dkobia · November 11, 2010 16:19
diff --git a/gistfile1.txt b/gistfile1.txt
 [Thu Nov 11 10:02:36 2010] [error] [client 41.212.36.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(< ?(?:script|about|applet|activex|chrome).*(?:script|about|applet|activex|chrome) ?>|> ?< ?(img ?src|a ?href) ?= ?(ht|f)tps?:/|" ?> ?<|" ?[a-z]+ ?<.*>|> ?"? ?(>|<)|< ?/?i?frame|\\%env)" at ARGS:sms*flsms_instructions. [file "/hsphere/shared/apache2/conf/modsecurity.d/10_asl_rules.conf"] [line "690"] [id "340147"] [rev "56"] [msg "Atomicorp.com - FREE UNSUPPORTED DELAYED FEED - WAF Rules: Generic XSS filter"] [data ".php?"] [severity "CRITICAL"] [hostname "tafsiri.ushahidi.com"] [uri "/turk.php"] [unique_id "TNwTm0MWihgAAGFWNf4AAAAr"]

 [Thu Nov 11 09:57:10 2010] [error] [client 98.230.7.14] ModSecurity: Access denied with code 403 (phase 2). Match of "rx (\\\\.(?:gif|jpe?g|png|bmp|wct|pdf)|^docs$|^http://$|^[0-9]+\\\\|?|^$|^true$|^false$|^product_image/$|^submit$)" against "ARGS:image" required. [file "/hsphere/shared/apache2/conf/modsecurity.d/10_asl_rules.conf"] [line "781"] [id "340161"] [rev "26"] [msg "Atomicorp.com - FREE UNSUPPORTED DELAYED FEED - WAF Rules: PHP Injection protection for Image ARGS (S)"] [data ".php?"] [severity "CRITICAL"] [hostname "tafsiri.ushahidi.com"] [uri "/turk.php"] [unique_id "TNwSVUMWihgAAFrvbrIAAAAG"]
	[Thu Nov 11 10:02:36 2010] [error] [client 41.212.36.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(< ?(?:script\|about\|applet\|activex\|chrome).(?:script\|about\|applet\|activex\|chrome) ?>\|> ?< ?(img ?src\|a ?href) ?= ?(ht\|f)tps?:/\|" ?> ?<\|" ?[a-z]+ ?<.>\|> ?"? ?(>\|<)\|< ?/?i?frame\|\\%env)" at ARGS:sms*flsms_instructions. [file "/hsphere/shared/apache2/conf/modsecurity.d/10_asl_rules.conf"] [line "690"] [id "340147"] [rev "56"] [msg "Atomicorp.com - FREE UNSUPPORTED DELAYED FEED - WAF Rules: Generic XSS filter"] [data ".php?"] [severity "CRITICAL"] [hostname "tafsiri.ushahidi.com"] [uri "/turk.php"] [unique_id "TNwTm0MWihgAAGFWNf4AAAAr"]

	[Thu Nov 11 09:57:10 2010] [error] [client 98.230.7.14] ModSecurity: Access denied with code 403 (phase 2). Match of "rx (\\\\.(?:gif\|jpe?g\|png\|bmp\|wct\|pdf)\|^docs$\|^http://$\|^[0-9]+\\\\\|?\|^$\|^true$\|^false$\|^product_image/$\|^submit$)" against "ARGS:image" required. [file "/hsphere/shared/apache2/conf/modsecurity.d/10_asl_rules.conf"] [line "781"] [id "340161"] [rev "26"] [msg "Atomicorp.com - FREE UNSUPPORTED DELAYED FEED - WAF Rules: PHP Injection protection for Image ARGS (S)"] [data ".php?"] [severity "CRITICAL"] [hostname "tafsiri.ushahidi.com"] [uri "/turk.php"] [unique_id "TNwSVUMWihgAAFrvbrIAAAAG"]