IP Address Inspector

J.Woody commented...

ATTEMPTED ADMIN EXPLOIT HACK(Attempt to access non existing area using known exploit script attack and sql injection)
Combined attacks from TOR networks:

72.52.91.18 - United States - Livermore - Hurricane Electric Inc.
96.44.189.98 - United States - Los Angeles - Axigy - Resolve Host: axigy2.torservers.net - Web Africa Proxy
96.44.189.102 - United States - Los Angeles - Axigy - Resolve Host: herngaard.torservers.net - Web Africa Proxy
208.73.211.247 - United States - Los Angeles - Oversee.net - Resolve Host: tor-exit-router38-readme.formlessnetworking.net
96.44.189.100 - United States - Los Angeles - Axigy - Resolve Host: manning1.torservers.net - Web Africa Proxy
208.73.211.247 - United States - Los Angeles - Oversee.net - Resolve Host: tor-exit-router42-readme.formlessnetworking.net
209.222.8.196 - Sweden - Guilhem.org - Resolve Host: madiba.guilhem.org
204.124.83.134 - United States - Chicago - Conformal Systems Llc. - Resolve Host: tor-exit4.conformal.com
18.187.1.68 - United States - Cambridge - Massachusetts Institute Of Technology - Resolve Host: sipb-tor.mit.edu
128.6.224.107 - United States - Newark - Rutgers University - Resolve Host: tor-node.rutgers.edu

USER AGENT:
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; InfoPath.2; OfficeLiveConnector.1.5; OfficeLivePatch.1.3)"

CONTINUED BELOW...
July 16 2013 02:37 PM

J.Woody commented...

...CONTINUED FROM ABOVE

SMALL SAMPLE (trim xxx for char limit):
72.52.91.18 - - xxx%20or%201%3E1 HTTP/1.1" 403
axigy2.torservers.net - - xxx%20or%201%3Dutl_inaddr.get_host_address%28%28select%20chr%28126%29%7C%7xxx HTTP/1.1" 403
herngaard.torservers.net - - xxx%20or%201%3Dctxsys.drithsx.sn%281%2C%28select%20chr%28126%29%7C%7Cchr%2839%29%7C%7Cglobal_name%7C%7Cxxx HTTP/1.1" 403
tor-exit-router38-readme.formlessnetworking.net - - xxx%20or%201%3Dordsys.ord_dicom.getmappingxpath%28%28select%20chr%28126%29%7C%7Cxxx HTTP/1.1" 403
manning1.torservers.net - - xxx%20union%20all%20select%20null%2Cnull%2Cnull%2Cnull%2Cnullxxx HTTP/1.1" 403
tor-exit-router42-readme.formlessnetworking.net - - xxx999999.9%20or%20gth%28%28select%20name%20from%20v%24databasexxx HTTP/1.1" 403
madiba.guilhem.org - - xxx999999.9%20%2F*%2130000union%20all%20select%200x31303235343830303536%2C0x31303235343830303536%2xxx-- HTTP/1.1" 403
tor-exit4.conformal.com - - xxx%20%2F*%2130000union%20all%20select%20null%2Cnull%2Cnull%2Cnull*%2F-- HTTP/1.1" 403
sipb-tor.mit.edu - - xxx=convert%28int%2Cchr%28114%29%7C%7Cchr%2851%29%7C%7Cchr%28100%29%7C%7Cxxx HTTP/1.1" 403
tor-node.rutgers.edu - - xxx=999999.9 or ascii(substr((select name from v$database where rownum=1),36,1))
July 16 2013 02:37 PM