HEX
Server: Microsoft-IIS/10.0
System: Windows NT ITPWINWEBSVR22 10.0 build 20348 (Windows Server 2022) AMD64
User: www.conferencesearch.co.uk (0)
PHP: 8.3.30
Disabled: NONE
$ pwd: D:/IISLogFiles/W3SVC13/
Upload Files
File: D:/IISLogFiles/W3SVC13/u_ex260513.log
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 03:41:15
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 03:41:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.git/config - 80 - 34.106.216.53 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/75.0.3770.142+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1391 247 172
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 04:52:46
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 04:52:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.git/config - 443 - 35.196.242.131 HTTP/1.1 Googlebot-Image/1.0 - - phpmyadmin.itpartnership.com 403 503 5 1413 163 91
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 07:36:08
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 07:36:08 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 34.1.30.109 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/135.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1372 775 88
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 08:35:33
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 08:35:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 85
2026-05-13 08:35:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /0x.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 173
2026-05-13 08:35:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xenon1337.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 86
2026-05-13 08:35:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /38.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 90
2026-05-13 08:35:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /02.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 103
2026-05-13 08:35:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /zero.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 86
2026-05-13 08:35:33 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /koala.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 85
2026-05-13 08:35:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mac.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 85
2026-05-13 08:35:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /hayuk.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 97
2026-05-13 08:35:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /0d.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 89
2026-05-13 08:35:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wefile.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 84
2026-05-13 08:35:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /casp3.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 84
2026-05-13 08:35:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /birlingsless.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 70 85
2026-05-13 08:35:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /unvouc.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 90
2026-05-13 08:35:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-signin.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 97
2026-05-13 08:35:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/blocks/post-comments-form/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 92 89
2026-05-13 08:35:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/js/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 84
2026-05-13 08:35:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-links.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 92
2026-05-13 08:35:34 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /upload/wp-info.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 92
2026-05-13 08:35:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colour.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 77 84
2026-05-13 08:35:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /half.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 96
2026-05-13 08:35:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2P.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 95
2026-05-13 08:35:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /tires.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 90
2026-05-13 08:35:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aevly.php p= 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 96
2026-05-13 08:35:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wordpress/wp-admin/maint/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 79 85
2026-05-13 08:35:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-block.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 85
2026-05-13 08:35:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /like.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 85
2026-05-13 08:35:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /kj.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 129
2026-05-13 08:35:35 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.well-known/about.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 75 86
2026-05-13 08:35:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/ID3/about.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 79 85
2026-05-13 08:35:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wpxml.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 85
2026-05-13 08:35:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bob.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 91
2026-05-13 08:35:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /spawns.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 98
2026-05-13 08:35:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /t3s.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 87
2026-05-13 08:35:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 84
2026-05-13 08:35:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /x/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 56 85
2026-05-13 08:35:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/modern/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 89
2026-05-13 08:35:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/js/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 84
2026-05-13 08:35:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /uwu.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 95
2026-05-13 08:35:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /uwa.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 86
2026-05-13 08:35:36 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /crgio.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 100
2026-05-13 08:35:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /geforce.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 89
2026-05-13 08:35:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-load.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 87
2026-05-13 08:35:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /3PJcpMFsD8B.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 90
2026-05-13 08:35:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.sghb.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 84
2026-05-13 08:35:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /zoko.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 93
2026-05-13 08:35:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bgymj.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 85
2026-05-13 08:35:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /pucci.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 85
2026-05-13 08:35:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/blocks/details/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 90
2026-05-13 08:35:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.dj/index.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 85
2026-05-13 08:35:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/blocks/audio/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 79 85
2026-05-13 08:35:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.tmb/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 85
2026-05-13 08:35:37 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /one.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 85
2026-05-13 08:35:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sl.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 93
2026-05-13 08:35:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-temp.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 91
2026-05-13 08:35:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/blocks/buttons/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 86
2026-05-13 08:35:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xmu.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 98
2026-05-13 08:35:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mode.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 94
2026-05-13 08:35:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/js/index.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 76 85
2026-05-13 08:35:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dx.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 88
2026-05-13 08:35:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /puc.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 97
2026-05-13 08:35:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /themes.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 87
2026-05-13 08:35:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dx.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 88
2026-05-13 08:35:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /awa.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 84
2026-05-13 08:35:38 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /11.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 90
2026-05-13 08:35:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /p.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 85
2026-05-13 08:35:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/Requests/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 76 91
2026-05-13 08:35:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bthil.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 120
2026-05-13 08:35:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /shell.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 84
2026-05-13 08:35:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /seo.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 84
2026-05-13 08:35:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /7.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 89
2026-05-13 08:35:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /8.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 84
2026-05-13 08:35:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /1.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 59 84
2026-05-13 08:35:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /class.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 85
2026-05-13 08:35:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /100.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 84
2026-05-13 08:35:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /2026w.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 85
2026-05-13 08:35:39 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /about.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 94
2026-05-13 08:35:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xa.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 92
2026-05-13 08:35:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /admin.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 85
2026-05-13 08:35:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /w2025.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 87
2026-05-13 08:35:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fvvff.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 87
2026-05-13 08:35:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /edit.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 85
2026-05-13 08:35:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /admin.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 91
2026-05-13 08:35:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/admin.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 74 91
2026-05-13 08:35:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /f6.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 84
2026-05-13 08:35:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /inputs.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 90
2026-05-13 08:35:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /av.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 90
2026-05-13 08:35:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/bolt.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 75 85
2026-05-13 08:35:40 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-act.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 91
2026-05-13 08:35:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /classwithtostring.php p= 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 78 88
2026-05-13 08:35:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/index.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 84
2026-05-13 08:35:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-blog.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 85
2026-05-13 08:35:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/js/jquery/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 77 86
2026-05-13 08:35:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/admin.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 75 85
2026-05-13 08:35:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /adminfuns.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 85
2026-05-13 08:35:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /goods.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 86
2026-05-13 08:35:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ms-edit.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 138
2026-05-13 08:35:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /222.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 84
2026-05-13 08:35:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cgi-bin/index.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 85
2026-05-13 08:35:41 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/css/dist/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 76 94
2026-05-13 08:35:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /BDKR28WP.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 92
2026-05-13 08:35:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/l10n/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 87
2026-05-13 08:35:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/uploads/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 73 87
2026-05-13 08:35:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 85
2026-05-13 08:35:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/uploads/2021/02/index.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 91 84
2026-05-13 08:35:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /av.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 85
2026-05-13 08:35:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /abcd.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 85
2026-05-13 08:35:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /a1.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 88
2026-05-13 08:35:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /update/f35.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 90
2026-05-13 08:35:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/Text/Diff/Engine/about.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 92 92
2026-05-13 08:35:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /f35.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 86
2026-05-13 08:35:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/css/index.php p= 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 84
2026-05-13 08:35:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bal.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 84
2026-05-13 08:35:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cgi-bin/admin.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 85
2026-05-13 08:35:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/pwnd/as.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 84 90
2026-05-13 08:35:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /gettest.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 84
2026-05-13 08:35:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/BypassBest.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 80 84
2026-05-13 08:35:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 89
2026-05-13 08:35:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /simple.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 85
2026-05-13 08:35:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /buy.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 84
2026-05-13 08:35:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xxx.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 84
2026-05-13 08:35:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /hypo.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 85
2026-05-13 08:35:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/blue/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 79 85
2026-05-13 08:35:43 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /chosen.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 91
2026-05-13 08:35:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/block-bindings/ - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 82 85
2026-05-13 08:35:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /00.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 85
2026-05-13 08:35:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /als.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 91
2026-05-13 08:35:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /pol.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 85
2026-05-13 08:35:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ms-amdin.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 84
2026-05-13 08:35:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /type0.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 93
2026-05-13 08:35:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /sf.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 84
2026-05-13 08:35:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file5.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 89
2026-05-13 08:35:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fs.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 103
2026-05-13 08:35:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /4PJcpMFsD8B.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 84
2026-05-13 08:35:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 92
2026-05-13 08:35:44 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /class.1.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 86
2026-05-13 08:35:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-fine.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 130
2026-05-13 08:35:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cfile.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 85
2026-05-13 08:35:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /class-wp.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 92
2026-05-13 08:35:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ff2.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 98
2026-05-13 08:35:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /aa2.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 93
2026-05-13 08:35:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /133.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 91
2026-05-13 08:35:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ccou.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 89
2026-05-13 08:35:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /login8.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 87
2026-05-13 08:35:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /3586+b64.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 92
2026-05-13 08:35:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /18299.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 88
2026-05-13 08:35:45 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /nx.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 92
2026-05-13 08:35:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /dr.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 137
2026-05-13 08:35:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xamp.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 93
2026-05-13 08:35:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cA3bHIkVhgP.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 95
2026-05-13 08:35:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /clas11.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 95
2026-05-13 08:35:46 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ssla.php - 80 - 52.138.6.165 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 126
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 08:56:15
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 08:56:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 198.235.24.94 HTTP/1.1 Hello+from+Palo+Alto+Networks,+find+out+more+about+our+scans+in+https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity - - phpmyadmin.itpartnership.com 403 503 5 1394 208 210
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 12:31:11
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 12:31:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 443 - 35.95.103.117 HTTP/2 Mozilla/5.0+(compatible;+wpbot/1.4;++https://forms.gle/ajBaxygz9jSR8p8G9) - - phpmyadmin.itpartnership.com 403 503 5 1233 225 287
2026-05-13 12:31:11 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 35.95.103.117 HTTP/2 Mozilla/5.0+(compatible;+wpbot/1.4;++https://forms.gle/ajBaxygz9jSR8p8G9) - - phpmyadmin.itpartnership.com 403 503 5 1233 215 146
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 14:28:56
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 14:28:56 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env - 443 - 176.65.139.232 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1413 242 14
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 17:35:02
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 17:35:02 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 3.233.88.40 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/134.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1394 230 131
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-05-13 20:59:15
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-05-13 20:59:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 74.7.227.8 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+GPTBot/1.3;++https://openai.com/gptbot) - - phpmyadmin.itpartnership.com 403 503 5 1233 317 142
2026-05-13 20:59:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 443 - 74.7.241.162 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.3;+robots.txt;++https://openai.com/searchbot - - phpmyadmin.itpartnership.com 403 503 5 1233 423 100
@ Telegram