I recently got a strange request to my website:
220.127.116.11 - admin [24/Nov/2020:09:51:05 -0500] "POST /doLogin HTTP/1.1" 404 4973 "-" "Abcd"
Somehow a malicous bot got the text "admin" to appear next to the timestamp. How is this possible? From my experience with Apache, the timestamp was provided by the server, not the client.