|
๐ฉ๐ช
68.183.221.206
|
|
[Thu Jul 11 07:03:23 2024] [error] [client 68.183.221.206] ModSecurity: Warning. Operator EQ matched ...
show more
[Thu Jul 11 07:03:23 2024] [error] [client 68.183.221.206] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxx.xxx.xx"] [uri "/"] [unique_id "Zo9nmwqfQ3UAAFvZP0sAAAAH"]
show less
|
Hacking
Web App Attack
|
|
๐ฉ๐ช
45.83.66.225
|
|
[Tue Jul 02 16:55:02 2024] [error] [client 45.83.66.225] ModSecurity: Warning. Operator EQ matched 0 ...
show more
[Tue Jul 02 16:55:02 2024] [error] [client 45.83.66.225] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxxxxx"] [uri "/clients/MyCRL"] [unique_id "ZoQUxgqfQ3UAAE4DESgAAAAH"]
show less
|
Hacking
Brute-Force
|
|
๐ฉ๐ช
206.81.18.156
|
|
[Sat Jun 29 14:14:51 2024] [error] [client 206.81.18.156] ModSecurity: Warning. Operator EQ matched ...
show more
[Sat Jun 29 14:14:51 2024] [error] [client 206.81.18.156] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxxx.xxx.xxx"] [uri "/"] [unique_id "Zn-6uwqfQ3UAAGV6QRMAAAAA"]
show less
|
Brute-Force
Web App Attack
|
|
๐ฉ๐ช
45.83.66.77
|
|
[Mon Jun 24 15:19:30 2024] [error] [client 45.83.66.77] ModSecurity: Warning. Operator EQ matched 0 ...
show more
[Mon Jun 24 15:19:30 2024] [error] [client 45.83.66.77] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxxxxxxx"] [uri "/clients/MyCRL"] [unique_id "ZnlyYgqfQ3UAAH3kimAAAAAK"]
show less
|
Hacking
|
|
๐ฉ๐ช
104.248.27.244
|
|
[Wed Jun 19 17:29:30 2024] [error] [client 104.248.27.244] ModSecurity: Warning. Operator EQ matched ...
show more
[Wed Jun 19 17:29:30 2024] [error] [client 104.248.27.244] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxxx"] [uri "/"] [unique_id "ZnL5WgqfQ3UAABLSAFoAAAAD"]
show less
|
Hacking
Brute-Force
Web App Attack
|
|
๐ฉ๐ช
64.226.109.213
|
|
[Wed Jun 19 16:49:48 2024] [error] [client 64.226.109.213] ModSecurity: Warning. Operator EQ matched ...
show more
[Wed Jun 19 16:49:48 2024] [error] [client 64.226.109.213] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxxxxxxxx"] [uri "/"] [unique_id "ZnLwDAqfQ3UAACaHASMAAAAH"]
show less
|
Hacking
Brute-Force
Web App Attack
|
|
๐ง๐ช
154.47.27.106
|
|
[Tue Jun 18 07:30:23 2024] [error] [client 154.47.27.106] ModSecurity: Warning. Matched phrase "nmap ...
show more
[Tue Jun 18 07:30:23 2024] [error] [client 154.47.27.106] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "***********************"] [uri "/HNAP1"] [unique_id "ZnEbbwqfQ3UAAGgzSqIAAAAL"]
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
๐บ๐ธ
45.134.142.76
|
|
[Mon Jun 17 11:19:22 2024] [error] [client 45.134.142.76] ModSecurity: Warning. Matched phrase "nmap ...
show more
[Mon Jun 17 11:19:22 2024] [error] [client 45.134.142.76] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxx.xxx.xxxx"] [uri "/sdk"] [unique_id "Zm--mgqfQ3UAAHgSxVgAAAAE"]
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
๐จ๐ฆ
149.88.98.234
|
|
[Mon Jun 17 10:10:24 2024] [error] [client 149.88.98.234] ModSecurity: Warning. Matched phrase "nmap ...
show more
[Mon Jun 17 10:10:24 2024] [error] [client 149.88.98.234] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxx"] [uri "/evox/about"] [unique_id "Zm-vcAqfQ3UAAHdVOc0AAAAD"]
show less
|
DDoS Attack
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
๐ซ๐ฎ
185.108.107.133
|
|
[Sun Jun 16 09:01:45 2024] [error] [client 185.108.107.133] ModSecurity: Warning. Matched phrase "nm ...
show more
[Sun Jun 16 09:01:45 2024] [error] [client 185.108.107.133] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxxxxxxxxx"] [uri "/HNAP1"] [unique_id "Zm6N2QqfQ3UAADqoLbUAAAAJ"]
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
๐บ๐ธ
146.70.228.86
|
|
[Mon Jun 17 05:23:05 2024] [error] [client 146.70.228.86] ModSecurity: Warning. Matched phrase "nmap ...
show more
[Mon Jun 17 05:23:05 2024] [error] [client 146.70.228.86] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxx"] [uri "/nmaplowercheck1718594584"] [unique_id "Zm@sGQqfQ3UAAHuhXYgAAAAF"]
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
๐ฌ๐ท
149.22.85.19
|
|
[Fri Jun 14 09:39:34 2024] [error] [client 149.22.85.19] ModSecurity: Warning. Matched phrase "nmap ...
show more
[Fri Jun 14 09:39:34 2024] [error] [client 149.22.85.19] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxxx"] [uri "/HNAP1"] [unique_id "ZmvztgqfQ3UAAD4GCGsAAAAg"]
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
๐บ๐ธ
45.134.142.76
|
|
_raw
[Thu Jun 13 20:18:01 2024] [error] [client 146.70.228.94] ModSecurity: Warning. Operator EQ ma ...
show more
_raw
[Thu Jun 13 20:18:01 2024] [error] [client 146.70.228.94] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxxx.xxx"] [uri "/"] [unique_id "Zms32QqfQ3UAAE2@8jIAAAAA"]
show less
|
Port Scan
Hacking
Brute-Force
Bad Web Bot
|
|
๐บ๐ธ
146.70.228.94
|
|
_raw
[Thu Jun 13 20:18:01 2024] [error] [client 146.70.228.94] ModSecurity: Warning. Operator EQ ma ...
show more
_raw
[Thu Jun 13 20:18:01 2024] [error] [client 146.70.228.94] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxxx.xxxx"] [uri "/"] [unique_id "Zms32QqfQ3UAAE2@8jIAAAAA"]
show less
|
Port Scan
Hacking
Brute-Force
Bad Web Bot
|
|
๐บ๐ธ
169.150.205.134
|
|
_raw
[Thu Jun 13 07:35:41 2024] [error] [client 169.150.205.134] ModSecurity: Warning. Operator EQ ...
show more
_raw
[Thu Jun 13 07:35:41 2024] [error] [client 169.150.205.134] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxx.xxx"] [uri "/"] [unique_id "ZmqFLQqfQ3UAAGmKEl0AAAAT"]
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
๐ญ๐ฐ
47.76.84.13
|
|
[Wed Apr 24 14:26:50 2024] [error] [client 47.76.84.13] ModSecurity: Warning. Operator EQ matched 0 ...
show more
[Wed Apr 24 14:26:50 2024] [error] [client 47.76.84.13] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxx.xxxxx.xxxxxx.xx"] [uri "/"] [unique_id "Zij6igqfQ3UAAHdZ5OcAAAAU"]
show less
|
Hacking
Brute-Force
Web App Attack
|
|
๐ฌ๐ง
138.199.31.15
|
|
[Thu Apr 11 10:27:34 2024] [error] [client 138.199.31.15] ModSecurity: Warning. String match within ...
show more
[Thu Apr 11 10:27:34 2024] [error] [client 138.199.31.15] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1058"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxx.xxx.xx"] [uri "/..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5cwindows/win.ini"] [
show less
|
Hacking
Brute-Force
Web App Attack
|
|
๐ฎ๐ณ
65.20.71.251
|
|
[Tue Feb 20 11:55:45 2024] [error] [client 65.20.71.251] ModSecurity: Warning. String match within " ...
show more
[Tue Feb 20 11:55:45 2024] [error] [client 65.20.71.251] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1058"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxx.xxx.xxx"] [uri "/.svn/wc.db"] [unique_id "ZdSFMQqfQ3UAAHDZfGsAAAAG"]
show less
|
Hacking
Web App Attack
|
|
๐ง๐ฌ
79.124.59.254
|
|
[Mon Nov 27 08:53:38 2023] [error] [client 79.124.59.254] ModSecurity: Warning. Operator EQ matched ...
show more
[Mon Nov 27 08:53:38 2023] [error] [client 79.124.59.254] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxx.it"] [uri "/"] [unique_id "ZWRLAgqfQ3UAADpHJBMAAAAA"]
show less
|
Port Scan
Hacking
|
|
๐ฌ๐ง
3.10.170.150
|
|
[Thu Nov 16 10:47:08 2023] [error] [client 3.10.170.150] ModSecurity: Warning. Operator EQ matched 0 ...
show more
[Thu Nov 16 10:47:08 2023] [error] [client 3.10.170.150] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxx.xxxx.xxx.xxx.it"] [uri "/"] [unique_id "ZVXlHAqfQ3UAAGn7Dd8AAAAB"]
show less
|
Port Scan
Hacking
Web App Attack
|
|
๐ฌ๐ง
139.59.187.225
|
|
[Mon Sep 18 21:19:24 2023] [error] [client 139.59.187.225] ModSecurity: Warning. String match within ...
show more
[Mon Sep 18 21:19:24 2023] [error] [client 139.59.187.225] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1058"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "****.regione.******.it"] [uri "/apiserver-etcd-client.key"] [unique_id "ZQiivAqfQ3UAA
show less
|
Hacking
Web App Attack
|
|
๐ฌ๐ง
178.128.166.32
|
|
ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer ...
show more
ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1058"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "*****.regione.*****.it"] [uri "/Trace.axd"] [unique_id "ZQijcwqfQ3UAAG@Gd00AAAAZ"]
show less
|
Hacking
Brute-Force
Web App Attack
|
|
๐ฎ๐น
95.250.46.63
|
|
[Thu May 04 15:38:02 2023] [error] [client 95.250.46.63] ModSecurity: Warning. String match within " ...
show more
[Thu May 04 15:38:02 2023] [error] [client 95.250.46.63] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1058"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dll"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "*************.it"] [uri "/SecurityGateway.dll"] [unique_id "ZFO1OgqfQ3UAAAmXSUcAA
show less
|
Brute-Force
Web App Attack
|
|
๐ฌ๐ง
13.40.28.167
|
|
[Wed Jan 11 15:38:03 2023] [error] [client 13.40.28.167] ModSecurity: Warning. Operator EQ matched 0 ...
show more
[Wed Jan 11 15:38:03 2023] [error] [client 13.40.28.167] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxxxxxxxxx"] [uri "/"] [unique_id "Y77JywqfQ3UAAAuZ7sYAAAAD"]
show less
|
Brute-Force
|
|
๐บ๐ธ
170.187.155.78
|
|
[Tue Nov 15 07:37:46 2022] [error] [client 170.187.155.78] ModSecurity: Warning. Operator EQ matched ...
show more
[Tue Nov 15 07:37:46 2022] [error] [client 170.187.155.78] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "595"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "condidoc.regione.toscana.it"] [uri "/"] [unique_id "Y3MzugqfQ3UAAASjaF0AAAAC"]
show less
|
Web App Attack
|