#Software: Microsoft Log Parser
#Version: 1.0
#Date: 2009-09-30 23:56:01
#Fields: LogFilename RecordNumber ComputerName SiteID DateTime ClientIpAddress ServerIpAddress ServerPort Method ProtocolVersion ProtocolStatus SubStatus TimeTaken BytesSent BytesReceived Win32Status UriStem UriQuery UserName
d:\iislog\W3SVC\ra090930.ibl 15331 1-0523606520CD4 1055 2009-09-30 00:05:16 222.245.208.146 114.80.67.174 80 POST HTTP/1.1 200 0 718 487 1573 0 /admin/include/UpFileSave.asp - -
d:\iislog\W3SVC\ra090930.ibl 15440 1-0523606520CD4 1055 2009-09-30 00:05:17 222.245.208.146 114.80.67.174 80 POST HTTP/1.1 200 0 1781 371 228 0 /Template/rss.asa - -
d:\iislog\W3SVC\ra090930.ibl 1245508 1-0523606520CD4 1055 2009-09-30 06:01:59 222.173.104.238 114.80.67.174 80 GET HTTP/1.1 404 0 78 1468 208 2 /favicon.ico - -
d:\iislog\W3SVC\ra090930.ibl 2396943 1-0523606520CD4 1055 2009-09-30 11:47:05 219.234.81.100 114.80.67.174 80 GET HTTP/1.0 200 0 500 40228 568 0 /index.html - -

貌似这个挂马者连后台都没进哎