title: "ModSecurity Access Denied" in logs. I don't understand what its telling me.. Should I be concerned?
body: <p>I am seeing the following three things in my logs about access being denied.  Two of them have security as critical.  I don't really understand any of what they mean and after googling around a bit, still am unsure if I should be concerned or do anything.  I am running Django on Apache with mod_wsgi.</p>
  
  <p>Here are the three:</p>
  
  <p>ModSecurity: Access denied with code 400 (phase 2). Pattern match "^\\w+:/" at REQUEST_URI_RAW. [file "/usr/local/apache/conf/modsec-imh/01_base_rules.conf"] [line "23"] [id "960014"] [msg "Proxy access attempt"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/PROXY_ACCESS"] [hostname "www.<strong>MYSITE</strong>.com"] [uri "/"] [unique_id "VaM7bUYn@9YAACtkIA8AAABq"]</p>
  
  <p>ModSecurity: Access denied with code 501 (phase 2). Pattern match "(?:\\b(?:(?:n(?:et(?:\\b\\W+?\\blocalgroup|\\.exe)|(?:map|c)\\.exe)|t(?:racer(?:oute|t)|elnet\\.exe|clsh8?|ftp)|(?:w(?:guest|sh)|rcmd|ftp)\\.exe|echo\\b\\W*?\\by+)\\b|c(?:md(?:(?:32)?\\.exe\\b|\\b\\W*?\\/c)|d(?:\\b\\W*?[\\\\/]|\\W*?\\.\\.)|hmod.{0,40}? ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/conf/modsec-imh/01_base_rules.conf"] [line "100"] [id "959006"] [msg "System Command Injection"] [data "; mail"] [severity "CRITICAL"] [tag "WEB_ATTACK/COMMAND_INJECTION"] [hostname "www.<strong>MYSITE</strong>.com"] [uri "/robots.txt"] [unique_id "VaPVSUYn@9YAACtkNioAAABL"]</p>
  
  <p>ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\%(?![0-9a-fA-F]{2}|u[0-9a-fA-F]{4})" at REQUEST_HEADERS:X-Opt-Forward. [file "/usr/local/apache/conf/modsec-imh/01_base_rules.conf"] [line "17"] [id "950107"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [hostname "www.<strong>MYSITE</strong>.com"] [uri "/static/images/<strong>MYIMAGE</strong>.png"] [unique_id "VYnqMEYn@9YAAGtcKysAAAAT"]</p>
  
  <p>The bold parts are where I edited things concerning my site.
  Any help is appreciated.  Thanks!</p>