HEX
Server: Microsoft-IIS/10.0
System: Windows NT ITPWINWEBSVR22 10.0 build 20348 (Windows Server 2022) AMD64
User: www.conferencesearch.co.uk (0)
PHP: 8.3.30
Disabled: NONE
$ pwd: D:/IISLogFiles/W3SVC25/
Upload Files
File: D:/IISLogFiles/W3SVC25/u_ex260802.log
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-08-02 04:06:29
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-08-02 04:06:29 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 80 - 51.68.107.156 HTTP/1.1 Mozilla/5.0+(compatible;+MJ12bot/v2.0.5;+http://mj12bot.com/) - - webmail.itpartnership.com 302 0 0 379 200 52
2026-08-02 04:06:29 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 51.68.107.156 HTTP/1.1 Mozilla/5.0+(compatible;+MJ12bot/v2.0.5;+http://mj12bot.com/) - - webmail.itpartnership.com 302 0 0 359 190 8
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-08-02 10:04:38
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-08-02 10:04:37 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /owa/auth/logon.aspx - 80 - 173.211.70.38 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/137.0.0.0+Safari/537.36 - - webmail.itpartnership.com 302 0 0 397 629 351
2026-08-02 10:04:37 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 173.211.70.38 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/137.0.0.0+Safari/537.36 - - webmail.itpartnership.com 302 0 0 359 610 351
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-08-02 11:58:24
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-08-02 11:58:24 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 455 99 128
2026-08-02 11:58:26 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /this_is_a_new_hello_world.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 417 80 128
2026-08-02 11:58:26 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /24.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 123
2026-08-02 11:58:26 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /error_log.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 130
2026-08-02 11:58:26 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wso.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 134
2026-08-02 11:58:27 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /file59.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 129
2026-08-02 11:58:27 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /NewFile.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 130
2026-08-02 11:58:27 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /mpxct.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 121
2026-08-02 11:58:27 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ws71.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 126
2026-08-02 11:58:27 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ww3.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 135
2026-08-02 11:58:29 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /h02ugyh.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 135
2026-08-02 11:58:29 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /asd.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 127
2026-08-02 11:58:29 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /lzyrj.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 130
2026-08-02 11:58:30 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wkwk.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 128
2026-08-02 11:58:30 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ccc.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 123
2026-08-02 11:58:30 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /v.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 134
2026-08-02 11:58:30 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /kdgok.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 131
2026-08-02 11:58:30 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /666.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 127
2026-08-02 11:58:31 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-p2r3q9c8k4.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 393 68 127
2026-08-02 11:58:31 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /coenoecic.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 128
2026-08-02 11:58:31 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /god4m.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 125
2026-08-02 11:58:31 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /show/asa.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 131
2026-08-02 11:58:32 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /admin.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 61 122
2026-08-02 11:58:32 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /green.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 132
2026-08-02 11:58:32 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /sa.php7 - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 125
2026-08-02 11:58:32 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ss.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 122
2026-08-02 11:58:33 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /case.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 130
2026-08-02 11:58:33 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/radio.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 399 71 137
2026-08-02 11:58:33 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /edit.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 136
2026-08-02 11:58:36 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /budmachine/web/s.php p= 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 399 74 128
2026-08-02 11:58:38 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /autoload_classmap.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 401 72 136
2026-08-02 11:58:38 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /kao.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 133
2026-08-02 11:58:38 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /t.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 136
2026-08-02 11:58:38 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /jjrpo.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 136
2026-08-02 11:58:38 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/w.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 391 67 133
2026-08-02 11:58:38 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /php_info.php~ - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 137
2026-08-02 11:58:39 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /Contrller.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 130
2026-08-02 11:58:39 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /disquiet.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 133
2026-08-02 11:58:39 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/ioxi-o.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 401 72 127
2026-08-02 11:58:40 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /6kUgr4yGzxN.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 389 66 122
2026-08-02 11:58:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /duplicand.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 137
2026-08-02 11:58:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /qaez.php56 - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 128
2026-08-02 11:58:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /tool.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 137
2026-08-02 11:58:41 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /disengaging.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 389 66 129
2026-08-02 11:58:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /LvCBeZWaSgQ.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 389 66 136
2026-08-02 11:58:43 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /mudxizxnc.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 135
2026-08-02 11:58:44 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/fonts/about.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 413 78 133
2026-08-02 11:58:44 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /66.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 130
2026-08-02 11:58:44 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /index/function.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 395 69 122
2026-08-02 11:58:45 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 455 99 128
2026-08-02 11:58:45 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/images/wp-signup.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 417 80 133
2026-08-02 11:58:45 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /adminfuns.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 134
2026-08-02 11:58:45 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /click.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 122
2026-08-02 11:58:45 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /momo.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 129
2026-08-02 11:58:45 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /unbalanceable.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 393 68 122
2026-08-02 11:58:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /gdn.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 122
2026-08-02 11:58:46 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wan.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 131
2026-08-02 11:58:48 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /enclas.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 131
2026-08-02 11:58:48 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /yas.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 123
2026-08-02 11:58:48 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /lock.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 133
2026-08-02 11:58:48 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wso-x569.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 128
2026-08-02 11:58:49 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /assacc.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 379 61 132
2026-08-02 11:58:49 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /bo.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 130
2026-08-02 11:58:49 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /gmanz.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 138
2026-08-02 11:58:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /z57.php p= 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 61 128
2026-08-02 11:58:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /8.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 369 56 130
2026-08-02 11:58:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /gm.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 135
2026-08-02 11:58:51 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/css/bolt.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 401 72 131
2026-08-02 11:58:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /laudq.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 133
2026-08-02 11:58:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /undel.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 128
2026-08-02 11:58:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /pwyjwrfr.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 126
2026-08-02 11:58:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ioxi002.PhP7 - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 127
2026-08-02 11:58:52 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wen.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 131
2026-08-02 11:58:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /dx.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 137
2026-08-02 11:58:56 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ios.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 124
2026-08-02 11:58:58 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/IXR/admin.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 409 76 136
2026-08-02 11:58:58 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /x3.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 131
2026-08-02 11:59:03 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /aduot.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 133
2026-08-02 11:59:03 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /sx.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 129
2026-08-02 11:59:03 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /lp6.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 129
2026-08-02 11:59:06 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-admin/includes/nav.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 409 76 124
2026-08-02 11:59:06 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-blog.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 129
2026-08-02 11:59:06 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /xwpg.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 124
2026-08-02 11:59:06 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /av.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 128
2026-08-02 11:59:06 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/uploads/about.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 415 79 121
2026-08-02 11:59:07 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /test.php.orig - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 385 64 131
2026-08-02 11:59:07 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /02.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 124
2026-08-02 11:59:07 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /apk.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 124
2026-08-02 11:59:11 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-includes/fonts/index.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 413 78 127
2026-08-02 11:59:11 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /sa.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 126
2026-08-02 11:59:11 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /bolt.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 127
2026-08-02 11:59:11 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /we.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 127
2026-08-02 11:59:11 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /rupvs.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 136
2026-08-02 11:59:15 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /qhLaGswd9DS.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 389 66 129
2026-08-02 11:59:15 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /fns.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 124
2026-08-02 11:59:15 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /crgio.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 133
2026-08-02 11:59:15 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /bthil.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 128
2026-08-02 11:59:15 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /zwso.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 123
2026-08-02 11:59:15 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /diagnostic.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 387 65 134
2026-08-02 11:59:16 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /bbn.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 124
2026-08-02 11:59:16 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /bes.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 131
2026-08-02 11:59:16 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /485.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 136
2026-08-02 11:59:16 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /un.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 371 57 129
2026-08-02 11:59:16 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /.well-known/admin.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 401 72 125
2026-08-02 11:59:17 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /parturiency.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 389 66 135
2026-08-02 11:59:17 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /info.php.bak - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 383 63 127
2026-08-02 11:59:17 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /atomlib.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 133
2026-08-02 11:59:17 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /ar/mgsl.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 137
2026-08-02 11:59:17 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /783de.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 132
2026-08-02 11:59:17 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/about.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 399 71 123
2026-08-02 11:59:18 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-content/aws.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 395 69 138
2026-08-02 11:59:18 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /gfd.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 122
2026-08-02 11:59:19 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /hel.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 373 58 131
2026-08-02 11:59:19 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /kdrex.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 130
2026-08-02 11:59:19 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /raiz0.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 125
2026-08-02 11:59:19 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /network.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 132
2026-08-02 11:59:19 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /khgdl.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 377 60 133
2026-08-02 11:59:19 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /hplfuns.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 381 62 126
2026-08-02 11:59:20 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /wp-64wscx6shd.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 393 68 131
2026-08-02 11:59:20 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /sid3.php - 80 - 20.104.16.169 HTTP/1.1 - - - webmail.itpartnership.com 302 0 0 375 59 124
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-08-02 13:30:50
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-08-02 13:30:50 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 121.229.156.115 HTTP/1.1 Sogou+web+spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) - - webmail.itpartnership.com 302 0 0 359 207 226
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-08-02 18:34:47
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-08-02 18:34:47 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 223.109.252.234 HTTP/1.1 Sogou+web+spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) - - webmail.itpartnership.com 302 0 0 359 207 310
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-08-02 21:24:00
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-08-02 21:23:59 W3SVC25 itpwinwebsvr22 5.101.172.196 GET /robots.txt - 80 - 66.249.73.97 HTTP/1.1 Mozilla/5.0+(compatible;+Googlebot/2.1;++http://www.google.com/bot.html) - - webmail.itpartnership.com 302 0 0 379 241 103
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-08-02 22:57:59
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-08-02 22:57:59 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 112.86.225.203 HTTP/1.1 Sogou+web+spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07) - - webmail.itpartnership.com 302 0 0 359 207 281
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-08-02 23:41:08
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-08-02 23:41:08 W3SVC25 itpwinwebsvr22 5.101.172.196 GET / - 80 - 38.45.122.26 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/109.0.0.0+Safari/537.36 - - webmail.itpartnership.com 302 0 0 359 709 231
@ Telegram