理由如下：

1，很多网站都是刚上线没多久，百度里搜到的几率是小之又小。我的站就是刚上的线不到一个月。

2，他怎么知道这么多网站用的是科讯的系统。一个还能说的过去，但这次一下子挂了那么多网站。估计是同一时间。都是9月30号。

曾经还受到218.5.76.180，119.139.242.241， 124.115.6.20的刺探。

113.106.106.131 这个IP估计也不是什么好鸟

222.245.208.146      124.172.242.16    这两个IP对我服务器挂了马。

部分日志：

2009-09-30 01:02:32 W3SVC1953660440 *.*.*.* POST /zceadmin/include/UpFileSave.asp - 80 - 222.245.208.146 - 200 0 0
2009-09-30 01:02:32 W3SVC1953660440 *.*.*.* POST /Template/rss.asa - 80 - 222.245.208.146 - 200 0 0
2009-09-30 01:03:11 W3SVC1953660440 *.*.*.* POST /zceadmin/include/UpFileSave.asp - 80 - 222.245.208.146 - 200 0 0
2009-09-30 01:03:11 W3SVC1953660440 *.*.*.* POST /Template/rss.asa - 80 - 222.245.208.146 - 200 0 0
2009-09-30 01:03:55 W3SVC1953660440 *.*.*.* POST /zceadmin/include/UpFileSave.asp - 80 - 222.245.208.146 - 200 0 0
2009-09-30 01:03:55 W3SVC1953660440 *.*.*.* POST /Template/rss.asa - 80 - 222.245.208.146 - 200 0 0

2009-09-30 08:31:59 W3SVC1953660440 *.*.*.* POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0
2009-09-30 08:32:01 W3SVC1953660440 *.*.*.* POST /Template/rss.asa nor=1&en=1&asp=1&dot=1 80 - 124.172.242.16 - 200 0 0
2009-09-30 15:55:05 W3SVC1953660440 *.*.*.* POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0
2009-09-30 15:55:05 W3SVC1953660440 *.*.*.* POST /Space/skin/enterprise1/inedx.asp - 80 - 124.172.242.16 - 200 0 0
2009-09-30 15:55:05 W3SVC1953660440 *.*.*.* POST /Plus/Announce/bottum.asp - 80 - 124.172.242.16 - 200 0 0
2009-09-30 15:55:05 W3SVC1953660440 *.*.*.* POST /Space/skin/02/C00N.asp - 80 - 124.172.242.16 - 404 0 64
2009-09-30 15:55:05 W3SVC1953660440 *.*.*.* POST /KS_Editor/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-

scripts/help.asp;.jpg - 80 - 124.172.242.16 - 404 0 2
2009-09-30 15:55:07 W3SVC1953660440 *.*.*.* POST /Template/rss.asa nor=0&en=1&asp=0&dot=1 80 - 124.172.242.16 - 200 0 0
2009-09-30 15:55:10 W3SVC1953660440 *.*.*.* POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0

2009-09-30 19:49:02 W3SVC1953660440 *.*.*.* POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0
2009-09-30 19:49:02 W3SVC1953660440 *.*.*.* POST /Space/skin/enterprise1/inedx.asp - 80 - 124.172.242.16 - 200 0 0
2009-09-30 19:49:02 W3SVC1953660440 *.*.*.* POST /Plus/Announce/bottum.asp - 80 - 124.172.242.16 - 200 0 0
2009-09-30 19:49:02 W3SVC1953660440 *.*.*.* POST /KS_Editor/fckeditor/editor/skins/C00N.asp - 80 - 124.172.242.16 - 404 0 2
2009-09-30 19:49:02 W3SVC1953660440 *.*.*.* POST /KS_Editor/fckeditor/editor/plugins/help.asp;.jpg - 80 - 124.172.242.16 -

404 0 64
2009-09-30 19:49:03 W3SVC1953660440 *.*.*.* POST /Template/rss.asa nor=0&en=1&asp=0&dot=1 80 - 124.172.242.16 - 200 0 0
2009-09-30 19:49:06 W3SVC1953660440 *.*.*.* POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0

2009-09-30 21:45:40 W3SVC1953660440 *.*.*.* POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0
2009-09-30 21:45:40 W3SVC1953660440 *.*.*.* POST /Space/skin/enterprise1/inedx.asp - 80 - 124.172.242.16 - 200 0 0
2009-09-30 21:45:40 W3SVC1953660440 *.*.*.* POST /Plus/Announce/bottum.asp - 80 - 124.172.242.16 - 200 0 0
2009-09-30 21:45:40 W3SVC1953660440 *.*.*.* POST /Images/emot/C00N.asp - 80 - 124.172.242.16 - 404 0 64
2009-09-30 21:45:41 W3SVC1953660440 *.*.*.* POST /Club/Images/help.asp;.jpg - 80 - 124.172.242.16 - 404 0 64
2009-09-30 21:45:41 W3SVC1953660440 *.*.*.* POST /Template/rss.asa nor=0&en=1&asp=0&dot=1 80 - 124.172.242.16 - 200 0 0
2009-09-30 21:45:43 W3SVC1953660440 *.*.*.* POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0

2009-09-30 23:45:13 W3SVC1953660440 *.*.*.* POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0
2009-09-30 23:45:13 W3SVC1953660440 *.*.*.* POST /Space/skin/enterprise1/inedx.asp - 80 - 124.172.242.16 - 200 0 0
2009-09-30 23:45:13 W3SVC1953660440 *.*.*.* POST /Plus/Announce/bottum.asp - 80 - 124.172.242.16 - 200 0 0
2009-09-30 23:45:13 W3SVC1953660440 *.*.*.* POST /KS_Editor/fckeditor/editor/dialog/C00N.asp - 80 - 124.172.242.16 - 404 0 64
2009-09-30 23:45:13 W3SVC1953660440 *.*.*.* POST /KS_Cls/help.asp;.jpg - 80 - 124.172.242.16 - 404 0 64
2009-09-30 23:45:15 W3SVC1953660440 *.*.*.* POST /Template/rss.asa nor=0&en=1&asp=0&dot=1 80 - 124.172.242.16 - 200 0 0
2009-09-30 23:45:16 W3SVC1953660440 *.*.*.* POST /Template/rss.asa - 80 - 124.172.242.16 - 200 0 0

他怎么找到网站的这是个很大的问题？？？？？