#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-08-04 16:31:23
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 62
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /this_is_a_new_hello_world.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /err.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 23
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /img.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 16
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aa.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 31
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /av.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 29
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xa.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /media.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /images.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 19
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xp.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 25
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /admin.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /222.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mac.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ops.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /8.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /biufile.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /coffexium.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 22
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dex.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /1.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 32
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /coffee.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 29
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /classwithtostring.php p= 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 78 21
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-ws68.php p= 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 24
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mgrr.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /55.php p= 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 26
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ajax.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 21
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /yj09.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ora.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /scxy.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ws13.php p= 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /btx25.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 15
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xpohywjo.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 19
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ecvvhlei.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 19
2026-08-04 16:31:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /SDsadqwrf.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 66
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ssjpxze.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 15
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ors32envu.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 19
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /3PJcpMFsD8B.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 15
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /BDKR28WP.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 15
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /akismet.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 24
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /shiny.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 15
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /gecko-new.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 15
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /i99z7zzbwtpteujvv6s8hiCdefault.php p= 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 91 15
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sky.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 15
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /1wvekeybd9it2di2vyipgr6Cdefault.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 89 16
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /a3ampzmbipnkpxeqhqpsanCdefault.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 88 19
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /7.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 15
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file5.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 15
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xyn.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 15
2026-08-04 16:31:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /4PJcpMFsD8B.php - 80 - 20.218.73.95 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 57