" "Go-http-client/2.0" 34.187.73.109 - - [26/Sep/2026:12:43:52 +0000] "GET /wp-admin/css/index.php HTTP/2" 302 0 "http://ofsda.ngo/wp-admin/css/index.php" "Go-http-client/2.0" 65.181.111.180 - - [26/Sep/2026:12:43:53 +0000] "POST /wp-cron.php?doing_wp_cron=1790426633.6490340232849121093750 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 34.187.73.109 - - [26/Sep/2026:12:43:53 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fofsda.ngo%2Fwp-admin%2Fcss%2Findex.php&reauth=1 HTTP/2" 200 2371 "https://ofsda.ngo/wp-admin/css/index.php" "Go-http-client/2.0" 34.187.73.109 - - [26/Sep/2026:12:43:54 +0000] "GET /wp-admin/index.php HTTP/2" 302 0 "http://ofsda.ngo/wp-admin/index.php" "Go-http-client/2.0" 34.187.73.109 - - [26/Sep/2026:12:43:55 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fofsda.ngo%2Fwp-admin%2Findex.php&reauth=1 HTTP/2" 200 2371 "https://ofsda.ngo/wp-admin/index.php" "Go-http-client/2.0" 65.181.111.180 - - [26/Sep/2026:12:46:16 +0000] "POST /wp-cron.php?doing_wp_cron=1790426776.0184381008148193359375 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 16.216.88.216 - - [26/Sep/2026:12:46:15 +0000] "GET /robots.txt HTTP/2" 200 90 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" 16.216.88.216 - - [26/Sep/2026:12:46:16 +0000] "GET / HTTP/2" 200 37001 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" 159.223.224.252 - - [26/Sep/2026:12:47:55 +0000] "GET / HTTP/2" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 ForestEngine/1.0 (+https://forestengine.net/#opt-out)" 43.153.135.208 - - [26/Sep/2026:12:52:31 +0000] "GET / HTTP/1.1" 200 43618 "http://ofsda.ngo" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.37.23.16 - - [26/Sep/2026:13:02:46 +0000] "GET /wp-content/uploads/2024/06/WhatsApp-Image-2026-03-30-at-12.05.07-PM-1-1024x1007.jpeg HTTP/1.1" 200 108936 "-" "python-urllib3/1.26.9" 65.181.111.180 - - [26/Sep/2026:13:05:01 +0000] "POST /wp-cron.php?doing_wp_cron=1790427901.2595109939575195312500 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 124.29.216.44 - - [26/Sep/2026:13:05:00 +0000] "GET /board-of-directors/ HTTP/1.1" 200 37171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.53 Safari/537.36" 57.141.20.26 - - [26/Sep/2026:13:06:57 +0000] "GET /teams/muneera-aman/ HTTP/2" 429 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 74.7.241.60 - - [26/Sep/2026:13:14:47 +0000] "GET / HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.175.173 - - [26/Sep/2026:13:14:47 +0000] "GET /robots.txt HTTP/2" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 34.169.95.24 - - [26/Sep/2026:13:17:32 +0000] "GET / HTTP/2" 200 43617 "http://ofsda.ngo/" "Go-http-client/2.0" 198.235.24.47 - - [26/Sep/2026:13:26:34 +0000] "GET / HTTP/1.1" 200 213477 "http://www.ofsda.ngo/" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 54.37.23.179 - - [26/Sep/2026:13:28:46 +0000] "GET /wp-content/uploads/2024/06/WhatsApp-Image-2026-03-30-at-12.05.07-PM-1-1024x1007.jpeg HTTP/1.1" 200 108936 "-" "python-urllib3/1.26.9" 54.37.23.137 - - [26/Sep/2026:13:34:16 +0000] "GET /wp-content/uploads/2024/06/WhatsApp-Image-2026-03-30-at-12.05.07-PM-1-1024x1007.jpeg HTTP/1.1" 200 108936 "-" "python-urllib3/1.26.9" 65.181.111.180 - - [26/Sep/2026:13:34:59 +0000] "POST /wp-cron.php?doing_wp_cron=1790429699.6672759056091308593750 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 103.149.1.103 - - [26/Sep/2026:13:34:59 +0000] "GET /index.php/sample-page/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.45 Safari/537.36" 103.149.1.103 - - [26/Sep/2026:13:35:00 +0000] "GET /sample-page/ HTTP/1.1" 404 33907 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.45 Safari/537.36" 43.164.190.124 - - [26/Sep/2026:13:44:37 +0000] "GET / HTTP/1.1" 200 43618 "http://www.ofsda.ngo" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 57.141.20.17 - - [26/Sep/2026:13:46:30 +0000] "GET /peacebuilding-infarstcutec-development/ HTTP/2" 429 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 65.181.111.180 - - [26/Sep/2026:13:48:15 +0000] "POST /wp-cron.php?doing_wp_cron=1790430495.8810820579528808593750 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 74.7.243.213 - - [26/Sep/2026:13:48:15 +0000] "GET /wp-sitemap.xml HTTP/2" 200 233 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.241.190 - - [26/Sep/2026:13:48:15 +0000] "GET /robots.txt HTTP/2" 200 90 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 65.181.111.180 - - [26/Sep/2026:13:51:11 +0000] "POST /wp-cron.php?doing_wp_cron=1790430671.7858459949493408203125 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 195.62.95.212 - - [26/Sep/2026:13:51:11 +0000] "POST /wp-login.php HTTP/1.1" 200 2514 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 68.183.12.172 - - [26/Sep/2026:13:56:53 +0000] "GET / HTTP/2" 200 12491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 ForestEngine/1.0 (+https://forestengine.net/#opt-out)" 65.181.111.180 - - [26/Sep/2026:13:56:53 +0000] "POST /wp-cron.php?doing_wp_cron=1790431013.7018849849700927734375 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 80.85.246.140 - - [26/Sep/2026:13:56:52 +0000] "GET / HTTP/2" 200 37001 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 40.77.167.27 - - [26/Sep/2026:14:06:23 +0000] "GET /wp-content/uploads/elementor/css/post-31820.css?ver=1777397990 HTTP/2" 200 343 "https://ofsda.ngo/careers" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:14:11:23 +0000] "POST /wp-cron.php?doing_wp_cron=1790431883.1922841072082519531250 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 167.99.221.36 - - [26/Sep/2026:14:11:22 +0000] "GET / HTTP/2" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 ForestEngine/1.0 (+https://forestengine.net/#opt-out)" 136.69.234.3 - - [26/Sep/2026:14:12:08 +0000] "GET / HTTP/1.1" 200 213477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.69.234.3 - - [26/Sep/2026:14:12:09 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.69.234.3 - - [26/Sep/2026:14:12:09 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.69.234.3 - - [26/Sep/2026:14:12:09 +0000] "GET / HTTP/1.1" 200 213477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.69.234.3 - - [26/Sep/2026:14:12:11 +0000] "GET //?author=1 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.69.234.3 - - [26/Sep/2026:14:12:11 +0000] "GET //?author=2 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.69.234.3 - - [26/Sep/2026:14:12:12 +0000] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 1432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.69.234.3 - - [26/Sep/2026:14:12:13 +0000] "POST //xmlrpc.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.69.234.3 - - [26/Sep/2026:14:12:13 +0000] "POST //xmlrpc.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:14:16:29 +0000] "POST /wp-cron.php?doing_wp_cron=1790432189.4736349582672119140625 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 217.154.91.27 - - [26/Sep/2026:14:16:28 +0000] "GET / HTTP/1.1" 200 213477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 20.196.195.74 - - [26/Sep/2026:14:26:28 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:28 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:29 +0000] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:29 +0000] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:30 +0000] "GET /wp-includes/widgets/class-wp-widget-media-images.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:30 +0000] "GET /wp-admin/includes/class-pclzip-long.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:30 +0000] "GET /wp-includes/js/jcrop/atomlib.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:31 +0000] "GET /wp-includes/omldzgve.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:31 +0000] "GET /wp-content/about.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:32 +0000] "GET /wp-content/languages/lf.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:32 +0000] "GET /wp-includes/about.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:33 +0000] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:33 +0000] "GET /wp-includes/ms_deprecated.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:35 +0000] "GET /wp-content/uploads/conf.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:35 +0000] "GET /.well-known/xhornoeu.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:36 +0000] "GET /wp-admin/css/spjRmJO.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:36 +0000] "GET /sts.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:36 +0000] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:37 +0000] "GET /uploads/40341.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:37 +0000] "GET /wp-includes/css/dist/registry.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:38 +0000] "GET /images/all2.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:38 +0000] "GET /wp-includes/177.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:39 +0000] "GET /wp-includes/pomo/iR7SzrsOUEP.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:39 +0000] "GET /wp-admin/js/0.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:39 +0000] "GET /.tmb/5cpladen8gccmmra756oCdefault.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:40 +0000] "GET /wp-includes/fonts/class-wp-font-metrics-cache.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:40 +0000] "GET /.well-known/file.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:41 +0000] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:41 +0000] "GET /wp-content/uploads/wp-activate.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:41 +0000] "GET /wp-content/uploads/BDKR28_0a0th8l2.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:42 +0000] "GET /wp-includes/aa38ncmpwbbhismkwCdefault.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:42 +0000] "GET /wp-admin/js/widgets/wp-login.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:43 +0000] "GET /function.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:43 +0000] "GET /images/bay.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:43 +0000] "GET /wp-admin/css/colors/ectoplasm/pruKamL.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:44 +0000] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:44 +0000] "GET /wp-admin/css/media.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:45 +0000] "GET /wp-admin/includes/class-wp-community-events-security.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:45 +0000] "GET /wp-admin/css/colors/admin-ajax.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:45 +0000] "GET /wp-admin/css/PXmpeIJJ.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:46 +0000] "GET /wp-admin/includes/class-wp-pagebuilders-4OuSVq.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:46 +0000] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:46 +0000] "GET /wp-includes/ID3/module.audio-video.asf-character.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:47 +0000] "GET /.well-known/BDKR28_1m7yj6t5.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:47 +0000] "GET /wp-content/uploads/wp-X1s2e6h3p7.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:48 +0000] "GET /wp-content/uploads/class-wp-block_83debf3f.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:48 +0000] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:48 +0000] "GET /wp-includes/widgets/htongy.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:49 +0000] "GET /wp-includes/class-wp-block-method.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:49 +0000] "GET /images/preupload.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:50 +0000] "GET /wp-includes/images/crystal/lGnVOnHD.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:50 +0000] "GET /wp-content/uploads/m4dy9tdt4wbliblaq20vCdefault.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:50 +0000] "GET /wp-admin/css/1b2f09eda1ea40.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:51 +0000] "GET /wp-admin/includes/fff.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:51 +0000] "GET /wp-content/upgrade/wp-links-opml.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:52 +0000] "GET /wp-includes/class-wp-http-encoding-cron.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:52 +0000] "GET /wp-admin/includes/rfatW.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:52 +0000] "GET /wp-includes/images/atomlib.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:53 +0000] "GET /wp-admin/maint/DsIIJjM.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:53 +0000] "GET /wp-content/uploads/1.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:53 +0000] "GET /wp-includes/class-wp-http-requests-response-cron.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:54 +0000] "GET /wp-content/uploads/wp-toolkit.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:54 +0000] "GET /wp-content/uploads/Nx_230d93a1.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:55 +0000] "GET /.well-known/1wvekeybd9it2di2vyipgr6Cdefault.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:55 +0000] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:55 +0000] "GET /wp-content/uploads/class-wp-cache_d3de045d.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:56 +0000] "GET /wp-content/upgrade/rty.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:56 +0000] "GET /wp-admin/css/rVLXSEJki.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:57 +0000] "GET /wp-admin/includes/plugin-compiler.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:57 +0000] "GET /wp-content/uploads/lumina_135.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:57 +0000] "GET /wp-includes/js/chaty.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:58 +0000] "GET /wp-admin/js/admin.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:58 +0000] "GET /wp-includes/8xmlr9ommwdy3ro8dCdefault.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:58 +0000] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:59 +0000] "GET /wp-includes/fonts/alfa-rex.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:26:59 +0000] "GET /wp-admin/images/about.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:00 +0000] "GET /wp-includes/css/wp-signup.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:00 +0000] "GET /wp-admin/js/widgets/qlex1.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:00 +0000] "GET /wp-includes/images/media/archive.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:01 +0000] "GET /wp-includes/css/well.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:01 +0000] "GET /uploads/product.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:02 +0000] "GET /wp-content/upgrade/buy.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:02 +0000] "GET /wp-admin/css/aaa.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:02 +0000] "GET /wp-admin/includes/codehu.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:03 +0000] "GET /wp-admin/css/colors/coffee/as.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:03 +0000] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-upload.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:04 +0000] "GET /wp-content/uploads/class-wp-block_016aa8d2.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:04 +0000] "GET /wp-includes/oozbseg0fmz488uggcdaCdefault.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:04 +0000] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:05 +0000] "GET /file.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:05 +0000] "GET /wp-includes/js/4hrp2twn.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:05 +0000] "GET /wp-content/index.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:06 +0000] "GET /wp-admin/css/colors/blue/0x_fans.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:06 +0000] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:07 +0000] "GET /wp-includes/blocks/mneXaOl.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:07 +0000] "GET /wp-content/uploads/i99z7zzbwtpteujvv6s8hiCdefault.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:07 +0000] "GET /wp-includes/cron-integer.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:08 +0000] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:08 +0000] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:09 +0000] "GET /aaa.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:09 +0000] "GET /wp-content/uploads/index.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:09 +0000] "GET /wp-admin/maint/xmleihhf.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:10 +0000] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:10 +0000] "GET /wp-admin/maint/shadow-bot.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:11 +0000] "GET /files/icon.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:11 +0000] "GET /uploads/add_ONLINE-TPSC_questions.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:12 +0000] "GET /wp-admin/includes/cGInqij.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:12 +0000] "GET /wp-includes/images/about.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:12 +0000] "GET /wp-includes/widgets/class-wp-widget-media-video-view.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:13 +0000] "GET /wp-admin/images/aaa.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:13 +0000] "GET /wp-content/languages/aaa.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:14 +0000] "GET /wp-admin/maint/s.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:14 +0000] "GET /images/check_upload.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:14 +0000] "GET /wp-includes/sitemaps/admin.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:15 +0000] "GET /wp-admin/maint/yes.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:15 +0000] "GET /wp-admin/images/wp-login.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:16 +0000] "GET /wp-content/upgrade/wp-firewall.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:16 +0000] "GET /wp-content/languages/46dbr8i8qeclytcxawrCdefault.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:16 +0000] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:17 +0000] "GET /wp-includes/IXR/about.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:17 +0000] "GET /wp-includes/class-wp-post-condition.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:18 +0000] "GET /wp-admin/css/colors/blue/fIMazHfo.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:18 +0000] "GET /wp-includes/hp2.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:19 +0000] "GET /wp-admin/includes/aaa.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:19 +0000] "GET /wp-admin/css/AHntTlOm.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:19 +0000] "GET /wp-admin/includes/class-wp-pagebuilders-uHByK9.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:20 +0000] "GET /wp-admin/css/colors/ectoplasm/BczuzAOgg.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:20 +0000] "GET /wp-includes/wp-class.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:21 +0000] "GET /wp-content/uploads/gwp-ec5e508b.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:21 +0000] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:21 +0000] "GET /wp-admin/js/widgets/goods.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:22 +0000] "GET /wp-admin/maint/config.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:22 +0000] "GET /wp-admin/css/TykrTmyzsG.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:23 +0000] "GET /wp-admin/includes/schema-part.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:23 +0000] "GET /.well-known/iczxujjyvw.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:23 +0000] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:24 +0000] "GET /index/data.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:24 +0000] "GET /wp-content/languages/NNUEU.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:25 +0000] "GET /naxc.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:25 +0000] "GET /wp-admin/maint/home.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:26 +0000] "GET /images/upload-size.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:26 +0000] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:26 +0000] "GET /classwithtostring.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:27 +0000] "GET /wp-includes/widgets/aaa.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:27 +0000] "GET /img/wp-login.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:28 +0000] "GET /wp-includes/IXR/moon.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:28 +0000] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:28 +0000] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 404 5750 "-" "-" 20.196.195.74 - - [26/Sep/2026:14:27:29 +0000] "GET /wp-includes/widgets/class-wp-widget-tags.php HTTP/1.1" 404 5750 "-" "-" 192.253.248.163 - - [26/Sep/2026:14:36:11 +0000] "GET /.aws/credentials%EF%BF%BD%A0 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:36:11 +0000] "GET /.aws/config%EF%BF%BD%A0 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:36:12 +0000] "GET /.aws/credentials%EF%BF%BD%85 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:14:36:12 +0000] "GET /.aws/config%EF%BF%BD%85 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 192.253.248.163 - - [26/Sep/2026:14:36:18 +0000] "GET /.aws/config%EF%BF%BD%09 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:14:36:18 +0000] "GET /.aws/credentials%EF%BF%BD%09 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:14:36:19 +0000] "GET /.aws/credentials%EF%BF%BD%0C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:36:19 +0000] "GET /.aws/config%EF%BF%BD%0C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 192.253.248.163 - - [26/Sep/2026:14:36:25 +0000] "GET /.aws/credentials%EF%BF%BD%1F HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:36:25 +0000] "GET /.aws/config%EF%BF%BD%1F HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:36:26 +0000] "GET /.aws/config%EF%BF%BD%1E HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:36:26 +0000] "GET /.aws/credentials%EF%BF%BD%1E HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:36:31 +0000] "GET /.aws/credentials%EF%BF%BD%1D HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:36:31 +0000] "GET /.aws/config%EF%BF%BD%1D HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:36:32 +0000] "GET /.aws/credentials%EF%BF%BD%1C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:14:36:32 +0000] "GET /.aws/config%EF%BF%BD%1C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:36:33 +0000] "GET /.aws/config%EF%BF%BD%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:36:33 +0000] "GET /.aws/credentials%EF%BF%BD%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:36:33 +0000] "GET /.aws/config%EF%BF%BD; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:14:36:33 +0000] "GET /.aws/credentials%EF%BF%BD; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:36:55 +0000] "GET /.aws/config;%09 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:36:55 +0000] "GET /.aws/config;%0C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 65.181.111.180 - - [26/Sep/2026:14:36:55 +0000] "POST /wp-cron.php?doing_wp_cron=1790433415.8386330604553222656250 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 65.181.111.180 - - [26/Sep/2026:14:36:56 +0000] "POST /wp-cron.php?doing_wp_cron=1790433415.9852321147918701171875 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 192.253.248.163 - - [26/Sep/2026:14:36:55 +0000] "GET /.azure/credentials%EF%BF%BD%09 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:36:56 +0000] "GET /.aws/config;%1F HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:14:36:56 +0000] "GET /.aws/config;%1E HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:36:56 +0000] "GET /.azure/credentials%EF%BF%BD%0C HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:36:57 +0000] "GET /.aws/config;%1D HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:37:04 +0000] "GET /.aws/config;%1C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:14:37:04 +0000] "GET /.azure/credentials%EF%BF%BD%1F HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:37:05 +0000] "GET /.aws/config;%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:14:37:05 +0000] "GET /.azure/credentials%EF%BF%BD%1E HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:37:05 +0000] "GET /.aws/config;; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 192.253.248.163 - - [26/Sep/2026:14:37:05 +0000] "GET /.azure/credentials%EF%BF%BD%1D HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:37:07 +0000] "GET /.azure/credentials%EF%BF%BD%1C HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:14:37:08 +0000] "GET /.azure/credentials%EF%BF%BD%0B HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:14:37:09 +0000] "GET /.azure/credentials%EF%BF%BD; HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 45.159.223.39 - - [26/Sep/2026:14:47:01 +0000] "GET /wp-content/uploads/2023/02/Untitled-266-x-394-px-260-x-236-px.png HTTP/2" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:14:59:43 +0000] "POST /wp-cron.php?doing_wp_cron=1790434783.8536779880523681640625 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 57.141.20.74 - - [26/Sep/2026:14:59:42 +0000] "GET /testimonials/galini95/ HTTP/2" 200 35583 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 45.138.12.54 - - [26/Sep/2026:15:03:36 +0000] "GET / HTTP/1.1" 200 310 "-" "curl/8.6.0" 45.138.12.54 - - [26/Sep/2026:15:03:36 +0000] "GET /ps-18d8e7295f1fc1bc-5bee2-notfound HTTP/1.1" 200 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36" 45.138.12.54 - - [26/Sep/2026:15:03:36 +0000] "GET /.env HTTP/1.1" 200 310 "-" "curl/8.6.0" 45.138.12.54 - - [26/Sep/2026:15:03:37 +0000] "GET /api/.env HTTP/1.1" 200 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 45.138.12.54 - - [26/Sep/2026:15:03:37 +0000] "GET /.env.save HTTP/1.1" 200 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36" 45.138.12.54 - - [26/Sep/2026:15:03:37 +0000] "GET /.env.prod HTTP/1.1" 200 310 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 45.138.12.54 - - [26/Sep/2026:15:03:37 +0000] "GET /application/.env HTTP/1.1" 200 310 "-" "curl/8.6.0" 45.138.12.54 - - [26/Sep/2026:15:03:37 +0000] "GET /_profiler/phpinfo HTTP/1.1" 200 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36" 45.138.12.54 - - [26/Sep/2026:15:03:37 +0000] "GET /php_info.php HTTP/1.1" 200 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 45.138.12.54 - - [26/Sep/2026:15:03:37 +0000] "GET /phpinfo HTTP/1.1" 200 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36" 45.138.12.54 - - [26/Sep/2026:15:03:37 +0000] "GET /phpinfo.php HTTP/1.1" 200 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 45.138.12.54 - - [26/Sep/2026:15:03:37 +0000] "GET /config.json HTTP/1.1" 200 310 "-" "curl/8.6.0" 45.138.12.54 - - [26/Sep/2026:15:03:37 +0000] "GET /dev/.env HTTP/1.1" 200 310 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 65.181.111.180 - - [26/Sep/2026:15:12:43 +0000] "POST /wp-cron.php?doing_wp_cron=1790435563.4833059310913085937500 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 177.92.167.208 - - [26/Sep/2026:15:12:42 +0000] "GET /testimonials/david-warner/ HTTP/1.1" 200 35586 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13.7; rv:130.0) Gecko/20100101 Firefox/130.0" 65.181.111.180 - - [26/Sep/2026:15:20:56 +0000] "POST /wp-cron.php?doing_wp_cron=1790436056.3181109428405761718750 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 57.141.20.45 - - [26/Sep/2026:15:20:55 +0000] "GET /portfolios/projects/ HTTP/2" 200 35593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 65.181.111.180 - - [26/Sep/2026:15:22:00 +0000] "POST /wp-cron.php?doing_wp_cron=1790436120.0136649608612060546875 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 136.243.15.226 - - [26/Sep/2026:15:21:59 +0000] "POST /wp-login.php HTTP/1.1" 200 2523 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.43 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0" 65.181.111.180 - - [26/Sep/2026:15:26:58 +0000] "POST /wp-cron.php?doing_wp_cron=1790436418.1039960384368896484375 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 4.156.59.111 - - [26/Sep/2026:15:26:57 +0000] "POST /wp-login.php HTTP/1.1" 200 2519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0" 198.235.24.137 - - [26/Sep/2026:15:32:23 +0000] "GET / HTTP/1.1" 200 40080 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 212.156.70.154 - - [26/Sep/2026:15:33:59 +0000] "GET / HTTP/1.1" 401 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 205.210.31.25 - - [26/Sep/2026:15:35:42 +0000] "GET / HTTP/1.1" 200 40080 "http://webmail.ofsda.ngo/" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 153.67.85.48 - - [26/Sep/2026:15:37:33 +0000] "POST /xmlrpc.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/86.0.0.0 Safari/537.36" 54.37.23.159 - - [26/Sep/2026:15:46:19 +0000] "GET /wp-content/uploads/2026/04/WhatsApp-Image-2026-04-09-at-12.46.26-PM.jpeg HTTP/1.1" 200 189181 "-" "python-urllib3/1.26.9" 54.37.23.159 - - [26/Sep/2026:15:46:41 +0000] "GET /wp-content/uploads/2024/06/WhatsApp-Image-2026-03-30-at-12.05.07-PM-1-1024x1007.jpeg HTTP/1.1" 200 108936 "-" "python-urllib3/1.26.9" 65.181.111.180 - - [26/Sep/2026:15:55:23 +0000] "POST /wp-cron.php?doing_wp_cron=1790438123.0984289646148681640625 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 172.236.173.45 - - [26/Sep/2026:15:55:21 +0000] "POST /wp-login.php HTTP/1.1" 200 2518 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.43 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 OPR/124.0.0.0" 82.139.195.10 - - [26/Sep/2026:15:56:22 +0000] "GET / HTTP/1.1" 401 53 "http://cpcontacts.ofsda.ngo/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 20.214.191.94 - - [26/Sep/2026:16:00:32 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:32 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 401 36 "-" "-" 65.181.111.180 - - [26/Sep/2026:16:00:32 +0000] "POST /wp-cron.php?doing_wp_cron=1790438432.9500091075897216796875 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; https://ofsda.ngo" 153.80.74.208 - - [26/Sep/2026:16:00:32 +0000] "GET /wp-login.php HTTP/1.1" 200 2359 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-includes/css/dashicons.min.css?ver=6.9.4 HTTP/1.1" 200 35591 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 20.214.191.94 - - [26/Sep/2026:16:00:33 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-includes/css/buttons.min.css?ver=6.9.4 HTTP/1.1" 200 1465 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-admin/css/forms.min.css?ver=6.9.4 HTTP/1.1" 200 6615 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-admin/css/l10n.min.css?ver=6.9.4 HTTP/1.1" 200 762 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-includes/js/clipboard.min.js?ver=2.0.11 HTTP/1.1" 200 3141 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-admin/css/login.min.css?ver=6.9.4 HTTP/1.1" 200 2168 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1" 200 30412 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1" 200 4870 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-includes/js/zxcvbn-async.min.js?ver=1.0 HTTP/1.1" 200 257 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1" 200 1939 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1" 200 2229 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-admin/js/password-strength-meter.min.js?ver=6.9.4 HTTP/1.1" 200 624 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1" 200 7342 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-includes/js/wp-util.min.js?ver=6.9.4 HTTP/1.1" 200 757 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 HTTP/1.1" 200 321 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-includes/js/dist/a11y.min.js?ver=cb460b4676c94bd228ed HTTP/1.1" 200 925 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-admin/images/wordpress-logo.svg?ver=20131107 HTTP/1.1" 200 809 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 153.80.74.208 - - [26/Sep/2026:16:00:33 +0000] "GET /wp-admin/js/user-profile.min.js?ver=6.9.4 HTTP/1.1" 200 3152 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 20.214.191.94 - - [26/Sep/2026:16:00:33 +0000] "GET /aa.php HTTP/1.1" 401 36 "-" "-" 153.80.74.208 - - [26/Sep/2026:16:00:34 +0000] "GET /wp-includes/js/zxcvbn.min.js HTTP/1.1" 200 393079 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 20.214.191.94 - - [26/Sep/2026:16:00:34 +0000] "GET /z70.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:34 +0000] "GET /f35.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:35 +0000] "GET /adminfuns.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:35 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:36 +0000] "GET /dex.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:36 +0000] "GET /chosen.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:36 +0000] "GET /1.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:37 +0000] "GET /radio.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:37 +0000] "GET /blacks.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:38 +0000] "GET /alfa.php HTTP/1.1" 401 36 "-" "-" 153.80.74.208 - - [26/Sep/2026:16:00:37 +0000] "POST /wp-login.php HTTP/1.1" 200 2515 "https://ofsda.ngo/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 20.214.191.94 - - [26/Sep/2026:16:00:38 +0000] "GET /wp_blog_footer.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:39 +0000] "GET /b8.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:39 +0000] "GET /xex.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:39 +0000] "GET /ass.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:40 +0000] "GET /wsd.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:40 +0000] "GET /BDKR28WP.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:41 +0000] "GET /wmore1.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:41 +0000] "GET /z60.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:42 +0000] "GET /pJPoKA.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:42 +0000] "GET /24.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:42 +0000] "GET /xxw.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:43 +0000] "GET /bnmtp.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:43 +0000] "GET /ebkid.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:44 +0000] "GET /133.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:44 +0000] "GET /x33.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:44 +0000] "GET /cae.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:45 +0000] "GET /txets.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:45 +0000] "GET /wp-update.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:46 +0000] "GET /foxv10.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:46 +0000] "GET /177.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:47 +0000] "GET /ccc.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:47 +0000] "GET /0xD.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:47 +0000] "GET /sallu.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:48 +0000] "GET /01.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:48 +0000] "GET /ab.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:49 +0000] "GET /xwpg.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:49 +0000] "GET /flamini.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:50 +0000] "GET /themes.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:50 +0000] "GET /0.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:50 +0000] "GET /opsh.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:51 +0000] "GET /media.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:51 +0000] "GET /images.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:52 +0000] "GET /ops.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:52 +0000] "GET /mac.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:53 +0000] "GET /pass4.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:53 +0000] "GET /drttewyh.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:53 +0000] "GET /sh.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:54 +0000] "GET /groud1.php HTTP/1.1" 401 36 "-" "-" 20.214.191.94 - - [26/Sep/2026:16:00:54 +0000] "GET /bro.php HTTP/1.1" 401 36 "-" "-"