|
🇮🇹
82.193.25.251
|
|
[Wed Nov 20 19:39:52 2024] [error] [client 82.193.25.251] ModSecurity: Warning. Matched phrase "nmap ...
show more
[Wed Nov 20 19:39:52 2024] [error] [client 82.193.25.251] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxx.xxxxx.xxxx.xxxx"] [uri "/"] [unique_id "Zz4s@AqfQ3UAAC1IUwQAAAAH"]
show less
|
Hacking
Brute-Force
Bad Web Bot
|
|
🇩🇪
139.59.212.172
|
|
Mon Nov 18 05:45:51 2024] [error] [client 139.59.212.172] ModSecurity: Warning. Operator EQ matched ...
show more
Mon Nov 18 05:45:51 2024] [error] [client 139.59.212.172] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxx.xxxx.xx"] [uri "/"] [unique_id "ZzrGfwqfQ3UAAHQkcU8AAAAD"]
[Mon Nov 18 05:45:51 2024] [error] [client 139.59.212.172] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag
show less
|
Hacking
Brute-Force
Bad Web Bot
|
|
🇩🇪
142.93.174.179
|
|
[Mon Nov 04 02:19:06 2024] [error] [client 142.93.174.179] ModSecurity: Warning. Operator EQ matched ...
show more
[Mon Nov 04 02:19:06 2024] [error] [client 142.93.174.179] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxx.xxx.xxx.xx."] [uri "/"] [unique_id "ZyghCgqfQ3UAAB2BbYoAAAAI"]
show less
|
Port Scan
Hacking
Brute-Force
|
|
🇭🇰
173.249.10.225
|
|
[Tue Oct 08 22:48:04 2024] [error] [client 173.249.10.225] ModSecurity: Warning. String match within ...
show more
[Tue Oct 08 22:48:04 2024] [error] [client 173.249.10.225] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1058"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxx.xxxx"] [uri "/wp-config.old"] [unique_id "ZwWahAqfQ3UAACVO85oAAAAC"]
show less
|
Hacking
Bad Web Bot
|
|
🇩🇪
134.122.90.223
|
|
[Thu Sep 19 14:33:29 2024] [error] [client 134.122.90.223] ModSecurity: Warning. Operator EQ matched ...
show more
[Thu Sep 19 14:33:29 2024] [error] [client 134.122.90.223] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxx.xxx.xx"] [uri "/"] [unique_id "ZuwaGQqfQ3UAAAGd4zcAAAAA"]
show less
|
Hacking
Brute-Force
Bad Web Bot
|
|
🇧🇪
34.76.231.67
|
|
[Mon Sep 09 22:58:20 2024] [error] [client 34.76.231.67] ModSecurity: Warning. String match within " ...
show more
[Mon Sep 09 22:58:20 2024] [error] [client 34.76.231.67] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1058"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xx.xxx.xx"] [uri "/includes/bootstrap.inc"] [unique_id "Zt9hbAqfQ3UAAFgQXP
show less
|
Hacking
Bad Web Bot
|
|
🇧🇪
35.241.133.143
|
|
[Tue Sep 10 00:32:29 2024] [error] [client 35.241.133.143] ModSecurity: Warning. Operator EQ matched ...
show more
[Tue Sep 10 00:32:29 2024] [error] [client 35.241.133.143] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxx.xxxx"] [uri "/"] [unique_id "Zt93fQqfQ3UAAFi6I8wAAAAC"]
show less
|
Hacking
Bad Web Bot
|
|
🇩🇪
164.90.211.163
|
|
[Sun Sep 01 11:19:29 2024] [error] [client 164.90.211.163] ModSecurity: Warning. Operator EQ matched ...
show more
[Sun Sep 01 11:19:29 2024] [error] [client 164.90.211.163] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xx.xx.xxxx"] [uri "/"] [unique_id "ZtQxoQqfQ3UAADbJgtQAAAAJ"]
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
209.38.212.111
|
|
Tue Aug 27 15:11:18 2024] [error] [client 209.38.212.111] ModSecurity: Warning. Operator EQ matched ...
show more
Tue Aug 27 15:11:18 2024] [error] [client 209.38.212.111] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxx.xx"] [uri "/"] [unique_id "Zs3QdgqfQ3UAAH7v@VIAAAAC"]
show less
|
Hacking
Bad Web Bot
Web App Attack
|
|
🇬🇧
138.199.31.16
|
|
[Wed Jul 24 16:09:15 2024] [error] [client 138.199.31.16] ModSecurity: Warning. Matched phrase "nmap ...
show more
[Wed Jul 24 16:09:15 2024] [error] [client 138.199.31.16] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxxx.xxx"] [uri "/evox/about"] [unique_id "ZqELCwqfQ3UAAGJtnnAAAAAJ"]
show less
|
Port Scan
Hacking
Bad Web Bot
|
|
🇬🇧
91.90.121.149
|
|
[Tue Jul 23 23:09:25 2024] [error] [client 91.90.121.149] ModSecurity: Warning. Matched phrase "nmap ...
show more
[Tue Jul 23 23:09:25 2024] [error] [client 91.90.121.149] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxx.xxx"] [uri "/HNAP1"] [unique_id "ZqAcBQqfQ3UAACvFZ2EAAAAE"]
show less
|
Port Scan
Hacking
Bad Web Bot
|
|
🇨🇦
149.88.98.105
|
|
[Fri Jul 19 19:51:55 2024] [error] [client 149.88.98.105] ModSecurity: Warning. Matched phrase "nmap ...
show more
[Fri Jul 19 19:51:55 2024] [error] [client 149.88.98.105] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xx.xx.xx"] [uri "/HNAP1"] [unique_id "ZpqnuwqfQ3UAAC7aNiUAAAAG"]
show less
|
Hacking
Brute-Force
Bad Web Bot
|
|
🇩🇪
134.122.86.99
|
|
[Sat Jul 20 15:35:04 2024] [error] [client 134.122.86.99] ModSecurity: Warning. Operator EQ matched ...
show more
[Sat Jul 20 15:35:04 2024] [error] [client 134.122.86.99] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxxx.xx"] [uri "/"] [unique_id "Zpu9CAqfQ3UAAFpMBdwAAAAC"]
show less
|
Hacking
Bad Web Bot
|
|
🇬🇧
172.111.150.209
|
|
[Sat Jul 20 04:39:15 2024] [error] [client 172.111.150.209] ModSecurity: Warning. Matched phrase "nm ...
show more
[Sat Jul 20 04:39:15 2024] [error] [client 172.111.150.209] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxxx.xx"] [uri "/HNAP1"] [unique_id "ZpsjUwqfQ3UAAD1RNe8AAAAH"]
show less
|
Hacking
Bad Web Bot
Web App Attack
|
|
🇸🇪
169.150.208.134
|
|
[Sun Jul 21 00:56:50 2024] [error] [client 169.150.208.134] ModSecurity: Warning. Matched phrase "nm ...
show more
[Sun Jul 21 00:56:50 2024] [error] [client 169.150.208.134] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxx.xxx"] [uri "/evox/about"] [unique_id "ZpxAsgqfQ3UAAGHQU7AAAAAD"]
show less
|
Hacking
Brute-Force
Web App Attack
|
|
🇬🇧
157.245.33.114
|
|
[Sun Jul 21 20:23:30 2024] [error] [client 157.245.33.114] ModSecurity: Warning. Matched phrase "nma ...
show more
[Sun Jul 21 20:23:30 2024] [error] [client 157.245.33.114] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxxx"] [uri "/evox/about"] [unique_id "Zp1SIgqfQ3UAAB2SGRwAAAAC"]
show less
|
Hacking
Web App Attack
|
|
🇧🇪
154.47.27.106
|
|
[Thu Jul 18 18:42:16 2024] [error] [client 154.47.27.106] ModSecurity: Warning. Operator EQ matched ...
show more
[Thu Jul 18 18:42:16 2024] [error] [client 154.47.27.106] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxx"] [uri "/"] [unique_id "ZplF6AqfQ3UAAAypt7YAAAAJ"]
show less
|
Hacking
Bad Web Bot
Web App Attack
|
|
🇬🇧
167.172.59.95
|
|
[Thu Jul 18 00:31:52 2024] [error] [client 167.172.59.95] ModSecurity: Warning. Matched phrase "nmap ...
show more
[Thu Jul 18 00:31:52 2024] [error] [client 167.172.59.95] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxx"] [uri "/evox/about"] [unique_id "ZphGWAqfQ3UAACWzeLEAAAAC"]
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
🇸🇪
146.70.207.204
|
|
[Wed Jul 17 20:06:15 2024] [error] [client 146.70.207.204] ModSecurity: Warning. Matched phrase "nma ...
show more
[Wed Jul 17 20:06:15 2024] [error] [client 146.70.207.204] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxxxxxxx"] [uri "/evox/about"] [unique_id "ZpgIFwqfQ3UAADTKy3IAAAAE"]
show less
|
Port Scan
Hacking
Web App Attack
|
|
🇳🇱
92.119.179.88
|
|
[Wed Jul 17 09:56:53 2024] [error] [client 92.119.179.88] ModSecurity: Warning. String match within ...
show more
[Wed Jul 17 09:56:53 2024] [error] [client 92.119.179.88] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1058"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxx.xxx.xxx.xxx"] [uri "/fteooHxUc1N5.inc"] [unique_id "Zpd5RQqfQ3UAADTMx8kAAAA
show less
|
Hacking
Brute-Force
Web App Attack
|
|
🇸🇪
169.150.208.134
|
|
[Wed Jul 17 00:35:07 2024] [error] [client 169.150.208.134] ModSecurity: Warning. Operator EQ matche ...
show more
[Wed Jul 17 00:35:07 2024] [error] [client 169.150.208.134] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxx"] [uri "/"] [unique_id "Zpb1mwqfQ3UAABRuHGUAAAAK"]
show less
|
Hacking
Web App Attack
|
|
🇬🇧
167.99.83.222
|
|
[Tue Jul 16 23:03:10 2024] [error] [client 167.99.83.222] ModSecurity: Warning. Operator EQ matched ...
show more
[Tue Jul 16 23:03:10 2024] [error] [client 167.99.83.222] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxx"] [uri "/"] [unique_id "ZpbgDgqfQ3UAAES1brwAAAAB"]
show less
|
Hacking
Web App Attack
|
|
🇩🇪
45.83.64.127
|
|
Tue Jul 16 01:03:29 2024] [error] [client 45.83.64.127] ModSecurity: Warning. Operator EQ matched 0 ...
show more
Tue Jul 16 01:03:29 2024] [error] [client 45.83.64.127] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxxx.xxx.xxxx"] [uri "/clients/MyCRL"] [unique_id "ZpWqwQqfQ3UAAH0uTrQAAAAF"]
show less
|
Hacking
|
|
🇩🇪
68.183.221.206
|
|
[Thu Jul 11 07:03:23 2024] [error] [client 68.183.221.206] ModSecurity: Warning. Operator EQ matched ...
show more
[Thu Jul 11 07:03:23 2024] [error] [client 68.183.221.206] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxx.xxx.xx"] [uri "/"] [unique_id "Zo9nmwqfQ3UAAFvZP0sAAAAH"]
show less
|
Hacking
Web App Attack
|
|
🇩🇪
45.83.66.225
|
|
[Tue Jul 02 16:55:02 2024] [error] [client 45.83.66.225] ModSecurity: Warning. Operator EQ matched 0 ...
show more
[Tue Jul 02 16:55:02 2024] [error] [client 45.83.66.225] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxxxxx"] [uri "/clients/MyCRL"] [unique_id "ZoQUxgqfQ3UAAE4DESgAAAAH"]
show less
|
Hacking
Brute-Force
|