185.156.42.209 - - [08/Nov/2025:12:49:49 -0500] "POST /wp-cron.php?doing_wp_cron=1762624188.9430930614471435546875 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 198.235.24.25 - - [08/Nov/2025:12:49:49 -0500] "GET / HTTP/1.1" 200 3939 "-" "-" 119.28.101.45 - - [08/Nov/2025:14:02:40 -0500] "GET /robots.txt HTTP/1.1" 200 606 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 185.156.42.209 - - [08/Nov/2025:16:51:00 -0500] "POST /wp-cron.php?doing_wp_cron=1762638660.5938870906829833984375 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.37.96.143 - - [08/Nov/2025:16:51:01 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 10058 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:03 -0500] "GET /shoha.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:04 -0500] "GET /past.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:06 -0500] "GET /20ojy.php HTTP/1.1" 200 9964 "-" "-" 185.156.42.209 - - [08/Nov/2025:16:51:08 -0500] "POST /wp-cron.php?doing_wp_cron=1762638668.8209569454193115234375 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.37.96.143 - - [08/Nov/2025:16:51:08 -0500] "GET /block-bindings.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:11 -0500] "GET /%20colors.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:12 -0500] "GET /layout.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:14 -0500] "GET /end.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:15 -0500] "GET /uploat.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:17 -0500] "GET /uploxe.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:19 -0500] "GET /credits.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:21 -0500] "GET /pwnd.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:25 -0500] "GET /Jcrop.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:26 -0500] "GET /go.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:28 -0500] "GET /alfa-rex.php7 HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:29 -0500] "GET /pepe.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:30 -0500] "GET /pt.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:33 -0500] "GET /about.php7 HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:35 -0500] "GET /abruzi.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:36 -0500] "GET /1wx.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:39 -0500] "GET /gool.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:41 -0500] "GET /wp-is.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:43 -0500] "GET /ae.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:45 -0500] "GET /Auth.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:47 -0500] "GET /ropyx.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:49 -0500] "GET /14.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:50 -0500] "GET /2.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:51 -0500] "GET /Hd.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:53 -0500] "GET /getid3s.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:54 -0500] "GET /Alex-Cross.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:56 -0500] "GET /404.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:57 -0500] "GET /403.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:58 -0500] "GET /chosen.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:00 -0500] "GET /admin-post.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:01 -0500] "GET /pomo.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:03 -0500] "GET /up.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:05 -0500] "GET /wp.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:06 -0500] "GET /content.php HTTP/1.1" 200 9964 "-" "-" 185.156.42.209 - - [08/Nov/2025:16:52:07 -0500] "POST /wp-cron.php?doing_wp_cron=1762638727.7182750701904296875000 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.37.96.143 - - [08/Nov/2025:16:52:07 -0500] "GET /cong.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:10 -0500] "GET /blue.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:11 -0500] "GET /css.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:12 -0500] "GET /js.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:14 -0500] "GET /user.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:15 -0500] "GET /coffee.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:16 -0500] "GET /system.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:18 -0500] "GET /shell.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:19 -0500] "GET /m.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:20 -0500] "GET /sto.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:21 -0500] "GET /db.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:23 -0500] "GET /222.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:24 -0500] "GET /o.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:25 -0500] "GET /an.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:26 -0500] "GET /gmo.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:28 -0500] "GET /file.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:29 -0500] "GET /file5.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:30 -0500] "GET /file17.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:32 -0500] "GET /file32.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:33 -0500] "GET /file3.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:35 -0500] "GET /file6.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:36 -0500] "GET /file15.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:37 -0500] "GET /file9.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:39 -0500] "GET /error.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:40 -0500] "GET /NH19T66T.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:41 -0500] "GET /rei.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:43 -0500] "GET /666.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:45 -0500] "GET /777.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:46 -0500] "GET /888.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:48 -0500] "GET /555.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:49 -0500] "GET /333.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:51 -0500] "GET /zeal.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:52 -0500] "GET /file1.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:54 -0500] "GET /file2.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:55 -0500] "GET /filesss.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:57 -0500] "GET /file13.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:59 -0500] "GET /atomlib.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:00 -0500] "GET /manager.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:02 -0500] "GET /abcd.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:03 -0500] "GET /efile.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:05 -0500] "GET /file18.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:06 -0500] "GET /520.php HTTP/1.1" 200 9964 "-" "-" 185.156.42.209 - - [08/Nov/2025:16:53:08 -0500] "POST /wp-cron.php?doing_wp_cron=1762638788.2896580696105957031250 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.37.96.143 - - [08/Nov/2025:16:53:08 -0500] "GET /031.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:10 -0500] "GET /file7.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:12 -0500] "GET /file4.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:14 -0500] "GET /2%25.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:15 -0500] "GET /1%25.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:16 -0500] "GET /wp-freya.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:18 -0500] "GET /keu.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:19 -0500] "GET /file88.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:21 -0500] "GET /0%25.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:22 -0500] "GET /lock360.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:24 -0500] "GET /jmfi2.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:25 -0500] "GET /class.1.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:26 -0500] "GET /fs.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:28 -0500] "GET /CLA.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:30 -0500] "GET /gfile.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:31 -0500] "GET /eauu.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:33 -0500] "GET /we.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:34 -0500] "GET /fe5.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:35 -0500] "GET /cccc.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:37 -0500] "GET /shell1.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:38 -0500] "GET /gm.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:40 -0500] "GET /lala.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:42 -0500] "GET /hexx.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:43 -0500] "GET /444.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:45 -0500] "GET /a2.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:46 -0500] "GET /cfile.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:47 -0500] "GET /lv.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:49 -0500] "GET /goat.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:50 -0500] "GET /aa.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:52 -0500] "GET /vast.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:54 -0500] "GET /cool.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:56 -0500] "GET /yanki.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:57 -0500] "GET /bolt.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:58 -0500] "GET /nfile.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:00 -0500] "GET /ilex.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:01 -0500] "GET /des.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:03 -0500] "GET /ext.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:05 -0500] "GET /axx.php HTTP/1.1" 200 9964 "-" "-" 185.156.42.209 - - [08/Nov/2025:16:54:07 -0500] "POST /wp-cron.php?doing_wp_cron=1762638847.2945148944854736328125 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.37.96.143 - - [08/Nov/2025:16:54:07 -0500] "GET /wp-update.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:09 -0500] "GET /yasnu.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:11 -0500] "GET /new4.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:12 -0500] "GET /ava.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:14 -0500] "GET /ioxi2.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:16 -0500] "GET /gfile1.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:18 -0500] "GET /ffile.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:19 -0500] "GET /rsnu.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:21 -0500] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 200 10058 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:22 -0500] "GET /default.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:23 -0500] "GET /dfre.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:25 -0500] "GET /pp.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:26 -0500] "GET /13.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:28 -0500] "GET /usep.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:29 -0500] "GET /3.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:31 -0500] "GET /moon.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:32 -0500] "GET /0x.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:34 -0500] "GET /02.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:35 -0500] "GET /xv.php HTTP/1.1" 200 9964 "-" "-" 185.156.42.209 - - [09/Nov/2025:01:34:04 -0500] "POST /wp-cron.php?doing_wp_cron=1762670044.3853609561920166015625 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.78.70.188 - - [09/Nov/2025:01:34:04 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:06 -0500] "GET /031.php HTTP/1.1" 200 3939 "-" "-" 185.156.42.209 - - [09/Nov/2025:01:34:08 -0500] "POST /wp-cron.php?doing_wp_cron=1762670048.1515378952026367187500 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.78.70.188 - - [09/Nov/2025:01:34:08 -0500] "GET /ilex.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:10 -0500] "GET /flex.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:11 -0500] "GET /222.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:13 -0500] "GET /444.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:14 -0500] "GET /file9.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:15 -0500] "GET /filesss.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:16 -0500] "GET /file88.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:18 -0500] "GET /gifclass4.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:19 -0500] "GET /555.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:20 -0500] "GET /333.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:22 -0500] "GET /hly.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:23 -0500] "GET /d12.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:24 -0500] "GET /2clas.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:25 -0500] "GET /bless5.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:27 -0500] "GET /file15.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:28 -0500] "GET /hk.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:29 -0500] "GET /alpa.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:31 -0500] "GET /file21.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:32 -0500] "GET /ssss.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:34 -0500] "GET /ut.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:35 -0500] "GET /inde.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:36 -0500] "GET /classgoto24.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:38 -0500] "GET /030.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:39 -0500] "GET /thh.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:40 -0500] "GET /indo.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:41 -0500] "GET /fileas.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:43 -0500] "GET /yellow.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:44 -0500] "GET /33.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:46 -0500] "GET /plss3.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:47 -0500] "GET /he.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:48 -0500] "GET /thxt.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:50 -0500] "GET /wfile.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:51 -0500] "GET /class20.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:53 -0500] "GET /1.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:54 -0500] "GET /usep.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:55 -0500] "GET /wa.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:57 -0500] "GET /wb.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:58 -0500] "GET /file1.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:34:59 -0500] "GET /2.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:01 -0500] "GET /a2.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:02 -0500] "GET /a.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:04 -0500] "GET /gmo.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:05 -0500] "GET /info.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:06 -0500] "GET /file2.php HTTP/1.1" 200 3939 "-" "-" 185.156.42.209 - - [09/Nov/2025:01:35:08 -0500] "POST /wp-cron.php?doing_wp_cron=1762670108.2630810737609863281250 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.78.70.188 - - [09/Nov/2025:01:35:08 -0500] "GET /lv.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:10 -0500] "GET /about.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:12 -0500] "GET /abcd.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:13 -0500] "GET /lock360.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:15 -0500] "GET /alfa.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:16 -0500] "GET /NewFile.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:17 -0500] "GET /atomlib.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:19 -0500] "GET /--.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:20 -0500] "GET /system_log.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:21 -0500] "GET /pp.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:23 -0500] "GET /geck.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:24 -0500] "GET /gm.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:25 -0500] "GET /makeasmtp.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:26 -0500] "GET /file4.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:28 -0500] "GET /lala.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:29 -0500] "GET /admin.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:30 -0500] "GET /7.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:32 -0500] "GET /file18.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:33 -0500] "GET /ffile.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:34 -0500] "GET /file7.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:36 -0500] "GET /we.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:37 -0500] "GET /gfile.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:38 -0500] "GET /jlex3.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:40 -0500] "GET /des.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:41 -0500] "GET /aaa.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:42 -0500] "GET /gifclass.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:43 -0500] "GET /vee.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:45 -0500] "GET /efile.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:46 -0500] "GET /afile.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:47 -0500] "GET /errorfile.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:49 -0500] "GET /f35.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:50 -0500] "GET /gool.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:51 -0500] "GET /haikh.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:53 -0500] "GET /135.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:54 -0500] "GET /enclas.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:55 -0500] "GET /ioxi-o.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:57 -0500] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 403 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:58 -0500] "GET /classwithtostring.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:35:59 -0500] "GET /image.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:01 -0500] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 403 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:02 -0500] "GET /mail.php? HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:03 -0500] "GET /sx.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:05 -0500] "GET /max.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:06 -0500] "GET /size.php?p= HTTP/1.1" 200 3939 "-" "-" 185.156.42.209 - - [09/Nov/2025:01:36:07 -0500] "POST /wp-cron.php?doing_wp_cron=1762670167.5181939601898193359375 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.78.70.188 - - [09/Nov/2025:01:36:07 -0500] "GET /mpxct.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:09 -0500] "GET /0xx.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:11 -0500] "GET /s.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:12 -0500] "GET /hq.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:13 -0500] "GET /blox.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:15 -0500] "GET /ant.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:16 -0500] "GET /fso.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:17 -0500] "GET /htaccess.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:19 -0500] "GET /wp-trackback.php HTTP/1.1" 200 3751 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:20 -0500] "GET /wp-admin/about.php HTTP/1.1" 403 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:21 -0500] "GET /readme.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:22 -0500] "GET /v.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:24 -0500] "GET /sck.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:25 -0500] "GET /X7x.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:26 -0500] "GET /xpass.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:27 -0500] "GET /bless.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:29 -0500] "GET /bless2.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:30 -0500] "GET /bless6.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:31 -0500] "GET /bless10.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:33 -0500] "GET /bless11.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:34 -0500] "GET /wp-admin/js/index.php HTTP/1.1" 403 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:35 -0500] "GET /thoms.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:36 -0500] "GET /xsas.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:38 -0500] "GET /xrp.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:39 -0500] "GET /wp-freya.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:40 -0500] "GET /css/index.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:41 -0500] "GET /file30.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:43 -0500] "GET /fesa.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:44 -0500] "GET /class-.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:46 -0500] "GET /up.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:47 -0500] "GET /403.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:48 -0500] "GET /9v6.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:50 -0500] "GET /lte7.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:51 -0500] "GET /1vbqo.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:52 -0500] "GET /l10n.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:54 -0500] "GET /tajj.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:55 -0500] "GET /fdd2.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:57 -0500] "GET /class9.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:36:58 -0500] "GET /sto.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:00 -0500] "GET /7h.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:01 -0500] "GET /fh26.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:02 -0500] "GET /ixj.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:04 -0500] "GET /x23.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:05 -0500] "GET /zeu.php HTTP/1.1" 200 3939 "-" "-" 185.156.42.209 - - [09/Nov/2025:01:37:07 -0500] "POST /wp-cron.php?doing_wp_cron=1762670227.2180380821228027343750 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.78.70.188 - - [09/Nov/2025:01:37:07 -0500] "GET /f2r4.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:09 -0500] "GET /lopst.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:11 -0500] "GET /gecko.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:12 -0500] "GET /0xs.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:13 -0500] "GET /Zeiss.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:15 -0500] "GET /x0x.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:16 -0500] "GET /adin.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:18 -0500] "GET /wsz.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:19 -0500] "GET /ahy66.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:21 -0500] "GET /thai.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:22 -0500] "GET /dex.php HTTP/1.1" 200 3939 "-" "-" 20.78.70.188 - - [09/Nov/2025:01:37:23 -0500] "GET /zen.php HTTP/1.1" 200 3939 "-" "-"