2013/9/22 日曜日

Organized Network Attack(2013.9)

Filed under: ネット情報の社会へのインパクト — mizusawa @ 16:17:08

Tiny web server in Japan has persistent and so many attacks. So I list IP addresses of step stone web servers. Please be sure these IP administrators to eliminate relaying or sending attacks. I will add coming new IP addresses day by day when I check my routers.
Probably IP addresses listed here is controlled by a single organization. The record is only a part of actual source IP addresses identified this September. It changes attacking source addresses from one to another. The operation to change source addresses seems work automatically. The attacker has hundreds of available step stone web servers. I hope the listing helps you to protect your web servers.
178.33.48.139
179.144.89.200
198.27.103.133
213.213.193.76
218.214.18.155
41.105.46.20
5.231.55.48
50.29.144.207
54.232.237.118
65.52.24.110
66.91.37.149
69.42.221.44
71.23.172.106
74.88.33.184
75.126.43.207
76.94.154.13
78.123.25.11
84.100.13.206
84.37.93.134
90.58.182.220
90.199.36.70
94.229.163.144
96.32.1.195
99.182.0.93

2013/9/1 日曜日

怪しいメール

Filed under: ネット情報の社会へのインパクト — mizusawa @ 11:00:17

Australian Taxation Office を名乗って、怪しいメールが送られてきた。件名は次のようになっている。
TAX REFUND ID: AU381716209-ATO
文章は全て英語で税金の還付があるという。オーストラリアに旅行したことがあればこのメールに引っかかるかも知れない。
添付圧縮ファイルもついている。これを解凍すると攻撃者の罠にはまると考えそのまま廃棄することとした。TaxRefund.Confidential.Message.zip
この怪しいメールは英語のフォントに特色がある。株式投資を勧誘するSPAMメールと同じフォントだ。皆さんご注意を!

TAX RETURN FOR THE YEAR 2012
RECALCULATION OF YOUR TAX REFUND
ATO 2012
LOCAL OFFICE No. 3819
TAX CREDIT OFFICER: Andrew John
TAX REFUND ID NUMBER: 381716209
REFUND AMOUNT: 244.79 AUD

Dear Applicant,

The contents of this email and any attachments are confidential
and as
applicable, copyright in these is reserved to ATO & Customs.
Unless expressly authorised by us, any further dissemination or
distribution of this email or its attachments is prohibited.

If you are not the intended recipient of this email, please reply
to
inform us that you have received this email in error and then
delete it
without retaining any copy.

I am sending this email to announce: After the last annual
calculation of
your fiscal activity we have determined that you are eligible to
receive a
tax refund of 244.79 AUD

You have attached the tax return form with the TAX REFUND NUMBER
ID: 381716219,
complete the tax return form attached to this message.

After completing the form, please submit the form by clicking the
SUBMIT
button on form and allow us 5-9 business days in order to process
it.

Our head office address can be found on our web site at ATO &
Customs: http://www.ato.gov.au/

Sincerely,

Andrew John,
ATO Australian Taxation Office
Preston
TAX REFUND ID: AU381716209-ATO

ゥ Copyright 2013, ATO & Customs AU All rights reserved.

HTML convert time: 5.884 sec. Powered by WordPress ME