제 웹서버에 가끔 어떤 정신나간 사람이 들어와서
플래쉬 겟으로 파일을 6-7개를 받아버리네요..
갑자기 adsl 모뎀에 불이 깜빡이지 않고 계속들어와서 보니까..
세상에..
tcp 0 0 218.148.18.229:80 211.228.23.46:4479 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4477 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4475 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4473 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4471 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4469 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4467 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4465 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4463 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4461 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4459 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4457 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4511 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4509 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4507 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4505 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4503 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4501 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4499 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4497 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4495 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4493 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4491 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4485 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4483 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4481 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4519 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4517 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4515 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4513 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4478 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4476 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4474 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4472 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4470 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4468 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4466 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4464 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4462 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4460 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4458 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4510 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4508 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4506 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4504 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4502 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4500 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4498 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4496 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4494 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4492 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4490 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4486 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4484 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4482 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4480 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4518 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4516 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4514 SYN_RECV -
tcp 0 0 218.148.18.229:80 211.228.23.46:4512 SYN_RECV -
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN 1258/X
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 493/sshd
tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN 526/xinetd
tcp 0 0 218.148.18.229:80 218.148.130.226:1061 ESTABLISHED 20730/httpd
tcp 0 0 218.148.18.229:80 218.148.216.60:4296 ESTABLISHED 20574/httpd
tcp 0 0 218.148.18.229:80 218.148.130.226:1315 ESTABLISHED 20584/httpd
tcp 0 0 218.148.18.229:80 192.168.1.2:2147 FIN_WAIT2 -
tcp 0 0 218.148.18.229:80 218.148.130.226:3745 ESTABLISHED 20630/httpd
tcp 0 20 192.168.1.1:22 192.168.1.2:1173 ESTABLISHED 12767/sshd
tcp 0 0 218.148.18.229:80 218.148.130.226:2385 ESTABLISHED 20620/httpd
tcp 0 0 218.148.18.229:80 218.148.216.60:3108 ESTABLISHED 20570/httpd
tcp 0 0 218.148.18.229:80 218.148.124.6:2058 ESTABLISHED 20762/httpd
tcp 0 0 218.148.18.229:1024 211.104.114.179:1943 ESTABLISHED 1197/hip
tcp 0 0 218.148.18.229:80 218.148.124.6:2395 ESTABLISHED 20734/httpd
tcp 0 0 218.148.18.229:80 218.148.130.226:3533 ESTABLISHED 20571/httpd
tcp 0 0 218.148.18.229:80 218.148.124.6:3353 ESTABLISHED 21140/httpd
tcp 0 0 218.148.18.229:80 218.148.216.60:2082 ESTABLISHED 20617/httpd
tcp 0 0 192.168.1.1:22 192.168.1.2:1820 ESTABLISHED 17683/sshd
세상에 이게 말이 됩니까..--+
제가 아무리 트래픽 분석하려고 서버 띠워놨지만.
진짜 너무해가지고 황급히 iptalbes 로 ip 드롭 시켜 놨거든요..
파일 다운 막는방법이 어떤게 있을까요..?
플래쉬겟 자체를 드롭시키는 방법이 있을듯 싶은데.. 혹시 아시는분
계시면 좀 알려주세요..
그리고.. php문법으로도 그 페이지 에서만 다운로드 시키는것도
있을거 같은데..
알려주시면 감사하겠습니다..
진짜 너무하지 않습니까..?