WordPressで絶対使ってはいけないユーザー名の1位:admin、2位:ドメイン名、3位:administrator

by 管理者
7月 06日 2013 年

159個のIPアドレスからログインパスワードの総当たり攻撃(ブルートフォースアタック)を受けたときのアクセスログです。

パスワードの総当たり攻撃のアクセスログ

 

私のサイトはこの攻撃を想定して、数回のログインを失敗すると短時間ログイン画面をロックアウトし、さらにそれを何度か繰り返すと長時間に及ぶロックアウトにエスカレーションします。

そしてそのトラップの引っかかったサイトのIPアドレスを掲載します。

 

これをみると、約8割がユーザー名:admin、残りの2割がドメイン名(例えばあなたのサイトがhoge.example.comの場合、hoge.exampleとかexample)で無差別攻撃しているのが分かります。

さらにIPアドレスを調査すると、国際色豊かですが、意外なことに日本のIPアドレス(赤字)も有りました。

これをみると、Wordpressのユーザー名に「admin」を使うのは論外ですが、同様にドメイン名も危険なので止めた方が良いでしょう。

 

以下のログはWordpressのプラグイン、Limit Login Attemptsでパスワードを規定回数間違えて記録されたログです。

まだ、Limit Login Attemptsを導入していなければ、ブルートフォースアタックを防ぐために入れた方が良いと思います。

178.151.216.53 admin (1 lockout)
116.70.155.177 admin (1 lockout), {domain} (1 lockout)
114.187.68.220 admin (7 lockouts), {domain} (2 lockouts)
125.196.157.28 admin (1 lockout)
126.43.103.137 admin (2 lockouts)
120.60.140.166 admin (1 lockout)
58.11.135.111 admin (1 lockout)
110.168.119.246 admin (1 lockout)
171.96.25.91 admin (1 lockout)
125.15.40.43 admin (1 lockout)
58.9.59.191 admin (1 lockout)
122.102.233.91 admin (1 lockout)
31.192.16.226 admin (3 lockouts)
190.183.224.253 admin (2 lockouts)
49.48.246.151 admin (2 lockouts)
112.208.98.182 admin (2 lockouts)
42.116.189.151 admin (1 lockout)
58.9.174.71 admin (1 lockout)
182.168.236.115 admin (1 lockout)
49.129.72.199 admin (1 lockout)
122.220.255.199 admin (1 lockout)
189.225.129.63 admin (1 lockout)
190.42.128.134 admin (1 lockout)
202.79.157.70 admin (2 lockouts)
78.166.146.253 admin (1 lockout)
177.0.55.22 admin (1 lockout)
187.107.13.37 admin (1 lockout)
85.103.199.39 admin (1 lockout)
95.69.185.246 admin (3 lockouts)
91.103.29.238 admin (5 lockouts)
27.142.44.232 admin (4 lockouts), {domain} (1 lockout)
210.147.180.171 admin (1 lockout)
126.6.176.208 admin (1 lockout), {domain} (1 lockout)
111.93.180.66 admin (1 lockout)
124.122.96.69 admin (2 lockouts)
78.166.170.156 admin (1 lockout)
114.156.16.181 admin (1 lockout)
46.160.94.252 {domain} (1 lockout)
2.135.48.69 it.trend-ai (1 lockout), admin (1 lockout)
39.41.76.16 {domain} (1 lockout)
58.8.194.243 it.trend-ai (1 lockout), admin (2 lockouts)
202.55.191.35 it.trend-ai (1 lockout)
27.3.140.193 {domain} (1 lockout)
77.47.132.25 admin (1 lockout)
197.7.28.197 admin (1 lockout)
126.12.145.146 admin (1 lockout)
122.154.28.178 admin (1 lockout)
110.78.147.154 admin (1 lockout)
41.99.77.19 admin (1 lockout)
197.78.141.111 admin (1 lockout)
200.79.132.153 admin (1 lockout)
212.252.194.54 admin (1 lockout)
124.6.181.167 admin (1 lockout)
110.77.231.113 admin (1 lockout)
37.236.140.47 admin (1 lockout)
202.14.87.157 admin (1 lockout)
202.21.105.13 admin (1 lockout)
190.218.168.175 admin (1 lockout)
202.28.78.139 admin (1 lockout)
193.31.206.154 admin (1 lockout)
84.229.49.47 admin (1 lockout)
124.121.226.106 it.trend-ai (1 lockout), admin (1 lockout)
178.131.57.28 admin (1 lockout)
58.9.218.213 admin (1 lockout)
2.147.129.219 admin (1 lockout)
82.200.205.101 it.trend-ai (1 lockout), admin (1 lockout)
190.214.25.244 it.trend-ai (1 lockout)
175.139.134.113 it.trend-ai (1 lockout)
151.244.7.65 it.trend-ai (1 lockout)
110.170.4.50 it.trend-ai (1 lockout)
193.31.200.155 it.trend-ai (1 lockout)
180.146.118.2 admin (2 lockouts)
112.208.39.17 admin (1 lockout)
197.251.167.139 admin (1 lockout)
133.37.209.103 admin (3 lockouts)
202.29.239.117 admin (1 lockout)
39.48.121.252 admin (1 lockout)
201.141.36.212 admin (1 lockout)
42.116.174.28 admin (1 lockout)
182.182.106.52 admin (1 lockout)
93.173.245.96 admin (1 lockout)
113.166.46.177 admin (1 lockout)
78.188.62.25 admin (1 lockout)
105.168.7.201 admin (1 lockout)
79.182.102.147 admin (1 lockout)
85.154.86.73 admin (1 lockout)
182.93.213.121 admin (1 lockout)
113.53.61.228 admin (1 lockout)
121.97.121.89 admin (1 lockout)
58.11.135.83 admin (1 lockout)
126.119.162.190 admin (1 lockout)
122.3.199.152 admin (1 lockout)
187.199.174.137 admin (1 lockout)
1.179.148.9 admin (1 lockout)
139.190.208.154 admin (1 lockout)
180.183.161.96 admin (2 lockouts), it.trend-ai (1 lockout)
171.4.113.187 {domain} (1 lockout), admin (1 lockout)
182.178.233.55 admin (1 lockout)
37.150.236.182 admin (1 lockout)
210.174.2.150 admin (1 lockout)
41.86.151.158 admin (1 lockout)
147.30.184.225 admin (1 lockout)
41.221.105.92 admin (1 lockout)
217.15.126.2 admin (1 lockout)
2.132.70.206 admin (1 lockout)
188.159.18.51 admin (1 lockout)
171.5.199.181 admin (1 lockout)
2.133.66.132 admin (1 lockout)
41.57.82.12 it.trend-ai (1 lockout)
41.215.149.137 admin (1 lockout)
88.204.239.58 admin (1 lockout)
37.236.114.64 it.trend-ai (1 lockout)
203.215.65.198 it.trend-ai (1 lockout), admin (1 lockout)
186.46.154.109 admin (1 lockout)
201.51.155.33 {domain} (1 lockout)
115.31.19.88 admin (1 lockout)
109.67.15.67 admin (1 lockout)
42.119.224.187 admin (1 lockout)
203.100.215.44 admin (1 lockout)
190.37.107.115 admin (1 lockout)
181.64.138.157 admin (1 lockout)
106.147.69.99 admin (1 lockout)
186.101.201.105 admin (2 lockouts)
124.6.181.182 admin (1 lockout)
186.44.180.180 admin (1 lockout)
189.18.241.180 admin (1 lockout)
218.103.91.245 admin (2 lockouts)
190.238.26.213 admin (1 lockout)
190.131.176.27 admin (1 lockout)
190.37.239.121 admin (1 lockout)
78.168.17.102 admin (1 lockout)
189.135.186.170 admin (1 lockout)
201.240.219.49 admin (1 lockout)
217.165.128.124 admin (1 lockout)
189.231.8.163 admin (1 lockout)
223.204.9.207 admin (1 lockout)
187.153.194.77 admin (1 lockout)
41.188.104.129 admin (1 lockout)
186.101.151.201 it.trend-ai (1 lockout), admin (1 lockout)
122.196.199.165 {domain} (1 lockout), admin (1 lockout)
113.53.253.115 it.trend-ai (1 lockout), admin (1 lockout)
114.159.240.111 {domain} (1 lockout)
201.141.48.84 admin (1 lockout)
189.114.54.226 admin (1 lockout)
91.140.186.226 admin (1 lockout)
190.214.201.83 admin (1 lockout)
153.131.87.165 admin (1 lockout)
185.21.120.43 it.trend-ai (1 lockout)
186.3.15.10 admin (1 lockout)
27.142.134.114 admin (1 lockout)
177.107.32.78 admin (1 lockout)
115.37.232.206 admin (1 lockout)
200.110.77.39 admin (1 lockout)
151.244.1.252 admin (1 lockout)
189.231.20.217 admin (1 lockout)
41.98.113.241 admin (1 lockout)
189.54.41.127 admin (1 lockout)
217.76.69.123 admin (1 lockout)
112.209.132.72 admin (1 lockout)

 

別のサイト

178.151.216.53 admin (1 lockout)
94.72.87.134 lifestyle.trend-ai (1 lockout)
190.73.195.229 lifestyle.trend-ai (1 lockout)
217.118.79.22 lifestyle.trend-ai (1 lockout)
112.198.79.27 lifestyle.trend-ai (1 lockout)
201.157.4.22 lifestyle.trend-ai (1 lockout)
173.12.49.27 lifestyle.trend-ai (1 lockout)
94.74.143.198 lifestyle.trend-ai (1 lockout)
176.222.189.90 lifestyle.trend-ai (1 lockout)
203.114.107.6 administrator (1 lockout)
190.254.91.42 lifestyle.trend-ai (1 lockout)
118.174.147.197 administrator (1 lockout)
212.76.25.38 lifestyle.trend-ai (1 lockout)
27.3.64.159 lifestyle.trend-ai (1 lockout)
89.123.27.131 admin (1 lockout)
37.191.68.72 lifestyle.trend-ai (1 lockout)
41.107.239.166 lifestyle.trend-ai (1 lockout)
190.155.1.187 administrator (1 lockout)
187.207.3.217 lifestyle.trend-ai (1 lockout)
118.175.153.228 administrator (1 lockout)
188.159.143.57 lifestyle.trend-ai (3 lockouts)
58.26.127.143 administrator (1 lockout)
190.118.69.100 lifestyle.trend-ai (1 lockout)
2.187.114.216 lifestyle.trend-ai (1 lockout)
190.234.181.223 administrator (1 lockout)
212.112.119.35 lifestyle.trend-ai (1 lockout)
190.72.14.218 lifestyle.trend-ai (1 lockout)
95.58.125.58 administrator (1 lockout)
111.223.97.130 administrator (2 lockouts)
190.5.60.139 administrator (1 lockout)
2.187.50.129 lifestyle.trend-ai (1 lockout)
202.58.85.15 lifestyle.trend-ai (1 lockout)
202.126.89.177 administrator (1 lockout)
120.61.13.178 lifestyle.trend-ai (1 lockout)
92.46.227.41 administrator (1 lockout)
173.76.247.81 administrator (1 lockout)
186.5.31.36 lifestyle.trend-ai (3 lockouts)
2.179.101.9 lifestyle.trend-ai (1 lockout)
101.51.230.240 lifestyle.trend-ai (1 lockout)
2.187.99.67 administrator (1 lockout)
139.190.26.226 lifestyle.trend-ai (1 lockout)
2.51.4.78 lifestyle.trend-ai (1 lockout)
207.61.86.5 lifestyle.trend-ai (1 lockout)
114.79.1.218 lifestyle.trend-ai (1 lockout)

 

この記事へのトラックバックURL