■検知時刻2005-02-05 03:04:13 JST～2005-02-05 03:10:46 JST
■攻撃内容
SMBへのパスワードクラッキング行為
■送信元IPアドレス
200.106.168.105
■Whois
200.106.168.105
OrgName: Latin American and Caribbean IP address Regional Registry
OrgID: LACNIC
Address: Potosi 1517
City: Montevideo
StateProv:
PostalCode: 11500
Country: UY
ReferralServer: whois://whois.lacnic.net
NetRange: 200.0.0.0 - 200.255.255.255
CIDR: 200.0.0.0/8
NetName: LACNIC-200
NetHandle: NET-200-0-0-0-1
■２００５年２月５日
■攻撃元IPアドレスの一覧
61.134.62.4
61.185.28.41
61.254.65.136
62.150.64.53
68.193.101.224
81.156.165.76
172.145.106.19
200.106.168.105
202.247.73.202
203.63.212.34
211.109.177.3
211.154.104.159
211.178.66.12
211.214.227.69
218.6.150.236
218.75.110.233
220.118.91.1
220.130.185.231
221.8.32.108
221.161.231.251
222.15.118.24
222.74.96.20
222.109.104.178
222.115.103.42
222.124.1.66
222.183.68.8
222.183.70.185
222.212.197.232
222.222.253.162
222.223.212.144
222.223.213.88
222.223.219.187
222.223.224.2
222.223.228.228
222.241.212.40