HEX
Server: Microsoft-IIS/10.0
System: Windows NT ITPWINWEBSVR22 10.0 build 20348 (Windows Server 2022) AMD64
User: www.conferencesearch.co.uk (0)
PHP: 8.3.30
Disabled: NONE
$ pwd: D:/IISLogFiles/W3SVC13/
Upload Files
File: D:/IISLogFiles/W3SVC13/u_ex260525.log
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-25 00:51:30
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 329 42
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/ID3/license.txt - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 358 85
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /feed/ - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 336 85
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xmlrpc.php rsd 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 345 85
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /blog/wp-includes/wlwmanifest.xml - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 86
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /web/wp-includes/wlwmanifest.xml - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 362 86
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wordpress/wp-includes/wlwmanifest.xml - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 368 86
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp/wp-includes/wlwmanifest.xml - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 361 86
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2020/wp-includes/wlwmanifest.xml - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 86
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2019/wp-includes/wlwmanifest.xml - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 85
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2021/wp-includes/wlwmanifest.xml - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 86
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /shop/wp-includes/wlwmanifest.xml - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 86
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp1/wp-includes/wlwmanifest.xml - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 362 86
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /test/wp-includes/wlwmanifest.xml - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 86
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /site/wp-includes/wlwmanifest.xml - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 87
2026-05-25 00:51:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cms/wp-includes/wlwmanifest.xml - 80 - 91.224.92.99 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 362 87
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-25 10:49:20
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-25 10:49:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 205.210.31.177 HTTP/1.1 Hello+from+Palo+Alto+Networks,+find+out+more+about+our+scans+in+https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity - - phpmyadmin.itpartnership.com 403 503 5 1372 208 243
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-25 12:00:13
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-25 12:00:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:149.0)+Gecko/20100101+Firefox/149.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 174 100
2026-05-25 12:00:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10.15;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1394 188 100
2026-05-25 12:00:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /config/service-account.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 341 101
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 318 101
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /application_default_credentials.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36+Edg/147.0.0.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 364 100
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /firebase-credentials.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/145.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 333 100
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /google-credentials.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 321 100
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /gcp-credentials.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 328 100
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /gcp-service-account.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 338 100
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sa-key.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:149.0)+Gecko/20100101+Firefox/149.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 288 100
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /firebase-service-account.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36+Edg/146.0.0.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 351 100
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /serviceAccountKey.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36+Edg/147.0.0.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 344 100
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.local - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 308 101
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /service-account.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.4+Safari/605.1.15 - - phpmyadmin.itpartnership.com 403 503 5 1372 334 101
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /credentials.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:149.0)+Gecko/20100101+Firefox/149.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 283 101
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /api/.env - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10.15;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 289 101
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /backend/.env - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 279 101
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.aws/credentials - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:149.0)+Gecko/20100101+Firefox/149.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 293 101
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /firebase.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 311 102
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /app/.env - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 285 102
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /firebase-adminsdk.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 299 102
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sa-private-key.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:149.0)+Gecko/20100101+Firefox/149.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 286 102
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /keyfile.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 279 102
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /key.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10.15;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 289 102
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /service-account-key.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36+Edg/147.0.0.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 346 102
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /client_secret.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.3+Safari/605.1.15 - - phpmyadmin.itpartnership.com 403 503 5 1372 332 102
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /secrets.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+18_4+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.4+Mobile/15E148+Safari/604.1 - - phpmyadmin.itpartnership.com 403 503 5 1372 344 102
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /client_secrets.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 333 103
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /google-service-account.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36+Edg/147.0.0.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 355 103
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.production - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/145.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 323 103
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /app/credentials.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36+Edg/146.0.0.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 342 103
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /api/client_secret.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 330 103
2026-05-25 12:00:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /config/credentials.json - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.4+Safari/605.1.15 - - phpmyadmin.itpartnership.com 403 503 5 1372 337 103
2026-05-25 12:00:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+18_4+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.4+Mobile/15E148+Safari/604.1 - - phpmyadmin.itpartnership.com 403 503 5 1372 277 100
2026-05-25 12:00:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.production.copy - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 318 100
2026-05-25 12:00:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.git/HEAD - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/145.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 317 102
2026-05-25 12:00:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.git/config - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 288 102
2026-05-25 12:00:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.git/FETCH_HEAD - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10.15;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 296 102
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.git/refs/heads/main - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 287 101
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.copy - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 323 101
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.local.save - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 313 102
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.production.orig - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+18_4+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.4+Mobile/15E148+Safari/604.1 - - phpmyadmin.itpartnership.com 403 503 5 1372 352 102
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.production.old - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:149.0)+Gecko/20100101+Firefox/149.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 286 102
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.local.bak - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 312 102
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.git/logs/HEAD - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:149.0)+Gecko/20100101+Firefox/149.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 281 103
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.production.backup - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36+Edg/147.0.0.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 344 103
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env~ - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+18_4+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.4+Mobile/15E148+Safari/604.1 - - phpmyadmin.itpartnership.com 403 503 5 1372 337 103
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.save - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.4+Safari/605.1.15 - - phpmyadmin.itpartnership.com 403 503 5 1372 323 103
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.backup - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36+Edg/146.0.0.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 333 104
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.old - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36+Edg/147.0.0.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 336 104
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.swp - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.3+Safari/605.1.15 - - phpmyadmin.itpartnership.com 403 503 5 1372 322 104
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.local~ - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/145.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 319 104
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.production.bak - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:149.0)+Gecko/20100101+Firefox/149.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 296 105
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.git/refs/heads/master - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:149.0)+Gecko/20100101+Firefox/149.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 299 108
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.local.orig - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10.15;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 296 108
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.bak - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36+Edg/147.0.0.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 330 108
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.production~ - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36+Edg/146.0.0.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 338 108
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.local.old - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 322 108
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.local.swp - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 291 109
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.orig - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 317 109
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.local.copy - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:150.0)+Gecko/20100101+Firefox/150.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 282 109
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.production.swp - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.4+Safari/605.1.15 - - phpmyadmin.itpartnership.com 403 503 5 1372 333 109
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.local.backup - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 331 109
2026-05-25 12:00:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.production.save - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36+Edg/147.0.0.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 348 109
2026-05-25 12:00:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 207.241.173.169 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 314 100
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-25 14:03:57
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-25 14:03:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 198.235.24.171 HTTP/1.1 Hello+from+Palo+Alto+Networks,+find+out+more+about+our+scans+in+https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity - - phpmyadmin.itpartnership.com 403 503 5 1394 208 10
@ Telegram