Я получаю подозрительный трафик несколько раз, у приложения нет конечной точки, связанной с ними.
Это происходит последовательно.
Что можно вывести из следующих журналов? Есть ли какой-либо риск безопасности, связанный с этим? Как можно защитить сайт от спама или возможных последствий для безопасности?
Tue Oct 29 2019 18:48:02 GMT+0000 (UTC)Requested :: GET /dms/Cisco303/303.xml
Tue Oct 29 2019 18:48:02 GMT+0000 (UTC)Requested :: GET /dms/cisco-spa-509/509.xml
Tue Oct 29 2019 18:48:02 GMT+0000 (UTC)Requested :: GET /dms/Cisco509/509.xml
Tue Oct 29 2019 18:48:02 GMT+0000 (UTC)Requested :: GET /dms/cisco-spa-508/508.xml
Tue Oct 29 2019 18:48:02 GMT+0000 (UTC)Requested :: GET /dms/Cisco508/508.xml
Tue Oct 29 2019 18:48:03 GMT+0000 (UTC)Requested :: GET /dms/cisco-spa-2102/2102.xml
Tue Oct 29 2019 18:48:03 GMT+0000 (UTC)Requested :: GET /dms/cisco/spa2102/2102.xml
Tue Oct 29 2019 18:48:03 GMT+0000 (UTC)Requested :: GET /dms/Cisco2102/2102.xml
Tue Oct 29 2019 18:57:57 GMT+0000 (UTC)Requested :: GET /dms/t41p/y000000000000.cfg
Tue Oct 29 2019 18:57:57 GMT+0000 (UTC)Requested :: GET /dms/t42g/y000000000000.cfg
Tue Oct 29 2019 18:57:57 GMT+0000 (UTC)Requested :: GET /p/000000000000.cfg
Tue Oct 29 2019 18:57:57 GMT+0000 (UTC)Requested :: GET /PP/000000000000.cfg
Tue Oct 29 2019 18:57:57 GMT+0000 (UTC)Requested :: GET /cs/000000000000.cfg
Tue Oct 29 2019 18:57:58 GMT+0000 (UTC)Requested :: GET /cs/polycom/000000000000.cfg
Tue Oct 29 2019 18:57:58 GMT+0000 (UTC)Requested :: GET /ps/000000000000.cfg
Tue Oct 29 2019 18:57:58 GMT+0000 (UTC)Requested :: GET /pc/000000000000.cfg
Tue Oct 29 2019 18:57:58 GMT+0000 (UTC)Requested :: GET /devicecfg/aastra/aastra.cfg
Tue Oct 29 2019 18:57:58 GMT+0000 (UTC)Requested :: GET /cfg/aastra.cfg
Tue Oct 29 2019 18:58:24 GMT+0000 (UTC)Requested :: GET /dms/linksys_spa942/962.xml
Tue Oct 29 2019 18:58:24 GMT+0000 (UTC)Requested :: GET /dms/cisco-spa-112/112.xml
Tue Oct 29 2019 18:58:25 GMT+0000 (UTC)Requested :: GET /dms/cisco-spa-122/122.xml
Tue Oct 29 2019 18:58:25 GMT+0000 (UTC)Requested :: GET /dms/linksys_spa942/942.xml
Tue Oct 29 2019 18:58:25 GMT+0000 (UTC)Requested :: GET /dms/polycom/000000000000.cfg
Tue Oct 29 2019 18:58:25 GMT+0000 (UTC)Requested :: GET /dms/cisco504g/504.xml
Tue Oct 29 2019 18:58:25 GMT+0000 (UTC)Requested :: GET /dms/cisco/spa504/504.xml
Tue Oct 29 2019 18:58:26 GMT+0000 (UTC)Requested :: GET /dms/cisco/spa303/303.xml
Tue Oct 29 2019 18:58:26 GMT+0000 (UTC)Requested :: GET /dms/cisco/spa525g/525.xml
Tue Oct 29 2019 18:58:26 GMT+0000 (UTC)Requested :: GET /dms/cisco/spa525/525.xml
Tue Oct 29 2019 18:59:48 GMT+0000 (UTC)Requested :: GET /cfg/spa504.cfg
Tue Oct 29 2019 18:59:48 GMT+0000 (UTC)Requested :: GET /cfg/spa962.cfg
Более подробные журналы
9:17:40:26 +0000] "GET /pps/cisco/cisco.cfg HTTP/1.1" 404 5 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0" 0.006
46.229.168.149 - - - [29/Oct/2019:17:52:11 +0000] "GET /robots.txt HTTP/1.1" 200 276 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)" 0.006
46.229.168.153 - - - [29/Oct/2019:17:52:12 +0000] "GET /homepage/ HTTP/1.1" 200 3500 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)" 0.017
134.209.40.241 - - - [29/Oct/2019:18:23:20 +0000] "HEAD / HTTP/1.1" 301 0 "https://www.netcraft.com/survey/" "Mozilla/4.0 (compatible; Netcraft Web Server Survey)" 3.335
62.173.140.193 - - - [29/Oct/2019:18:29:19 +0000] "GET / HTTP/1.1" 200 14770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0" 0.009
3.85.28.36 - - - [29/Oct/2019:18:35:07 +0000] "GET /favicon/apple-icon-57x57.png HTTP/1.1" 200 2618 "-" "Slack-ImgProxy (+https://api.slack.com/robots)" 0.008
3.91.150.95 - - - [29/Oct/2019:18:35:08 +0000] "GET /images/productivity.png HTTP/1.1" 200 337234 "-" "Slack-ImgProxy (+https://api.slack.com/robots)" 0.690
61.219.11.153 - - - [29/Oct/2019:18:41:17 +0000] "\x01A\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 166 "-" "-" 0.120
93.174.93.84 - - - [29/Oct/2019:18:48:02 +0000] "GET /dms/cisco-spa-303/303.xml HTTP/1.1" 404 5 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0" 0.005
93.174.93.84 - - - [29/Oct/2019:18:48:02 +0000] "GET /dms/Cisco303/303.xml HTTP/1.1" 404 5 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0" 0.005
93.174.93.84 - - - [29/Oct/2019:18:48:02 +0000] "GET /dms/cisco-spa-509/509.xml HTTP/1.1" 404 5 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0" 0.005
93.174.93.84 - - - [29/Oct/2019:18:48:02 +0000] "GET /dms/Cisco509/509.xml HTTP/1.1" 404 5 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0" 0.005
93.174.93.84 - - - [29/Oct/2019:18:48:02 +0000] "GET /dms/cisco-spa-508/508.xml HTTP/1.1" 404 5 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0" 0.005
93.174.93.84 - - - [29/Oct/2019:18:48:02 +0000] "GET /dms/Cisco508/508.xml HTTP/1.1" 404 5 "-" "Moz