Chinaunix

标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！ [打印本页]

作者: mars14 时间: 2004-06-23 16:04
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
Fields: date time c-ip cs-username s-ip s-port cs-method cs-uri-stem cs-uri-query sc-status cs(User-Agent)
2004-06-12 10:41:50 202.206.154.135 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 10:41:50 202.206.154.135 - 202.206.152.10 80 PROPFIND /C$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:33 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:33 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:33 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:33 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:33 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:33 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:33 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:41 202.206.155.165 - 202.206.152.10 80 PROPFIND /f$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:41 202.206.155.165 - 202.206.152.10 80 PROPFIND /f$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:41 202.206.155.165 - 202.206.152.10 80 PROPFIND /f$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:41 202.206.155.165 - 202.206.152.10 80 PROPFIND /f$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:41 202.206.155.165 - 202.206.152.10 80 PROPFIND /f$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-12 13:56:41 202.206.155.165 - 202.206.152.10 80 PROPFIND /f$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600

004-06-18 09:26:20 202.206.155.165 - 202.206.152.10 80 GET /NULL.IDA CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC%u0aeb%ub890%udacf%u77ee%u0000%u0000%u838b%u0094%u0000%u408b%u0564%u0150%u0000%ue0ff%u9090=x&悙悙悙悙悙悙悙悙悙悙悙悙悙悙悙悙?悙恄?悙愯?

作者: mars14 时间: 2004-06-23 16:07
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
我就刚刚知道200是攻击成果的表示！！但是我不知道这是个什么攻击，我该如何配置我的主机和IIS！

作者: blues1205 时间: 2004-06-23 16:20
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
HTTP_IIS_webdav??

缓冲区溢出漏洞。

打补丁。

作者: mars14 时间: 2004-06-23 16:28
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 PROPFIND /c$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 PROPFIND /c$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 PROPFIND /c$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 PROPFIND /c$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 PROPFIND /c$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 PROPFIND /c$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 PROPFIND /c$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 PROPFIND /c$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 PROPFIND /c$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 PROPFIND /c$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 PROPFIND /c$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 PROPFIND /c$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:05 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:07 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:07 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:07 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:07 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:07 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:07 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:07 202.206.155.165 - 202.206.152.10 80 PROPFIND / - 207 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:12 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:12 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:12 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:12 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:12 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:14 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:14 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:14 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:14 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:14 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:25 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:25 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:25 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:25 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:25 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:25 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:25 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:25 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:25 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:25 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:27 202.206.155.165 - 202.206.152.10 80 PROPFIND /d$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:27 202.206.155.165 - 202.206.152.10 80 PROPFIND /d$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:27 202.206.155.165 - 202.206.152.10 80 PROPFIND /d$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:27 202.206.155.165 - 202.206.152.10 80 PROPFIND /d$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:27 202.206.155.165 - 202.206.152.10 80 PROPFIND /d$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:40 202.206.155.165 - 202.206.152.10 80 PROPFIND /d$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:40 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:40 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:40 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:40 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:40 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:44 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:44 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:44 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:44 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:44 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:44 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:44 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:44 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:44 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:44 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:45 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:45 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:45 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:45 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:45 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:50 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:50 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:50 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:50 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:50 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 02:29:50 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 06:50:25 202.206.157.9 - 202.206.152.10 80 PROPFIND /admin$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 11:51:47 202.206.154.61 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 11:51:47 202.206.154.61 - 202.206.152.10 80 PROPFIND /D$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 11:51:47 202.206.154.61 - 202.206.152.10 80 PROPFIND /d$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 11:51:47 202.206.154.61 - 202.206.152.10 80 PROPFIND /d$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 11:51:58 202.206.154.61 - 202.206.152.10 80 PROPFIND /d$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 11:52:22 202.206.154.61 - 202.206.152.10 80 PROPFIND /d$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 11:52:25 202.206.154.61 - 202.206.152.10 80 PROPFIND /d$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:48:38 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:48:38 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:48:38 202.206.155.165 - 202.206.152.10 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:48:38 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:48:38 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:48:38 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:48:38 202.206.155.165 - 202.206.152.10 80 PROPFIND /e$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:09 202.206.155.165 - 202.206.152.10 80 PROPFIND /f$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:09 202.206.155.165 - 202.206.152.10 80 PROPFIND /f$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:09 202.206.155.165 - 202.206.152.10 80 PROPFIND /f$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:09 202.206.155.165 - 202.206.152.10 80 PROPFIND /f$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:09 202.206.155.165 - 202.206.152.10 80 PROPFIND /f$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:09 202.206.155.165 - 202.206.152.10 80 PROPFIND /f$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:13 202.206.155.165 - 202.206.152.10 80 PROPFIND /g$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:13 202.206.155.165 - 202.206.152.10 80 PROPFIND /g$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:13 202.206.155.165 - 202.206.152.10 80 PROPFIND /g$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:13 202.206.155.165 - 202.206.152.10 80 PROPFIND /g$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:13 202.206.155.165 - 202.206.152.10 80 PROPFIND /g$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:13 202.206.155.165 - 202.206.152.10 80 PROPFIND /g$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:20 202.206.155.165 - 202.206.152.10 80 PROPFIND /h$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:20 202.206.155.165 - 202.206.152.10 80 PROPFIND /h$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:20 202.206.155.165 - 202.206.152.10 80 PROPFIND /h$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:20 202.206.155.165 - 202.206.152.10 80 PROPFIND /h$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:20 202.206.155.165 - 202.206.152.10 80 PROPFIND /h$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2600
2004-06-17 14:49:20 202.206.155.165 - 202.206.152.10 80 PROPFIND /h$ - 404 Microsoft-WebDAV-MiniRedir/5.1.2

作者: mars14 时间: 2004-06-23 16:30
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
以上是新添加的一天的日志！ WEBDAV益处漏洞在安装的时候就已经补好了！请高手帮忙分析一下！！谢谢！

作者: blues1205 时间: 2004-06-23 16:52
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
连接很频繁，这些日志看不出什么来，用SINFFER抓包下来看看。看看有没有非法连接，如果都是不正常连接，把这个地址封掉。

作者: mars14 时间: 2004-06-23 17:05
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
都是典型的攻击行为，但是我不知道是用什么方式攻击的。我想知道这些日志能不能看出是如何攻击的！这个老兄你QQ是多少！我想直接请教比较好！！交个朋友，我469844

作者: ayazero 时间: 2004-06-23 19:04
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
他只是用了一些缓冲区溢出的攻击程序，webdav,ida/idq，打过补丁就没事

作者: mars14 时间: 2004-06-23 19:15
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
楼上的老兄你的站点怎么上不去

作者: mars14 时间: 2004-06-23 19:22
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
SORRY，上去了，我自己网络的问题！
老兄能给个联系方式吗？想向您讨教一下！

作者: hcjia 时间: 2004-06-25 09:09
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
微软的滥系统！打补丁吧！

作者: mesopotamia 时间: 2004-06-27 03:35
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
在日志中有webdav的记录,你给服务器打上WIN2KSP4就OK

作者: hardiwang 时间: 2004-06-29 15:51
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
只是简单的扫描活动，不要紧张……

作者: mars14 时间: 2004-06-30 17:10
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
兄弟我对日志解读不了解，哪位给推荐一本书看看

作者: t920 时间: 2004-06-30 17:21
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
有一本叫什么黑客大挑战的一本书，好像有了第二版，里面有不少对日志的分析。

作者: skylove 时间: 2004-07-01 08:03
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
不要的文件映射记得关掉

作者: mars14 时间: 2004-07-01 11:21
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
哪位可以提供一个WINDOWS2000和IIS的安全配置的文档？

作者: Hawkfly 时间: 2004-07-06 17:07
标题: 高手请帮忙看一下这些日志，我不知道是用什么方式攻击成功的！
《聚焦黑客--供给手段与防护策略》这本书上有一个win2k及IIS安全配置的清单，我桌上有一本，可惜现在没时间给你打字，你可以到绿盟和作者colababy联系，看他在哪里发过帖子

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)