HEX
Server: Microsoft-IIS/10.0
System: Windows NT ITPWINWEBSVR22 10.0 build 20348 (Windows Server 2022) AMD64
User: www.conferencesearch.co.uk (0)
PHP: 8.3.30
Disabled: NONE
$ pwd: D:/IISLogFiles/W3SVC13/
Upload Files
File: D:/IISLogFiles/W3SVC13/u_ex260515.log
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-15 01:24:34
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-15 01:24:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 194.164.107.5 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/133.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1394 215 220
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-15 02:38:32
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-15 02:38:31 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 23.94.133.71 HTTP/1.1 Mozilla/5.0+(Debian;+Linux+x86_64;+rv:128.0)+Gecko/20100101+Firefox/128.0 - - phpmyadmin.itpartnership.com 403 503 5 1420 206 133
2026-05-15 02:38:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /favicon.ico - 443 - 23.94.133.71 HTTP/1.1 Mozilla/5.0+(Debian;+Linux+x86_64;+rv:128.0)+Gecko/20100101+Firefox/128.0 - - phpmyadmin.itpartnership.com 403 503 5 1420 217 138
2026-05-15 02:50:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.git/config - 443 - 104.236.124.194 HTTP/1.1 Mozilla/5.0+(Linux;+Android+7.0;+Vivo+8)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/76.0.3809.111+Mobile+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1413 265 75
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-15 06:15:34
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-15 06:15:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 88.98.246.98 HTTP/2 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+26_4_2+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+CriOS/148.0.7778.166+Mobile/15E148+Safari/604.1 - - phpmyadmin.itpartnership.com 200 0 0 4553 486 656
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-15 07:31:34
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-15 07:31:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 147.185.132.27 HTTP/1.1 Hello+from+Palo+Alto+Networks,+find+out+more+about+our+scans+in+https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity - - phpmyadmin.itpartnership.com 403 503 5 1372 208 90
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-15 08:14:47
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.zsh_history - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 159 24
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.production - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 162 23
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.profile - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 155 22
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.claude/.credentials.json - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 172 25
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 151 23
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.aws/config - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 158 25
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.bash_history - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 160 22
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.development - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 163 25
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.aws/credentials - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 163 26
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.backup - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 158 27
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.bashrc - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 154 31
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.claude/settings.json - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 168 28
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 147 24
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.local - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 157 29
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /opt/.env - 80 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1391 155 29
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.zsh_history - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 159 18
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.claude/settings.json - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 168 19
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.bash_history - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 160 19
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.bashrc - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 154 20
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.production - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 162 20
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /opt/.env - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 155 19
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 147 19
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.claude/.credentials.json - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 172 18
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.development - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 163 20
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.backup - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 158 18
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.aws/credentials - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 163 18
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.local - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 157 18
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.aws/config - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 158 19
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.profile - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 155 20
2026-05-15 08:14:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env - 443 - 51.89.7.66 HTTP/1.1 Mozilla/5.0+(compatible;+scanner/2.0) - - phpmyadmin.itpartnership.com 403 503 5 1413 151 22
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-15 14:26:58
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-15 14:26:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 104.168.115.241 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 157 197
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-15 16:29:39
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-15 16:29:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 443 - 74.7.241.162 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.3;+robots.txt;++https://openai.com/searchbot - - phpmyadmin.itpartnership.com 403 503 5 1233 423 100
@ Telegram