|
 | 作者: vikingwo [vikingwo]
 论坛用户 |
登录 |
| 我的服务器被黑客攻击了，黑客已经能创建ad用户。我从IIS的日志里面发现了一段东西。大家来看看。 005-09-19 22:00:24 82.61.35.144 - 210.52.xxx.xx 80 HEAD /defult.html - 200 - 2005-09-19 22:00:25 82.61.35.144 - 210.52.xxx.xx 80 HEAD /wwwroot/superlol.exe /c+dir+c:\ 404 - 2005-09-19 22:00:27 82.61.35.144 - 210.52.xxx.xx 80 HEAD /wwwroot/shell.exe /c+dir+c:\ 404 - 2005-09-19 22:00:31 82.61.35.144 - 210.52.xxx.xx 80 HEAD /wwwroot/root.exe /c+dir+c:\ 404 - 2005-09-19 22:00:32 82.61.35.144 - 210.52.xxx.xx 80 HEAD /wwwroot/cmd2.exe /c+dir+c:\ 404 - 2005-09-19 22:00:36 82.61.35.144 - 210.52.xxx.xx 80 HEAD /wwwroot/cmd1.exe /c+dir+c:\ 404 - 2005-09-19 22:01:29 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/update.exe /c+dir+c:\ 404 - 2005-09-19 22:01:31 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/test.exe /c+dir+c:\ 404 - 2005-09-19 22:01:32 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/sys.exe /c+dir+c:\ 404 - 2005-09-19 22:01:33 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/some.exe /c+dir+c:\ 404 - 2005-09-19 22:01:37 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/sky.exe /c+dir+c:\ 404 - 2005-09-19 22:01:39 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/sklp.exe /c+dir+c:\ 404 - 2005-09-19 22:01:43 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/serverdata.exe /c+dir+c:\ 404 - 2005-09-19 22:01:44 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/sensepost.exe /c+dir+c:\ 404 - 2005-09-19 22:01:54 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/mumu.exe /c+dir+c:\ 404 - 2005-09-19 22:01:56 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/mstart.exe /c+dir+c:\ 404 - 2005-09-19 22:01:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/monkey.exe /c+dir+c:\ 404 - 2005-09-19 22:01:58 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/lord.exe /c+dir+c:\ 404 - 2005-09-19 22:01:59 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/lmao.exe /c+dir+c:\ 404 - 2005-09-19 22:02:01 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/line.exe /c+dir+c:\ 404 - 2005-09-19 22:02:02 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/kickit.exe /c+dir+c:\ 404 - 2005-09-19 22:02:03 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/kasper.exe /c+dir+c:\ 404 - 2005-09-19 22:02:19 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/gogo.exe /c+dir+c:\ 404 - 2005-09-19 22:02:20 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/fun.exe /c+dir+c:\ 404 - 2005-09-19 22:02:21 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/ftp.exe /c+dir+c:\ 404 - 2005-09-19 22:02:22 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/fixtx.exe /c+dir+c:\ 404 - 2005-09-19 22:02:24 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/exchange.exe /c+dir+c:\ 404 - 2005-09-19 22:02:25 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/iis.exe /c+dir+c:\ 404 - 2005-09-19 22:02:28 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/er.exe /c+dir+c:\ 404 - 2005-09-19 22:02:32 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/edb.exe /c+dir+c:\ 404 - 2005-09-19 22:02:42 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/echo.exe /c+dir+c:\ 404 - 2005-09-19 22:03:07 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/dildo.exe /c+dir+c:\ 404 - 2005-09-19 22:03:09 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/darkside.exe /c+dir+c:\ 404 - 2005-09-19 22:03:34 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/boot.exe /c+dir+c:\ 404 - 2005-09-19 22:03:38 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/blackbeard.exe /c+dir+c:\ 404 - 2005-09-19 22:03:50 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/Serverdata.exe /c+dir+c:\ 404 - 2005-09-19 22:03:52 82.61.35.144 - 210.52.xxx.xx 80 HEAD /winnt\system32\cmd.exe+c:\ /c+dir+c:\ 404 - 2005-09-19 22:04:00 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/az.exe /c+dir+c:\ 404 - 2005-09-19 22:05:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /superlol.exe /c+dir+c:\ 404 - 2005-09-19 22:06:51 82.61.35.144 - 210.52.xxx.xx 80 HEAD /shell.exe /c+dir+c:\ 404 - 2005-09-19 22:06:55 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/war.exe /c+dir+c:\ 404 - 2005-09-19 22:06:56 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/update.exe /c+dir+c:\ 404 - 2005-09-19 22:06:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/tpn.exe /c+dir+c:\ 404 - 2005-09-19 22:07:10 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/sys.exe /c+dir+c:\ 404 - 2005-09-19 22:07:11 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/superlol.exe /c+dir+c:\ 404 - 2005-09-19 22:07:24 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/some.exe /c+dir+c:\ 404 - 2005-09-19 22:07:25 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/sky.exe /c+dir+c:\ 404 - 2005-09-19 22:07:26 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/sklp.exe /c+dir+c:\ 404 - 2005-09-19 22:07:28 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/shell.exe /c+dir+c:\ 404 - 2005-09-19 22:07:29 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/serverdata.exe /c+dir+c:\ 404 - 2005-09-19 22:07:43 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/test.exe /c+dir+c:\ 404 - 2005-09-19 22:07:51 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/sensepost.exe /c+dir+c:\ 404 - 2005-09-19 22:08:01 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/rundll.exe /c+dir+c:\ 404 - 2005-09-19 22:08:02 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/root.exe /c+dir+c:\ 404 - 2005-09-19 22:08:06 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/php.exe /c+dir+c:\ 404 - 2005-09-19 22:08:07 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/ncx.exe /c+dir+c:\ 404 - 2005-09-19 22:08:10 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/nc.exe+dir /c+dir+c:\ 403 - 2005-09-19 22:08:11 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/mumu.exe /c+dir+c:\ 404 - 2005-09-19 22:08:15 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/mstart.exe /c+dir+c:\ 404 - 2005-09-19 22:08:16 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/monkey.exe /c+dir+c:\ 404 - 2005-09-19 22:08:18 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/lsass.exe /c+dir+c:\ 404 - 2005-09-19 22:08:22 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/lord.exe /c+dir+c:\ 404 - 2005-09-19 22:08:23 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/lol.exe /c+dir+c:\ 404 - 2005-09-19 22:08:24 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/lmao.exe /c+dir+c:\ 404 - 2005-09-19 22:08:26 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/line.exe /c+dir+c:\ 404 - 2005-09-19 22:08:38 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/kasper.exe /c+dir+c:\ 404 - 2005-09-19 22:08:42 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/javac.exe /c+dir+c:\ 404 - 2005-09-19 22:08:44 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/java.exe /c+dir+c:\ 404 - 2005-09-19 22:08:45 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/img.exe /c+dir+c:\ 404 - 2005-09-19 22:08:46 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/iis.exe /c+dir+c:\ 404 - 2005-09-19 22:08:47 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/httpodbc.dll /c+dir+c:\ 500 - 2005-09-19 22:08:51 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/gogo.exe /c+dir+c:\ 404 - 2005-09-19 22:08:53 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/fun.exe /c+dir+c:\ 404 - 2005-09-19 22:08:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/ftp.exe /c+dir+c:\ 404 - 2005-09-19 22:09:07 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/fixtx.exe /c+dir+c:\ 404 - 2005-09-19 22:09:32 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/er.exe /c+dir+c:\ 404 - 2005-09-19 22:09:35 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/edb.exe /c+dir+c:\ 404 - 2005-09-19 22:09:36 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/echo.exe /c+dir+c:\ 404 - 2005-09-19 22:09:37 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/eXe.exe /c+dir+c:\ 404 - 2005-09-19 22:09:41 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/dildo.exe /c+dir+c:\ 404 - 2005-09-19 22:09:43 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/darkside.exe /c+dir+c:\ 404 - 2005-09-19 22:09:46 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/cmd1.exe /c+dir+c:\ 404 - 2005-09-19 22:09:48 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/cmd.exe /c+dir+c:\ 404 - 2005-09-19 22:10:00 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/kickit.exe /c+dir+c:\ 404 - 2005-09-19 22:10:08 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/bs.exe /c+dir+c:\ 404 - 2005-09-19 22:10:12 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/boot.exe /c+dir+c:\ 404 - 2005-09-19 22:10:16 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/blackbeard.exe /c+dir+c:\ 404 - 2005-09-19 22:10:17 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/az.exe /c+dir+c:\ 404 - 2005-09-19 22:10:18 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/_vti_inf/sad.exe /c+dir+c:\ 404 - 2005-09-19 22:10:20 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/Serverdata.exe /c+dir+c:\ 404 - 2005-09-19 22:13:22 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/..?9....exe /c+dir+c:\ 500 - 2005-09-19 22:16:01 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/..%5....exe /c+dir+c:\ 400 - 2005-09-19 22:16:06 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/..%5....cmd.exe /c+dir+c:\ 500 - 2005-09-19 22:16:35 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/..%5%6..../cmd.exe /c+dir+c:\ 500 - 2005-09-19 22:17:40 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/..%5..../cmd.exe /c+dir+c:\ 500 - 2005-09-19 22:19:25 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/test.exe /c+dir+c:\ 404 - 2005-09-19 22:19:26 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/sys.exe /c+dir+c:\ 404 - 2005-09-19 22:19:30 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/superlol.exe /c+dir+c:\ 404 - 2005-09-19 22:19:34 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/some.exe /c+dir+c:\ 404 - 2005-09-19 22:19:36 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/sky.exe /c+dir+c:\ 404 - 2005-09-19 22:19:37 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/sklp.exe /c+dir+c:\ 404 - 2005-09-19 22:19:38 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/serverdata.exe /c+dir+c:\ 404 - 2005-09-19 22:19:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/update.exe /c+dir+c:\ 404 - 2005-09-19 22:20:00 211.225.210.128 - 210.52.xxx.xx 80 POST /_vti_bin/_vti_aut/fp30reg.dll - 500 - 2005-09-19 22:20:06 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/root.exe /c+dir+c:\ 404 - 2005-09-19 22:20:08 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/mumu.exe /c+dir+c:\ 404 - 2005-09-19 22:20:18 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/mstart.exe /c+dir+c:\ 404 - 2005-09-19 22:20:19 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/monkey.exe /c+dir+c:\ 404 - 2005-09-19 22:20:24 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/lmao.exe /c+dir+c:\ 404 - 2005-09-19 22:20:26 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/line.exe /c+dir+c:\ 404 - 2005-09-19 22:20:30 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/kickit.exe /c+dir+c:\ 404 - 2005-09-19 22:20:34 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/kasper.exe /c+dir+c:\ 404 - 2005-09-19 22:20:44 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/iis.exe /c+dir+c:\ 404 - 2005-09-19 22:20:47 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/gogo.exe /c+dir+c:\ 404 - 2005-09-19 22:20:49 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/fun.exe /c+dir+c:\ 404 - 2005-09-19 22:20:53 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/ftp.exe /c+dir+c:\ 404 - 2005-09-19 22:20:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/fixtx.exe /c+dir+c:\ 404 - 2005-09-19 22:21:08 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/exchange.exe /c+dir+c:\ 404 - 2005-09-19 22:21:09 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/er.exe /c+dir+c:\ 404 - 2005-09-19 22:21:10 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/edb.exe /c+dir+c:\ 404 - 2005-09-19 22:21:20 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/echo.exe /c+dir+c:\ 404 - 2005-09-19 22:21:22 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/eXe.exe /c+dir+c:\ 404 - 2005-09-19 22:21:23 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/dildo.exe /c+dir+c:\ 404 - 2005-09-19 22:21:26 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/cmd1.exe /c+dir+c:\ 404 - 2005-09-19 22:21:58 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/bs.exe /c+dir+c:\ 404 - 2005-09-19 22:22:02 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/boot.exe /c+dir+c:\ 404 - 2005-09-19 22:22:08 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/az.exe /c+dir+c:\ 404 - 2005-09-19 22:22:09 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/Serverdata.exe /c+dir+c:\ 404 - 2005-09-19 22:25:55 82.61.35.144 - 210.52.xxx.xx 80 HEAD /root.exe /c+dir+c:\ 404 - 2005-09-19 22:27:12 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msdac/root.exe /c+dir+c:\ 404 - 2005-09-19 22:27:16 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/war.exe /c+dir+c:\ 403 - 2005-09-19 22:27:17 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/update.exe /c+dir+c:\ 403 - 2005-09-19 22:27:18 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/test.exe /c+dir+c:\ 403 - 2005-09-19 22:27:20 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/sys.exe /c+dir+c:\ 403 - 2005-09-19 22:27:21 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/superlol.exe /c+dir+c:\ 403 - 2005-09-19 22:27:22 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/spooler.exe /c+dir+c:\ 403 - 2005-09-19 22:27:23 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/spool.exe /c+dir+c:\ 403 - 2005-09-19 22:27:25 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/some.exe /c+dir+c:\ 403 - 2005-09-19 22:27:29 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/sky.exe /c+dir+c:\ 403 - 2005-09-19 22:27:42 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/sklp.exe /c+dir+c:\ 403 - 2005-09-19 22:27:55 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/shell.exe /c+dir+c:\ 403 - 2005-09-19 22:27:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/serverdata.exe /c+dir+c:\ 403 - 2005-09-19 22:27:59 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/sensepost.exe /c+dir+c:\ 403 - 2005-09-19 22:28:00 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/root.exe /c+dir+c:\ 403 - 2005-09-19 22:28:01 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/mumu.exe /c+dir+c:\ 403 - 2005-09-19 22:28:05 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/mstart.exe /c+dir+c:\ 403 - 2005-09-19 22:28:20 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/lsass.exe /c+dir+c:\ 403 - 2005-09-19 22:28:21 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/lord.exe /c+dir+c:\ 403 - 2005-09-19 22:28:23 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/lmao.exe /c+dir+c:\ 403 ＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝ 可是奇怪的是我的目录下面并没有那些文件，会不会是他用好了删除了？ 另外Ip是意大利的，应该是用了代理做了跳板。因为他入侵以后起的用户名是中文拼音的！！ 哪位大侠能从中参透些什么吗？？？？？？？？？？？ |
| 地主 发表时间: 05-09-20 13:51 |
 | 回复: lqfrla [lqfrla]  论坛用户 |
登录 |
看不懂 |
| B1层 发表时间: 05-09-20 14:34 |
 | 回复: stcallme [stcallme]  论坛用户 |
登录 |
|
这真的是有人入侵过 |
| B2层 发表时间: 05-09-20 19:14 |
| 回复: zhengzheng [zhengzheng] 论坛用户 |
登录 |
|
不懂哟!! |
| B3层 发表时间: 05-09-21 15:23 |
| 回复: stcallme [stcallme] 论坛用户 |
登录 |
|
404说明他是没有找到那个文件，403说明不许访问，500程序没有执行权限。应该说他入侵过但没有入侵成功！这个210.52.xxx.xx 80 HEAD /defult.html - 200 -是说明他通过80port测试到了你的默认网页/defult.html 的存在。分以上你提供的来看，应该说他有入侵行为，用了很多方法但没有成功的结果，只是骚扰了你一下。不必担心。（个人观点，各位再给分析一下） 至于你说的“黑客已经能创建ad用户”，可能是他通过其它入口进入的吧。 [此贴被 雏鹰(stcallme) 在 09月22日12时22分 编辑过] |
| B4层 发表时间: 05-09-22 12:19 |
| 回复: stcallme [stcallme] 论坛用户 |
登录 |
|
再来看看 |
| B5层 发表时间: 05-09-28 18:29 |
|
20CN网络安全小组版权所有
Copyright © 2000-2010 20CN Security Group. All Rights Reserved.
论坛程序编写：NetDemon
粤ICP备05087286号
论坛: 菜鸟乐园 标题: 求助－－高手来帮帮忙！