JezK

Edit File: ardo.ngo.afghandevelopers.net

13.70.4.78 - - [25/Sep/2026:12:05:44 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:45 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 111787 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:46 +0000] "GET /alfa.php HTTP/1.1" 404 111766 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:47 +0000] "GET /222.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:48 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 111773 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:49 +0000] "GET /images.php HTTP/1.1" 404 111768 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:50 +0000] "GET /goods.php HTTP/1.1" 200 0 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:50 +0000] "GET /k.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:51 +0000] "GET /k.php HTTP/1.1" 403 31013 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:51 +0000] "GET /media.php HTTP/1.1" 404 111767 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:52 +0000] "GET /mac.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:53 +0000] "GET /ops.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:54 +0000] "GET /1.php HTTP/1.1" 403 31013 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:54 +0000] "GET /aaa.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:55 +0000] "GET /aaa.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:56 +0000] "GET /chosen.php HTTP/1.1" 403 31013 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:56 +0000] "GET /2P.php HTTP/1.1" 404 111764 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:57 +0000] "GET /min.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:58 +0000] "GET /hur.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:05:59 +0000] "GET /crgio.php HTTP/1.1" 404 111767 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:00 +0000] "GET /wp-admin/css/ HTTP/1.1" 404 1251 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:01 +0000] "GET /great.php HTTP/1.1" 404 111767 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:02 +0000] "GET /ff1.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:03 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 111770 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:04 +0000] "GET /images2.php HTTP/1.1" 404 111769 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:05 +0000] "GET ///admin.php HTTP/1.1" 301 0 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:05 +0000] "GET /admin.php HTTP/1.1" 404 111767 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:06 +0000] "GET /prv8.php HTTP/1.1" 404 111766 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:07 +0000] "GET //0.php HTTP/1.1" 403 31013 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:08 +0000] "GET /gigi.php HTTP/1.1" 404 111766 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:08 +0000] "GET /ba.php HTTP/1.1" 404 111764 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:09 +0000] "GET /vpn.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:10 +0000] "GET /mds.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:11 +0000] "GET /mga.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:12 +0000] "GET /ant.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:13 +0000] "GET //uejvv.php HTTP/1.1" 301 0 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:14 +0000] "GET /uejvv.php HTTP/1.1" 404 111767 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:15 +0000] "GET /fix.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:16 +0000] "GET /admin.php?attempt=1 HTTP/1.1" 404 111777 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:17 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 1251 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:17 +0000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 404 1251 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:17 +0000] "GET /file.php HTTP/1.1" 404 111766 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:18 +0000] "GET /modules.php HTTP/1.1" 404 111769 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:19 +0000] "GET /elements.php HTTP/1.1" 404 111770 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:20 +0000] "GET /wp-22.php HTTP/1.1" 404 111767 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:21 +0000] "GET /NewFile.php HTTP/1.1" 404 111769 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:22 +0000] "GET /ded.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:23 +0000] "GET /indo.php HTTP/1.1" 404 111766 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:24 +0000] "GET /ugmlxqxz.php HTTP/1.1" 404 111770 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:25 +0000] "GET /mpwkxnos.php HTTP/1.1" 404 111770 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:26 +0000] "GET /sitemap.php HTTP/1.1" 404 111769 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:27 +0000] "GET /xetmolxr.php HTTP/1.1" 404 111770 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:28 +0000] "GET /mk.php HTTP/1.1" 404 111764 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:28 +0000] "GET /zpcutwcq.php HTTP/1.1" 404 111770 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:29 +0000] "GET /blacks.php HTTP/1.1" 404 111768 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:30 +0000] "GET /h2.php HTTP/1.1" 404 111764 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:31 +0000] "GET /mini.php HTTP/1.1" 403 31013 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:32 +0000] "GET /zwso.php HTTP/1.1" 404 111766 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:32 +0000] "GET /upgrtfg.php HTTP/1.1" 404 111769 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:33 +0000] "GET /tiny.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:34 +0000] "GET /tiny.php HTTP/1.1" 404 111766 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:35 +0000] "GET /simple.php HTTP/1.1" 404 111768 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:36 +0000] "GET /sallu.php HTTP/1.1" 404 111767 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:37 +0000] "GET //buy.php HTTP/1.1" 301 0 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:38 +0000] "GET /buy.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:39 +0000] "GET /ioxi-o.php HTTP/1.1" 404 111768 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:40 +0000] "GET /kgb.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:41 +0000] "GET /ega7IvFSLKi.php HTTP/1.1" 404 111773 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:42 +0000] "GET /ol.php HTTP/1.1" 404 111764 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:43 +0000] "GET /vast.php HTTP/1.1" 404 111766 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:43 +0000] "GET /ans.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:44 +0000] "GET /fs.php HTTP/1.1" 404 111764 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:45 +0000] "GET /gf.php HTTP/1.1" 404 111764 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:46 +0000] "GET /man.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:47 +0000] "GET /olpsa.php HTTP/1.1" 404 111767 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:48 +0000] "GET /about.php HTTP/1.1" 403 31013 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:48 +0000] "GET /dev.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:49 +0000] "GET /dev.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:50 +0000] "GET /ms-edit.php HTTP/1.1" 404 111769 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:51 +0000] "GET /settings.php HTTP/1.1" 404 111770 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:52 +0000] "GET /asw.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:53 +0000] "GET /txets.php HTTP/1.1" 403 31013 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:53 +0000] "GET /hao.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:54 +0000] "GET /hao.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:55 +0000] "GET /cae.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:56 +0000] "GET /yuca_cytgi.php HTTP/1.1" 404 111772 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:57 +0000] "GET /33.php HTTP/1.1" 404 111764 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:58 +0000] "GET /adminner.php HTTP/1.1" 404 111770 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:06:59 +0000] "GET /wp-login.php HTTP/1.1" 302 0 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:07:00 +0000] "GET /wp-signup.php HTTP/1.1" 302 0 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:07:02 +0000] "GET /thoms.php HTTP/1.1" 404 111767 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:07:04 +0000] "GET /a.php HTTP/1.1" 403 31013 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:07:04 +0000] "GET /b8.php HTTP/1.1" 404 111764 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:07:05 +0000] "GET /crkknnwo.php HTTP/1.1" 404 111770 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:07:06 +0000] "GET /sid.php HTTP/1.1" 404 111765 "-" "-" 13.70.4.78 - - [25/Sep/2026:12:07:07 +0000] "GET /2.php HTTP/1.1" 403 31013 "-" "-" 101.33.66.34 - - [25/Sep/2026:13:42:46 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 38.253.224.59 - - [25/Sep/2026:14:04:26 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 65.181.111.180 - - [25/Sep/2026:14:25:28 +0000] "POST /wp-cron.php?doing_wp_cron=1790346328.7511389255523681640625 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://ardo.ngo" 43.157.142.101 - - [25/Sep/2026:14:25:28 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 62.60.130.142 - - [25/Sep/2026:15:11:20 +0000] "GET //images/images/cache.php HTTP/1.1" 301 0 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.60.130.142 - - [25/Sep/2026:15:11:21 +0000] "GET /images/images/cache.php HTTP/1.1" 404 25423 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.148.10.216 - - [25/Sep/2026:15:19:13 +0000] "GET / HTTP/1.1" 301 0 "-" "cve-2026-87902-poc/shell" 104.28.225.117 - - [25/Sep/2026:15:32:08 +0000] "POST /wp-login.php HTTP/1.1" 302 0 "http://ardo.ngo/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"