Time:     Wed Feb 12 18:18:57 2014 -0300

IP:       82.98.146.48 (ES/Spain/d354.dinaserver.com)

Failures: 5 (mod_security)

Interval: 3600 seconds

Blocked:  Temporary Block

 

Log entries:

 

[Wed Feb 12 18:15:01 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "betesda.cl"] [uri "/theme/index.php/component/tags/tag/4&sa=U&ei=5OP7UpfADoqz2QWR9oGQAQ&ved=0CHEQ9QEwDQ&usg=AFQjCNHSRRmSRmPWluP8q2wZM6x3OU36Qg/components/com_virtuemart/themes/pbv_multi/scripts/timthumb.php"] [unique_id "UvvkVb7ERd0ACBD903IAAAAM"]

[Wed Feb 12 18:15:02 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "betesda.cl"] [uri "/components/com_virtuemart/themes/pbv_multi/scripts/timthumb.php"] [unique_id "UvvkVr7ERd0ACAL1Ep4AAABW"]

[Wed Feb 12 18:15:03 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "betesda.cl"] [uri "/theme/index.php/component/tags/tag/components/com_virtuemart/themes/pbv_multi/scripts/timthumb.php"] [unique_id "UvvkV77ERd0ACBBTd88AAAAm"]

[Wed Feb 12 18:15:40 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "betesda.cl"] [uri "/theme/index.php/component/tags/tag/4&sa=U&ei=5OP7UpfADoqz2QWR9oGQAQ&ved=0CJ0BEBYwFw&usg=AFQjCNHSRRmSRmPWluP8q2wZM6x3OU36Qg/components/com_virtuemart/themes/pbv_multi/scripts/timthumb.php"] [unique_id "UvvkfL7ERd0AB@jgRV8AAAAG"]

[Wed Feb 12 18:18:55 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.iquiqueonfire.cl"] [uri "/index.php/component/content/category/11-demo-articles&sa=U&ei=5OP7UpfADoqz2QWR9oGQAQ&ved=0CP4CEBYwQw&usg=AFQjCNERnJnYb9uCzxQjeWL9sqCf8tFMCA/components/com_virtuemart/themes/pbv_multi/scripts/timthumb.php"] [unique_id "UvvlP77ERd0ACAK2XJAAAABB"]