⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.19
Server IP:
178.33.27.10
Server:
Linux cpanel.dev-unit.com 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
Server Software:
Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
PHP Version:
8.2.11
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
proc
/
self
/
root
/
usr
/
local
/
apache
/
domlogs
/
View File Name :
store.mysuits.online.error.log
[Thu Jun 12 02:35:12.588163 2025] [:error] [pid 14207:tid 140275225646848] [client 196.134.127.162:25691] [client 196.134.127.162] ModSecurity: Access denied with code 403 (phase 2). Pattern match "([\\\\~\\\\!\\\\@\\\\#\\\\$\\\\%\\\\^\\\\&\\\\*\\\\(\\\\)\\\\-\\\\+\\\\=\\\\{\\\\}\\\\[\\\\]\\\\|\\\\:\\\\;\\"\\\\'\\\\\\xc2\\xb4\\\\\\xe2\\x80\\x99\\\\\\xe2\\x80\\x98\\\\`\\\\<\\\\>].*?){8,}" at REQUEST_COOKIES:ecom_cookie. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "157"] [id "981172"] [rev "2"] [msg "Restricted SQL Character Anomaly Detection Alert - Total # of special characters exceeded"] [data "Matched Data: ] found within REQUEST_COOKIES:ecom_cookie: {\\x22level\\x22:[\\x22necessary\\x22],\\x22revision\\x22:0,\\x22data\\x22:null,\\x22rfc_cookie\\x22:false}"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [hostname "store.mysuits.online"] [uri "/"] [unique_id "aEoSsDmpHUkWNKbNWiWcGwAAAJI"] [Thu Jun 12 02:35:12.758487 2025] [:error] [pid 14207:tid 140275217254144] [client 196.134.127.162:25691] [client 196.134.127.162] ModSecurity: Access denied with code 403 (phase 2). Pattern match "([\\\\~\\\\!\\\\@\\\\#\\\\$\\\\%\\\\^\\\\&\\\\*\\\\(\\\\)\\\\-\\\\+\\\\=\\\\{\\\\}\\\\[\\\\]\\\\|\\\\:\\\\;\\"\\\\'\\\\\\xc2\\xb4\\\\\\xe2\\x80\\x99\\\\\\xe2\\x80\\x98\\\\`\\\\<\\\\>].*?){8,}" at REQUEST_COOKIES:ecom_cookie. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "157"] [id "981172"] [rev "2"] [msg "Restricted SQL Character Anomaly Detection Alert - Total # of special characters exceeded"] [data "Matched Data: ] found within REQUEST_COOKIES:ecom_cookie: {\\x22level\\x22:[\\x22necessary\\x22],\\x22revision\\x22:0,\\x22data\\x22:null,\\x22rfc_cookie\\x22:false}"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [hostname "store.mysuits.online"] [uri "/favicon.ico"] [unique_id "aEoSsDmpHUkWNKbNWiWcHAAAAJM"], referer: https://store.mysuits.online/ [Thu Jun 12 02:36:18.638155 2025] [authz_core:error] [pid 14768:tid 140275284395776] [client 64.227.32.66:49880] AH01630: client denied by server configuration: /home/buymore/mysuits.online/server-status [Thu Jun 12 02:36:18.922030 2025] [authz_core:error] [pid 14768:tid 140275259217664] [client 209.97.180.8:49748] AH01630: client denied by server configuration: /home/buymore/mysuits.online/server-status [Thu Jun 12 02:36:19.341093 2025] [access_compat:error] [pid 14679:tid 140275276003072] [client 64.227.32.66:49920] AH01797: client denied by server configuration: /home/buymore/mysuits.online/.env [Thu Jun 12 02:36:19.665543 2025] [access_compat:error] [pid 14736:tid 140275225646848] [client 209.97.180.8:49764] AH01797: client denied by server configuration: /home/buymore/mysuits.online/.env [Thu Jun 12 23:45:22.506343 2025] [access_compat:error] [pid 26768:tid 140178681169664] [client 109.202.99.41:39801] AH01797: client denied by server configuration: /home/buymore/mysuits.online/.env [Thu Jun 12 23:45:22.585349 2025] [authz_host:error] [pid 26865:tid 140178921604864] [client 109.202.99.41:61665] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name [Thu Jun 12 23:45:22.604913 2025] [authz_core:error] [pid 26865:tid 140178921604864] [client 109.202.99.41:61665] AH01630: client denied by server configuration: /home/buymore/mysuits.online/server-status [Fri Jun 13 01:08:10.050516 2025] [access_compat:error] [pid 26768:tid 140178706347776] [client 185.177.72.202:3940] AH01797: client denied by server configuration: /home/buymore/mysuits.online/.env [Fri Jun 13 01:08:10.056671 2025] [access_compat:error] [pid 26768:tid 140178739918592] [client 185.177.72.202:3940] AH01797: client denied by server configuration: /home/buymore/mysuits.online/app/.env [Fri Jun 13 18:06:40.910848 2025] [access_compat:error] [pid 10413:tid 139743253681920] [client 83.217.210.41:42844] AH01797: client denied by server configuration: /home/buymore/mysuits.online/.env [Sun Jun 15 09:07:43.582100 2025] [access_compat:error] [pid 18309:tid 140503832041216] [client 69.148.203.83:47010] AH01797: client denied by server configuration: /home/buymore/mysuits.online/.env [Mon Jun 16 06:48:08.401770 2025] [access_compat:error] [pid 12841:tid 140083369862912] [client 12.74.236.85:34332] AH01797: client denied by server configuration: /home/buymore/mysuits.online/.env [Tue Jun 17 05:17:36.291930 2025] [access_compat:error] [pid 14969:tid 140673046116096] [client 181.214.173.7:51858] AH01797: client denied by server configuration: /home/buymore/mysuits.online/.env