Time:     Sat Feb 15 05:21:15 2014 -0300

IP:       82.98.146.48 (ES/Spain/d354.dinaserver.com)

Failures: 5 (mod_security)

Interval: 3600 seconds

Blocked:  Temporary Block

 

Log entries:

 

[Sat Feb 15 05:12:35 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.masajethai.cl"] [uri "/&sa=U&ei=ayD_Up7SI8bioATG94DYDA&ved=0CP4BEBYwLA&usg=AFQjCNFy5StjKV9PRREurj1-3SgejA1bsg/wp-content/themes/widescreen/includes/timthumb.php"] [unique_id "Uv8hc77ERdwAAM4jLZIAAAAB"]

[Sat Feb 15 05:12:36 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.masajethai.cl"] [uri "/wp-content/themes/widescreen/includes/timthumb.php"] [unique_id "Uv8hdL7ERdwAANEcY9MAAAAJ"]

[Sat Feb 15 05:14:20 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "efrstudio.cl"] [uri "/"] [unique_id "Uv8h3L7ERdwAANOgG3MAAAAT"]

[Sat Feb 15 05:14:21 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "efrstudio.cl"] [uri "/wp-content/themes/widescreen/includes/timthumb.php"] [unique_id "Uv8h3b7ERdwAANRZLR4AAAAK"]

[Sat Feb 15 05:21:10 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.masajethai.cl"] [uri "/&sa=U&ei=eCD_UvngL-K04ASH-oHAAg&ved=0CLYBEBYwHg&usg=AFQjCNEJVz0oEWHPGQ2eHsIonJ0s87vf4w/wp-content/themes/widescreen/includes/timthumb.php"] [unique_id "Uv8jdr7ERdwAAOIvEcsAAAAH"]