{"id":30311,"date":"2019-10-31T21:34:49","date_gmt":"2019-10-31T18:34:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/analiz-atak-na-hanipot-cowrie\/"},"modified":"2019-10-31T21:34:49","modified_gmt":"2019-10-31T18:34:49","slug":"analiz-atak-na-hanipot-cowrie","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/analiz-atak-na-hanipot-cowrie","title":{"rendered":"Anal\u00fdza \u00fatok\u016f na honeypot Cowrie","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><b>Statistika za 24 hodiny po instalaci honeypotu na uzlu Digital Ocean v Singapuru<\/b> <\/p>\n<h1>Piu-piu! Za\u010dneme hned s mapou \u00fatok\u016f<\/h1>\n<p>\nNa\u0161e super skv\u011bl\u00e1 mapa zobrazuje unik\u00e1tn\u00ed ASN, kter\u00e9 se p\u0159ipojily k na\u0161emu honeypotu Cowrie za 24 hodin. \u017dlut\u00e1 odpov\u00edd\u00e1 SSH p\u0159ipojen\u00edm, zat\u00edmco \u010derven\u00e1 Telnetu. Takov\u00e9 animace \u010dasto ohromuj\u00ed spr\u00e1vn\u00ed radu spole\u010dnosti, co\u017e umo\u017e\u0148uje z\u00edskat v\u00edce financ\u00ed na bezpe\u010dnost a zdroje. P\u0159esto m\u00e1 mapa ur\u010ditou hodnotu, jasn\u011b ukazuje geografick\u00e9 a organiza\u010dn\u00ed roz\u0161\u00ed\u0159en\u00ed zdroj\u016f \u00fatok\u016f na n\u00e1\u0161 host za 24 hodin. V animaci nen\u00ed zobrazen objem provozu z ka\u017ed\u00e9ho zdroje.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Co je mapa Pew Pew?<\/h3>\n<p>\n<i>Mapa Pew Pew<\/i> \u2014 to je <noindex><a rel=\"nofollow\" href=\"https:\/\/krebsonsecurity.com\/2015\/01\/whos-attacking-whom-realtime-attack-trackers\/\">vizualizace kybernetick\u00fdch \u00fatok\u016f<\/a><\/noindex>, obvykle animovan\u00e1 a velmi kr\u00e1sn\u00e1. Je to m\u00f3dn\u00ed zp\u016fsob, jak prodat sv\u016fj produkt, notoricky zn\u00e1m\u00fd t\u00edm, \u017ee jej pou\u017e\u00edvala spole\u010dnost Norse Corp. Spole\u010dnost \u0161patn\u011b skon\u010dila: uk\u00e1zalo se, \u017ee kr\u00e1sn\u00e9 animace byly jejich jedinou kvalitou, a pro anal\u00fdzu pou\u017e\u00edvali fragment\u00e1rn\u00ed data.<\/p>\n<h3>Vytvo\u0159eno pomoc\u00ed Leafletjs<\/h3>\n<p>\nPro ty, kte\u0159\u00ed cht\u011bj\u00ed vyvinout mapu \u00fatok\u016f pro velkou obrazovku v opera\u010dn\u00edm centru (va\u0161emu \u0161\u00e9fovi se to bude l\u00edbit), existuje knihovna <noindex><a rel=\"nofollow\" href=\"https:\/\/leafletjs.com\/\">leafletjs<\/a><\/noindex>. Spojujeme ji s pluginem <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/lit-forest\/leaflet.migrationLayer\">leaflet migration layer<\/a><\/noindex>, slu\u017ebou Maxmind GeoIP \u2013 <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/pewpew\/map.html\">a hotovo<\/a><\/noindex>.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/pewpew\/map.html\"><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatok\u016f na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/c4765ba5f2c89e502e5d8791dcfcfc62.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h1>WTF: co je to za honeypot Cowrie?<\/h1>\n<p>\nHoneypot je syst\u00e9m, kter\u00fd je um\u00edst\u011bn v s\u00edti speci\u00e1ln\u011b pro l\u00e1k\u00e1n\u00ed \u00fato\u010dn\u00edk\u016f. P\u0159ipojen\u00ed k syst\u00e9mu jsou obvykle nez\u00e1konn\u00e1 a umo\u017e\u0148uj\u00ed odhalit \u00fato\u010dn\u00edka pomoc\u00ed podrobn\u00fdch log\u016f. Logy uchov\u00e1vaj\u00ed nejen b\u011b\u017en\u00e9 informace o p\u0159ipojen\u00ed, ale tak\u00e9 informace o sezen\u00ed, kter\u00e9 odhaluj\u00ed <b>techniku, taktiku a postupy (TTP)<\/b> \u00fato\u010dn\u00edka.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/micheloosterhof\/cowrie\">Honeypot Cowrie<\/a><\/noindex> je ur\u010den pro <b>z\u00e1znam p\u0159ipojen\u00ed SSH a Telnet<\/b>. Takov\u00e9 honeypoty jsou \u010dasto vystavov\u00e1ny na internet, aby sledovaly n\u00e1stroje, skripty a hostitele \u00fato\u010dn\u00edk\u016f.<\/p>\n<blockquote><p>Moje poselstv\u00ed pro spole\u010dnosti, kter\u00e9 si mysl\u00ed, \u017ee na n\u011b nikdo ne\u00fato\u010d\u00ed: \u201e\u0160patn\u011b hled\u00e1te.\u201c<br \/>\n<i>\u2014 James Snook<\/i><\/p><\/blockquote>\n<p>\n<img decoding=\"async\" alt=\"Anal\u00fdza \u00fatok\u016f na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/40feddaacc42add563f98a0f64c1c3b0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h1>Co v log\u00e1ch?<\/h1>\n<p><\/p>\n<h3>Celkov\u00fd po\u010det p\u0159ipojen\u00ed<\/h3>\n<p>\nZ mnoha hostitel\u016f p\u0159i\u0161ly opakovan\u00e9 pokusy o p\u0159ipojen\u00ed. To je norm\u00e1ln\u00ed, proto\u017ee v \u00fato\u010dn\u00fdch skriptech je zaps\u00e1n seznam p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f a zkou\u0161ej\u00ed n\u011bkolik kombinac\u00ed. Honeypot Cowrie je nastaven na p\u0159\u00edjem ur\u010dit\u00fdch kombinac\u00ed u\u017eivatelsk\u00e9ho jm\u00e9na a hesla. To se nastavuje v <b>souboru user.db<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatok\u016f na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/d7da6ec208e821453607fb6c29c7e347.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Geografie \u00fatok\u016f<\/h3>\n<p>\nPodle \u00fadaj\u016f geolokace Maxmind jsem spo\u010d\u00edtal po\u010det p\u0159ipojen\u00ed z ka\u017ed\u00e9 zem\u011b. Braz\u00edlie a \u010c\u00edna vedou s velk\u00fdm odstupem, z t\u011bchto zem\u00ed \u010dasto p\u0159ich\u00e1z\u00ed velk\u00fd hluk od skener\u016f.<\/p>\n<p><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatok\u016f na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/0dd7a52da1c12db2f317f2195e92bccf.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Vlastn\u00edk s\u00ed\u0165ov\u00e9ho bloku<\/h3>\n<p>\nStudium vlastn\u00edk\u016f s\u00ed\u0165ov\u00fdch blok\u016f (ASN) m\u016f\u017ee odhalit organizace s velk\u00fdm po\u010dtem \u00fato\u010dn\u00fdch hostitel\u016f. V t\u011bchto p\u0159\u00edpadech je v\u0161ak v\u017edy dobr\u00e9 m\u00edt na pam\u011bti, \u017ee mnoho \u00fatok\u016f poch\u00e1z\u00ed z infikovan\u00fdch hostitel\u016f. Je rozumn\u00e9 p\u0159edpokl\u00e1dat, \u017ee v\u011bt\u0161ina \u00fato\u010dn\u00edk\u016f nen\u00ed natolik hloup\u00e1, aby skenovala s\u00ed\u0165 z dom\u00e1c\u00edho po\u010d\u00edta\u010de.<\/p>\n<p><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatok\u016f na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/0f60be7772ea993e2c0a5d0ab6c08cd8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Otev\u0159en\u00e9 porty na \u00fato\u010dn\u00fdch syst\u00e9mech (\u00fadaje Shodan.io)<\/h3>\n<p>\nProhn\u00e1n\u00ed seznamu IP p\u0159es vynikaj\u00edc\u00ed <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.shodan.io\/\">Shodan API<\/a><\/noindex> rychle ur\u010duje <b>syst\u00e9my s otev\u0159en\u00fdmi porty<\/b> a kter\u00e9 to jsou porty. Na obr\u00e1zku n\u00ed\u017ee je zn\u00e1zorn\u011bna koncentrace otev\u0159en\u00fdch port\u016f podle zem\u00ed a organizac\u00ed. Mohly by b\u00fdt odhaleny bloky kompromitovan\u00fdch syst\u00e9m\u016f, ale v r\u00e1mci <b>mal\u00e9 vzorky<\/b> nen\u00ed vid\u011bt nic neobvykl\u00e9ho, krom\u011b velk\u00e9ho po\u010dtu <b>otev\u0159en\u00fdch port\u016f 500 v \u010c\u00edn\u011b.<\/b>.<\/p>\n<p>Zaj\u00edmav\u00fdm zji\u0161t\u011bn\u00edm je velk\u00fd po\u010det syst\u00e9m\u016f v Braz\u00edlii, kter\u00e9 <b>nemaj\u00ed otev\u0159en\u00e9 22, 23<\/b> nebo <b>dal\u0161\u00ed porty<\/b>, podle \u00fadaj\u016f Censys a Shodan. Zd\u00e1 se, \u017ee se jedn\u00e1 o p\u0159ipojen\u00ed z koncov\u00fdch u\u017eivatelsk\u00fdch po\u010d\u00edta\u010d\u016f.<\/p>\n<p><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatok\u016f na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/6138379c7d069807f01b57a8d97784fb.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <\/p>\n<h3>Boti? Ne nutn\u011b.<\/h3>\n<p>\n\u00dadaje <noindex><a rel=\"nofollow\" href=\"https:\/\/censys.io\/\">Censys<\/a><\/noindex> pro porty 22 a 23 za ten den uk\u00e1zaly zvl\u00e1\u0161tn\u00ed v\u011bc. P\u0159edpokl\u00e1dal jsem, \u017ee v\u011bt\u0161ina sken\u016f a heslov\u00fdch \u00fatok\u016f poch\u00e1z\u00ed od bot\u016f. Skript se \u0161\u00ed\u0159\u00ed p\u0159es otev\u0159en\u00e9 porty, zkou\u0161\u00ed hesla, a z nov\u00e9ho syst\u00e9mu se kop\u00edruje a pokra\u010duje v \u0161\u00ed\u0159en\u00ed stejnou metodou.<\/p>\n<p>Ale zde je vid\u011bt, \u017ee pouze u mal\u00e9ho po\u010dtu hostitel\u016f, skenuj\u00edc\u00edch telnet, je venku otev\u0159en port 23. To znamen\u00e1, \u017ee syst\u00e9my jsou bu\u010f kompromitov\u00e1ny jin\u00fdm zp\u016fsobem, nebo \u00fato\u010dn\u00edci spou\u0161t\u00ed skripty ru\u010dn\u011b.<\/p>\n<p><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatok\u016f na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/4c3ccbc609a46365473f582315ca90bd.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Dom\u00e1c\u00ed p\u0159ipojen\u00ed<\/h3>\n<p>\nDal\u0161\u00edm zaj\u00edmav\u00fdm zji\u0161t\u011bn\u00edm bylo velk\u00e9 mno\u017estv\u00ed dom\u00e1c\u00edch u\u017eivatel\u016f ve vzorku. Pomoc\u00ed <b>zp\u011btn\u00e9ho vyhled\u00e1v\u00e1n\u00ed <\/b> jsem ur\u010dil 105 p\u0159ipojen\u00ed z konkr\u00e9tn\u00edch dom\u00e1c\u00edch po\u010d\u00edta\u010d\u016f. U mnoha dom\u00e1c\u00edch p\u0159ipojen\u00ed p\u0159i zp\u011btn\u00e9m vyhled\u00e1v\u00e1n\u00ed DNS se zobrazuje jm\u00e9no hostitele se slovy dsl, home, cable, fiber a podobn\u011b.<\/p>\n<p><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatok\u016f na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/a665a90dfdbbfb5e9971fb2885ccd669.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h1>U\u010dte se a zkoumejte: vytvo\u0159te si vlastn\u00ed honeypot<\/h1>\n<p>\nNed\u00e1vno jsem napsal stru\u010dn\u00fd manu\u00e1l, jak <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/cowrie-honeypot-ubuntu\/\">nainstalovat na sv\u00e9 syst\u00e9m honeypot Cowrie.<\/a><\/noindex>. Jak ji\u017e bylo zm\u00edn\u011bno, v na\u0161em p\u0159\u00edpad\u011b byl pou\u017eit Digital Ocean VPS v Singapuru. N\u00e1klady na 24 hodin anal\u00fdzy \u010dinily doslova n\u011bkolik cent\u016f a \u010das na sestaven\u00ed syst\u00e9mu byl 30 minut.<\/p>\n<p>M\u00edsto toho, abyste spou\u0161t\u011bli Cowrie na internetu a chytali ve\u0161ker\u00fd \u0161um, m\u016f\u017eete vyu\u017e\u00edt honeypot v m\u00edstn\u00ed s\u00edti. Sta\u010d\u00ed nastavit upozorn\u011bn\u00ed, pokud jsou na ur\u010dit\u00e9 porty prov\u00e1d\u011bny dotazy. To m\u016f\u017ee b\u00fdt bu\u010f \u00fato\u010dn\u00edk uvnit\u0159 s\u00edt\u011b, nebo zv\u011bdav\u00fd zam\u011bstnanec, nebo skenov\u00e1n\u00ed zranitelnost\u00ed.<\/p>\n<h1>Z\u00e1v\u011bry<\/h1>\n<p>\nPo sledov\u00e1n\u00ed aktivit \u00fato\u010dn\u00edk\u016f b\u011bhem dne je jasn\u00e9, \u017ee nelze identifikovat jasn\u00fd zdroj \u00fatok\u016f v n\u011bjak\u00e9 organizaci, zemi nebo dokonce opera\u010dn\u00edm syst\u00e9mu.<\/p>\n<p>\u0160irok\u00e1 roz\u0161\u00ed\u0159enost zdroj\u016f ukazuje, \u017ee \u0161um skenov\u00e1n\u00ed je konstantn\u00ed a nen\u00ed spojen s konkr\u00e9tn\u00edm zdrojem. Ka\u017ed\u00fd, kdo pracuje na internetu, by se m\u011bl ujistit, \u017ee jeho syst\u00e9m <b>m\u00e1 n\u011bkolik \u00farovn\u00ed zabezpe\u010den\u00ed<\/b>. B\u011b\u017en\u00fdm a efektivn\u00edm \u0159e\u0161en\u00edm pro <b>SSH<\/b> bude p\u0159esun slu\u017eby na n\u00e1hodn\u00fd vysok\u00fd port. To neodstra\u0148uje pot\u0159ebu p\u0159\u00edsn\u00e9 ochrany heslem a monitorov\u00e1n\u00ed, ale alespo\u0148 zaji\u0161\u0165uje, \u017ee logy nejsou zahlceny neust\u00e1l\u00fdm skenov\u00e1n\u00edm. P\u0159ipojen\u00ed na vysok\u00fd port jsou s v\u011bt\u0161\u00ed pravd\u011bpodobnost\u00ed c\u00edlen\u00e9 \u00fatoky, kter\u00e9 by v\u00e1s mohly zaj\u00edmat.<\/p>\n<p>\u010casto jsou otev\u0159en\u00e9 telnet porty na routerech nebo jin\u00fdch za\u0159\u00edzen\u00edch, tak\u017ee je nelze snadno p\u0159esunout na vysok\u00fd port. <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/nmap-online-port-scanner\/\">Informace o v\u0161ech otev\u0159en\u00fdch portech<\/a><\/noindex> a <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/domain-profiler\/\">\u00fatokov\u00e9 plochy<\/a><\/noindex> \u2014 je jedin\u00fd zp\u016fsob, jak se ujistit, \u017ee tyto slu\u017eby jsou chr\u00e1n\u011bny firewallem nebo jsou vypnuty. Pokud je to mo\u017en\u00e9, je lep\u0161\u00ed Telnet v\u016fbec nepou\u017e\u00edvat, tento protokol nen\u00ed \u0161ifrov\u00e1n. Pokud je nezbytn\u011b nutn\u00fd, pe\u010dliv\u011b ho kontrolujte a pou\u017e\u00edvejte spolehliv\u00e1 hesla.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/436076\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443! \u041d\u0430\u0447\u043d\u0451\u043c \u0441\u0440\u0430\u0437\u0443 \u0441 \u043a\u0430\u0440\u0442\u044b \u0430\u0442\u0430\u043a \u041d\u0430\u0448\u0430 \u0441\u0443\u043f\u0435\u0440\u043a\u043b\u0430\u0441\u0441\u043d\u0430\u044f \u043a\u0430\u0440\u0442\u0430 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 ASN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0438\u0441\u044c \u043a \u043d\u0430\u0448\u0435\u043c\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0443 Cowrie \u0437\u0430 24 \u0447\u0430\u0441\u0430. \u0416\u0451\u043b\u0442\u044b\u0439 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u043c, \u0430 \u043a\u0440\u0430\u0441\u043d\u044b\u0439\u00a0\u2014 Telnet. \u0422\u0430\u043a\u0438\u0435 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438 \u0447\u0430\u0441\u0442\u043e \u0432\u043f\u0435\u0447\u0430\u0442\u043b\u044f\u044e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0431\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30311","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443!\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/analiz-atak-na-hanipot-cowrie\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 \u0445\u0430\u043d\u0438\u043f\u043e\u0442 Cowrie | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443!\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/analiz-atak-na-hanipot-cowrie\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:34:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:34:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Anal\u00fdza \u00fatok\u016f na honeypot Cowrie | ProHoster","description":"Statistika za 24 hodin po instalaci honeypotu na uzlu Digital Ocean v Singapuru P\u00ed-p\u00ed!","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/analiz-atak-na-hanipot-cowrie","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 \u0445\u0430\u043d\u0438\u043f\u043e\u0442 Cowrie | ProHoster","og:description":"\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443!","og:url":"https:\/\/prohoster.info\/cs\/blog\/analiz-atak-na-hanipot-cowrie","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:49+00:00","article:modified_time":"2019-10-31T18:34:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30311","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:36:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:37:27","updated":"2026-01-21 00:36:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/30311","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=30311"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/30311\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=30311"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=30311"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=30311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}