Server Error Message

Stern-69

I keep recieving the following error messages (differnt IP's, but usually the same block) in the Servers error log. From my very inexperienced view it looks like some sort of hack attack, but after a week I stilll cant get an answer from the server techs at the hosting company on this.

Messages are all the same, with only the IP and destination URL spot changing

[Mon Feb 25 06:56:30 2008] [error] [client 88.218.40.83] mod_security: Warning. Pattern match "8[789].[0-9]+.[0-9]+.[0-9]+" at REMOTE_ADDR [severity "EMERGENCY"] [hostname "globalnavalstrikeforce.com"] [uri "/main.php"]

Can anyone give me a rundown of what exactly this means in plain english, and should I be concerned (I have blocked some IP ranges where the massage happens about 60+ times all at once). I am trying to figure out if this is a hackers attack, and if so should I be worried or do something.

Thank you all in advance as your help to date has been great, especially the tip on the security book by Chris Shiflett, as I have already learned a lot.

Paul

Valdhor

You should probably check the mod_security documentation

Stern-69

I checked out the link and read some of the documentation there, but it is a bit out of my legue. Since the server belongs to an outside hosting company I really have no access to things there.

My question is basically is this something I have to do something to fix, or is it just a message the server sends for something it is dealing with.

Paul

Valdhor

I have never used mod_security.

Your best bet is to ask your hosting company this question. They were the ones to install this module and would know how they set it up.

Stern-69

Thanks for the help, and with any luck they will eventually answer the question lol (with an actual answer and not a question on a totally different topic).

Paul

Weedpacket

FYI, the error message just means that the IP address "88.218.40.83" matched one of their rules for "suspicious-looking activity" (apparently coming from Europe is enough to qualify as "suspicious" in their book).