185.156.42.209 - - [08/Nov/2025:12:49:49 -0500] "POST /wp-cron.php?doing_wp_cron=1762624188.9430930614471435546875 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 198.235.24.25 - - [08/Nov/2025:12:49:49 -0500] "GET / HTTP/1.1" 200 3939 "-" "-" 119.28.101.45 - - [08/Nov/2025:14:02:40 -0500] "GET /robots.txt HTTP/1.1" 200 606 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 185.156.42.209 - - [08/Nov/2025:16:51:00 -0500] "POST /wp-cron.php?doing_wp_cron=1762638660.5938870906829833984375 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.37.96.143 - - [08/Nov/2025:16:51:01 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 10058 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:03 -0500] "GET /shoha.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:04 -0500] "GET /past.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:06 -0500] "GET /20ojy.php HTTP/1.1" 200 9964 "-" "-" 185.156.42.209 - - [08/Nov/2025:16:51:08 -0500] "POST /wp-cron.php?doing_wp_cron=1762638668.8209569454193115234375 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.37.96.143 - - [08/Nov/2025:16:51:08 -0500] "GET /block-bindings.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:11 -0500] "GET /%20colors.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:12 -0500] "GET /layout.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:14 -0500] "GET /end.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:15 -0500] "GET /uploat.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:17 -0500] "GET /uploxe.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:19 -0500] "GET /credits.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:21 -0500] "GET /pwnd.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:25 -0500] "GET /Jcrop.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:26 -0500] "GET /go.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:28 -0500] "GET /alfa-rex.php7 HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:29 -0500] "GET /pepe.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:30 -0500] "GET /pt.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:33 -0500] "GET /about.php7 HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:35 -0500] "GET /abruzi.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:36 -0500] "GET /1wx.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:39 -0500] "GET /gool.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:41 -0500] "GET /wp-is.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:43 -0500] "GET /ae.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:45 -0500] "GET /Auth.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:47 -0500] "GET /ropyx.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:49 -0500] "GET /14.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:50 -0500] "GET /2.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:51 -0500] "GET /Hd.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:53 -0500] "GET /getid3s.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:54 -0500] "GET /Alex-Cross.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:56 -0500] "GET /404.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:57 -0500] "GET /403.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:51:58 -0500] "GET /chosen.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:00 -0500] "GET /admin-post.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:01 -0500] "GET /pomo.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:03 -0500] "GET /up.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:05 -0500] "GET /wp.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:06 -0500] "GET /content.php HTTP/1.1" 200 9964 "-" "-" 185.156.42.209 - - [08/Nov/2025:16:52:07 -0500] "POST /wp-cron.php?doing_wp_cron=1762638727.7182750701904296875000 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.37.96.143 - - [08/Nov/2025:16:52:07 -0500] "GET /cong.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:10 -0500] "GET /blue.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:11 -0500] "GET /css.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:12 -0500] "GET /js.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:14 -0500] "GET /user.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:15 -0500] "GET /coffee.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:16 -0500] "GET /system.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:18 -0500] "GET /shell.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:19 -0500] "GET /m.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:20 -0500] "GET /sto.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:21 -0500] "GET /db.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:23 -0500] "GET /222.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:24 -0500] "GET /o.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:25 -0500] "GET /an.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:26 -0500] "GET /gmo.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:28 -0500] "GET /file.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:29 -0500] "GET /file5.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:30 -0500] "GET /file17.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:32 -0500] "GET /file32.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:33 -0500] "GET /file3.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:35 -0500] "GET /file6.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:36 -0500] "GET /file15.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:37 -0500] "GET /file9.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:39 -0500] "GET /error.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:40 -0500] "GET /NH19T66T.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:41 -0500] "GET /rei.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:43 -0500] "GET /666.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:45 -0500] "GET /777.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:46 -0500] "GET /888.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:48 -0500] "GET /555.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:49 -0500] "GET /333.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:51 -0500] "GET /zeal.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:52 -0500] "GET /file1.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:54 -0500] "GET /file2.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:55 -0500] "GET /filesss.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:57 -0500] "GET /file13.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:52:59 -0500] "GET /atomlib.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:00 -0500] "GET /manager.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:02 -0500] "GET /abcd.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:03 -0500] "GET /efile.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:05 -0500] "GET /file18.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:06 -0500] "GET /520.php HTTP/1.1" 200 9964 "-" "-" 185.156.42.209 - - [08/Nov/2025:16:53:08 -0500] "POST /wp-cron.php?doing_wp_cron=1762638788.2896580696105957031250 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.37.96.143 - - [08/Nov/2025:16:53:08 -0500] "GET /031.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:10 -0500] "GET /file7.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:12 -0500] "GET /file4.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:14 -0500] "GET /2%25.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:15 -0500] "GET /1%25.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:16 -0500] "GET /wp-freya.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:18 -0500] "GET /keu.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:19 -0500] "GET /file88.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:21 -0500] "GET /0%25.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:22 -0500] "GET /lock360.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:24 -0500] "GET /jmfi2.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:25 -0500] "GET /class.1.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:26 -0500] "GET /fs.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:28 -0500] "GET /CLA.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:30 -0500] "GET /gfile.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:31 -0500] "GET /eauu.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:33 -0500] "GET /we.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:34 -0500] "GET /fe5.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:35 -0500] "GET /cccc.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:37 -0500] "GET /shell1.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:38 -0500] "GET /gm.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:40 -0500] "GET /lala.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:42 -0500] "GET /hexx.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:43 -0500] "GET /444.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:45 -0500] "GET /a2.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:46 -0500] "GET /cfile.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:47 -0500] "GET /lv.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:49 -0500] "GET /goat.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:50 -0500] "GET /aa.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:52 -0500] "GET /vast.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:54 -0500] "GET /cool.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:56 -0500] "GET /yanki.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:57 -0500] "GET /bolt.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:53:58 -0500] "GET /nfile.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:00 -0500] "GET /ilex.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:01 -0500] "GET /des.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:03 -0500] "GET /ext.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:05 -0500] "GET /axx.php HTTP/1.1" 200 9964 "-" "-" 185.156.42.209 - - [08/Nov/2025:16:54:07 -0500] "POST /wp-cron.php?doing_wp_cron=1762638847.2945148944854736328125 HTTP/1.1" 200 0 "-" "WordPress/6.8.3; https://gumballpay.goodface.com.ua" 20.37.96.143 - - [08/Nov/2025:16:54:07 -0500] "GET /wp-update.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:09 -0500] "GET /yasnu.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:11 -0500] "GET /new4.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:12 -0500] "GET /ava.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:14 -0500] "GET /ioxi2.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:16 -0500] "GET /gfile1.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:18 -0500] "GET /ffile.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:19 -0500] "GET /rsnu.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:21 -0500] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 200 10058 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:22 -0500] "GET /default.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:23 -0500] "GET /dfre.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:25 -0500] "GET /pp.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:26 -0500] "GET /13.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:28 -0500] "GET /usep.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:29 -0500] "GET /3.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:31 -0500] "GET /moon.php HTTP/1.1" 200 9964 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:32 -0500] "GET /0x.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:34 -0500] "GET /02.php HTTP/1.1" 200 9957 "-" "-" 20.37.96.143 - - [08/Nov/2025:16:54:35 -0500] "GET /xv.php HTTP/1.1" 200 9964 "-" "-"