File: D:/IISLogFiles/W3SVC13/u_ex260601.log
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-01 00:44:28
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-01 00:44:28 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env - 443 - 176.65.139.238 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1413 242 14
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-01 04:03:23
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-01 04:03:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.git/config - 443 - 93.123.109.221 HTTP/1.1 Mozilla/5.0+(Kubuntu;+Linux+i686)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/130.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1413 247 57
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-01 14:59:21
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-01 14:59:21 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 227
2026-06-01 14:59:21 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /error.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 181
2026-06-01 14:59:21 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wpo.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 182
2026-06-01 14:59:21 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /shellalfa.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 182
2026-06-01 14:59:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /simple.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 222
2026-06-01 14:59:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /8.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 202
2026-06-01 14:59:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/maint/index.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 78 182
2026-06-01 14:59:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /n.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 190
2026-06-01 14:59:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /s.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 183
2026-06-01 14:59:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cong.php p= 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 184
2026-06-01 14:59:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/fonts/about.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 182
2026-06-01 14:59:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /css.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 198
2026-06-01 14:59:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /lv.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 189
2026-06-01 14:59:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ee.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 194
2026-06-01 14:59:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /6.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 182
2026-06-01 14:59:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /system_log.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 197
2026-06-01 14:59:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ab.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 182
2026-06-01 14:59:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /lock360.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 182
2026-06-01 14:59:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /about.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 230
2026-06-01 14:59:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /222.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 191
2026-06-01 14:59:26 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /abcd.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 182
2026-06-01 14:59:26 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /gifclass.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 182
2026-06-01 14:59:26 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /enclas.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 182
2026-06-01 14:59:26 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /alfa.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 182
2026-06-01 14:59:26 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /we.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 188
2026-06-01 14:59:26 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fe5.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 194
2026-06-01 14:59:27 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /tgrs.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 183
2026-06-01 14:59:27 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ut.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 188
2026-06-01 14:59:27 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /a3.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 199
2026-06-01 14:59:27 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aa.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 195
2026-06-01 14:59:27 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.well-known/acme-challenge/about.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 90 192
2026-06-01 14:59:27 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /3.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 182
2026-06-01 14:59:28 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /f6.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 182
2026-06-01 14:59:28 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fm.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 182
2026-06-01 14:59:28 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /rrr.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 181
2026-06-01 14:59:28 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /usep.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 191
2026-06-01 14:59:28 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fm.php p= 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 182
2026-06-01 14:59:28 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /0x.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 182
2026-06-01 14:59:29 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /goat.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 233
2026-06-01 14:59:29 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /123.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 188
2026-06-01 14:59:29 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ioxi-o.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 234
2026-06-01 14:59:29 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /taktak.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 183
2026-06-01 14:59:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /tgrs.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 183
2026-06-01 14:59:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /gt.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 182
2026-06-01 14:59:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aghbvr.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 181
2026-06-01 14:59:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /miso.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 196
2026-06-01 14:59:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /naxc.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 182
2026-06-01 14:59:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fex.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 187
2026-06-01 14:59:31 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /taff.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 199
2026-06-01 14:59:31 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bless11.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 190
2026-06-01 14:59:31 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aj.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 182
2026-06-01 14:59:31 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /opts.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 204
2026-06-01 14:59:31 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wpo.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 197
2026-06-01 14:59:31 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /filer.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 182
2026-06-01 14:59:32 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /enclas.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 193
2026-06-01 14:59:32 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /en0.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 226
2026-06-01 14:59:32 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /kaza.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 195
2026-06-01 14:59:32 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wsd.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 198
2026-06-01 14:59:32 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /gifclass4.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 192
2026-06-01 14:59:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /info.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 194
2026-06-01 14:59:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /333.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 193
2026-06-01 14:59:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cfile.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 224
2026-06-01 14:59:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bless3.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 182
2026-06-01 14:59:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bless.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 193
2026-06-01 14:59:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /doti.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 190
2026-06-01 14:59:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /031.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 182
2026-06-01 14:59:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wfile.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 181
2026-06-01 14:59:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /lala.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 181
2026-06-01 14:59:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mac.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 182
2026-06-01 14:59:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /he.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 193
2026-06-01 14:59:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /plss3.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 182
2026-06-01 14:59:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ton.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 196
2026-06-01 14:59:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /33.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 202
2026-06-01 14:59:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /nfile.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 181
2026-06-01 14:59:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ffile.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 194
2026-06-01 14:59:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file18.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 182
2026-06-01 14:59:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file21.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 182
2026-06-01 14:59:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /yellow.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 182
2026-06-01 14:59:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file1.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 182
2026-06-01 14:59:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /geck.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 182
2026-06-01 14:59:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file4.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 198
2026-06-01 14:59:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file88.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 187
2026-06-01 14:59:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /7.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 223
2026-06-01 14:59:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /size.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 183
2026-06-01 14:59:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bolt.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 187
2026-06-01 14:59:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file8.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 181
2026-06-01 14:59:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file2.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 182
2026-06-01 14:59:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /vee.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 193
2026-06-01 14:59:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /a2.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 182
2026-06-01 14:59:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xxa.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 182
2026-06-01 14:59:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mlex.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 186
2026-06-01 14:59:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /030.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 189
2026-06-01 14:59:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /haa.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 189
2026-06-01 14:59:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xsox.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 190
2026-06-01 14:59:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /classgoto24.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 189
2026-06-01 14:59:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /inde.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 182
2026-06-01 14:59:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /akk.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 182
2026-06-01 14:59:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /alpa.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 182
2026-06-01 14:59:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /finny.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 182
2026-06-01 14:59:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file15.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 182
2026-06-01 14:59:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /0x0x.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 200
2026-06-01 14:59:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2clas.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 189
2026-06-01 14:59:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file9.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 182
2026-06-01 14:59:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aaa.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 183
2026-06-01 14:59:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/blocks/post-comments-form/ - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 92 232
2026-06-01 14:59:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/js/ - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 194
2026-06-01 14:59:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/ - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 192
2026-06-01 14:59:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/modern/ - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 183
2026-06-01 14:59:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /pucci.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 182
2026-06-01 14:59:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/blocks/details/ - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 188
2026-06-01 14:59:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/blocks/audio/ - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 79 190
2026-06-01 14:59:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /100.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 187
2026-06-01 14:59:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/l10n/ - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 191
2026-06-01 14:59:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/uploads/ - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 73 182
2026-06-01 14:59:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cgi-bin/index.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 185
2026-06-01 14:59:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/css/dist/ - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 76 183
2026-06-01 14:59:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php p= 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 114 190
2026-06-01 14:59:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ilex.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 196
2026-06-01 14:59:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /tor.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 182
2026-06-01 14:59:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /klex.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 190
2026-06-01 14:59:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /shell1.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 225
2026-06-01 14:59:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sec.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 186
2026-06-01 14:59:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /filesss.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 182
2026-06-01 14:59:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ea.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 195
2026-06-01 14:59:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /gi.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 183
2026-06-01 14:59:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /10.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 182
2026-06-01 14:59:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /11.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 193
2026-06-01 14:59:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /12.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 182
2026-06-01 14:59:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /13.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 197
2026-06-01 14:59:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /hi.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 191
2026-06-01 14:59:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /v.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 182
2026-06-01 14:59:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ar.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 191
2026-06-01 14:59:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /chosen.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 182
2026-06-01 14:59:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /155.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 183
2026-06-01 14:59:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ppp.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 199
2026-06-01 14:59:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /201.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 216
2026-06-01 14:59:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /install.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 191
2026-06-01 14:59:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /max.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 182
2026-06-01 14:59:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /1.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 182
2026-06-01 14:59:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bak.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 182
2026-06-01 14:59:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ini.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 195
2026-06-01 14:59:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mail.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 200
2026-06-01 14:59:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dlu.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 197
2026-06-01 14:59:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /zde.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 196
2026-06-01 14:59:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ifm.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 188
2026-06-01 14:59:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /redi.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 182
2026-06-01 14:59:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fns.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 183
2026-06-01 14:59:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /pent.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 182
2026-06-01 14:59:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wsx.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 193
2026-06-01 14:59:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /r79.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 189
2026-06-01 14:59:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mpxct.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 189
2026-06-01 14:59:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /x3.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 193
2026-06-01 14:59:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wan.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 182
2026-06-01 14:59:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /iov.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 182
2026-06-01 14:59:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /RsR.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 203
2026-06-01 14:59:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ouh.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 196
2026-06-01 14:59:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /133.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 189
2026-06-01 14:59:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /x0.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 182
2026-06-01 14:59:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wsr2.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 182
2026-06-01 14:59:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /hq.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 188
2026-06-01 14:59:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /blox.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 182
2026-06-01 14:59:53 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ant.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 193
2026-06-01 14:59:53 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fso.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 200
2026-06-01 14:59:53 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/admin.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 74 189
2026-06-01 14:59:53 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2P.php - 80 - 191.235.102.176 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 235
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-01 15:49:50
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-01 15:49:50 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 176.65.139.239 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1413 238 15
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-01 16:41:15
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-01 16:41:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 205.210.31.147 HTTP/1.1 Hello+from+Palo+Alto+Networks,+find+out+more+about+our+scans+in+https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity - - phpmyadmin.itpartnership.com 403 503 5 1394 208 193
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-01 18:45:38
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-01 18:45:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 443 - 74.7.175.140 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - phpmyadmin.itpartnership.com 403 503 5 1233 423 93
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-01 22:27:14
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-01 22:27:14 W3SVC13 itpwinwebsvr22 5.101.172.196 POST / - 443 - 52.200.228.241 HTTP/1.1 Mozilla/5.0 - - phpmyadmin.itpartnership.com 403 503 5 1394 1102 176
2026-06-01 22:27:14 W3SVC13 itpwinwebsvr22 5.101.172.196 POST / - 80 - 52.200.228.241 HTTP/1.1 Mozilla/5.0 - - phpmyadmin.itpartnership.com 403 503 5 1372 1102 80