Untitled
Posted by NotLim on Sun 16th Feb 2014 22:51
raw | new post

Time:     Fri Feb 14 21:11:59 2014 -0300
IP:       82.98.146.48 (ES/Spain/d354.dinaserver.com)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked:  Temporary Block

Log entries:

[Fri Feb 14 21:09:25 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.enmarcacionesjavierurbina.cl"] [uri "/index.php"] [unique_id "Uv6wNb7ERdwADOu5eYYAAAAX"]
[Fri Feb 14 21:09:26 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.enmarcacionesjavierurbina.cl"] [uri "/components/com_virtuemart/themes/pbv_multi/scripts/timthumb.php"] [unique_id "Uv6wNr7ERdwADOzsjKoAAAAM"]
[Fri Feb 14 21:09:26 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "enmarcacionesjavierurbina.cl"] [uri "/index.php"] [unique_id "Uv6wNr7ERdwADNerRAUAAAAJ"]
[Fri Feb 14 21:09:27 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "enmarcacionesjavierurbina.cl"] [uri "/components/com_virtuemart/themes/pbv_multi/scripts/timthumb.php"] [unique_id "Uv6wN77ERdwADOzqi80AAAAG"]
[Fri Feb 14 21:11:54 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "3"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name used in URL, Possible Injection Attack"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.enmarcacionesjavierurbina.cl"] [uri "/index.php"] [unique_id "Uv6wyr7ERdwADO3wrJcAAAAz"]