112.215.175.253 - - [08/Nov/2025:17:54:21 -0500] "GET / HTTP/1.1" 200 372 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:17:54:21 -0500] "GET /favicon.ico HTTP/1.1" 404 249 "http://4bill.goodface.com.ua/" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:17:54:51 -0500] "GET /z451.php HTTP/1.1" 302 0 "http://4bill.goodface.com.ua/" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:17:54:52 -0500] "GET /z451.php?p= HTTP/1.1" 200 1432 "http://4bill.goodface.com.ua/" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:17:56:49 -0500] "POST /z451.php?p= HTTP/1.1" 200 1858 "http://4bill.goodface.com.ua/z451.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:17:59:11 -0500] "GET /z451.php?path=%2Fhome%2Fbdqbpbxa HTTP/1.1" 200 2164 "http://4bill.goodface.com.ua/z451.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:02:40 -0500] "POST /z451.php?p= HTTP/1.1" 200 1508 "http://4bill.goodface.com.ua/z451.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:02:40 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/z451.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:02:45 -0500] "GET /duit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:02:46 -0500] "GET /duit.php?p= HTTP/1.1" 200 156 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:03:02 -0500] "POST /duit.php?p= HTTP/1.1" 200 526 "http://4bill.goodface.com.ua/duit.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:03:23 -0500] "POST /duit.php?p= HTTP/1.1" 200 522 "http://4bill.goodface.com.ua/duit.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:08:22 -0500] "GET /duit.php?p= HTTP/1.1" 200 156 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:08:26 -0500] "GET /z451.php?path=%2Fhome%2Fbdqbpbxa HTTP/1.1" 200 2164 "http://4bill.goodface.com.ua/z451.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:09:50 -0500] "POST /z451.php?p= HTTP/1.1" 200 1562 "http://4bill.goodface.com.ua/z451.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:09:51 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/z451.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:09:56 -0500] "POST /z451.php?p= HTTP/1.1" 200 1562 "http://4bill.goodface.com.ua/z451.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:09:57 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/z451.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:10:05 -0500] "POST /z451.php?p= HTTP/1.1" 200 1589 "http://4bill.goodface.com.ua/z451.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:10:57 -0500] "GET /alvnyariuang.php HTTP/1.1" 200 6609 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:10:57 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:13:53 -0500] "GET /123456.php?=123456 HTTP/1.1" 200 54 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:13:54 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/123456.php?=123456" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:14:35 -0500] "GET /123456.php?pass=123456 HTTP/1.1" 200 649 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:14:41 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/123456.php?=123456" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:14:42 -0500] "GET /alvnyariuang.php HTTP/1.1" 200 6598 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:14:43 -0500] "GET /favicon.ico HTTP/1.1" 404 249 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:14:56 -0500] "GET /alvnyariuang.php HTTP/1.1" 200 6612 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:16:54 -0500] "POST /123456.php?pass=123456 HTTP/1.1" 200 1732 "http://4bill.goodface.com.ua/123456.php?pass=123456" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:16:54 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/123456.php?pass=123456" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 149.154.161.245 - - [08/Nov/2025:18:18:11 -0500] "GET / HTTP/1.1" 200 19 "-" "TelegramBot (like TwitterBot)" 112.215.175.253 - - [08/Nov/2025:18:20:08 -0500] "POST /123456.php?pass=123456 HTTP/1.1" 200 1450 "http://4bill.goodface.com.ua/123456.php?pass=123456" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:20:09 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/123456.php?pass=123456" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:21:03 -0500] "GET /alvnyariuang.php HTTP/1.1" 200 6219 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:21:03 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:21:07 -0500] "POST /alvnyariuang.php HTTP/1.1" 200 14275 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:21:07 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:21:17 -0500] "POST /alvnyariuang.php HTTP/1.1" 200 11425 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:21:18 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:22:21 -0500] "POST /alvnyariuang.php HTTP/1.1" 200 5638 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:22:21 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:22:31 -0500] "POST /alvnyariuang.php HTTP/1.1" 200 11428 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:22:31 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:22:41 -0500] "POST /alvnyariuang.php HTTP/1.1" 200 5638 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:22:41 -0500] "GET /favicon.ico HTTP/1.1" 404 249 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:22:46 -0500] "POST /alvnyariuang.php HTTP/1.1" 200 6894 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:22:55 -0500] "POST /alvnyariuang.php HTTP/1.1" 200 7150 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:23:05 -0500] "GET /duit.php?p= HTTP/1.1" 200 156 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:23:11 -0500] "POST /duit.php?p= HTTP/1.1" 200 526 "http://4bill.goodface.com.ua/duit.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:23:12 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/duit.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:24:33 -0500] "POST /duit.php?p= HTTP/1.1" 200 549 "http://4bill.goodface.com.ua/duit.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:24:33 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/duit.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:24:46 -0500] "GET /favicon.ico HTTP/1.1" 499 0 "http://4bill.goodface.com.ua/duit.php?p=" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:24:47 -0500] "GET /duit.php?p= HTTP/1.1" 200 156 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.175.253 - - [08/Nov/2025:18:24:57 -0500] "POST /alvnyariuang.php HTTP/1.1" 200 7152 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.201.15 - - [08/Nov/2025:18:43:08 -0500] "POST /alvnyariuang.php HTTP/1.1" 200 7152 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.201.15 - - [08/Nov/2025:18:43:35 -0500] "POST /alvnyariuang.php HTTP/1.1" 200 7394 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.201.15 - - [08/Nov/2025:18:46:07 -0500] "POST /alvnyariuang.php HTTP/1.1" 200 6387 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 112.215.201.15 - - [08/Nov/2025:18:46:11 -0500] "POST /alvnyariuang.php HTTP/1.1" 200 14241 "http://4bill.goodface.com.ua/alvnyariuang.php" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0"