不正なSIP着信 56
Published: 2012/07/03
あいかわらずのSIPサーバーへの攻撃の5,6月分です。
多いのは多いのですが、以前と違って新規に作ったHoneypotの中で無視されつづけているパターンがでてきたので、その条件を探る必要が出てきました。
| IP | name | AS | AS Name | Country | Count |
|---|---|---|---|---|---|
| 213.221.6.242 | NONE | 3216 | SOVAM-AS_OJSC__Vimpelcom_ | RU | 2 |
| 117.21.127.40 | NONE | 4134 | CHINANET-BACKBONE_No.31Jin-rong_Street | CN | 2 |
| 124.117.245.210 | NONE | 4134 | CHINANET-BACKBONE_No.31Jin-rong_Street | CN | 1 |
| 218.75.120.12 | NONE | 4134 | CHINANET-BACKBONE_No.31Jin-rong_Street | CN | 2 |
| 58.32.208.27 | NONE | 4812 | CHINANET-SH-AP_China_Telecom_(Group) | CN | 13546 |
| 122.49.14.122 | NONE | 4847 | CNIX-AP_China_Networks_Inter-Exchange | CN | 4458 |
| 212.26.74.17 | NONE | 8895 | ISU-RUH_King_Abdul_Aziz_City_for_Science_and_Technology | SA | 13546 |
| 88.190.11.200 | www.riskvaluations.com. | 12322 | PROXAD_Free_SAS | FR | 20907 |
| 88.191.98.194 | sd-16878.dedibox.fr. | 12322 | PROXAD_Free_SAS | FR | 2 |
| 188.161.92.178 | NONE | 12975 | PALTEL-AS_PALTEL_Autonomous_System | PS | 2 |
| 37.8.38.9 | NONE | 15975 | HADARA-AS_Hadara_Technologies_Private_Shareholding_Company | PS | 2 |
| 37.8.52.246 | NONE | 15975 | HADARA-AS_Hadara_Technologies_Private_Shareholding_Company | PS | 10 |
| 37.8.62.209 | NONE | 15975 | HADARA-AS_Hadara_Technologies_Private_Shareholding_Company | PS | 38 |
| 46.165.193.31 | NONE | 16265 | LEASEWEB_LeaseWeb_B.V. | DE | 2 |
| 203.196.176.230 | doyensys.com. | 17820 | DIL-AP_DIRECT_INTERNET_LTD. | IN | 6512 |
| 93.187.20.162 | NONE | 19855 | ASN-MASERGY-US_Masergy_US_Autonomous_System | GB | 2 |
| 108.170.39.138 | NONE | 20454 | SSASN2_-_SECURED_SERVERS_LLC | US | 8119 |
| 108.59.12.154 | NONE | 30633 | LEASEWEB-US_-_Leaseweb_USA_Inc. | US | 1 |
| 108.59.12.24 | NONE | 30633 | LEASEWEB-US_-_Leaseweb_USA_Inc. | US | 2 |
| 108.59.9.101 | NONE | 30633 | LEASEWEB-US_-_Leaseweb_USA_Inc. | US | 2 |
| 37.58.66.67 | 37.58.66.67-static.reverse.softlayer.com. | 36351 | SOFTLAYER_-_SoftLayer_Technologies_Inc. | US | 28482 |
| 37.58.89.212 | 37.58.89.212-static.reverse.softlayer.com. | 36351 | SOFTLAYER_-_SoftLayer_Technologies_Inc. | EG | 68689 |
| 109.108.248.199 | cpe-109-108-248-199.enet.vn.ua. | 49223 | EVEREST-ASEverestBroadcasting_Company_Ltd | UA | 6 |
| 164.40.147.100 | 164.40.147.100.reverse.gogrid.com. | 198220 | GOGRID_GoGrid_LLC | NL | 2 |
by jyake