不正アクセス解析スレ
From:Approved< [email protected] >
Reply-To:Approved< [email protected] >
To: [email protected] [email protected]
Subject:A CreditCardIsWaitingForYou! llCreditTypesWelcome!
Received:from [64.32.34.150] by hispeedmedia.com with ESMTP id **
Received:(qmail invoked by uid 6)
From [email protected]
This email was sent to you by, Hi-Speed Media Inc.,
a marketing partner of First PREMIER Bank, not from the Bank itself.
Please direct all concerns about this email or your inclusion on this list
to our email address listed above.
To unsubscribe from the Hi-Speed Media mailing list, please
enter your e-mail address above and click "REMOVE" or
click here.
To unsubscribe from the Offer888.com list,
visit http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/?e=
* To remove yourself from this mailing list, point your browser to:
http://i.mb00.net/remove?funnymoney
* Enter your email address ( [email protected] ) in the field
provided and click "Unsubscribe". The mailing list ID is "funnymoney".
hsmspecials.com (pri=0)
接続に失敗：ネットワークが混雑しているか、サーバが停止している可能性があります。
speeddeals.com (pri=0)
接続に失敗：ネットワークが混雑しているか、サーバが停止している可能性があります。
Reply-To:Approved< [email protected] >
To: [email protected] [email protected]
Subject:A CreditCardIsWaitingForYou! llCreditTypesWelcome!
Received:from [64.32.34.150] by hispeedmedia.com with ESMTP id **
Received:(qmail invoked by uid 6)
From [email protected]
This email was sent to you by, Hi-Speed Media Inc.,
a marketing partner of First PREMIER Bank, not from the Bank itself.
Please direct all concerns about this email or your inclusion on this list
to our email address listed above.
To unsubscribe from the Hi-Speed Media mailing list, please
enter your e-mail address above and click "REMOVE" or
click here.
To unsubscribe from the Offer888.com list,
visit http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/?e=
* To remove yourself from this mailing list, point your browser to:
http://i.mb00.net/remove?funnymoney
* Enter your email address ( [email protected] ) in the field
provided and click "Unsubscribe". The mailing list ID is "funnymoney".
hsmspecials.com (pri=0)
接続に失敗：ネットワークが混雑しているか、サーバが停止している可能性があります。
speeddeals.com (pri=0)
接続に失敗：ネットワークが混雑しているか、サーバが停止している可能性があります。
|
|
|
214 ：名無しさん＠お腹いっぱい。：02/05/17 20:24
>>213
お前何回もうざい。
お前何回もうざい。
215 ：名無しさん＠お腹いっぱい。：02/05/17 20:57
＞＞212
うーん、そーいうときは、何すればよいでしょう？（初心者版で聞くべき？スマソン）
うーん、そーいうときは、何すればよいでしょう？（初心者版で聞くべき？スマソン）
216 ：cheshire-cat：02/05/17 21:03
217 ：名無しさん＠お腹いっぱい。：02/05/17 22:00
馬鹿どもの隔離スレはこちらですか？
218 ：名無しさん＠お腹いっぱい。：02/05/17 23:05
日付: 2002/05/17 時刻: 22:55:58
ｱﾄﾞﾚｽ 211.191.238.190 からの不正侵入の試みを規則 NetBus ﾄﾛｲの木馬のﾃﾞﾌｫﾙﾄ遮断
によって検出しました｡
以降のｱｸｾｽを 30 分間遮断しました｡
しつこいよ。。。マジで。。。
ｱﾄﾞﾚｽ 211.191.238.190 からの不正侵入の試みを規則 NetBus ﾄﾛｲの木馬のﾃﾞﾌｫﾙﾄ遮断
によって検出しました｡
以降のｱｸｾｽを 30 分間遮断しました｡
しつこいよ。。。マジで。。。
219 ：第三者中継可能!!!!!!!!!!!!!!!!!!!!!!!!!!!!：02/05/18 00:11
>>217 おまい失礼だぞ
220 ：名無しさん＠お腹いっぱい。：02/05/18 00:25
63.51.99.142
221 ：名無しさん＠お腹いっぱい。：02/05/18 01:23
>>201
おお!!
とてもよくわかりました。目から鱗が落ちた気がします。
exploitとかでなく単純にWorld writableなanon-ftpサイトを
探していたのですね。
マクロ的に言えばある意味Warezな人たちにとってINTERNETが
超巨大なストレージになっているということだと思いますが、ミクロ的には
実害は余りないので、手の打ちようのない現実なのだと思いました。
感謝、感謝です。
おお!!
とてもよくわかりました。目から鱗が落ちた気がします。
exploitとかでなく単純にWorld writableなanon-ftpサイトを
探していたのですね。
マクロ的に言えばある意味Warezな人たちにとってINTERNETが
超巨大なストレージになっているということだと思いますが、ミクロ的には
実害は余りないので、手の打ちようのない現実なのだと思いました。
感謝、感謝です。
223 ：名無しさん＠お腹いっぱい。：02/05/18 02:47
203.83.71.232
香港からのお客さん。
やっぱ、中国系は日本嫌いが多いのかな？
香港からのお客さん。
やっぱ、中国系は日本嫌いが多いのかな？
224 ：名無しさん＠お腹いっぱい。：02/05/18 02:52
217.185.74.189
このひとさっきから３０回以上来るんですけど。
なんか恨みでもあるのかなあ？
ノートンが回線を３０分遮断してもそのあと懲りずに何度も来る。ちょっと調べたらヨーロッパからのお客さんってことだけはわかった。
このひとさっきから３０回以上来るんですけど。
なんか恨みでもあるのかなあ？
ノートンが回線を３０分遮断してもそのあと懲りずに何度も来る。ちょっと調べたらヨーロッパからのお客さんってことだけはわかった。
225 ： ：02/05/18 04:30
226 ：第三者中継可能!!!!!!!!!!!!!!!!!!!!!!!!!!!!：02/05/18 10:36
227 ：名無しさん＠お腹いっぱい。：02/05/18 10:41
HTTP経由でIRCに接続しようとしたアホ
62.211.221.36 - - [18/May/2002:06:24:15 +0900] "CONNECT 192.244.23.2:6667 HTTP/1.0"
200 7582
62.211.221.36 - - [18/May/2002:06:24:15 +0900] "CONNECT 192.244.23.2:6667 HTTP/1.0"
200 7582
228 ：名無しさん＠お腹いっぱい。：02/05/18 10:41
80にたくさんコマンド投げられた。
けど、生ＩＰ出てるし、踏み台？
38.pool2.dslosaka.att.ne.jp
けど、生ＩＰ出てるし、踏み台？
38.pool2.dslosaka.att.ne.jp
229 ：maki12maki：02/05/18 10:53
>>228
# nmap (V. 2.54BETA34) scan initiated Sat May 18 10:52:35 2002 as: nmap -v -sS -P0 -F -O -o test.txt 38.pool2.dslosaka.att.ne.jp
Interesting ports on 38.pool2.dslosaka.att.ne.jp (165.76.141.38):
(The 1093 ports scanned but not shown below are in state: closed)
Port State Service
25/tcp open smtp
80/tcp open http
135/tcp open loc-srv
139/tcp open netbios-ssn
443/tcp open https
1025/tcp open listen
1026/tcp open nterm
6666/tcp open irc-serv
7007/tcp open afs3-bos
Remote OS guesses: Windows Millennium Edition (Me), Win 2000, or WinXP, MS Windows2000 Professional RC1/W2K Advance Server Beta3
TCP Sequence Prediction: Class=random positive increments
Difficulty=101669 (Good luck!)
IPID Sequence Generation: Busy server or unknown class
# Nmap run completed at Sat May 18 10:52:41 2002 -- 1 IP address (1 host up) scanned in 6 seconds
# nmap (V. 2.54BETA34) scan initiated Sat May 18 10:52:35 2002 as: nmap -v -sS -P0 -F -O -o test.txt 38.pool2.dslosaka.att.ne.jp
Interesting ports on 38.pool2.dslosaka.att.ne.jp (165.76.141.38):
(The 1093 ports scanned but not shown below are in state: closed)
Port State Service
25/tcp open smtp
80/tcp open http
135/tcp open loc-srv
139/tcp open netbios-ssn
443/tcp open https
1025/tcp open listen
1026/tcp open nterm
6666/tcp open irc-serv
7007/tcp open afs3-bos
Remote OS guesses: Windows Millennium Edition (Me), Win 2000, or WinXP, MS Windows2000 Professional RC1/W2K Advance Server Beta3
TCP Sequence Prediction: Class=random positive increments
Difficulty=101669 (Good luck!)
IPID Sequence Generation: Busy server or unknown class
# Nmap run completed at Sat May 18 10:52:41 2002 -- 1 IP address (1 host up) scanned in 6 seconds
230 ： ：02/05/18 11:01
231 ：ハテナくん：02/05/18 11:24
攻撃内容ってどうやって調べるんですか？
あと"LiveUpDateを見たら...."とは？？？
あと"LiveUpDateを見たら...."とは？？？
232 ： ：02/05/18 12:20
>>227
(ﾟДﾟ)ﾊｧ?
(ﾟДﾟ)ﾊｧ?
233 ： ：02/05/18 13:00
From:"APA"< [email protected] >
Reply-To: [email protected]
To: [email protected] [email protected]
[email protected]
Subject:You're alreadyApproved
Received:froml3.3web45.com([66.185.166.27]) by *.com
with Microsoft SMTPSVC(5.0.2195.4905)
Received:(qmailinvoked by uid 7)
Message-ID:< [email protected] >
Return-Path: [email protected]
ClickforMail never sends unsolicited email. You have received this message because you
registered with ClickforMail OR one of our carefully selected marketing partners.
If you no longer wish to receive these offers, please follow the instructions
at the bottom of this message.
Do You Meet These Criteria?
Live in the United States?
Have a Social Security Number?
18 Years of Age or Older?
Have a Valid Checking or Savings Account?
Have Valid Job or other Income of at Least $750.00/month?
Have a Home Phone Number?
No Pending Bankruptcy?
No current delinquencies in past 60 days?
If you answered YES to all of these simple questions we GUARANTEE
that you will receive a credit card with up to a $5000 credit limit.
If you would no longer like to receive e-mail from us you can unsubscribe CLICK HERE:
The preceding message was sent to you as an opt-in subscriber to ClickforMail.
If you wish to unsubscribe please follow this link:
http://remove.3web45.com/[email protected]
Reply-To: [email protected]
To: [email protected] [email protected]
[email protected]
Subject:You're alreadyApproved
Received:froml3.3web45.com([66.185.166.27]) by *.com
with Microsoft SMTPSVC(5.0.2195.4905)
Received:(qmailinvoked by uid 7)
Message-ID:< [email protected] >
Return-Path: [email protected]
ClickforMail never sends unsolicited email. You have received this message because you
registered with ClickforMail OR one of our carefully selected marketing partners.
If you no longer wish to receive these offers, please follow the instructions
at the bottom of this message.
Do You Meet These Criteria?
Live in the United States?
Have a Social Security Number?
18 Years of Age or Older?
Have a Valid Checking or Savings Account?
Have Valid Job or other Income of at Least $750.00/month?
Have a Home Phone Number?
No Pending Bankruptcy?
No current delinquencies in past 60 days?
If you answered YES to all of these simple questions we GUARANTEE
that you will receive a credit card with up to a $5000 credit limit.
If you would no longer like to receive e-mail from us you can unsubscribe CLICK HERE:
The preceding message was sent to you as an opt-in subscriber to ClickforMail.
If you wish to unsubscribe please follow this link:
http://remove.3web45.com/[email protected]
235 ：名無しさん＠お腹いっぱい。：02/05/18 17:16
236 ：第三者中継可能?????????：02/05/18 18:00
第三者中継可能？ スパムより判明
l3.3web45.com
Relay test 6
>RSET
<250 flushed
>MAIL FROM:<[email protected]>
<250 ok
>RCPT TO:<relaytest%[email protected]>
<250 ok
To unsubscribe from the Offer888.com list,
visit http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
* To remove yourself from this mailing list, point your browser to:
http://i.mb00.net/remove?funnymoney
* Enter your email address ( [email protected] ) in the field
provided and click "Unsubscribe". The mailing list ID is "funnymoney".
l3.3web45.com
Relay test 6
>RSET
<250 flushed
>MAIL FROM:<[email protected]>
<250 ok
>RCPT TO:<relaytest%[email protected]>
<250 ok
To unsubscribe from the Offer888.com list,
visit http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
* To remove yourself from this mailing list, point your browser to:
http://i.mb00.net/remove?funnymoney
* Enter your email address ( [email protected] ) in the field
provided and click "Unsubscribe". The mailing list ID is "funnymoney".
UDP port probe, 210.150.14.100, 419
[スキャン] 攻撃者は、特定のポートがリモートアクセスに使用
できるかどうかを調べようとしています。
[スキャン] 攻撃者は、特定のポートがリモートアクセスに使用
できるかどうかを調べようとしています。
238 ：す。 ◆lIIIIDII ：02/05/18 21:37
218.27.88.169
中国からかましてきた。
Telnetで接続したら接続できるんでやんの・・・
中国からかましてきた。
Telnetで接続したら接続できるんでやんの・・・
239 ：名無しさん＠お腹いっぱい。：02/05/18 22:19
>>238 FTPもいける
240 ：名無しさん＠お腹いっぱい。：02/05/19 00:12
241 ：名無しさん＠お腹いっぱい。：02/05/19 09:57
62.194.104.158:2353
TCP Port 3128て何があるんでしょうか？
TCP Port 3128て何があるんでしょうか？
From:E-MailSavings< [email protected] >
To: [email protected] [email protected]
[email protected] [email protected]
Subject:SALE->VideoSurveillance,UNDER$50BUCKS!
Received:from[216.34.75.50]by l3.3web45.com with ESMTP id **
Received:(qmailinvokedfrom6)
Received:from mail.link2buy.com (216.34.74.50) by 10.3.220.33 with SMTP From [email protected]
Message-ID:< [email protected] >
In less than 10 minutes, you can set up a professional surveillance camera without ever breaking a sweat. How?
Introducing the XCam2, a wireless video camera that broadcasts LIVE COLOR video to any TV, VCR or PC* within 100 feet.
That means no wires and no mess!
If you order now, you'll also receive a FREE motion-activated VCR Commander: automatically record video from your camera straight
to your VCR! Gigantic $100 VALUE!
This is a recurring mailing. If you wish to unsubscribe from this list, please click here, reply to this email with "unsubscribe"
as the subject, or copy and paste the link below into your browser address bar.
http://link2buy.com/c/ES/[email protected]&P=ES2044_20020515_665
Any third-party offers contained in this email are the sole responsibility of the offer originator.
Copyright 2002 E-MailSavings
To: [email protected] [email protected]
[email protected] [email protected]
Subject:SALE->VideoSurveillance,UNDER$50BUCKS!
Received:from[216.34.75.50]by l3.3web45.com with ESMTP id **
Received:(qmailinvokedfrom6)
Received:from mail.link2buy.com (216.34.74.50) by 10.3.220.33 with SMTP From [email protected]
Message-ID:< [email protected] >
In less than 10 minutes, you can set up a professional surveillance camera without ever breaking a sweat. How?
Introducing the XCam2, a wireless video camera that broadcasts LIVE COLOR video to any TV, VCR or PC* within 100 feet.
That means no wires and no mess!
If you order now, you'll also receive a FREE motion-activated VCR Commander: automatically record video from your camera straight
to your VCR! Gigantic $100 VALUE!
This is a recurring mailing. If you wish to unsubscribe from this list, please click here, reply to this email with "unsubscribe"
as the subject, or copy and paste the link below into your browser address bar.
http://link2buy.com/c/ES/[email protected]&P=ES2044_20020515_665
Any third-party offers contained in this email are the sole responsibility of the offer originator.
Copyright 2002 E-MailSavings
243 ：第三者中継可能?????????：02/05/19 10:18
第三者中継可能？ スパムメールより
mail.ombramarketing.com
>RSET
<250 flushed
>MAIL FROM:< [email protected] >
<250 ok
>RCPT TO:< relaytest%[email protected] >
<250 ok
mail.link2buy.com
inbound02.link2buy.com
>RSET
<250 flushed
>MAIL FROM:< [email protected] >
<250 ok
>RCPT TO:< relaytest%[email protected] >
<250 ok
To unsubscribe from the Offer888.com list,
visit http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
* To remove yourself from this mailing list, point your browser to:
http://i.mb00.net/remove?funnymoney
* Enter your email address ( [email protected] [email protected] ) in the field
provided and click "Unsubscribe". The mailing list ID is "funnymoney".
mail.ombramarketing.com
>RSET
<250 flushed
>MAIL FROM:< [email protected] >
<250 ok
>RCPT TO:< relaytest%[email protected] >
<250 ok
mail.link2buy.com
inbound02.link2buy.com
>RSET
<250 flushed
>MAIL FROM:< [email protected] >
<250 ok
>RCPT TO:< relaytest%[email protected] >
<250 ok
To unsubscribe from the Offer888.com list,
visit http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
* To remove yourself from this mailing list, point your browser to:
http://i.mb00.net/remove?funnymoney
* Enter your email address ( [email protected] [email protected] ) in the field
provided and click "Unsubscribe". The mailing list ID is "funnymoney".
245 ：名無しさん＠お腹いっぱい。：02/05/19 13:27
１分２回のペースでポートスキャンやって来る
暇人？？？アフォ？？
晒しage
210.236.64.130
暇人？？？アフォ？？
晒しage
210.236.64.130
246 ：名無しさん＠お腹いっぱい。：02/05/19 15:34
247 ：名無しさん＠お腹いっぱい。：02/05/19 15:34
248 ：名無しさん＠お腹いっぱい。：02/05/19 17:59
ニムダもコードレッドも毎日だな。
だいたい平均すると２０件くらいかな。
さて、多いのか少ないのか。
だいたい平均すると２０件くらいかな。
さて、多いのか少ないのか。
From:EqualaMAIL< [email protected] >
To : [email protected] [email protected]
[email protected] [email protected]
[email protected]
Subject:Offensive content on YOUR PC? Find out now!
Received:from[66.70.89.20] by link2buy.com with ESMTP id ** Received:by dpm1.emailsvc.net (PowerMTA(TM) v1.5)
(envelope-from< [email protected] >)
Received: from mail (10.224.72.159) by 10.0.0.2 with SMTP
From [email protected]
Message-ID:< [email protected] >
=============================================================================
The following offer was mailed by EqualaMAIL on behalf of contentwatch.com
=============================================================================
Think there's no offensive content on your PC? Think again.
It's possible to pick up objectionable files by accident
from the Internet!
Check now to be sure you're safe!
FREE PC Check! No Obligation. Just Information.
http://track.coopt.com/track.php?c_lid=1146&c_uid=12345678.
==========================================================================
This EqualaMAIL Promotion was sent to you as a valued subscriber.
If you would rather not receive emails from EqualaMail and would like to
delete your name from our list please click below:
http://track.coopt.com/members/[email protected]&a=12345678.
Questions, Opinions or Feedback
Email: [email protected] or
write at: Equalamail, PO Box 23248, Ft. Lauderdale, Fl. 33307
==========================================================================
To : [email protected] [email protected]
[email protected] [email protected]
[email protected]
Subject:Offensive content on YOUR PC? Find out now!
Received:from[66.70.89.20] by link2buy.com with ESMTP id ** Received:by dpm1.emailsvc.net (PowerMTA(TM) v1.5)
(envelope-from< [email protected] >)
Received: from mail (10.224.72.159) by 10.0.0.2 with SMTP
From [email protected]
Message-ID:< [email protected] >
=============================================================================
The following offer was mailed by EqualaMAIL on behalf of contentwatch.com
=============================================================================
Think there's no offensive content on your PC? Think again.
It's possible to pick up objectionable files by accident
from the Internet!
Check now to be sure you're safe!
FREE PC Check! No Obligation. Just Information.
http://track.coopt.com/track.php?c_lid=1146&c_uid=12345678.
==========================================================================
This EqualaMAIL Promotion was sent to you as a valued subscriber.
If you would rather not receive emails from EqualaMail and would like to
delete your name from our list please click below:
http://track.coopt.com/members/[email protected]&a=12345678.
Questions, Opinions or Feedback
Email: [email protected] or
write at: Equalamail, PO Box 23248, Ft. Lauderdale, Fl. 33307
==========================================================================
250 ：第三者中継可能?????????：02/05/19 19:01
第三者中継可能？
Equalamail.emailsvc.net
>>> RSET
<<< 250 flushed
>>> MAIL FROM:< [email protected] >
<<< 250 ok
>>> RCPT TO:< relaytest%[email protected] >
<<< 250 ok
To unsubscribe from the Offer888.com list,
visit http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/?e=
* To remove yourself from this mailing list, point your browser to:
http://i.mb00.net/remove?funnymoney
* Enter your email address ( [email protected]
[email protected] [email protected] ) in the field
provided and click "Unsubscribe". The mailing list ID is "funnymoney".
Equalamail.emailsvc.net
>>> RSET
<<< 250 flushed
>>> MAIL FROM:< [email protected] >
<<< 250 ok
>>> RCPT TO:< relaytest%[email protected] >
<<< 250 ok
To unsubscribe from the Offer888.com list,
visit http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/[email protected]
http://opt-out.offer888.net/?e=
* To remove yourself from this mailing list, point your browser to:
http://i.mb00.net/remove?funnymoney
* Enter your email address ( [email protected]
[email protected] [email protected] ) in the field
provided and click "Unsubscribe". The mailing list ID is "funnymoney".