www.chilefiesta.cl      190.164.141.213 390703  [05/Mar/2014:22:04:11 --0300]

Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/httpd/modsec/00_asl_zz_strict.conf"] [line "64"] [id "390703"] [rev "5"] [msg "Atomicorp.com WAF Rules: Possible URL Encoding Abuse Attack Attempt"] [severity "NOTICE"]

 

 [05/Mar/2014:22:04:11 --0300] UxfJi77ERdwAA-QmuGoAAABM 190.164.141.213 52168 190.196.69.220 80

 --2d53bf71-B--

 GET /arriendo/templates/prismatic-for-joomla-3.x/css/colors.css.php?base_color=489cf7&accent_color=d3eb21&text_color=000000&menu_text_color=ffffff&button_text_color=ffffff&base_transparency=0.7&templateurl=%arriendo%templates%prismatic-for-joomla-3.x HTTP/1.1

Host: www.chilefiesta.cl

Connection: keep-alive

Accept: text/css,*/*;q=0.1

User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36

Referer: http://www.chilefiesta.cl/arriendo/

Accept-Encoding: gzip,deflate,sdch

Accept-Language: es-419,es;q=0.8

Cookie: a73424b5a5db1df71409a705aa685ea3=0b489caf1e91b1242327a8a23985959c; PHPSESSID=4098834cd679a1daa13b7dbcbc35141e; 963e199dd3766bd05cb225771cf588d1=613c1756d896e09b7c82b0d98d1f28df; cpsession=chilefie%3agBvnrtuNz_nbOfIcX3lcDNZXYHY_HdpNkuLqSJyErJj8z_FfRcSIuYsRlF6Dccue%2ce7a8d41c657f620692c3eb2f2849966b8b2721c7a5af915d1426edecf0f0ed8b; cprelogin=no; webmailsession=florida%40chilefiesta.cl%3a6yZPuJ0KCJreUlG369NAnftv5m4Fn607630I7UPxWX0QISRTGmaQglqgIzXPHdsf%2c4c2e4f94b748425b78ef245750bc2fe60cc2b7105e2cb47c049a58583ffda36c; langedit=; lang=; webmailrelogin=no; roundcube_sessid=c313ecc06098198ae5794ef0200cb113; roundcube_sessauth=Sa55f492c4da7e998673cae1970d24e062f599400; mailviewsplitterv=226

 

 --2d53bf71-F--

 HTTP/1.1 400 Bad Request

Content-Length: 345

Connection: close

Content-Type: text/html; charset=iso-8859-1

 

 --2d53bf71-H--

Message: Access denied with code 400 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/httpd/modsec/00_asl_zz_strict.conf"] [line "64"] [id "390703"] [rev "5"] [msg "Atomicorp.com WAF Rules: Possible URL Encoding Abuse Attack Attempt"] [severity "NOTICE"]

Apache-Error: [file "core.c"] [line 3706] [level 3] File does not exist: /home/chilefie/public_html/400.shtml, referer: http://www.chilefiesta.cl/arriendo/

Action: Intercepted (phase 2)

Stopwatch: 1394067851647307 10073 (- - -)

Stopwatch2: 1394067851647307 10073; combined=60, p1=18, p2=29, p3=0, p4=0, p5=12, sr=0, sw=1, l=0, gc=0

Producer: ModSecurity for Apache/2.7.7 (http://www.modsecurity.org/).

Server: Apache

Engine-Mode: "ENABLED"