Time:     Sun Feb  9 07:59:43 2014 -0300

IP:       82.98.146.48 (ES/Spain/d354.dinaserver.com)

Failures: 2 (mod_security)

Interval: 3600 seconds

Blocked:  Temporary Block

 

Log entries:

 

[Sun Feb 09 07:59:39 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "bot for jce" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/modsecurity.d/20_asl_useragents.conf"] [line "69"] [id "330205"] [rev "2"] [msg "Atomicorp.com WAF Rules: Joomla Exploit Bot"] [severity "CRITICAL"] [hostname "www.chileducdigital.cl"] [uri "/index.php/component/content/frontpage.html&sa=U&ei=6Fr3Urj7GePNygP1yoDIBw&ved=0CKMDEBYwSg&usg=AFQjCNEpzpnRDUIkdUYbEUPRM3sOfz8iZw/index.php"] [unique_id "Uvdfm77ERdIAC8g7MJIAAAAY"]

[Sun Feb 09 07:59:39 2014] [error] [client 82.98.146.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/stories/.+\\\\.php" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/50_asl_rootkits.conf"] [line "70"] [id "318812"] [rev "1"] [msg "Atomicorp.com WAF Rules: Possible Attempt to Access unauthorized shell or exploit in Joomla images directory"] [data "/images/stories/3xp.php"] [severity "CRITICAL"] [hostname "www.chileducdigital.cl"] [uri "/index.php/component/content/frontpage.html&sa=U&ei=6Fr3Urj7GePNygP1yoDIBw&ved=0CKMDEBYwSg&usg=AFQjCNEpzpnRDUIkdUYbEUPRM3sOfz8iZw//images/stories/3xp.php"] [unique_id "Uvdfm77ERdIAC8gsWT8AAAAJ"]