FM / lyceum

/usr/local/apache/domlogs/lyceum

Name	Size	Mode	Actions
dir.lyceum.com.ua	46111	0640	edit dl rm
dir.lyceum.com.ua-ssl_log	78723	0640	edit dl rm
fm.lyceum.com.ua	24665	0640	edit dl rm
fm.lyceum.com.ua-ssl_log	15169	0640	edit dl rm
lyceum.com.ua.lyceum.domain.com.ua	4000	0640	edit dl rm
lyceum.com.ua.lyceum.domain.com.ua-ssl_log	27900	0640	edit dl rm
moodle.lyceum.com.ua	719541	0640	edit dl rm
moodle.lyceum.com.ua-ssl_log	67087	0640	edit dl rm
new.lyceum.com.ua	91691	0640	edit dl rm
new.lyceum.com.ua-ssl_log	387724	0640	edit dl rm
pv.lyceum.com.ua	36614	0640	edit dl rm
pv.lyceum.com.ua-ssl_log	152361	0640	edit dl rm

Edit: /usr/local/apache/domlogs/lyceum/fm.lyceum.com.ua-ssl_log (15169B)

146.59.57.40 - - [02/Sep/2026:15:19:22 +0300] "GET /1ohycts/pqfsvba/vlhpxjw/index.php HTTP/1.1" 404 27 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
151.243.177.125 - - [02/Sep/2026:15:35:12 +0300] "POST /vtuncld/tjorsva/jsvqtke/index.php?pass=JcBiaCe2QZW HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
151.243.177.125 - - [02/Sep/2026:15:36:55 +0300] "POST /1ohycts/pqfsvba/vlhpxjw/index.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
57.141.24.124 - - [02/Sep/2026:15:45:58 +0300] "GET /gwnhxdp/?C=S;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
195.178.110.66 - - [02/Sep/2026:17:56:39 +0300] "GET /api/session/properties HTTP/1.1" 404 355 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)"
64.23.213.231 - - [02/Sep/2026:18:16:35 +0300] "GET /j1dsbth/ HTTP/1.1" 200 815 "https://www.google.com/search?q=lyceum" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
195.178.110.22 - - [02/Sep/2026:18:39:37 +0300] "GET /backup.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:37 +0300] "GET /backup.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:37 +0300] "GET /backup.tar.gz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:37 +0300] "GET /backup.tgz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:37 +0300] "GET /backup.rar HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:37 +0300] "GET /backup.7z HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /backups.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /www.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /www.tar.gz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /wwwroot.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /wwwroot.tar.gz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /htdocs.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /htdocs.tar.gz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /public_html.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /public_html.tar.gz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /web.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /website.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /site.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /html.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /app.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /old.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /bak.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /data.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /backup.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /db.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /database.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /dump.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /db_backup.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /dbdump.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /mysql.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /mysqldump.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /data.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /users.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /www.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /site.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /sql.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /1.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /localhost.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /backup.sql.gz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /db.sql.gz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /dump.sql.gz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /database.sql.gz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /db_backup.sql.gz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /mysql.sql.gz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /database.sqlite HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /db.sqlite HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /backup.bak HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /db.bak HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /database.bak HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /data.bak HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /wp-content/uploads/dump.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /wp-content/uploads/backup.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /wp-content/uploads/database.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /wp-content/database.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /wp-content/mysql.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /backups/database.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /www.fm.lyceum.com.ua.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /www.fm.lyceum.com.ua.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /www.fm.lyceum.com.ua_db.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /fm.zip HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /fm.tar.gz HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /fm.sql HTTP/1.1" 404 355 "-" "-"
195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /2026.zip HTTP/1.1" 404 355 "-" "-"
134.199.210.124 - - [02/Sep/2026:18:40:03 +0300] "GET /jzbpwtg/ HTTP/1.1" 200 815 "https://www.google.com/search?q=lyceum" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
32.198.51.168 - - [02/Sep/2026:19:41:58 +0300] "POST / HTTP/1.1" 404 355 "https://www.fm.lyceum.com.ua/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
64.227.111.15 - - [02/Sep/2026:20:22:00 +0300] "GET / HTTP/1.1" 200 5594 "https://www.google.com/search?q=lyceum" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
80.209.229.158 - - [02/Sep/2026:20:44:12 +0300] "POST /1ohycts/pqfsvba/vlhpxjw/index.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36"
51.68.136.80 - - [02/Sep/2026:21:16:20 +0300] "POST /vtuncld/tjorsva/jsvqtke/index.php?pass=JcBiaCe2QZW HTTP/1.1" 404 27 "https://fm.lyceum.com.ua/vtuncld/tjorsva/jsvqtke/index.php?pass=JcBiaCe2QZW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0"
173.252.82.12 - - [02/Sep/2026:21:47:54 +0300] "GET /robots.txt HTTP/1.1" 404 355 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
57.141.24.1 - - [02/Sep/2026:21:48:00 +0300] "GET /vqntl1j/njvsmdp/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
52.90.150.115 - - [02/Sep/2026:22:19:55 +0300] "GET / HTTP/1.1" 200 5594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
173.236.246.239 - - [02/Sep/2026:22:37:00 +0300] "GET / HTTP/1.1" 200 5594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
57.141.24.6 - - [02/Sep/2026:22:56:49 +0300] "GET /vqntl1j/?C=S;O=D HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
24.144.93.79 - - [02/Sep/2026:23:18:59 +0300] "GET /xunvipf/ HTTP/1.1" 200 815 "https://www.google.com/search?q=lyceum" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
57.141.24.116 - - [02/Sep/2026:23:50:14 +0300] "GET /vqntl1j/?C=N;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
57.141.24.48 - - [02/Sep/2026:23:57:01 +0300] "GET /vqntl1j/?C=D;O=D HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
57.141.24.49 - - [02/Sep/2026:23:57:43 +0300] "GET /vqntl1j/?C=M;O=D HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
57.141.24.68 - - [03/Sep/2026:00:17:02 +0300] "GET /btkexgd/?C=N;O=D HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
57.141.24.72 - - [03/Sep/2026:00:48:18 +0300] "GET /gwnhxdp/?C=M;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
57.141.24.65 - - [03/Sep/2026:00:57:12 +0300] "GET /bsyaqwd/?C=S;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
57.141.24.92 - - [03/Sep/2026:01:07:42 +0300] "GET /btkexgd/qgoxlzp/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
137.184.4.212 - - [03/Sep/2026:01:13:13 +0300] "GET /?C=M;O=A HTTP/1.1" 200 5594 "https://www.google.com/search?q=lyceum" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
51.15.192.215 - - [03/Sep/2026:01:17:08 +0300] "GET / HTTP/1.1" 200 5594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
144.172.89.127 - - [03/Sep/2026:01:23:40 +0300] "GET /.git/config HTTP/1.1" 404 355 "-" "Mozilla/5.0 (X11; Linux x86_64)"
57.141.24.17 - - [03/Sep/2026:01:31:42 +0300] "GET /gwnhxdp/hiujsld/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
87.106.32.6 - - [03/Sep/2026:02:03:55 +0300] "GET /j1dsbth/owtespd/svexuca/index.php HTTP/1.1" 404 27 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
57.141.24.6 - - [03/Sep/2026:02:17:39 +0300] "GET /gwnhxdp/?C=D;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
57.141.24.115 - - [03/Sep/2026:03:02:49 +0300] "GET /bsyaqwd/?C=M;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
57.141.24.78 - - [03/Sep/2026:03:31:24 +0300] "GET /bsyaqwd/tyglofz/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
57.141.24.79 - - [03/Sep/2026:03:35:57 +0300] "GET /bsyaqwd/?C=N;O=D HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
57.141.24.95 - - [03/Sep/2026:03:50:56 +0300] "GET /bsyaqwd/?C=D;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
35.224.58.101 - - [03/Sep/2026:04:20:20 +0300] "POST / HTTP/1.1" 404 355 "-" "Python/3.9 aiohttp/3.13.5"
160.187.147.141 - - [03/Sep/2026:04:34:11 +0300] "GET / HTTP/1.1" 200 5774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"

146.59.57.40 - - [02/Sep/2026:15:19:22 +0300] "GET /1ohycts/pqfsvba/vlhpxjw/index.php HTTP/1.1" 404 27 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 151.243.177.125 - - [02/Sep/2026:15:35:12 +0300] "POST /vtuncld/tjorsva/jsvqtke/index.php?pass=JcBiaCe2QZW HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36" 151.243.177.125 - - [02/Sep/2026:15:36:55 +0300] "POST /1ohycts/pqfsvba/vlhpxjw/index.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36" 57.141.24.124 - - [02/Sep/2026:15:45:58 +0300] "GET /gwnhxdp/?C=S;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 195.178.110.66 - - [02/Sep/2026:17:56:39 +0300] "GET /api/session/properties HTTP/1.1" 404 355 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" 64.23.213.231 - - [02/Sep/2026:18:16:35 +0300] "GET /j1dsbth/ HTTP/1.1" 200 815 "https://www.google.com/search?q=lyceum" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 195.178.110.22 - - [02/Sep/2026:18:39:37 +0300] "GET /backup.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:37 +0300] "GET /backup.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:37 +0300] "GET /backup.tar.gz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:37 +0300] "GET /backup.tgz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:37 +0300] "GET /backup.rar HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:37 +0300] "GET /backup.7z HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /backups.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /www.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /www.tar.gz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /wwwroot.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /wwwroot.tar.gz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /htdocs.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /htdocs.tar.gz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /public_html.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /public_html.tar.gz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /web.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /website.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /site.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /html.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /app.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /old.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /bak.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /data.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /backup.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /db.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /database.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /dump.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /db_backup.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:38 +0300] "GET /dbdump.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /mysql.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /mysqldump.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /data.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /users.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /www.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /site.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /sql.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /1.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /localhost.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /backup.sql.gz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /db.sql.gz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /dump.sql.gz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /database.sql.gz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /db_backup.sql.gz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /mysql.sql.gz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /database.sqlite HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /db.sqlite HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /backup.bak HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /db.bak HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /database.bak HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /data.bak HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /wp-content/uploads/dump.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /wp-content/uploads/backup.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /wp-content/uploads/database.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:39 +0300] "GET /wp-content/database.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /wp-content/mysql.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /backups/database.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /www.fm.lyceum.com.ua.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /www.fm.lyceum.com.ua.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /www.fm.lyceum.com.ua_db.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /fm.zip HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /fm.tar.gz HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /fm.sql HTTP/1.1" 404 355 "-" "-" 195.178.110.22 - - [02/Sep/2026:18:39:40 +0300] "GET /2026.zip HTTP/1.1" 404 355 "-" "-" 134.199.210.124 - - [02/Sep/2026:18:40:03 +0300] "GET /jzbpwtg/ HTTP/1.1" 200 815 "https://www.google.com/search?q=lyceum" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 32.198.51.168 - - [02/Sep/2026:19:41:58 +0300] "POST / HTTP/1.1" 404 355 "https://www.fm.lyceum.com.ua/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 64.227.111.15 - - [02/Sep/2026:20:22:00 +0300] "GET / HTTP/1.1" 200 5594 "https://www.google.com/search?q=lyceum" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 80.209.229.158 - - [02/Sep/2026:20:44:12 +0300] "POST /1ohycts/pqfsvba/vlhpxjw/index.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36" 51.68.136.80 - - [02/Sep/2026:21:16:20 +0300] "POST /vtuncld/tjorsva/jsvqtke/index.php?pass=JcBiaCe2QZW HTTP/1.1" 404 27 "https://fm.lyceum.com.ua/vtuncld/tjorsva/jsvqtke/index.php?pass=JcBiaCe2QZW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0" 173.252.82.12 - - [02/Sep/2026:21:47:54 +0300] "GET /robots.txt HTTP/1.1" 404 355 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 57.141.24.1 - - [02/Sep/2026:21:48:00 +0300] "GET /vqntl1j/njvsmdp/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 52.90.150.115 - - [02/Sep/2026:22:19:55 +0300] "GET / HTTP/1.1" 200 5594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 173.236.246.239 - - [02/Sep/2026:22:37:00 +0300] "GET / HTTP/1.1" 200 5594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 57.141.24.6 - - [02/Sep/2026:22:56:49 +0300] "GET /vqntl1j/?C=S;O=D HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 24.144.93.79 - - [02/Sep/2026:23:18:59 +0300] "GET /xunvipf/ HTTP/1.1" 200 815 "https://www.google.com/search?q=lyceum" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 57.141.24.116 - - [02/Sep/2026:23:50:14 +0300] "GET /vqntl1j/?C=N;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 57.141.24.48 - - [02/Sep/2026:23:57:01 +0300] "GET /vqntl1j/?C=D;O=D HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 57.141.24.49 - - [02/Sep/2026:23:57:43 +0300] "GET /vqntl1j/?C=M;O=D HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 57.141.24.68 - - [03/Sep/2026:00:17:02 +0300] "GET /btkexgd/?C=N;O=D HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 57.141.24.72 - - [03/Sep/2026:00:48:18 +0300] "GET /gwnhxdp/?C=M;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 57.141.24.65 - - [03/Sep/2026:00:57:12 +0300] "GET /bsyaqwd/?C=S;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 57.141.24.92 - - [03/Sep/2026:01:07:42 +0300] "GET /btkexgd/qgoxlzp/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 137.184.4.212 - - [03/Sep/2026:01:13:13 +0300] "GET /?C=M;O=A HTTP/1.1" 200 5594 "https://www.google.com/search?q=lyceum" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 51.15.192.215 - - [03/Sep/2026:01:17:08 +0300] "GET / HTTP/1.1" 200 5594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 144.172.89.127 - - [03/Sep/2026:01:23:40 +0300] "GET /.git/config HTTP/1.1" 404 355 "-" "Mozilla/5.0 (X11; Linux x86_64)" 57.141.24.17 - - [03/Sep/2026:01:31:42 +0300] "GET /gwnhxdp/hiujsld/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 87.106.32.6 - - [03/Sep/2026:02:03:55 +0300] "GET /j1dsbth/owtespd/svexuca/index.php HTTP/1.1" 404 27 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 57.141.24.6 - - [03/Sep/2026:02:17:39 +0300] "GET /gwnhxdp/?C=D;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 57.141.24.115 - - [03/Sep/2026:03:02:49 +0300] "GET /bsyaqwd/?C=M;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 57.141.24.78 - - [03/Sep/2026:03:31:24 +0300] "GET /bsyaqwd/tyglofz/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 57.141.24.79 - - [03/Sep/2026:03:35:57 +0300] "GET /bsyaqwd/?C=N;O=D HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 57.141.24.95 - - [03/Sep/2026:03:50:56 +0300] "GET /bsyaqwd/?C=D;O=A HTTP/1.1" 200 815 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" 35.224.58.101 - - [03/Sep/2026:04:20:20 +0300] "POST / HTTP/1.1" 404 355 "-" "Python/3.9 aiohttp/3.13.5" 160.187.147.141 - - [03/Sep/2026:04:34:11 +0300] "GET / HTTP/1.1" 200 5774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"