2009年9月30日国庆前一天,9月29日早上08:32:42,开始首次预备,黑客植入木马,在29日晚上21:37:30我这里网站已经反映出来了,这个黑狗,在特定的时间爆发此次大面积挂马,到底什么意思???
希望公安出面,立案抓住这个害人的黑狗! 在这里顺祝江西省赣州市124.172.242.16这个黑客受到法律制裁!
我两个网站被挂。
小马分别是:
asp;.jpg
rss.asa
inedx.asp
C00N.asp
您查询的IP:124.172.242.16 来自:江西省赣州市
这个时间短预备:
===============================
2009-09-30 08:32:42 124.172.242.16 - POST /Template/rss.asa 200 89 HTTP/1.1 -
2009-09-30 08:32:42 124.172.242.16 - POST Images/inedx.asp 200 89 HTTP/1.1 -
2009-09-30 08:32:42 124.172.242.16 - POST /KS_Editor/fckeditor/editor/dialog/fck_image/bottum.asp 200 89 HTTP/1.1 -
2009-09-30 08:32:44 124.172.242.16 - POST /Admin/Skin/3/C00N.asp 200 89 HTTP/1.1 -
2009-09-30 08:32:44 124.172.242.16 - POST /Admin/Skin/1/help.asp;.jpg 405 3935 HTTP/1.1 -
2009-09-30 08:32:46 124.172.242.16 - POST /Template/rss.asa 200 89 HTTP/1.1 -
============================
2009-09-30 15:44:04 124.172.242.16 - POST /Template/rss.asa 200 89 HTTP/1.1 -
2009-09-30 15:44:04 124.172.242.16 - POST Images/inedx.asp 200 89 HTTP/1.1 -
2009-09-30 15:44:04 124.172.242.16 - POST /KS_Editor/fckeditor/editor/dialog/fck_image/bottum.asp 200 89 HTTP/1.1 -
2009-09-30 15:44:04 124.172.242.16 - POST /Admin/Skin/3/C00N.asp 200 89 HTTP/1.1 -
2009-09-30 15:44:06 124.172.242.16 - POST /Template/rss.asa 200 89 HTTP/1.1 -
2009-09-30 15:44:35 124.172.242.16 - POST /Template/rss.asa 200 89 HTTP/1.1 - h
********************************
2009-09-30 19:39:44 124.172.242.16 - POST /Admin/Skin/3/C00N.asp 200 89 HTTP/1.1 - /Admin/Skin/3/C00N.asp
2009-09-30 19:39:44 124.172.242.16 - POST /Admin/Skin/2/help.asp;.jpg 405 3935 HTTP/1.1 - /Admin/Skin/2/help.asp;.jpg
2009-09-30 19:39:46 124.172.242.16 - POST /Template/rss.asa 200 89 HTTP/1.1 - /Template/rss.asa?nor=0&en=0&asp=0&dot=1
这个时间段动手害人
------------------
2009-09-30 21:37:30 124.172.242.16 - POST /Template/rss.asa 200 89 HTTP/1.1 - /Template/rss.asa
2009-09-30 21:37:30 124.172.242.16 - POST Images/inedx.asp 200 89 HTTP/1.1 - Images/inedx.asp
2009-09-30 21:37:30 124.172.242.16 - POST /KS_Editor/fckeditor/editor/dialog/fck_image/bottum.asp 200 89 HTTP/1.1 - /KS_Editor/fckeditor/editor/dialog/fck_image/bottum.asp
2009-09-30 21:37:30 124.172.242.16 - POST /Admin/Skin/3/C00N.asp 200 89 HTTP/1.1 - /Admin/Skin/3/C00N.asp
2009-09-30 21:37:31 124.172.242.16 - POST /KS_Editor/fckeditor/help.asp;.jpg 405 3935 HTTP/1.1 -
-------------
2009-09-30 23:37:10 124.172.242.16 - POST /Template/rss.asa 200 89 HTTP/1.1 - /Template/rss.asa
2009-09-30 23:37:10 124.172.242.16 - POST Images/inedx.asp 200 89 HTTP/1.1 - Images/inedx.asp
2009-09-30 23:37:10 124.172.242.16 - POST /KS_Editor/fckeditor/editor/dialog/fck_image/bottum.asp 200 89 HTTP/1.1 - /KS_Editor/fckeditor/editor/dialog/fck_image/bottum.asp
2009-09-30 23:37:10 124.172.242.16 - POST /Admin/Skin/3/C00N.asp 200 89 HTTP/1.1 - /Admin/Skin/3/C00N.asp
2009-09-30 23:37:10 124.172.242.16 - POST /Images/baziqiming/help.asp;.jpg 405 3935 HTTP/1.1 - /Images/baziqiming/help.asp;.jpg
2009-09-30 23:37:12 124.172.242.16 - POST /Template/rss.asa 200 89 HTTP/1.1 - /Template/rss.asa?nor=0&en=0&asp=0&dot=1
-------------------
2009-10-01 01:37:01 124.172.242.16 - POST /Template/rss.asa 200 89 HTTP/1.1 - /Template/rss.asa
2009-10-01 01:37:01 124.172.242.16 - POST Images/inedx.asp 200 89 HTTP/1.1 - Images/inedx.asp
2009-10-01 01:37:01 124.172.242.16 - POST /KS_Editor/fckeditor/editor/dialog/fck_image/bottum.asp 200 89 HTTP/1.1 - /KS_Editor/fckeditor/editor/dialog/fck_image/bottum.asp
2009-10-01 01:37:01 124.172.242.16 - POST /Admin/Skin/3/C00N.asp 200 89 HTTP/1.1 - /Admin/Skin/3/C00N.asp
2009-10-01 01:37:01 124.172.242.16 - POST /KS_Editor/fckeditor/editor/plugins/help.asp;.jpg 405 3935 HTTP/1.1 - /KS_Editor/fckeditor/editor/plugins/help.asp;.jpg
2009-10-01 01:37:02 124.172.242.16 - POST /Template/rss.asa 200 89 HTTP/1.1