pastebin - collaborative debugging tool
hn.kpaste.net RSS


Untitled
Posted by NotLim on Sun 16th Feb 2014 22:50
raw | new post

  1. Time:     Thu Feb 13 10:07:58 2014 -0300
  2. IP:       82.98.146.48 (ES/Spain/d354.dinaserver.com)
  3. Failures: 5 (mod_security)
  4. Interval: 3600 seconds
  5. Blocked:  Temporary Block
  6.  
  7. Log entries:
  8.  
  9. [Thu Feb 13 09:57:30 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.safeman.cl"] [uri "/Joomla/index.php"] [unique_id "UvzBOr7ERdwAAwGYGb0AAABC"]
  10. [Thu Feb 13 09:57:31 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.safeman.cl"] [uri "/components/com_virtuemart/themes/pbv_multi/scripts/timthumb.php"] [unique_id "UvzBO77ERdwAAwthkQoAAAAn"]
  11. [Thu Feb 13 09:57:32 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.safeman.cl"] [uri "/Joomla/components/com_virtuemart/themes/pbv_multi/scripts/timthumb.php"] [unique_id "UvzBPL7ERdwAAxi9TPMAAAAB"]
  12. [Thu Feb 13 10:03:18 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.safeman.cl"] [uri "/Joomla/index.php"] [unique_id "UvzClr7ERdwAAyvDt2UAAAAP"]
  13. [Thu Feb 13 10:07:55 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.safeman.cl"] [uri "/Joomla/index.php"] [unique_id "UvzDq77ERdwAAzcLNsYAAAAH"]

Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.

Syntax highlighting:

To highlight particular lines, prefix each line with {%HIGHLIGHT}




All content is user-submitted.
The administrators of this site (kpaste.net) are not responsible for their content.
Abuse reports should be emailed to us at