JezK

Edit File: ncro.ngo.afghandevelopers.net

144.217.135.187 - - [26/Sep/2026:12:04:07 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 65.181.111.180 - - [26/Sep/2026:12:05:23 +0000] "POST /wp-cron.php?doing_wp_cron=1790424323.5240368843078613281250 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 149.56.150.118 - - [26/Sep/2026:12:05:22 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 20.194.97.74 - - [26/Sep/2026:12:24:21 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 65.181.111.180 - - [26/Sep/2026:12:24:23 +0000] "POST /wp-cron.php?doing_wp_cron=1790425463.6465349197387695312500 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.194.97.74 - - [26/Sep/2026:12:24:22 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:24 +0000] "GET /kbqhb.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:27 +0000] "GET /0mzrlfdt.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:29 +0000] "GET /ot.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:31 +0000] "GET /edorxrr.php HTTP/1.1" 404 208955 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:33 +0000] "GET /ilex.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:35 +0000] "GET /632e19b36dindex.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:37 +0000] "GET /20.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:39 +0000] "GET /js.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:41 +0000] "GET /xrp.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:43 +0000] "GET /w1px.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:45 +0000] "GET /goods.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:48 +0000] "GET /b8.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:50 +0000] "GET /unzip.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:53 +0000] "GET /c3c427fa59.php HTTP/1.1" 404 208961 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:54 +0000] "GET /3.php HTTP/1.1" 403 31013 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:55 +0000] "GET /c3c427fa59index.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:57 +0000] "GET /e219b53abbindex.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:24:59 +0000] "GET /simple.php HTTP/1.1" 404 208953 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:01 +0000] "GET /wo.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:04 +0000] "GET /4cdf8c8db0index.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:06 +0000] "GET /zoo1.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:08 +0000] "GET /zoo2.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:10 +0000] "GET /kgblegacy.php HTTP/1.1" 404 208959 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:12 +0000] "GET /dot.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:14 +0000] "GET /wp-trackback.php HTTP/1.1" 404 135 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:15 +0000] "GET /83a907c742index.php HTTP/1.1" 404 208971 "-" "-" 65.181.111.180 - - [26/Sep/2026:12:25:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790425519.3021368980407714843750 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.194.97.74 - - [26/Sep/2026:12:25:17 +0000] "GET /samll.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:21 +0000] "GET /php8.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:23 +0000] "GET /abde5e1996.php HTTP/1.1" 404 208961 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:25 +0000] "GET /curldect.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:27 +0000] "GET /go.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:29 +0000] "GET /pep.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:31 +0000] "GET /fsfrl.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:34 +0000] "GET /faiy.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:36 +0000] "GET /hypo.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:38 +0000] "GET //ho.php HTTP/1.1" 301 0 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:40 +0000] "GET /ho.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:45 +0000] "GET /XrdbXydefault.php HTTP/1.1" 404 208967 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:47 +0000] "GET /jj.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:50 +0000] "GET /or.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:54 +0000] "GET /cjhnp.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:56 +0000] "GET /gif.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:25:58 +0000] "GET /local.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:00 +0000] "GET /xz7l6w5h.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:03 +0000] "GET /bn.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:05 +0000] "GET /df.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:07 +0000] "GET /ho.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:09 +0000] "GET /esp.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:11 +0000] "GET /felnggg.php HTTP/1.1" 404 208955 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:13 +0000] "GET /aqotrjkg.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:15 +0000] "GET /mar.php HTTP/1.1" 403 1242 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:15 +0000] "GET /02d4cc85caindex.php HTTP/1.1" 404 208971 "-" "-" 65.181.111.180 - - [26/Sep/2026:12:26:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790425579.9738829135894775390625 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.194.97.74 - - [26/Sep/2026:12:26:18 +0000] "GET /84300819ebindex.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:20 +0000] "GET /zwso.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:22 +0000] "GET /cilus.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:35 +0000] "GET /bhigtouj.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:40 +0000] "GET /gecho.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:41 +0000] "GET /coffe.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:43 +0000] "GET /ssdg.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:45 +0000] "GET /82.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:46 +0000] "GET /12.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:48 +0000] "GET /sm.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:50 +0000] "GET /css.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:51 +0000] "GET /abde5e1996index.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:53 +0000] "GET /a65.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:54 +0000] "GET /tvbxn.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:56 +0000] "GET /ccc.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:26:59 +0000] "GET /2fa307c31b.php HTTP/1.1" 404 208961 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:01 +0000] "GET /f35.update.php HTTP/1.1" 403 31013 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:01 +0000] "GET /29.php HTTP/1.1" 404 208945 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:03 +0000] "GET /eb06f5f3c7index.php HTTP/1.1" 404 208971 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:05 +0000] "GET /pqfpcelx.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:07 +0000] "GET /UT6UJndefault.php HTTP/1.1" 404 208967 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:10 +0000] "GET /jlex.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:12 +0000] "GET /cnsk.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:14 +0000] "GET /ded.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:16 +0000] "GET /acf1ced8aec2.php HTTP/1.1" 404 208965 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:18 +0000] "GET /accesson.php HTTP/1.1" 403 1242 "-" "-" 65.181.111.180 - - [26/Sep/2026:12:27:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790425639.7794470787048339843750 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.194.97.74 - - [26/Sep/2026:12:27:18 +0000] "GET /kerang.php HTTP/1.1" 404 208953 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:20 +0000] "GET /gix.php HTTP/1.1" 404 208947 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:22 +0000] "GET /hywzd.php HTTP/1.1" 404 208951 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:24 +0000] "GET /asax.php HTTP/1.1" 404 208949 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:26 +0000] "GET /ORVX-55jkI7.php HTTP/1.1" 404 208967 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:28 +0000] "GET /.cache.php HTTP/1.1" 404 208957 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:31 +0000] "GET /xmini4.php HTTP/1.1" 404 208953 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:33 +0000] "GET //000.php HTTP/1.1" 301 0 "-" "-" 20.194.97.74 - - [26/Sep/2026:12:27:35 +0000] "GET /000.php HTTP/1.1" 403 31013 "-" "-" 43.153.135.208 - - [26/Sep/2026:12:59:00 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.253.248.163 - - [26/Sep/2026:13:36:11 +0000] "GET /.aws/config%EF%BF%BD HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:11 +0000] "GET /.aws/credentials%EF%BF%BD HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:12 +0000] "GET /.aws/credentials\\xef\\xbf\\xbd HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:12 +0000] "GET /.aws/config\\xef\\xbf\\xbd HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:13:36:12 +0000] "GET /.aws/config%EF%BF%BD%A0 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:12 +0000] "GET /.aws/credentials%EF%BF%BD%A0 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:13 +0000] "GET /.aws/config%EF%BF%BD%85 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:13 +0000] "GET /.aws/credentials%EF%BF%BD%85 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:13 +0000] "GET /.aws/credentials%EF%BF%BD%09 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:13 +0000] "GET /.aws/config%EF%BF%BD%09 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:14 +0000] "GET /.aws/credentials%EF%BF%BD%0C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:14 +0000] "GET /.aws/config%EF%BF%BD%0C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:25 +0000] "GET /.aws/credentials%EF%BF%BD%1D HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:25 +0000] "GET /.aws/config%EF%BF%BD%1D HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:13:36:25 +0000] "GET /.aws/credentials%EF%BF%BD%1C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:13:36:25 +0000] "GET /.aws/config%EF%BF%BD%1C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:13:36:26 +0000] "GET /.aws/config%EF%BF%BD%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:26 +0000] "GET /.aws/credentials%EF%BF%BD%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:26 +0000] "GET /.aws/credentials%EF%BF%BD; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:26 +0000] "GET /.aws/config%EF%BF%BD; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:28 +0000] "GET /.aws/config; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 192.253.248.163 - - [26/Sep/2026:13:36:28 +0000] "GET /.aws/config;%A0 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:13:36:29 +0000] "POST /wp-cron.php?doing_wp_cron=1790429789.0808620452880859375000 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 192.253.248.163 - - [26/Sep/2026:13:36:28 +0000] "GET /.azure/credentials%EF%BF%BD HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:29 +0000] "GET /.aws/config;%85 HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:49 +0000] "GET /.aws/config;%1E HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:13:36:50 +0000] "POST /wp-cron.php?doing_wp_cron=1790429810.5872650146484375000000 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 65.181.111.180 - - [26/Sep/2026:13:36:50 +0000] "POST /wp-cron.php?doing_wp_cron=1790429810.6599590778350830078125 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 192.253.248.163 - - [26/Sep/2026:13:36:49 +0000] "GET /.azure/credentials%EF%BF%BD%0C HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:50 +0000] "GET /.aws/config;%1D HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:56 +0000] "GET /.aws/config;%1C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:13:36:56 +0000] "GET /.aws/config;%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:13:36:57 +0000] "GET /.aws/config;; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:36:56 +0000] "GET /.azure/credentials%EF%BF%BD%1F HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:13:36:57 +0000] "GET /.azure/credentials%EF%BF%BD%1E HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:36:58 +0000] "GET /.aws/credentials; HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:37:18 +0000] "GET /.aws/credentials;%0C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:37:19 +0000] "GET /.aws/credentials;%1F HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0" 65.181.111.180 - - [26/Sep/2026:13:37:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790429839.6541180610656738281250 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 192.253.248.163 - - [26/Sep/2026:13:37:18 +0000] "GET /.azure/credentials%EF%BF%BD; HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:37:19 +0000] "GET /.aws/credentials;%1E HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 192.253.248.163 - - [26/Sep/2026:13:37:19 +0000] "GET /.aws/credentials;%1D HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 192.253.248.163 - - [26/Sep/2026:13:37:20 +0000] "GET /.aws/credentials;%1C HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 192.253.248.163 - - [26/Sep/2026:13:37:25 +0000] "GET /.aws/credentials;%0B HTTP/1.1" 403 31013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 43.165.126.130 - - [26/Sep/2026:13:54:10 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 8.234.214.61 - - [26/Sep/2026:15:26:08 +0000] "GET /.git/config HTTP/1.1" 403 1242 "-" "-" 65.181.111.180 - - [26/Sep/2026:16:15:06 +0000] "POST /wp-cron.php?doing_wp_cron=1790439306.0647521018981933593750 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 43.173.176.152 - - [26/Sep/2026:16:15:04 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" 20.213.164.196 - - [26/Sep/2026:16:34:07 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:08 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:10 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:12 +0000] "GET /adminfuns.php HTTP/1.1" 404 208959 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:14 +0000] "GET //av.php HTTP/1.1" 301 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:16 +0000] "GET /av.php HTTP/1.1" 404 208945 "-" "-" 65.181.111.180 - - [26/Sep/2026:16:34:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790440459.6302249431610107421875 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.213.164.196 - - [26/Sep/2026:16:34:18 +0000] "GET /dex.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:20 +0000] "GET /chosen.php HTTP/1.1" 403 31013 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:20 +0000] "GET /radio.php HTTP/1.1" 403 31013 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:20 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 208969 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:23 +0000] "GET /k.php?p= HTTP/1.1" 301 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:24 +0000] "GET /k.php HTTP/1.1" 403 31013 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:25 +0000] "GET /133.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:27 +0000] "GET /wsd.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:29 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 208957 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:31 +0000] "GET /wmore1.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:33 +0000] "GET /177.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:36 +0000] "GET /ccc.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:38 +0000] "GET /0xD.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:40 +0000] "GET /sallu.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:42 +0000] "GET /ops.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:45 +0000] "GET /mac.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:47 +0000] "GET /myglu.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:49 +0000] "GET /7003b158aa4b6e.php HTTP/1.1" 404 208969 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:51 +0000] "GET /4edfe5rr.php HTTP/1.1" 404 208957 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:53 +0000] "GET /aboutt.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:56 +0000] "GET /dz0.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:34:58 +0000] "GET /matcha.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:00 +0000] "GET /32x1337.php HTTP/1.1" 404 208955 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:03 +0000] "GET /advance.php HTTP/1.1" 404 208955 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:05 +0000] "GET /laki.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:07 +0000] "GET /wp-X1s2e6h3p7.php HTTP/1.1" 404 208971 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:10 +0000] "GET /ezfhylnt.php HTTP/1.1" 404 208957 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:12 +0000] "GET /wp-admin/includes/class-wp-site-list.php HTTP/1.1" 302 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:17 +0000] "GET /wp-content/upgrade/wp-firewall.php HTTP/1.1" 200 0 "-" "-" 65.181.111.180 - - [26/Sep/2026:16:35:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790440519.1745870113372802734375 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.213.164.196 - - [26/Sep/2026:16:35:17 +0000] "GET /zeta.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:20 +0000] "GET /file-mancvgertdxz.php HTTP/1.1" 404 208979 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:22 +0000] "GET /wp-filemanager1.php HTTP/1.1" 404 208975 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:24 +0000] "GET /wp-whe.php HTTP/1.1" 404 208957 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:26 +0000] "GET /fms.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:28 +0000] "GET /oa.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:30 +0000] "GET /esc.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:32 +0000] "GET /yich.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:34 +0000] "GET /wp-xmlgal.php HTTP/1.1" 404 208963 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:36 +0000] "GET /Cdefault.php HTTP/1.1" 404 208957 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:38 +0000] "GET /sehryhv.php HTTP/1.1" 404 208955 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:40 +0000] "GET /1ac.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:43 +0000] "GET /yuca_cytgi.php HTTP/1.1" 404 208961 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:45 +0000] "GET /hao.php?p= HTTP/1.1" 301 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:46 +0000] "GET /hao.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:48 +0000] "GET /asw.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:50 +0000] "GET /olpsa.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:52 +0000] "GET /ega7IvFSLKi.php HTTP/1.1" 404 208963 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:55 +0000] "GET /kgb.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:57 +0000] "GET /upgrtfg.php HTTP/1.1" 404 208955 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:59 +0000] "GET /wp-content/OMrMKfSU.php HTTP/1.1" 200 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:35:59 +0000] "GET /fiu.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:02 +0000] "GET /chomu.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:04 +0000] "GET /cx.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:06 +0000] "GET /wp-pp.php HTTP/1.1" 404 208955 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:08 +0000] "GET /ssixta.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:11 +0000] "GET /wax.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:13 +0000] "GET /tesla.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:15 +0000] "GET /wp-x.php HTTP/1.1" 404 208953 "-" "-" 65.181.111.180 - - [26/Sep/2026:16:36:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790440579.6395230293273925781250 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.213.164.196 - - [26/Sep/2026:16:36:17 +0000] "GET /miru1.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:20 +0000] "GET /122.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:22 +0000] "GET /199.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:24 +0000] "GET /kuj8rl.php?p= HTTP/1.1" 301 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:26 +0000] "GET /kuj8rl.php HTTP/1.1" 404 208953 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:28 +0000] "GET /yyu.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:30 +0000] "GET /wp-feob.php HTTP/1.1" 404 208959 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:32 +0000] "GET /tphp.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:34 +0000] "GET /il.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:36 +0000] "GET /ct.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:39 +0000] "GET /bc.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:41 +0000] "GET /CDX2.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:43 +0000] "GET /SrHD3odefault.php HTTP/1.1" 404 208967 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:45 +0000] "GET /zoper.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:47 +0000] "GET /novax.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:49 +0000] "GET /albrt.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:51 +0000] "GET /fs6.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:53 +0000] "GET /f222.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:55 +0000] "GET /dass.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:36:57 +0000] "GET /fone1.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:00 +0000] "GET /HsFPDcD.php HTTP/1.1" 404 208955 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:02 +0000] "GET /huya.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:04 +0000] "GET /dodo.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:06 +0000] "GET /gool.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:08 +0000] "GET /wp-includes/rest-api/search/222.php HTTP/1.1" 404 1251 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:08 +0000] "GET /wp-content/plugins/elementor/theme.php HTTP/1.1" 200 0 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:08 +0000] "GET /wp-includes/wp-db-framework.php HTTP/1.1" 404 1251 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:09 +0000] "GET /x2x.php HTTP/1.1" 404 208947 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:11 +0000] "GET /xoot.php HTTP/1.1" 404 208949 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:13 +0000] "GET /sl.php HTTP/1.1" 404 208945 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:16 +0000] "GET ///admin.php HTTP/1.1" 301 0 "-" "-" 65.181.111.180 - - [26/Sep/2026:16:37:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790440639.3515319824218750000000 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 65.181.111.180 - - [26/Sep/2026:16:37:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790440639.3932299613952636718750 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 65.181.111.180 - - [26/Sep/2026:16:37:20 +0000] "POST /wp-cron.php?doing_wp_cron=1790440640.2427411079406738281250 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.213.164.196 - - [26/Sep/2026:16:37:18 +0000] "GET /admin.php HTTP/1.1" 404 208951 "-" "-" 20.213.164.196 - - [26/Sep/2026:16:37:21 +0000] "GET /222.php HTTP/1.1" 404 208947 "-" "-" 65.181.111.180 - - [26/Sep/2026:17:09:54 +0000] "POST /wp-cron.php?doing_wp_cron=1790442594.4818980693817138671875 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 43.135.130.202 - - [26/Sep/2026:17:09:53 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 65.181.111.180 - - [26/Sep/2026:18:05:31 +0000] "POST /wp-cron.php?doing_wp_cron=1790445931.8344728946685791015625 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 49.51.180.2 - - [26/Sep/2026:18:05:30 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.70.1.101 - - [26/Sep/2026:19:07:39 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 65.181.111.180 - - [26/Sep/2026:19:07:41 +0000] "POST /wp-cron.php?doing_wp_cron=1790449661.5096120834350585937500 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 13.70.1.101 - - [26/Sep/2026:19:07:40 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:43 +0000] "GET /adminfuns.php HTTP/1.1" 404 208959 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:46 +0000] "GET /goods.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:49 +0000] "GET /100.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:51 +0000] "GET /about.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:52 +0000] "GET /admin.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:54 +0000] "GET /themes.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:56 +0000] "GET /biufile.php HTTP/1.1" 404 208955 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:07:58 +0000] "GET /coffexium.php HTTP/1.1" 404 208959 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:01 +0000] "GET /coffee.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:03 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:04 +0000] "GET /classwithtostring.php HTTP/1.1" 404 208975 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:06 +0000] "GET /wp-ws68.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:08 +0000] "GET /wp-ws68.php HTTP/1.1" 404 208959 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:10 +0000] "GET /mgrr.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:12 +0000] "GET /ws13.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:13 +0000] "GET /ws13.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:16 +0000] "GET /btx25.php HTTP/1.1" 404 208951 "-" "-" 65.181.111.180 - - [26/Sep/2026:19:08:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790449699.4824860095977783203125 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 13.70.1.101 - - [26/Sep/2026:19:08:18 +0000] "GET /SDsadqwrf.php HTTP/1.1" 404 208959 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:20 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 208957 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:22 +0000] "GET /file5.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:24 +0000] "GET /xyn.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:26 +0000] "GET /inso.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:28 +0000] "GET /puc.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:31 +0000] "GET /b8.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:33 +0000] "GET /133.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:35 +0000] "GET /blurbs.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:38 +0000] "GET /ano.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:40 +0000] "GET /sf.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:42 +0000] "GET /xx.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:44 +0000] "GET /signon.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:45 +0000] "GET /signon.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:47 +0000] "GET /file61.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:49 +0000] "GET /nano.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:52 +0000] "GET /.mopj.php HTTP/1.1" 404 208955 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:54 +0000] "GET /file2.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:56 +0000] "GET /ws55.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:58 +0000] "GET /m.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:59 +0000] "GET /m.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:08:59 +0000] "GET /33.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:01 +0000] "GET /wp-content/uploads/ HTTP/1.1" 404 1251 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:02 +0000] "GET /w.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:02 +0000] "GET /ccc.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:04 +0000] "GET /file15.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:06 +0000] "GET /f35.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:08 +0000] "GET /shiny.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:11 +0000] "GET /images.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:13 +0000] "GET /82.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:15 +0000] "GET /files.php/new.php HTTP/1.1" 404 208975 "-" "-" 65.181.111.180 - - [26/Sep/2026:19:09:18 +0000] "POST /wp-cron.php?doing_wp_cron=1790449758.6413180828094482421875 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 13.70.1.101 - - [26/Sep/2026:19:09:17 +0000] "GET /mghnhykio.php/new.php HTTP/1.1" 404 208983 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:19 +0000] "GET /admin.php/nope.php HTTP/1.1" 404 208977 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:21 +0000] "GET /lib.php/new.php HTTP/1.1" 404 208971 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:23 +0000] "GET /info.php/new.php HTTP/1.1" 404 208973 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:25 +0000] "GET /db.php/new.php HTTP/1.1" 404 208969 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:28 +0000] "GET /222.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:30 +0000] "GET /ops.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:32 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:34 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:36 +0000] "GET /opsh.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:38 +0000] "GET /gigi.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:40 +0000] "GET /ab.php HTTP/1.1" 404 208945 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:42 +0000] "GET /indo.php HTTP/1.1" 404 208949 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:45 +0000] "GET /sallu.php HTTP/1.1" 404 208951 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:47 +0000] "GET /radio.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:47 +0000] "GET /mac.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:49 +0000] "GET /simple.php HTTP/1.1" 404 208953 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:51 +0000] "GET /k.php?p= HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:53 +0000] "GET /k.php HTTP/1.1" 403 31013 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:53 +0000] "GET /dex.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:55 +0000] "GET /222.php HTTP/1.1" 404 208947 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:57 +0000] "GET //av.php HTTP/1.1" 301 0 "-" "-" 13.70.1.101 - - [26/Sep/2026:19:09:59 +0000] "GET /av.php HTTP/1.1" 404 208945 "-" "-" 8.138.207.158 - - [26/Sep/2026:19:16:52 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.194.5.96 - - [26/Sep/2026:19:33:51 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 31013 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:33:51 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 208991 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:33:53 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 208963 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:33:56 +0000] "GET /adminfuns.php HTTP/1.1" 404 208959 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:33:58 +0000] "GET //av.php HTTP/1.1" 301 0 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:00 +0000] "GET /av.php HTTP/1.1" 404 208945 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:02 +0000] "GET /dex.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:04 +0000] "GET /chosen.php HTTP/1.1" 403 31013 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:05 +0000] "GET /radio.php HTTP/1.1" 403 31013 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:05 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 208969 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:08 +0000] "GET /k.php?p= HTTP/1.1" 301 0 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:09 +0000] "GET /k.php HTTP/1.1" 403 31013 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:09 +0000] "GET /133.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:12 +0000] "GET /wsd.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:14 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 208957 "-" "-" 65.181.111.180 - - [26/Sep/2026:19:34:19 +0000] "POST /wp-cron.php?doing_wp_cron=1790451259.1949300765991210937500 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 20.194.5.96 - - [26/Sep/2026:19:34:17 +0000] "GET /wmore1.php HTTP/1.1" 404 208953 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:19 +0000] "GET /177.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:23 +0000] "GET /ccc.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:25 +0000] "GET /0xD.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:27 +0000] "GET /sallu.php HTTP/1.1" 404 208951 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:30 +0000] "GET /ops.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:32 +0000] "GET /mac.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:35 +0000] "GET /myglu.php HTTP/1.1" 404 208951 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:38 +0000] "GET /7003b158aa4b6e.php HTTP/1.1" 404 208969 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:40 +0000] "GET /aboutt.php HTTP/1.1" 404 208953 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:43 +0000] "GET /wp-whe.php HTTP/1.1" 404 208957 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:45 +0000] "GET /ssixta.php HTTP/1.1" 404 208953 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:47 +0000] "GET /tesla.php HTTP/1.1" 404 208951 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:49 +0000] "GET /122.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:51 +0000] "GET /199.php HTTP/1.1" 404 208947 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:54 +0000] "GET ///admin.php HTTP/1.1" 301 0 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:55 +0000] "GET /admin.php HTTP/1.1" 404 208951 "-" "-" 20.194.5.96 - - [26/Sep/2026:19:34:58 +0000] "GET /222.php HTTP/1.1" 404 208947 "-" "-" 65.181.111.180 - - [26/Sep/2026:22:13:36 +0000] "POST /wp-cron.php?doing_wp_cron=1790460816.0929970741271972656250 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 43.153.62.161 - - [26/Sep/2026:22:13:35 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 65.181.111.180 - - [26/Sep/2026:22:16:07 +0000] "POST /wp-cron.php?doing_wp_cron=1790460967.5742149353027343750000 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 43.172.197.42 - - [26/Sep/2026:22:16:06 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:23:09:20 +0000] "POST /wp-cron.php?doing_wp_cron=1790464160.2963759899139404296875 HTTP/1.1" 200 0 "-" "WordPress/6.9.9; https://ncro.ngo" 170.106.152.218 - - [26/Sep/2026:23:09:19 +0000] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"