SMTP e furto di password delle email: come individuarli e bloccarli

Chi lavora a stretto contatto con le infrastrutture email sa bene che il furto di password a scapito di un utente e l’utilizzo delle credenziali per l’invio di massicci volumi di spam è all’ordine del giorno. E’ quindi fondamentale sapere come riconoscere le attività anomale e bloccarle non appena si presentano.

Ma come avviene il furto delle password di accesso alla propria casella email? Quasi sempre a causa di un “virus” presente sul proprio PC che, oltre a copiare tutti i contatti della vostra rubrica, si prende anche le password che avete memorizzato sui vostri client email. Altre cause sono la consultazione delle proprie email da connessioni non sicure e l’utilizzo di connessioni non sicure, quindi con l’invio delle password in chiaro.

Una volta che le vostre password sono nelle mani di qualcuno queste entrano in circolo in delle botnet che in automatico si collegano al vostro server SMTP, si autenticano al vostro posto, ed inviano a mandare email a vostro nome. In questo modo non è immediatamente bloccabile la fonte dello spam in quanto si presente come un regolare utente ed invia email da un SMTP la cui reputazione era buona fino ad un attimo prima.

Diventa quindi fondamentale implementare delle tecniche lato server per individuare questi attacchi e bloccarli nel giro di pochi minuti. I sintomi che portano a pensare che un attacco sia in corso sono pochi ma molto chiari. Normalmente un utente che usa l’SMTP per le email di tipo “interpesonale”, ovvero semplici scambi di email con altre persone, difficilmente riuscirà a comporre ed inviare più di uno o due messaggi al minuto, quindi se vediamo nei log un incessante attività di autenticazione è forse il momento per bloccare l’accesso SMTP a quell’account e fare ulteriori verifiche. Altro sintomo è l’invio da parte di un solo utente da più IP contemporaneamente, un account email, anche se usato da più persone, difficilmente manderà email da più di 5 o 10 IP differenti in contemporanea, altro motivo di blocco.

Anche Spamhaus ha di recente pubblicato un articolo sul problema dello spam in partenza a causa del furto di password. L’intivo anche da parte loro è quello di implementare dei controlli e dei limiti lato server e di non dare servizi di invio email senza controllo alcuno. Di fatto il furto di password potrebbe entrare a far parte delle cose che possono accadere ad un utente, per cui è sempre necessario attrezzarsi prima con dei Policy Server.

I server email di Qboxmail implementano già questi controlli sulle email in uscita e limitano i possibili abusi a seguito di un furto di password o di un attività anomala o non consentita portata avanti da un utente. E’ infatti necessario tutelare i propri server SMTP da questi abusi, sarebbero altrimenti tutti gli utenti legittimi a sostenere dei disservizi. Quando i nostri sistemi rilevano uno di questi abusi inviano in automatico un email al proprietario dell’account invitandolo alla verifica della propria postazione e ad un immediato cambio password. Lo sblocco dell’account può essere poi eseguito dal nostro pannello di gestione.

A titolo di esempio vi riporto alcune delle ultime attività anomale rilevate sui nostri server. Anche a colto d’occhio si capisce che non è umanamente possibile che un utente con il proprio client email invii così tanti messaggi in poco tempo!
login: utente@XXXXX.it
ip: 112.67.43.216 time: 2012-08-24 20:25:14
ip: 59.50.128.78 time: 2012-08-24 20:25:33
ip: 59.50.128.170 time: 2012-08-24 20:25:49
ip: 59.50.128.78 time: 2012-08-24 20:28:19
ip: 59.50.128.222 time: 2012-08-24 20:28:19
ip: 59.50.128.106 time: 2012-08-24 20:28:23
ip: 59.50.128.222 time: 2012-08-24 20:29:14
ip: 59.50.128.170 time: 2012-08-24 20:30:13
ip: 59.50.128.78 time: 2012-08-24 20:32:30
ip: 59.50.128.170 time: 2012-08-24 20:33:05
ip: 59.50.128.170 time: 2012-08-24 20:33:18
ip: 59.50.128.170 time: 2012-08-24 20:33:18
ip: 59.50.128.170 time: 2012-08-24 20:33:19
ip: 59.50.128.106 time: 2012-08-24 20:34:56
ip: 59.50.128.170 time: 2012-08-24 20:35:43
ip: 59.50.128.170 time: 2012-08-24 20:36:36
ip: 59.50.128.106 time: 2012-08-24 20:36:51
ip: 59.50.128.170 time: 2012-08-24 20:36:55
ip: 59.50.128.106 time: 2012-08-24 20:37:10
ip: 59.50.128.170 time: 2012-08-24 20:38:01
ip: 59.50.128.222 time: 2012-08-24 20:39:51
ip: 59.50.128.170 time: 2012-08-24 20:41:30
ip: 59.50.128.78 time: 2012-08-24 20:42:01
ip: 59.50.128.170 time: 2012-08-24 20:43:06
ip: 59.50.128.170 time: 2012-08-24 20:43:49
ip: 59.50.128.106 time: 2012-08-24 20:44:35
ip: 59.50.128.170 time: 2012-08-24 20:46:32
ip: 59.50.128.78 time: 2012-08-24 20:47:27
ip: 112.67.81.49 time: 2012-08-24 20:48:30
ip: 59.50.128.222 time: 2012-08-24 20:48:38
ip: 59.50.128.170 time: 2012-08-24 20:48:55
ip: 59.50.128.222 time: 2012-08-24 20:48:59
ip: 59.50.128.170 time: 2012-08-24 20:49:09
ip: 59.50.128.170 time: 2012-08-24 20:49:19
ip: 59.50.128.222 time: 2012-08-24 20:49:51
ip: 59.50.128.170 time: 2012-08-24 20:50:02
login: utente@YYYYYY.it
ip: 184.107.41.5 time: 2012-08-26 22:07:23
ip: 184.107.41.5 time: 2012-08-26 22:07:27
ip: 184.107.41.5 time: 2012-08-26 22:07:39
ip: 184.107.41.5 time: 2012-08-26 22:07:57
ip: 184.107.41.5 time: 2012-08-26 22:09:17
ip: 184.107.41.5 time: 2012-08-26 22:09:37
ip: 184.107.41.5 time: 2012-08-26 22:09:44
ip: 184.107.41.5 time: 2012-08-26 22:09:59
ip: 184.107.41.5 time: 2012-08-26 22:10:26
ip: 184.107.41.5 time: 2012-08-26 22:10:27
ip: 184.107.41.5 time: 2012-08-26 22:10:31
ip: 184.107.41.5 time: 2012-08-26 22:10:59
ip: 184.107.41.5 time: 2012-08-26 22:11:06
ip: 184.107.41.5 time: 2012-08-26 22:11:08
ip: 184.107.41.5 time: 2012-08-26 22:11:41
ip: 184.107.41.5 time: 2012-08-26 22:11:48
ip: 184.107.41.5 time: 2012-08-26 22:13:41
ip: 184.107.41.5 time: 2012-08-26 22:13:54
ip: 184.107.41.5 time: 2012-08-26 22:14:07
ip: 184.107.41.5 time: 2012-08-26 22:14:13
ip: 184.107.41.5 time: 2012-08-26 22:14:16
ip: 184.107.41.5 time: 2012-08-26 22:14:40
ip: 184.107.41.5 time: 2012-08-26 22:14:41
ip: 184.107.41.5 time: 2012-08-26 22:14:57
ip: 184.107.41.5 time: 2012-08-26 22:15:10
ip: 184.107.41.5 time: 2012-08-26 22:15:30
ip: 184.107.41.5 time: 2012-08-26 22:15:46
ip: 184.107.41.5 time: 2012-08-26 22:16:36
ip: 184.107.41.5 time: 2012-08-26 22:17:03
ip: 184.107.41.5 time: 2012-08-26 22:17:21
ip: 184.107.41.5 time: 2012-08-26 22:17:40
ip: 184.107.41.5 time: 2012-08-26 22:17:56
ip: 184.107.41.5 time: 2012-08-26 22:18:04
ip: 184.107.41.5 time: 2012-08-26 22:18:33
ip: 184.107.41.5 time: 2012-08-26 22:18:39
ip: 184.107.41.5 time: 2012-08-26 22:18:58
ip: 184.107.41.5 time: 2012-08-26 22:19:03
ip: 184.107.41.5 time: 2012-08-26 22:19:07
ip: 184.107.41.5 time: 2012-08-26 22:19:10
ip: 184.107.41.5 time: 2012-08-26 22:19:22
ip: 184.107.41.5 time: 2012-08-26 22:19:26
ip: 184.107.41.5 time: 2012-08-26 22:19:28
ip: 184.107.41.5 time: 2012-08-26 22:19:46
ip: 184.107.41.5 time: 2012-08-26 22:20:15
ip: 184.107.41.5 time: 2012-08-26 22:20:28
ip: 184.107.41.5 time: 2012-08-26 22:20:28
ip: 184.107.41.5 time: 2012-08-26 22:20:33
ip: 184.107.41.5 time: 2012-08-26 22:20:40
ip: 184.107.41.5 time: 2012-08-26 22:20:55
ip: 184.107.41.5 time: 2012-08-26 22:20:58
ip: 184.107.41.5 time: 2012-08-26 22:21:00
ip: 184.107.41.5 time: 2012-08-26 22:21:09
ip: 184.107.41.5 time: 2012-08-26 22:21:12
ip: 184.107.41.5 time: 2012-08-26 22:21:23
ip: 184.107.41.5 time: 2012-08-26 22:21:26
ip: 184.107.41.5 time: 2012-08-26 22:21:28
ip: 184.107.41.5 time: 2012-08-26 22:21:37
ip: 184.107.41.5 time: 2012-08-26 22:21:39
ip: 184.107.41.5 time: 2012-08-26 22:21:52
ip: 184.107.41.5 time: 2012-08-26 22:21:55
ip: 184.107.41.5 time: 2012-08-26 22:22:01
ip: 184.107.41.5 time: 2012-08-26 22:22:09
ip: 184.107.41.5 time: 2012-08-26 22:22:17
ip: 184.107.41.5 time: 2012-08-26 22:22:27
ip: 184.107.41.5 time: 2012-08-26 22:22:33
ip: 184.107.41.5 time: 2012-08-26 22:22:36
ip: 184.107.41.5 time: 2012-08-26 22:22:39
ip: 184.107.41.5 time: 2012-08-26 22:22:47
ip: 184.107.41.5 time: 2012-08-26 22:23:01
ip: 184.107.41.5 time: 2012-08-26 22:23:07
ip: 184.107.41.5 time: 2012-08-26 22:23:08
ip: 184.107.41.5 time: 2012-08-26 22:23:10
ip: 184.107.41.5 time: 2012-08-26 22:23:22
ip: 184.107.41.5 time: 2012-08-26 22:23:28
ip: 184.107.41.5 time: 2012-08-26 22:23:38
ip: 184.107.41.5 time: 2012-08-26 22:23:43
ip: 184.107.41.5 time: 2012-08-26 22:23:45
ip: 184.107.41.5 time: 2012-08-26 22:23:46
ip: 184.107.41.5 time: 2012-08-26 22:23:47
ip: 184.107.41.5 time: 2012-08-26 22:23:50
ip: 184.107.41.5 time: 2012-08-26 22:23:59
ip: 184.107.41.5 time: 2012-08-26 22:24:00
ip: 184.107.41.5 time: 2012-08-26 22:24:03
ip: 184.107.41.5 time: 2012-08-26 22:24:09
ip: 184.107.41.5 time: 2012-08-26 22:24:13
ip: 184.107.41.5 time: 2012-08-26 22:24:14
ip: 184.107.41.5 time: 2012-08-26 22:24:24
ip: 184.107.41.5 time: 2012-08-26 22:24:38
ip: 184.107.41.5 time: 2012-08-26 22:24:40
ip: 184.107.41.5 time: 2012-08-26 22:24:44
ip: 184.107.41.5 time: 2012-08-26 22:25:09
ip: 184.107.41.5 time: 2012-08-26 22:25:27
ip: 184.107.41.5 time: 2012-08-26 22:25:38
ip: 184.107.41.5 time: 2012-08-26 22:25:40
ip: 184.107.41.5 time: 2012-08-26 22:25:53
ip: 184.107.41.5 time: 2012-08-26 22:25:56
ip: 184.107.41.5 time: 2012-08-26 22:26:33
ip: 184.107.41.5 time: 2012-08-26 22:26:43
ip: 184.107.41.5 time: 2012-08-26 22:26:46
ip: 184.107.41.5 time: 2012-08-26 22:26:51
ip: 184.107.41.5 time: 2012-08-26 22:26:59
ip: 184.107.41.5 time: 2012-08-26 22:27:11
ip: 184.107.41.5 time: 2012-08-26 22:27:35
ip: 184.107.41.5 time: 2012-08-26 22:27:37
ip: 184.107.41.5 time: 2012-08-26 22:27:50
ip: 184.107.41.5 time: 2012-08-26 22:27:52
ip: 184.107.41.5 time: 2012-08-26 22:28:06
ip: 184.107.41.5 time: 2012-08-26 22:28:27
ip: 184.107.41.5 time: 2012-08-26 22:28:29
ip: 184.107.41.5 time: 2012-08-26 22:28:30
ip: 184.107.41.5 time: 2012-08-26 22:28:32
ip: 184.107.41.5 time: 2012-08-26 22:28:35
ip: 184.107.41.5 time: 2012-08-26 22:28:35
ip: 184.107.41.5 time: 2012-08-26 22:28:36
ip: 184.107.41.5 time: 2012-08-26 22:28:36
ip: 184.107.41.5 time: 2012-08-26 22:28:39
ip: 184.107.41.5 time: 2012-08-26 22:28:41
ip: 184.107.41.5 time: 2012-08-26 22:28:44
ip: 184.107.41.5 time: 2012-08-26 22:28:51
ip: 184.107.41.5 time: 2012-08-26 22:28:58
ip: 184.107.41.5 time: 2012-08-26 22:29:19
ip: 184.107.41.5 time: 2012-08-26 22:29:22
ip: 184.107.41.5 time: 2012-08-26 22:29:38
ip: 184.107.41.5 time: 2012-08-26 22:29:48
ip: 184.107.41.5 time: 2012-08-26 22:29:48
ip: 184.107.41.5 time: 2012-08-26 22:29:56
ip: 184.107.41.5 time: 2012-08-26 22:29:58
ip: 184.107.41.5 time: 2012-08-26 22:29:58
ip: 184.107.41.5 time: 2012-08-26 22:30:00
ip: 184.107.41.5 time: 2012-08-26 22:30:03
ip: 184.107.41.5 time: 2012-08-26 22:30:03
ip: 184.107.41.5 time: 2012-08-26 22:30:16
ip: 184.107.41.5 time: 2012-08-26 22:30:22
ip: 184.107.41.5 time: 2012-08-26 22:30:24
ip: 184.107.41.5 time: 2012-08-26 22:30:25
ip: 184.107.41.5 time: 2012-08-26 22:30:28
ip: 184.107.41.5 time: 2012-08-26 22:30:34
ip: 184.107.41.5 time: 2012-08-26 22:30:40
ip: 184.107.41.5 time: 2012-08-26 22:31:07
ip: 184.107.41.5 time: 2012-08-26 22:31:09
ip: 184.107.41.5 time: 2012-08-26 22:31:22
ip: 184.107.41.5 time: 2012-08-26 22:31:28
ip: 184.107.41.5 time: 2012-08-26 22:31:30
ip: 184.107.41.5 time: 2012-08-26 22:31:33
ip: 184.107.41.5 time: 2012-08-26 22:31:36
ip: 184.107.41.5 time: 2012-08-26 22:31:46
ip: 184.107.41.5 time: 2012-08-26 22:31:55
ip: 184.107.41.5 time: 2012-08-26 22:32:11
ip: 184.107.41.5 time: 2012-08-26 22:32:48
ip: 184.107.41.5 time: 2012-08-26 22:33:03
login: utente@YYYYYY.it
ip: 184.107.41.5 time: 2012-08-26 22:10:02
ip: 184.107.41.5 time: 2012-08-26 22:11:14
ip: 184.107.41.5 time: 2012-08-26 22:11:34
ip: 184.107.41.5 time: 2012-08-26 22:11:59
ip: 184.107.41.5 time: 2012-08-26 22:12:20
ip: 184.107.41.5 time: 2012-08-26 22:13:04
ip: 184.107.41.5 time: 2012-08-26 22:13:19
ip: 184.107.41.5 time: 2012-08-26 22:13:31
ip: 184.107.41.5 time: 2012-08-26 22:13:47
ip: 184.107.41.5 time: 2012-08-26 22:13:49
ip: 184.107.41.5 time: 2012-08-26 22:13:58
ip: 184.107.41.5 time: 2012-08-26 22:14:14
ip: 184.107.41.5 time: 2012-08-26 22:14:52
ip: 184.107.41.5 time: 2012-08-26 22:14:54
ip: 184.107.41.5 time: 2012-08-26 22:15:07
ip: 184.107.41.5 time: 2012-08-26 22:15:44
ip: 184.107.41.5 time: 2012-08-26 22:16:23
ip: 184.107.41.5 time: 2012-08-26 22:17:58
ip: 184.107.41.5 time: 2012-08-26 22:18:06
ip: 184.107.41.5 time: 2012-08-26 22:18:13
ip: 184.107.41.5 time: 2012-08-26 22:18:15
ip: 184.107.41.5 time: 2012-08-26 22:18:48
ip: 184.107.41.5 time: 2012-08-26 22:18:49
ip: 184.107.41.5 time: 2012-08-26 22:18:49
ip: 184.107.41.5 time: 2012-08-26 22:19:16
ip: 184.107.41.5 time: 2012-08-26 22:19:32
ip: 184.107.41.5 time: 2012-08-26 22:19:33
ip: 184.107.41.5 time: 2012-08-26 22:19:41
ip: 184.107.41.5 time: 2012-08-26 22:19:55
ip: 184.107.41.5 time: 2012-08-26 22:20:08
ip: 184.107.41.5 time: 2012-08-26 22:20:10
ip: 184.107.41.5 time: 2012-08-26 22:20:16
ip: 184.107.41.5 time: 2012-08-26 22:20:21
ip: 184.107.41.5 time: 2012-08-26 22:20:34
ip: 184.107.41.5 time: 2012-08-26 22:20:36
ip: 184.107.41.5 time: 2012-08-26 22:20:52
ip: 184.107.41.5 time: 2012-08-26 22:20:52
ip: 184.107.41.5 time: 2012-08-26 22:21:05
ip: 184.107.41.5 time: 2012-08-26 22:21:31
ip: 184.107.41.5 time: 2012-08-26 22:21:47
ip: 184.107.41.5 time: 2012-08-26 22:22:02
ip: 184.107.41.5 time: 2012-08-26 22:22:18
ip: 184.107.41.5 time: 2012-08-26 22:22:24
ip: 184.107.41.5 time: 2012-08-26 22:22:32
ip: 184.107.41.5 time: 2012-08-26 22:23:01
ip: 184.107.41.5 time: 2012-08-26 22:23:22
ip: 184.107.41.5 time: 2012-08-26 22:23:23
ip: 184.107.41.5 time: 2012-08-26 22:23:47
ip: 184.107.41.5 time: 2012-08-26 22:23:50
ip: 184.107.41.5 time: 2012-08-26 22:24:07
ip: 184.107.41.5 time: 2012-08-26 22:24:11
ip: 184.107.41.5 time: 2012-08-26 22:24:17
ip: 184.107.41.5 time: 2012-08-26 22:24:17
ip: 184.107.41.5 time: 2012-08-26 22:24:29
ip: 184.107.41.5 time: 2012-08-26 22:24:41
ip: 184.107.41.5 time: 2012-08-26 22:24:54
ip: 184.107.41.5 time: 2012-08-26 22:24:57
ip: 184.107.41.5 time: 2012-08-26 22:25:03
ip: 184.107.41.5 time: 2012-08-26 22:25:21
ip: 184.107.41.5 time: 2012-08-26 22:25:29
ip: 184.107.41.5 time: 2012-08-26 22:25:30
ip: 184.107.41.5 time: 2012-08-26 22:25:44
ip: 184.107.41.5 time: 2012-08-26 22:25:45
ip: 184.107.41.5 time: 2012-08-26 22:26:07
ip: 184.107.41.5 time: 2012-08-26 22:26:12
ip: 184.107.41.5 time: 2012-08-26 22:26:15
ip: 184.107.41.5 time: 2012-08-26 22:26:28
ip: 184.107.41.5 time: 2012-08-26 22:26:28
ip: 184.107.41.5 time: 2012-08-26 22:26:29
ip: 184.107.41.5 time: 2012-08-26 22:26:53
ip: 184.107.41.5 time: 2012-08-26 22:26:56
ip: 184.107.41.5 time: 2012-08-26 22:27:00
ip: 184.107.41.5 time: 2012-08-26 22:27:11
ip: 184.107.41.5 time: 2012-08-26 22:27:39
ip: 184.107.41.5 time: 2012-08-26 22:27:40
ip: 184.107.41.5 time: 2012-08-26 22:28:21
ip: 184.107.41.5 time: 2012-08-26 22:28:32
ip: 184.107.41.5 time: 2012-08-26 22:28:45
ip: 184.107.41.5 time: 2012-08-26 22:28:56
ip: 184.107.41.5 time: 2012-08-26 22:29:04
ip: 184.107.41.5 time: 2012-08-26 22:29:05
ip: 184.107.41.5 time: 2012-08-26 22:29:23
ip: 184.107.41.5 time: 2012-08-26 22:29:35
ip: 184.107.41.5 time: 2012-08-26 22:29:42
ip: 184.107.41.5 time: 2012-08-26 22:29:52
ip: 184.107.41.5 time: 2012-08-26 22:29:54
ip: 184.107.41.5 time: 2012-08-26 22:30:00
ip: 184.107.41.5 time: 2012-08-26 22:30:08
ip: 184.107.41.5 time: 2012-08-26 22:30:15
ip: 184.107.41.5 time: 2012-08-26 22:30:15
ip: 184.107.41.5 time: 2012-08-26 22:30:20
ip: 184.107.41.5 time: 2012-08-26 22:30:24
ip: 184.107.41.5 time: 2012-08-26 22:30:30
ip: 184.107.41.5 time: 2012-08-26 22:30:41
ip: 184.107.41.5 time: 2012-08-26 22:30:42
ip: 184.107.41.5 time: 2012-08-26 22:30:47
ip: 184.107.41.5 time: 2012-08-26 22:30:50
ip: 184.107.41.5 time: 2012-08-26 22:31:06
ip: 184.107.41.5 time: 2012-08-26 22:31:08
ip: 184.107.41.5 time: 2012-08-26 22:31:28
ip: 184.107.41.5 time: 2012-08-26 22:31:30
ip: 184.107.41.5 time: 2012-08-26 22:31:34
ip: 184.107.41.5 time: 2012-08-26 22:31:37
ip: 184.107.41.5 time: 2012-08-26 22:31:42
ip: 184.107.41.5 time: 2012-08-26 22:31:47
ip: 184.107.41.5 time: 2012-08-26 22:31:53
ip: 184.107.41.5 time: 2012-08-26 22:32:07
ip: 184.107.41.5 time: 2012-08-26 22:32:08
ip: 184.107.41.5 time: 2012-08-26 22:32:15
ip: 184.107.41.5 time: 2012-08-26 22:32:27
ip: 184.107.41.5 time: 2012-08-26 22:32:39
ip: 184.107.41.5 time: 2012-08-26 22:32:39
ip: 184.107.41.5 time: 2012-08-26 22:32:43
ip: 184.107.41.5 time: 2012-08-26 22:32:55
ip: 184.107.41.5 time: 2012-08-26 22:33:11
ip: 184.107.41.5 time: 2012-08-26 22:33:11
ip: 184.107.41.5 time: 2012-08-26 22:33:17
ip: 184.107.41.5 time: 2012-08-26 22:33:26
ip: 184.107.41.5 time: 2012-08-26 22:33:26
ip: 184.107.41.5 time: 2012-08-26 22:33:31
ip: 184.107.41.5 time: 2012-08-26 22:33:43
ip: 184.107.41.5 time: 2012-08-26 22:33:44
ip: 184.107.41.5 time: 2012-08-26 22:33:44
ip: 184.107.41.5 time: 2012-08-26 22:33:50
ip: 184.107.41.5 time: 2012-08-26 22:33:58
ip: 184.107.41.5 time: 2012-08-26 22:34:02
ip: 184.107.41.5 time: 2012-08-26 22:34:15
ip: 184.107.41.5 time: 2012-08-26 22:34:29
ip: 184.107.41.5 time: 2012-08-26 22:34:32
ip: 184.107.41.5 time: 2012-08-26 22:34:32
ip: 74.54.132.202 time: 2012-08-26 22:34:40
ip: 74.54.132.202 time: 2012-08-26 22:34:53
ip: 184.107.41.5 time: 2012-08-26 22:34:58
ip: 184.107.41.5 time: 2012-08-26 22:34:59
ip: 184.107.41.5 time: 2012-08-26 22:35:02
ip: 184.107.41.5 time: 2012-08-26 22:35:02
ip: 184.107.41.5 time: 2012-08-26 22:35:06
ip: 184.107.41.5 time: 2012-08-26 22:35:07
ip: 74.54.132.202 time: 2012-08-26 22:35:09
ip: 74.54.132.202 time: 2012-08-26 22:35:13
ip: 184.107.41.5 time: 2012-08-26 22:35:27
ip: 74.54.132.202 time: 2012-08-26 22:35:32
ip: 184.107.41.5 time: 2012-08-26 22:35:41
ip: 184.107.41.5 time: 2012-08-26 22:35:43
ip: 184.107.41.5 time: 2012-08-26 22:35:53
ip: 74.54.132.202 time: 2012-08-26 22:35:53
ip: 74.54.132.202 time: 2012-08-26 22:36:01
ip: 184.107.41.5 time: 2012-08-26 22:36:04
ip: 184.107.41.5 time: 2012-08-26 22:36:09
ip: 184.107.41.5 time: 2012-08-26 22:36:12