Why do the WordPress logs appear in the app running Ghost?


That’s your access log, meaning these are web page URI’s being requested against your application.

In this case, these are bots trying to find vulnerabilities in your application. A popular thing for bots to do is to determine if Wordpress is being used, and to exploit it if so.

This is extremely common. It’s not a direct concern, but does go to show you that writing secure applications is important.