HEX
Server: Microsoft-IIS/10.0
System: Windows NT ITPWINWEBSVR22 10.0 build 20348 (Windows Server 2022) AMD64
User: www.conferencesearch.co.uk (0)
PHP: 8.3.30
Disabled: NONE
Upload Files
File: D:/IISLogFiles/W3SVC28/u_ex260709.log
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 00:36:00
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 00:35:59 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 116.202.30.179 HTTP/1.1 - - - mta-sts.ssbsoft.co.uk 200 0 0 380 94 23
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 01:44:50
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 01:44:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 443 - 45.148.10.95 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/16.4.1+Safari/605.1.15 - - mta-sts.itpartnership.com 404 0 2 1425 260 19
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 02:03:33
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 02:03:33 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 198.235.24.137 HTTP/1.1 Hello+from+Palo+Alto+Networks,+find+out+more+about+our+scans+in+https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity - - mta-sts.sarahharvey.com 403 14 0 1394 203 10
2026-07-09 02:17:25 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 52.39.227.58 HTTP/1.1 'Valimail-Domain-Scanner/1.0+(+https://www.valimail.com/;+engineering@valimail.com)' - - mta-sts.hyperflight.co.uk 404 0 2 1406 407 144
2026-07-09 02:17:25 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 52.39.227.58 HTTP/1.1 'Valimail-Domain-Scanner/1.0+(+https://www.valimail.com/;+engineering@valimail.com)' - - mta-sts.hyperflight.co.uk 200 0 0 380 420 145
2026-07-09 02:30:55 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 176.65.148.30 HTTP/1.1 Mozilla/5.0+(compatible;+CT-WP-Scanner/1.0;++https://example.com/bot) - - mta-sts.sarahharvey.com 403 14 0 1413 236 15
2026-07-09 02:30:55 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-json/ - 443 - 176.65.148.30 HTTP/1.1 Mozilla/5.0+(compatible;+CT-WP-Scanner/1.0;++https://example.com/bot) - - mta-sts.sarahharvey.com 404 0 2 1425 244 14
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 POST / - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 405 0 1 1497 124 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 403 14 64 0 104 41
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 HEAD / - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 403 14 64 0 82 42
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xmlrpc.php rsd 443 - 176.65.148.30 HTTP/1.1 Mozilla/5.0+(compatible;+CT-WP-Scanner/1.0;++https://example.com/bot) - - mta-sts.sarahharvey.com 404 0 2 1425 250 15
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-config.php - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 117 22
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /storage/logs/laravel.log - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 128 22
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /config.php - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 114 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /api/.env - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 112 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /backup.zip - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 114 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.svn/wc.db - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 114 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /actuator/heapdump - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 121 22
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.ssh/id_ecdsa - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 117 22
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /backup.tar.gz - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 117 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.ssh/id_ed25519 - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 119 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /config.xml - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 114 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-admin/setup-config.php - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 129 22
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.ssh/id_rsa - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 115 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /_vti_pvt/service.pwd - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 124 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /database.sql - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 116 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /database_backup.sql - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 123 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /backup.sql - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 114 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /dump.sql - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 112 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /server.key - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 114 22
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /secrets.json - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 116 22
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /config/production.json - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 126 22
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.vscode/sftp.json - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 121 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /phpinfo.php - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 115 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /docker-compose.yml - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 122 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.bash_history - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 117 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.npmrc - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 110 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env.production - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 119 22
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 108 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 113 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /etc/ssl/private/server.key - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 130 21
2026-07-09 02:30:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /user_secrets.yml - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.sarahharvey.com 404 0 2 1406 120 95
2026-07-09 02:41:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 108.129.192.94 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+Chrome/120+Safari/537.36 - - mta-sts.sarahharvey.com 403 14 0 1394 183 15
2026-07-09 02:54:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.68.21 HTTP/1.1 - - - mta-sts.itpartnership.com 200 0 0 380 99 10
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 03:14:32
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 03:14:32 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 74.125.151.68 HTTP/1.1 Google-SMTP-STS - - mta-sts.ssbsoft.co.uk 200 0 0 520 206 90
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 03:47:18
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 03:47:18 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 85.137.57.233 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36 - - mta-sts.sarahharvey.com:443 403 14 0 1233 377 87
2026-07-09 03:47:19 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 85.137.57.233 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36 - - mta-sts.sarahharvey.com:443 403 14 0 1233 377 87
2026-07-09 03:47:19 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 85.137.57.233 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36 - - mta-sts.sarahharvey.com:443 403 14 0 1233 377 90
2026-07-09 03:47:19 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 85.137.57.233 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36 - - mta-sts.sarahharvey.com:443 403 14 0 1233 377 90
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /phpinfo - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 201 16
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /phpinfo.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 205 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /test.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 202 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /_profiler/phpinfo - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 221 16
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /info.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 218 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /php.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 211 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /php_info.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 216 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /i.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 215 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /pi.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 200 18
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 403 14 0 1372 210 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /admin/phpinfo.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 221 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /pinfo.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 219 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /php_version.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 225 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.aws/credentials - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 226 21
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 198 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env.example - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 216 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env.local - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 220 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env.backup - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 205 15
2026-07-09 03:56:36 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /config/.env - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1384 215 58
2026-07-09 04:04:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 74.125.151.130 HTTP/1.1 Google-SMTP-STS - - mta-sts.sarahharvey.com 200 0 0 520 208 90
2026-07-09 04:06:54 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.136.8 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 278
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 04:52:03
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 04:52:03 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 80 - 45.130.203.138 HTTP/1.1 Python-urllib/3.10 - - mta-sts.itpartnership.com 404 0 2 1403 138 17
2026-07-09 04:58:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 2.24.123.25 HTTP/2 DNSCrawler/1.0 - - mta-sts.itpartnership.com 200 0 0 194 173 196
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 05:31:13
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 05:31:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 133.242.174.119 HTTP/1.1 Mozilla/5.0+(Linux;+Android+10;+K)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/142.0.0.0+Mobile+Safari/537.36 - - mta-sts.sarahharvey.com 404 0 2 1406 271 248
2026-07-09 05:31:14 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 133.242.174.119 HTTP/1.1 Mozilla/5.0+(Linux;+Android+10;+K)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/142.0.0.0+Mobile+Safari/537.36 - - mta-sts.sarahharvey.com 403 14 0 1394 261 249
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 05:47:16
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 05:47:15 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env - 443 - 102.220.160.176 HTTP/2 Go-http-client/2.0 - - mta-sts.hyperflight.co.uk:443 404 0 2 1245 166 30
2026-07-09 05:47:17 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 443 - 102.220.160.176 HTTP/2 Go-http-client/2.0 - - mta-sts.hyperflight.co.uk:443 404 0 2 1245 171 32
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 403 14 0 1372 326 13
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-includes/ID3/license.txt - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 355 24
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /feed/ - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 333 21
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xmlrpc.php rsd 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 342 86
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /blog/wp-includes/wlwmanifest.xml - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 360 114
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /web/wp-includes/wlwmanifest.xml - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 359 147
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wordpress/wp-includes/wlwmanifest.xml - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 365 156
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp/wp-includes/wlwmanifest.xml - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 358 22
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /2020/wp-includes/wlwmanifest.xml - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 360 93
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /2019/wp-includes/wlwmanifest.xml - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 360 140
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /2021/wp-includes/wlwmanifest.xml - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 360 84
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /shop/wp-includes/wlwmanifest.xml - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 360 59
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp1/wp-includes/wlwmanifest.xml - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 359 44
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /test/wp-includes/wlwmanifest.xml - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 360 23
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /site/wp-includes/wlwmanifest.xml - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 360 23
2026-07-09 05:48:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /cms/wp-includes/wlwmanifest.xml - 80 - 23.251.133.140 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1384 359 24
2026-07-09 05:58:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.68.52 HTTP/1.1 - - - mta-sts.taprogge.co.uk 200 0 0 380 96 9
2026-07-09 06:13:31 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.67.18 HTTP/1.1 - - - mta-sts.taprogge.co.uk 200 0 0 380 96 5
2026-07-09 06:16:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 67.175.185.198 HTTP/2 curl/8.7.1 - - mta-sts.hyperflight.co.uk 200 0 0 101 159 208
2026-07-09 06:25:42 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 74.7.230.12 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - mta-sts.expressmusic.co.uk 404 0 2 1245 419 99
2026-07-09 06:25:42 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 74.7.241.5 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+GPTBot/1.4;++https://openai.com/gptbot) - - mta-sts.expressmusic.co.uk 403 14 0 1233 313 97
2026-07-09 06:29:18 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.68.26 HTTP/1.1 - - - mta-sts.itpartnership.com 200 0 0 380 99 10
2026-07-09 06:29:42 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 74.7.175.184 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - mta-sts.hyperflight.co.uk 404 0 2 1245 417 99
2026-07-09 06:29:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 74.7.242.39 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+GPTBot/1.4;++https://openai.com/gptbot) - - mta-sts.hyperflight.co.uk 403 14 0 1233 311 96
2026-07-09 06:31:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 74.7.228.56 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - mta-sts.itpartnership.com 404 0 2 1245 417 95
2026-07-09 06:31:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 74.7.241.50 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+GPTBot/1.4;++https://openai.com/gptbot) - - mta-sts.itpartnership.com 403 14 0 1233 311 92
2026-07-09 06:42:31 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 74.7.244.8 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - mta-sts.sarahharvey.com 404 0 2 1245 413 95
2026-07-09 06:42:34 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 74.7.227.31 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+GPTBot/1.4;++https://openai.com/gptbot) - - mta-sts.sarahharvey.com 403 14 0 1233 307 95
2026-07-09 06:44:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 74.7.175.180 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - mta-sts.ssbsoft.co.uk 404 0 2 1245 409 99
2026-07-09 06:44:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 74.7.241.32 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+GPTBot/1.4;++https://openai.com/gptbot) - - mta-sts.ssbsoft.co.uk 403 14 0 1233 303 97
2026-07-09 06:45:28 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 74.7.230.11 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - mta-sts.taprogge.co.uk 404 0 2 1245 411 95
2026-07-09 06:45:31 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 74.7.227.188 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+GPTBot/1.4;++https://openai.com/gptbot) - - mta-sts.taprogge.co.uk 403 14 0 1233 305 96
2026-07-09 06:58:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 74.125.151.194 HTTP/1.1 Google-SMTP-STS - - mta-sts.taprogge.co.uk 200 0 0 520 207 92
2026-07-09 07:03:33 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.68.26 HTTP/1.1 - - - mta-sts.itpartnership.com 200 0 0 380 99 9
2026-07-09 07:03:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.131.27 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 145
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 07:21:31
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 07:21:31 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 192.178.16.128 HTTP/1.1 Google-SMTP-STS - - mta-sts.itpartnership.com 200 0 0 520 210 91
2026-07-09 07:22:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.68.52 HTTP/1.1 - - - mta-sts.itpartnership.com 200 0 0 380 99 9
2026-07-09 07:23:58 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 443 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1425 177 64
2026-07-09 07:23:58 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 443 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1425 179 63
2026-07-09 07:24:00 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 80 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1403 177 62
2026-07-09 07:24:00 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 80 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1403 179 62
2026-07-09 07:25:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 443 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1425 176 61
2026-07-09 07:25:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 443 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1425 178 63
2026-07-09 07:25:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 80 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1403 176 62
2026-07-09 07:25:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 80 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1403 178 63
2026-07-09 07:25:25 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 443 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.itpartnership.com 404 0 2 1425 176 62
2026-07-09 07:25:25 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 443 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.itpartnership.com 404 0 2 1425 178 62
2026-07-09 07:25:26 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 80 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.itpartnership.com 404 0 2 1403 176 62
2026-07-09 07:25:26 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 80 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.itpartnership.com 404 0 2 1403 178 61
2026-07-09 07:29:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 443 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.sarahharvey.com 404 0 2 1425 174 62
2026-07-09 07:29:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 443 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.sarahharvey.com 404 0 2 1425 176 61
2026-07-09 07:29:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 80 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.sarahharvey.com 404 0 2 1403 174 61
2026-07-09 07:29:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 80 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.sarahharvey.com 404 0 2 1403 176 64
2026-07-09 07:30:28 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 443 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.ssbsoft.co.uk 404 0 2 1425 172 62
2026-07-09 07:30:28 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 443 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.ssbsoft.co.uk 404 0 2 1425 174 63
2026-07-09 07:30:29 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 80 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.ssbsoft.co.uk 404 0 2 1403 172 63
2026-07-09 07:30:29 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 80 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.ssbsoft.co.uk 404 0 2 1403 174 63
2026-07-09 07:31:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 443 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.taprogge.co.uk 404 0 2 1425 173 61
2026-07-09 07:31:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 443 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.taprogge.co.uk 404 0 2 1425 175 61
2026-07-09 07:31:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 80 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.taprogge.co.uk 404 0 2 1403 173 61
2026-07-09 07:31:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 80 - 91.92.241.196 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - - mta-sts.taprogge.co.uk 404 0 2 1403 175 61
2026-07-09 07:41:18 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env - 443 - 94.154.43.229 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1425 240 16
2026-07-09 07:41:53 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 23.180.120.147 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/122.0.0.0+Safari/537.36 - - mta-sts.expressmusic.co.uk 403 14 0 1394 298 10
2026-07-09 07:41:53 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /core/CHANGELOG.txt - 443 - 23.180.120.147 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+17_1+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.1+Mobile/15E148+Safari/604.1 - - mta-sts.expressmusic.co.uk 404 0 2 1406 242 10
2026-07-09 07:41:53 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /CHANGELOG.txt - 443 - 23.180.120.147 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+16_6+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/16.6+Mobile/15E148+Safari/604.1 - - mta-sts.expressmusic.co.uk 404 0 2 1406 237 10
2026-07-09 07:41:53 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /api/v1/health - 443 - 23.180.120.147 HTTP/1.1 Mozilla/5.0+(Linux;+Android+14;+Pixel+8)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/122.0.0.0+Mobile+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1406 245 11
2026-07-09 07:41:53 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /api/v1/version - 443 - 23.180.120.147 HTTP/1.1 Mozilla/5.0+(Linux;+Android+13;+SM-S911B)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/122.0.0.0+Mobile+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1406 247 11
2026-07-09 07:41:53 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /health - 443 - 23.180.120.147 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/121.0.0.0+Safari/537.36+OPR/107.0.0.0 - - mta-sts.expressmusic.co.uk 404 0 2 1406 246 53
2026-07-09 07:42:43 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 47.91.92.4 HTTP/2 postfix-tlspol/1.8.22 - - mta-sts.sarahharvey.com 200 0 0 194 176 33
2026-07-09 07:42:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 47.91.92.4 HTTP/2 postfix-tlspol/1.8.22 - - mta-sts.sarahharvey.com 200 0 0 194 176 41
2026-07-09 07:44:40 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.73.72 HTTP/1.1 - - - mta-sts.taprogge.co.uk 200 0 0 380 96 231
2026-07-09 07:45:35 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 94.154.43.183 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - mta-sts.expressmusic.co.uk 403 14 0 1413 236 10
2026-07-09 07:52:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 3.213.117.217 HTTP/1.1 - - - mta-sts.sarahharvey.com 200 0 0 380 85 80
2026-07-09 07:56:19 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 52.39.163.155 HTTP/1.1 'Valimail-Domain-Scanner/1.0+(+https://www.valimail.com/;+engineering@valimail.com)' - - mta-sts.sarahharvey.com 404 0 2 1406 405 145
2026-07-09 07:56:19 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 52.39.163.155 HTTP/1.1 'Valimail-Domain-Scanner/1.0+(+https://www.valimail.com/;+engineering@valimail.com)' - - mta-sts.sarahharvey.com 200 0 0 380 418 144
2026-07-09 07:58:52 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.67.30 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 5
2026-07-09 07:58:52 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.68.26 HTTP/1.1 - - - mta-sts.itpartnership.com 200 0 0 380 99 10
2026-07-09 08:04:54 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.73.48 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 230
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /phpinfo - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 216 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /phpinfo.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 204 18
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /test.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 217 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /_profiler/phpinfo - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 210 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /info.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 201 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /php.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 216 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /php_info.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 215 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /i.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 208 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /pi.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 215 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 403 14 0 1372 209 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /admin/phpinfo.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 226 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /pinfo.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 212 14
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /php_version.php - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 224 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.aws/credentials - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 209 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 197 16
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env.example - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 215 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env.local - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 213 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env.backup - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 214 15
2026-07-09 08:09:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /config/.env - 80 - 45.153.34.182 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/91.0.4472.124+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1384 220 60
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 08:55:34
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 08:55:34 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.138.27 HTTP/1.1 - - - mta-sts.taprogge.co.uk 200 0 0 380 96 243
2026-07-09 08:56:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.88.55 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 27
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 09:17:07
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 09:17:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.138.73 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 200 0 0 380 100 238
2026-07-09 09:25:38 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 66.249.89.162 HTTP/1.1 Google-SMTP-STS - - mta-sts.expressmusic.co.uk 200 0 0 520 211 90
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 09:43:52
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 09:43:52 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 213.199.33.48 HTTP/1.1 Python/3.14+aiohttp/3.14.1 - - mta-sts.expressmusic.co.uk 200 0 0 520 166 17
2026-07-09 09:48:23 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.65.24 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 200 0 0 380 100 14
2026-07-09 09:54:00 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.130.48 HTTP/1.1 - - - mta-sts.taprogge.co.uk 200 0 0 380 96 230
2026-07-09 10:09:14 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.138.73 HTTP/1.1 - - - mta-sts.taprogge.co.uk 200 0 0 380 96 242
2026-07-09 10:13:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env - 443 - 94.154.43.178 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - mta-sts.sarahharvey.com 404 0 2 1425 237 9
2026-07-09 10:13:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env - 443 - 94.154.43.183 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - mta-sts.itpartnership.com 404 0 2 1425 239 11
2026-07-09 10:20:40 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.67.30 HTTP/1.1 - - - mta-sts.itpartnership.com 200 0 0 380 99 5
2026-07-09 10:26:38 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 94.154.43.187 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - mta-sts.sarahharvey.com 403 14 0 1413 233 10
2026-07-09 10:26:38 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 94.154.43.184 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - mta-sts.itpartnership.com 403 14 0 1413 235 10
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 10:55:21
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 10:55:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.65.3 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 200 0 0 380 100 12
2026-07-09 11:00:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 72.62.244.82 HTTP/2 postfix-tlspol/1.8.22 - - mta-sts.expressmusic.co.uk 200 0 0 194 182 330
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 11:17:00
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 11:17:00 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.138.27 HTTP/1.1 - - - mta-sts.taprogge.co.uk 200 0 0 380 96 219
2026-07-09 11:31:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.69.24 HTTP/1.1 - - - mta-sts.itpartnership.com 200 0 0 380 99 21
2026-07-09 11:35:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.69.24 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 200 0 0 380 100 22
2026-07-09 11:36:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.64.8 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 200 0 0 380 100 13
2026-07-09 11:38:39 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.68.52 HTTP/1.1 - - - mta-sts.itpartnership.com 200 0 0 380 99 10
2026-07-09 11:40:52 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.68.26 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 10
2026-07-09 11:55:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 74.125.151.34 HTTP/1.1 Google-SMTP-STS - - mta-sts.hyperflight.co.uk 200 0 0 520 210 91
2026-07-09 12:05:54 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 38.49.212.73 HTTP/2 postfix-tlspol/1.8.22 - - mta-sts.expressmusic.co.uk 200 0 0 194 182 163
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 12:22:51
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 12:22:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.67.18 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 5
2026-07-09 12:38:25 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.131.4 HTTP/1.1 - - - mta-sts.sarahharvey.com 200 0 0 380 97 155
2026-07-09 12:45:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.69.24 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 200 0 0 380 100 21
2026-07-09 12:53:44 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.67.18 HTTP/1.1 - - - mta-sts.itpartnership.com 200 0 0 380 99 6
2026-07-09 13:04:55 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.65.3 HTTP/1.1 - - - mta-sts.itpartnership.com 200 0 0 380 99 11
2026-07-09 13:05:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.81.72 HTTP/1.1 - - - mta-sts.itpartnership.com 200 0 0 380 99 27
2026-07-09 13:10:19 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 185.236.108.229 HTTP/2 postfix-tlspol/1.8.22 - - mta-sts.itpartnership.com 200 0 0 194 180 64
2026-07-09 13:13:27 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.67.30 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 5
2026-07-09 13:14:59 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.68.21 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 10
2026-07-09 13:19:18 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 80 - 8.235.35.102 HTTP/1.1 Mozilla/5.0+(compatible;+CMS-Checker/1.0;++https://example.com) - - mta-sts.sarahharvey.com 403 14 0 1372 149 179
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 13:36:46
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 13:36:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.73.48 HTTP/1.1 - - - mta-sts.taprogge.co.uk 200 0 0 380 96 226
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 13:56:15
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 13:56:15 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 52.39.163.155 HTTP/1.1 'Valimail-Domain-Scanner/1.0+(+https://www.valimail.com/;+engineering@valimail.com)' - - mta-sts.expressmusic.co.uk 404 0 2 1406 408 146
2026-07-09 13:56:15 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 52.39.163.155 HTTP/1.1 'Valimail-Domain-Scanner/1.0+(+https://www.valimail.com/;+engineering@valimail.com)' - - mta-sts.expressmusic.co.uk 200 0 0 380 421 147
2026-07-09 14:04:38 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 443 - 185.93.89.147 HTTP/1.1 Mozilla/5.0+(compatible;+GitFinder/1.0) - - mta-sts.sarahharvey.com 404 0 2 1406 126 13
2026-07-09 14:04:38 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 80 - 185.93.89.147 HTTP/1.1 Mozilla/5.0+(compatible;+GitFinder/1.0) - - mta-sts.sarahharvey.com 404 0 2 1384 126 14
2026-07-09 14:18:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.68.26 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 9
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 14:42:32
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 14:42:32 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.131.4 HTTP/1.1 - - - mta-sts.sarahharvey.com 200 0 0 380 97 150
2026-07-09 14:48:25 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 202.78.167.207 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+17_5+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.5+Mobile/15E148+Safari/604.1 - https://mta-sts.sarahharvey.com/ mta-sts.sarahharvey.com 403 14 0 1413 430 224
2026-07-09 14:48:25 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /open/visitors/info/gets uuid=1 443 - 202.78.167.207 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+17_5+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.5+Mobile/15E148+Safari/604.1 - https://mta-sts.sarahharvey.com/ mta-sts.sarahharvey.com 404 0 2 1425 460 225
2026-07-09 14:48:25 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /open/ - 443 - 202.78.167.207 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+17_5+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.5+Mobile/15E148+Safari/604.1 - https://mta-sts.sarahharvey.com/ mta-sts.sarahharvey.com 404 0 2 1425 435 229
2026-07-09 14:48:25 W3SVC28 itpwinwebsvr22 5.101.172.198 POST /api/gateway/heartbeat - 443 - 202.78.167.207 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+17_5+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.5+Mobile/15E148+Safari/604.1 - https://mta-sts.sarahharvey.com/ mta-sts.sarahharvey.com 404 0 2 1425 505 227
2026-07-09 14:55:42 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.8.56 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 101
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 15:12:06
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 15:12:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.81.72 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 200 0 0 380 100 26
2026-07-09 15:12:18 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 80 - 35.243.216.227 HTTP/1.1 Mozilla/5.0+(compatible;+CMS-Checker/1.0;++https://example.com) - - mta-sts.expressmusic.co.uk 403 14 0 1372 152 133
2026-07-09 15:12:23 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 80 - 35.243.216.227 HTTP/1.1 Mozilla/5.0+(compatible;+CMS-Checker/1.0;++https://example.com) - - mta-sts.hyperflight.co.uk 403 14 0 1372 151 135
2026-07-09 15:12:41 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 80 - 35.243.216.227 HTTP/1.1 Mozilla/5.0+(compatible;+CMS-Checker/1.0;++https://example.com) - - mta-sts.ssbsoft.co.uk 403 14 0 1372 147 229
2026-07-09 15:14:33 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 74.125.151.66 HTTP/1.1 Google-SMTP-STS - - mta-sts.ssbsoft.co.uk 200 0 0 520 206 91
2026-07-09 15:14:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 185.180.141.10 HTTP/1.1 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/123.0.6312.86+Safari/537.36 - - mta-sts.expressmusic.co.uk 403 14 0 1394 187 113
2026-07-09 15:14:57 W3SVC28 itpwinwebsvr22 5.101.172.198 POST /mcp - 443 - 185.180.141.7 HTTP/2 python-httpx/0.28.1 - - mta-sts.expressmusic.co.uk 404 0 2 1245 531 117
2026-07-09 15:14:58 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /sse - 443 - 185.180.141.7 HTTP/2 python-httpx/0.28.1 - - mta-sts.expressmusic.co.uk 404 0 2 1245 272 117
2026-07-09 15:14:58 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /favicon.ico - 443 - 185.180.141.8 HTTP/1.1 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/123.0.6312.86+Safari/537.36 - - mta-sts.expressmusic.co.uk 404 0 2 1413 198 151
2026-07-09 15:15:16 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.69.24 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 200 0 0 380 100 21
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 15:33:34
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 15:33:34 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.73.48 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 233
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 16:04:49
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 16:04:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 74.125.151.130 HTTP/1.1 Google-SMTP-STS - - mta-sts.sarahharvey.com 200 0 0 520 208 89
2026-07-09 16:11:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.76.72 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 200 0 0 380 100 12
2026-07-09 16:12:34 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.138.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 220
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 16:33:02
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 16:33:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 99 127
2026-07-09 16:33:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /this_is_a_new_hello_world.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 80 84
2026-07-09 16:33:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ip.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 82
2026-07-09 16:33:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /fw/faiyy.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 63 83
2026-07-09 16:33:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-temp.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 62 82
2026-07-09 16:33:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-content/cong.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 71 83
2026-07-09 16:33:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-includes/css/index.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 76 83
2026-07-09 16:33:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /jj.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 83
2026-07-09 16:33:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /x.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 56 83
2026-07-09 16:33:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /sym403.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 82
2026-07-09 16:33:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /zoro.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 93
2026-07-09 16:33:02 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /hoeig.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 90
2026-07-09 16:33:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /asd67.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 82
2026-07-09 16:33:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /alls.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 90
2026-07-09 16:33:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ops.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 94
2026-07-09 16:33:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /txets.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 82
2026-07-09 16:33:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /dex.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 94
2026-07-09 16:33:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xpwer1.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 83
2026-07-09 16:33:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /flox.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 82
2026-07-09 16:33:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /popo.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 82
2026-07-09 16:33:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /yas.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 112
2026-07-09 16:33:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /file61.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 86
2026-07-09 16:33:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /water.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 91
2026-07-09 16:33:04 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /nano.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 82
2026-07-09 16:33:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /moon.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 90
2026-07-09 16:33:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-info.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 62 82
2026-07-09 16:33:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xyn.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 82
2026-07-09 16:33:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /sump1.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 82
2026-07-09 16:33:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /aa.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 88
2026-07-09 16:33:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /file5.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 124
2026-07-09 16:33:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /2000.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 83
2026-07-09 16:33:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /mds.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 82
2026-07-09 16:33:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-blink.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 63 83
2026-07-09 16:33:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /zc-208.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 83
2026-07-09 16:33:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-post-data.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 67 83
2026-07-09 16:33:05 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /classwithtostring.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 72 82
2026-07-09 16:33:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /sid4.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 86
2026-07-09 16:33:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-includes/js/jquery/ - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 73 83
2026-07-09 16:33:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-includes/l10n/ - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 69 83
2026-07-09 16:33:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wmore1.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 82
2026-07-09 16:33:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /solo1.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 82
2026-07-09 16:33:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-includes/assets/ - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 71 82
2026-07-09 16:33:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /cong.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 88
2026-07-09 16:33:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-includes/css/ - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 67 82
2026-07-09 16:33:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /public/css.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 65 134
2026-07-09 16:33:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /inc.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 123
2026-07-09 16:33:06 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 89
2026-07-09 16:33:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /btex.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 92
2026-07-09 16:33:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-includes/css/index.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 76 88
2026-07-09 16:33:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /a1.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 82
2026-07-09 16:33:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ad.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 95
2026-07-09 16:33:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /crgio.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 83
2026-07-09 16:33:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /we.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 95
2026-07-09 16:33:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /dr.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 93
2026-07-09 16:33:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /sixxis.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 85
2026-07-09 16:33:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /insc.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 91
2026-07-09 16:33:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-test.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 62 82
2026-07-09 16:33:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ortasekerli1.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 67 103
2026-07-09 16:33:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /1996.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 89
2026-07-09 16:33:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /mg.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 83
2026-07-09 16:33:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /themes.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 111
2026-07-09 16:33:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wdone1.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 83
2026-07-09 16:33:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /root.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 121
2026-07-09 16:33:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /a7.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 86
2026-07-09 16:33:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xxa.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 82
2026-07-09 16:33:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wert.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 83
2026-07-09 16:33:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /academy.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 62 83
2026-07-09 16:33:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /js.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 83
2026-07-09 16:33:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-content/uploads/2021/02/index.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 87 97
2026-07-09 16:33:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /bthil.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 86
2026-07-09 16:33:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /h02ugyh.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 62 89
2026-07-09 16:33:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /lol.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 82
2026-07-09 16:33:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xwpg.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 87
2026-07-09 16:33:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /olik.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 85
2026-07-09 16:33:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /drykl.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 83
2026-07-09 16:33:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /as.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 83
2026-07-09 16:33:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /100.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 83
2026-07-09 16:33:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xa.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 88
2026-07-09 16:33:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /setup.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 114
2026-07-09 16:33:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /aboute.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 82
2026-07-09 16:33:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-file-120.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 66 83
2026-07-09 16:33:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /like.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 83
2026-07-09 16:33:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ingfo.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 82
2026-07-09 16:33:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /dropdown.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 63 83
2026-07-09 16:33:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /zxcs.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 89
2026-07-09 16:33:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ccs.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 82
2026-07-09 16:33:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /fone1.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 82
2026-07-09 16:33:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /st.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 90
2026-07-09 16:33:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /nwflm.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 88
2026-07-09 16:33:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /white.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 86
2026-07-09 16:33:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ggb.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 82
2026-07-09 16:33:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /201.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 85
2026-07-09 16:33:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /sec.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 83
2026-07-09 16:33:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /122.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 88
2026-07-09 16:33:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /op.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 120
2026-07-09 16:33:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /s1.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 85
2026-07-09 16:33:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /turkshell.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 64 85
2026-07-09 16:33:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /cc3.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 92
2026-07-09 16:33:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /dx.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 82
2026-07-09 16:33:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /core.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 85
2026-07-09 16:33:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /bak.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 96
2026-07-09 16:33:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /special.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 63 99
2026-07-09 16:33:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /bajah.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 84
2026-07-09 16:33:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /miru1.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 82
2026-07-09 16:33:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /19.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 87
2026-07-09 16:33:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /core.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 84
2026-07-09 16:33:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /zip.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 130
2026-07-09 16:33:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /mac.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 82
2026-07-09 16:33:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /de.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 57 87
2026-07-09 16:33:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /bypass.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 89
2026-07-09 16:33:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /kq1.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 58 83
2026-07-09 16:33:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /89wNbl.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 82
2026-07-09 16:33:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /class-walker-footer-dev.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 78 83
2026-07-09 16:33:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /v543.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 82
2026-07-09 16:33:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /green1.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 82
2026-07-09 16:33:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /fffm.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 82
2026-07-09 16:33:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /autoload_classmap/function.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 81 82
2026-07-09 16:33:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wander.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 88
2026-07-09 16:33:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wander.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 62 83
2026-07-09 16:33:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /7.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 56 83
2026-07-09 16:33:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /output.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 83
2026-07-09 16:33:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /w1px.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 85
2026-07-09 16:33:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /file6.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 61 84
2026-07-09 16:33:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-includes/l10n/min.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 76 82
2026-07-09 16:33:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /yawa.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 59 82
2026-07-09 16:33:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-includes/l10n/themes.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 79 82
2026-07-09 16:33:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /public/class-walker-footer-dev.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 85 96
2026-07-09 16:33:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /qterm.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 60 82
2026-07-09 16:33:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /semiirrep.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 64 82
2026-07-09 16:33:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /cgi-bin/index.php - 80 - 20.220.9.73 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 404 0 2 1384 68 138
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 16:52:54
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 16:52:54 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env - 443 - 94.154.43.229 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - mta-sts.hyperflight.co.uk 404 0 2 1425 239 10
2026-07-09 16:59:40 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 185.230.212.98 HTTP/1.1 Apache-HttpClient/4.5.14+(Java/17.0.18) - - mta-sts.sarahharvey.com 200 0 64 0 208 15
2026-07-09 17:05:55 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 84.247.133.56 HTTP/1.1 Python/3.14+aiohttp/3.14.1 - - mta-sts.hyperflight.co.uk 200 0 0 520 165 17
2026-07-09 17:15:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.14.40 HTTP/1.1 - - - mta-sts.hyperflight.co.uk 200 0 0 380 99 117
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 POST / - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 405 0 1 1497 126 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 HEAD / - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 403 14 64 0 84 42
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 403 14 64 0 106 42
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /docker-compose.yml - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 124 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /backup.tar.gz - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 119 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /storage/logs/laravel.log - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 130 22
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /config.php - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 116 23
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /user_secrets.yml - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 122 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env.production - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 121 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /database_backup.sql - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 125 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /etc/ssl/private/server.key - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 132 22
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /dump.sql - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 114 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /server.key - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 116 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /secrets.json - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 118 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.vscode/sftp.json - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 123 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /backup.sql - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 116 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /database.sql - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 118 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /backup.zip - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 116 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-config.php - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 119 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-admin/setup-config.php - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 131 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.ssh/id_ed25519 - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 121 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.npmrc - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 112 22
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.ssh/id_ecdsa - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 119 22
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.ssh/id_rsa - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 117 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /_vti_pvt/service.pwd - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 126 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/HEAD - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 115 22
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 110 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /config/production.json - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 128 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /api/.env - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 114 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /phpinfo.php - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 117 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /actuator/heapdump - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 123 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.svn/wc.db - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 116 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.bash_history - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 119 21
2026-07-09 17:20:20 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /config.xml - 443 - 81.171.72.135 HTTP/1.1 Go-http-client/1.1 - - mta-sts.itpartnership.com 404 0 2 1406 116 21
2026-07-09 17:29:15 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 94.154.43.186 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - mta-sts.hyperflight.co.uk 403 14 0 1413 235 10
2026-07-09 17:31:03 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 204.194.222.61 HTTP/1.1 - - - mta-sts.sarahharvey.com 200 0 0 380 85 81
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 17:50:23
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 17:50:23 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 8.211.42.14 HTTP/2 postfix-tlspol/1.8.22 - - mta-sts.sarahharvey.com 200 0 0 194 176 34
2026-07-09 17:51:42 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env - 443 - 94.154.43.187 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - mta-sts.taprogge.co.uk 404 0 2 1425 236 10
2026-07-09 18:01:56 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.68.21 HTTP/1.1 - - - mta-sts.itpartnership.com 200 0 0 380 99 10
2026-07-09 18:09:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.65.3 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 200 0 0 380 100 11
2026-07-09 18:10:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 98.137.68.100 HTTP/1.1 AHC/2.1 - - mta-sts.hyperflight.co.uk 200 0 0 406 127 144
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 18:29:42
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 18:29:42 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 94.154.43.188 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - mta-sts.taprogge.co.uk 403 14 0 1413 232 9
2026-07-09 18:33:42 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.git/config - 443 - 144.172.100.174 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64) - - mta-sts.hyperflight.co.uk 404 0 2 1425 149 159
2026-07-09 18:45:57 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 80 - 93.158.90.242 HTTP/1.1 Mozilla/5.0+(Windows+NT+6.1;+Win64;+x64;+rv:109.0)+Gecko/20100101+Firefox/115 - - mta-sts.itpartnership.com 403 14 0 1391 274 46
2026-07-09 18:58:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 74.125.151.195 HTTP/1.1 Google-SMTP-STS - - mta-sts.taprogge.co.uk 200 0 0 520 207 89
2026-07-09 19:06:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 80 - 34.26.24.37 HTTP/1.1 Mozilla/5.0+(compatible;+CMS-Checker/1.0;++https://example.com) - - mta-sts.expressmusic.co.uk 403 14 0 1372 152 286
2026-07-09 19:06:13 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 80 - 34.26.24.37 HTTP/1.1 Mozilla/5.0+(compatible;+CMS-Checker/1.0;++https://example.com) - - mta-sts.hyperflight.co.uk 403 14 0 1372 151 254
2026-07-09 19:06:31 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 80 - 34.26.24.37 HTTP/1.1 Mozilla/5.0+(compatible;+CMS-Checker/1.0;++https://example.com) - - mta-sts.ssbsoft.co.uk 403 14 0 1372 147 221
2026-07-09 19:07:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 100 84
2026-07-09 19:07:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /this_is_a_new_hello_world.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 81 85
2026-07-09 19:07:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /asq.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 83
2026-07-09 19:07:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ww.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 82
2026-07-09 19:07:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /anq.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 82
2026-07-09 19:07:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /1.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 57 82
2026-07-09 19:07:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /asw.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 82
2026-07-09 19:07:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /g.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 57 84
2026-07-09 19:07:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /go.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 84
2026-07-09 19:07:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xx33.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 60 82
2026-07-09 19:07:45 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /id.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 83
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xa.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 82
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /99.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 83
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /44.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 84
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /77.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 82
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /k.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 57 82
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /11.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 83
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wpgir.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 61 82
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wordpress/wp-info.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 73 83
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-press.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 64 82
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /abfdewi.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 63 82
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wpccc.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 61 82
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ax026.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 61 82
2026-07-09 19:07:46 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /acw.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 82
2026-07-09 19:07:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /acb.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 82
2026-07-09 19:07:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-content/plugins/fix/da.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 81 82
2026-07-09 19:07:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /acv.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 82
2026-07-09 19:07:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /asqzrk.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 62 83
2026-07-09 19:07:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /images/pearl/index.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 74 82
2026-07-09 19:07:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /gb/ss.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 61 82
2026-07-09 19:07:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /33.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 82
2026-07-09 19:07:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /cc.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 82
2026-07-09 19:07:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /b00ea3/index.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 68 82
2026-07-09 19:07:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ad.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 82
2026-07-09 19:07:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-content/xzurqs.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 73 92
2026-07-09 19:07:47 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /v.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 57 82
2026-07-09 19:07:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /zu.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 84
2026-07-09 19:07:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /teammate.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 64 83
2026-07-09 19:07:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /qsa.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 83
2026-07-09 19:07:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /a1.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 83
2026-07-09 19:07:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /lv.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 82
2026-07-09 19:07:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /abs.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 84
2026-07-09 19:07:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /a79.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 82
2026-07-09 19:07:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wx.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 82
2026-07-09 19:07:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /home.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 60 83
2026-07-09 19:07:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /axzc.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 60 82
2026-07-09 19:07:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /bb.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 82
2026-07-09 19:07:48 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-talew5ca2q.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 69 82
2026-07-09 19:07:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /34.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 93
2026-07-09 19:07:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /2az.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 83
2026-07-09 19:07:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /aq.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 82
2026-07-09 19:07:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /bypass.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 62 83
2026-07-09 19:07:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-admin/1dex.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 69 82
2026-07-09 19:07:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /2bex.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 60 81
2026-07-09 19:07:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /2yxc.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 60 82
2026-07-09 19:07:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /2KMF.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 60 82
2026-07-09 19:07:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ae1.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 81
2026-07-09 19:07:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /nbl.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 82
2026-07-09 19:07:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ss.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 82
2026-07-09 19:07:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /a441.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 60 83
2026-07-09 19:07:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xx.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 113
2026-07-09 19:07:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /a37.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 87
2026-07-09 19:07:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /a.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 57 82
2026-07-09 19:07:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /fgh.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 82
2026-07-09 19:07:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /hgf.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 84
2026-07-09 19:07:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /x2a.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 59 82
2026-07-09 19:07:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-info.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 63 81
2026-07-09 19:07:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /48.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 82
2026-07-09 19:07:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /41.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 58 84
2026-07-09 19:07:50 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /nwflm.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 404 0 2 1384 61 124
2026-07-09 19:21:31 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 192.178.16.128 HTTP/1.1 Google-SMTP-STS - - mta-sts.itpartnership.com 200 0 0 520 210 91
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 20:11:12
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 20:11:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 157.22.174.222 HTTP/2 postfix-tlspol/1.8.22 - - mta-sts.taprogge.co.uk 200 0 0 194 174 114
2026-07-09 20:15:35 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 3.213.117.217 HTTP/1.1 - - - mta-sts.sarahharvey.com 200 0 0 380 85 81
2026-07-09 20:28:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 52.39.227.58 HTTP/1.1 'Valimail-Domain-Scanner/1.0+(+https://www.valimail.com/;+engineering@valimail.com)' - - mta-sts.sarahharvey.com 404 0 2 1406 405 145
2026-07-09 20:28:14 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 52.39.227.58 HTTP/1.1 'Valimail-Domain-Scanner/1.0+(+https://www.valimail.com/;+engineering@valimail.com)' - - mta-sts.sarahharvey.com 200 0 0 380 418 145
2026-07-09 20:41:35 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.env - 443 - 94.154.43.183 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - mta-sts.ssbsoft.co.uk 404 0 2 1425 235 15
2026-07-09 20:55:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-content/plugins/hellopress/wp_filemanager.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 99 82
2026-07-09 20:55:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /this_is_a_new_hello_world.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 80 82
2026-07-09 20:55:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /asq.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 82
2026-07-09 20:55:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ww.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /anq.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 98
2026-07-09 20:55:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /1.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 56 82
2026-07-09 20:55:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /asw.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 81
2026-07-09 20:55:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /g.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 56 89
2026-07-09 20:55:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /go.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xx33.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 59 82
2026-07-09 20:55:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /id.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:07 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xa.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /99.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /44.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /77.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /k.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 56 82
2026-07-09 20:55:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /11.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 98
2026-07-09 20:55:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wpgir.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 60 82
2026-07-09 20:55:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wordpress/wp-info.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 72 82
2026-07-09 20:55:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-press.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 63 82
2026-07-09 20:55:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /abfdewi.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 62 83
2026-07-09 20:55:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wpccc.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 60 82
2026-07-09 20:55:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ax026.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 60 87
2026-07-09 20:55:08 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /acw.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 81
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /acb.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 82
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-content/plugins/fix/da.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 80 84
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /acv.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 82
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /asqzrk.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 61 82
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /images/pearl/index.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 73 83
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /gb/ss.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 60 82
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /33.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /cc.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /b00ea3/index.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 67 82
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ad.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-content/xzurqs.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 72 81
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /v.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 56 81
2026-07-09 20:55:09 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /zu.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /teammate.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 63 83
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /qsa.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 82
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /a1.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /lv.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /abs.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 82
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /a79.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 82
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wx.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 81
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /home.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 59 82
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /axzc.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 59 82
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /bb.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-talew5ca2q.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 68 81
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /34.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /2az.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 82
2026-07-09 20:55:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /aq.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-admin/1dex.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 68 82
2026-07-09 20:55:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /2bex.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 59 82
2026-07-09 20:55:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /2yxc.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 59 94
2026-07-09 20:55:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /2KMF.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 59 82
2026-07-09 20:55:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ae1.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 82
2026-07-09 20:55:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /nbl.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 82
2026-07-09 20:55:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /ss.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 83
2026-07-09 20:55:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /a441.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 59 82
2026-07-09 20:55:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /xx.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /a37.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 82
2026-07-09 20:55:11 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /a.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 56 81
2026-07-09 20:55:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /fgh.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 82
2026-07-09 20:55:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /hgf.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 82
2026-07-09 20:55:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /x2a.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 58 81
2026-07-09 20:55:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /wp-info.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 62 82
2026-07-09 20:55:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /48.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 82
2026-07-09 20:55:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /41.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 57 83
2026-07-09 20:55:12 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /nwflm.php - 80 - 20.48.255.163 HTTP/1.1 - - - mta-sts.itpartnership.com 404 0 2 1384 60 139
2026-07-09 21:01:15 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 57.129.125.195 HTTP/2 postfix-tlspol/1.8.22 - - mta-sts.hyperflight.co.uk 200 0 0 194 180 44
2026-07-09 21:11:14 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 31.210.75.186 HTTP/2 postfix-tlspol/1.8.22 - - mta-sts.sarahharvey.com 200 0 0 194 176 124
2026-07-09 21:13:26 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.83.7 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 200 0 0 380 100 30
2026-07-09 21:19:18 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 40.93.65.8 HTTP/1.1 - - - mta-sts.expressmusic.co.uk 200 0 0 380 100 11
2026-07-09 21:24:42 W3SVC28 itpwinwebsvr22 5.101.172.198 GET / - 443 - 94.154.43.185 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - - mta-sts.ssbsoft.co.uk 403 14 0 1413 231 9
2026-07-09 21:25:39 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 66.249.89.162 HTTP/1.1 Google-SMTP-STS - - mta-sts.expressmusic.co.uk 200 0 0 520 211 89
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 22:06:49
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 22:06:49 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 74.7.230.12 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - mta-sts.expressmusic.co.uk 404 0 2 1245 419 96
2026-07-09 22:12:52 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 74.7.175.184 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - mta-sts.hyperflight.co.uk 404 0 2 1245 417 100
2026-07-09 22:14:33 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 74.7.228.56 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - mta-sts.itpartnership.com 404 0 2 1245 417 97
2026-07-09 22:29:21 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 74.7.244.8 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - mta-sts.sarahharvey.com 404 0 2 1245 413 97
2026-07-09 22:31:10 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 74.7.175.180 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - mta-sts.ssbsoft.co.uk 404 0 2 1245 409 93
2026-07-09 22:32:55 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /robots.txt - 443 - 74.7.230.11 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;+robots.txt;++https://openai.com/searchbot - - mta-sts.taprogge.co.uk 404 0 2 1245 411 100
#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2026-07-09 23:55:51
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2026-07-09 23:55:51 W3SVC28 itpwinwebsvr22 5.101.172.198 GET /.well-known/mta-sts.txt - 443 - 74.125.151.34 HTTP/1.1 Google-SMTP-STS - - mta-sts.hyperflight.co.uk 200 0 0 520 210 91