本報告彙整了 2ns.org 監測節點偵測到的即時攻擊行為。包含 SQL Injection、XSS 跨站腳本 以及非法檔案存取嘗試。提供管理者作為防火牆黑名單設定參考。
最後更新：2026-09-19 03:22:15 📥 下載完整報告
| 時間 | 攻擊名稱 | 來源 IP (下載威脅IP清單) | 動作 |
|---|---|---|---|
| - | Bladabindi.Botnet | 66.240.205.34 | dropped |
| - | zlib.Library.inflateGetHeader.Handling.Buffer.Overflow | 54.159.98.248 | dropped |
| - | PHP.CGI.Argument.Injection | 45.156.87.125 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 45.156.129.112 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 45.156.129.112 | dropped |
| - | Telerik.Web.UI.RadAsyncUpload.Handling.Arbitrary.File.Upload | 45.156.129.112 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 45.156.128.175 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 45.156.128.174 | dropped |
| - | Telerik.Web.UI.RadAsyncUpload.Handling.Arbitrary.File.Upload | 45.156.128.175 | dropped |
| - | Backdoor.Chisel | 195.170.172.118 | dropped |
| - | Spring.Boot.Actuator.Unauthorized.Access | 38.43.93.233 | dropped |
| - | Bladabindi.Botnet | 146.190.134.221 | dropped |
| - | PHPUnit.Eval-stdin.PHP.Remote.Code.Execution | 212.200.238.150 | dropped |
| - | PHPUnit.Eval-stdin.PHP.Remote.Code.Execution | 212.200.238.150 | dropped |
| - | PHPUnit.Eval-stdin.PHP.Remote.Code.Execution | 212.200.238.150 | dropped |
| - | PHPUnit.Eval-stdin.PHP.Remote.Code.Execution | 212.200.238.150 | dropped |
| - | PHPUnit.Eval-stdin.PHP.Remote.Code.Execution | 212.200.238.150 | dropped |
| - | zlib.Library.inflateGetHeader.Handling.Buffer.Overflow | 18.215.112.101 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 134.195.89.159 | dropped |
| - | AndroxGh0st.Malware | 216.144.225.2 | dropped |
| - | D-Link.Devices.HNAP.SOAPAction-Header.Command.Execution | 175.107.12.59 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 165.99.207.153 | dropped |
| - | HTTP.URI.SQL.Injection | 45.43.65.144 | dropped |
| - | HTTP.URI.SQL.Injection | 188.215.5.214 | dropped |
| - | HTTP.URI.SQL.Injection | 45.43.64.151 | dropped |
| - | HTTP.URI.SQL.Injection | 104.143.245.115 | dropped |
| - | WordPress.REST.API.batch-route.SQL.Injection | 62.60.130.230 | dropped |
| - | WordPress.REST.API.batch-route.SQL.Injection | 62.60.130.230 | dropped |
| - | HTTP.URI.SQL.Injection | 92.112.171.198 | dropped |
| - | React.Server.Components.react-flight.Remote.Code.Execution | 82.29.165.252 | dropped |
| - | PHP.CGI.Argument.Injection | 45.156.87.125 | dropped |
| - | React.Server.Components.react-flight.Remote.Code.Execution | 187.127.116.81 | dropped |
| - | HTTP.Negative.Content.Length | 172.233.189.197 | dropped |
| - | HTTP.Negative.Content.Length | 172.233.189.197 | dropped |
| - | HTTP.Negative.Content.Length | 172.233.189.197 | dropped |
| - | HTTP.Negative.Content.Length | 172.233.189.197 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 34.27.109.32 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 35.237.25.109 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 34.26.87.206 | dropped |
| - | HTTP.URI.SQL.Injection | 179.97.71.131 | dropped |
| - | HTTP.URI.SQL.Injection | 179.97.71.131 | dropped |
| - | HTTP.URI.SQL.Injection | 179.97.71.131 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 34.62.226.41 | dropped |
| - | React.Server.Components.react-flight.Remote.Code.Execution | 52.185.93.127 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 104.199.183.223 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 35.194.244.188 | dropped |
| - | NETGEAR.DGN1000.CGI.Unauthenticated.Remote.Code.Execution | 175.107.216.91 | dropped |
| - | Cross.Site.Scripting | 59.120.73.33 | detected |
| - | Cross.Site.Scripting | 5.175.189.35 | detected |
| - | Generic.Path.Traversal.Detection | 5.175.189.35 | dropped |