免费注册 查看新帖 |

Chinaunix

  平台 论坛 博客 文库
› 论坛 › IT运维 › 数据安全 › 【崩溃】寻找一个系统监视软件
123下一页
最近访问板块 发新帖
楼主: vikingwo
打印 上一主题 下一主题

【崩溃】寻找一个系统监视软件 [复制链接]

frosty

论坛徽章:
0
11楼 [报告]
发表于 2005-09-19 10:19 |只看该作者

【崩溃】寻找一个系统监视软件

楼主
看来入侵者的技术也不过如此
他为什么不隐藏管理员账号呢?
实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？
ayazero

论坛徽章:
0
12楼 [报告]
发表于 2005-09-19 11:02 |只看该作者

【崩溃】寻找一个系统监视软件

其实装个后门根本不用账号
实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？
carrison

论坛徽章:
0
13楼 [报告]
发表于 2005-09-19 13:17 |只看该作者

【崩溃】寻找一个系统监视软件

建议买个IPS，呵呵
实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？
mmhh516

论坛徽章:
0
14楼 [报告]
发表于 2005-09-19 13:34 |只看该作者

【崩溃】寻找一个系统监视软件

具体的情况不清楚，如果是web网站的话，可能是注入。看看你的系统日志
实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？
mator

论坛徽章:
0
15楼 [报告]
发表于 2005-09-19 13:39 |只看该作者

【崩溃】寻找一个系统监视软件

密罐才是王道
实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？
vikingwo

论坛徽章:
0
16楼 [报告]
发表于 2005-09-20 09:25 |只看该作者

【崩溃】寻找一个系统监视软件

哪位高手如果有信心，能否帮我看一下。用pcanywhere 或者 VNC 登陆帮我查一查。
我的msn:  kelundun@citiz.net 谢谢了
实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？
vikingwo

论坛徽章:
0
17楼 [报告]
发表于 2005-09-20 13:34 |只看该作者

【崩溃】寻找一个系统监视软件

我可能找出问题所在了！！！我从IIS的日志里面发现了一段东西。大家来看看。

005-09-19 22:00:24 82.61.35.144 - 210.52.xxx.xx 80 HEAD /defult.html - 200 -
2005-09-19 22:00:25 82.61.35.144 - 210.52.xxx.xx 80 HEAD /wwwroot/superlol.exe /c+dir+c:\ 404 -
2005-09-19 22:00:27 82.61.35.144 - 210.52.xxx.xx 80 HEAD /wwwroot/shell.exe /c+dir+c:\ 404 -
2005-09-19 22:00:31 82.61.35.144 - 210.52.xxx.xx 80 HEAD /wwwroot/root.exe /c+dir+c:\ 404 -
2005-09-19 22:00:32 82.61.35.144 - 210.52.xxx.xx 80 HEAD /wwwroot/cmd2.exe /c+dir+c:\ 404 -
2005-09-19 22:00:36 82.61.35.144 - 210.52.xxx.xx 80 HEAD /wwwroot/cmd1.exe /c+dir+c:\ 404 -
2005-09-19 22:01:29 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/update.exe /c+dir+c:\ 404 -
2005-09-19 22:01:31 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/test.exe /c+dir+c:\ 404 -
2005-09-19 22:01:32 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/sys.exe /c+dir+c:\ 404 -
2005-09-19 22:01:33 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/some.exe /c+dir+c:\ 404 -
2005-09-19 22:01:37 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/sky.exe /c+dir+c:\ 404 -
2005-09-19 22:01:39 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/sklp.exe /c+dir+c:\ 404 -
2005-09-19 22:01:43 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/serverdata.exe /c+dir+c:\ 404 -
2005-09-19 22:01:44 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/sensepost.exe /c+dir+c:\ 404 -
2005-09-19 22:01:54 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/mumu.exe /c+dir+c:\ 404 -
2005-09-19 22:01:56 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/mstart.exe /c+dir+c:\ 404 -
2005-09-19 22:01:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/monkey.exe /c+dir+c:\ 404 -
2005-09-19 22:01:58 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/lord.exe /c+dir+c:\ 404 -
2005-09-19 22:01:59 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/lmao.exe /c+dir+c:\ 404 -
2005-09-19 22:02:01 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/line.exe /c+dir+c:\ 404 -
2005-09-19 22:02:02 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/kickit.exe /c+dir+c:\ 404 -
2005-09-19 22:02:03 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/kasper.exe /c+dir+c:\ 404 -
2005-09-19 22:02:19 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/gogo.exe /c+dir+c:\ 404 -
2005-09-19 22:02:20 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/fun.exe /c+dir+c:\ 404 -
2005-09-19 22:02:21 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/ftp.exe /c+dir+c:\ 404 -
2005-09-19 22:02:22 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/fixtx.exe /c+dir+c:\ 404 -
2005-09-19 22:02:24 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/exchange.exe /c+dir+c:\ 404 -
2005-09-19 22:02:25 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/iis.exe /c+dir+c:\ 404 -
2005-09-19 22:02:28 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/er.exe /c+dir+c:\ 404 -
2005-09-19 22:02:32 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/edb.exe /c+dir+c:\ 404 -
2005-09-19 22:02:42 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/echo.exe /c+dir+c:\ 404 -
2005-09-19 22:03:07 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/dildo.exe /c+dir+c:\ 404 -
2005-09-19 22:03:09 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/darkside.exe /c+dir+c:\ 404 -
2005-09-19 22:03:34 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/boot.exe /c+dir+c:\ 404 -
2005-09-19 22:03:38 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/blackbeard.exe /c+dir+c:\ 404 -
2005-09-19 22:03:50 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/Serverdata.exe /c+dir+c:\ 404 -
2005-09-19 22:03:52 82.61.35.144 - 210.52.xxx.xx 80 HEAD /winnt\system32\cmd.exe+c:\ /c+dir+c:\ 404 -
2005-09-19 22:04:00 82.61.35.144 - 210.52.xxx.xx 80 HEAD /www/az.exe /c+dir+c:\ 404 -
2005-09-19 22:05:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /superlol.exe /c+dir+c:\ 404 -
2005-09-19 22:06:51 82.61.35.144 - 210.52.xxx.xx 80 HEAD /shell.exe /c+dir+c:\ 404 -
2005-09-19 22:06:55 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/war.exe /c+dir+c:\ 404 -
2005-09-19 22:06:56 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/update.exe /c+dir+c:\ 404 -
2005-09-19 22:06:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/tpn.exe /c+dir+c:\ 404 -
2005-09-19 22:07:10 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/sys.exe /c+dir+c:\ 404 -
2005-09-19 22:07:11 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/superlol.exe /c+dir+c:\ 404 -
2005-09-19 22:07:24 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/some.exe /c+dir+c:\ 404 -
2005-09-19 22:07:25 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/sky.exe /c+dir+c:\ 404 -
2005-09-19 22:07:26 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/sklp.exe /c+dir+c:\ 404 -
2005-09-19 22:07:28 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/shell.exe /c+dir+c:\ 404 -
2005-09-19 22:07:29 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/serverdata.exe /c+dir+c:\ 404 -
2005-09-19 22:07:43 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/test.exe /c+dir+c:\ 404 -
2005-09-19 22:07:51 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/sensepost.exe /c+dir+c:\ 404 -
2005-09-19 22:08:01 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/rundll.exe /c+dir+c:\ 404 -
2005-09-19 22:08:02 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/root.exe /c+dir+c:\ 404 -
2005-09-19 22:08:06 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/php.exe /c+dir+c:\ 404 -
2005-09-19 22:08:07 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/ncx.exe /c+dir+c:\ 404 -
2005-09-19 22:08:10 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/nc.exe+dir /c+dir+c:\ 403 -
2005-09-19 22:08:11 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/mumu.exe /c+dir+c:\ 404 -
2005-09-19 22:08:15 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/mstart.exe /c+dir+c:\ 404 -
2005-09-19 22:08:16 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/monkey.exe /c+dir+c:\ 404 -
2005-09-19 22:08:18 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/lsass.exe /c+dir+c:\ 404 -
2005-09-19 22:08:22 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/lord.exe /c+dir+c:\ 404 -
2005-09-19 22:08:23 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/lol.exe /c+dir+c:\ 404 -
2005-09-19 22:08:24 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/lmao.exe /c+dir+c:\ 404 -
2005-09-19 22:08:26 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/line.exe /c+dir+c:\ 404 -
2005-09-19 22:08:38 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/kasper.exe /c+dir+c:\ 404 -
2005-09-19 22:08:42 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/javac.exe /c+dir+c:\ 404 -
2005-09-19 22:08:44 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/java.exe /c+dir+c:\ 404 -
2005-09-19 22:08:45 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/img.exe /c+dir+c:\ 404 -
2005-09-19 22:08:46 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/iis.exe /c+dir+c:\ 404 -
2005-09-19 22:08:47 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/httpodbc.dll /c+dir+c:\ 500 -
2005-09-19 22:08:51 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/gogo.exe /c+dir+c:\ 404 -
2005-09-19 22:08:53 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/fun.exe /c+dir+c:\ 404 -
2005-09-19 22:08:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/ftp.exe /c+dir+c:\ 404 -
2005-09-19 22:09:07 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/fixtx.exe /c+dir+c:\ 404 -
2005-09-19 22:09:32 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/er.exe /c+dir+c:\ 404 -
2005-09-19 22:09:35 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/edb.exe /c+dir+c:\ 404 -
2005-09-19 22:09:36 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/echo.exe /c+dir+c:\ 404 -
2005-09-19 22:09:37 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/eXe.exe /c+dir+c:\ 404 -
2005-09-19 22:09:41 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/dildo.exe /c+dir+c:\ 404 -
2005-09-19 22:09:43 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/darkside.exe /c+dir+c:\ 404 -
2005-09-19 22:09:46 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/cmd1.exe /c+dir+c:\ 404 -
2005-09-19 22:09:48 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/cmd.exe /c+dir+c:\ 404 -
2005-09-19 22:10:00 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/kickit.exe /c+dir+c:\ 404 -
2005-09-19 22:10:08 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/bs.exe /c+dir+c:\ 404 -
2005-09-19 22:10:12 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/boot.exe /c+dir+c:\ 404 -
2005-09-19 22:10:16 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/blackbeard.exe /c+dir+c:\ 404 -
2005-09-19 22:10:17 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/az.exe /c+dir+c:\ 404 -
2005-09-19 22:10:18 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/_vti_inf/sad.exe /c+dir+c:\ 404 -
2005-09-19 22:10:20 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/Serverdata.exe /c+dir+c:\ 404 -
2005-09-19 22:13:22 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/..?9....exe /c+dir+c:\ 500 -
2005-09-19 22:16:01 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/..%5....exe /c+dir+c:\ 400 -
2005-09-19 22:16:06 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/..%5....cmd.exe /c+dir+c:\ 500 -
2005-09-19 22:16:35 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/..%5%6..../cmd.exe /c+dir+c:\ 500 -
2005-09-19 22:17:40 82.61.35.144 - 210.52.xxx.xx 80 HEAD /scripts/..%5..../cmd.exe /c+dir+c:\ 500 -
2005-09-19 22:19:25 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/test.exe /c+dir+c:\ 404 -
2005-09-19 22:19:26 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/sys.exe /c+dir+c:\ 404 -
2005-09-19 22:19:30 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/superlol.exe /c+dir+c:\ 404 -
2005-09-19 22:19:34 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/some.exe /c+dir+c:\ 404 -
2005-09-19 22:19:36 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/sky.exe /c+dir+c:\ 404 -
2005-09-19 22:19:37 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/sklp.exe /c+dir+c:\ 404 -
2005-09-19 22:19:38 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/serverdata.exe /c+dir+c:\ 404 -
2005-09-19 22:19:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/update.exe /c+dir+c:\ 404 -
2005-09-19 22:20:00 211.225.210.128 - 210.52.xxx.xx 80 POST /_vti_bin/_vti_aut/fp30reg.dll - 500 -
2005-09-19 22:20:06 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/root.exe /c+dir+c:\ 404 -
2005-09-19 22:20:08 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/mumu.exe /c+dir+c:\ 404 -
2005-09-19 22:20:18 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/mstart.exe /c+dir+c:\ 404 -
2005-09-19 22:20:19 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/monkey.exe /c+dir+c:\ 404 -
2005-09-19 22:20:24 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/lmao.exe /c+dir+c:\ 404 -
2005-09-19 22:20:26 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/line.exe /c+dir+c:\ 404 -
2005-09-19 22:20:30 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/kickit.exe /c+dir+c:\ 404 -
2005-09-19 22:20:34 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/kasper.exe /c+dir+c:\ 404 -
2005-09-19 22:20:44 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/iis.exe /c+dir+c:\ 404 -
2005-09-19 22:20:47 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/gogo.exe /c+dir+c:\ 404 -
2005-09-19 22:20:49 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/fun.exe /c+dir+c:\ 404 -
2005-09-19 22:20:53 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/ftp.exe /c+dir+c:\ 404 -
2005-09-19 22:20:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/fixtx.exe /c+dir+c:\ 404 -
2005-09-19 22:21:08 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/exchange.exe /c+dir+c:\ 404 -
2005-09-19 22:21:09 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/er.exe /c+dir+c:\ 404 -
2005-09-19 22:21:10 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/edb.exe /c+dir+c:\ 404 -
2005-09-19 22:21:20 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/echo.exe /c+dir+c:\ 404 -
2005-09-19 22:21:22 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/eXe.exe /c+dir+c:\ 404 -
2005-09-19 22:21:23 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/dildo.exe /c+dir+c:\ 404 -
2005-09-19 22:21:26 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/cmd1.exe /c+dir+c:\ 404 -
2005-09-19 22:21:58 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/bs.exe /c+dir+c:\ 404 -
2005-09-19 22:22:02 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/boot.exe /c+dir+c:\ 404 -
2005-09-19 22:22:08 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/az.exe /c+dir+c:\ 404 -
2005-09-19 22:22:09 82.61.35.144 - 210.52.xxx.xx 80 HEAD /samples/Serverdata.exe /c+dir+c:\ 404 -
2005-09-19 22:25:55 82.61.35.144 - 210.52.xxx.xx 80 HEAD /root.exe /c+dir+c:\ 404 -
2005-09-19 22:27:12 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msdac/root.exe /c+dir+c:\ 404 -
2005-09-19 22:27:16 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/war.exe /c+dir+c:\ 403 -
2005-09-19 22:27:17 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/update.exe /c+dir+c:\ 403 -
2005-09-19 22:27:18 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/test.exe /c+dir+c:\ 403 -
2005-09-19 22:27:20 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/sys.exe /c+dir+c:\ 403 -
2005-09-19 22:27:21 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/superlol.exe /c+dir+c:\ 403 -
2005-09-19 22:27:22 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/spooler.exe /c+dir+c:\ 403 -
2005-09-19 22:27:23 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/spool.exe /c+dir+c:\ 403 -
2005-09-19 22:27:25 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/some.exe /c+dir+c:\ 403 -
2005-09-19 22:27:29 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/sky.exe /c+dir+c:\ 403 -
2005-09-19 22:27:42 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/sklp.exe /c+dir+c:\ 403 -
2005-09-19 22:27:55 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/shell.exe /c+dir+c:\ 403 -
2005-09-19 22:27:57 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/serverdata.exe /c+dir+c:\ 403 -
2005-09-19 22:27:59 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/sensepost.exe /c+dir+c:\ 403 -
2005-09-19 22:28:00 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/root.exe /c+dir+c:\ 403 -
2005-09-19 22:28:01 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/mumu.exe /c+dir+c:\ 403 -
2005-09-19 22:28:05 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/mstart.exe /c+dir+c:\ 403 -
2005-09-19 22:28:20 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/lsass.exe /c+dir+c:\ 403 -
2005-09-19 22:28:21 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/lord.exe /c+dir+c:\ 403 -
2005-09-19 22:28:23 82.61.35.144 - 210.52.xxx.xx 80 HEAD /msadc/lmao.exe /c+dir+c:\ 403

＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
可是奇怪的是我的目录下面并没有那些文件，会不会是他用好了删除了？
另外Ip是意大利的，应该是用了代理做了跳板。因为他入侵以后起的用户名是中文拼音的！！

哪位大侠能从中参透些什么吗？？？？？？？？？？？
实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？
ayazero

论坛徽章:
0
18楼 [报告]
发表于 2005-09-20 13:36 |只看该作者

【崩溃】寻找一个系统监视软件

这只是扫描器的动作
实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？
mmhh516

论坛徽章:
0
19楼 [报告]
发表于 2005-09-20 13:58 |只看该作者

【崩溃】寻找一个系统监视软件

404，是没有找到，403忘啦！
实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？
mmhh516

论坛徽章:
0
20楼 [报告]
发表于 2005-09-20 14:02 |只看该作者

【崩溃】寻找一个系统监视软件

在成功的获取了文件的数据的情况下，服务器会产生HTTP 200 OK的应答记录。如果这个文件不存在就会产生404 notfound，如果权限不够就会产生403 access denied,其他的HTTP常见应答代码还包括：

202 Accepted 已经接受请求，但处理尚未完成；

301 Moved Permanently 客户请求的文档在其他地方，新的URL在Location头中给出，浏览器应该自动地访问新的URL；

401 Unauthorized 客户试图未经授权访问受密码保护的页面。

应答中会包含一个
WWW-Authenticate头，浏览器据此显示用户名字/密码对话框，然后在填写合适的Authorization头后再次发出请求；

414 Request URI Too Long URI太长；
500 Internal Server Error 服务器遇到了意料不到的情况，不能完成客户的请求。

　　如果想得到一份完整的HTTP应答代码列表，可以在GOOGLE里搜索，网络上很多地方可以提供该列表。
实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？
123下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 注册

本版积分规则 发表回复

  

北京盛拓优讯信息技术有限公司. 版权所有 京ICP备16024965号-6 北京市公安局海淀分局网监中心备案编号：11010802020122 niuxiaotong@pcpop.com 17352615567
未成年举报专区
中国互联网协会会员  联系我们：huangweiwei@itpub.net
感谢所有关心和支持过ChinaUnix的朋友们 转载本站内容请注明原作者名及出处

清除 Cookies - ChinaUnix - Archiver - WAP - TOP