HEX
Server: Microsoft-IIS/10.0
System: Windows NT ITPWINWEBSVR22 10.0 build 20348 (Windows Server 2022) AMD64
User: www.conferencesearch.co.uk (0)
PHP: 8.3.30
Disabled: NONE
Upload Files
File: D:/IISLogFiles/W3SVC13/u_ex260531.log
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-31 01:56:05
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-31 01:56:04 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 203.55.131.4 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/133.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1394 215 9
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-31 08:51:58
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-31 08:51:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 71.6.134.230 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/133.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1394 215 239
2026-05-31 08:59:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /favicon.ico - 443 - 71.6.134.230 HTTP/2 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/133.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1233 254 281
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-31 11:29:25
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-31 11:29:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 195.178.110.159 HTTP/1.1 Mozilla/5.0+(Ubuntu;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/142.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1413 237 30
2026-05-31 11:30:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 195.178.110.159 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:129.0)+Gecko/20100101+Firefox/129.0 - - phpmyadmin.itpartnership.com 403 503 5 1413 213 41
2026-05-31 11:37:43 W3SVC13 itpwinwebsvr22 5.101.172.196 HEAD / - 443 - 67.210.97.33 HTTP/1.1 ct2ips/1.0 - - phpmyadmin.itpartnership.com 403 503 5 161 79 151
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-31 16:25:16
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-31 16:25:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-json/gravitysmtp/v1/tests/mock-data page=gravitysmtp-settings 443 - 45.148.10.120 HTTP/1.1 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.25+Safari/537.36+Core/1.70.3704.400+QQBrowser/10.4.3587.400 - - phpmyadmin.itpartnership.com 403 503 5 1413 348 59
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-31 16:50:53
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-31 16:50:53 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 34.55.112.196 HTTP/1.1 Mozilla/5.0+(compatible;+CMS-Checker/1.0;++https://example.com) - - phpmyadmin.itpartnership.com 403 503 5 1372 154 303
2026-05-31 16:58:02 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 198.235.24.180 HTTP/1.1 Hello+from+Palo+Alto+Networks,+find+out+more+about+our+scans+in+https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity - - phpmyadmin.itpartnership.com 403 503 5 1372 208 9
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-31 19:04:44
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-31 19:04:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 104
2026-05-31 19:04:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ff.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 104
2026-05-31 19:04:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /x.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 104
2026-05-31 19:04:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /tires.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 116
2026-05-31 19:04:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-block.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 126
2026-05-31 19:04:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-der.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 104
2026-05-31 19:04:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ah25.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 104
2026-05-31 19:04:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /inputs.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 131
2026-05-31 19:04:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /samll.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-05-31 19:04:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/blue/file.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 87 117
2026-05-31 19:04:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /favicon.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 104
2026-05-31 19:04:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aboutc.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 149
2026-05-31 19:04:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-load.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 107
2026-05-31 19:04:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aevly.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 104
2026-05-31 19:04:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /atkno.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 159
2026-05-31 19:04:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mini.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 114
2026-05-31 19:04:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-thi.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 123
2026-05-31 19:04:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-kd4xalrg7m.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 71 105
2026-05-31 19:04:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /amax.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 104
2026-05-31 19:04:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wehrman.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 105
2026-05-31 19:04:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /b.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 112
2026-05-31 19:04:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-sing.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 153
2026-05-31 19:04:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-links-opml.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 71 107
2026-05-31 19:04:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /edit.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 105
2026-05-31 19:04:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wmore1.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 122
2026-05-31 19:04:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-access.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 112
2026-05-31 19:04:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /1.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 117
2026-05-31 19:04:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sbhu.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 104
2026-05-31 19:04:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bgymj.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 121
2026-05-31 19:04:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file30.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 104
2026-05-31 19:04:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /yellow.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 107
2026-05-31 19:04:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /reze.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 104
2026-05-31 19:04:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wefile.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 148
2026-05-31 19:04:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xda.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 155
2026-05-31 19:04:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /revealability.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 71 150
2026-05-31 19:04:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /forbidals.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 137
2026-05-31 19:04:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /i.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 150
2026-05-31 19:04:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /900.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 105
2026-05-31 19:04:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /kj.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 106
2026-05-31 19:04:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wuasr.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-05-31 19:04:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /t.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 115
2026-05-31 19:04:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /class-t.api.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 119
2026-05-31 19:04:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-slss.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 132
2026-05-31 19:04:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /crgio.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 138
2026-05-31 19:04:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /Okxob.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 108
2026-05-31 19:04:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mass.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 104
2026-05-31 19:04:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dropdown.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 104
2026-05-31 19:04:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-good.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 104
2026-05-31 19:04:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mifta.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-05-31 19:04:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /amxloxxr.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 145
2026-05-31 19:04:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file59.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 104
2026-05-31 19:04:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /asasx.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 153
2026-05-31 19:04:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/network/edit.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 79 104
2026-05-31 19:04:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ms-edit.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 106
2026-05-31 19:04:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file4.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 144
2026-05-31 19:04:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /hplfuns.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 104
2026-05-31 19:04:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /1index.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 104
2026-05-31 19:04:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-su.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 148
2026-05-31 19:04:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ccou.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 105
2026-05-31 19:04:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-ver.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 105
2026-05-31 19:04:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /db.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 104
2026-05-31 19:04:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /lib.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 104
2026-05-31 19:04:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sys.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 105
2026-05-31 19:04:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /lala.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 104
2026-05-31 19:04:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bthil.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 104
2026-05-31 19:04:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fun.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 107
2026-05-31 19:04:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-the.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 104
2026-05-31 19:04:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /vx.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 158
2026-05-31 19:04:53 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ff1.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 138
2026-05-31 19:04:53 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /explorer/index_.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 73 123
2026-05-31 19:04:53 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /error.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 159
2026-05-31 19:04:53 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /333.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 105
2026-05-31 19:04:54 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ftde.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 105
2026-05-31 19:04:54 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /app.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 104
2026-05-31 19:04:54 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cilus.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 104
2026-05-31 19:04:54 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /a5.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 115
2026-05-31 19:04:54 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /test.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 104
2026-05-31 19:04:54 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aa.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 151
2026-05-31 19:04:54 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /term.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 111
2026-05-31 19:04:54 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file61.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 152
2026-05-31 19:04:55 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /la.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 156
2026-05-31 19:04:55 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /first.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 109
2026-05-31 19:04:55 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /pass4.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 154
2026-05-31 19:04:55 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-firewall.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 106
2026-05-31 19:04:55 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /lv.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 104
2026-05-31 19:04:55 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /yas.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 105
2026-05-31 19:04:55 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-trackback.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 70 104
2026-05-31 19:04:55 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /png.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 104
2026-05-31 19:04:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-at.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 119
2026-05-31 19:04:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /database.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 105
2026-05-31 19:04:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /like.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 104
2026-05-31 19:04:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xxx.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 106
2026-05-31 19:04:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /new.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 110
2026-05-31 19:04:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sid3.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 111
2026-05-31 19:04:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /txets.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 154
2026-05-31 19:04:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /shell20211028.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 71 105
2026-05-31 19:04:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-wz.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 104
2026-05-31 19:04:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /albin.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 104
2026-05-31 19:04:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ok.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 149
2026-05-31 19:04:59 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /drykl.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 145
2026-05-31 19:04:59 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /atomlib.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 134
2026-05-31 19:04:59 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /z.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 104
2026-05-31 19:04:59 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-png.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 136
2026-05-31 19:04:59 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/uploads/admin.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 82 104
2026-05-31 19:04:59 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/maint/wp-is.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 78 110
2026-05-31 19:04:59 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sadcut1.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 104
2026-05-31 19:05:00 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 149
2026-05-31 19:05:00 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /x.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 104
2026-05-31 19:05:00 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-conflg.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 150
2026-05-31 19:05:01 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-update.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 158
2026-05-31 19:05:01 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /hello.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-05-31 19:05:01 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /NewFile.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 152
2026-05-31 19:05:01 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bless5.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 105
2026-05-31 19:05:02 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /v2.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 105
2026-05-31 19:05:02 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp4.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 104
2026-05-31 19:05:02 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bless11.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 117
2026-05-31 19:05:02 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fileas.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 104
2026-05-31 19:05:02 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-aothait.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 104
2026-05-31 19:05:02 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /motu.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 159
2026-05-31 19:05:02 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fff.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 105
2026-05-31 19:05:02 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp5.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 105
2026-05-31 19:05:03 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-act.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 120
2026-05-31 19:05:03 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /myfile.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 135
2026-05-31 19:05:03 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xqq.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 156
2026-05-31 19:05:03 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /kolda.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-05-31 19:05:04 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /666.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 104
2026-05-31 19:05:04 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xoot.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 104
2026-05-31 19:05:04 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /vgtyu.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 122
2026-05-31 19:05:04 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /06.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 104
2026-05-31 19:05:04 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /erty.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-05-31 19:05:04 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fs.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 106
2026-05-31 19:05:04 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /66.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 150
2026-05-31 19:05:06 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /grsiuk.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 104
2026-05-31 19:05:06 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /new4.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 105
2026-05-31 19:05:06 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /pouhg.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 104
2026-05-31 19:05:06 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xa.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 121
2026-05-31 19:05:06 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ms.php - 80 - 20.9.88.9 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 151
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-31 22:16:03
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-31 22:16:03 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env.production - 443 - 45.148.10.120 HTTP/1.1 Mozilla/5.0+(X11;+FreeBSD+amd64;+rv:54.0)+Gecko/20100101+Firefox/54.0 - - phpmyadmin.itpartnership.com 403 503 5 1413 217 58
2026-05-31 22:16:03 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env - 443 - 45.148.10.120 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_14_5)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3882.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1413 256 64
2026-05-31 22:16:03 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.aws/credentials - 443 - 45.148.10.120 HTTP/1.1 SuperBot/4.4.0.60+(Windows+XP) - - phpmyadmin.itpartnership.com 403 503 5 1413 179 13
2026-05-31 22:16:03 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aws.env - 443 - 45.148.10.120 HTTP/1.1 Mozilla/5.0+(X11;+U;+Linux+i686;+pt-PT;+rv:1.9.2.3)+Gecko/20100402+Iceweasel/3.6.3+(like+Firefox/3.6.3)+GTB7.0 - - phpmyadmin.itpartnership.com 403 503 5 1413 250 13
2026-05-31 22:28:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 153.75.250.146 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/125.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1394 215 75
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-31 23:18:57
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-31 23:18:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 74.7.242.13 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+GPTBot/1.4;++https://openai.com/gptbot) - - phpmyadmin.itpartnership.com 403 503 5 1233 317 93
2026-05-31 23:18:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 443 - 74.7.175.140 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - phpmyadmin.itpartnership.com 403 503 5 1233 423 92