{"id":16390,"date":"2026-10-29T15:51:54","date_gmt":"2026-10-29T06:51:54","guid":{"rendered":"https:\/\/www.winserver.ne.jp\/column\/?p=16390"},"modified":"2026-10-29T16:54:40","modified_gmt":"2026-10-29T07:54:40","slug":"windows-server-login-attack-report-202609","status":"publish","type":"post","link":"https:\/\/www.winserver.ne.jp\/column\/windows-server-login-attack-report-202609\/","title":{"rendered":"\u30102026\u5e749\u6708\u7248\u3011Windows\u30b5\u30fc\u30d0\u30fc\u8a8d\u8a3c\u653b\u6483\u30ec\u30dd\u30fc\u30c8"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-16400\" src=\"https:\/\/blog.winserver.ne.jp\/wp-content\/uploads\/2026\/10\/\u30b5\u30fc\u30d0\u30fc\u653b\u6483\u30ec\u30dd\u30fc\u30c8_2026\u5e749\u6708\u7248.webp\" alt=\"\u30102026\u5e749\u6708\u7248\u3011Windows\u30b5\u30fc\u30d0\u30fc\u8a8d\u8a3c\u653b\u6483\u30ec\u30dd\u30fc\u30c8\" width=\"900\" height=\"500\" srcset=\"https:\/\/blog.winserver.ne.jp\/wp-content\/uploads\/2026\/10\/\u30b5\u30fc\u30d0\u30fc\u653b\u6483\u30ec\u30dd\u30fc\u30c8_2026\u5e749\u6708\u7248.webp 900w, https:\/\/blog.winserver.ne.jp\/wp-content\/uploads\/2026\/10\/\u30b5\u30fc\u30d0\u30fc\u653b\u6483\u30ec\u30dd\u30fc\u30c8_2026\u5e749\u6708\u7248-300x167.webp 300w, https:\/\/blog.winserver.ne.jp\/wp-content\/uploads\/2026\/10\/\u30b5\u30fc\u30d0\u30fc\u653b\u6483\u30ec\u30dd\u30fc\u30c8_2026\u5e749\u6708\u7248-768x427.webp 768w\" sizes=\"(max-width: 900px) 100vw, 900px\" \/><\/p>\n<h2 class=\"styled_h2\">\u306f\u3058\u3081\u306b<\/h2>\n<p>2026\u5e749\u6708\u306b\u53d6\u5f97\u3057\u305f\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u30c7\u30fc\u30bf\u3092\u3082\u3068\u306b\u3001Windows\u30b5\u30fc\u30d0\u30fc\u3078\u306e\u8a8d\u8a3c\u653b\u6483\u306e\u50be\u5411\u3092\u5206\u6790\u3057\u307e\u3057\u305f\u3002<\/p>\n<p>\u672c\u30ec\u30dd\u30fc\u30c8\u3067\u306f\u3001\u4ee5\u4e0b\u306e\u9805\u76ee\u306b\u3064\u3044\u3066\u96c6\u8a08\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<ul>\n<li>\u653b\u6483\u5143\u30cd\u30c3\u30c8\u30ef\u30fc\u30af<\/li>\n<li>\u653b\u6483\u5143ASN<\/li>\n<li>\u653b\u6483\u5143\u56fd<\/li>\n<li>\u72d9\u308f\u308c\u305f\u30a2\u30ab\u30a6\u30f3\u30c8<\/li>\n<\/ul>\n<p>\u306a\u304a\u3001\u304a\u5ba2\u69d8\u74b0\u5883\u4fdd\u8b77\u306e\u305f\u3081\u3001\u74b0\u5883\u56fa\u6709\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u540d\u3084\u30b7\u30b9\u30c6\u30e0\u60c5\u5831\u306f\u9664\u5916\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<h2 class=\"styled_h2\">\u96c6\u8a08\u5bfe\u8c61<\/h2>\n<ul>\n<li><strong>\u5bfe\u8c61\u671f\u9593\uff1a<\/strong>2026\u5e749\u67081\u65e5\uff5e2026\u5e749\u670830\u65e5<\/li>\n<li><strong>\u5206\u6790\u5bfe\u8c61\uff1a<\/strong>Windows Server\u74b0\u5883<\/li>\n<li><strong>\u96c6\u8a08\u5bfe\u8c61\uff1a<\/strong>\u8a8d\u8a3c\u5931\u6557\u30a4\u30d9\u30f3\u30c8\uff08EventID 4625\uff09<\/li>\n<\/ul>\n<h2 class=\"styled_h2\">\u4eca\u6708\u306e\u7dcf\u62ec<\/h2>\n<p>\u4eca\u6708\u6700\u3082\u591a\u304f\u78ba\u8a8d\u3055\u308c\u305f\u653b\u6483\u306f\u3001SMB\/NTLM\u3092\u5229\u7528\u3057\u305f\u8a8d\u8a3c\u653b\u6483\u3067\u3057\u305f\u3002<\/p>\n<p>\u7279\u306b\u7279\u5b9a\u306e\u6d77\u5916\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u304b\u3089\u7d99\u7d9a\u7684\u306a\u30d6\u30eb\u30fc\u30c8\u30d5\u30a9\u30fc\u30b9\u653b\u6483\u304c\u89b3\u6e2c\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<h2 class=\"styled_h2\">\u653b\u6483\u5143\u30cd\u30c3\u30c8\u30ef\u30fc\u30af TOP10<\/h2>\n<div class=\"s_table\"><table>\n<thead>\n<tr>\n<th>\u9806\u4f4d<\/th>\n<th>\u653b\u6483\u5143\u30cd\u30c3\u30c8\u30ef\u30fc\u30af<\/th>\n<th>\u89b3\u6e2c\u56de\u6570<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>1\u4f4d<\/td>\n<td>194.165.16.0\/24<\/td>\n<td>110,434,577<\/td>\n<\/tr>\n<tr>\n<td>2\u4f4d<\/td>\n<td>107.150.59.0\/24<\/td>\n<td>31,135,954<\/td>\n<\/tr>\n<tr>\n<td>3\u4f4d<\/td>\n<td>185.122.166.0\/24<\/td>\n<td>28,828,102<\/td>\n<\/tr>\n<tr>\n<td>4\u4f4d<\/td>\n<td>185.116.237.0\/24<\/td>\n<td>26,246,497<\/td>\n<\/tr>\n<tr>\n<td>5\u4f4d<\/td>\n<td>172.82.67.0\/24<\/td>\n<td>20,835,541<\/td>\n<\/tr>\n<tr>\n<td>6\u4f4d<\/td>\n<td>172.82.64.0\/24<\/td>\n<td>19,242,402<\/td>\n<\/tr>\n<tr>\n<td>7\u4f4d<\/td>\n<td>185.44.66.0\/24<\/td>\n<td>18,971,193<\/td>\n<\/tr>\n<tr>\n<td>8\u4f4d<\/td>\n<td>172.82.66.0\/24<\/td>\n<td>16,628,845<\/td>\n<\/tr>\n<tr>\n<td>9\u4f4d<\/td>\n<td>185.116.236.0\/24<\/td>\n<td>14,232,586<\/td>\n<\/tr>\n<tr>\n<td>10\u4f4d<\/td>\n<td>169.58.124.0\/24<\/td>\n<td>12,877,611<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<h2 class=\"styled_h2\">\u653b\u6483\u5143\u56fd TOP10<\/h2>\n<p>\u203b ASN\u60c5\u5831\u3092\u3082\u3068\u306b\u96c6\u8a08\uff08\u540c\u7387\u3092\u542b\u3081\u3066\u8a0812\u304b\u56fd\uff09<\/p>\n<div class=\"s_table\"><table>\n<thead>\n<tr>\n<th>\u9806\u4f4d<\/th>\n<th>\u56fd\u540d\u30fb\u5730\u57df\u540d<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>1\u4f4d<\/td>\n<td>\u30a2\u30e1\u30ea\u30ab\u5408\u8846\u56fd<\/td>\n<\/tr>\n<tr>\n<td>2\u4f4d<\/td>\n<td>\u4e2d\u56fd<\/td>\n<\/tr>\n<tr>\n<td>3\u4f4d<\/td>\n<td>\u30d5\u30e9\u30f3\u30b9\u3001\u30d9\u30c8\u30ca\u30e0\u3001\u97d3\u56fd<\/td>\n<\/tr>\n<tr>\n<td>6\u4f4d<\/td>\n<td>\u30a4\u30bf\u30ea\u30a2<\/td>\n<\/tr>\n<tr>\n<td>7\u4f4d<\/td>\n<td>\u65e5\u672c\u3001\u9999\u6e2f\u3001\u30af\u30a6\u30a7\u30fc\u30c8\u3001\u30da\u30eb\u30fc\u3001\u30b7\u30f3\u30ac\u30dd\u30fc\u30eb\u3001\u30c9\u30a4\u30c4<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<h2 class=\"styled_h2\">\u653b\u6483\u5143ASN TOP10<\/h2>\n<p>\u203b ASN\u60c5\u5831\u3092\u3082\u3068\u306b\u96c6\u8a08\uff08\u540c\u7387\u3092\u542b\u3081\u3066\u8a0813\u4ef6\uff09<\/p>\n<div class=\"s_table\"><table>\n<thead>\n<tr>\n<th>\u9806\u4f4d<\/th>\n<th>ASN<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>1\u4f4d<\/td>\n<td>AS49683<\/td>\n<\/tr>\n<tr>\n<td>2\u4f4d<\/td>\n<td>AS51167\u3001AS132203\u3001AS38365<\/td>\n<\/tr>\n<tr>\n<td>5\u4f4d<\/td>\n<td>AS40021\u3001AS14956\u3001AS137718\u3001AS45102\u3001AS37963<\/td>\n<\/tr>\n<tr>\n<td>10\u4f4d<\/td>\n<td>AS42961\u3001AS45090\u3001AS4811\u3001AS58519<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<h2 class=\"styled_h2\">\u72d9\u308f\u308c\u305f\u30a2\u30ab\u30a6\u30f3\u30c8 TOP10<\/h2>\n<p>\u203b \u74b0\u5883\u56fa\u6709\u30a2\u30ab\u30a6\u30f3\u30c8\u306f\u9664\u5916<\/p>\n<div class=\"s_table\"><table>\n<thead>\n<tr>\n<th>\u9806\u4f4d<\/th>\n<th>\u30a2\u30ab\u30a6\u30f3\u30c8\u540d<\/th>\n<th>\u89b3\u6e2c\u56de\u6570<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>1\u4f4d<\/td>\n<td>administrator<\/td>\n<td>16,508,365<\/td>\n<\/tr>\n<tr>\n<td>2\u4f4d<\/td>\n<td>admin<\/td>\n<td>652,206<\/td>\n<\/tr>\n<tr>\n<td>3\u4f4d<\/td>\n<td>user<\/td>\n<td>345,663<\/td>\n<\/tr>\n<tr>\n<td>4\u4f4d<\/td>\n<td>administrador<\/td>\n<td>199,110<\/td>\n<\/tr>\n<tr>\n<td>5\u4f4d<\/td>\n<td>pc<\/td>\n<td>184,808<\/td>\n<\/tr>\n<tr>\n<td>6\u4f4d<\/td>\n<td>test<\/td>\n<td>170,925<\/td>\n<\/tr>\n<tr>\n<td>7\u4f4d<\/td>\n<td>administrateur<\/td>\n<td>61,241<\/td>\n<\/tr>\n<tr>\n<td>8\u4f4d<\/td>\n<td>default<\/td>\n<td>40,840<\/td>\n<\/tr>\n<tr>\n<td>9\u4f4d<\/td>\n<td>defaultuser<\/td>\n<td>32,751<\/td>\n<\/tr>\n<tr>\n<td>10\u4f4d<\/td>\n<td>user1<\/td>\n<td>30,794<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<h2 class=\"styled_h2\">\u653b\u6483\u50be\u5411<\/h2>\n<h3 class=\"styled_h3\">\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u3078\u306e\u96c6\u4e2d\u653b\u6483<\/h3>\n<p>\u3082\u3063\u3068\u3082\u591a\u304f\u653b\u6483\u5bfe\u8c61\u3068\u306a\u3063\u305f\u306e\u306f\u3001administrator \u30a2\u30ab\u30a6\u30f3\u30c8\u3067\u3057\u305f\u3002<\/p>\n<p>\u4e00\u822c\u7684\u306a\u653b\u6483\u30c4\u30fc\u30eb\u3084\u30dc\u30c3\u30c8\u306f\u3001\u7ba1\u7406\u8005\u6a29\u9650\u3092\u6301\u3064\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u512a\u5148\u7684\u306b\u653b\u6483\u3059\u308b\u50be\u5411\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<h3 class=\"styled_h3\">\u591a\u8a00\u8a9e\u8f9e\u66f8\u653b\u6483<\/h3>\n<p>administrator \u3060\u3051\u3067\u306a\u304f\u3001\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u591a\u8a00\u8a9e\u74b0\u5883\u3092\u60f3\u5b9a\u3057\u305f\u30a2\u30ab\u30a6\u30f3\u30c8\u540d\u3078\u306e\u653b\u6483\u3082\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<ul>\n<li>administrador<\/li>\n<li>administrateur<\/li>\n<li>\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440<\/li>\n<\/ul>\n<p>\u653b\u6483\u8005\u304c\u56fd\u969b\u7684\u306a\u8f9e\u66f8\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3092\u5229\u7528\u3057\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<h3 class=\"styled_h3\">\u7d99\u7d9a\u7684\u306a\u653b\u6483\u6d3b\u52d5<\/h3>\n<p>\u4e0a\u4f4d\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306f\u5358\u767a\u3067\u306f\u306a\u304f\u3001\u671f\u9593\u3092\u901a\u3057\u3066\u7d99\u7d9a\u7684\u306b\u8a8d\u8a3c\u8a66\u884c\u3092\u884c\u3063\u3066\u3044\u307e\u3057\u305f\u3002<\/p>\n<p>\u81ea\u52d5\u5316\u3055\u308c\u305f\u30d6\u30eb\u30fc\u30c8\u30d5\u30a9\u30fc\u30b9\u653b\u6483\u306e\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u3068\u8003\u3048\u3089\u308c\u307e\u3059\u3002<\/p>\n<h2 class=\"styled_h2\">\u63a8\u5968\u5bfe\u7b56<\/h2>\n<ul>\n<li>\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u540d\u306e\u5909\u66f4<\/li>\n<li>\u9577\u304f\u8907\u96d1\u306a\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u5229\u7528<\/li>\n<li>\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u4f7f\u3044\u56de\u3057\u7981\u6b62<\/li>\n<li>\u591a\u8981\u7d20\u8a8d\u8a3c\uff08MFA\uff09<\/li>\n<li>RDP\u63a5\u7d9a\u5143\u5236\u9650<\/li>\n<li>WinRM\u63a5\u7d9a\u5143\u5236\u9650<\/li>\n<li>SMB\u30a2\u30af\u30bb\u30b9\u5236\u9650<\/li>\n<li>GeoIP\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0<\/li>\n<li>\u4e0d\u8981\u30dd\u30fc\u30c8\u306e\u9589\u9396<\/li>\n<\/ul>\n<h2 class=\"styled_h2\">\u7de8\u96c6\u5f8c\u8a18<\/h2>\n<p>\u4eca\u6708\u306f\u7279\u5b9a\u306e\u6d77\u5916\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u304b\u3089\u975e\u5e38\u306b\u5927\u898f\u6a21\u306a\u8a8d\u8a3c\u653b\u6483\u3092\u89b3\u6e2c\u3057\u307e\u3057\u305f\u3002<\/p>\n<p>\u8a8d\u8a3c\u653b\u6483\u306e\u307b\u3068\u3093\u3069\u306f\u5931\u6557\u306b\u7d42\u308f\u3063\u3066\u3044\u307e\u3059\u304c\u3001\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u72d9\u3063\u305f\u7d99\u7d9a\u7684\u306a\u8a66\u884c\u304c\u78ba\u8a8d\u3055\u308c\u3066\u304a\u308a\u3001\u9069\u5207\u306a\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u3068\u76e3\u8996\u306e\u7d99\u7d9a\u304c\u91cd\u8981\u3067\u3059\u3002<\/p>\n<p>\u4eca\u5f8c\u3082\u6708\u6b21\u30ec\u30dd\u30fc\u30c8\u3068\u3057\u3066\u653b\u6483\u5143\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3084\u653b\u6483\u50be\u5411\u306e\u5909\u5316\u3092\u8ffd\u8de1\u3057\u3066\u3044\u304f\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"\u306f\u3058\u3081\u306b 2026\u5e749\u6708\u306b\u53d6\u5f97\u3057\u305f\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u30c7\u30fc\u30bf\u3092\u3082\u3068\u306b\u3001Windows\u30b5\u30fc\u30d0\u30fc\u3078\u306e\u8a8d\u8a3c\u653b\u6483\u306e\u50be\u5411\u3092\u5206\u6790\u3057\u307e\u3057\u305f\u3002 \u672c\u30ec\u30dd\u30fc\u30c8\u3067\u306f\u3001\u4ee5\u4e0b\u306e\u9805\u76ee\u306b\u3064\u3044\u3066\u96c6\u8a08\u3057\u3066\u3044\u307e\u3059\u3002 \u653b\u6483\u5143\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u653b\u6483\u5143ASN \u653b\u6483\u5143\u56fd \u72d9\u308f [&hellip;]","protected":false},"author":1,"featured_media":16400,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1228],"tags":[15,368,964,1078,1224,1225,1226],"class_list":["post-16390","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category--announcements","tag-windows-server","tag-winserver","tag-964","tag-1078","tag-1224","tag-1225","tag-1226"],"_links":{"self":[{"href":"https:\/\/www.winserver.ne.jp\/column\/wp-json\/wp\/v2\/posts\/16390"}],"collection":[{"href":"https:\/\/www.winserver.ne.jp\/column\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winserver.ne.jp\/column\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winserver.ne.jp\/column\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winserver.ne.jp\/column\/wp-json\/wp\/v2\/comments?post=16390"}],"version-history":[{"count":5,"href":"https:\/\/www.winserver.ne.jp\/column\/wp-json\/wp\/v2\/posts\/16390\/revisions"}],"predecessor-version":[{"id":16404,"href":"https:\/\/www.winserver.ne.jp\/column\/wp-json\/wp\/v2\/posts\/16390\/revisions\/16404"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.winserver.ne.jp\/column\/wp-json\/wp\/v2\/media\/16400"}],"wp:attachment":[{"href":"https:\/\/www.winserver.ne.jp\/column\/wp-json\/wp\/v2\/media?parent=16390"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winserver.ne.jp\/column\/wp-json\/wp\/v2\/categories?post=16390"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winserver.ne.jp\/column\/wp-json\/wp\/v2\/tags?post=16390"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}