환경
Windows Server 2016 STD
IIS10
Webknight 4.4
Q
2021-07-01 ; 11:04:10 ; W3SVC2 ; OnUrlMap ; 211.211,11,111 ; ; asf.servis.co.kr ; /mail/formMail.html ; D:\folder\formMail.html ; BLOCKED: accessing/running ‘formmail.’ file
A
Requested File -> Denied Files 목록에서 ‘formmail.’ 삭제
Q
2021-07-01 ; 05:39:29 ; W3SVC3 ; OnPreprocHeaders ; 108.162.229.251 ; ; servis.co.kr ; GET ; //test/wp-includes/wlwmanifest.xml ; BLOCKED: ‘/test/’ not allowed in URL ; HTTP/1.1 ; Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36 ;
2021-07-01 ; 05:39:29 ; W3SVC3 ; OnUrlMap ; 108.162.229.251 ; ; servis.co.kr ; /test/wp-includes/wlwmanifest.xml ; BLOCKED: ‘/test/’ not allowed in URL ; D:\folder\test\wp-includes\wlwmanifest.xml
2021-07-01 ; 05:39:24 ; W3SVC3 ; OnPreprocHeaders ; 141.101.69.120 ; ; servis.co.kr ; GET ; //xmlrpc.php ; BLOCKED: ‘/xmlrpc.’ not allowed in URL ; rsd ; HTTP/1.1 ; Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36 ;
2021-07-01 ; 05:39:24 ; W3SVC3 ; OnUrlMap ; 141.101.69.120 ; ; servis.co.kr ; /xmlrpc.php ; BLOCKED: ‘/xmlrpc.’ not allowed in URL ; D:\folder\xmlrpc.php ; rsd
A
URL Scanning -> Denied Url Sequences 목록에서 ‘/xmlrpc.’ , ‘/test/’ 삭제 하면 된다.
하지만 108.162.229.251 , 141.101.69.120 아이피가 해외 아이피 이고 접근하는 경로를 보면 악의적으로 스캔하는걸로 판단해서 설정으로 그대로
