: Handling requests to server's IP address I have an Apache Web Server running some virtual hosts, site1.com and site2.com. What do I do with requests to the server's IP address? Is it safe to

@Sims2060225

Posted in: #Apache #ModSecurity #Virtualhost #Webserver

I have an Apache Web Server running some virtual hosts, site1.com and site2.com.

What do I do with requests to the server's IP address?

Is it safe to allow requests by IP or do I need block, redirect or what?

Looking my error.log I see:

[Tue Dec 12 12:30:45.211539 2017] [:error] [pid 1681] [client 18x.x1.xx1.xx1:55060] [client 18x.x1.xx1.xx1] ModSecurity: Warning. Pattern match "^[\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "793"] [id "920350"] [rev "2"] [msg "Host header is a numeric IP address"] [data "3x.x1.xx1.xx1"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "3x.x1.xx1.xx1"] [uri "/img/icon_menu_00A3E0.svg"] [unique_id "Wi-gsrgergegraRlUMAAAAE"], referer: `http://3x.x1.xx1.xx1/css/style.css`

The message I am concerned about is: msg "Host header is a numeric IP address".

10% popularity Vote Up Vote Down