/var/log/secure 不正アクセス

いわゆる辞書攻撃。ポートが空いていると見るや否や攻撃を仕掛けてくる悪い人。どうも中国・韓国に多いようですよ？

• 摘出コマンド

# grep Failed /var/log/secure

アクセス権限のあるユーザーのパスワードがユーザー名と同じだったりすると即効で乗っ取られます。

今週アクセスしてきたのは、以下の方々。

 192.70.34.3
 211.192.25.167
 61.218.26.76
 211.218.126.160
 165.76.0.141
 61.100.12.125
 213.197.247.233

IPで繋ぎに行くと、フィッシングっぽいページに飛ばされます。
間違っても使用中のアカウント/パスワードを入れたりしないでね！！

以下はユーザー名のログ

__LOG__
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z
aa
bb
cc
dd
ee
ff
gg
hh
ii
jj
kk
ll
mm
nn
oo
pp
qq
rr
ss
tt
uu
vv
ww
xx
yy
zz
su
bind
test
user
admin
administrator
transfer
alexander
alexandre
michael
mike
john
scp
sgi
php
guest
angel
winamp
cristian
no
victor
bianca
larisa
sharon
tom
text
document
flood
edu
rich
microsoft
original
alin
smart
start
prueba
nero
sony
nokia
samsung
fast
furious
shop
candy
nasa
ready
love
affection
president
joe
music
play
dark
master
login
nice
english
win
windows
invite
bill
gates
sugar
frequency
next
gregorian
sean
paul
seanpaul
com
moment
natural
peace
fbi
beast
thebeast
silence
chat
dcc
hate
sientelo
nova
player
baby
babyboy
foryou
hades
zeus
atena
hera
boy
girl
path
god
good
american
world
burn
loveme
loveyou
simona
erika
monika
team
deep
inside
in
out
office1
office
server
server1
shell
force
city
contry
vritney
jenna
track
webserver
web
bear
linkinpark
metallica
yahoo
google
trance
united
kingdom
france
colt
coltnet
www
net
gov
org
internet
email
irc
trust
information
compact
cdrom
procesor
viteo
zipdrive
zip
ace
rar
winrar
winace
winzip
ssh
telnet
freedom
1234
euro
creditcard
visa
virtual
eternity
traxdata
pleomax
cellphone
try
gotit
nologin
adapter
cable
bed
nivea
kamill
future
smith
jones
tim
usually
always
sometimes
nornally
often
believe
forget
hear
remember
seen
want
wish
susan
mary
peter
england
compas
webadmin
webadministrator
resolvando
grete
emma
putty
pamela
sidney
sheldon
info
whois
silent
ignore
mirc
thor
poseidon
jedy
starwars
starcraft
ra
webdesign
java
c++
visualc
basic
fortran
deviant
jenny
jenni
jennyfer
tyff
tyffany
mech
emech
weboperator
webdesigner
kid
stupid
badboy
missyou
eggdrop
cgi
educational
babygirl
bruce
stone
catherine
pentium
pentium1
pentium2
pentium3
pentium4
intel
pentiumI
pentriumII
pentriumIII
pentiumIV
linux
miha
simon
andrej
jure
jaka
sandi
saso
temp
matej
oracle
testuser
adam
arl
jeff
mailer
mailtest
rooot
jason
www-data
wwwrun
ftpuser
sysadmin
unix
rje
demo
sysbin
utmp
xterm
smtp
sy
systat
fun
wheel
database
support
roxen
phttpd
thttpd
filepro
alex
alice
httpd
backup
sales
resin
andrew
trial
calendar
poq
pgsql
richard
chris
adonis
ahile
baltazar
basil
bartolomeu
beatrice
bella
bran
wilson
denis
sarah
camil
carol
carla
cecilia
carolina
cezar
celia
dan
david
denisa
daniel
damian
edi
eduard
eliza
ema
luiza
emanuel
eric
erica
ernest
fabian
felicia
antonio
kurt
filip
felix
francisc
frederic
gabriel
geta
george
geo
gina
helen
helena
homer
harold
hector
kev
kevin
iacob
ina
jan
joana
jean
jana
jeni
justin
isabel
iulian
alan
anastasia
angela
april
aron
apolo
arthur
aura
laura
claw
leo
lia
liana
lidia
lina
lisa
liza
lucian
mara
manuel
magdalena
maria
naric
nic
natalia
nistor
nina
olga
oliver
rafael
raisa
raul
regina
remus
robert
rebeca
roger
romeo
rudolf
roza
dexter
valentin
violeta
vivi
walter
zoe
harry
ronald
radio
universal
usa
video
white
web1
web2
webiste
travel
tester
usr
trunk
test1
test2
testing
account
abuse
admin2
agent
boss
blue
best
buy
black
brand
client
corp
content
contact
coach
career
dibalo
download
complainst
emails
ftpadmin
family
encrypt
fire
fox
faq
pay
payment
payments
paypal
order
manager
market
mails
mailscanner
pics
power
sale
site
selling
seller
site1
site2
site3
sitetest
siteadm
service
services
spider
stage
spam
sailer
submit
staff
level
thomas
vince
willy
will
wallace
stuard
tony
ted
scott
sam
spencer
steve
ronaldo
robin
ray
raymond
rayman
roy
ron
ramon
roberts
ralph
robbie
roob
ryan
russell
russ
philip
nigel
nestor
oscar
nelly
neil
neo
max
mark
moses
mario
matt
martin
melvin
mitch
nathan
marin
morris
nicholas
monroe
mathew
matthew
leon
luis
laurence
larry
lars
keny
klaus
karl
kane
kenneth
keith
kelvin
jeffry
joey
joshua
austin
anthony
andy
anderson
anton
albert
bob
ben
brian
boby
bobby
barney
boris
benny
boyle
brett
bradley
brandon
bryan
chester
cyrus
clark
craig
cramer
colin
calvin
caesar
carlos
charlie
budd
dennis
deniel
dave
davis
edison
edd
eddy
darren
douglas
edmond
frank
fred
igor
ivan
job
jobs
jack
jay
jake
janderson
james
jacob
webmaster
wwwdata
data
sql
url
http
library
ftpd
username
password
install
umountfsys
sasha
var
randy
nick
trapper
stephen
toor
hacker
phreak
theo
country
free
list
proxy
horde
king
mega
donna
aaron
samuel
rachel
public
upload