­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 172.105.42.26 - - [28/Jul/2026:12:17:56 +0000] "POST /wp-cron.php?doing_wp_cron=1785241076.0074849128723144531250 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 198.235.24.98 - - [28/Jul/2026:12:17:52 +0000] "GET /wp-login.php HTTP/1.1" 404 13996 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 2a03:2880:24ff:49:: - - [28/Jul/2026:13:05:32 +0000] "GET /robots.txt HTTP/1.1" 200 31 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.105.42.26 - - [28/Jul/2026:14:07:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785247629.9910778999328613281250 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 147.185.132.106 - - [28/Jul/2026:14:07:07 +0000] "GET / HTTP/1.1" 200 17198 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.105.42.26 - - [28/Jul/2026:14:27:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785248831.2007520198822021484375 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:14:28:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785248911.2791879177093505859375 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 94.154.43.179 - - [28/Jul/2026:14:52:03 +0000] "GET /.env HTTP/1.1" 403 5168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 172.105.42.26 - - [28/Jul/2026:15:19:42 +0000] "POST /wp-cron.php?doing_wp_cron=1785251982.0595419406890869140625 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:15:25:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785252344.2772369384765625000000 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:15:25:50 +0000] "GET / HTTP/1.1" 200 17198 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:15:25:51 +0000] "GET / HTTP/1.1" 200 17198 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:15:25:51 +0000] "GET / HTTP/1.1" 200 17198 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:15:25:51 +0000] "GET / HTTP/1.1" 200 17198 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:19:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785255542.1920280456542968750000 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:19:04 +0000] "POST /wp-admin/admin-ajax.php?action=wordfence_testAjax HTTP/1.1" 200 32 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:19:06 +0000] "GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=standard&cronKey=d9b6632c04461f327f245c56fd718d69&signature=fb2e3e66b414b587433c0e1c6a2a093c61c8979b6f27f9513c350f4231a409d4 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:20:40 +0000] "POST /wp-cron.php?doing_wp_cron=1785255640.2445681095123291015625 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:19:53 +0000] "GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=standard&cronKey=92ec3505404ca8e47e92a4569dce7290&signature=b744d897215c618b0f7d0468423ea41414edebe4e96f493a10dfce869b512b93 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:21:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785255686.2396230697631835937500 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:20:39 +0000] "GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=standard&cronKey=62850205ca4eed48e63533d677d71e3c&signature=b19825ec22341affa2e29b76288707c86bb244f7b8bda897731439c510191eff HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:22:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785255732.2300529479980468750000 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:21:25 +0000] "GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=standard&cronKey=88c7cc9ba0ffc157b962d54206de3846&signature=dd54e59b8ec012687e934dcc5bd13ca241ff087c9bf7e1d6ced833e26171a046 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:22:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785255778.2351651191711425781250 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:22:11 +0000] "GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=standard&cronKey=dd43d15784d9fc3212ab19933382b106&signature=67d2109cfe944a3f2e4f6f7b830eabf010c201925ea5175e756c3a4c404cb398 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:23:41 +0000] "POST /wp-cron.php?doing_wp_cron=1785255821.8671259880065917968750 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:22:57 +0000] "GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=standard&cronKey=8d0da25f587262ab3686bd526fd83548&signature=86d43104bb6ef37759c883bca96600583282c07034a71587a5bd8f3cb26e1ae5 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:16:50:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785257456.8655760288238525390625 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 198.235.24.146 - - [28/Jul/2026:16:50:55 +0000] "GET / HTTP/1.1" 200 17198 "http://workforcesaudi.core3.agency/" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.105.42.26 - - [28/Jul/2026:17:10:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785258643.6403710842132568359375 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:17:12:33 +0000] "POST /wp-cron.php?doing_wp_cron=1785258753.7231531143188476562500 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:17:14:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785258854.8106880187988281250000 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:18:07:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785262058.8906419277191162109375 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:18:14:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785262474.2927908897399902343750 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 198.235.24.76 - - [28/Jul/2026:18:14:32 +0000] "GET /wp-login.php HTTP/1.1" 404 13994 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.105.42.26 - - [28/Jul/2026:19:03:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785265438.6648631095886230468750 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:19:05:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785265516.1682019233703613281250 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:19:27:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785266878.5077919960021972656250 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:20:27:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785270451.4562289714813232421875 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [28/Jul/2026:20:28:09 +0000] "POST /wp-cron.php?doing_wp_cron=1785270489.4627099037170410156250 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 94.154.43.179 - - [28/Jul/2026:20:28:07 +0000] "GET / HTTP/1.1" 200 17198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 172.105.42.26 - - [28/Jul/2026:20:32:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785270776.9521560668945312500000 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency"