File: D:/IISLogFiles/W3SVC13/u_ex260628.log
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-28 01:02:30
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-28 01:02:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 34.91.119.153 HTTP/1.1 Scrapy/2.16.0+(+https://scrapy.org) - - phpmyadmin.itpartnership.com 403 503 5 1394 229 12
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-28 02:57:30
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-28 02:57:30 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 66.132.186.192 HTTP/1.1 Mozilla/5.0+(compatible;+CensysInspect/1.1;++https://about.censys.io/) - - phpmyadmin.itpartnership.com 403 503 5 1372 174 94
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-28 03:49:36
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-28 03:49:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 86
2026-06-28 03:49:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /this_is_a_new_hello_world.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 82
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /water.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 32
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /3PJcpMFsD8B.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 31
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sid4.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 73
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ortasekerli1.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 70 32
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /academy.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 73
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /100.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 80
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /s1.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 32
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 32
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /flox.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 32
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /jj.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 57
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /w.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 32
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /19.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 48
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /like.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 44
2026-06-28 03:49:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mg.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 83
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sec.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 32
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ggb.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 32
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /we.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 37
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /moon.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 40
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /a1.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 31
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /insc.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 79
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wmore1.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 71
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wdone1.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 32
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dx.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 32
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /popo.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 39
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /public/css.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 31
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-test.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 40
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/css/index.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 79 32
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/uploads/2021/02/index.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 90 32
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fone1.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 53
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-post-data.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 70 46
2026-06-28 03:49:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dr.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 83
2026-06-28 03:49:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /nano.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 31
2026-06-28 03:49:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xa.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 33
2026-06-28 03:49:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xper1.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 76
2026-06-28 03:49:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /as.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 73
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dropdown.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 31
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /h02ugyh.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 32
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /link.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 48
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /op.php.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 36
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bob.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 48
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /themes.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 34
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /nwflm.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 32
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /zc-208.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 36
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /turkshell.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 33
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cc3.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 74
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /solo1.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 39
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xpwer1.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 31
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aaa.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 32
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /txets.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 31
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aboute.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 36
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-info.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 56
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ingfo.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 71
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /1996.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 33
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /de.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 32
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /a7.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 41
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /drykl.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 59
2026-06-28 03:49:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mds.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 73
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2000.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 46
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /crgio.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 33
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file61.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 32
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-temp.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 60
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bthil.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 32
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /llyuxaqd.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 34
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-care.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 32
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-blink.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 32
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wert.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 81
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xwpg.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 31
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /js.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 39
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-pass.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 52
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xxa.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 38
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /op.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 32
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ad.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 85
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xmu.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 32
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /st.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 45
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /white.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 32
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-file-120.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 32
2026-06-28 03:49:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /setup.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 74
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /yas.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 74
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xmini.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 75
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /201.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 31
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sixxis.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 41
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /h2h.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 31
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /samll.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 50
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ccs.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 40
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aa.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 32
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /rip.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 47
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file5.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 61
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dex.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 52
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cro.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 77
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /lol.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 32
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /iov.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 35
2026-06-28 03:49:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /g30DRm.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 85
2026-06-28 03:49:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /zxcs.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 77
2026-06-28 03:49:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /0d.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 32
2026-06-28 03:49:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /olik.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 40
2026-06-28 03:49:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /yuuds.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 31
2026-06-28 03:49:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ano.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 41
2026-06-28 03:49:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /btex.php - 80 - 20.91.188.128 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 80
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-28 06:23:34
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-28 06:23:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 66.132.186.162 HTTP/1.1 Mozilla/5.0+(compatible;+CensysInspect/1.1;++https://about.censys.io/) - - phpmyadmin.itpartnership.com 403 503 5 1394 174 94
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-28 08:45:18
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-28 08:45:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 329 80
2026-06-28 08:45:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/ID3/license.txt - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 358 160
2026-06-28 08:45:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /feed/ - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 336 160
2026-06-28 08:45:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xmlrpc.php rsd 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 345 159
2026-06-28 08:45:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /blog/wp-includes/wlwmanifest.xml - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 159
2026-06-28 08:45:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /web/wp-includes/wlwmanifest.xml - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 362 187
2026-06-28 08:45:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wordpress/wp-includes/wlwmanifest.xml - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 368 207
2026-06-28 08:45:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp/wp-includes/wlwmanifest.xml - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 361 178
2026-06-28 08:45:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2020/wp-includes/wlwmanifest.xml - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 162
2026-06-28 08:45:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2019/wp-includes/wlwmanifest.xml - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 185
2026-06-28 08:45:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2021/wp-includes/wlwmanifest.xml - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 198
2026-06-28 08:45:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /shop/wp-includes/wlwmanifest.xml - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 174
2026-06-28 08:45:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp1/wp-includes/wlwmanifest.xml - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 362 163
2026-06-28 08:45:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /test/wp-includes/wlwmanifest.xml - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 163
2026-06-28 08:45:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /site/wp-includes/wlwmanifest.xml - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 363 160
2026-06-28 08:45:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cms/wp-includes/wlwmanifest.xml - 80 - 34.85.225.165 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 362 160
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-28 14:55:11
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 76
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /this_is_a_new_hello_world.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 67
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /7.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 29
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /faze.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 73
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /011i.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 72
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /axds.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 27
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /nz.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 33
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /biufile.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 30
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /asdf.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 25
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /solo1.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 26
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /Q1.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 31
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /Q3.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 25
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /class.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 26
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /znar.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 36
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /link.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 26
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xa.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 26
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xll.asp - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 32
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /class14.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 27
2026-06-28 14:55:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ctex1.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 80
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-blink.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 37
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-head.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 26
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /spurwing.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 26
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /root.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 25
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /auu.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 26
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /miru1.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 26
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-monkonas.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 25
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cr7.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 42
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ovaaotqdq.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 39
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wax.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 38
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /shadow.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 30
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cream1.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 34
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wgvsn.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 75
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /lufix.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 72
2026-06-28 14:55:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2P.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 70
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2P.update.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 52
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /db.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 28
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /rrdbtjru.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 27
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /feed.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 26
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /Sfn2kmdefault.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 71 26
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /iKScdefault.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 73
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bawal.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 27
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /BDKR28.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 40
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /odf7udtspqtpxzyxmw2rcCdefault.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 87 26
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /iQps3ldefault.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 71 26
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xxa.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 28
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dxipc.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 33
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /class-t.api.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 68
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-ws68.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 26
2026-06-28 14:55:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /a11.php - 80 - 20.100.185.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 69
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-06-28 21:03:33
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-06-28 21:03:32 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 34.195.125.215 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/137.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1394 224 126