mod_security: Warning. Pattern match

[bigboy]

[Thu Mar 9 14:25:06 2006] [error] [client 202.142.222.240] mod_security: Warning. Pattern match "^$" at HEADER("USER-AGENT") [hostname "202.142.222.223"] [uri "/"]
[Thu Mar 9 14:25:08 2006] [error] [client 202.142.222.240] mod_security: Warning. Pattern match "^$" at HEADER("USER-AGENT") [hostname "202.142.222.223"] [uri "/"]

 

[nobaloney]

I've edited your post; two lines were enough to prove your point.

mod_security is telling you that you're getting hit by a user-agent (browser) matching the pattern set up for mod_security to report on. In other words, mod_security is telling you what you asked it to tell you.

I guess the question is why did you install mod_security, and what did you tell it to report on?

Jeff

 

[bigboy]

i thaink under attack from ip 202.142.222.240