本報告彙整了 2ns.org 監測節點偵測到的即時攻擊行為。包含 SQL Injection、XSS 跨站腳本 以及非法檔案存取嘗試。提供管理者作為防火牆黑名單設定參考。
最後更新:2026-08-01 00:31:37 📥 下載完整報告
| 時間 | 攻擊名稱 | 來源 IP (下載威脅IP清單) | 動作 |
|---|---|---|---|
| - | Cross.Site.Scripting | 187.124.46.249 | detected |
| - | Web.Server.Password.File.Access | 187.124.46.249 | dropped |
| - | ThinkPHP.Controller.Parameter.Remote.Code.Execution | 70.39.202.96 | dropped |
| - | ThinkPHP.Controller.Parameter.Remote.Code.Execution | 70.39.202.96 | dropped |
| - | ThinkPHP.Controller.Parameter.Remote.Code.Execution | 70.39.202.96 | dropped |
| - | Web.Server.Password.File.Access | 65.109.100.164 | dropped |
| - | Web.Server.Password.File.Access | 65.109.100.164 | dropped |
| - | Web.Server.Password.File.Access | 65.109.100.164 | dropped |
| - | Cross.Site.Scripting | 65.109.100.164 | detected |
| - | Cross.Site.Scripting | 65.109.100.164 | detected |
| - | Cross.Site.Scripting | 65.109.100.164 | detected |
| - | Web.Server.Password.File.Access | 65.109.100.164 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 168.144.35.118 | dropped |
| - | HTPasswd.Access | 172.182.253.37 | dropped |
| - | Telerik.Web.UI.RadAsyncUpload.Handling.Arbitrary.File.Upload | 109.105.210.87 | dropped |
| - | Web.Server.Password.File.Access | 183.81.168.186 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 45.156.128.177 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 45.156.128.176 | dropped |
| - | Telerik.Web.UI.RadAsyncUpload.Handling.Arbitrary.File.Upload | 45.156.128.179 | dropped |
| - | PHP.CGI.Argument.Injection | 176.123.1.163 | dropped |
| - | Spring.Boot.Actuator.Unauthorized.Access | 45.194.92.75 | dropped |
| - | Spring.Boot.Actuator.Unauthorized.Access | 45.194.92.75 | dropped |
| - | HTTP.URI.SQL.Injection | 38.255.57.105 | dropped |
| - | HTTP.URI.SQL.Injection | 38.255.57.105 | dropped |
| - | Spring.Boot.Actuator.Unauthorized.Access | 45.194.92.53 | dropped |
| - | Spring.Boot.Actuator.Unauthorized.Access | 45.194.92.53 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | Web.Server.Password.File.Access | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | TOTOLINK.A720R.Form_Login.Authentication.Bypass | 8.216.88.236 | detected |
| - | ELFinder.Connector.Minimal.php.Arbitrary.File.Upload | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | PrestaShop.productcomments.SQL.Injection | 8.216.88.236 | dropped |
| - | Alibaba.Nacos.AuthFilter.Authentication.Bypass | 8.216.88.236 | dropped |
| - | HPE.Edgeline.Infrastructure.Manager.Authentication.Bypass | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | QNAP.NAS.HBS.3.Authentication.Bypass | 8.216.88.236 | dropped |
| - | Generic.XXE.Detection | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | SaltStack.salt.wheel.pillar_roots.write.Directory.Traversal | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |
| - | HTTP.URI.SQL.Injection | 8.216.88.236 | dropped |