kcp 에 공통 URL 에 대한 점검을 요청했었는데요...
공통 URL 에 대한 점검을 요청했었는데요..
아래와 같은 내용 메일이 날아왔네요.. kcp에서 온거 같지는 않구요.
제목은 "올바르지 않은 접속 보고" 라고 동일한 제목입니다.
/cart/shop/settle_kcp_common.php 에 210.124.225.59 이 2014-05-02 11:04:05 에 접속을 시도하였습니다.
ENV[a:9:{s:6:"MAILTO";s:0:"";s:5:"SHELL";s:7:"/bin/sh";s:4:"USER";s:4:"root";s:4:"PATH";s:13:"/usr/bin:/bin";s:3:"PWD";s:5:"/root";s:4:"HOME";s:5:"/root";s:5:"SHLVL";s:1:"2";s:7:"LOGNAME";s:4:"root";s:1:"_";s:29:"/usr/local/apache53/bin/httpd";}] GET[a:0:{}]POST[a:0:{}]COOKIE[a:0:{}]SESSION[a:1:{s:12:"ss_is_mobile";b:0;}]
--------------------------------------------------------------------------------------------------------------------
/cart/shop/settle_kcp_common.php 에 210.122.73.58 이 2014-05-02 11:07:42 에 접속을 시도하였습니다.
ENV[a:9:{s:6:"MAILTO";s:0:"";s:5:"SHELL";s:7:"/bin/sh";s:4:"USER";s:4:"root";s:4:"PATH";s:13:"/usr/bin:/bin";s:3:"PWD";s:5:"/root";s:4:"HOME";s:5:"/root";s:5:"SHLVL";s:1:"2";s:7:"LOGNAME";s:4:"root";s:1:"_";s:29:"/usr/local/apache53/bin/httpd";}] GET[a:0:{}]POST[a:19:{s:7:"site_cd";s:5:"T0000";s:9:"ipgm_name";s:9:"홍길동";s:9:"ipgm_mnyx";s:4:"1004";s:9:"totl_mnyx";s:4:"1004";s:9:"ordr_idxx";s:25:"TEST201405021398996419762";s:8:"order_no";s:25:"TEST201405021398996419762";s:9:"ipgm_time";s:14:"20140502110739";s:5:"tx_tm";s:14:"20140502110739";s:9:"bank_code";s:2:"23";s:3:"tno";s:14:"20140502965604";s:7:"account";s:14:"T2300000230307";s:5:"op_cd";s:2:"18";s:5:"opt01";s:0:"";s:7:"noti_id";s:20:"14050223996459669262";s:5:"tx_cd";s:4:"TX00";s:8:"remitter";s:9:"홍길동";s:9:"cash_a_no";s:0:"";s:8:"char_set";s:5:"UTF-8";s:9:"ipgm_stat";s:4:"STIY";}]COOKIE[a:0:{}]SESSION[a:1:{s:12:"ss_is_mobile";b:0;}]
-----------------------------------------------------------------------------------------------------------------------
/cart/shop/settle_kcp_common.php 에 210.122.73.58 이 2014-05-02 11:12:40 에 접속을 시도하였습니다.
ENV[a:9:{s:6:"MAILTO";s:0:"";s:5:"SHELL";s:7:"/bin/sh";s:4:"USER";s:4:"root";s:4:"PATH";s:13:"/usr/bin:/bin";s:3:"PWD";s:5:"/root";s:4:"HOME";s:5:"/root";s:5:"SHLVL";s:1:"2";s:7:"LOGNAME";s:4:"root";s:1:"_";s:29:"/usr/local/apache53/bin/httpd";}] GET[a:0:{}]POST[a:19:{s:7:"site_cd";s:5:"T0000";s:9:"ipgm_name";s:9:"홍길동";s:9:"ipgm_mnyx";s:4:"1004";s:9:"totl_mnyx";s:4:"1004";s:9:"ordr_idxx";s:25:"TEST201405021398996419762";s:8:"order_no";s:25:"TEST201405021398996419762";s:9:"ipgm_time";s:14:"20140502110739";s:5:"tx_tm";s:14:"20140502110739";s:9:"bank_code";s:2:"23";s:3:"tno";s:14:"20140502965604";s:7:"account";s:14:"T2300000230307";s:5:"op_cd";s:2:"18";s:5:"opt01";s:0:"";s:7:"noti_id";s:20:"14050223996459669262";s:5:"tx_cd";s:4:"TX00";s:8:"remitter";s:9:"홍길동";s:9:"cash_a_no";s:0:"";s:8:"char_set";s:5:"UTF-8";s:9:"ipgm_stat";s:4:"STIY";}]COOKIE[a:0:{}]SESSION[a:1:{s:12:"ss_is_mobile";b:0;}]
----------------------------------------------------------------------------------------------------------------------
/cart/shop/settle_kcp_common.php 에 210.122.73.58 이 2014-05-02 11:17:44 에 접속을 시도하였습니다.
ENV[a:9:{s:6:"MAILTO";s:0:"";s:5:"SHELL";s:7:"/bin/sh";s:4:"USER";s:4:"root";s:4:"PATH";s:13:"/usr/bin:/bin";s:3:"PWD";s:5:"/root";s:4:"HOME";s:5:"/root";s:5:"SHLVL";s:1:"2";s:7:"LOGNAME";s:4:"root";s:1:"_";s:29:"/usr/local/apache53/bin/httpd";}] GET[a:0:{}]POST[a:19:{s:7:"site_cd";s:5:"T0000";s:9:"ipgm_name";s:9:"홍길동";s:9:"ipgm_mnyx";s:4:"1004";s:9:"totl_mnyx";s:4:"1004";s:9:"ordr_idxx";s:25:"TEST201405021398996419762";s:8:"order_no";s:25:"TEST201405021398996419762";s:9:"ipgm_time";s:14:"20140502110739";s:5:"tx_tm";s:14:"20140502110739";s:9:"bank_code";s:2:"23";s:3:"tno";s:14:"20140502965604";s:7:"account";s:14:"T2300000230307";s:5:"op_cd";s:2:"18";s:5:"opt01";s:0:"";s:7:"noti_id";s:20:"14050223996459669262";s:5:"tx_cd";s:4:"TX00";s:8:"remitter";s:9:"홍길동";s:9:"cash_a_no";s:0:"";s:8:"char_set";s:5:"UTF-8";s:9:"ipgm_stat";s:4:"STIY";}]COOKIE[a:0:{}]SESSION[a:1:{s:12:"ss_is_mobile";b:0;}]
-------------------------------------------------------------------------------------------------------------------
KCP 에서 홍길동이라는 이름으로 테스트하는듯한데요..
영카트와 관련이 있나 싶어 글을 올립니다.
그럼...
ps. 동일한 제목의 메일로 10건 가까이 왔네요.
아래와 같은 내용 메일이 날아왔네요.. kcp에서 온거 같지는 않구요.
제목은 "올바르지 않은 접속 보고" 라고 동일한 제목입니다.
/cart/shop/settle_kcp_common.php 에 210.124.225.59 이 2014-05-02 11:04:05 에 접속을 시도하였습니다.
ENV[a:9:{s:6:"MAILTO";s:0:"";s:5:"SHELL";s:7:"/bin/sh";s:4:"USER";s:4:"root";s:4:"PATH";s:13:"/usr/bin:/bin";s:3:"PWD";s:5:"/root";s:4:"HOME";s:5:"/root";s:5:"SHLVL";s:1:"2";s:7:"LOGNAME";s:4:"root";s:1:"_";s:29:"/usr/local/apache53/bin/httpd";}] GET[a:0:{}]POST[a:0:{}]COOKIE[a:0:{}]SESSION[a:1:{s:12:"ss_is_mobile";b:0;}]
--------------------------------------------------------------------------------------------------------------------
/cart/shop/settle_kcp_common.php 에 210.122.73.58 이 2014-05-02 11:07:42 에 접속을 시도하였습니다.
ENV[a:9:{s:6:"MAILTO";s:0:"";s:5:"SHELL";s:7:"/bin/sh";s:4:"USER";s:4:"root";s:4:"PATH";s:13:"/usr/bin:/bin";s:3:"PWD";s:5:"/root";s:4:"HOME";s:5:"/root";s:5:"SHLVL";s:1:"2";s:7:"LOGNAME";s:4:"root";s:1:"_";s:29:"/usr/local/apache53/bin/httpd";}] GET[a:0:{}]POST[a:19:{s:7:"site_cd";s:5:"T0000";s:9:"ipgm_name";s:9:"홍길동";s:9:"ipgm_mnyx";s:4:"1004";s:9:"totl_mnyx";s:4:"1004";s:9:"ordr_idxx";s:25:"TEST201405021398996419762";s:8:"order_no";s:25:"TEST201405021398996419762";s:9:"ipgm_time";s:14:"20140502110739";s:5:"tx_tm";s:14:"20140502110739";s:9:"bank_code";s:2:"23";s:3:"tno";s:14:"20140502965604";s:7:"account";s:14:"T2300000230307";s:5:"op_cd";s:2:"18";s:5:"opt01";s:0:"";s:7:"noti_id";s:20:"14050223996459669262";s:5:"tx_cd";s:4:"TX00";s:8:"remitter";s:9:"홍길동";s:9:"cash_a_no";s:0:"";s:8:"char_set";s:5:"UTF-8";s:9:"ipgm_stat";s:4:"STIY";}]COOKIE[a:0:{}]SESSION[a:1:{s:12:"ss_is_mobile";b:0;}]
-----------------------------------------------------------------------------------------------------------------------
/cart/shop/settle_kcp_common.php 에 210.122.73.58 이 2014-05-02 11:12:40 에 접속을 시도하였습니다.
ENV[a:9:{s:6:"MAILTO";s:0:"";s:5:"SHELL";s:7:"/bin/sh";s:4:"USER";s:4:"root";s:4:"PATH";s:13:"/usr/bin:/bin";s:3:"PWD";s:5:"/root";s:4:"HOME";s:5:"/root";s:5:"SHLVL";s:1:"2";s:7:"LOGNAME";s:4:"root";s:1:"_";s:29:"/usr/local/apache53/bin/httpd";}] GET[a:0:{}]POST[a:19:{s:7:"site_cd";s:5:"T0000";s:9:"ipgm_name";s:9:"홍길동";s:9:"ipgm_mnyx";s:4:"1004";s:9:"totl_mnyx";s:4:"1004";s:9:"ordr_idxx";s:25:"TEST201405021398996419762";s:8:"order_no";s:25:"TEST201405021398996419762";s:9:"ipgm_time";s:14:"20140502110739";s:5:"tx_tm";s:14:"20140502110739";s:9:"bank_code";s:2:"23";s:3:"tno";s:14:"20140502965604";s:7:"account";s:14:"T2300000230307";s:5:"op_cd";s:2:"18";s:5:"opt01";s:0:"";s:7:"noti_id";s:20:"14050223996459669262";s:5:"tx_cd";s:4:"TX00";s:8:"remitter";s:9:"홍길동";s:9:"cash_a_no";s:0:"";s:8:"char_set";s:5:"UTF-8";s:9:"ipgm_stat";s:4:"STIY";}]COOKIE[a:0:{}]SESSION[a:1:{s:12:"ss_is_mobile";b:0;}]
----------------------------------------------------------------------------------------------------------------------
/cart/shop/settle_kcp_common.php 에 210.122.73.58 이 2014-05-02 11:17:44 에 접속을 시도하였습니다.
ENV[a:9:{s:6:"MAILTO";s:0:"";s:5:"SHELL";s:7:"/bin/sh";s:4:"USER";s:4:"root";s:4:"PATH";s:13:"/usr/bin:/bin";s:3:"PWD";s:5:"/root";s:4:"HOME";s:5:"/root";s:5:"SHLVL";s:1:"2";s:7:"LOGNAME";s:4:"root";s:1:"_";s:29:"/usr/local/apache53/bin/httpd";}] GET[a:0:{}]POST[a:19:{s:7:"site_cd";s:5:"T0000";s:9:"ipgm_name";s:9:"홍길동";s:9:"ipgm_mnyx";s:4:"1004";s:9:"totl_mnyx";s:4:"1004";s:9:"ordr_idxx";s:25:"TEST201405021398996419762";s:8:"order_no";s:25:"TEST201405021398996419762";s:9:"ipgm_time";s:14:"20140502110739";s:5:"tx_tm";s:14:"20140502110739";s:9:"bank_code";s:2:"23";s:3:"tno";s:14:"20140502965604";s:7:"account";s:14:"T2300000230307";s:5:"op_cd";s:2:"18";s:5:"opt01";s:0:"";s:7:"noti_id";s:20:"14050223996459669262";s:5:"tx_cd";s:4:"TX00";s:8:"remitter";s:9:"홍길동";s:9:"cash_a_no";s:0:"";s:8:"char_set";s:5:"UTF-8";s:9:"ipgm_stat";s:4:"STIY";}]COOKIE[a:0:{}]SESSION[a:1:{s:12:"ss_is_mobile";b:0;}]
-------------------------------------------------------------------------------------------------------------------
KCP 에서 홍길동이라는 이름으로 테스트하는듯한데요..
영카트와 관련이 있나 싶어 글을 올립니다.
그럼...
ps. 동일한 제목의 메일로 10건 가까이 왔네요.
|
댓글을 작성하시려면 로그인이 필요합니다.
댓글 1개
그래서 악의적인 사용자가 settle_kcp_common.php 에 값을 넘겨서 실제로 결제하지 않았음에도 결제를 했다고
통보를 할 수 있어 settle_kcp_common.php 에 접근할 수 있는ip를 제한하고 있습니다.
위와 같은 메일이 발송된 이유는 제한된 ip외에 다른 ip에서 접속을 했기 때문입니다.