S
S
Svetlana Shilova2016-03-15 23:25:22
Information Security
Svetlana Shilova, 2016-03-15 23:25:22

What do these site access logs mean?

Website hosted by Gino. Strange logs have been appearing lately. Explain what they mean!
Logs:
46.118.115.115 - - [15/Mar/2016:20:57:28 +0300] "GET / HTTP/1.0" 200 29707 " perm.xrus.org " "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.118.115.115 - - [15/Mar/2016:20:57:28 +0300] "GET / HTTP/1.0" 200 29707 " el-nation.com " "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)"
46.118.115.115 - - [15/Mar/2016:20:57:29 +0300] "GET / HTTP/1.0" 200 29707 " sivs. en/viewtopic.php?id=8258 " "Mozilla/3.0 (x86 [en] Windows NT 5.1; Sun)"
46.118.115." "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)"
46.118.115.115 - - [15/Mar/2016:20:57:29 +0300] " GET / HTTP/1.0" 200 29707 " perm.xrus.org " "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.118.115.115 - - [15/Mar/2016:20:57:29 +0300 ] "GET / HTTP/1.0" 200 29707 " sivs.ru/viewtopic.php?id=8258 " "Mozilla/3.0 (x86 [en] Windows NT 5.1; Sun)"
46.118.115.115 - - [15/Mar/2016 :20:57:29 +0300] "GET / HTTP/1.0" 200 29707 " el-nation.com " "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4. 5.0)"
46.118.115.115 - - [15/Mar/2016:20:57:29 +0300] "GET / HTTP/1.0" 200 29707 " sivs.ru/viewtopic.php?id=8258" "Mozilla/3.0 (x86 [en] Windows NT 5.1; Sun)"

Answer the question

In order to leave comments, you need to log in

1 answer(s)
V
Vladimir, 2016-03-16
@vova_kondrashov

Judging by the logs, they are breaking into the server through a GET request using Avant Browser

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question