本報告彙整了 2ns.org 監測節點偵測到的即時攻擊行為。包含 SQL Injection、XSS 跨站腳本 以及非法檔案存取嘗試。提供管理者作為防火牆黑名單設定參考。
最後更新：2026-10-19 11:24:53 📥 下載完整報告
| 時間 | 攻擊名稱 | 來源 IP (下載威脅IP清單) | 動作 |
|---|---|---|---|
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 198.46.253.62 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 35.189.159.42 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 35.189.159.42 | dropped |
| - | Spring.Boot.Actuator.Unauthorized.Access | 185.177.72.9 | dropped |
| - | Spring.Boot.Actuator.Unauthorized.Access | 185.177.72.9 | dropped |
| - | Apache.Solr.SolrResourceLoader.Path.Traversal | 185.177.72.9 | dropped |
| - | Spring.Boot.Actuator.Unauthorized.Access | 185.177.72.9 | dropped |
| - | Spring.Boot.Actuator.Unauthorized.Access | 185.177.72.9 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 34.179.222.58 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 34.179.222.58 | dropped |
| - | AndroxGh0st.Malware | 4.182.216.179 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 185.226.196.24 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 185.226.196.23 | dropped |
| - | Telerik.Web.UI.RadAsyncUpload.Handling.Arbitrary.File.Upload | 185.226.196.24 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 35.221.126.243 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 35.221.126.243 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 213.142.153.152 | dropped |
| - | Multiple.Routers.GPON.formLogin.Remote.Command.Injection | 39.34.166.106 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 124.158.13.141 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 152.32.225.117 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 45.140.193.140 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 120.211.74.131 | dropped |
| - | Joomla!.Helix3.onAjaxHelix3.Path.Traversal | 160.187.211.233 | dropped |
| - | Joomla!.Helix3.onAjaxHelix3.Path.Traversal | 160.187.211.233 | dropped |
| - | Joomla!.Helix3.onAjaxHelix3.Path.Traversal | 160.187.211.233 | dropped |
| - | Multiple.Routers.GPON.formLogin.Remote.Command.Injection | 102.212.40.237 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 34.179.210.121 | dropped |
| - | Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass | 34.179.210.121 | dropped |
| - | AndroxGh0st.Malware | 91.92.41.171 | dropped |
| - | Apache.HTTP.Server.cgi-bin.Path.Traversal | 2.27.170.94 | dropped |
| - | Apache.Struts.2.REST.Plugin.Remote.Code.Execution | 103.170.217.198 | dropped |
| - | HTTP.URI.SQL.Injection | 155.117.189.80 | dropped |
| - | HTTP.URI.SQL.Injection | 155.117.189.80 | dropped |
| - | HTTP.URI.SQL.Injection | 155.117.189.80 | dropped |
| - | HTTP.URI.SQL.Injection | 155.117.189.80 | dropped |
| - | HTTP.URI.SQL.Injection | 155.117.189.80 | dropped |
| - | HTTP.URI.SQL.Injection | 104.246.100.159 | dropped |
| - | HTTP.URI.SQL.Injection | 104.246.100.159 | dropped |
| - | HTTP.URI.SQL.Injection | 104.246.100.159 | dropped |
| - | HTTP.URI.SQL.Injection | 104.246.100.159 | dropped |
| - | HTTP.URI.SQL.Injection | 104.246.100.159 | dropped |
| - | HTTP.URI.SQL.Injection | 174.224.153.140 | dropped |
| - | ThinkPHP.Controller.Parameter.Remote.Code.Execution | 154.36.174.23 | dropped |
| - | ThinkPHP.Controller.Parameter.Remote.Code.Execution | 154.36.174.23 | dropped |
| - | ThinkPHP.Controller.Parameter.Remote.Code.Execution | 154.36.174.23 | dropped |
| - | ThinkPHP.Controller.Parameter.Remote.Code.Execution | 154.36.174.23 | dropped |
| - | ThinkPHP.Controller.Parameter.Remote.Code.Execution | 154.36.174.23 | dropped |
| - | HTTP.URI.SQL.Injection | 191.96.150.78 | dropped |
| - | HTTP.URI.SQL.Injection | 191.96.150.78 | dropped |
| - | HTTP.URI.SQL.Injection | 143.244.44.178 | dropped |