pastebin - collaborative debugging tool
hn.kpaste.net RSS


Untitled
Posted by NotLim on Sun 16th Feb 2014 21:33
raw | new post

  1. 201.215.142.155 - - [16/Feb/2014:17:19:32 -0300] "GET /categorias/4/ HTTP/1.1" 403 13354 "http://www.nutratech.cl/compra_exitosa?xml=%3C?xml%20version=%221.0%22%20encoding=%22ISO-8859-1%22%20?%3E%3CServipag%3E%3CFirmaServipag%3EUsCJTXvctbJqscf8ki+oS1r7ZiaM8E8QstxHDpvt0QOF1NykAojNj3GDe+Fw1dp72kcfDB5Rbt65Ult1Z5YnkscNo0Flqg2O+uVI3VDWwkupiFffD9/FjIBC2EccYauInqb6MhRZA1E5jhCQnJNWMvqvb1cFpSdIwNioh4xc+1Q=%3C/FirmaServipag%3E%3CIdTrxServipag%3E95864094%3C/IdTrxServipag%3E%3CIdTxCliente%3E1746%3C/IdTxCliente%3E%3CEstadoPago%3E0%3C/EstadoPago%3E%3CMensaje%3EPago%20OK%3C/Mensaje%3E%3C/Servipag%3E" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.107 Safari/537.36"
  2.  
  3. mod_security:
  4.  
  5. [Sun Feb 16 17:19:08 2014] [error] [client 201.215.142.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:< ?[?%] ?|\\\\[ ?php)" at REQUEST_HEADERS:Referer. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "757"] [id "340133"] [rev "5"] [msg "Atomicorp.com WAF Rules: HTTP header PHP code injection attack"] [severity "CRITICAL"] [hostname "www.nutratech.cl"] [uri "/carro"] [unique_id "UwEdPL7ERd0ABmpbY6wAAABL"]
  6. [Sun Feb 16 17:19:32 2014] [error] [client 201.215.142.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:< ?[?%] ?|\\\\[ ?php)" at REQUEST_HEADERS:Referer. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "757"] [id "340133"] [rev "5"] [msg "Atomicorp.com WAF Rules: HTTP header PHP code injection attack"] [severity "CRITICAL"] [hostname "www.nutratech.cl"] [uri "/categorias/4/"] [unique_id "UwEdVL7ERd0ABmqtfjYAAABk"]
  7. [Sun Feb 16 17:43:25 2014] [error] [client 201.215.142.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:< ?[?%] ?|\\\\[ ?php)" at REQUEST_HEADERS:Referer. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "757"] [id "340133"] [rev "5"] [msg "Atomicorp.com WAF Rules: HTTP header PHP code injection attack"] [severity "CRITICAL"] [hostname "www.nutratech.cl"] [uri "/"] [unique_id "UwEi7b7ERd0ABvrMPQAAAAA8"]
  8. [Sun Feb 16 17:47:31 2014] [error] [client 201.215.142.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:< ?[?%] ?|\\\\[ ?php)" at REQUEST_HEADERS:Referer. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "757"] [id "340133"] [rev "5"] [msg "Atomicorp.com WAF Rules: HTTP header PHP code injection attack"] [severity "CRITICAL"] [hostname "www.nutratech.cl"] [uri "/"] [unique_id "UwEj477ERd0AByCOQ54AAAA0"]
  9. [Sun Feb 16 17:49:02 2014] [error] [client 201.215.142.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:< ?[?%] ?|\\\\[ ?php)" at REQUEST_HEADERS:Referer. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "757"] [id "340133"] [rev "5"] [msg "Atomicorp.com WAF Rules: HTTP header PHP code injection attack"] [severity "CRITICAL"] [hostname "www.nutratech.cl"] [uri "/"] [unique_id "UwEkPr7ERd0ABygf4RcAAAAw"]

Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.

Syntax highlighting:

To highlight particular lines, prefix each line with {%HIGHLIGHT}




All content is user-submitted.
The administrators of this site (kpaste.net) are not responsible for their content.
Abuse reports should be emailed to us at