Untitled
Posted by NotLim on Mon 7th Jan 2013 20:54
raw | new post

Time:     Mon Jan  7 17:29:18 2013 -0300
IP:       46.254.21.69 (RU/Russian Federation/h13.ihc.ru)
Failures: 5 (mod_security)
Interval: 300 seconds
Blocked:  Temporary Block

Log entries:

[Mon Jan 07 17:28:39 2013] [error] [client 46.254.21.69] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ://%{SERVER_NAME}/" against "MATCHED_VARS:appserv_root" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "482"] [id "340162"] [rev "271"] [msg "Atomicorp.com WAF Rules: Remote File Injection attempt in ARGS (AE)"] [data "http://ifrases.net/wp-content/log.jpg??"] [severity "CRITICAL"] [hostname "revista.escaner.cl"] [uri "/node/4241//appserv/main.php"] [unique_id "UOsv977ERdsADpCjG1oAAAAm"]
[Mon Jan 07 17:28:48 2013] [error] [client 46.254.21.69] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ://%{SERVER_NAME}/" against "MATCHED_VARS:appserv_root" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "482"] [id "340162"] [rev "271"] [msg "Atomicorp.com WAF Rules: Remote File Injection attempt in ARGS (AE)"] [data "http://ifrases.net/wp-content/css.jpg??"] [severity "CRITICAL"] [hostname "revista.escaner.cl"] [uri "/node/4241//appserv/main.php"] [unique_id "UOswAL7ERdsADpLQCxUAAAAs"]
[Mon Jan 07 17:28:59 2013] [error] [client 46.254.21.69] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ://%{SERVER_NAME}/" against "MATCHED_VARS:appserv_root" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "482"] [id "340162"] [rev "271"] [msg "Atomicorp.com WAF Rules: Remote File Injection attempt in ARGS (AE)"] [data "http://ifrases.net/wp-content/log.jpg??"] [severity "CRITICAL"] [hostname "revista.escaner.cl"] [uri "/appserv/main.php"] [unique_id "UOswC77ERdsADpFBnTQAAAAj"]
[Mon Jan 07 17:29:06 2013] [error] [client 46.254.21.69] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ://%{SERVER_NAME}/" against "MATCHED_VARS:appserv_root" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "482"] [id "340162"] [rev "271"] [msg "Atomicorp.com WAF Rules: Remote File Injection attempt in ARGS (AE)"] [data "http://ifrases.net/wp-content/css.jpg??"] [severity "CRITICAL"] [hostname "revista.escaner.cl"] [uri "/appserv/main.php"] [unique_id "UOswEr7ERdsADpBgwZAAAAAM"]
[Mon Jan 07 17:29:16 2013] [error] [client 46.254.21.69] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ://%{SERVER_NAME}/" against "MATCHED_VARS:appserv_root" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "482"] [id "340162"] [rev "271"] [msg "Atomicorp.com WAF Rules: Remote File Injection attempt in ARGS (AE)"] [data "http://ifrases.net/wp-content/log.jpg??"] [severity "CRITICAL"] [hostname "revista.escaner.cl"] [uri "/node//appserv/main.php"] [unique_id "UOswHL7ERdsADmjFGpEAAAAp"]