# Apache ModSecurity rules for SHELLS SecRuleEngine On SecRule REQUEST_URI "\^\ nnnng00nshell\ v\[0\-9\.\]\+" "id:1309,phase:1,deny,status:403,log,msg:'shells attack detected'" SecRule REQUEST_URI "\^<title>PHP\ Web\ Shellrnrnrn\ \ \ \ " "id:1304,phase:1,deny,status:403,log,msg:'shells attack detected'" SecRule REQUEST_URI "Mini\ Shell\.\*Developed\ By\ LameHacker" "id:1294,phase:1,deny,status:403,log,msg:'shells attack detected'" SecRule REQUEST_URI "\^n\.\*\?\ \~\ Shell\ Inn