Time:     Sat Feb 15 06:05:28 2014 -0300

IP:       82.98.146.48 (ES/Spain/d354.dinaserver.com)

Failures: 5 (mod_security)

Interval: 3600 seconds

Blocked:  Temporary Block

 

Log entries:

 

[Sat Feb 15 05:48:28 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.osornolamb.cl"] [uri "/index.php/noticias/25-mentorias&sa=U&ei=Din_Uvm_GKPx4gSivoH4Dw&ved=0COUBEBYwKw&usg=AFQjCNHSKWnxpU3Ajrp3MxDKlSYideAW_Q/wp-content/themes/Mentor/timthumb.php"] [unique_id "Uv8p3L7ERdUAA0H7cmEAAAAJ"]

[Sat Feb 15 05:48:29 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.osornolamb.cl"] [uri "/wp-content/themes/Mentor/timthumb.php"] [unique_id "Uv8p3b7ERdUAA0H8ekYAAAAL"]

[Sat Feb 15 05:48:30 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.osornolamb.cl"] [uri "/index.php/noticias/wp-content/themes/Mentor/timthumb.php"] [unique_id "Uv8p3r7ERdUAAzLYlKQAAAAN"]

[Sat Feb 15 06:01:00 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.osornolamb.cl"] [uri "/index.php/noticias/25-mentorias&sa=U&ei=ECn_UsWqCKbR4QSG8oCQAQ&ved=0CJgDEBYwUA&usg=AFQjCNFS2nqN05l-tRt4QGXS1Eaa6i5WnA/wp-content/themes/Mentor/timthumb.php"] [unique_id "Uv8szL7ERdUAA3AWaOwAAAAB"]

[Sat Feb 15 06:05:26 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.osornolamb.cl"] [uri "/index.php/noticias/25-mentorias&sa=U&ei=GCn_UoPIJIGxoQTKt4DoCw&ved=0CLcDEBYwUg&usg=AFQjCNHlesAIhSzu0-TJ9tKzaD4vLIC3GQ/wp-content/themes/Mentor/timthumb.php"] [unique_id "Uv8t1r7ERdUAA3hAzDkAAAAJ"]