웹해킹관련... 문의드립니다.

아파치로그
88.241.172.10 - - [07/Apr/2009:03:34:32 +0900] "PUT /xiforinfola.htm HTTP/1.0" 406 341

modsec_audit.log

==618f3107==============================
Request: www.xxxxxx.com 88.241.172.10 - - [07/Apr/2009:03:34:32 +0900] "PUT /xiforinfola.htm HTTP/1.0" 406 341 "-" "Microsoft Data Access Internet Publishing Provider DAV 1.1" - "-"
----------------------------------------
PUT /xiforinfola.htm HTTP/1.0
Accept-Language: pt-br, en-us;q=0.5
Connection: Keep -Alive
Content-Length: 971
Date: Thu, 15 Aug 2002 04:26:22 GMT
Host: www.xxxxx.com
Translate: f
User-Agent: Microsoft Data Access Internet Publishing Provider DAV 1.1
mod_security-message: Access denied with code 406. Pattern match "<.+>" at POST_PAYLOAD [msg "XSS attack"] [severity "EMERGENCY"]
mod_security-action: 406

57
[@file:20090407-033432-88.241.172.10-request_body-bTchLD]

HTTP/1.1 406 Not Acceptable
Connection: close
Content-Type: text/html; charset=iso-8859-1
--618f3107--

/tmp
-rw-------    1 nobody   nobody        971  4월  7 03:34 20090407-033432-88.241.172.10-request_body-bTchLD

위와 같은데요.......
apache_ModSecurity설치되어있구요..
차단된것같은데 웨 파일(20090407-033432-88.241.172.10-request_body-bTchLD)이 /tmp에 생성 되어있을까요...?   
답변 부탁드립니다.