본문 바로가기
지다2010.04.25 23:53
오늘 오후 7시 전후하여 약 한 시간 동안 들어 왔던 해커들 입니다.
이 놈들이 억세스하려고 하는 파일들이 자기들이 몰래 심어 놓은  것 들 입니다.  물론, 지금은 에러 메세지만 뜨겠지만...
당하고 보니 해킹이 참 심각하군요...  (맨 앞의 IP Address 가 같은 것은 같은 놈이 들어 오는 것입니다)

112.95.147.149 - - [25/Apr/2010:21:26:40 -0500] "GET /bbs/alliance-leicester.onlinebanking/mybank.Customer-login.php ......
112.95.147.149 - - [25/Apr/2010:21:26:41 -0500] "GET /adm/img/online.bankofamerica.com/boa/index.html HTTP/1.1" ......
112.95.147.149 - - [25/Apr/2010:21:26:41 -0500] "GET /xe/modules/point/schemas/news/online.bankofamerica.com/boa/index.html ......
112.95.147.149 - - [25/Apr/2010:21:43:16 -0500] "GET /adm/img/online.bankofamerica.com/boa/index.html HTTP/1.1" ......
112.95.147.149 - - [25/Apr/2010:21:43:16 -0500] "GET /bbs/alliance-leicester.onlinebanking/mybank.Customer-login.php ......
112.95.147.149 - - [25/Apr/2010:21:43:16 -0500] "GET /xe/modules/point/schemas/news/online.bankofamerica.com/boa/index.html ......
209.120.218.196 - - [25/Apr/2010:21:29:51 -0500] "GET /bbs/calendar/servlet/downloads/center/https%7C%7Conline.hmrc.gov.uk%7Crefund=https%7C%7Conline.hmrc.gov.uk%7Chome&Reason=-1&APPID=Common&URI=https%7C%7Conline.hmrc.gov.uk%7Ctaxrefundurl=/United/Natwest/index.html HTTP/1.1" 404 - "-" "-"
209.120.218.196 - - [25/Apr/2010:21:29:51 -0500] "GET /bbs/calendar/servlet/downloads/center/https%7C%7Conline.hmrc.gov.uk%7Crefund=https%7C%7Conline.hmrc.gov.uk%7Chome&Reason=-1&APPID=Common&URI=https%7C%7Conline.hmrc.gov.uk%7Ctaxrefundurl=/United/RBS/index.html HTTP/1.1" 404 - "-" "-"
209.120.218.196 - - [25/Apr/2010:21:45:37 -0500] "GET /bbs/calendar/servlet/downloads/center/https%7C%7Conline.hmrc.gov.uk%7Crefund=https%7C%7Conline.hmrc.gov.uk%7Chome&Reason=-1&APPID=Common&URI=https%7C%7Conline.hmrc.gov.uk%7Ctaxrefundurl=/United/Natwest/index.html HTTP/1.1" 404 - "-" "-"
209.120.218.196 - - [25/Apr/2010:21:45:37 -0500] "GET /bbs/calendar/servlet/downloads/center/https%7C%7Conline.hmrc.gov.uk%7Crefund=https%7C%7Conline.hmrc.gov.uk%7Chome&Reason=-1&APPID=Common&URI=https%7C%7Conline.hmrc.gov.uk%7Ctaxrefundurl=/United/RBS/index.html HTTP/1.1" 404 - "-" "-"
209.120.218.196 - - [25/Apr/2010:22:01:17 -0500] "GET /bbs/calendar/servlet/downloads/center/https%7C%7Conline.hmrc.gov.uk%7Crefund=https%7C%7Conline.hmrc.gov.uk%7Chome&Reason=-1&APPID=Common&URI=https%7C%7Conline.hmrc.gov.uk%7Ctaxrefundurl=/United/Natwest/index.html HTTP/1.1" 404 - "-" "-"
209.120.218.196 - - [25/Apr/2010:22:01:17 -0500] "GET /bbs/calendar/servlet/downloads/center/https%7C%7Conline.hmrc.gov.uk%7Crefund=https%7C%7Conline.hmrc.gov.uk%7Chome&Reason=-1&APPID=Common&URI=https%7C%7Conline.hmrc.gov.uk%7Ctaxrefundurl=/United/RBS/index.html HTTP/1.1" 404 - "-" "-"
209.120.218.196 - - [25/Apr/2010:22:17:04 -0500] "GET /bbs/calendar/servlet/downloads/center/https%7C%7Conline.hmrc.gov.uk%7Crefund=https%7C%7Conline.hmrc.gov.uk%7Chome&Reason=-1&APPID=Common&URI=https%7C%7Conline.hmrc.gov.uk%7Ctaxrefundurl=/United/Natwest/index.html HTTP/1.1" 404 - "-" "-"
209.120.218.196 - - [25/Apr/2010:22:17:04 -0500] "GET /bbs/calendar/servlet/downloads/center/https%7C%7Conline.hmrc.gov.uk%7Crefund=https%7C%7Conline.hmrc.gov.uk%7Chome&Reason=-1&APPID=Common&URI=https%7C%7Conline.hmrc.gov.uk%7Ctaxrefundurl=/United/RBS/index.html HTTP/1.1" 404 - "-" "-"
66.113.102.253 - - [25/Apr/2010:21:18:29 -0500] "GET /css/_vti_cnf/www.hsbc.co.uk/MySecurity.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; AOL-IDSol 4.1.1 Fedora Core 3) FC3 KDE"
66.113.102.253 - - [25/Apr/2010:21:19:30 -0500] "GET /data/member/an/online.bankofamerica.com/boa/index.html HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Fedora Core 5) FC5 Gnome"
66.113.102.253 - - [25/Apr/2010:21:19:56 -0500] "GET /data/member/an/online.bankofamerica.com HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Fedora Core 5) FC5 KDE"
66.113.102.253 - - [25/Apr/2010:21:22:00 -0500] "GET /mig/gnu/online.bankofamerica.com/boa/index.html HTTP/1.1" 404 - "-" "Mozilla/6.0 (compatible; MSIE 7.01; Mac_PowerPC)"
66.113.102.253 - - [25/Apr/2010:21:22:02 -0500] "GET /extend/www.hsbc.co.uk HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Fedora Core 5) FC5 KDE"
66.113.102.253 - - [25/Apr/2010:21:28:10 -0500] "GET /mig/gnu/online.bankofamerica.com HTTP/1.1" 404 - "-" "JetBrains 4.0 Release Candidate 3"
66.113.102.253 - - [25/Apr/2010:21:28:55 -0500] "GET /css/_vti_cnf/www.hsbc.co.uk HTTP/1.1" 404 - "-" "JetBrains 3.1"
66.113.102.253 - - [25/Apr/2010:21:29:49 -0500] "GET /data/member/an/online.bankofamerica.com/boa/index.html HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/412 (KHTML, like Gecko) Safari/412"
66.113.102.253 - - [25/Apr/2010:21:30:08 -0500] "GET /data/member/an/online.bankofamerica.com HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/106.2 (KHTML, like Gecko) Safari/100.1"
66.113.102.253 - - [25/Apr/2010:21:38:36 -0500] "GET /mig/gnu/online.bankofamerica.com HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; fr-fr) AppleWebKit/312.5 (KHTML, like Gecko) Safari/312.3"
66.113.102.253 - - [25/Apr/2010:21:40:08 -0500] "GET /data/member/an/online.bankofamerica.com/boa/index.html HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Fedora Core 5) FC5 Gnome"
66.113.102.253 - - [25/Apr/2010:21:55:28 -0500] "GET /bbs/alliance-leicester.onlinebanking HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 4.01; Mac_PowerPC)"
66.113.102.253 - - [25/Apr/2010:21:55:40 -0500] "GET /adm/img/online.bankofamerica.com/boa/index.html HTTP/1.1" 404 - "-" "Mozilla/6.0 (compatible; MSIE 7.03; Windows ME) Opera 5.11 [en]"
66.113.102.253 - - [25/Apr/2010:21:55:48 -0500] "GET /xe/modules/point/schemas/news/online.bankofamerica.com HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/106.2 (KHTML, like Gecko) Safari/100.1"
66.113.102.253 - - [25/Apr/2010:22:04:00 -0500] "GET /css/_vti_cnf/www.hsbc.co.uk/IBlogin.html HTTP/1.1" 404 - "-" "Mozilla/6.0 (compatible; MSIE 7.01; AOL 9.0; Windows 98)"
66.113.102.253 - - [25/Apr/2010:22:08:36 -0500] "GET /bbs/alliance-leicester.onlinebanking HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Fedora Core 5) FC5 Gnome"
66.113.102.253 - - [25/Apr/2010:22:11:36 -0500] "GET /xe/modules/point/schemas/news/online.bankofamerica.com/boa/index.html HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; U; OpenVMS AlphaServer_ES40; en-US; rv:1.4) Gecko/20030826 SWB/V1.4 (HP)"
66.113.102.253 - - [25/Apr/2010:22:13:24 -0500] "GET /bbs/alliance-leicester.onlinebanking/mybank.Customer-login.php HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 4.01; Windows 95)"
66.113.102.253 - - [25/Apr/2010:22:15:59 -0500] "GET /css/_vti_cnf/www.hsbc.co.uk/IBlogin.html HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 4.01; AOL 4.0; Windows 98)"
66.113.102.253 - - [25/Apr/2010:22:18:59 -0500] "GET /css/_vti_cnf/www.hsbc.co.uk/MySecurity.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/106.2 (KHTML, like Gecko) Safari/100.1"
66.113.102.253 - - [25/Apr/2010:22:22:25 -0500] "GET /mig/gnu/online.bankofamerica.com/boa/index.html HTTP/1.1" 404 - "-" "Mozilla/6.0 (compatible; MSIE 7.01; Mac_PowerPC)"
66.113.102.253 - - [25/Apr/2010:22:22:27 -0500] "GET /extend/www.hsbc.co.uk HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1"
66.113.102.253 - - [25/Apr/2010:22:26:32 -0500] "GET /css/_vti_cnf/www.hsbc.co.uk/IBlogin.html HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; MSN Companion 2.0; 800x600; Compaq)"
66.113.102.253 - - [25/Apr/2010:22:29:22 -0500] "GET /css/_vti_cnf/www.hsbc.co.uk HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/74 (KHTML, like Gecko) Safari/74"
80.179.69.211 - - [25/Apr/2010:21:23:37 -0500] "GET /adm/img/online.bankofamerica.com/boa/index.html HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)"