HEX
Server: Microsoft-IIS/10.0
System: Windows NT ITPWINWEBSVR22 10.0 build 20348 (Windows Server 2022) AMD64
User: www.conferencesearch.co.uk (0)
PHP: 8.3.30
Disabled: NONE
$ pwd: D:/IISLogFiles/W3SVC13/
Upload Files
File: D:/IISLogFiles/W3SVC13/u_ex260721.log
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-21 01:10:33
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-21 01:10:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 85
2026-07-21 01:10:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /this_is_a_new_hello_world.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 83
2026-07-21 01:10:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dp.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 124
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-21 09:46:34
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-21 09:46:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 135
2026-07-21 09:46:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /this_is_a_new_hello_world.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 93
2026-07-21 09:46:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dp.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 82
2026-07-21 09:46:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /old.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 82
2026-07-21 09:46:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ms-new.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 91
2026-07-21 09:46:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /track.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 88
2026-07-21 09:46:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2352356666.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 85
2026-07-21 09:46:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /pn.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 99
2026-07-21 09:46:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-wpbak.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 82
2026-07-21 09:46:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dr.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 94
2026-07-21 09:46:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2x.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 131
2026-07-21 09:46:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /kq1.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 81
2026-07-21 09:46:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /zzz.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 82
2026-07-21 09:46:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wicked.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 82
2026-07-21 09:46:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /edit.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 82
2026-07-21 09:46:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /kua.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 90
2026-07-21 09:46:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ez.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 89
2026-07-21 09:46:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fz.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 137
2026-07-21 09:46:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /la.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 127
2026-07-21 09:46:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /nhvoanpl.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 90
2026-07-21 09:46:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /inso.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 96
2026-07-21 09:46:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wpx.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 82
2026-07-21 09:46:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /berlin.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 95
2026-07-21 09:46:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /billur.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 90
2026-07-21 09:46:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mimpi.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 82
2026-07-21 09:46:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dp.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 87
2026-07-21 09:46:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bootstrap.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 87
2026-07-21 09:46:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-editor.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 88
2026-07-21 09:46:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cro.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 82
2026-07-21 09:46:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cron-tab.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 81
2026-07-21 09:46:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /koiy.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 89
2026-07-21 09:46:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /hp2.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 81
2026-07-21 09:46:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /hp3.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 131
2026-07-21 09:46:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aa1.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 92
2026-07-21 09:46:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /acew67.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 88
2026-07-21 09:46:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bscclapb.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 82
2026-07-21 09:46:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /else1.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 82
2026-07-21 09:46:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /tkikikoko.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 81
2026-07-21 09:46:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-Blogs.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 82
2026-07-21 09:46:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-css.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 81
2026-07-21 09:46:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-explorer.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 134
2026-07-21 09:46:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /akismet.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 91
2026-07-21 09:46:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ace2.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 83
2026-07-21 09:46:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ms.php - 80 - 20.220.225.223 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 137
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-21 13:23:54
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-21 13:23:53 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 147.185.132.61 HTTP/1.1 Hello+from+Palo+Alto+Networks,+find+out+more+about+our+scans+in+https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity - - phpmyadmin.itpartnership.com 403 503 5 1372 208 135
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-21 18:55:28
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-21 18:55:28 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 443 - 74.7.228.43 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - phpmyadmin.itpartnership.com 403 503 5 1233 423 158
2026-07-21 18:55:28 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 74.7.243.216 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+GPTBot/1.4;++https://openai.com/gptbot) - - phpmyadmin.itpartnership.com 403 503 5 1233 317 92
@ Telegram