서버로 불법 접근 엄청 들어왔네요.
1214 188.143.232.70 - - [28/Oct/2015:09:40:53 +0900] "GET /index.php HTTP/1.1" 200 52081
1215 188.143.232.22 - - [28/Oct/2015:09:40:53 +0900] "POST /process.php HTTP/1.1" 302 -
1216 188.143.232.40 - - [28/Oct/2015:09:40:53 +0900] "GET /index.php HTTP/1.1" 200 52081
1217 188.143.232.21 - - [28/Oct/2015:09:40:54 +0900] "POST /process.php HTTP/1.1" 302 -
1218 188.143.232.16 - - [28/Oct/2015:09:40:54 +0900] "POST /process.php HTTP/1.1" 302 -
1219 188.143.232.22 - - [28/Oct/2015:09:40:54 +0900] "GET /index.php HTTP/1.1" 200 53589
1220 188.143.232.70 - - [28/Oct/2015:09:40:54 +0900] "POST /process.php HTTP/1.1" 302 -
1221 188.143.232.40 - - [28/Oct/2015:09:40:54 +0900] "POST /process.php HTTP/1.1" 302 -
1222 188.143.232.16 - - [28/Oct/2015:09:40:54 +0900] "GET /index.php HTTP/1.1" 200 53589
1223 188.143.232.21 - - [28/Oct/2015:09:40:54 +0900] "GET /index.php HTTP/1.1" 200 53589
1224 188.143.232.22 - - [28/Oct/2015:09:40:55 +0900] "POST /process.php HTTP/1.1" 302 -
1225 188.143.232.70 - - [28/Oct/2015:09:40:55 +0900] "GET /index.php HTTP/1.1" 200 54589
1226 188.143.232.16 - - [28/Oct/2015:09:40:55 +0900] "POST /process.php HTTP/1.1" 302 -
1227 188.143.232.21 - - [28/Oct/2015:09:40:55 +0900] "POST /process.php HTTP/1.1" 302 -
1228 188.143.232.40 - - [28/Oct/2015:09:40:55 +0900] "GET /index.php HTTP/1.1" 200 54589
188.143.232.x 끝자리 아이피 바꿔가면서 들어오네요.
댓글 8개
[root@ip-172-31-9-223 httpd]# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
DROP all -- 188.143.232.0/24 0.0.0.0/0
이렇게 막아 두었습니다.
이젠 안들어오겠죠 ^^
http://lacnic.net/cgi-bin/lacnic/whois?lg=EN
[root@ip-172-31-9-223 httpd]# iptables -A INPUT -s 176.10.104.0/24 -j DROP
[root@ip-172-31-9-223 httpd]# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
DROP all -- 188.143.232.0/24 0.0.0.0/0
DROP all -- 176.10.104.0/24 0.0.0.0/0
http://daejeonsoft.kr.pe/bbs/board.php?bo_table=notice&wr_id=47 [10월 통계인데 저것두 로봇인가봐요 ?]