HEX
Server: Microsoft-IIS/10.0
System: Windows NT ITPWINWEBSVR22 10.0 build 20348 (Windows Server 2022) AMD64
User: www.conferencesearch.co.uk (0)
PHP: 8.3.30
Disabled: NONE
$ pwd: D:/IISLogFiles/W3SVC25/
Upload Files
File: D:/IISLogFiles/W3SVC25/u_ex260513.log
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 00:56:44
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 00:56:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 43.131.36.84 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+13_2_3+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/13.0.3+Mobile/15E148+Safari/604.1 - - webmail.itpartnership.com 302 0 0 359 542 17
2026-05-13 01:00:35 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 185.220.100.241 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+Embedded+Web+Browser+from:+http://bsalsa.com/;+.NET+CLR+1.1.4322;+.NET4.0C;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) - http://webmail.itpartnership.com webmail.itpartnership.com 302 0 0 359 336 19
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 04:35:39
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 04:35:39 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 455 99 228
2026-05-13 04:35:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /class-t.api.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 389 66 137
2026-05-13 04:35:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /zwso.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 135
2026-05-13 04:35:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/blue/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 427 85 129
2026-05-13 04:35:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /class19.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 133
2026-05-13 04:35:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /class20.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 136
2026-05-13 04:35:44 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /admin.php p= 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 63 131
2026-05-13 04:35:44 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /randkeyword.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 389 66 136
2026-05-13 04:35:45 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /fwe.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 125
2026-05-13 04:35:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /images/m.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 129
2026-05-13 04:35:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /g.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 127
2026-05-13 04:35:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /tx1.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 128
2026-05-13 04:35:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xv.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 130
2026-05-13 04:35:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /x56.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 137
2026-05-13 04:35:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /htaccess.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 124
2026-05-13 04:35:48 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /readme.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 124
2026-05-13 04:35:49 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /x50.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 123
2026-05-13 04:35:49 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /fv.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 137
2026-05-13 04:35:49 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /file.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 60 127
2026-05-13 04:35:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /lsd.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 130
2026-05-13 04:35:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /as.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 138
2026-05-13 04:35:51 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wsd.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 125
2026-05-13 04:35:51 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /gtc.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 134
2026-05-13 04:35:51 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /atx.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 128
2026-05-13 04:35:51 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /z60.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 129
2026-05-13 04:35:51 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /403.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 129
2026-05-13 04:35:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /m.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 127
2026-05-13 04:35:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /themes.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 137
2026-05-13 04:35:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/maint/about.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 407 75 138
2026-05-13 04:35:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/network/wp-conflg.php p= 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 419 84 134
2026-05-13 04:35:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /click.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 130
2026-05-13 04:35:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /install.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 135
2026-05-13 04:35:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /lv.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 134
2026-05-13 04:35:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /simple.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 138
2026-05-13 04:35:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /css.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 126
2026-05-13 04:35:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /cong.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 130
2026-05-13 04:35:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/images/wp-login.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 421 82 123
2026-05-13 04:35:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /cong.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 125
2026-05-13 04:35:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /w.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 133
2026-05-13 04:35:58 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /404.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 123
2026-05-13 04:35:58 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ioxi-o.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 134
2026-05-13 04:36:00 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /0x.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 130
2026-05-13 04:36:00 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /css.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 136
2026-05-13 04:36:01 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /222.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 125
2026-05-13 04:36:02 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 399 71 130
2026-05-13 04:36:03 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /admin.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 132
2026-05-13 04:36:04 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/maint/maint.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 407 75 137
2026-05-13 04:36:04 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /classwithtostring.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 401 72 136
2026-05-13 04:36:04 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /abcd.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 137
2026-05-13 04:36:04 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /autoload_classmap.php p= 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 401 75 123
2026-05-13 04:36:06 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /inputs.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 136
2026-05-13 04:36:06 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /about.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 133
2026-05-13 04:36:06 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /alfa.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 136
2026-05-13 04:36:06 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /themes/twentytwentytwo/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 423 83 137
2026-05-13 04:36:06 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/js/wp-conflg.php p= 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 409 79 122
2026-05-13 04:36:06 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/wp-conflg.php p= 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 403 76 134
2026-05-13 04:36:07 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/wp-conflg.php p= 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 411 80 137
2026-05-13 04:36:07 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /manager.php p= 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 65 145
2026-05-13 04:36:07 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /item.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 132
2026-05-13 04:36:07 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /plugins/Cache/footer.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 407 75 126
2026-05-13 04:36:07 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /404.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 128
2026-05-13 04:36:08 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /mail.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 128
2026-05-13 04:36:08 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 415 79 124
2026-05-13 04:36:08 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /sx.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 134
2026-05-13 04:36:08 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/maint/admin.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 407 75 128
2026-05-13 04:36:09 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /alfa.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 133
2026-05-13 04:36:09 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /1.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 133
2026-05-13 04:36:09 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /byp.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 138
2026-05-13 04:36:09 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-trackback.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 391 67 129
2026-05-13 04:36:09 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /.well-known/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 401 72 135
2026-05-13 04:36:09 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/network/plugins.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 415 79 126
2026-05-13 04:36:11 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/about.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 395 69 124
2026-05-13 04:36:11 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /gmo.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 133
2026-05-13 04:36:11 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/ID3/about.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 409 76 132
2026-05-13 04:36:11 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /css/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 123
2026-05-13 04:36:11 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/SimplePie/wp-login.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 427 85 127
2026-05-13 04:36:11 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/about.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 413 78 137
2026-05-13 04:36:12 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /filemanager/dialog.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 403 73 136
2026-05-13 04:36:12 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/maint/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 407 75 137
2026-05-13 04:36:12 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/customize/about.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 421 82 135
2026-05-13 04:36:12 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /index/function.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 395 69 137
2026-05-13 04:36:12 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /uploads/autoload_classmap.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 417 80 137
2026-05-13 04:36:13 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/style-engine/about.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 427 85 134
2026-05-13 04:36:13 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ww1.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 127
2026-05-13 04:36:13 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /about/function.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 395 69 131
2026-05-13 04:36:13 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /admin/function.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 395 69 128
2026-05-13 04:36:13 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /.well-known/acme-challenge/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 431 87 136
2026-05-13 04:36:13 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /css/colors/blue/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 409 76 123
2026-05-13 04:36:15 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /security.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 136
2026-05-13 04:36:16 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/user/about.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 405 74 128
2026-05-13 04:36:16 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/js/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 401 72 130
2026-05-13 04:36:16 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/upgrade/about.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 415 79 133
2026-05-13 04:36:16 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/assets/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 415 79 130
2026-05-13 04:36:16 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/radio.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 399 71 132
2026-05-13 04:36:16 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/fonts/index.php p= 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 413 81 122
2026-05-13 04:36:17 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /.well-known/admin.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 401 72 124
2026-05-13 04:36:17 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/admin.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 399 71 136
2026-05-13 04:36:17 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/admin.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 415 79 125
2026-05-13 04:36:17 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/twentytwentytwo/index.php p= 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 445 97 128
2026-05-13 04:36:17 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /.well-known/log.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 397 70 133
2026-05-13 04:36:17 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /class.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 127
2026-05-13 04:36:18 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /bless5.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 125
2026-05-13 04:36:18 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/js/codemirror/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 429 86 125
2026-05-13 04:36:18 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/block-patterns/index.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 431 87 125
2026-05-13 04:36:18 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /lock360.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 126
2026-05-13 04:36:18 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /f35.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 131
2026-05-13 04:36:19 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ioxi-o1.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 135
2026-05-13 04:36:19 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /juuuu.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 133
2026-05-13 04:36:19 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ha.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 130
2026-05-13 04:36:19 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /gg.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 134
2026-05-13 04:36:21 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /we2.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 122
2026-05-13 04:36:21 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /04.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 128
2026-05-13 04:36:21 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /333.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 137
2026-05-13 04:36:21 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /520.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 124
2026-05-13 04:36:25 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ar.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 123
2026-05-13 04:36:25 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /x.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 138
2026-05-13 04:36:25 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xx.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 137
2026-05-13 04:36:25 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /gifclass4.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 135
2026-05-13 04:36:25 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /2clas.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 131
2026-05-13 04:36:25 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ave.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 127
2026-05-13 04:36:26 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wrt.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 130
2026-05-13 04:36:26 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /bibil.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 127
2026-05-13 04:36:28 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /radio.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 137
2026-05-13 04:36:28 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /files.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 130
2026-05-13 04:36:28 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /file7.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 133
2026-05-13 04:36:30 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /gifclass.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 137
2026-05-13 04:36:31 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/midnight/about.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 435 89 127
2026-05-13 04:36:31 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /nox.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 125
2026-05-13 04:36:32 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /file48.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 129
2026-05-13 04:36:32 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /info.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 126
2026-05-13 04:36:35 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /class9.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 135
2026-05-13 04:36:35 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /la.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 133
2026-05-13 04:36:35 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /bless11.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 123
2026-05-13 04:36:35 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ccou.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 126
2026-05-13 04:36:37 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ton.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 128
2026-05-13 04:36:37 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /403.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 130
2026-05-13 04:36:40 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /file9.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 132
2026-05-13 04:36:40 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ac.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 125
2026-05-13 04:36:40 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /new4.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 130
2026-05-13 04:36:40 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /pop.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 123
2026-05-13 04:36:40 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /az.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 126
2026-05-13 04:36:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xaz.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 126
2026-05-13 04:36:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /up4.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 137
2026-05-13 04:36:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /1aa.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 139
2026-05-13 04:36:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /elp.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 138
2026-05-13 04:36:42 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wtz.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 130
2026-05-13 04:36:42 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /galex.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 126
2026-05-13 04:36:42 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xb.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 134
2026-05-13 04:36:42 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ova.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 125
2026-05-13 04:36:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /vx.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 122
2026-05-13 04:36:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /rh.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 126
2026-05-13 04:36:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /webindex.php - 80 - 20.151.0.198 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 135
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 05:21:22
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 05:21:21 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 193.46.255.147 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/142.0.0.0+Safari/537.36 - - webmail.itpartnership.com 302 0 0 359 212 37
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 06:49:25
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 06:49:25 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 455 99 127
2026-05-13 06:49:29 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /file60.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 137
2026-05-13 06:49:29 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-k7djufwez2.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 393 68 126
2026-05-13 06:49:29 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /bc.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 128
2026-05-13 06:49:29 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /100.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 132
2026-05-13 06:49:29 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xmu.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 136
2026-05-13 06:49:30 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /bob.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 139
2026-05-13 06:49:30 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /av.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 129
2026-05-13 06:49:30 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /casp1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 139
2026-05-13 06:49:30 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /file6.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 61 132
2026-05-13 06:49:31 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xs.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 133
2026-05-13 06:49:31 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xxa.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 134
2026-05-13 06:49:31 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /3369.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 139
2026-05-13 06:49:31 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /dostshell.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 139
2026-05-13 06:49:32 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /zoper1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 152
2026-05-13 06:49:32 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /77.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 130
2026-05-13 06:49:32 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-kz.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 134
2026-05-13 06:49:32 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /file6.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 139
2026-05-13 06:49:32 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /zogy1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 138
2026-05-13 06:49:33 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /19.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 137
2026-05-13 06:49:33 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /11.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 130
2026-05-13 06:49:33 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /w.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 140
2026-05-13 06:49:33 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /7.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 131
2026-05-13 06:49:34 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ortasekerli1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 391 67 137
2026-05-13 06:49:34 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xxx.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 139
2026-05-13 06:49:34 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /cdxadmin.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 130
2026-05-13 06:49:34 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /gecko.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 126
2026-05-13 06:49:34 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /fone1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 138
2026-05-13 06:49:35 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /cilus.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 128
2026-05-13 06:49:35 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /adminfuns.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 65 134
2026-05-13 06:49:35 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /tires.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 130
2026-05-13 06:49:35 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-tiroto.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 135
2026-05-13 06:49:35 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /a7.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 125
2026-05-13 06:49:36 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 131
2026-05-13 06:49:36 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /drykl.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 134
2026-05-13 06:49:36 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /BDKR28WP.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 125
2026-05-13 06:49:36 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /mifta.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 130
2026-05-13 06:49:36 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xwx1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 136
2026-05-13 06:49:37 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /a1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 135
2026-05-13 06:49:37 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /d.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 124
2026-05-13 06:49:37 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /edit.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 127
2026-05-13 06:49:37 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xff.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 128
2026-05-13 06:49:39 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /bal.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 126
2026-05-13 06:49:39 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xltt.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 125
2026-05-13 06:49:39 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /son.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 130
2026-05-13 06:49:39 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /doc.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 135
2026-05-13 06:49:40 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /zo.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 152
2026-05-13 06:49:40 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xper1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 130
2026-05-13 06:49:40 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /tiny.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 137
2026-05-13 06:49:40 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /bthil.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 125
2026-05-13 06:49:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /s1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 128
2026-05-13 06:49:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /de.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 133
2026-05-13 06:49:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /axe.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 127
2026-05-13 06:49:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /roksad1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 142
2026-05-13 06:49:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /aj11.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 125
2026-05-13 06:49:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /yuzuru1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 130
2026-05-13 06:49:42 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /1a.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 138
2026-05-13 06:49:42 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /gelio1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 135
2026-05-13 06:49:42 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /2.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 141
2026-05-13 06:49:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /sky.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 127
2026-05-13 06:49:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/theme-compat/wp-login.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 433 88 124
2026-05-13 06:49:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /man.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 132
2026-05-13 06:49:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ws85.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 129
2026-05-13 06:49:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /Sanskrit.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 129
2026-05-13 06:49:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ms-edit.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 140
2026-05-13 06:49:44 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /dass.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 149
2026-05-13 06:49:44 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /7.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 136
2026-05-13 06:49:44 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /cu.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 139
2026-05-13 06:49:44 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ganja.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 134
2026-05-13 06:49:45 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /pp.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 126
2026-05-13 06:49:45 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /card.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 128
2026-05-13 06:49:45 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /packsin1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 132
2026-05-13 06:49:45 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wps.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 131
2026-05-13 06:49:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wgift1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 134
2026-05-13 06:49:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /mar.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 130
2026-05-13 06:49:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /img.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 134
2026-05-13 06:49:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /themes.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 132
2026-05-13 06:49:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /acp.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 138
2026-05-13 06:49:47 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /error_log.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 125
2026-05-13 06:49:47 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /zdd.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 136
2026-05-13 06:49:47 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /link.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 134
2026-05-13 06:49:47 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /sallu.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 138
2026-05-13 06:49:48 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /aboute.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 137
2026-05-13 06:49:48 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ayk.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 137
2026-05-13 06:49:48 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /one.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 129
2026-05-13 06:49:48 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /press.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 130
2026-05-13 06:49:48 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ng.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 129
2026-05-13 06:49:49 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /tx79.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 131
2026-05-13 06:49:49 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-block.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 139
2026-05-13 06:49:49 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /8.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 129
2026-05-13 06:49:49 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /options.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 146
2026-05-13 06:49:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /admlo.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 134
2026-05-13 06:49:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /x=34.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 136
2026-05-13 06:49:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /tramuibs.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 139
2026-05-13 06:49:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /view.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 129
2026-05-13 06:49:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /aa.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 132
2026-05-13 06:49:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /x402.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 134
2026-05-13 06:49:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /lib.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 138
2026-05-13 06:49:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ws78.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 139
2026-05-13 06:49:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /f5.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 133
2026-05-13 06:49:53 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /alpha.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 132
2026-05-13 06:49:53 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /son1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 135
2026-05-13 06:49:53 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ggb.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 124
2026-05-13 06:49:53 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /amxloxxr.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 131
2026-05-13 06:49:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ss.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 126
2026-05-13 06:49:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /sadcut1.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 141
2026-05-13 06:49:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /rh.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 129
2026-05-13 06:49:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /99.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 126
2026-05-13 06:49:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /layout.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 124
2026-05-13 06:49:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /12.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 127
2026-05-13 06:49:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /fs.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 134
2026-05-13 06:49:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /insta.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 134
2026-05-13 06:49:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /simple.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 139
2026-05-13 06:49:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ws81.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 136
2026-05-13 06:49:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /av.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 58 128
2026-05-13 06:49:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xfile25.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 63 134
2026-05-13 06:49:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wpxml.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 132
2026-05-13 06:49:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xstelth.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 129
2026-05-13 06:49:57 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /min.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 128
2026-05-13 06:49:57 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /geforce.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 125
2026-05-13 06:49:57 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /moshou.php - 80 - 20.104.97.84 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 136
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 07:45:05
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 07:45:05 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 159.89.41.54 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:109.0)+Gecko/20100101+Firefox/111.0 - - webmail.itpartnership.com 302 0 0 359 260 203
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 08:44:43
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 08:44:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 80 - 3.219.146.217 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_10_1)+AppleWebKit/600.2.5+(KHTML,+like+Gecko)+Version/8.0.2+Safari/600.2.5+(Gort) - - webmail.itpartnership.com 302 0 0 398 248 122
2026-05-13 08:52:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 43.134.33.236 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+13_2_3+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/13.0.3+Mobile/15E148+Safari/604.1 - - webmail.itpartnership.com 302 0 0 359 542 170
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 09:33:50
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 09:33:49 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 455 99 137
2026-05-13 09:33:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /moon.php p= 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 62 126
2026-05-13 09:33:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /a1.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 133
2026-05-13 09:33:51 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ahax.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 133
2026-05-13 09:33:51 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /lite.php p= 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 62 125
2026-05-13 09:33:51 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /k.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 126
2026-05-13 09:33:51 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /leaf.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 135
2026-05-13 09:33:51 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-conflg.php p= 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 67 133
2026-05-13 09:33:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp_filemanager.php p= 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 395 72 128
2026-05-13 09:33:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /pp.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 133
2026-05-13 09:33:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /index26.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 139
2026-05-13 09:33:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /12.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 129
2026-05-13 09:33:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /Marvins.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 135
2026-05-13 09:33:53 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-config.php.backup - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 399 71 135
2026-05-13 09:33:53 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /aa.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 138
2026-05-13 09:33:53 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /abcd.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 125
2026-05-13 09:33:53 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /a2.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 138
2026-05-13 09:33:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-gr.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 127
2026-05-13 09:33:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xynz1.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 138
2026-05-13 09:33:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /uqcxit7i.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 127
2026-05-13 09:33:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /display_info.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 391 67 133
2026-05-13 09:33:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-config-disabled.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 403 73 139
2026-05-13 09:33:54 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /test_info.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 131
2026-05-13 09:33:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /spip.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 136
2026-05-13 09:33:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-index.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 125
2026-05-13 09:33:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /php-nginx.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 131
2026-05-13 09:33:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-config.test.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 395 69 131
2026-05-13 09:33:55 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /op.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 133
2026-05-13 09:33:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /mandrill.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 136
2026-05-13 09:33:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /backup.wp-config.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 399 71 139
2026-05-13 09:33:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /20.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 125
2026-05-13 09:33:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /upload_file.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 389 66 132
2026-05-13 09:33:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /aws.settings.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 391 67 138
2026-05-13 09:33:57 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /payout.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 134
2026-05-13 09:33:57 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /pqr.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 126
2026-05-13 09:33:57 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /phpinfo.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 139
2026-05-13 09:33:57 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /tmp.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 138
2026-05-13 09:33:57 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /456.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 124
2026-05-13 09:33:57 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /new2.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 134
2026-05-13 09:33:58 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /server.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 139
2026-05-13 09:33:58 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /extension-info.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 395 69 128
2026-05-13 09:33:58 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /conn_test.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 136
2026-05-13 09:33:58 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /information.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 389 66 132
2026-05-13 09:33:58 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /credentials.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 389 66 136
2026-05-13 09:33:59 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /phphph.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 128
2026-05-13 09:33:59 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /test-cgi.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 135
2026-05-13 09:33:59 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /twin.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 127
2026-05-13 09:33:59 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /pi.php7 - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 136
2026-05-13 09:34:01 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /display_phpinfo.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 397 70 139
2026-05-13 09:34:01 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /webserver-info.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 395 69 137
2026-05-13 09:34:01 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /new-wp-config.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 393 68 138
2026-05-13 09:34:01 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /env-info.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 129
2026-05-13 09:34:01 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /moderator.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 134
2026-05-13 09:34:02 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /23.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 147
2026-05-13 09:34:02 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /summary.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 127
2026-05-13 09:34:02 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /globals.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 135
2026-05-13 09:34:02 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /evil.php - 80 - 20.220.233.65 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 140
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 12:27:47
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 12:27:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 43.134.36.238 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+13_2_3+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/13.0.3+Mobile/15E148+Safari/604.1 - - webmail.itpartnership.com 302 0 0 359 542 172
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 15:59:11
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 15:59:11 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 43.155.162.41 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+13_2_3+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/13.0.3+Mobile/15E148+Safari/604.1 - - webmail.itpartnership.com 302 0 0 359 542 328
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 17:56:09
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 17:56:09 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 80 - 51.68.111.203 HTTP/1.1 Mozilla/5.0+(compatible;+MJ12bot/v2.0.5;+http://mj12bot.com/) - - webmail.itpartnership.com 302 0 0 379 200 9
2026-05-13 17:56:09 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 51.68.111.203 HTTP/1.1 Mozilla/5.0+(compatible;+MJ12bot/v2.0.5;+http://mj12bot.com/) - - webmail.itpartnership.com 302 0 0 359 190 9
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 20:16:44
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 20:16:44 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 80 - 185.117.225.149 HTTP/1.1 python-requests/2.31.0 - - webmail.itpartnership.com 302 0 0 379 166 81
2026-05-13 20:16:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 185.117.225.149 HTTP/1.1 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/123.0.6312.86+Safari/537.36+BitSightBot/1.0 - - webmail.itpartnership.com 302 0 0 359 440 81
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 20:33:59
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 20:33:59 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 43.130.37.243 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+13_2_3+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/13.0.3+Mobile/15E148+Safari/604.1 - - webmail.itpartnership.com 302 0 0 359 542 142
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 20:51:37
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 20:51:37 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 80 - 35.94.157.151 HTTP/1.1 Mozilla/5.0+(compatible;+wpbot/1.4;++https://forms.gle/ajBaxygz9jSR8p8G9) - - webmail.itpartnership.com 302 0 0 379 171 142
@ Telegram