Time:     Sat Feb 15 06:05:50 2014 -0300

IP:       82.98.146.48 (ES/Spain/d354.dinaserver.com)

Failures: 5 (mod_security)

Interval: 3600 seconds

Blocked:  Temporary Block

 

Log entries:

 

[Sat Feb 15 05:51:38 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.acog.cl"] [uri "/upl/20100308065723.pdf&sa=U&ei=Din_Uvm_GKPx4gSivoH4Dw&ved=0COwCEBYwSQ&usg=AFQjCNHB-34d3oinnld3C5mJ1rRPZJ8xNw/wp-content/themes/Mentor/timthumb.php"] [unique_id "Uv8qmsnu@EwAAXDNGnkAAAAi"]

[Sat Feb 15 05:51:38 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.acog.cl"] [uri "/wp-content/themes/Mentor/timthumb.php"] [unique_id "Uv8qmsnu@EwAAZPK7u4AAAAE"]

[Sat Feb 15 05:51:39 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.acog.cl"] [uri "/upl/wp-content/themes/Mentor/timthumb.php"] [unique_id "Uv8qm8nu@EwAAXDIc9wAAAAd"]

[Sat Feb 15 05:59:28 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.acog.cl"] [uri "/upl/20100308065723.pdf&sa=U&ei=ECn_UsWqCKbR4QSG8oCQAQ&ved=0COICEBYwRg&usg=AFQjCNGNv65PkTHPL5YJ0e8zdLiCKXHr_w/wp-content/themes/Mentor/timthumb.php"] [unique_id "Uv8scMnu@EwAAZOv0TYAAAAB"]

[Sat Feb 15 06:05:48 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:wordpress|img\\\\.youtube|picasa|blogger|flickr)\\\\.com\\\\.[a-z0-9]+" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "74"] [id "318813"] [rev "2"] [msg "Atomicorp.com WAF Rules: Possible Fake Domain name"] [data "picasa.com.amandas"] [severity "CRITICAL"] [hostname "www.acog.cl"] [uri "/upl/20100308065723.pdf&sa=U&ei=GCn_UoPIJIGxoQTKt4DoCw&ved=0COUDEBYwXA&usg=AFQjCNEqBXtzC0k3WeYe_qtVkIiq_C6fFg/wp-content/themes/Mentor/timthumb.php"] [unique_id "Uv8t7Mnu@EwAAbM7caQAAAAR"]