File: D:/IISLogFiles/W3SVC13/u_ex260725.log
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-25 01:34:35
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-25 01:34:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 106
2026-07-25 01:34:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /this_is_a_new_hello_world.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 105
2026-07-25 01:34:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cu.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 108
2026-07-25 01:34:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aevly.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 108
2026-07-25 01:34:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /15ds5ock.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 105
2026-07-25 01:34:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ggddssvl.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 107
2026-07-25 01:34:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /albrt.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wxfyf.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 139
2026-07-25 01:34:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /qqjki.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 120
2026-07-25 01:34:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /tx79.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 105
2026-07-25 01:34:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wo.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 105
2026-07-25 01:34:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /eursi.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /users.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 104
2026-07-25 01:34:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /p14rAeWytPdH5hZcscCFdefault.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 85 105
2026-07-25 01:34:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cdn3.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 105
2026-07-25 01:34:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /awa.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 105
2026-07-25 01:34:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /php.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 108
2026-07-25 01:34:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /r9pbhistk1lifhnjadpCdefault.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 85 109
2026-07-25 01:34:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /0yellow.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 104
2026-07-25 01:34:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /albin.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 108
2026-07-25 01:34:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ws58.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 105
2026-07-25 01:34:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dljpy.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/tBEZGQz.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 76 105
2026-07-25 01:34:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sts.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 105
2026-07-25 01:34:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wcvejtpr.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 107
2026-07-25 01:34:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bypltspd.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 105
2026-07-25 01:34:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /5xkfgawzejgwqh9hiaznCdefault.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 86 105
2026-07-25 01:34:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xmu.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 105
2026-07-25 01:34:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /hanyatersenyum.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 105
2026-07-25 01:34:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wcoiw.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 113
2026-07-25 01:34:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fsgdjkl.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 110
2026-07-25 01:34:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /lb.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 108
2026-07-25 01:34:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cwclass.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 105
2026-07-25 01:34:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /green.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 139
2026-07-25 01:34:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /abalqdol.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 107
2026-07-25 01:34:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /oircv.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 126
2026-07-25 01:34:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /rogsa.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-class-20260318122951.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 104
2026-07-25 01:34:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /8.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 118
2026-07-25 01:34:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /hots.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 105
2026-07-25 01:34:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bootstrap.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 104
2026-07-25 01:34:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /crgio.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 104
2026-07-25 01:34:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2nzyHnOkEg.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 105
2026-07-25 01:34:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ovajckrrj.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 105
2026-07-25 01:34:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /rip.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 129
2026-07-25 01:34:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-class-20260318124352.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 105
2026-07-25 01:34:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /jnhddqyz.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 137
2026-07-25 01:34:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /druqr.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 138
2026-07-25 01:34:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /a8.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 105
2026-07-25 01:34:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ftde.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 137
2026-07-25 01:34:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /n3yUmQ6Q9xwQ8ocdefault.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 80 144
2026-07-25 01:34:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /balin.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 125
2026-07-25 01:34:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /only.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 105
2026-07-25 01:34:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /hypnotist.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 121
2026-07-25 01:34:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dqagu.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sd.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 112
2026-07-25 01:34:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /nhj6t74aqmkde3hgpCdefault.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 105
2026-07-25 01:34:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /HLA-dd.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 108
2026-07-25 01:34:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /pass4.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ace.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 105
2026-07-25 01:34:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /class.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 139
2026-07-25 01:34:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /asasx.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sde.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 112
2026-07-25 01:34:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-sx9.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 121
2026-07-25 01:34:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /itlvk.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 118
2026-07-25 01:34:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /menu.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 105
2026-07-25 01:34:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ckk.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 104
2026-07-25 01:34:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /lzx2.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 136
2026-07-25 01:34:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /CDX4.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 123
2026-07-25 01:34:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /azpaq.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 118
2026-07-25 01:34:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /zc-124.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 131
2026-07-25 01:34:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /koiy.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 123
2026-07-25 01:34:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /b4txckoieeyhynhsrpi9lCdefault.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 87 120
2026-07-25 01:34:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wkogn.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 135
2026-07-25 01:34:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /abrand.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 105
2026-07-25 01:34:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /rithin.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 105
2026-07-25 01:34:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /widgets-form.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 70 105
2026-07-25 01:34:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ws85.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 119
2026-07-25 01:34:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ibcqocdtu3eovdx2hwj7Cdefault.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 86 105
2026-07-25 01:34:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /iov.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 106
2026-07-25 01:34:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /villain.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 105
2026-07-25 01:34:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /eetu.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 130
2026-07-25 01:34:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /byrgo.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dgs.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 104
2026-07-25 01:34:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /awdld.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 116
2026-07-25 01:34:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /zz8.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 123
2026-07-25 01:34:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /pm90apbv3v5fvgkbguyiCdefault.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 86 105
2026-07-25 01:34:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ayzv4.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /diayd.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /beerd.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /C1.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 105
2026-07-25 01:34:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /userfuns.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 105
2026-07-25 01:34:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-png.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 105
2026-07-25 01:34:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /pxx.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 127
2026-07-25 01:34:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cgborhkh.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 105
2026-07-25 01:34:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dichku.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 131
2026-07-25 01:34:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /zc-942.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 105
2026-07-25 01:34:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 90 105
2026-07-25 01:34:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /click.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 123
2026-07-25 01:34:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /t00l.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 105
2026-07-25 01:34:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sxdfrt.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 128
2026-07-25 01:34:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-tot.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 106
2026-07-25 01:34:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /a9.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 118
2026-07-25 01:34:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /blnux.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 107
2026-07-25 01:34:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /epinyins.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 117
2026-07-25 01:34:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /anczg.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 113
2026-07-25 01:34:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /amba5.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ppxhp.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 105
2026-07-25 01:34:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /amwxl.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 111
2026-07-25 01:34:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xwpg.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 104
2026-07-25 01:34:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /maintura.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 105
2026-07-25 01:34:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file61.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 129
2026-07-25 01:34:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xenium4.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 105
2026-07-25 01:34:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /kbfr.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 114
2026-07-25 01:34:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /vopxx.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 128
2026-07-25 01:34:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cilus.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 104
2026-07-25 01:34:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /edit-tags.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 110
2026-07-25 01:34:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /SS72_kKKjT.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 106
2026-07-25 01:34:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sadcut1.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 115
2026-07-25 01:34:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /CDX1.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 104
2026-07-25 01:34:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ovajelmxf.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 105
2026-07-25 01:34:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /camara.php - 80 - 172.202.26.222 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 154
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-25 02:32:07
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-25 02:32:07 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 34.195.23.187 HTTP/1.1 Mozilla/5.0+(X11;+Ubuntu;+Linux+x86_64;+rv:92.0)+Gecko/20100101+Firefox/92.0 - - phpmyadmin.itpartnership.com 403 503 5 1394 189 81
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-25 06:39:55
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-25 06:39:54 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env - 443 - 129.159.56.14 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1394 171 235
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-25 07:42:50
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-25 07:42:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 159 7
2026-07-25 07:42:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 159 95
2026-07-25 07:42:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /console/ - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 190 9
2026-07-25 07:42:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /console/ - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 190 94
2026-07-25 07:42:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /server - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 188 7
2026-07-25 07:42:53 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /server - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 188 112
2026-07-25 07:42:53 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /server-status - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 195 7
2026-07-25 07:42:54 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /server-status - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 195 103
2026-07-25 07:42:55 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /about - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 187 7
2026-07-25 07:42:55 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /about - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 187 95
2026-07-25 07:42:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /login.action - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 194 7
2026-07-25 07:42:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /login.action - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 194 103
2026-07-25 07:42:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 182 7
2026-07-25 07:42:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /___proxy_subdomain_whm/login - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 210 7
2026-07-25 07:42:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /___proxy_subdomain_cpanel - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 207 6
2026-07-25 07:42:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /v2/_catalog - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 219 6
2026-07-25 07:42:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 182 90
2026-07-25 07:42:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /___proxy_subdomain_whm/login - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 210 92
2026-07-25 07:42:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /___proxy_subdomain_cpanel - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 207 96
2026-07-25 07:42:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.DS_Store - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 191 6
2026-07-25 07:42:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /v2/_catalog - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 219 92
2026-07-25 07:42:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 186 7
2026-07-25 07:43:00 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.DS_Store - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 191 96
2026-07-25 07:43:01 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 186 104
2026-07-25 07:43:01 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 257 7
2026-07-25 07:43:02 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 257 104
2026-07-25 07:43:03 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.git/config - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 193 8
2026-07-25 07:43:04 W3SVC13 itpwinwebsvr22 5.101.172.196 POST /graphql - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 360 7
2026-07-25 07:43:04 W3SVC13 itpwinwebsvr22 5.101.172.196 POST /api - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 356 7
2026-07-25 07:43:04 W3SVC13 itpwinwebsvr22 5.101.172.196 POST /api/graphql - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 364 6
2026-07-25 07:43:04 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.git/config - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 193 96
2026-07-25 07:43:04 W3SVC13 itpwinwebsvr22 5.101.172.196 POST /graphql/api - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 364 6
2026-07-25 07:43:04 W3SVC13 itpwinwebsvr22 5.101.172.196 POST /api/gql - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 360 6
2026-07-25 07:43:05 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /s/639313e2237313e2130313e253/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 280 6
2026-07-25 07:43:05 W3SVC13 itpwinwebsvr22 5.101.172.196 POST /graphql - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 360 90
2026-07-25 07:43:05 W3SVC13 itpwinwebsvr22 5.101.172.196 POST /api - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 356 101
2026-07-25 07:43:05 W3SVC13 itpwinwebsvr22 5.101.172.196 POST /api/graphql - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 364 94
2026-07-25 07:43:05 W3SVC13 itpwinwebsvr22 5.101.172.196 POST /graphql/api - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 364 99
2026-07-25 07:43:06 W3SVC13 itpwinwebsvr22 5.101.172.196 POST /api/gql - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 360 106
2026-07-25 07:43:06 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /config.json - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 193 7
2026-07-25 07:43:06 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /s/639313e2237313e2130313e253/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 280 100
2026-07-25 07:43:08 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /config.json - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 193 95
2026-07-25 07:43:08 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /telescope/requests - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 200 5
2026-07-25 07:43:08 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /php/login.php - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 195 6
2026-07-25 07:43:09 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /info.php - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 190 7
2026-07-25 07:43:10 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /telescope/requests - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 200 103
2026-07-25 07:43:10 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /php/login.php - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 195 95
2026-07-25 07:43:10 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.well-known/security.txt - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 206 6
2026-07-25 07:43:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /info.php - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 190 104
2026-07-25 07:43:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /actuator/env - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 194 7
2026-07-25 07:43:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.well-known/security.txt - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 206 115
2026-07-25 07:43:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /trace.axd - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 191 7
2026-07-25 07:43:12 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /actuator/env - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 194 103
2026-07-25 07:43:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /@vite/env - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 191 7
2026-07-25 07:43:13 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /trace.axd - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 191 92
2026-07-25 07:43:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.vscode/sftp.json - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 199 6
2026-07-25 07:43:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /@vite/env - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 191 95
2026-07-25 07:43:16 W3SVC13 itpwinwebsvr22 5.101.172.196 OPTIONS / - 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 186 7
2026-07-25 07:43:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.vscode/sftp.json - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 199 104
2026-07-25 07:43:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / rest_route=/wp/v2/users/ 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 207 6
2026-07-25 07:43:17 W3SVC13 itpwinwebsvr22 5.101.172.196 OPTIONS / - 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 186 96
2026-07-25 07:43:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /debug/default/view panel=config 443 - 64.227.32.66 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1413 213 6
2026-07-25 07:43:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / rest_route=/wp/v2/users/ 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 207 94
2026-07-25 07:43:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /debug/default/view panel=config 80 - 165.227.39.235 HTTP/1.1 Mozilla/5.0+(l9scan/2.0.639313e2237313e2130313e253;++https://leakix.net) - - phpmyadmin.itpartnership.com 403 503 5 1391 213 95
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-25 20:54:58
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-25 20:54:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 198.235.24.52 HTTP/1.1 Hello+from+Palo+Alto+Networks,+find+out+more+about+our+scans+in+https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity - - phpmyadmin.itpartnership.com 403 503 5 1372 208 253
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-25 23:13:46
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 37
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /this_is_a_new_hello_world.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 30
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /inputs.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 34
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /admin.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /goods.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 28
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /adminfuns.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /404.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 32
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wk/index.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /about.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /term.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ioxi-o.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /1.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /alfa.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 30
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /edit.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /elp.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /classwithtostring.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 75 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /666.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 33
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/ - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ws54.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /deepseek_d.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /function/function.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 75 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /nw.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xleet.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 30
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /155.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /96i.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /as.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 28
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /min.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 28
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.well-known/ - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 28
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /php8.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 29
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/admin.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 74 28
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /222.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 28
2026-07-25 23:13:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/pridmag/il.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 86 28
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /info.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 31
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /a.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 39
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /chosen.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 28
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/index.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 74 28
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /vx.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 45
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /admin/controller/extension/ - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 28
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wap.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 28
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/wp.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 33
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bgymj.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 29
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aa.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 29
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-mail.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 33
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bolt.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 29
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bthil.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 29
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cgi-bin/ - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 41
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /x.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 29
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /index/function.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 29
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aaa.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 55
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /abcd.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 29
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-good.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 29
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /simple.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 30
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /edit-tags.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 29
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /u.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 50
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/admin.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 28
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /h.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 35
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ms-edit.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 28
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /a7.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 28
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /manager.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 29
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /w1.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 29
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/fonts/ - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 40
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-login.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 29
2026-07-25 23:13:47 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /default.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /i.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/uploads/ - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 73 37
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/Requests/library/index.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 92 60
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/index.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /gecko-new.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 28
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /NewFile.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 28
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-Blogs.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 28
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/fonts/index.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 28
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /themes.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cv.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/js/ - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/uploads/index.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 82 45
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ws83.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /atex1.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /class-t.api.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /w.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 30
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /archive.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bless.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sagax1.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wpc.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fone1.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 37
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ncx.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 51
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/js/index.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 75 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wso.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /zup.php73 - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 35
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /k.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 53
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-blink.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 29
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /randkeyword.PhP7 - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 70 47
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/ectoplasm/ - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 84 39
2026-07-25 23:13:48 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/ - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 31
2026-07-25 23:13:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ww5.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 40
2026-07-25 23:13:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 47
2026-07-25 23:13:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/classwithtostring.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 84 39
2026-07-25 23:13:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /atomlib.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 29
2026-07-25 23:13:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /rip.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 55
2026-07-25 23:13:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /p.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 29
2026-07-25 23:13:49 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /php.php - 80 - 4.232.90.10 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 79
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-25 23:36:57
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-25 23:36:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 39
2026-07-25 23:36:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /this_is_a_new_hello_world.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 40
2026-07-25 23:36:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /images.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 42
2026-07-25 23:36:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bootstrap.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 33
2026-07-25 23:36:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fpwch.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 41
2026-07-25 23:36:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /hypo.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 37
2026-07-25 23:36:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /kir.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 40
2026-07-25 23:36:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /blacks.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 43
2026-07-25 23:36:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cap.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 45
2026-07-25 23:36:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ccc.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 77
2026-07-25 23:36:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-5jbk59g.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 33
2026-07-25 23:36:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /123.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 41
2026-07-25 23:36:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /reviall.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 42
2026-07-25 23:36:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cmd.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 76
2026-07-25 23:36:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /common.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 33
2026-07-25 23:36:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /zoomab.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 41
2026-07-25 23:36:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /zewuaq.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 34
2026-07-25 23:36:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bootstrap.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 42
2026-07-25 23:36:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /shell.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 33
2026-07-25 23:36:57 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /vdgrbPKxpkw.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 43
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ms-edit.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 33
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /swm.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 35
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2x.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 43
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /9WOLF.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 45
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /as.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 33
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /window.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 47
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /lazqstrk.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 44
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sx.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 43
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /php.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 46
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /666.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 33
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /white.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 32
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /class-t.api.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 33
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /esp.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 33
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /class-wp-image.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 33
2026-07-25 23:36:58 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /class-wp-logo-new.php - 80 - 4.223.226.192 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 75 84