/home/bdqbpbxa/logs/artcosmetic.goodface.com.ua.bkup
185.156.42.209 - - [09/Nov/2025:00:10:46 -0500] "POST /wp-cron.php?doing_wp_cron=1762665046.5163569450378417968750 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762665046.5163569450378417968750" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
192.42.116.192 - - [09/Nov/2025:00:10:48 -0500] "POST /xmlrpc.php HTTP/1.1" 200 217 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36"
185.156.42.209 - - [09/Nov/2025:01:08:41 -0500] "POST /wp-cron.php?doing_wp_cron=1762668521.6689050197601318359375 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762668521.6689050197601318359375" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
185.220.101.139 - - [09/Nov/2025:01:08:42 -0500] "POST /xmlrpc.php HTTP/1.1" 200 217 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
185.156.42.209 - - [09/Nov/2025:01:21:52 -0500] "POST /wp-cron.php?doing_wp_cron=1762669312.1823880672454833984375 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762669312.1823880672454833984375" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
172.207.9.124 - - [09/Nov/2025:01:21:53 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:21:55 -0500] "GET /link.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:21:59 -0500] "GET /chosen.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:00 -0500] "GET /chosen.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:02 -0500] "GET /mail.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:04 -0500] "GET /lock360.php HTTP/1.1" 404 24909 "-" "-"
185.156.42.209 - - [09/Nov/2025:01:22:06 -0500] "POST /wp-cron.php?doing_wp_cron=1762669326.3778738975524902343750 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762669326.3778738975524902343750" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
172.207.9.124 - - [09/Nov/2025:01:22:07 -0500] "GET /function.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:09 -0500] "GET /classwithtostring.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:11 -0500] "GET /1.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:13 -0500] "GET /autoload_classmap.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:15 -0500] "GET /autoload_classmap.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:17 -0500] "GET /post.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:18 -0500] "GET /wp-conflg.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:20 -0500] "GET /wp-conflg.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:22 -0500] "GET /manager.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:24 -0500] "GET /manager.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:26 -0500] "GET /alfa.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:28 -0500] "GET /goods.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:29 -0500] "GET /wp-trackback.php HTTP/1.1" 404 146 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:31 -0500] "GET /about.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:33 -0500] "GET /about.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:35 -0500] "GET /themes.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:37 -0500] "GET /wp-login.php HTTP/1.1" 302 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:42 -0500] "GET /simple.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:44 -0500] "GET /class.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:46 -0500] "GET /class.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:48 -0500] "GET /as.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:50 -0500] "GET /file.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:52 -0500] "GET /bless.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:54 -0500] "GET /alfanew.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:56 -0500] "GET /404.php?fm=true HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:58 -0500] "GET /ini.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:22:59 -0500] "GET /fm.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:01 -0500] "GET /fm.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:03 -0500] "GET /atomlib.php HTTP/1.1" 404 24917 "-" "-"
185.156.42.209 - - [09/Nov/2025:01:23:05 -0500] "POST /wp-cron.php?doing_wp_cron=1762669385.3545820713043212890625 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762669385.3545820713043212890625" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
172.207.9.124 - - [09/Nov/2025:01:23:05 -0500] "GET /inputs.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:08 -0500] "GET /inputs.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:10 -0500] "GET /moon.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:12 -0500] "GET /moon.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:14 -0500] "GET /lv.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:16 -0500] "GET /cong.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:18 -0500] "GET /link.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:19 -0500] "GET /buy.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:21 -0500] "GET /zfile.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:23 -0500] "GET /css.php HTTP/1.1" 404 24901 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:25 -0500] "GET /radio.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:27 -0500] "GET /wp.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:29 -0500] "GET /abcd.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:31 -0500] "GET /nc4.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:33 -0500] "GET /wso.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:34 -0500] "GET /rss.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:36 -0500] "GET /ant.php HTTP/1.1" 404 24924 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:38 -0500] "GET /ioxi-o.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:40 -0500] "GET /wpc.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:42 -0500] "GET /wpc.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:44 -0500] "GET /js.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:46 -0500] "GET /ar.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:48 -0500] "GET /xmrlpc.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:50 -0500] "GET /xmrlpc.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:52 -0500] "GET /c.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:54 -0500] "GET /byp.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:56 -0500] "GET /fm1.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:23:58 -0500] "GET /doc.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:00 -0500] "GET /Angelv2.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:02 -0500] "GET /acp.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:04 -0500] "GET /gdn.php HTTP/1.1" 404 24917 "-" "-"
185.156.42.209 - - [09/Nov/2025:01:24:05 -0500] "POST /wp-cron.php?doing_wp_cron=1762669445.8482100963592529296875 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762669445.8482100963592529296875" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
172.207.9.124 - - [09/Nov/2025:01:24:07 -0500] "GET /asas.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:09 -0500] "GET /123.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:10 -0500] "GET /v1.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:12 -0500] "GET /v2.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:14 -0500] "GET /rk2.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:16 -0500] "GET /222.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:18 -0500] "GET /222.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:19 -0500] "GET /wp-22.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:21 -0500] "GET /lc.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:23 -0500] "GET /mini.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:25 -0500] "GET /lv.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:27 -0500] "GET /alfanew.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:29 -0500] "GET /m.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:31 -0500] "GET /db.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:33 -0500] "GET /aks.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:34 -0500] "GET /f.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:36 -0500] "GET /wp-files.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:38 -0500] "GET /cloud.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:40 -0500] "GET /asa.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:42 -0500] "GET /gecko-litespeed.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:44 -0500] "GET /bolt.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:46 -0500] "GET /NewFile.php HTTP/1.1" 404 24901 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:48 -0500] "GET /otuz1.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:49 -0500] "GET /classwithtostring.php?p= HTTP/1.1" 301 0 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:51 -0500] "GET /classwithtostring.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:53 -0500] "GET /info.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:55 -0500] "GET /mlex.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:57 -0500] "GET /file1.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:24:59 -0500] "GET /11.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:01 -0500] "GET /warm.PhP7 HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:03 -0500] "GET /zxl.php HTTP/1.1" 404 24917 "-" "-"
185.156.42.209 - - [09/Nov/2025:01:25:05 -0500] "POST /wp-cron.php?doing_wp_cron=1762669505.9200770854949951171875 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762669505.9200770854949951171875" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
172.207.9.124 - - [09/Nov/2025:01:25:07 -0500] "GET /wp-wso.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:10 -0500] "GET /uana.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:11 -0500] "GET /a.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:13 -0500] "GET /ayk.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:15 -0500] "GET /gawean.PhP7 HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:17 -0500] "GET /inc.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:19 -0500] "GET /api.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:21 -0500] "GET /ioxi-rex4.php7 HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:22 -0500] "GET /million.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:24 -0500] "GET /include.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:26 -0500] "GET /bala.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:28 -0500] "GET /category.tokens.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:30 -0500] "GET /mari.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:32 -0500] "GET /json.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:34 -0500] "GET /new.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:35 -0500] "GET /woh.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:37 -0500] "GET /admin-ajax.php HTTP/1.1" 404 24901 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:39 -0500] "GET /wp_mna.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:41 -0500] "GET /dex.php HTTP/1.1" 404 24917 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:43 -0500] "GET /file5.php HTTP/1.1" 404 24901 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:45 -0500] "GET /bolt.php HTTP/1.1" 404 24909 "-" "-"
172.207.9.124 - - [09/Nov/2025:01:25:47 -0500] "GET /flower.php HTTP/1.1" 404 24917 "-" "-"
185.156.42.209 - - [09/Nov/2025:05:17:20 -0500] "POST /wp-cron.php?doing_wp_cron=1762683440.6714689731597900390625 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762683440.6714689731597900390625" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
20.78.70.188 - - [09/Nov/2025:05:17:22 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 24924 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:24 -0500] "GET /neshe.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:26 -0500] "GET /031.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:28 -0500] "GET /ilex.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:30 -0500] "GET /sf9.php HTTP/1.1" 404 24909 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:32 -0500] "GET /sf.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:34 -0500] "GET /flex.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:35 -0500] "GET /222.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:37 -0500] "GET /444.php HTTP/1.1" 404 24909 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:39 -0500] "GET /file9.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:41 -0500] "GET /filesss.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:43 -0500] "GET /file88.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:45 -0500] "GET /gifclass4.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:47 -0500] "GET /555.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:49 -0500] "GET /333.php HTTP/1.1" 404 24901 "-" "-"
185.156.42.209 - - [09/Nov/2025:05:17:50 -0500] "POST /wp-cron.php?doing_wp_cron=1762683470.7035820484161376953125 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762683470.7035820484161376953125" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
20.78.70.188 - - [09/Nov/2025:05:17:52 -0500] "GET /hly.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:54 -0500] "GET /d12.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:55 -0500] "GET /2clas.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:17:58 -0500] "GET /bless5.php HTTP/1.1" 404 24901 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:00 -0500] "GET /file15.php HTTP/1.1" 404 24909 "-" "-"
185.156.42.209 - - [09/Nov/2025:05:18:01 -0500] "POST /wp-cron.php?doing_wp_cron=1762683481.8012580871582031250000 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762683481.8012580871582031250000" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
20.78.70.188 - - [09/Nov/2025:05:18:03 -0500] "GET /hk.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:05 -0500] "GET /alpa.php HTTP/1.1" 404 24917 "-" "-"
185.156.42.209 - - [09/Nov/2025:05:18:07 -0500] "POST /wp-cron.php?doing_wp_cron=1762683487.5549559593200683593750 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762683487.5549559593200683593750" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
20.78.70.188 - - [09/Nov/2025:05:18:08 -0500] "GET /file21.php HTTP/1.1" 404 24924 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:10 -0500] "GET /ssss.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:12 -0500] "GET /ut.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:14 -0500] "GET /inde.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:16 -0500] "GET /classgoto24.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:17 -0500] "GET /030.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:19 -0500] "GET /thh.php HTTP/1.1" 404 24909 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:21 -0500] "GET /indo.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:23 -0500] "GET /fileas.php HTTP/1.1" 404 24909 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:25 -0500] "GET /yellow.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:26 -0500] "GET /33.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:28 -0500] "GET /plss3.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:30 -0500] "GET /he.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:32 -0500] "GET /thxt.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:34 -0500] "GET /wfile.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:36 -0500] "GET /class20.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:38 -0500] "GET /1.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:41 -0500] "GET /usep.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:43 -0500] "GET /wa.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:45 -0500] "GET /wb.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:47 -0500] "GET /file1.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:49 -0500] "GET /2.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:50 -0500] "GET /a2.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:52 -0500] "GET /a.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:54 -0500] "GET /gmo.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:56 -0500] "GET /info.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:18:58 -0500] "GET /file2.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:00 -0500] "GET /lv.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:02 -0500] "GET /about.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:04 -0500] "GET /abcd.php HTTP/1.1" 404 24917 "-" "-"
185.156.42.209 - - [09/Nov/2025:05:19:06 -0500] "POST /wp-cron.php?doing_wp_cron=1762683546.2604451179504394531250 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762683546.2604451179504394531250" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
20.78.70.188 - - [09/Nov/2025:05:19:07 -0500] "GET /lock360.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:09 -0500] "GET /alfa.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:11 -0500] "GET /NewFile.php HTTP/1.1" 404 24909 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:13 -0500] "GET /atomlib.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:15 -0500] "GET /--.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:17 -0500] "GET /system_log.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:18 -0500] "GET /pp.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:20 -0500] "GET /geck.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:22 -0500] "GET /gm.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:24 -0500] "GET /makeasmtp.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:26 -0500] "GET /file4.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:27 -0500] "GET /lala.php HTTP/1.1" 404 24901 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:29 -0500] "GET /admin.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:31 -0500] "GET /7.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:33 -0500] "GET /file18.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:35 -0500] "GET /ffile.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:36 -0500] "GET /file7.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:38 -0500] "GET /we.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:40 -0500] "GET /gfile.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:42 -0500] "GET /jlex3.php HTTP/1.1" 404 24909 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:44 -0500] "GET /des.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:46 -0500] "GET /aaa.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:47 -0500] "GET /gifclass.php HTTP/1.1" 404 24909 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:50 -0500] "GET /vee.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:52 -0500] "GET /efile.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:54 -0500] "GET /afile.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:56 -0500] "GET /errorfile.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:19:58 -0500] "GET /f35.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:00 -0500] "GET /gool.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:03 -0500] "GET /haikh.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:05 -0500] "GET /135.php HTTP/1.1" 404 24917 "-" "-"
185.156.42.209 - - [09/Nov/2025:05:20:06 -0500] "POST /wp-cron.php?doing_wp_cron=1762683606.8940410614013671875000 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762683606.8940410614013671875000" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
20.78.70.188 - - [09/Nov/2025:05:20:08 -0500] "GET /enclas.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:10 -0500] "GET /ioxi-o.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:12 -0500] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:14 -0500] "GET /classwithtostring.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:16 -0500] "GET /image.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:18 -0500] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 0 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:20 -0500] "GET /wp-admin/wp-conflg.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:22 -0500] "GET /mail.php? HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:24 -0500] "GET /sx.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:26 -0500] "GET /max.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:28 -0500] "GET /size.php?p= HTTP/1.1" 301 0 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:29 -0500] "GET /size.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:31 -0500] "GET /mpxct.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:33 -0500] "GET /0xx.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:35 -0500] "GET /s.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:37 -0500] "GET /hq.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:38 -0500] "GET /blox.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:40 -0500] "GET /ant.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:42 -0500] "GET /fso.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:44 -0500] "GET /htaccess.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:46 -0500] "GET /wp-trackback.php HTTP/1.1" 404 146 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:48 -0500] "GET /wp-admin/about.php HTTP/1.1" 302 0 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:55 -0500] "GET /readme.php HTTP/1.1" 404 24909 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:57 -0500] "GET /v.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:20:59 -0500] "GET /sck.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:01 -0500] "GET /X7x.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:03 -0500] "GET /xpass.php HTTP/1.1" 404 24917 "-" "-"
185.156.42.209 - - [09/Nov/2025:05:21:05 -0500] "POST /wp-cron.php?doing_wp_cron=1762683665.5031299591064453125000 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762683665.5031299591064453125000" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
20.78.70.188 - - [09/Nov/2025:05:21:07 -0500] "GET /bless.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:09 -0500] "GET /bless2.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:11 -0500] "GET /bless6.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:13 -0500] "GET /bless10.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:15 -0500] "GET /bless11.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:17 -0500] "GET /wp-admin/js/index.php HTTP/1.1" 301 0 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:17 -0500] "GET /wp-admin/js/ HTTP/1.1" 200 17956 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:20 -0500] "GET /thoms.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:22 -0500] "GET /xsas.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:24 -0500] "GET /xrp.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:25 -0500] "GET /wp-freya.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:27 -0500] "GET /css/index.php HTTP/1.1" 301 0 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:29 -0500] "GET /css/ HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:31 -0500] "GET /file30.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:33 -0500] "GET /fesa.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:35 -0500] "GET /class-.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:37 -0500] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:39 -0500] "GET /up.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:41 -0500] "GET /403.php HTTP/1.1" 404 24909 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:43 -0500] "GET /9v6.php HTTP/1.1" 404 24924 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:44 -0500] "GET /lte7.php HTTP/1.1" 404 24909 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:46 -0500] "GET /1vbqo.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:48 -0500] "GET /l10n.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:50 -0500] "GET /tajj.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:52 -0500] "GET /fdd2.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:54 -0500] "GET /class9.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:56 -0500] "GET /sto.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:21:58 -0500] "GET /7h.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:22:00 -0500] "GET /fh26.php HTTP/1.1" 404 24909 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:22:02 -0500] "GET /ixj.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:22:03 -0500] "GET /x23.php HTTP/1.1" 404 24909 "-" "-"
185.156.42.209 - - [09/Nov/2025:05:22:05 -0500] "POST /wp-cron.php?doing_wp_cron=1762683725.5524449348449707031250 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762683725.5524449348449707031250" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
20.78.70.188 - - [09/Nov/2025:05:22:06 -0500] "GET /zeu.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:22:08 -0500] "GET /f2r4.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:22:13 -0500] "GET /lopst.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:22:15 -0500] "GET /gecko.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:22:17 -0500] "GET /0xs.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:22:19 -0500] "GET /Zeiss.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:22:21 -0500] "GET /x0x.php HTTP/1.1" 404 24917 "-" "-"
20.78.70.188 - - [09/Nov/2025:05:22:23 -0500] "GET /adin.php HTTP/1.1" 404 24909 "-" "-"
185.156.42.209 - - [09/Nov/2025:05:24:52 -0500] "POST /wp-cron.php?doing_wp_cron=1762683892.9268519878387451171875 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762683892.9268519878387451171875" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
4.241.170.137 - - [09/Nov/2025:05:24:54 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:24:56 -0500] "GET /wp-trackback.php HTTP/1.1" 404 146 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:24:58 -0500] "GET /wp-2019.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:00 -0500] "GET /lock360.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:02 -0500] "GET /wp-content/plugins/nomad/aec.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:04 -0500] "GET /aec.php HTTP/1.1" 404 24917 "-" "-"
185.156.42.209 - - [09/Nov/2025:05:25:05 -0500] "POST /wp-cron.php?doing_wp_cron=1762683905.9402859210968017578125 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762683905.9402859210968017578125" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
4.241.170.137 - - [09/Nov/2025:05:25:07 -0500] "GET /install.php HTTP/1.1" 404 24924 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:09 -0500] "GET /up.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:11 -0500] "GET /ty.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:13 -0500] "GET /media.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:15 -0500] "GET /as.php HTTP/1.1" 404 24924 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:17 -0500] "GET /yes.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:19 -0500] "GET /edit-tags.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:20 -0500] "GET /xmrlpc.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:22 -0500] "GET /xp.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:24 -0500] "GET /wp-login.php HTTP/1.1" 302 0 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:28 -0500] "GET /doc.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:30 -0500] "GET /go.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:32 -0500] "GET /INFECTED.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:34 -0500] "GET /radio.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:36 -0500] "GET /maint.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:38 -0500] "GET /13.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:40 -0500] "GET /db.php?u HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:42 -0500] "GET /ben.php HTTP/1.1" 404 24909 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:43 -0500] "GET /wp-configs.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:45 -0500] "GET /link.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:47 -0500] "GET /alfa-rex.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:49 -0500] "GET /403.php HTTP/1.1" 404 24909 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:51 -0500] "GET /json.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:53 -0500] "GET /buy.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:55 -0500] "GET /jp.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:25:58 -0500] "GET /mpvloi.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:00 -0500] "GET /mail.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:02 -0500] "GET /mah.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:04 -0500] "GET /item.php HTTP/1.1" 404 24917 "-" "-"
185.156.42.209 - - [09/Nov/2025:05:26:05 -0500] "POST /wp-cron.php?doing_wp_cron=1762683965.9371500015258789062500 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762683965.9371500015258789062500" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
4.241.170.137 - - [09/Nov/2025:05:26:06 -0500] "GET /wp-mail.php HTTP/1.1" 403 2686 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:09 -0500] "GET /hehe.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:11 -0500] "GET /inputs.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:13 -0500] "GET /f35.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:14 -0500] "GET /core.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:16 -0500] "GET /cc.php HTTP/1.1" 404 24901 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:18 -0500] "GET /edit.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:20 -0500] "GET /info.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:22 -0500] "GET /wp-damin.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:24 -0500] "GET /about.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:26 -0500] "GET /db.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:28 -0500] "GET /rk2.php HTTP/1.1" 404 24909 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:30 -0500] "GET /02.php HTTP/1.1" 404 24909 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:32 -0500] "GET /readme.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:34 -0500] "GET /admin.php HTTP/1.1" 404 24909 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:35 -0500] "GET /goat1.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:37 -0500] "GET /bless.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:39 -0500] "GET /simple.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:41 -0500] "GET /chosen.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:43 -0500] "GET /class.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:44 -0500] "GET /moon.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:46 -0500] "GET /cong.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:48 -0500] "GET /css_compare.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:50 -0500] "GET /mar.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:52 -0500] "GET /alfa.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:54 -0500] "GET /upload.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:55 -0500] "GET /manager.php HTTP/1.1" 404 24909 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:57 -0500] "GET /setup-config.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:26:59 -0500] "GET /test.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:01 -0500] "GET /network.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:03 -0500] "GET /getid3s.php HTTP/1.1" 404 24917 "-" "-"
185.156.42.209 - - [09/Nov/2025:05:27:05 -0500] "POST /wp-cron.php?doing_wp_cron=1762684025.8742129802703857421875 HTTP/1.1" 200 0 "http://artcosmetic.goodface.com.ua/wp-cron.php?doing_wp_cron=1762684025.8742129802703857421875" "WordPress/5.6.16; https://artcosmetic.goodface.com.ua"
4.241.170.137 - - [09/Nov/2025:05:27:07 -0500] "GET /wp.php HTTP/1.1" 404 24924 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:09 -0500] "GET /worksec.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:10 -0500] "GET /media.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:13 -0500] "GET /log.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:15 -0500] "GET /fm.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:17 -0500] "GET /about.php7 HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:18 -0500] "GET /function.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:20 -0500] "GET /filemanager.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:22 -0500] "GET /makeasmtp.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:24 -0500] "GET /fucku.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:26 -0500] "GET /wp_filemanager.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:28 -0500] "GET /atomlib.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:30 -0500] "GET /themes.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:33 -0500] "GET /defaults.php HTTP/1.1" 404 24909 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:35 -0500] "GET /packed.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:37 -0500] "GET /webadmin.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:39 -0500] "GET /system_log.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:41 -0500] "GET /classwithtostring.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:43 -0500] "GET /file.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:45 -0500] "GET /baxa1.phP8 HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:47 -0500] "GET /text.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:49 -0500] "GET /INFECTED.php HTTP/1.1" 404 24909 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:51 -0500] "GET /0x.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:53 -0500] "GET /wp-conflg.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:55 -0500] "GET /menu.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:57 -0500] "GET /dropdown.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:27:59 -0500] "GET /hYdXrMgTbH.php HTTP/1.1" 404 24917 "-" "-"
4.241.170.137 - - [09/Nov/2025:05:28:01 -0500] "GET /autoload_classmap.php HTTP/1.1" 404 24917 "-" "-"