access to context / is denied - 403 error

[vacancy]

Hello there

I want to go to sub-pages - home page sites, we see a 403 error.

Many sites on the same server error has occurred.

Litespeed log

2016-08-06 03:05:20.986 INFO [212.213.191.34:56448] File not found [/home/bursatum/public_html/403.shtml]
2016-08-06 03:05:20.986 INFO [212.213.191.34:56446] [ACL] Access to context [/] is denied!
2016-08-06 03:05:20.986 INFO [212.213.191.34:56446] File not found [/home/bursatum/public_html/403.shtml]
2016-08-06 03:05:20.989 INFO [212.213.191.34:56450] [ACL] Access to context [/] is denied!
2016-08-06 03:05:20.989 INFO [212.213.191.34:56450] File not found [/home/bursatum/public_html/403.shtml]
2016-08-06 03:05:20.989 INFO [212.213.191.34:56444] [ACL] Access to context [/] is denied!
2016-08-06 03:05:20.989 INFO [212.213.191.34:56444] File not found [/home/bursatum/public_html/403.shtml
2016-08-06 03:08:51.266 INFO [141.101.105.188:21721] [ACL] Access to context [/] is denied!
2016-08-06 03:08:51.266 INFO [141.103.107.188:21721] File not found [/home/hiddenuser/public_html/403.shtml]

I think it is sourced codes used in .htaccess but do not know which code is removed.

Litespeed version 5.0.19
Easyapache 4 - php5.4

Thank you.

 

[NiteWave]

can you post .htaccess here ?

 

[vacancy]

Hi.

Htaccess content.

RewriteEngine on
RewriteCond %{HTTP_HOST} ^siteurl.net
RewriteRule (.*) http://www.siteurl.net/$1 [R=301,L]
#rewritebase /

RewriteRule ^(.*)site.xml(.*)$ index.php
RewriteRule ^(.*)-index(.*).html$ index.php
RewriteRule ^(.*)-kat-(.*)-sayfa-(.*).html$ index.php?page=ilanlar&kat_adi=$1&kat_id=$2&sayfa_sayisi=$3&gereksiz=$1[L,NC]
# Yanlış.. Silinecek.. RewriteRule ^(.*)-(.*).html$ admin/index.php?id=$2&gereksiz=$1[L,NC]
RewriteRule ^(.*)-sayfa-(.*).html$ index.php?page=ilanlar&sayfa_sayisi=$2&gereksiz=$1[L,NC]
# Yanlış.. RewriteRule ^(.*)-sayfa-(.*)$ index.php?sayfa_sayisi=$2&gereksiz=$1[L,NC]
RewriteRule ^(.*)hastag-(.*)$ index.php?page=ilanlar&hastag=$2&gereksiz=$1[L,NC]
RewriteRule ^(.*)-(.*).html$ index.php?page=ilan_detay&id=$2&gereksiz=$1[L,NC]
<IfModule mod_rewrite.c>
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# BEGIN Kötü bot engelleyici
SetEnvIfNoCase User-Agent "Abonti|aggregator|AhrefsBot|asterias|BDCbot|BLEXBot|BuiltBotTough|Bullseye|BunnySlippers|ca\-crawler|CCBot|Cegbfeieh|CheeseBot|CherryPicker|CopyRightCheck|cosmos|Crescent|discobot|DittoSpyder|DotBot|Download Ninja|EasouSpider|EmailCollector|EmailSiphon|EmailWolf|EroCrawler|Exabot|ExtractorPro|Fasterfox|FeedBooster|Foobot|Genieo|grub\-client|Harvest|hloader|httplib|HTTrack|humanlinks|ieautodiscovery|InfoNaviRobot|IstellaBot|Java/1\.|JennyBot|k2spider|Kenjin Spider|Keyword Density/0\.9|larbin|LexiBot|libWeb|libwww|LinkextractorPro|linko|LinkScan/8\.1a Unix|LinkWalker|LNSpiderguy|lwp\-trivial|magpie|Mata Hari|MaxPointCrawler|MegaIndex|Microsoft URL Control|MIIxpc|Mippin|Missigua Locator|Mister PiX|MJ12bot|moget|MSIECrawler|NetAnts|NICErsPRO|Niki\-Bot|NPBot|Nutch|Offline Explorer|Openfind|panscient\.com|PHP/5\.\{|ProPowerBot/2\.14|ProWebWalker|Python\-urllib|QueryN Metasearch|RepoMonkey|RMA|SemrushBot|SeznamBot|SISTRIX|sitecheck\.Internetseer\.com|SiteSnagger|SnapPreviewBot|Sogou|SpankBot|spanner|spbot|Spinn3r|suzuran|Szukacz/1\.4|Teleport|Telesoft|The Intraformant|TheNomad|TightTwatBot|Titan|toCrawl/UrlDispatcher|True_Robot|turingos|TurnitinBot|UbiCrawler|UnisterBot|URLy Warning|VCI|WBSearchBot|Web Downloader/6\.9|Web Image Collector|WebAuto|WebBandit|WebCopier|WebEnhancer|WebmasterWorldForumBot|WebReaper|WebSauger|Website Quester|Webster Pro|WebStripper|WebZip|Wotbox|wsr\-agent|WWW\-Collector\-E|Xenu|Zao|Zeus|ZyBORG|coccoc|Incutio|lmspider|memoryBot|SemrushBot|serf|Unknown|uptime files" bad_bot
SetEnvIfNoCase Referer "Abonti|aggregator|AhrefsBot|asterias|BDCbot|BLEXBot|BuiltBotTough|Bullseye|BunnySlippers|ca\-crawler|CCBot|Cegbfeieh|CheeseBot|CherryPicker|CopyRightCheck|cosmos|Crescent|discobot|DittoSpyder|DotBot|Download Ninja|EasouSpider|EmailCollector|EmailSiphon|EmailWolf|EroCrawler|Exabot|ExtractorPro|Fasterfox|FeedBooster|Foobot|Genieo|grub\-client|Harvest|hloader|httplib|HTTrack|humanlinks|ieautodiscovery|InfoNaviRobot|IstellaBot|Java/1\.|JennyBot|k2spider|Kenjin Spider|Keyword Density/0\.9|larbin|LexiBot|libWeb|libwww|LinkextractorPro|linko|LinkScan/8\.1a Unix|LinkWalker|LNSpiderguy|lwp\-trivial|magpie|Mata Hari|MaxPointCrawler|MegaIndex|Microsoft URL Control|MIIxpc|Mippin|Missigua Locator|Mister PiX|MJ12bot|moget|MSIECrawler|NetAnts|NICErsPRO|Niki\-Bot|NPBot|Nutch|Offline Explorer|Openfind|panscient\.com|PHP/5\.\{|ProPowerBot/2\.14|ProWebWalker|Python\-urllib|QueryN Metasearch|RepoMonkey|RMA|SemrushBot|SeznamBot|SISTRIX|sitecheck\.Internetseer\.com|SiteSnagger|SnapPreviewBot|Sogou|SpankBot|spanner|spbot|Spinn3r|suzuran|Szukacz/1\.4|Teleport|Telesoft|The Intraformant|TheNomad|TightTwatBot|Titan|toCrawl/UrlDispatcher|True_Robot|turingos|TurnitinBot|UbiCrawler|UnisterBot|URLy Warning|VCI|WBSearchBot|Web Downloader/6\.9|Web Image Collector|WebAuto|WebBandit|WebCopier|WebEnhancer|WebmasterWorldForumBot|WebReaper|WebSauger|Website Quester|Webster Pro|WebStripper|WebZip|Wotbox|wsr\-agent|WWW\-Collector\-E|Xenu|Zao|Zeus|ZyBORG|coccoc|Incutio|lmspider|memoryBot|SemrushBot|serf|Unknown|uptime files" bad_bot
Deny from env=bad_bot
# END Kötü bot engelleyici

# php -- BEGIN cPanel-generated handler, do not edit
# “ea-php54” paketini varsayılan “PHP” programlama dili olarak ayarlayın.
<IfModule mime_module>
AddType application/x-httpd-ea-php54 .php .php5 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit

 

[NiteWave]

if remove this line:
SetEnvIfNoCase User-Agent
from .htaccess, will 403 error be gone ?

 

[vacancy]

thank you,correct.

In many sites, but this code is used, LiteSpeed what we need to do is to ignore this code?

 

[NiteWave]

I did unit test on

SetEnvIfNoCase User-Agent "Abonti|aggregator|AhrefsBot|asterias|BDCbot|BLEXBot|BuiltBotTough|Bullseye|BunnySlippers|ca\-crawler|CCBot|Cegbfeieh|CheeseBot|CherryPicker|CopyRightCheck|cosmos|Crescent|discobot|DittoSpyder|DotBot|Download Ninja|EasouSpider|EmailCollector|EmailSiphon|EmailWolf|EroCrawler|Exabot|ExtractorPro|Fasterfox|FeedBooster|Foobot|Genieo|grub\-client|Harvest|hloader|httplib|HTTrack|humanlinks|ieautodiscovery|InfoNaviRobot|IstellaBot|Java/1\.|JennyBot|k2spider|Kenjin Spider|Keyword Density/0\.9|larbin|LexiBot|libWeb|libwww|LinkextractorPro|linko|LinkScan/8\.1a Unix|LinkWalker|LNSpiderguy|lwp\-trivial|magpie|Mata Hari|MaxPointCrawler|MegaIndex|Microsoft URL Control|MIIxpc|Mippin|Missigua Locator|Mister PiX|MJ12bot|moget|MSIECrawler|NetAnts|NICErsPRO|Niki\-Bot|NPBot|Nutch|Offline Explorer|Openfind|panscient\.com|PHP/5\.\{|ProPowerBot/2\.14|ProWebWalker|Python\-urllib|QueryN Metasearch|RepoMonkey|RMA|SemrushBot|SeznamBot|SISTRIX|sitecheck\.Internetseer\.com|SiteSnagger|SnapPreviewBot|Sogou|SpankBot|spanner|spbot|Spinn3r|suzuran|Szukacz/1\.4|Teleport|Telesoft|The Intraformant|TheNomad|TightTwatBot|Titan|toCrawl/UrlDispatcher|True_Robot|turingos|TurnitinBot|UbiCrawler|UnisterBot|URLy Warning|VCI|WBSearchBot|Web Downloader/6\.9|Web Image Collector|WebAuto|WebBandit|WebCopier|WebEnhancer|WebmasterWorldForumBot|WebReaper|WebSauger|Website Quester|Webster Pro|WebStripper|WebZip|Wotbox|wsr\-agent|WWW\-Collector\-E|Xenu|Zao|Zeus|ZyBORG|coccoc|Incutio|lmspider|memoryBot|SemrushBot|serf|Unknown|uptime files" bad_bot

Deny from env=bad_bot

litespeed version is 5.0.19(Build 5), there is no problem found -- lsws can handle it well.

2016-08-06 03:05:20.986 INFO [212.213.191.34:56448] File not found [/home/bursatum/public_html/403.shtml]
2016-08-06 03:05:20.986 INFO [212.213.191.34:56446] [ACL] Access to context [/] is denied!

how about you create an empty file /home/bursatum/public_html/403.shtml, so in above log, 1st line will disappear.
then see if 2nd line will appear still ?