{"id":99147,"date":"2021-02-16T16:22:36","date_gmt":"2021-02-16T14:22:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/skanirovnie-portov-privelo-k-blokirovke-podseti-provajderom-iz-za-popadaniya-v-spisok-uceprotect"},"modified":"2021-02-16T16:22:36","modified_gmt":"2021-02-16T14:22:36","slug":"skanirovnie-portov-privelo-k-blokirovke-podseti-provajderom-iz-za-popadaniya-v-spisok-uceprotect","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/skanirovnie-portov-privelo-k-blokirovke-podseti-provajderom-iz-za-popadaniya-v-spisok-uceprotect","title":{"rendered":"Skenov\u00e1n\u00ed port\u016f vedlo k blokaci pods\u00edt\u011b poskytovatelem kv\u016fli za\u0159azen\u00ed na seznam UCEPROTECT.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vincent Canfield, spr\u00e1vce po\u0161tovn\u00ed slu\u017eby a hostingu reseller cock.li, zjistil, \u017ee cel\u00e1 jeho IP s\u00ed\u0165 byla automaticky za\u0159azena na seznam DNSBL UCEPROTECT za skenov\u00e1n\u00ed port\u016f z okoln\u00edch virtu\u00e1ln\u00edch stroj\u016f. Vincentova pods\u00ed\u0165 byla za\u0159azena na \u00farove\u0148 Level 3, kde se blokov\u00e1n\u00ed prov\u00e1d\u00ed podle \u010d\u00edsel autonomn\u00edch syst\u00e9m\u016f a zahrnuje cel\u00e9 pods\u00edt\u011b, ze kter\u00fdch se mnohokr\u00e1t a pro r\u016fzn\u00e9 adresy aktivovaly detektory spamu. V d\u016fsledku toho poskytovatel M247 vypnul ozn\u00e1men\u00ed jedn\u00e9 z jeho s\u00edt\u00ed v BGP, \u010d\u00edm\u017e fakticky pozastavil slu\u017eby. <\/p>\n

Probl\u00e9m spo\u010d\u00edv\u00e1 v tom, \u017ee fiktivn\u00ed servery<\/a> UCEPROTECT, kter\u00e9 se vyd\u00e1vaj\u00ed za otev\u0159en\u00e9 relay servery a zaznamen\u00e1vaj\u00ed pokusy o odes\u00edl\u00e1n\u00ed po\u0161ty p\u0159es sebe, automaticky za\u0159azuj\u00ed adresy na blokovac\u00ed seznam na z\u00e1klad\u011b jak\u00e9koli s\u00ed\u0165ov\u00e9 aktivity, bez ov\u011b\u0159en\u00ed nav\u00e1z\u00e1n\u00ed s\u00ed\u0165ov\u00e9ho spojen\u00ed. Podobn\u00e1 metoda za\u0159azen\u00ed na blokovac\u00ed seznam je tak\u00e9 pou\u017e\u00edv\u00e1na projektem Spamhaus. <\/p>\n

K za\u0159azen\u00ed na blokovac\u00ed seznam sta\u010d\u00ed odeslat jeden TCP SYN paket, co\u017e mohou zneu\u017e\u00edt \u00fato\u010dn\u00edci. Konkr\u00e9tn\u011b, proto\u017ee oboustrann\u00e9 potvrzen\u00ed TCP spojen\u00ed nen\u00ed vy\u017eadov\u00e1no, je mo\u017en\u00e9 pomoc\u00ed spoofingu odeslat paket s uveden\u00edm fale\u0161n\u00e9ho IP adres<\/a> a iniciovat za\u0159azen\u00ed na blokovac\u00ed seznam jak\u00e9hokoli hostitele. P\u0159i simulaci aktivity z n\u011bkolika adres lze dos\u00e1hnout eskalace blokov\u00e1n\u00ed na \u00farove\u0148 Level 2 a Level 3, kter\u00e9 prov\u00e1d\u011bj\u00ed blokaci podle pods\u00edt\u00ed a \u010d\u00edsel autonomn\u00edch syst\u00e9m\u016f. <\/p>\n

Seznam Level 3 byl p\u016fvodn\u011b vytvo\u0159en za \u00fa\u010delem boje proti poskytovatel\u016fm, kte\u0159\u00ed podporuj\u00ed \u0161kodlivou aktivitu sv\u00fdch z\u00e1kazn\u00edk\u016f a nereaguj\u00ed na st\u00ed\u017enosti (nap\u0159\u00edklad hostingy, kter\u00e9 jsou speci\u00e1ln\u011b vytv\u00e1\u0159eny pro um\u00edst\u011bn\u00ed neleg\u00e1ln\u00edho obsahu nebo obsluhu spammer\u016f). P\u0159ed n\u011bkolika dny UCEPROTECT zm\u011bnil pravidla pro za\u0159azen\u00ed na seznamy Level 2 a Level 3, co\u017e vedlo k agresivn\u011bj\u0161\u00ed filtraci a n\u00e1r\u016fstu velikosti seznam\u016f. Nap\u0159\u00edklad po\u010det z\u00e1znam\u016f v seznamu Level 3 vzrostl z 28 na 843 autonomn\u00edch syst\u00e9m\u016f. <\/p>\n

Proti UCEPROTECT byla vyj\u00e1d\u0159ena my\u0161lenka pou\u017eit\u00ed spoofingu adres p\u0159i skenov\u00e1n\u00ed s uveden\u00edm IP z rozsahu sponzor\u016f UCEPROTECT. Nakonec UCEPROTECT za\u0159adil adresy sv\u00fdch sponzor\u016f a mnoha dal\u0161\u00edch nevinn\u00fdch do sv\u00fdch datab\u00e1z\u00ed, co\u017e zp\u016fsobilo probl\u00e9my s doru\u010dov\u00e1n\u00edm e-mail\u016f. V\u010detn\u011b toho byla na blokovac\u00ed seznam za\u0159azena CDN s\u00ed\u0165 spole\u010dnosti Sucuri.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u0438\u043d\u0441\u0435\u043d\u0442 \u041a\u044d\u043d\u0444\u0438\u043b\u0434 (Vincent Canfield), \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u0430-\u0440\u0435\u0441\u0435\u043b\u043b\u0435\u0440\u0430 cock.li, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u0432\u0441\u044e \u0435\u0433\u043e IP-\u0441\u0435\u0442\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043d\u0435\u0441\u043b\u0438 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a DNSBL UCEPROTECT \u0437\u0430 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 \u0441 \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u041f\u043e\u0434\u0441\u0435\u0442\u044c \u0412\u0438\u043d\u0441\u0435\u043d\u0442\u0430 \u043f\u043e\u043f\u0430\u043b\u0430 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a Level 3, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e \u043d\u043e\u043c\u0435\u0440\u0430\u043c \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0446\u0435\u043b\u044b\u0435 \u043f\u043e\u0434\u0441\u0435\u0442\u0438, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99147","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Skenov\u00e1n\u00ed port\u016f vedlo k zablokov\u00e1n\u00ed pods\u00edt\u011b poskytovatelem kv\u016fli za\u0159azen\u00ed na seznam UCEPROTECT | ProHoster","description":"Vincent Canfield, administr\u00e1tor po\u0161tovn\u00ed slu\u017eby a hostingov\u00e9ho reselleru cock.li, zjistil, \u017ee cel\u00e1 jeho IP s\u00ed\u0165 byla automaticky za\u0159azena na seznam DNSBL UCEPROTECT kv\u016fli skenov\u00e1n\u00ed port\u016f z vedlej\u0161\u00edch.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/skanirovnie-portov-privelo-k-blokirovke-podseti-provajderom-iz-za-popadaniya-v-spisok-uceprotect","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0435 \u043f\u043e\u0434\u0441\u0435\u0442\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u043c \u0438\u0437-\u0437\u0430 \u043f\u043e\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u0432 \u0441\u043f\u0438\u0441\u043e\u043a UCEPROTECT | ProHoster","og:description":"\u0412\u0438\u043d\u0441\u0435\u043d\u0442 \u041a\u044d\u043d\u0444\u0438\u043b\u0434 (Vincent Canfield), \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u0430-\u0440\u0435\u0441\u0435\u043b\u043b\u0435\u0440\u0430 cock.li, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u0432\u0441\u044e \u0435\u0433\u043e IP-\u0441\u0435\u0442\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043d\u0435\u0441\u043b\u0438 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a DNSBL UCEPROTECT \u0437\u0430 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 \u0441 \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0445.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/skanirovnie-portov-privelo-k-blokirovke-podseti-provajderom-iz-za-popadaniya-v-spisok-uceprotect","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-02-16T14:22:36+00:00","article:modified_time":"2021-02-16T14:22:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99147","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:54:35","updated":"2026-02-09 16:53:41","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99147","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=99147"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99147\/revisions"}],"predecessor-version":[{"id":159158,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99147\/revisions\/159158"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=99147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=99147"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=99147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}