⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.19
Server IP:
178.33.27.10
Server:
Linux cpanel.dev-unit.com 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
Server Software:
Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
PHP Version:
8.2.11
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
local
/
apache
/
domlogs
/
View File Name :
server.dev-unit.com.error.log
[Mon Dec 11 17:43:13.908851 2023] [authz_core:error] [pid 21705:tid 140141846828800] [client 159.223.102.13:57042] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Mon Dec 11 17:43:19.639058 2023] [authz_core:error] [pid 21614:tid 140141720938240] [client 192.53.126.23:40508] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Mon Jan 15 19:23:01.250977 2024] [:error] [pid 1871:tid 140274462336768] [client 104.168.151.223:59512] File does not exist: /home/devunit/public_html/wp-login.php [Wed Jan 17 18:57:41.742239 2024] [:error] [pid 6994:tid 140604495304448] [client 31.24.44.159:50204] File does not exist: /home/devunit/public_html/wp-login.php [Mon Jan 22 15:25:23.302564 2024] [:error] [pid 9311:tid 139813046966016] [client 34.170.19.142:57344] File does not exist: /home/devunit/public_html/wp-login.php [Wed Jan 24 15:44:17.450582 2024] [:error] [pid 32475:tid 139965187118848] [client 39.96.216.30:37550] File does not exist: /home/devunit/public_html/wp-login.php [Thu Feb 01 02:50:34.611722 2024] [:error] [pid 31581:tid 140218267006720] [client 68.178.156.164:37801] File does not exist: /home/devunit/public_html/wp-login.php [Thu Feb 01 18:56:09.338988 2024] [:error] [pid 9199:tid 139638479959808] [client 137.59.109.154:33198] File does not exist: /home/devunit/public_html/wp-login.php [Sat Feb 03 05:43:31.936307 2024] [:error] [pid 2146:tid 139745954821888] [client 167.71.69.173:44992] File does not exist: /home/devunit/public_html/wp-login.php [Mon Feb 05 04:16:25.921181 2024] [:error] [pid 10279:tid 140012309903104] [client 103.90.225.215:38402] File does not exist: /home/devunit/public_html/wp-login.php [Fri Feb 09 00:53:39.866446 2024] [authz_core:error] [pid 12900:tid 140684933719808] [client 159.203.63.67:54948] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Fri Feb 09 00:53:42.678298 2024] [authz_core:error] [pid 12900:tid 140684791043840] [client 134.122.34.144:57252] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Fri Feb 09 00:53:46.603639 2024] [:error] [pid 14959:tid 140684791043840] [client 193.32.127.232:56052] File does not exist: /home/devunit/public_html/installer.php [Fri Feb 09 00:53:46.640493 2024] [:error] [pid 14959:tid 140684782651136] [client 193.32.127.232:56108] File does not exist: /home/devunit/public_html/.env.php [Fri Feb 09 00:53:46.661186 2024] [:error] [pid 12900:tid 140684916934400] [client 193.32.127.232:56258] File does not exist: /home/devunit/public_html/info.php [Fri Feb 09 00:53:46.665499 2024] [:error] [pid 12900:tid 140684883363584] [client 193.32.127.232:56268] File does not exist: /home/devunit/public_html/test.php [Fri Feb 09 00:53:46.668535 2024] [:error] [pid 14959:tid 140685023127296] [client 193.32.127.232:56280] File does not exist: /home/devunit/public_html/php.php [Fri Feb 09 00:53:46.712307 2024] [:error] [pid 12899:tid 140684782651136] [client 193.32.127.232:56254] File does not exist: /home/devunit/public_html/i.php [Fri Feb 09 00:53:46.738817 2024] [:error] [pid 12899:tid 140685039912704] [client 193.32.127.232:56274] File does not exist: /home/devunit/public_html/phpinfo.php [Fri Feb 09 00:53:47.112792 2024] [:error] [pid 12899:tid 140684942112512] [client 193.32.127.232:56350] File does not exist: /home/devunit/public_html/adminer.php [Fri Feb 09 00:53:47.158559 2024] [:error] [pid 12899:tid 140685023127296] [client 193.32.127.232:56288] File does not exist: /home/devunit/public_html/wp-info.php [Fri Feb 09 00:53:47.561600 2024] [:error] [pid 14959:tid 140684858185472] [client 193.32.127.232:56610] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/config.ini"] [unique_id "ZcVbe_NMOfZlIYvbLQJ4QQAAAM4"] [Fri Feb 09 00:53:47.569665 2024] [:error] [pid 14959:tid 140684824614656] [client 193.32.127.232:56624] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/app.ini"] [unique_id "ZcVbe_NMOfZlIYvbLQJ4QgAAANI"] [Fri Feb 09 00:53:47.574610 2024] [:error] [pid 12901:tid 140684774258432] [client 193.32.127.232:56632] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/production.ini"] [unique_id "ZcVbe8Yrh7SoTqEldm7MYQAAAJg"] [Fri Feb 09 00:53:47.583713 2024] [:error] [pid 12900:tid 140684849792768] [client 193.32.127.232:56638] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/default.ini"] [unique_id "ZcVbe84Kp5gwPq0YtOva0wAAAE8"] [Fri Feb 09 00:53:47.587641 2024] [:error] [pid 12900:tid 140684816221952] [client 193.32.127.232:56646] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/config/config.ini"] [unique_id "ZcVbe84Kp5gwPq0YtOva1AAAAFM"] [Fri Feb 09 00:53:47.608476 2024] [:error] [pid 12900:tid 140684841400064] [client 193.32.127.232:56662] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/database.bak"] [unique_id "ZcVbe84Kp5gwPq0YtOva1QAAAFA"] [Fri Feb 09 00:53:47.616491 2024] [:error] [pid 12900:tid 140684807829248] [client 193.32.127.232:56672] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/db.bak"] [unique_id "ZcVbe84Kp5gwPq0YtOva1gAAAFQ"] [Fri Feb 09 00:53:47.619452 2024] [:error] [pid 12901:tid 140684858185472] [client 193.32.127.232:56678] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/export.sql"] [unique_id "ZcVbe8Yrh7SoTqEldm7MYgAAAI4"] [Fri Feb 09 00:53:47.622526 2024] [:error] [pid 12901:tid 140684841400064] [client 193.32.127.232:56688] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/export.bak"] [unique_id "ZcVbe8Yrh7SoTqEldm7MYwAAAJA"] [Fri Feb 09 00:53:47.632486 2024] [:error] [pid 12901:tid 140684833007360] [client 193.32.127.232:56708] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/dump.sql"] [unique_id "ZcVbe8Yrh7SoTqEldm7MZAAAAJE"] [Fri Feb 09 00:53:47.634703 2024] [:error] [pid 12901:tid 140684824614656] [client 193.32.127.232:56698] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/backup.bak"] [unique_id "ZcVbe8Yrh7SoTqEldm7MZQAAAJI"] [Fri Feb 09 00:53:47.641555 2024] [:error] [pid 12899:tid 140684883363584] [client 193.32.127.232:56650] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/database.sql"] [unique_id "ZcVbeyOiipDfZHSnz1THIQAAAAs"] [Fri Feb 09 00:53:47.655702 2024] [:error] [pid 12900:tid 140684824614656] [client 193.32.127.232:56726] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/sql.bak"] [unique_id "ZcVbe84Kp5gwPq0YtOva1wAAAFI"] [Fri Feb 09 00:53:47.680142 2024] [:error] [pid 12899:tid 140684841400064] [client 193.32.127.232:56664] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/db.sql"] [unique_id "ZcVbeyOiipDfZHSnz1THIgAAABA"] [Fri Feb 09 00:53:47.697899 2024] [:error] [pid 12900:tid 140684858185472] [client 193.32.127.232:56692] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/backup.sql"] [unique_id "ZcVbe84Kp5gwPq0YtOva2AAAAE4"] [Fri Feb 09 00:53:47.701453 2024] [:error] [pid 12901:tid 140684807829248] [client 193.32.127.232:56736] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/db_backup.sql"] [unique_id "ZcVbe8Yrh7SoTqEldm7MZgAAAJQ"] [Fri Feb 09 00:53:47.712516 2024] [:error] [pid 12901:tid 140684816221952] [client 193.32.127.232:56754] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/mysql.sql"] [unique_id "ZcVbe8Yrh7SoTqEldm7MZwAAAJM"] [Fri Feb 09 00:53:47.716972 2024] [:error] [pid 14959:tid 140684891756288] [client 193.32.127.232:56768] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/mysql.bak"] [unique_id "ZcVbe_NMOfZlIYvbLQJ4QwAAAMo"] [Fri Feb 09 00:53:47.732602 2024] [:error] [pid 14959:tid 140684782651136] [client 193.32.127.232:56710] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/dump.bak"] [unique_id "ZcVbe_NMOfZlIYvbLQJ4RAAAANc"] [Fri Feb 09 00:53:47.753906 2024] [:error] [pid 14959:tid 140684833007360] [client 193.32.127.232:56722] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/sql.sql"] [unique_id "ZcVbe_NMOfZlIYvbLQJ4RQAAANE"] [Fri Feb 09 00:53:47.774553 2024] [:error] [pid 14959:tid 140685023127296] [client 193.32.127.232:56744] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/db_backup.bak"] [unique_id "ZcVbe_NMOfZlIYvbLQJ4RwAAAMM"] [Fri Feb 09 00:53:57.274573 2024] [:error] [pid 14959:tid 140684933719808] [client 193.32.127.232:37466] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "31"] [id "960032"] [rev "2"] [msg "Method is not allowed by policy"] [data "PUT"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/METHOD_NOT_ALLOWED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "OWASP_AppSensor/RE1"] [tag "PCI/12.1"] [hostname "server.dev-unit.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ZcVbhfNMOfZlIYvbLQJ4WwAAAMU"] [Fri Feb 09 00:53:57.772854 2024] [:error] [pid 12901:tid 140684933719808] [client 193.32.127.232:37940] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "31"] [id "960032"] [rev "2"] [msg "Method is not allowed by policy"] [data "PUT"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/METHOD_NOT_ALLOWED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "OWASP_AppSensor/RE1"] [tag "PCI/12.1"] [hostname "server.dev-unit.com"] [uri "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ZcVbhcYrh7SoTqEldm7MogAAAIU"] [Fri Feb 09 00:53:58.308131 2024] [:error] [pid 14959:tid 140684849792768] [client 193.32.127.232:37946] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "31"] [id "960032"] [rev "2"] [msg "Method is not allowed by policy"] [data "PUT"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/METHOD_NOT_ALLOWED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "OWASP_AppSensor/RE1"] [tag "PCI/12.1"] [hostname "server.dev-unit.com"] [uri "/wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ZcVbhvNMOfZlIYvbLQJ4dAAAAM8"] [Fri Feb 09 00:53:58.790902 2024] [:error] [pid 12901:tid 140684799436544] [client 193.32.127.232:34766] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "31"] [id "960032"] [rev "2"] [msg "Method is not allowed by policy"] [data "PUT"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/METHOD_NOT_ALLOWED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "OWASP_AppSensor/RE1"] [tag "PCI/12.1"] [hostname "server.dev-unit.com"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ZcVbhsYrh7SoTqEldm7MowAAAJU"] [Fri Feb 09 00:53:59.403194 2024] [:error] [pid 12901:tid 140684782651136] [client 193.32.127.232:34780] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "31"] [id "960032"] [rev "2"] [msg "Method is not allowed by policy"] [data "PUT"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/METHOD_NOT_ALLOWED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "OWASP_AppSensor/RE1"] [tag "PCI/12.1"] [hostname "server.dev-unit.com"] [uri "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ZcVbh8Yrh7SoTqEldm7MpAAAAJc"] [Fri Feb 09 00:53:59.886938 2024] [:error] [pid 12900:tid 140684782651136] [client 193.32.127.232:34782] [client 193.32.127.232] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "31"] [id "960032"] [rev "2"] [msg "Method is not allowed by policy"] [data "PUT"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/METHOD_NOT_ALLOWED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "OWASP_AppSensor/RE1"] [tag "PCI/12.1"] [hostname "server.dev-unit.com"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ZcVbh84Kp5gwPq0YtOva6QAAAFc"] [Tue Feb 13 19:51:28.444920 2024] [:error] [pid 29577:tid 140682335536896] [client 68.178.223.62:17428] File does not exist: /home/devunit/public_html/wp-login.php [Tue Feb 13 19:54:49.411090 2024] [:error] [pid 29578:tid 140682199009024] [client 154.53.58.16:39924] File does not exist: /home/devunit/public_html/wp-login.php [Tue Feb 13 19:58:48.665797 2024] [:error] [pid 29980:tid 140682199009024] [client 39.101.185.186:57128] File does not exist: /home/devunit/public_html/wp-login.php [Tue Feb 13 20:16:02.700494 2024] [:error] [pid 29980:tid 140682257757952] [client 64.90.38.73:47070] File does not exist: /home/devunit/public_html/wp-login.php [Thu Feb 22 21:42:31.545152 2024] [:error] [pid 1229:tid 140507179091712] [client 198.12.222.107:21543] File does not exist: /home/devunit/public_html/wp-login.php [Mon Feb 26 16:18:04.545918 2024] [:error] [pid 6717:tid 140389344253696] [client 82.223.222.75:55392] File does not exist: /home/devunit/public_html/wp-login.php [Tue Mar 05 19:33:35.243373 2024] [:error] [pid 25318:tid 139792565135104] [client 216.14.124.9:48742] File does not exist: /home/devunit/public_html/wp-login.php [Thu Mar 07 22:29:46.879412 2024] [:error] [pid 17764:tid 140035026302720] [client 39.96.216.30:59560] File does not exist: /home/devunit/public_html/wp-login.php [Sat Mar 09 07:25:27.562733 2024] [:error] [pid 14867:tid 139872748676864] [client 208.109.188.30:46344] File does not exist: /home/devunit/public_html/wp-login.php [Fri Mar 15 13:06:44.795232 2024] [:error] [pid 31411:tid 139691143632640] [client 68.178.149.31:61716] File does not exist: /home/devunit/public_html/wp-login.php [Wed Mar 20 16:01:08.121191 2024] [:error] [pid 20000:tid 140447750883072] [client 97.74.91.90:57262] File does not exist: /home/devunit/public_html/wp-login.php [Sun Mar 24 15:53:47.681486 2024] [:error] [pid 26379:tid 139737985685248] [client 212.224.98.109:34346] File does not exist: /home/devunit/public_html/wp-login.php [Tue Apr 02 03:42:50.469495 2024] [:error] [pid 17880:tid 140157021992704] [client 69.162.102.218:60112] File does not exist: /home/devunit/public_html/wp-login.php [Thu Apr 04 14:25:14.161983 2024] [:error] [pid 21040:tid 140294007768832] [client 45.125.239.179:37418] File does not exist: /home/devunit/public_html/wp-login.php [Sun Apr 07 18:31:29.671002 2024] [:error] [pid 9012:tid 140522521876224] [client 103.234.94.133:59756] File does not exist: /home/devunit/public_html/wp-login.php [Tue Apr 09 00:54:34.099388 2024] [authz_core:error] [pid 13275:tid 140065535624960] [client 147.182.149.75:57006] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Tue Apr 09 00:54:36.088802 2024] [authz_core:error] [pid 9359:tid 140065476876032] [client 172.105.16.105:46782] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Tue Apr 09 00:54:56.093257 2024] [:error] [pid 9359:tid 140065644730112] [client 109.202.99.41:56273] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/dump.sql"] [unique_id "ZhR1wJTXB6GxPdZW5jMeVwAAAII"] [Tue Apr 09 00:54:56.104269 2024] [:error] [pid 13275:tid 140065585981184] [client 109.202.99.41:56435] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/backup.sql"] [unique_id "ZhR1wD377cbilTbvmw-bgQAAAMk"] [Tue Apr 09 00:54:56.106029 2024] [:error] [pid 9359:tid 140065627944704] [client 109.202.99.41:14823] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/web.config"] [unique_id "ZhR1wJTXB6GxPdZW5jMeWwAAAIQ"] [Mon Apr 15 05:14:50.751615 2024] [:error] [pid 12583:tid 139952566228736] [client 39.101.185.186:45780] File does not exist: /home/devunit/public_html/wp-login.php [Wed Apr 17 17:52:29.940898 2024] [:error] [pid 20133:tid 139676606252800] [client 177.136.203.45:40942] File does not exist: /home/devunit/public_html/wp-login.php [Tue Apr 23 17:13:33.440723 2024] [:error] [pid 26043:tid 140249715918592] [client 207.244.250.20:47498] File does not exist: /home/devunit/public_html/wp-login.php [Mon May 06 03:49:47.842667 2024] [:error] [pid 23627:tid 140601618048768] [client 116.62.155.4:42850] File does not exist: /home/devunit/public_html/wp-login.php [Wed May 08 00:36:58.784877 2024] [:error] [pid 21018:tid 139635904677632] [client 45.127.101.193:48706] File does not exist: /home/devunit/public_html/wp-login.php [Sun May 12 18:23:14.906225 2024] [:error] [pid 29722:tid 140667122681600] [client 95.0.0.209:56562] File does not exist: /home/devunit/public_html/wp-login.php [Wed May 15 20:54:15.334808 2024] [:error] [pid 14993:tid 140036997572352] [client 80.94.92.105:60300] File does not exist: /home/devunit/public_html/phpinfo.php [Sat May 18 00:10:18.311413 2024] [:error] [pid 17034:tid 139683879188224] [client 207.244.250.20:50814] File does not exist: /home/devunit/public_html/wp-login.php [Wed May 22 18:12:05.928047 2024] [:error] [pid 32440:tid 139675951884032] [client 203.115.100.194:46586] File does not exist: /home/devunit/public_html/wp-login.php [Wed May 29 18:41:48.957627 2024] [:error] [pid 14480:tid 140339440502528] [client 102.23.122.251:42642] File does not exist: /home/devunit/public_html/wp-login.php [Sat Jun 08 00:53:29.714623 2024] [authz_core:error] [pid 30660:tid 140299913348864] [client 139.162.155.225:36540] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Sat Jun 08 00:53:43.062627 2024] [authz_core:error] [pid 30657:tid 140300082984704] [client 139.162.101.202:43594] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Sat Jun 08 22:53:36.776700 2024] [:error] [pid 8083:tid 139977656551168] [client 45.148.10.232:58866] File does not exist: /home/devunit/public_html/phpinfo.php [Tue Jun 18 04:34:31.906636 2024] [:error] [pid 24736:tid 139667680773888] [client 165.232.165.110:44902] File does not exist: /home/devunit/public_html/wp-login.php [Thu Jun 20 20:23:25.290598 2024] [:error] [pid 15998:tid 140354858755840] [client 89.22.113.109:48878] File does not exist: /home/devunit/public_html/wp-login.php [Fri Jun 21 16:15:50.672704 2024] [:error] [pid 5034:tid 140581913220864] [client 45.148.10.232:45520] File does not exist: /home/devunit/public_html/phpinfo.php [Thu Jun 27 22:15:05.782409 2024] [:error] [pid 2946:tid 140594420549376] [client 103.154.184.42:36802] File does not exist: /home/devunit/public_html/wp-login.php [Sat Jul 06 11:55:46.885732 2024] [:error] [pid 16277:tid 140493136553728] [client 195.54.178.6:45898] File does not exist: /home/devunit/public_html/wp-login.php [Sat Jul 20 02:05:50.284344 2024] [:error] [pid 25638:tid 139756658734848] [client 68.178.166.166:59412] File does not exist: /home/devunit/public_html/wp-login.php [Fri Aug 02 22:38:16.685019 2024] [:error] [pid 28976:tid 140304501962496] [client 165.22.58.178:51466] File does not exist: /home/devunit/public_html/wp-login.php [Wed Aug 07 00:53:24.463297 2024] [authz_core:error] [pid 2236:tid 139623531534080] [client 68.183.9.16:58598] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Wed Aug 07 00:53:25.866093 2024] [authz_core:error] [pid 32656:tid 139623397250816] [client 165.227.39.235:38186] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Thu Aug 08 01:36:29.871687 2024] [:error] [pid 8004:tid 139716502456064] [client 179.43.149.114:58022] File does not exist: /home/devunit/public_html/phpinfo.php [Thu Aug 08 01:36:30.193024 2024] [:error] [pid 8519:tid 139716452099840] [client 179.43.149.114:58050] File does not exist: /home/devunit/public_html/php_info.php [Thu Aug 08 01:36:30.266119 2024] [:error] [pid 8519:tid 139716641314560] [client 179.43.149.114:58066] File does not exist: /home/devunit/public_html/info.php [Sat Aug 17 02:49:07.405304 2024] [:error] [pid 20648:tid 139633128068864] [client 163.44.192.113:43038] File does not exist: /home/devunit/public_html/wp-login.php [Wed Aug 21 14:13:35.259967 2024] [:error] [pid 14415:tid 140548434290432] [client 45.148.10.241:39390] [client 45.148.10.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "Web Downloader"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/.env"] [unique_id "ZsXL3253L_lzm80yj35xJAAAAIc"] [Fri Aug 23 10:05:42.868877 2024] [:error] [pid 31105:tid 140439214532352] [client 3.25.119.89:33728] [client 3.25.119.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "EmailWolf"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/.git/config"] [unique_id "Zsg0xsiYfxCNZJTwZ7PTaQAAABY"] [Sat Aug 31 03:57:03.598050 2024] [:error] [pid 21473:tid 140283521967872] [client 176.56.56.132:60592] File does not exist: /home/devunit/public_html/wp-login.php [Sat Sep 07 09:29:28.522857 2024] [:error] [pid 398:tid 140006169491200] [client 31.24.44.159:55902] File does not exist: /home/devunit/public_html/wp-login.php [Fri Sep 13 02:27:16.663687 2024] [:error] [pid 13085:tid 140590452832000] [client 74.120.221.122:38738] File does not exist: /home/devunit/public_html/wp-login.php [Wed Oct 02 11:33:43.686696 2024] [:error] [pid 12691:tid 139641223096064] [client 103.82.20.35:42154] File does not exist: /home/devunit/public_html/wp-login.php [Sun Oct 06 00:53:19.513982 2024] [authz_core:error] [pid 16369:tid 140454272161536] [client 209.97.180.8:50306] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Sun Oct 06 00:53:20.045845 2024] [authz_core:error] [pid 16514:tid 140454137878272] [client 134.209.25.199:42178] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Sun Nov 03 03:02:02.068899 2024] [:error] [pid 16090:tid 140409485371136] [client 144.76.113.79:46870] File does not exist: /home/devunit/public_html/wp-login.php [Fri Nov 29 15:01:08.679033 2024] [:error] [pid 22962:tid 139969829992192] [client 109.205.213.242:54650] File does not exist: /home/devunit/public_html/phpinfo.php [Sat Nov 30 12:45:43.311450 2024] [:error] [pid 3512:tid 139844344809216] [client 109.205.213.18:52290] File does not exist: /home/devunit/public_html/phpinfo.php [Mon Dec 02 02:12:50.181254 2024] [:error] [pid 742:tid 139653789239040] [client 13.57.197.231:51312] [client 13.57.197.231] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-4000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "server.dev-unit.com"] [uri "/api/.env"] [unique_id "Z0z7gunaF3ATU1PA0qefogAAAMU"] [Wed Dec 04 00:54:31.959706 2024] [authz_core:error] [pid 30708:tid 140224776599296] [client 188.166.108.93:58308] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Wed Dec 04 00:54:32.241581 2024] [authz_core:error] [pid 30708:tid 140224936171264] [client 142.93.143.8:51592] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Wed Dec 04 20:06:26.673981 2024] [:error] [pid 16651:tid 139897528567552] [client 213.232.87.228:50877] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/backup.sql"] [unique_id "Z1CaIsl1ASWoBJPmRsdOmwAAAJc"] [Wed Dec 04 20:06:26.702757 2024] [:error] [pid 16650:tid 139897782023936] [client 213.232.87.228:31955] File does not exist: /home/devunit/public_html/wp-config.php [Wed Dec 04 20:06:26.721062 2024] [:error] [pid 16650:tid 139897790416640] [client 213.232.87.228:3537] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/server.key"] [unique_id "Z1CaIqNbsnQ4SK5Ue48wlAAAAEA"] [Wed Dec 04 20:06:26.721085 2024] [:error] [pid 16651:tid 139897604101888] [client 213.232.87.228:39283] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/_vti_pvt/authors.pwd"] [unique_id "Z1CaIsl1ASWoBJPmRsdOnQAAAI4"] [Wed Dec 04 20:06:26.721274 2024] [:error] [pid 16650:tid 139897637672704] [client 213.232.87.228:4213] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/_vti_pvt/administrators.pwd"] [unique_id "Z1CaIqNbsnQ4SK5Ue48wlQAAAEo"] [Wed Dec 04 20:06:26.739887 2024] [:error] [pid 16650:tid 139897520174848] [client 213.232.87.228:12049] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/web.config"] [unique_id "Z1CaIqNbsnQ4SK5Ue48wlgAAAFg"] [Wed Dec 04 20:06:26.740377 2024] [:error] [pid 16649:tid 139897520174848] [client 213.232.87.228:7113] File does not exist: /home/devunit/public_html/phpinfo.php [Wed Dec 04 20:06:26.740767 2024] [:error] [pid 16733:tid 139897637672704] [client 213.232.87.228:37533] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/dump.sql"] [unique_id "Z1CaIoTEj1MMqVL6xGCyvAAAAMo"] [Wed Dec 04 20:06:26.741198 2024] [:error] [pid 16650:tid 139897528567552] [client 213.232.87.228:29875] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/.svn/wc.db"] [unique_id "Z1CaIqNbsnQ4SK5Ue48wlwAAAFc"] [Wed Dec 04 20:06:26.742201 2024] [:error] [pid 16651:tid 139897612494592] [client 213.232.87.228:18379] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Z1CaIsl1ASWoBJPmRsdOoAAAAI0"] [Wed Dec 04 20:06:26.744745 2024] [authz_host:error] [pid 16733:tid 139897671243520] [client 213.232.87.228:58863] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name [Wed Dec 04 20:06:26.744757 2024] [authz_core:error] [pid 16733:tid 139897671243520] [client 213.232.87.228:58863] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Wed Dec 04 20:06:26.761295 2024] [:error] [pid 16649:tid 139897595709184] [client 213.232.87.228:6459] File does not exist: /home/devunit/public_html/config.php [Wed Dec 04 20:06:26.761870 2024] [:error] [pid 16733:tid 139897520174848] [client 213.232.87.228:25753] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "Z1CaIoTEj1MMqVL6xGCywgAAANg"] [Wed Dec 04 20:06:26.762416 2024] [:error] [pid 16733:tid 139897528567552] [client 213.232.87.228:18959] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/database.sql"] [unique_id "Z1CaIoTEj1MMqVL6xGCywwAAANc"] [Fri Dec 06 19:19:34.971888 2024] [:error] [pid 31750:tid 139851542210304] [client 185.195.232.176:63858] File does not exist: /home/devunit/public_html/xmlrpc.php [Mon Dec 30 13:42:47.672178 2024] [:error] [pid 6129:tid 140395518301952] [client 109.205.213.26:55294] File does not exist: /home/devunit/public_html/phpinfo.php [Sun Jan 19 03:56:59.717488 2025] [log_config:warn] [pid 2904:tid 139952546088704] (28)No space left on device: [client 87.120.114.143:50384] AH00646: Error writing to /usr/local/apache/domlogs/server.dev-unit.com.log [Sun Jan 19 03:56:59.719066 2025] [log_config:warn] [pid 2904:tid 139952537696000] (28)No space left on device: [client 87.120.114.143:50384] AH00646: Error writing to /usr/local/apache/domlogs/server.dev-unit.com.log [Sun Jan 19 03:56:59.768288 2025] [log_config:warn] [pid 2904:tid 139952529303296] (28)No space left on device: [client 87.120.114.143:50384] AH00646: Error writing to /usr/local/apache/domlogs/server.dev-unit.com.log [Sun Jan 19 13:00:51.303934 2025] [log_config:warn] [pid 5937:tid 139952331364096] (28)No space left on device: [client 13.211.140.162:51870] AH00646: Erro[Sun Feb 02 00:54:28.963287 2025] [authz_core:error] [pid 24791:tid 140353239750400] [client 206.81.24.227:58742] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Sun Feb 02 00:54:29.282090 2025] [:error] [pid 11870:tid 140353394091776] [client 206.81.24.227:58812] File does not exist: /home/devunit/public_html/info.php [Sun Feb 02 00:54:45.134642 2025] [authz_core:error] [pid 11870:tid 140353394091776] [client 206.189.95.232:42010] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Sun Feb 02 00:54:52.001232 2025] [:error] [pid 24791:tid 140353222964992] [client 206.189.95.232:42086] File does not exist: /home/devunit/public_html/info.php [Sun Feb 02 11:36:19.817142 2025] [:error] [pid 7113:tid 140587424474880] [client 45.248.76.212:46430] File does not exist: /home/devunit/public_html/xmlrpc.php [Sun Feb 02 22:48:49.236797 2025] [:error] [pid 29341:tid 140587558758144] [client 45.248.76.212:55668] File does not exist: /home/devunit/public_html/xmlrpc.php [Mon Feb 03 11:20:44.182489 2025] [:error] [pid 8586:tid 139856986486528] [client 45.248.76.212:43890] File does not exist: /home/devunit/public_html/xmlrpc.php [Mon Feb 03 19:55:57.702717 2025] [:error] [pid 32629:tid 139857003271936] [client 34.48.8.115:56505] File does not exist: /home/devunit/public_html/xmlrpc.php [Mon Feb 03 21:03:19.924721 2025] [:error] [pid 32629:tid 139857020057344] [client 34.127.44.207:60356] File does not exist: /home/devunit/public_html/xmlrpc.php [Tue Feb 04 03:46:38.803307 2025] [:error] [pid 32629:tid 139856894166784] [client 149.88.22.77:53508] File does not exist: /home/devunit/public_html/xmlrpc.php [Wed Feb 05 20:08:40.988636 2025] [:error] [pid 20467:tid 140250177287936] [client 193.41.206.176:42578] File does not exist: /home/devunit/public_html/.env.php [Wed Feb 05 20:08:59.344118 2025] [:error] [pid 20467:tid 140250395432704] [client 193.41.206.176:42578] File does not exist: /home/devunit/public_html/phpinfo.php [Wed Feb 05 20:09:03.500479 2025] [:error] [pid 20467:tid 140250135324416] [client 193.41.206.176:42578] File does not exist: /home/devunit/public_html/info.php [Wed Feb 05 20:09:11.173913 2025] [:error] [pid 20467:tid 140250168895232] [client 193.41.206.176:42578] File does not exist: /home/devunit/public_html/frontend_dev.php [Thu Feb 06 12:21:32.177960 2025] [:error] [pid 15722:tid 140634568500992] [client 194.26.192.168:63178] File does not exist: /home/devunit/public_html/xmlrpc.php [Thu Feb 06 14:14:31.874427 2025] [:error] [pid 3465:tid 140634417432320] [client 45.148.10.235:60816] File does not exist: /home/devunit/public_html/phpinfo.php [Thu Feb 06 14:14:34.385310 2025] [:error] [pid 3554:tid 140634501359360] [client 45.148.10.235:60888] File does not exist: /home/devunit/public_html/php_info.php [Mon Feb 10 02:46:29.413369 2025] [:error] [pid 28347:tid 140196121081600] [client 80.94.95.157:46724] File does not exist: /home/devunit/public_html/wp-login.php [Mon Feb 10 02:46:29.897516 2025] [:error] [pid 28442:tid 140196221794048] [client 80.94.95.157:48312] File does not exist: /home/devunit/public_html/wp-login.php [Tue Feb 11 21:55:05.336319 2025] [:error] [pid 23341:tid 140580327753472] [client 194.26.192.168:62481] File does not exist: /home/devunit/public_html/xmlrpc.php [Thu Feb 13 05:36:27.308908 2025] [:error] [pid 1336:tid 139807342679808] [client 45.148.10.235:50470] File does not exist: /home/devunit/public_html/phpinfo.php [Thu Feb 13 05:36:29.296470 2025] [:error] [pid 1336:tid 139807300716288] [client 45.148.10.235:50878] File does not exist: /home/devunit/public_html/php_info.php [Wed Feb 26 04:39:00.783134 2025] [:error] [pid 25449:tid 140664993994496] [client 195.178.110.164:37166] File does not exist: /home/devunit/public_html/phpinfo.php [Wed Feb 26 04:39:01.658710 2025] [:error] [pid 25450:tid 140665106147072] [client 195.178.110.164:37454] File does not exist: /home/devunit/public_html/php_info.php [Sun Mar 09 02:59:31.564353 2025] [:error] [pid 31031:tid 140619980732160] [client 3.140.190.124:39924] [client 3.140.190.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "Web Downloader"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/"] [unique_id "Z8zn8_gKe4adQe_vHGsMngAAAEQ"] [Mon Mar 17 05:18:26.400286 2025] [:error] [pid 6154:tid 140046748776192] [client 92.118.39.228:9942] File does not exist: /home/devunit/public_html/phpinfo.php [Mon Mar 17 05:18:28.571310 2025] [:error] [pid 7818:tid 140046757168896] [client 92.118.39.228:10000] File does not exist: /home/devunit/public_html/php_info.php [Mon Mar 17 10:01:18.704969 2025] [:error] [pid 7818:tid 140046568994560] [client 43.153.193.106:51004] [client 43.153.193.106] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "19"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "server.dev-unit.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Z9fWzv-TGnr9UkzX5-717wAAANM"] [Tue Mar 25 06:48:35.130365 2025] [:error] [pid 5500:tid 140369236838144] [client 85.204.70.102:60240] File does not exist: /home/devunit/public_html/xmlrpc.php [Thu Mar 27 03:33:57.237512 2025] [:error] [pid 20854:tid 140517555820288] [client 170.39.218.98:40320] File does not exist: /home/devunit/public_html/_phpinfo.php [Thu Mar 27 03:33:57.649421 2025] [:error] [pid 20854:tid 140517666035456] [client 170.39.218.98:40320] File does not exist: /home/devunit/public_html/app_dev.php [Thu Apr 03 03:31:43.536818 2025] [:error] [pid 27347:tid 140378514614016] [client 109.202.99.36:20806] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/database.sql"] [unique_id "Z-3k_8ZIN0qs2hCn049pbAAAAMk"] [Thu Apr 03 03:31:43.540884 2025] [:error] [pid 27347:tid 140378455865088] [client 109.202.99.36:18806] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/web.config"] [unique_id "Z-3k_8ZIN0qs2hCn049pbQAAANA"] [Thu Apr 03 03:31:43.545403 2025] [:error] [pid 27347:tid 140378497828608] [client 109.202.99.36:57014] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/.svn/wc.db"] [unique_id "Z-3k_8ZIN0qs2hCn049pbgAAAMs"] [Thu Apr 03 03:31:43.546647 2025] [:error] [pid 25907:tid 140378573362944] [client 109.202.99.36:43661] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/database_backup.sql"] [unique_id "Z-3k__nKjm_q2ZA10hY8_wAAAII"] [Thu Apr 03 03:31:43.580602 2025] [:error] [pid 25907:tid 140378581755648] [client 109.202.99.36:34427] File does not exist: /home/devunit/public_html/config.php [Thu Apr 03 03:31:43.588514 2025] [:error] [pid 27347:tid 140378581755648] [client 109.202.99.36:38794] File does not exist: /home/devunit/public_html/wp-config.php [Thu Apr 03 03:31:43.591498 2025] [:error] [pid 25907:tid 140378464257792] [client 109.202.99.36:27246] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/backup.sql"] [unique_id "Z-3k__nKjm_q2ZA10hY9BgAAAI8"] [Thu Apr 03 03:31:43.594496 2025] [:error] [pid 25907:tid 140378497828608] [client 109.202.99.36:5296] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/dump.sql"] [unique_id "Z-3k__nKjm_q2ZA10hY9CQAAAIs"] [Thu Apr 03 03:31:43.600177 2025] [:error] [pid 27347:tid 140378531399424] [client 109.202.99.36:12127] File does not exist: /home/devunit/public_html/phpinfo.php [Thu Apr 03 03:31:43.600678 2025] [authz_host:error] [pid 25907:tid 140378556577536] [client 109.202.99.36:57426] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name [Thu Apr 03 03:31:43.600688 2025] [authz_core:error] [pid 25907:tid 140378556577536] [client 109.202.99.36:57426] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Thu Apr 03 03:31:43.681804 2025] [:error] [pid 27347:tid 140378573362944] [client 109.202.99.36:20360] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "Z-3k_8ZIN0qs2hCn049peAAAAMI"] [Thu Apr 03 03:31:43.685908 2025] [:error] [pid 27347:tid 140378556577536] [client 109.202.99.36:28517] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Z-3k_8ZIN0qs2hCn049peQAAAMQ"] [Thu Apr 03 03:31:43.692448 2025] [:error] [pid 27347:tid 140378481043200] [client 109.202.99.36:44092] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/server.key"] [unique_id "Z-3k_8ZIN0qs2hCn049pegAAAM0"] [Thu Apr 03 14:07:23.494268 2025] [authz_core:error] [pid 27997:tid 139738195404544] [client 68.183.9.16:47686] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Thu Apr 03 14:07:26.356115 2025] [:error] [pid 27997:tid 139738119870208] [client 68.183.9.16:47754] File does not exist: /home/devunit/public_html/info.php [Thu Apr 03 14:07:27.350770 2025] [authz_core:error] [pid 27997:tid 139738094692096] [client 68.183.9.16:36202] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Thu Apr 03 14:07:30.510766 2025] [:error] [pid 28515:tid 139738170226432] [client 68.183.9.16:36298] File does not exist: /home/devunit/public_html/info.php [Sat Apr 05 06:26:19.011852 2025] [:error] [pid 23986:tid 139798803068672] [client 154.83.103.106:21230] [client 154.83.103.106] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/db.ini"] [unique_id "Z_Cw6yAh9nne4osdcpa_2QAAANE"] [Sat Apr 05 06:26:19.099150 2025] [:error] [pid 23986:tid 139798836639488] [client 154.83.103.106:21230] File does not exist: /home/devunit/public_html/wp-config.php [Sat Apr 05 06:26:19.124030 2025] [:error] [pid 23986:tid 139798986659584] [client 154.83.103.106:21230] [client 154.83.103.106] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/env.backup"] [unique_id "Z_Cw6yAh9nne4osdcpa_6gAAAMQ"] [Sat Apr 05 06:26:19.130276 2025] [:error] [pid 23986:tid 139798819854080] [client 154.83.103.106:21230] [client 154.83.103.106] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/settings.bak"] [unique_id "Z_Cw6yAh9nne4osdcpa_6wAAAM8"] [Sat Apr 05 06:26:19.149074 2025] [:error] [pid 23986:tid 139798853424896] [client 154.83.103.106:21230] File does not exist: /home/devunit/public_html/phpinfo.php [Sat Apr 05 06:26:19.155274 2025] [:error] [pid 23986:tid 139799020230400] [client 154.83.103.106:21230] File does not exist: /home/devunit/public_html/info.php [Sat Apr 05 06:26:19.161536 2025] [:error] [pid 23986:tid 139798845032192] [client 154.83.103.106:21230] File does not exist: /home/devunit/public_html/test.php [Sat Apr 05 06:26:19.255304 2025] [:error] [pid 23986:tid 139798836639488] [client 154.83.103.106:21230] File does not exist: /home/devunit/public_html/config.inc.php [Sat Apr 05 06:26:19.261546 2025] [:error] [pid 23986:tid 139798744319744] [client 154.83.103.106:21230] File does not exist: /home/devunit/public_html/config.old.php [Sat Apr 05 06:26:19.267735 2025] [:error] [pid 23986:tid 139798828246784] [client 154.83.103.106:21230] [client 154.83.103.106] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/php.ini"] [unique_id "Z_Cw6yAh9nne4osdcpbAAQAAAM4"] [Sat Apr 05 06:26:19.280223 2025] [:error] [pid 23986:tid 139798986659584] [client 154.83.103.106:21230] File does not exist: /home/devunit/public_html/debug.php [Sat Apr 05 06:26:19.295686 2025] [authz_host:error] [pid 23986:tid 139798819854080] [client 154.83.103.106:21230] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name [Sat Apr 05 06:26:19.295698 2025] [authz_core:error] [pid 23986:tid 139798819854080] [client 154.83.103.106:21230] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Sat Apr 05 06:26:19.303028 2025] [:error] [pid 23986:tid 139798903781120] [client 154.83.103.106:21230] File does not exist: /home/devunit/public_html/phpinfo1.php [Sat Apr 05 06:26:19.309256 2025] [:error] [pid 23986:tid 139798995052288] [client 154.83.103.106:21230] File does not exist: /home/devunit/public_html/phpinfo2.php [Sun Apr 06 12:32:22.087278 2025] [:error] [pid 27361:tid 139995748038400] [client 154.83.103.101:32486] [client 154.83.103.101] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/db.ini"] [unique_id "Z_JYNqInD6dOFBkc8SKNIAAAAMY"] [Sun Apr 06 12:32:22.172597 2025] [:error] [pid 27361:tid 139995599828736] [client 154.83.103.101:32486] File does not exist: /home/devunit/public_html/wp-config.php [Sun Apr 06 12:32:22.197542 2025] [:error] [pid 27361:tid 139995641792256] [client 154.83.103.101:32486] [client 154.83.103.101] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/env.backup"] [unique_id "Z_JYNqInD6dOFBkc8SKNMQAAAMo"] [Sun Apr 06 12:32:22.203805 2025] [:error] [pid 27361:tid 139995764823808] [client 154.83.103.101:32486] [client 154.83.103.101] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/settings.bak"] [unique_id "Z_JYNqInD6dOFBkc8SKNMgAAAMQ"] [Sun Apr 06 12:32:22.222702 2025] [:error] [pid 27361:tid 139995756431104] [client 154.83.103.101:32486] File does not exist: /home/devunit/public_html/phpinfo.php [Sun Apr 06 12:32:22.228965 2025] [:error] [pid 27361:tid 139995798394624] [client 154.83.103.101:32486] File does not exist: /home/devunit/public_html/info.php [Sun Apr 06 12:32:22.235221 2025] [:error] [pid 27361:tid 139995633399552] [client 154.83.103.101:32486] File does not exist: /home/devunit/public_html/test.php [Sun Apr 06 12:32:22.329168 2025] [:error] [pid 27361:tid 139995599828736] [client 154.83.103.101:32486] File does not exist: /home/devunit/public_html/config.inc.php [Sun Apr 06 12:32:22.335487 2025] [:error] [pid 27361:tid 139995608221440] [client 154.83.103.101:32486] File does not exist: /home/devunit/public_html/config.old.php [Sun Apr 06 12:32:22.341674 2025] [:error] [pid 27361:tid 139995566257920] [client 154.83.103.101:32486] [client 154.83.103.101] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/php.ini"] [unique_id "Z_JYNqInD6dOFBkc8SKNSAAAANM"] [Sun Apr 06 12:32:22.354190 2025] [:error] [pid 27361:tid 139995641792256] [client 154.83.103.101:32486] File does not exist: /home/devunit/public_html/debug.php [Sun Apr 06 12:32:22.369751 2025] [authz_host:error] [pid 27361:tid 139995764823808] [client 154.83.103.101:32486] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name [Sun Apr 06 12:32:22.369763 2025] [authz_core:error] [pid 27361:tid 139995764823808] [client 154.83.103.101:32486] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Sun Apr 06 12:32:22.377006 2025] [:error] [pid 27361:tid 139995524294400] [client 154.83.103.101:32486] File does not exist: /home/devunit/public_html/phpinfo1.php [Sun Apr 06 12:32:22.383236 2025] [:error] [pid 27361:tid 139995574650624] [client 154.83.103.101:32486] File does not exist: /home/devunit/public_html/phpinfo2.php [Tue Apr 08 17:38:59.894685 2025] [:error] [pid 15722:tid 140290233333504] [client 43.134.35.169:53662] [client 43.134.35.169] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "19"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "server.dev-unit.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Z_VDE0hXkNf18Aem5J8HLQAAAEA"] [Fri Apr 11 22:14:42.814927 2025] [:error] [pid 31887:tid 139806713521920] [client 43.134.35.169:59023] [client 43.134.35.169] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "19"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "server.dev-unit.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Z_l4MhTkMeQ3IHG_OBLU-AAAAM0"] [Wed Apr 16 04:32:28.176286 2025] [:error] [pid 20477:tid 140023642973952] [client 154.83.103.111:55934] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/db.ini"] [unique_id "Z_8WvDk1ztE638sM-39owQAAAIE"] [Wed Apr 16 04:32:28.329624 2025] [:error] [pid 20477:tid 140023542261504] [client 154.83.103.111:55934] File does not exist: /home/devunit/public_html/wp-config.php [Wed Apr 16 04:32:28.356527 2025] [:error] [pid 20477:tid 140023500297984] [client 154.83.103.111:55934] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/env.backup"] [unique_id "Z_8WvDk1ztE638sM-39o0gAAAJI"] [Wed Apr 16 04:32:28.362762 2025] [:error] [pid 20477:tid 140023491905280] [client 154.83.103.111:55934] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/settings.bak"] [unique_id "Z_8WvDk1ztE638sM-39o0wAAAJM"] [Wed Apr 16 04:32:28.381562 2025] [:error] [pid 20477:tid 140023466727168] [client 154.83.103.111:55934] File does not exist: /home/devunit/public_html/phpinfo.php [Wed Apr 16 04:32:28.387797 2025] [:error] [pid 20477:tid 140023458334464] [client 154.83.103.111:55934] File does not exist: /home/devunit/public_html/info.php [Wed Apr 16 04:32:28.396059 2025] [:error] [pid 20477:tid 140023449941760] [client 154.83.103.111:55934] File does not exist: /home/devunit/public_html/test.php [Wed Apr 16 04:32:28.496126 2025] [:error] [pid 20477:tid 140023542261504] [client 154.83.103.111:55934] File does not exist: /home/devunit/public_html/config.inc.php [Wed Apr 16 04:32:28.502314 2025] [:error] [pid 20477:tid 140023533868800] [client 154.83.103.111:55934] File does not exist: /home/devunit/public_html/config.old.php [Wed Apr 16 04:32:28.508703 2025] [:error] [pid 20477:tid 140023517083392] [client 154.83.103.111:55934] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/php.ini"] [unique_id "Z_8WvDk1ztE638sM-39o6QAAAJA"] [Wed Apr 16 04:32:28.521131 2025] [:error] [pid 20477:tid 140023500297984] [client 154.83.103.111:55934] File does not exist: /home/devunit/public_html/debug.php [Wed Apr 16 04:32:28.536386 2025] [authz_host:error] [pid 20477:tid 140023491905280] [client 154.83.103.111:55934] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name [Wed Apr 16 04:32:28.536399 2025] [authz_core:error] [pid 20477:tid 140023491905280] [client 154.83.103.111:55934] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Wed Apr 16 04:32:28.541924 2025] [:error] [pid 20477:tid 140023483512576] [client 154.83.103.111:55934] File does not exist: /home/devunit/public_html/phpinfo1.php [Wed Apr 16 04:32:28.548140 2025] [:error] [pid 20477:tid 140023475119872] [client 154.83.103.111:55934] File does not exist: /home/devunit/public_html/phpinfo2.php [Sat Apr 19 05:41:21.041270 2025] [:error] [pid 25307:tid 139715210602240] [client 154.83.103.113:41586] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/db.ini"] [unique_id "aAMbYWExpFkjBBUEq6gaBwAAANA"] [Sat Apr 19 05:41:21.122357 2025] [:error] [pid 25307:tid 139715382396672] [client 154.83.103.113:41586] File does not exist: /home/devunit/public_html/wp-config.php [Sat Apr 19 05:41:21.147342 2025] [:error] [pid 25307:tid 139715277743872] [client 154.83.103.113:41586] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/env.backup"] [unique_id "aAMbYWExpFkjBBUEq6gaGAAAAMg"] [Sat Apr 19 05:41:21.153609 2025] [:error] [pid 25307:tid 139715252565760] [client 154.83.103.113:41586] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/settings.bak"] [unique_id "aAMbYWExpFkjBBUEq6gaGQAAAMs"] [Sat Apr 19 05:41:21.172398 2025] [:error] [pid 25307:tid 139715235780352] [client 154.83.103.113:41586] File does not exist: /home/devunit/public_html/phpinfo.php [Sat Apr 19 05:41:21.178668 2025] [:error] [pid 25307:tid 139715218994944] [client 154.83.103.113:41586] File does not exist: /home/devunit/public_html/info.php [Sat Apr 19 05:41:21.184913 2025] [:error] [pid 25307:tid 139715227387648] [client 154.83.103.113:41586] File does not exist: /home/devunit/public_html/test.php [Sat Apr 19 05:41:21.278763 2025] [:error] [pid 25307:tid 139715382396672] [client 154.83.103.113:41586] File does not exist: /home/devunit/public_html/config.inc.php [Sat Apr 19 05:41:21.285037 2025] [:error] [pid 25307:tid 139715365611264] [client 154.83.103.113:41586] File does not exist: /home/devunit/public_html/config.old.php [Sat Apr 19 05:41:21.291223 2025] [:error] [pid 25307:tid 139715374003968] [client 154.83.103.113:41586] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/php.ini"] [unique_id "aAMbYWExpFkjBBUEq6gaLwAAAMU"] [Sat Apr 19 05:41:21.303740 2025] [:error] [pid 25307:tid 139715277743872] [client 154.83.103.113:41586] File does not exist: /home/devunit/public_html/debug.php [Sat Apr 19 05:41:21.319767 2025] [authz_host:error] [pid 25307:tid 139715252565760] [client 154.83.103.113:41586] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name [Sat Apr 19 05:41:21.319782 2025] [authz_core:error] [pid 25307:tid 139715252565760] [client 154.83.103.113:41586] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Sat Apr 19 05:41:21.326622 2025] [:error] [pid 25307:tid 139715260958464] [client 154.83.103.113:41586] File does not exist: /home/devunit/public_html/phpinfo1.php [Sat Apr 19 05:41:21.332846 2025] [:error] [pid 25307:tid 139715269351168] [client 154.83.103.113:41586] File does not exist: /home/devunit/public_html/phpinfo2.php [Thu May 01 16:43:05.232223 2025] [:error] [pid 12330:tid 140352535090944] [client 179.43.149.114:37112] File does not exist: /home/devunit/public_html/phpinfo.php [Thu May 01 16:43:05.579692 2025] [:error] [pid 12571:tid 140352509912832] [client 179.43.149.114:37146] File does not exist: /home/devunit/public_html/php_info.php [Thu May 01 16:43:05.662914 2025] [:error] [pid 12330:tid 140352434378496] [client 179.43.149.114:37162] File does not exist: /home/devunit/public_html/info.php [Wed May 14 14:15:26.059294 2025] [:error] [pid 13520:tid 140535220131584] [client 93.123.109.81:52238] File does not exist: /home/devunit/public_html/phpinfo.php [Wed May 14 14:15:27.037095 2025] [:error] [pid 22514:tid 140535220131584] [client 93.123.109.81:52262] File does not exist: /home/devunit/public_html/php_info.php [Fri May 23 19:34:35.673058 2025] [:error] [pid 22601:tid 139929606637312] [client 194.163.159.240:59652] [client 194.163.159.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "grub-client"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/.env"] [unique_id "aDCjm84b-z3tcl22uNS5TwAAAQs"] [Mon Jun 02 00:53:51.712299 2025] [authz_core:error] [pid 12269:tid 140151868667648] [client 159.89.12.166:57134] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Mon Jun 02 00:53:52.114962 2025] [authz_core:error] [pid 12358:tid 140151720224512] [client 159.89.127.165:57722] AH01630: client denied by server configuration: /home/devunit/public_html/server-status [Mon Jun 02 00:53:52.573511 2025] [:error] [pid 19220:tid 140151762188032] [client 159.89.12.166:57240] File does not exist: /home/devunit/public_html/info.php [Mon Jun 02 00:53:53.927332 2025] [:error] [pid 19220:tid 140151669868288] [client 159.89.127.165:57808] File does not exist: /home/devunit/public_html/info.php [Mon Jun 02 18:50:42.650150 2025] [:error] [pid 26254:tid 140351435400960] [client 103.157.96.60:47824] File does not exist: /home/devunit/public_html/app_dev.php [Mon Jun 02 18:50:43.518555 2025] [:error] [pid 26254:tid 140351268415232] [client 103.157.96.60:43734] File does not exist: /home/devunit/public_html/app_dev.php [Mon Jun 02 18:50:45.077811 2025] [:error] [pid 26254:tid 140351293593344] [client 103.157.96.60:48226] File does not exist: /home/devunit/public_html/index.php [Mon Jun 02 18:50:45.599875 2025] [:error] [pid 26254:tid 140351176095488] [client 103.157.96.60:43694] File does not exist: /home/devunit/public_html/index.php [Mon Jun 02 18:50:45.790468 2025] [:error] [pid 26254:tid 140351234844416] [client 103.157.96.60:48226] [client 103.157.96.60] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/logs/app.log"] [unique_id "aD3IVTS94hywF0KjV2f9jQAAAM8"] [Mon Jun 02 18:50:45.992462 2025] [:error] [pid 26254:tid 140351301986048] [client 103.157.96.60:48206] [client 103.157.96.60] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/logs/laravel.log"] [unique_id "aD3IVTS94hywF0KjV2f9kAAAAMc"] [Mon Jun 02 18:50:46.165648 2025] [:error] [pid 26254:tid 140351226451712] [client 103.157.96.60:48206] [client 103.157.96.60] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/storage/logs/laravel.log"] [unique_id "aD3IVjS94hywF0KjV2f9kwAAANA"] [Mon Jun 02 18:50:46.338865 2025] [:error] [pid 26254:tid 140351427008256] [client 103.157.96.60:48206] [client 103.157.96.60] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/var/log/app.log"] [unique_id "aD3IVjS94hywF0KjV2f9lgAAAME"] [Mon Jun 02 18:50:46.511729 2025] [:error] [pid 26254:tid 140351260022528] [client 103.157.96.60:48226] [client 103.157.96.60] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/app/logs/error.log"] [unique_id "aD3IVjS94hywF0KjV2f9mQAAAMw"] [Mon Jun 02 18:50:46.684948 2025] [:error] [pid 26254:tid 140351318771456] [client 103.157.96.60:48226] [client 103.157.96.60] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/log/error.log"] [unique_id "aD3IVjS94hywF0KjV2f9nAAAAMU"] [Mon Jun 02 18:50:46.856779 2025] [:error] [pid 26254:tid 140351167702784] [client 103.157.96.60:43734] [client 103.157.96.60] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/logs/app.log"] [unique_id "aD3IVjS94hywF0KjV2f9nwAAANc"] [Mon Jun 02 18:50:47.027920 2025] [:error] [pid 26254:tid 140351201273600] [client 103.157.96.60:43734] [client 103.157.96.60] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/logs/laravel.log"] [unique_id "aD3IVzS94hywF0KjV2f9oQAAANM"] [Mon Jun 02 18:50:47.199225 2025] [:error] [pid 26254:tid 140351234844416] [client 103.157.96.60:43734] [client 103.157.96.60] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/storage/logs/laravel.log"] [unique_id "aD3IVzS94hywF0KjV2f9owAAAM8"] [Mon Jun 02 18:50:47.370421 2025] [:error] [pid 26254:tid 140351435400960] [client 103.157.96.60:43734] [client 103.157.96.60] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/var/log/app.log"] [unique_id "aD3IVzS94hywF0KjV2f9pQAAAMA"] [Mon Jun 02 18:50:47.541527 2025] [:error] [pid 26254:tid 140351251629824] [client 103.157.96.60:43734] [client 103.157.96.60] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/app/logs/error.log"] [unique_id "aD3IVzS94hywF0KjV2f9pwAAAM0"] [Mon Jun 02 18:50:47.713136 2025] [:error] [pid 26254:tid 140351226451712] [client 103.157.96.60:43734] [client 103.157.96.60] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "server.dev-unit.com"] [uri "/log/error.log"] [unique_id "aD3IVzS94hywF0KjV2f9qQAAANA"] [Tue Jun 03 17:35:47.039079 2025] [:error] [pid 32479:tid 140698741360384] [client 143.244.57.84:33320] File does not exist: /home/devunit/public_html/xmlrpc.php [Wed Jun 04 00:19:44.734297 2025] [:error] [pid 2846:tid 140698749753088] [client 143.244.57.84:56610] File does not exist: /home/devunit/public_html/xmlrpc.php [Mon Jun 09 17:05:39.419911 2025] [:error] [pid 8666:tid 139986448480000] [client 185.177.72.106:60894] File does not exist: /home/devunit/public_html/i.php [Mon Jun 09 17:05:39.430408 2025] [:error] [pid 8666:tid 139986271696640] [client 185.177.72.106:60894] File does not exist: /home/devunit/public_html/info.php [Mon Jun 09 17:05:39.451128 2025] [:error] [pid 8666:tid 139986423301888] [client 185.177.72.106:60894] File does not exist: /home/devunit/public_html/p.php [Mon Jun 09 17:05:39.467749 2025] [:error] [pid 8666:tid 139986204555008] [client 185.177.72.106:60894] File does not exist: /home/devunit/public_html/phpinfo.php [Wed Jun 11 05:27:32.625008 2025] [:error] [pid 27397:tid 140275334752000] [client 185.177.72.144:5360] File does not exist: /home/devunit/public_html/i.php [Wed Jun 11 05:27:32.649796 2025] [:error] [pid 27397:tid 140275250824960] [client 185.177.72.144:5360] File does not exist: /home/devunit/public_html/info.php [Wed Jun 11 05:27:32.680791 2025] [:error] [pid 27397:tid 140275234039552] [client 185.177.72.144:5360] File does not exist: /home/devunit/public_html/p.php [Wed Jun 11 05:27:32.693316 2025] [:error] [pid 27397:tid 140275208861440] [client 185.177.72.144:5360] File does not exist: /home/devunit/public_html/phpinfo.php [Fri Jun 13 08:36:21.305608 2025] [:error] [pid 28034:tid 139743270467328] [client 185.177.72.210:4046] File does not exist: /home/devunit/public_html/i.php [Fri Jun 13 08:36:21.312064 2025] [:error] [pid 28034:tid 139743396357888] [client 185.177.72.210:4046] File does not exist: /home/devunit/public_html/info.php [Fri Jun 13 08:36:21.324469 2025] [:error] [pid 28034:tid 139743236896512] [client 185.177.72.210:4046] File does not exist: /home/devunit/public_html/p.php [Fri Jun 13 08:36:21.336883 2025] [:error] [pid 28034:tid 139743295645440] [client 185.177.72.210:4046] File does not exist: /home/devunit/public_html/phpinfo.php [Sat Jun 14 22:02:53.390735 2025] [:error] [pid 19088:tid 139990986102528] [client 156.146.36.81:9864] File does not exist: /home/devunit/public_html/phpinfo.php [Sat Jun 14 22:02:55.845911 2025] [:error] [pid 19192:tid 139991124875008] [client 156.146.36.81:9810] File does not exist: /home/devunit/public_html/test.php [Sat Jun 14 22:03:07.610740 2025] [:error] [pid 19158:tid 139991019673344] [client 156.146.36.81:9862] File does not exist: /home/devunit/public_html/index.php [Mon Jun 16 00:47:53.653207 2025] [:error] [pid 17149:tid 140503722936064] [client 85.204.70.104:48772] File does not exist: /home/devunit/public_html/xmlrpc.php