{"id":5972,"date":"2016-05-26T13:01:46","date_gmt":"2016-05-26T04:01:46","guid":{"rendered":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/?p=5972"},"modified":"2016-05-26T13:01:46","modified_gmt":"2016-05-26T04:01:46","slug":"%e8%be%9e%e6%9b%b8%e6%94%bb%e6%92%83","status":"publish","type":"post","link":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/?p=5972","title":{"rendered":"\u8f9e\u66f8\u653b\u6483"},"content":{"rendered":"

先日，サーバーに高負荷がかかっていることに気がつきました．調べてみると，連続的にこのWordPressにログインしようとしています．クラックした，ユーザーとパスワードの組み合わせを連続して試みる辞書攻撃です．<\/p>\n

IPv4のIPアドレスをブロックしたら，IPv6で攻撃を続けてきます．はじめてIPv6をブロックしました．<\/p>\n

今月，1,000回以上，ログインをかけてきた回数とIPアドレスは次の通りです．<\/p>\n

\"ukattacker<\/p>\n

195から始まるもの以外はすべてウクライナの同一人物（またはグループ）と思われます．<\/p>\n

昔は辞書には1,000以上のユーザー\/パスワードの組み合わせがある，といわれてましたが，今は一桁多いようです．<\/p>\n

追記<\/h2>\n

2002::\/16は，6to4というIPv6 <-> IPv4をリレーするためのアドレスだそうです1<\/a><\/sup>しかるべき変換ルーターを介している．<\/span>．<\/p>\n

5b c8 c 84は，91.200.12.132です．<\/p>\n

いろいろ，手間のかかることをしてきやがります^^;;<\/p>\n","protected":false},"excerpt":{"rendered":"

\u5148\u65e5\uff0c\u30b5\u30fc\u30d0\u30fc\u306b\u9ad8\u8ca0\u8377\u304c\u304b\u304b\u3063\u3066\u3044\u308b\u3053\u3068\u306b\u6c17\u304c\u3064\u304d\u307e\u3057\u305f\uff0e\u8abf\u3079\u3066\u307f\u308b\u3068\uff0c\u9023\u7d9a\u7684\u306b\u3053\u306eWordPress\u306b\u30ed\u30b0\u30a4\u30f3\u3057\u3088\u3046\u3068\u3057\u3066\u3044\u307e\u3059\uff0e\u30af\u30e9\u30c3\u30af\u3057\u305f\uff0c\u30e6\u30fc\u30b6\u30fc\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u7d44\u307f\u5408\u308f\u305b\u3092\u9023\u7d9a\u3057\u3066\u8a66\u307f\u308b\u8f9e\u66f8\u653b\u6483\u3067\u3059\uff0e IPv4\u306eIP\u30a2\u30c9\u30ec\u30b9\u3092\u30d6\u30ed\u30c3\u30af\u3057\u305f\u3089\uff0cIPv6\u3067\u653b\u6483\u3092\u7d9a\u3051\u3066\u304d\u307e\u3059\uff0e\u306f\u3058\u3081\u3066IPv6\u3092\u30d6\u30ed\u30c3\u30af\u3057\u307e\u3057\u305f\uff0e \u4eca\u6708\uff0c1,000\u56de\u4ee5\u4e0a\uff0c\u30ed\u30b0\u30a4\u30f3\u3092\u304b\u3051\u3066\u304d\u305f\u56de\u6570\u3068IP\u30a2\u30c9\u30ec\u30b9\u306f\u6b21\u306e\u901a\u308a\u3067\u3059\uff0e 195\u304b\u3089\u59cb\u307e\u308b\u3082\u306e\u4ee5\u5916\u306f\u3059\u3079\u3066\u30a6\u30af\u30e9\u30a4\u30ca\u306e\u540c\u4e00\u4eba\u7269\uff08\u307e\u305f\u306f\u30b0\u30eb\u30fc\u30d7\uff09\u3068\u601d\u308f\u308c\u307e\u3059\uff0e \u6614\u306f\u8f9e\u66f8\u306b\u306f1,000\u4ee5\u4e0a\u306e\u30e6\u30fc\u30b6\u30fc\/\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u7d44\u307f\u5408\u308f\u305b\u304c\u3042\u308b\uff0c\u3068\u3044\u308f\u308c\u3066\u307e\u3057\u305f\u304c\uff0c\u4eca\u306f\u4e00\u6841\u591a\u3044\u3088\u3046\u3067\u3059\uff0e \u8ffd\u8a18 2002::\/16\u306f\uff0c6to4\u3068\u3044\u3046IPv6 <-> IPv4\u3092\u30ea\u30ec\u30fc\u3059\u308b\u305f\u3081\u306e\u30a2\u30c9\u30ec\u30b9\u3060\u305d\u3046\u3067\u3059\uff0e 5b c8 c 84\u306f\uff0c91.200.12.132\u3067\u3059\uff0e \u3044\u308d\u3044\u308d\uff0c\u624b\u9593\u306e\u304b\u304b\u308b\u3053\u3068\u3092\u3057\u3066\u304d\u3084\u304c\u308a\u307e\u3059^^;;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_daextam_enable_autolinks":"","footnotes":""},"categories":[10],"tags":[150,239,240,445,474],"class_list":["post-5972","post","type-post","status-publish","format-standard","hentry","category-network","tag-dictionary-attack","tag-ipv4","tag-ipv6","tag-ukraine","tag-wordpress"],"publishpress_future_action":{"enabled":false,"date":"2026-04-18 18:36:39","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/posts\/5972","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5972"}],"version-history":[{"count":0,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=\/wp\/v2\/posts\/5972\/revisions"}],"wp:attachment":[{"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5972"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5972"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/je1sgh.mydns.jp\/je1sghblog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5972"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}