아파치 로그를 보니 ip 스푸핑 공격을 인것 같습니다.. 어떻게 막죠?
[Tue Apr 03 12:31:31 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/SimpleAuthWebService
[Tue Apr 03 12:55:57 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/SimpleAuthWebService
[Tue Apr 03 13:21:32 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/SimpleAuthWebService
[Tue Apr 03 13:26:14 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/selfupdate
[Tue Apr 03 13:26:14 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/selfupdate
[Tue Apr 03 13:26:14 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/clientwebservice
[Tue Apr 03 13:26:14 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/clientwebservice
[Tue Apr 03 13:26:14 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/iuident.cab
[Tue Apr 03 13:26:14 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/iuident.cab
[Tue Apr 03 13:34:05 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/SimpleAuthWebService
[Tue Apr 03 13:48:01 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/SimpleAuthWebService
[Tue Apr 03 14:00:14 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/SimpleAuthWebService
[Tue Apr 03 14:25:31 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/SimpleAuthWebService
[Tue Apr 03 14:43:13 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/SimpleAuthWebService
[Tue Apr 03 15:07:20 2007] [error] [client 10.10.5.9] File does not exist: /var/www/html/SimpleAuthWebService
ssh 연결을 하거나 제가 항상 사용하는 데스크탑이 10.10.5.9 입니다.
근데 저는 당근 저렇게 서버에 접속한 적이 없는데요..
지금 이 글을 쓰는 순간에도 저의 데스크탑 아이피가 찍히고 있네요.. --;;
어떻게 막죠??
댓글 달기