Webknight BLOCKED 처리

//Webknight BLOCKED 처리

Webknight BLOCKED 처리

 

환경 

Windows Server 2016 STD
IIS10
Webknight 4.4 

 

Q

2021-07-01 ; 11:04:10 ; W3SVC2 ; OnUrlMap ; 211.211,11,111 ; ; asf.servis.co.kr ; /mail/formMail.html ; D:\folder\formMail.html ; BLOCKED: accessing/running ‘formmail.’ file

A

Requested File -> Denied Files 목록에서 ‘formmail.’ 삭제

Q

2021-07-01 ; 05:39:29 ; W3SVC3 ; OnPreprocHeaders ; 108.162.229.251 ; ; servis.co.kr ; GET ; //test/wp-includes/wlwmanifest.xml ; BLOCKED: ‘/test/’ not allowed in URL ; HTTP/1.1 ; Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36 ;
2021-07-01 ; 05:39:29 ; W3SVC3 ; OnUrlMap ; 108.162.229.251 ; ; servis.co.kr ; /test/wp-includes/wlwmanifest.xml ; BLOCKED: ‘/test/’ not allowed in URL ; D:\folder\test\wp-includes\wlwmanifest.xml

 

2021-07-01 ; 05:39:24 ; W3SVC3 ; OnPreprocHeaders ; 141.101.69.120 ; ; servis.co.kr ; GET ; //xmlrpc.php ; BLOCKED: ‘/xmlrpc.’ not allowed in URL ; rsd ; HTTP/1.1 ; Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36 ;
2021-07-01 ; 05:39:24 ; W3SVC3 ; OnUrlMap ; 141.101.69.120 ; ; servis.co.kr ; /xmlrpc.php ; BLOCKED: ‘/xmlrpc.’ not allowed in URL ; D:\folder\xmlrpc.php ; rsd

A

URL Scanning -> Denied Url Sequences 목록에서 ‘/xmlrpc.’  , ‘/test/’ 삭제 하면 된다.

하지만 108.162.229.251 , 141.101.69.120 아이피가 해외 아이피 이고 접근하는 경로를 보면 악의적으로 스캔하는걸로 판단해서 설정으로 그대로

 

By |2021-07-01T15:34:22+00:007월 1st, 2021|Categories: window|Tags: |0 Comments

About the Author: