HEX
Server: Microsoft-IIS/10.0
System: Windows NT ITPWINWEBSVR22 10.0 build 20348 (Windows Server 2022) AMD64
User: www.conferencesearch.co.uk (0)
PHP: 8.3.30
Disabled: NONE
$ pwd: D:/IISLogFiles/W3SVC13/
Upload Files
File: D:/IISLogFiles/W3SVC13/u_ex260718.log
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-18 01:03:43
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-18 01:03:42 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.env - 443 - 94.154.43.188 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1413 242 54
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-18 03:25:51
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-18 03:25:51 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 91.107.134.11 HTTP/1.1 Mozilla/5.0+(Linux;+U;+Android+4.4.2;+en-US;+HM+NOTE+1W+Build/KOT49H)+AppleWebKit/534.30+(KHTML,+like+Gecko)+Version/4.0+UCBrowser/11.0.5.850+U3/0.8.0+Mobile+Safari/534.30 - - phpmyadmin.itpartnership.com 403 503 5 1372 308 24
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-18 04:23:07
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-18 04:23:06 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 94.154.43.184 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1413 238 10
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-18 11:51:08
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-18 11:51:08 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 74.7.242.13 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+GPTBot/1.4;++https://openai.com/gptbot) - - phpmyadmin.itpartnership.com 403 503 5 1233 317 138
2026-07-18 11:51:08 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 443 - 74.7.175.176 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - phpmyadmin.itpartnership.com 403 503 5 1233 423 95
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-18 12:20:59
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-18 12:20:59 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-json/gravitysmtp/v1/tests/mock-data page=gravitysmtp-settings 80 - 195.178.110.211 HTTP/1.1 Mozilla/5.0+(compatible;+SecurityResearch/1.0;+) - - phpmyadmin.itpartnership.com 403 503 5 1391 222 13
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-18 13:14:09
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-18 13:14:08 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 80 - 147.185.132.54 HTTP/1.1 Hello+from+Palo+Alto+Networks,+find+out+more+about+our+scans+in+https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity - - phpmyadmin.itpartnership.com 403 503 5 1372 208 90
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-18 14:15:52
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-18 14:15:52 W3SVC13 itpwinwebsvr22 5.101.172.196 GET / - 443 - 104.234.208.12 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/84.0.4147.89+Safari/537.36 - - phpmyadmin.itpartnership.com 403 503 5 1394 227 268
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-18 19:04:14
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-18 19:04:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 126
2026-07-18 19:04:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /this_is_a_new_hello_world.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 79
2026-07-18 19:04:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/images/wp-login.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 82 82
2026-07-18 19:04:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/astra/inc/network.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 93 96
2026-07-18 19:04:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /shell.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 63 80
2026-07-18 19:04:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/includes/wp-conflg.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 85 110
2026-07-18 19:04:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/js/wp-conflg.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 79 81
2026-07-18 19:04:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.well-knownold/inputs.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 79 80
2026-07-18 19:04:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/seoplugins/mar.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 91 80
2026-07-18 19:04:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/random_compat/chosen.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 90 81
2026-07-18 19:04:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /assets/images/about.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 77 79
2026-07-18 19:04:14 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/uploads/json.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 81
2026-07-18 19:04:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /admin/uploads/lv.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 74 80
2026-07-18 19:04:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/wp-includes/about.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 87 88
2026-07-18 19:04:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/wp-pridmag/lock.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 91 80
2026-07-18 19:04:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/js/about.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 75 80
2026-07-18 19:04:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /admin/uploads/media.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 77 80
2026-07-18 19:04:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/images/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 79 115
2026-07-18 19:04:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/coffee/about.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 90 81
2026-07-18 19:04:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /browse.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 80
2026-07-18 19:04:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /shell20211028.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 71 80
2026-07-18 19:04:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/twenty/twenty.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 89 83
2026-07-18 19:04:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/twentytwentytwo/alfa-rex.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 100 90
2026-07-18 19:04:15 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /index/lock.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 80
2026-07-18 19:04:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/style-engine/about.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 88 79
2026-07-18 19:04:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/theme-compat/chosen.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 89 88
2026-07-18 19:04:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/config.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 75 81
2026-07-18 19:04:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /moon.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 83
2026-07-18 19:04:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/ID3/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 79 86
2026-07-18 19:04:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/wp-conflg.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 80 89
2026-07-18 19:04:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 80
2026-07-18 19:04:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /css/chosen.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 68 80
2026-07-18 19:04:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/Requests/Utility/cc.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 89 84
2026-07-18 19:04:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/Text/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 80 83
2026-07-18 19:04:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /packed.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 85
2026-07-18 19:04:16 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/update.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 73 85
2026-07-18 19:04:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/astra/inc/fm.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 88 84
2026-07-18 19:04:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /link.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 81
2026-07-18 19:04:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/mu-plugins/gecko.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 85 93
2026-07-18 19:04:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /footer.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 100
2026-07-18 19:04:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/js/codemirror/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 89 80
2026-07-18 19:04:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /config.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 82
2026-07-18 19:04:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /fw.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 79
2026-07-18 19:04:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /post.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 79
2026-07-18 19:04:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ALFA_DATA/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 73 90
2026-07-18 19:04:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/blue/moon.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 87 80
2026-07-18 19:04:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/wp-pridmag/up.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 89 80
2026-07-18 19:04:17 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/html-api/alfa-rex.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 87 99
2026-07-18 19:04:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/upgrade-temp-backup/about.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 94 80
2026-07-18 19:04:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/includes/m.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 77 79
2026-07-18 19:04:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /images/admin.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 70 86
2026-07-18 19:04:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /admin/fckeditor/editor/filemanager/alfanew.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 100 98
2026-07-18 19:04:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/user/admin.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 77 105
2026-07-18 19:04:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/IXR/shell.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 79 80
2026-07-18 19:04:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-trackback.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 70 111
2026-07-18 19:04:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/content.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 76 79
2026-07-18 19:04:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/wp-conflg.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 76 79
2026-07-18 19:04:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/Requests/Utility/alfa-rex.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 95 90
2026-07-18 19:04:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/upgrade-temp-backup/ty.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 91 90
2026-07-18 19:04:18 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.well-known/content.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 77 95
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /index/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 104
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/autoload_classmap.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 87 89
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /include/wp-configs.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 76 80
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/js/chosen.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 76 81
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/maint/about.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 78 99
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/sodium_compat/alfa-rex.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 92 80
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /bg/xmrlpc.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 80
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/core-plugin/file-manager.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 101 81
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/uploads/423_index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 86 80
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/network/wp-conflg.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 84 80
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/blue/atomlib.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 90 81
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/byp.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 70 80
2026-07-18 19:04:19 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/theme-compat/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 88 80
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/wp-login.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 77 80
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /admin/editor/engine.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 77 80
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /chosen.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 80
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/images/smilies/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 90 80
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/aahana/json.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 87 80
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/html-api/about.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 84 80
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/uploads/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 82 89
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/images/smilies/about.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 90 80
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /assets/plugins/jquery-file-upload/server/php/include.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 110 80
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /images/lmfi2.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 70 80
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/function.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 75 80
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/Text/Diff/alfa-rex.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 88 80
2026-07-18 19:04:20 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /images/chosen.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 71 80
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /mah.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 80
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/json.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 73 81
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/fonts/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 81
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/Requests/file.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 81
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/themes/seotheme/classwithtostring.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 82
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/widgets/parx.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 82 80
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/Cache/footer.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 89 80
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /content.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 65 80
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/css/wp-conflg.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 80
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/admin-post.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 77 80
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/html-api/chosen.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 85 81
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/includes/cong.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 80 80
2026-07-18 19:04:22 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/network/shell.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 80 79
2026-07-18 19:04:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cgi-bin/upfile.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 79
2026-07-18 19:04:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/images/smilies/wp-login.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 93 80
2026-07-18 19:04:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /cong.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 80
2026-07-18 19:04:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-login.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 66 93
2026-07-18 19:04:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /makeasmtp.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 67 80
2026-07-18 19:04:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/blue/lock.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 87 80
2026-07-18 19:04:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/pwnd/classwithtostring.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 99 80
2026-07-18 19:04:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/Text/Diff/Renderer/about.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 94 80
2026-07-18 19:04:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /13.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 80
2026-07-18 19:04:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/sodium_compat/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 89 80
2026-07-18 19:04:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.well-known/cache-compat.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 82 112
2026-07-18 19:04:23 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-mail.php/wp-includes/ID3/rnEPv9.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 92 106
2026-07-18 19:04:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/php-compat/content.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 88 80
2026-07-18 19:04:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /admin/function.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 84
2026-07-18 19:04:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/fonts/admin.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 81 83
2026-07-18 19:04:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /doc.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 61 116
2026-07-18 19:04:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/block-patterns/autoload_classmap.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 102 81
2026-07-18 19:04:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/images/autoload_classmap.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 94 99
2026-07-18 19:04:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/certificates/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 88 79
2026-07-18 19:04:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /.well-known/pki-validation/wp-login.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 93 79
2026-07-18 19:04:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /css/install.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 104
2026-07-18 19:04:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 137 80
2026-07-18 19:04:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /xmrlpc.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 64 91
2026-07-18 19:04:24 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/colors/classwithtostring.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 95 80
2026-07-18 19:04:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 75 81
2026-07-18 19:04:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/fonts/install.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 83
2026-07-18 19:04:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /assets/edit.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 69 80
2026-07-18 19:04:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /file.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 62 89
2026-07-18 19:04:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 72 80
2026-07-18 19:04:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/Text/Diff/Engine/wp-login.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 95 97
2026-07-18 19:04:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/user/chosen.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 78 114
2026-07-18 19:04:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-content/uploads/wp-conflg.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 86 84
2026-07-18 19:04:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /ok.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 60 82
2026-07-18 19:04:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/IXR/alfa-rex.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 82 114
2026-07-18 19:04:25 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-admin/autoload_classmap.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 84 112
2026-07-18 19:04:26 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/sodium_compat/src/index.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 93 81
2026-07-18 19:04:26 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/block-patterns/about.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 90 80
2026-07-18 19:04:26 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /wp-includes/css/alfa-rex.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 82 80
2026-07-18 19:04:26 W3SVC13 itpwinwebsvr22 5.101.172.196 GET /images/stories/admin-post.php - 80 - 20.127.125.129 HTTP/1.1 - - - phpmyadmin.itpartnership.com 403 503 5 1372 83 134
@ Telegram