今日は、メールサーバアタックされた!!


なんか、遅いしシステムがやたらと不安定な感じで
先ほどログインして確認してみると、アタックされまくりだった。

主たるアタック元

[:→赤:]IPアドレス
71.31.64.224

[:→赤:]Whois 情報
Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Domain Name: WINDSTREAM.NET
Registrar: TUCOWS.COM CO.
Whois Server: whois.tucows.com
Referral URL: http://domainhelp.opensrs.net
Name Server: NS1-AUTH.WINDSTREAM.NET
Name Server: NS2-AUTH.WINDSTREAM.NET
Name Server: NS3-AUTH.WINDSTREAM.NET
Name Server: NS4-AUTH.WINDSTREAM.NET
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 20-jan-2009
Creation Date: 01-mar-2002
Expiration Date: 01-mar-2014

>>> Last update of whois database: Thu, 01 Dec 2011 11:11:12 UTC <<<

[:→赤:]アタック手法 典型的な辞書攻撃です。

[:→赤:]アタックしてきたユーザ名を確認!

[root@]# cat maillog | grep “71.31.64.224” | awk ‘{ print $9 }’

user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rate
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.143
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.143
lip=183.181.165.143
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
lip=183.181.165.174
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.143
lip=183.181.165.143
user=,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
user=,
user=,
lip=183.181.165.174
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
lip=183.181.165.174
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.174
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
lip=183.181.165.174
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.143
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
lip=183.181.165.174
rip=71.31.64.224,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
user=,
user=,
user=,
rip=71.31.64.224,
user=,
user=,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.143
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.143
rip=71.31.64.224,
lip=183.181.165.174
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.174
user=,
user=,
user=,
user=,
user=,
lip=183.181.165.174
user=,
user=,
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.174
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.143
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.174
lip=183.181.165.143
lip=183.181.165.174
lip=183.181.165.174
lip=183.181.165.143
lip=183.181.165.174
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
lip=183.181.165.174
lip=183.181.165.143
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.143
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.143
rip=71.31.64.224,
lip=183.181.165.174
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.143
lip=183.181.165.143
lip=183.181.165.143
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.143
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.174
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.143
lip=183.181.165.143
user=,
user=,
user=,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.143
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
lip=183.181.165.174
lip=183.181.165.174
user=,
user=,
user=,
user=,
user=,
user=,
lip=183.181.165.143
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
user=,
rip=71.31.64.224,
lip=183.181.165.143
rip=71.31.64.224,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
user=,
user=,
rip=71.31.64.224,
rip=71.31.64.224,
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.174
lip=183.181.165.174
rip=71.31.64.224,
lip=183.181.165.174
user=,
user=

Related posts