文章作者:log0
原始出处:
http://onhacks.org信息来源:邪恶八进制信息安全团队(
www.eviloctal.com)
第一篇 @谁在入侵我的系统? ~”谁会理我” 是错的~0
利用 Nepenthes 收集资料好几天了,现在分享一些简单数据。因为我只用了一台机器,当然不能代表银行、企业及有价值名望的伺服器,但这可会是你电脑每天正在面对的。记住,我从来没有公开蜜罐地址,所以所有外来连线均是恶意的。
** Most Attacks Region **
[       Russian Federation] has 57 attacks on you.
[                   Taiwan] has 36 attacks on you.
[                   Brazil] has 32 attacks on you.
[                  Germany] has 21 attacks on you.
[            United States] has 20 attacks on you.
[                    Italy] has 16 attacks on you.
[                  Romania] has 15 attacks on you.
[           United Kingdom] has 14 attacks on you.
[       Korea, Republic of] has 13 attacks on you.
[                    India] has 11 attacks on you.
[                   Poland] has 10 attacks on you.
[              Philippines] has 10 attacks on you.
[                    Japan] has 10 attacks on you.
[                   Canada] has 9 attacks on you.
[                 Bulgaria] has 9 attacks on you.
[                  Hungary] has 8 attacks on you.
[                 Malaysia] has 8 attacks on you.
[                   France] has 6 attacks on you.
[                Argentina] has 6 attacks on you.
[                    China] has 6 attacks on you.
这是 七月十二日二零零九年。
俄罗斯的殭尸电脑数量可谓生化危机裡一样!居然一星期裡多次压倒性击到排行第二的地区。下一位,竟然是台湾(我真的没预想到)。下一个就是巴西,这个倒是很容易猜因为微软的第5份 SIR 裡的地区性有提到。下一个是德国呢,有点不可思议,有别于 Microsoft SIR 5th 裡的数据。总之,这还是不能用来概括世界的。
谨记,网络地址 (IP Address) 无边界。
** Most Visited Ports **
[  445] : 385
[  135] : 39
[  139] : 7
[   25] : 1
Port 445 和 Port 135 最多访客。似乎是:
Port 445 – MS04-011, 详看 
http://www.microsoft.com/technet/security/bulletin/ms04-011.mspxPort 135 -MS03-026, 又名 Blaster 暴风, 详看 
http://www.microsoft.com/technet/security/bulletin/MS03-026.mspx我还在分析这堆杂乱的数据,但以上是现在能分享的。
作者
“Log0″ 是一位电脑安全研究人员,我是针对蜜罐、网页安全及网络犯罪这方面的研究,并在 
http://onhacks.org 裡以 log0 的笔名撰写关于电脑安全的文章。
===
Reference / 參考 / 参考 / さんこう / Referencia / Referenz / Справка :
Microsoft Security Intelligence Report volume 5
Zombie Computer – Wikipedia
殭屍電腦 – 維基百科