不正なSIP着信 from Amazon EC2

このようなブルートフォースが50〜70Req/sで届きます。継続時間は数分間ですが。

  Registration from '"market"<sip:market@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"113"<sip:113@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"server"<sip:server@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"114"<sip:114@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"spam"<sip:spam@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"115"<sip:115@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"user"<sip:user@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"116"<sip:116@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"data"<sip:data@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"117"<sip:117@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"cpanel"<sip:cpanel@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"202" <sip:202@x.x.x.x>' failed for '174.129.117.109' - Wrong password 
  Registration from '"202" <sip:202@x.x.x.x>' failed for '174.129.117.109' - Wrong password 
  Registration from '"202" <sip:202@x.x.x.x>' failed for '174.129.117.109' - Wrong password 
  Registration from '"202" <sip:202@x.x.x.x>' failed for '174.129.117.109' - Wrong password 
  Registration from '"202" <sip:202@x.x.x.x>' failed for '174.129.117.109' - Wrong password 
  Registration from '"202" <sip:202@x.x.x.x>' failed for '174.129.117.109' - Wrong password 
  Registration from '"202" <sip:202@x.x.x.x>' failed for '174.129.117.109' - Wrong password 
  Registration from '"202" <sip:202@x.x.x.x>' failed for '174.129.117.109' - Wrong password 
  Registration from '"202" <sip:202@x.x.x.x>' failed for '174.129.117.109' - Wrong password 
  Registration from '"6111"<sip:6111@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"6112"<sip:6112@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"6113"<sip:6113@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"6114"<sip:6114@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 
  Registration from '"6115"<sip:6115@x.x.x.x>' failed for '174.129.117.109' - Username/auth name mismatch 

送信元はタイムリーな昨日の記事のAmazon EC2です。

 OrgName:    Amazon.com, Inc. 
 OrgID:      AMAZO-4
 Address:    Amazon Web Services, Elastic Compute Cloud, EC2
 Address:    1200 12th Avenue South
 City:       Seattle
 StateProv:  WA
 PostalCode: 98144
 Country:    US
 
 NetRange:   174.129.0.0 - 174.129.255.255 
 CIDR:       174.129.0.0/16 
 NetName:    AMAZON-EC2-5

[カテゴリ:IP電話観察日記]

by jyake