security

security > Webknight - BLOCK 로그 정리

등록일 : 2018-07-30 14:45 조회수 : 58,719

No	차단 메시지	정책
1	BLOCKED: Not in allowed path list 'c:\www\xe'	[Mapped Path] Allowed Paths - c:\www\xe 추가
2	BLOCKED: '=http://' not allowed in cookie	[Cookie] Denied Cookie Sequences - =http:// 항목 삭제
3	BLOCKED: accessing/running '.dat' file	[Requested File] Denied Extensions - .dat 항목 삭제
4	BLOCKED: Content-Type 'text/xml' not allowed	[Content Type] Allowed Content Types - text/xml 항목 추가
5	BLOCKED: Content-Type 'application/json' not allowed	[Content Type] Allowed Content Types - application/json 항목 추가
6	BLOCKED: Content-Type 'multipart/form-data; boundary=---------------------------7e01032a20594' not allowed	[Content Type] Allowed Content Types - multipart/form-data 항목 추가
7	BLOCKED: Content-Type 'text/plain' not allowed	[Content Type] Allowed Content Types - text/plain 항목 추가
8	BLOCKED: Blacklisted IP address (multiple HTTP client errors)	[Response Monitor] HTTP Client Errors - Disabled
9	BLOCKED: '/admin' not allowed in URL	[URL Scanning] Denied Url Sequences - /admin 항목 삭제 (/admin_/ , /_admin/ 도 있지만 삭제하지 않음)
10	BLOCKED: '.php' not allowed in querystring	[Querystring] Denied Querystring Sequences - .php 항목 제거
11	BLOCKED: Encoding exploit in querystring (embedded encoding)	[Querystring] Querystring Encoding Exploits - Disabled
12	BLOCKED: 'style=' not allowed in querystring	[Querystring] Denied Querystring Sequences - style= 항목제거
13	BLOCKED: 'style=' not allowed in headers	[Header] Denied Header Sequences - style= 항목제거
14	BLOCKED: Encoding exploit in data (embedded encoding)	[Post] Postdata Encoding Exploits - Disabled
15	ALERT: '&' not allowed in URL (running multiple CGI processes in single request)	[Url Scanning] Url Running Multiple CGI - Disabled
16	BLOCKED: Possible SQL injection in data: ;`,--,min(	[SQL Injection] SQL Injection Keywords - ; , ` , -- , min( 4개 항목제거
17	BLOCKED: 'style=' not allowed in data	[Post] Denied Post Sequences - style= 항목제거
18	BLOCKED: '=http://' not allowed in data	[Post] Denied Post Sequences - =http:// 항목제거
19	BLOCKED: 'style=http://' not allowed in data	[Post] Denied Post Sequences - style=http:// 항목제거
20	BLOCKED: 'data:' not allowed in data	[Post] Denied Post Sequences - data: 항목제거
21	BLOCKED: 'XSS style' regex not allowed in data	[Post] Denied Post Regular Expressions - XSS Style <.+?(\b\|\n\|[\f\v"'`/])style(\b\|\n\|[\f\v])*= 항목제거
22	BLOCKED: 'href http' regex not allowed in data	[Post] Denied Post Regular Expressions - href http <.+?(\b\|\n\|[\f\v"'`/])href(\b\|\n\|[\f\v])=(\b\|\n\|[\f\v])("\|')*http 항목제거
23	BLOCKED: 'href' regex not allowed in data	[Post] Denied Post Regular Expressions - href <.+?(\b\|\n\|[\f\v"'`/])href (\b\|\n\|[\f\v])= 항목제거 [Querystring] Denied Querystring Regular Expressions - href <.+?(\b\|\n\|[\f\v"'`/])href(\b\|\n\|[\f\v])= 항목제거
24	BLOCKED: '/scripts' not allowed in URL	[URL Scanning] Denied Url Sequences - /scripts 항목제거
25	BLOCKED: Parameter name not valid 'member_srls[]'	[Post] Postdata Parameter Name Require Regular Expression - Monitor
26	BLOCKED: accessing/running 'upload' file	[Requested File] Denied Files - upload 항목제거
27	BLOCKED: Parameter pollution in querystring	[Querystring] Querystring Parameter Pollution - Monitor
28	BLOCKED: Maximum variable length exceeded in data	[Post] Maximum Postdata Variable Length - Disabled
29	BLOCKED: Parent Path attempt ('..')	[Mapped Path] Parent Path - Disabled
30	BLOCKED: 'charset=' not allowed in data	[Post] Denied Post Sequences - charset= 항목제거
31	BLOCKED: 'XSS charset' regex not allowed in data	[Post] Denied Post Regular Expressions - XSS charset <.+?(\b\|\n\|[\f\v"'`/])charset(\b\|\n\|[\f\v])*= 항목제거
32	BLOCKED: '/install/' not allowed in URL	[URL Scanning] Denied Url Sequences - /install/ 항목제거
33	BLOCKED: Parameter pollution in data	[Post] Postdata Parameter Pollution - Disabled
34	BLOCKED: '/phpmyadmin' not allowed in URL	[URL Scanning] Denied Url Sequences - /phpmyadmin 항목 삭제
35	BLOCKED: Parameter pollution in querystring	[Querystring] Querystring Parameter Pollution - Disabled
36	BLOCKED: Parameter name not valid	[Querystring] Querystring Parameter Name Require Regular Expression - Disabled
37	BLOCKED: '=https://' not allowed in data	[Post] Denied Post Sequences - =http:// 항목제거
38	BLOCKED: Payload not allowed (Content-Type header not allowed for this method)	[Methods] Denied Payload - Disabled [Methods] Allowed Verbs - Disabled
39	BLOCKED: 'onmessage' not allowed in querystring	[Querystring] Denied Querystring Sequences - onmessage 항목제거
40	BLOCKED: 'onmessage' not allowed in data	[Post] Denied Post Sequences - onmessage 항목제거
41	BLOCKED: accessing/running 'shadow' file	[Requested File] Denied Extensions - shadow 항목제거
42	BLOCKED: 'Visa' information disclosure BLOCKED: 'Mastercard' information disclosure	[Response Monitor] Information Disclosure - Disabled
43	BLOCKED: 'onmessage' not allowed in headers	[Header] Denied Header Sequences - onmessage 항목제거
44	BLOCKED: Maximum variable length exceeded in cookie	[Cookie] Maximum Cookie Variable Length -Disabled
45	BLOCKED: User Agent is switching too much on this IP address	[User Agent] User Agent Switching Max Time - Disabled
46	BLOCKED: Header "Referer:" too long	Embbed 기기로 접속했을 때, Referrer 가 길어져 차단됨 [Request Limits] Max Headers - Referer 의 크기를 늘려줌
47	BLOCKED: High bit characters (shellcode) not allowed in URL	화일이름에 한글이름이 들어가니깐 이미지는 안뜸! [URL Scanning] Deny Url HighBitShellcode - 체크해제
48	BLOCKED: Content-Length is too long	[Request Limits] Max Content Length 의 값 변경

목록으로