OwlCyberSecurity - MANAGER

Edit File: onebox.pk

103.186.31.46 - - [22/May/2026:10:39:36 +0500] "GET /assets/global/admin/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:36 +0500] "GET /ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:36 +0500] "GET /global/admin/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:37 +0500] "GET /webroot/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:37 +0500] "GET /plugin/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:37 +0500] "GET /plugins/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:37 +0500] "GET /asset/plugins/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:37 +0500] "GET /assets/plugins/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:38 +0500] "GET /asset/plugin/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:38 +0500] "GET /schoolmin/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:38 +0500] "GET /assets/js/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:38 +0500] "GET /js/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:39 +0500] "GET /asset/admin/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:39 +0500] "GET /assets/admin/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:39 +0500] "GET /CKEditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:39 +0500] "GET /admin/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:40 +0500] "GET /global/js/ckeditor/ckupload.php HTTP/1.1" 200 11 "-" "python-requests/2.33.0" 103.186.31.46 - - [22/May/2026:10:39:40 +0500] "GET /ckupload.php HTTP/1.1" 403 11 "-" "python-requests/2.33.0" 185.198.240.226 - - [22/May/2026:10:45:22 +0500] "GET /wp-includes/css/buttons.css HTTP/1.1" 200 11 "-" "Go-http-client/1.1" 143.198.59.88 - - [22/May/2026:12:29:29 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 143.198.59.88 - - [22/May/2026:12:29:29 +0500] "GET /favicon.ico HTTP/1.1" 200 11 "http://mail.onebox.pk/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 92.63.102.213 - - [22/May/2026:22:08:24 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 208.84.100.137 - - [22/May/2026:23:31:32 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 34.63.97.251 - - [22/May/2026:23:40:09 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 16.148.252.23 - - [23/May/2026:00:48:29 +0500] "GET /robots.txt HTTP/1.1" 200 11 "-" "CheckMarkNetwork/1.0 (+http://www.checkmarknetwork.com/spider.html)" 16.148.252.23 - - [23/May/2026:00:48:30 +0500] "HEAD / HTTP/1.1" 200 0 "-" "CheckMarkNetwork/1.0 (+http://www.checkmarknetwork.com/spider.html)" 16.148.252.23 - - [23/May/2026:00:48:31 +0500] "GET / HTTP/1.1" 200 11 "-" "CheckMarkNetwork/1.0 (+http://www.checkmarknetwork.com/spider.html)" 51.68.236.64 - - [23/May/2026:01:41:52 +0500] "GET /robots.txt HTTP/1.1" 200 11 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.64 - - [23/May/2026:01:41:52 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 93.158.98.56 - - [23/May/2026:02:07:48 +0500] "GET /robots.txt HTTP/1.1" 200 11 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 93.158.98.56 - - [23/May/2026:02:07:48 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 46.151.182.172 - - [23/May/2026:03:48:41 +0500] "GET / HTTP/1.1" 200 11 "-" "-" 62.60.130.182 - - [23/May/2026:07:35:10 +0500] "GET /wp-login.php HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 209.99.189.98 - - [23/May/2026:08:14:40 +0500] "GET /images/images/cache.php HTTP/1.1" 200 11 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.62.107.77 - - [23/May/2026:08:23:16 +0500] "GET /.env HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 193.32.162.60 - - [23/May/2026:11:39:19 +0500] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 200 11 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0; )" 193.32.162.60 - - [23/May/2026:11:39:19 +0500] "GET /wp-json/ HTTP/1.1" 200 11 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0; )" 91.224.92.99 - - [23/May/2026:13:25:22 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:22 +0500] "GET /wp-includes/ID3/license.txt HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:23 +0500] "GET /feed/ HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:23 +0500] "GET /xmlrpc.php?rsd HTTP/1.1" 403 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:23 +0500] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:23 +0500] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:23 +0500] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:24 +0500] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:24 +0500] "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:24 +0500] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:24 +0500] "GET /2021/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:24 +0500] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:25 +0500] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:25 +0500] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:25 +0500] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.224.92.99 - - [23/May/2026:13:25:25 +0500] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 198.235.24.59 - - [23/May/2026:15:11:33 +0500] "GET / HTTP/1.1" 200 11 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 192.36.109.108 - - [23/May/2026:15:28:38 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" 192.71.12.112 - - [23/May/2026:16:11:44 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 198.244.226.238 - - [23/May/2026:17:02:25 +0500] "GET /robots.txt HTTP/1.1" 200 11 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 198.244.242.137 - - [23/May/2026:17:02:26 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 66.132.172.207 - - [23/May/2026:17:09:25 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.172.207 - - [23/May/2026:17:09:29 +0500] "GET /favicon.ico HTTP/1.1" 200 11 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 51.68.236.73 - - [23/May/2026:18:42:35 +0500] "GET /robots.txt HTTP/1.1" 200 11 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.73 - - [23/May/2026:18:42:35 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 208.84.100.50 - - [23/May/2026:22:39:33 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0" 54.36.100.31 - - [23/May/2026:23:08:55 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:55 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:55 +0500] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:55 +0500] "GET /xmlrpc.php?rsd HTTP/1.1" 403 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:55 +0500] "GET / HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:55 +0500] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:56 +0500] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:56 +0500] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:56 +0500] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:56 +0500] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:56 +0500] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:57 +0500] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:57 +0500] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:57 +0500] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:57 +0500] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:57 +0500] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:57 +0500] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:58 +0500] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:58 +0500] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:58 +0500] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.36.100.31 - - [23/May/2026:23:08:58 +0500] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"