175.127.42.149 아이피로 부터 공격당해서
데이타 일부가 파괴되고 DB 도 삭제 되었습니다.
어떻게 조치 해야 하나요?
현재 방화벽에서 차단했는데
다시 들어올까바 겁나네요.
[root]# /etc/init.d/iptables status | grep 175.127
17 DROP tcp -- 175.127.42.149 0.0.0.0/0 tcp dpt:80 state NEW,ESTABLISHED
18 DROP all -- 175.127.42.0/24 0.0.0.0/0
19 DROP all -- 175.127.41.0/24 0.0.0.0/0
20 DROP all -- 175.127.40.0/24 0.0.0.0/0
21 DROP all -- 175.127.39.0/24 0.0.0.0/0
2998 DROP all -- 0.0.0.0/0 0.0.0.0/0 source IP range 5.175.88.0-5.175.127.255
[root]#
홈 디렉토리에 .htaccess 파일에 다음과 같이 차단하였습니다.
<Limit GET POST>
order allow,deny
deny from 175.127.42.0/24
deny from 175.127.41.0/24
deny from 175.127.40.0/24
deny from 175.127.39.0/24
allow from all
</Limit>
그 외
어떻게 조치 해야 합니까?
³»ºÎÀÚ ¼ÒÇà À̵çÁö.....¾Æ´Ï¸é ³»ºÎ PC ¸¦ Á»ºñÈ ½ÃÄÑ °æÀ¯ÇÑ °Í °°¾Æ º¸À̴µ¥¿ä....
127.0.0.1 º¸´Ù´Â Âü½ÅÇϳ׿ä.
°¢ ÄÄÇ»ÅÍÀÇ ·£Ä«µå¿¡ ÇÒ´çµÇ¾î ÀÖ´Â MAC ¾îµå·¹½º È®ÀÎÇغ¸¸é ¾î´À ÄÄÇ»ÅÍÀÎÁö ³ª¿À°Ú³×¿ä.
WEB ¹æȺ®À» »ç¿ëÇÏ½Ã´Â°Ô ±Þ¼±¹«ÀÌ°Ú½À´Ï´Ù.
¾Æ¿ï·¯ À¥ ¹æȺ®ÀÇ ½Ã±×´ÏÃÄ¿¡ Table TropÀ» Â÷´ÜÇϽøé Á» ³ª¾ÆÁý´Ï´Ù.
¹é¾÷À» »ýÈ°È ÇϽô °Íµµ ÀØÁö ¸¶¼¼¿ä.
Table Drop ÀÔ´Ï´Ù..
Á¦°¡ ¿¹Àü¿¡ Çѹø ´çÇؼ... ^.^;;
¹æ¾îÀÇ °µµ¸¦ ³ôÀÌ¼Å¾ß ÇØ¿ä.
¿¬¶ôó°¡ ÀÖÀ¸´Ï ÀÏ´Ü ½Å°íÇغ¸¼¼¿ä. º° ¼Ò¿ëÀº ¾øÀ» Å×Áö¸¸ Ȥ½Ã ¶óµµ Á¶Ä¡ÇØÁÙÁöµµ ¸ð¸£ÁÒ. ^^
whois 175.127.42.149
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '175.112.0.0 - 175.127.255.255'
inetnum: 175.112.0.0 - 175.127.255.255
netname: broadNnet
descr: Hanaro Telecom
descr: Shindongah Bldg, 43, Taepyeongno2ga, Junggu, Seoul
descr: *********************************
descr: Allocated to KRNIC Member.
descr: If you would like to find assignment
descr: information in detail please refer to
descr: the KRNIC Whois Database at:
descr: http://whois.nic.or.kr/english/index.htm
descr: **********************************
country: KR
admin-c: HL196-AP
tech-c: JK250-AP
status: Allocated Portable
remarks: www.skbroadband.com
mnt-by: MNT-KRNIC-AP
mnt-lower: MNT-KRNIC-AP
changed: hm-changed@apnic.net 20091217
source: APNIC
person: Han Lee
nic-hdl: HL196-AP
e-mail: ip-adm@skbroadband.com
address: 726-1, Janghang2-dong, Goyang-si, Ilsan-gu, Seoul
phone: +82-2-106-2
country: KR
changed: hostmaster@nic.or.kr 20130326
mnt-by: MNT-KRNIC-AP
source: APNIC
person: Jinyoung Kim
nic-hdl: JK250-AP
e-mail: ip-adm@hanaro.com
address: 726-1, Janghang2-dong, Goyang-si, Ilsan-gu, Seoul
phone: +82-2-106
fax-no: +82-2-6266-6483
country: KR
changed: hostmaster@nic.or.kr 20040326
mnt-by: MNT-KRNIC-AP
source: APNIC
% Information related to '175.112.0.0 - 175.127.255.255'
inetnum: 175.112.0.0 - 175.127.255.255
netname: broadNnet-KR
descr: SK Broadband Co Ltd
country: KR
admin-c: IM12-KR
tech-c: IM12-KR
status: ALLOCATED PORTABLE
mnt-by: MNT-KRNIC-AP
mnt-irt: IRT-KRNIC-KR
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: hostmaster@nic.or.kr
source: KRNIC
% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)
ÀÏ´Ü À§ º»¹® Á¶Ä¡ÇÏ¿´°í ´Ù¸¥ ¹æ¹ýÀº ¹«¾ùÀÌ ÀÖÀ»±î¿ä?