Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 4737

suspicious logged entries - User Agent is always "Mozilla/4.0 (compatible; Synapse)"

$
0
0

Not sure if this is the correct forum for this, but my web site is being hit with a lot of suspicious entries. Every day, I get a lot of hits where the User Agent is always "Mozilla/4.0 (compatible; Synapse)". They are almost always from different IP addresses, and all are from suspicious countries. The querystring almost always contans a "-1", such as: "n=-1%27"

I've blocked all requests that contain the above user agent, but am worried that there may be legitimate attempts with this browser. 

Can anyone shed any light on what this is?

Here is the ip/country list that I received today:

94.242.233.18 LUXEMBOURG
113.190.144.108 VIET NAM
178.172.155.72 BELARUS
46.211.135.136 UKRAINE
189.19.71.199 BRAZIL
92.112.184.203 UKRAINE
78.170.163.154 TURKEY
176.112.22.5 UKRAINE
41.79.248.174 SOUTH AFRICA
93.84.18.164 BELARUS
175.137.64.125 MALAYSIA
178.129.63.200 RUSSIAN FEDERATION
176.118.41.131 UKRAINE
61.230.72.2 TAIWAN, PROVINCE OF CHINA
94.178.27.163 UKRAINE
46.237.95.119 BULGARIA
189.4.111.42 BRAZIL
90.31.105.58 GUADELOUPE
176.36.143.102 UKRAINE
193.203.49.46 RUSSIAN FEDERATION
94.242.233.18 LUXEMBOURG
94.242.233.18 LUXEMBOURG
94.242.233.18 LUXEMBOURG
94.242.233.18 LUXEMBOURG
201.152.149.140 MEXICO
201.89.167.61 BRAZIL
91.217.90.145 RUSSIAN FEDERATION
94.242.233.18 LUXEMBOURG
86.57.185.199 BELARUS
178.126.159.196 BELARUS
178.152.15.52 QATAR
194.242.103.142 UKRAINE
94.242.233.18 LUXEMBOURG
201.53.225.111 BRAZIL
217.76.78.138 KAZAKHSTAN
93.74.147.55 UKRAINE
72.27.104.238 JAMAICA
93.78.5.120 UKRAINE

thanks,

bert


Viewing all articles
Browse latest Browse all 4737

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>