cNotes 検索 一覧 カテゴリ

不正なSIP着信 56

Published: 2012/07/03

あいかわらずのSIPサーバーへの攻撃の5,6月分です。

多いのは多いのですが、以前と違って新規に作ったHoneypotの中で無視されつづけているパターンがでてきたので、その条件を探る必要が出てきました。

IPnameASAS NameCountryCount
213.221.6.242NONE3216SOVAM-AS_OJSC__Vimpelcom_RU2
117.21.127.40NONE4134CHINANET-BACKBONE_No.31Jin-rong_StreetCN2
124.117.245.210NONE4134CHINANET-BACKBONE_No.31Jin-rong_StreetCN1
218.75.120.12NONE4134CHINANET-BACKBONE_No.31Jin-rong_StreetCN2
58.32.208.27NONE4812CHINANET-SH-AP_China_Telecom_(Group)CN13546
122.49.14.122NONE4847CNIX-AP_China_Networks_Inter-ExchangeCN4458
212.26.74.17NONE8895ISU-RUH_King_Abdul_Aziz_City_for_Science_and_TechnologySA13546
88.190.11.200www.riskvaluations.com.12322PROXAD_Free_SASFR20907
88.191.98.194sd-16878.dedibox.fr.12322PROXAD_Free_SASFR2
188.161.92.178NONE12975PALTEL-AS_PALTEL_Autonomous_SystemPS2
37.8.38.9NONE15975HADARA-AS_Hadara_Technologies_Private_Shareholding_CompanyPS2
37.8.52.246NONE15975HADARA-AS_Hadara_Technologies_Private_Shareholding_CompanyPS10
37.8.62.209NONE15975HADARA-AS_Hadara_Technologies_Private_Shareholding_CompanyPS38
46.165.193.31NONE16265LEASEWEB_LeaseWeb_B.V.DE2
203.196.176.230doyensys.com.17820DIL-AP_DIRECT_INTERNET_LTD.IN6512
93.187.20.162NONE19855ASN-MASERGY-US_Masergy_US_Autonomous_SystemGB2
108.170.39.138NONE20454SSASN2_-_SECURED_SERVERS_LLCUS8119
108.59.12.154NONE30633LEASEWEB-US_-_Leaseweb_USA_Inc.US1
108.59.12.24NONE30633LEASEWEB-US_-_Leaseweb_USA_Inc.US2
108.59.9.101NONE30633LEASEWEB-US_-_Leaseweb_USA_Inc.US2
37.58.66.6737.58.66.67-static.reverse.softlayer.com.36351SOFTLAYER_-_SoftLayer_Technologies_Inc.US28482
37.58.89.21237.58.89.212-static.reverse.softlayer.com.36351SOFTLAYER_-_SoftLayer_Technologies_Inc.EG68689
109.108.248.199cpe-109-108-248-199.enet.vn.ua.49223EVEREST-ASEverestBroadcasting_Company_LtdUA6
164.40.147.100164.40.147.100.reverse.gogrid.com.198220GOGRID_GoGrid_LLCNL2

[カテゴリ:IP電話観察日記]

by jyake