{"id":30312,"date":"2019-10-31T21:34:49","date_gmt":"2019-10-31T18:34:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij\/"},"modified":"2019-10-31T21:34:49","modified_gmt":"2019-10-31T18:34:49","slug":"lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","title":{"rendered":"Trap (tarpit) for incoming SSH connections","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Det er ingen hemmelighed, at internettet er et meget fjendtligt milj\u00f8. S\u00e5 snart du opretter en server, bliver den straks udsat for masser af angreb og mange scanninger. Et eksempel er <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/436076\/\">honeypoten fra sikkerhedseksperter<\/a><\/noindex> , hvor man kan vurdere omfanget af denne r\u00e5dne trafik. Faktisk kan 99% af trafikken p\u00e5 en gennemsnitlig server v\u00e6re ondsindet.<\/p>\n<p>Tarpit er en port-trap, der bruges til at bremse indkommende forbindelser. Hvis et fremmed system fors\u00f8ger at oprette forbindelse til denne port, kan det ikke hurtigt lukke forbindelsen. Det vil skulle bruge sine systemressourcer og vente p\u00e5, at forbindelsen afbrydes ved timeout, eller manuelt afbryde den.<\/p>\n<p>Tarpits anvendes oftest til beskyttelse. Teknologien blev f\u00f8rste gang udviklet for at beskytte mod computerorme. Og nu kan den bruges til at g\u00f8re livet surt for spammerne og forskerne, der laver omfattende scanninger af alle IP-adresser i r\u00e6kkef\u00f8lge (eksempler p\u00e5 Habr: <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.haschek.at\/2019\/i-scanned-austria.html\">\u00d8strig<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/444490\/\">Ukraine<\/a><\/noindex>).<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nEn af systemadministratorerne ved navn Kris Vellons, var tilsyneladende tr\u00e6t af at overv\u00e5ge dette kaos \u2014 og han skrev et lille program <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/skeeto\/endlessh\">Endlessh<\/a><\/noindex>, en tarpit for SSH, der bremser indkommende forbindelser. Programmet \u00e5bner en port (standard til test er port 2222) og udgiver sig for at v\u00e6re en SSH-server, mens det i virkeligheden etablerer en uendelig forbindelse med den indkommende klient, indtil den giver op. Dette kan forts\u00e6tte i flere dage eller mere, indtil klienten falder fra.<\/p>\n<p>Installation af v\u00e6rkt\u00f8jet:<\/p>\n<pre><code class=\"bash\">$ make\n$ .\/endlessh &amp;\n$ ssh -p2222 localhost<\/code><\/pre>\n<p>\nEn korrekt implementeret tarpit vil tage flere ressourcer fra angriberen end fra dig. Men det handler ikke engang om ressourcerne. Forfatteren <noindex><a rel=\"nofollow\" href=\"https:\/\/nullprogram.com\/blog\/2019\/03\/22\/\">skriver<\/a><\/noindex>, der bem\u00e6rker, at programmet kan v\u00e6re vanedannende. Lige nu er der 27 klienter i hans f\u00e6lde, nogle af dem har v\u00e6ret tilsluttet i flere uger. P\u00e5 toppen af aktiviteten sad der 1378 klienter i f\u00e6lden i 20 timer!<\/p>\n<p>N\u00e5r den er i drift, b\u00f8r serveren Endlessh placeres p\u00e5 den almindelige port 22, hvor skurke ofte banker p\u00e5. Standard sikkerhedsanbefalinger r\u00e5der altid til at flytte SSH til en anden port, hvilket straks reducerer st\u00f8rrelsen p\u00e5 logfilerne.<\/p>\n<p>Kris Vellons siger, at hans program udnytter et afsnit fra specifikationen <noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc4253#section-4.2\">RFC 4253<\/a><\/noindex> over the SSH protocol. Immediately after establishing a TCP connection, but before applying any cryptography, both parties must send an identification string. And there is an addition there: <i>The server MAY send other data strings before sending the version string<\/i>. Og <b>no limit<\/b> to the volume of this data, just each string must start with <code>SSH-<\/code>.<\/p>\n<p>This is precisely what the Endlessh program does: it <b>sends <i>an endless<\/i> stream of randomly generated data<\/b>, which complies with RFC 4253, meaning sending before identification, with each string starting with <code>SSH-<\/code> and not exceeding 255 characters, including the line ending character. Overall, everything according to the standard.<\/p>\n<p>By default, the program waits 10 seconds between packet transmissions. This prevents timeouts, so the client will be stuck forever.<\/p>\n<p>Since data is sent before applying cryptography, the program is exceptionally simple. There is no need to implement any encryption or support for multiple protocols.<\/p>\n<p>The author made an effort to ensure that the utility consumes minimal resources and operates completely unnoticed on the machine. Unlike modern antivirus programs and other 'security systems', it should not slow down the computer. He was able to minimize both traffic and memory consumption through a slightly more clever software implementation. If he simply launched a separate process for each new connection, potential attackers could conduct a DDoS attack by opening multiple connections to exhaust resources on the machine. One stream per connection is also not the best option because the kernel will waste resources managing threads.<\/p>\n<p>Therefore, Chris Wellons chose the lightest option for Endlessh: a single-threaded server <code>poll(2)<\/code>, where trapped clients consume virtually no extra resources, aside from the socket object in the kernel and another 78 bytes for tracking in Endlessh. To avoid allocating receive and send buffers for each client, Endlessh opens a direct access socket and directly streams TCP packets, ignoring almost the entire TCP\/IP stack of the operating system. The incoming buffer is not needed at all, as incoming data is not of interest to us.<\/p>\n<p>The author states that at the time of his program, <noindex><a rel=\"nofollow\" href=\"https:\/\/nullprogram.com\/blog\/2019\/03\/10\/\">he was unaware<\/a><\/noindex> om eksistensen af Python's asyncio og andre tarpit. Hvis han havde vidst om asyncio, kunne han have implementeret sit v\u00e6rkt\u00f8j med kun 18 linjer i Python:<\/p>\n<pre><code class=\"python\">import asyncio\nimport random\n\nasync def handler(_reader, writer):\ntry:\nwhile True:\nawait asyncio.sleep(10)\nwriter.write(b'%xrn' % random.randint(0, 2**32))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 2222)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n<p>\nAsyncio er ideelt til at skrive tarpits. For eksempel vil s\u00e5dan en f\u00e6lde h\u00e6nge Firefox, Chrome eller en anden klient, der fors\u00f8ger at forbinde til din HTTP-server, i flere timer:<\/p>\n<pre><code class=\"python\">import asyncio\nimport random\n\nasync def handler(_reader, writer):\nwriter.write(b'HTTP\/1.1 200 OKrn')\ntry:\nwhile True:\nawait asyncio.sleep(5)\nheader = random.randint(0, 2**32)\nvalue = random.randint(0, 2**32)\nwriter.write(b'X-%x: %xrn' % (header, value))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 8080)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n<p>\nEn tarpit er et fremragende v\u00e6rkt\u00f8j til at straffe internet-bullies. Der er dog en vis risiko for at tiltr\u00e6kke deres opm\u00e6rksomhed til en bestemt servers us\u00e6dvanlige opf\u00f8rsel. Nogen <noindex><a rel=\"nofollow\" href=\"https:\/\/news.ycombinator.com\/item?id=19466867\">kan t\u00e6nke p\u00e5 h\u00e6vn<\/a><\/noindex> og en m\u00e5lrettet DDoS-angreb p\u00e5 din IP. Men indtil videre har der ikke v\u00e6ret s\u00e5danne tilf\u00e6lde, og tarpits fungerer fremragende.<\/p>\n<p>Hubs:<br \/>\nPython, Informationssikkerhed, Software, Systemadministration<\/p>\n<p>Tags:<br \/>\nSSH, Endlessh, tarpit, f\u00e6lde, asyncio<br \/>\nTrap (tarpit) for incoming SSH connections<\/p>\n<p>Det er ingen hemmelighed, at internettet er et meget fjendtligt milj\u00f8. S\u00e5 snart du opretter en server, bliver den straks udsat for masser af angreb og mange scanninger. Et eksempel er <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/436076\/\">honeypoten fra sikkerhedseksperter<\/a><\/noindex> , hvor man kan vurdere omfanget af denne r\u00e5dne trafik. Faktisk kan 99% af trafikken p\u00e5 en gennemsnitlig server v\u00e6re ondsindet.<\/p>\n<p>Tarpit er en port-trap, der bruges til at bremse indkommende forbindelser. Hvis et fremmed system fors\u00f8ger at oprette forbindelse til denne port, kan det ikke hurtigt lukke forbindelsen. Det vil skulle bruge sine systemressourcer og vente p\u00e5, at forbindelsen afbrydes ved timeout, eller manuelt afbryde den.<\/p>\n<p>Tarpits anvendes oftest til beskyttelse. Teknologien blev f\u00f8rste gang udviklet for at beskytte mod computerorme. Og nu kan den bruges til at g\u00f8re livet surt for spammerne og forskerne, der laver omfattende scanninger af alle IP-adresser i r\u00e6kkef\u00f8lge (eksempler p\u00e5 Habr: <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.haschek.at\/2019\/i-scanned-austria.html\">\u00d8strig<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/444490\/\">Ukraine<\/a><\/noindex>).<\/p>\n<p>En af systemadministratorerne ved navn Kris Vellons, var tilsyneladende tr\u00e6t af at overv\u00e5ge dette kaos \u2014 og han skrev et lille program <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/skeeto\/endlessh\">Endlessh<\/a><\/noindex>, en tarpit for SSH, der bremser indkommende forbindelser. Programmet \u00e5bner en port (standard til test er port 2222) og udgiver sig for at v\u00e6re en SSH-server, mens det i virkeligheden etablerer en uendelig forbindelse med den indkommende klient, indtil den giver op. Dette kan forts\u00e6tte i flere dage eller mere, indtil klienten falder fra.<\/p>\n<p>Installation af v\u00e6rkt\u00f8jet:<\/p>\n<pre><code class=\"bash\">$ make\n$ .\/endlessh &amp;\n$ ssh -p2222 localhost<\/code><\/pre>\n<p>\nEn korrekt implementeret tarpit vil tage flere ressourcer fra angriberen end fra dig. Men det handler ikke engang om ressourcerne. Forfatteren <noindex><a rel=\"nofollow\" href=\"https:\/\/nullprogram.com\/blog\/2019\/03\/22\/\">skriver<\/a><\/noindex>, der bem\u00e6rker, at programmet kan v\u00e6re vanedannende. Lige nu er der 27 klienter i hans f\u00e6lde, nogle af dem har v\u00e6ret tilsluttet i flere uger. P\u00e5 toppen af aktiviteten sad der 1378 klienter i f\u00e6lden i 20 timer!<\/p>\n<p>N\u00e5r den er i drift, b\u00f8r serveren Endlessh placeres p\u00e5 den almindelige port 22, hvor skurke ofte banker p\u00e5. Standard sikkerhedsanbefalinger r\u00e5der altid til at flytte SSH til en anden port, hvilket straks reducerer st\u00f8rrelsen p\u00e5 logfilerne.<\/p>\n<p>Kris Vellons siger, at hans program udnytter et afsnit fra specifikationen <noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc4253#section-4.2\">RFC 4253<\/a><\/noindex> over the SSH protocol. Immediately after establishing a TCP connection, but before applying any cryptography, both parties must send an identification string. And there is an addition there: <i>The server MAY send other data strings before sending the version string<\/i>. Og <b>no limit<\/b> to the volume of this data, just each string must start with <code>SSH-<\/code>.<\/p>\n<p>This is precisely what the Endlessh program does: it <b>sends <i>an endless<\/i> stream of randomly generated data<\/b>, which complies with RFC 4253, meaning sending before identification, with each string starting with <code>SSH-<\/code> and not exceeding 255 characters, including the line ending character. Overall, everything according to the standard.<\/p>\n<p>By default, the program waits 10 seconds between packet transmissions. This prevents timeouts, so the client will be stuck forever.<\/p>\n<p>Since data is sent before applying cryptography, the program is exceptionally simple. There is no need to implement any encryption or support for multiple protocols.<\/p>\n<p>The author made an effort to ensure that the utility consumes minimal resources and operates completely unnoticed on the machine. Unlike modern antivirus programs and other 'security systems', it should not slow down the computer. He was able to minimize both traffic and memory consumption through a slightly more clever software implementation. If he simply launched a separate process for each new connection, potential attackers could conduct a DDoS attack by opening multiple connections to exhaust resources on the machine. One stream per connection is also not the best option because the kernel will waste resources managing threads.<\/p>\n<p>Therefore, Chris Wellons chose the lightest option for Endlessh: a single-threaded server <code>poll(2)<\/code>, where trapped clients consume virtually no extra resources, aside from the socket object in the kernel and another 78 bytes for tracking in Endlessh. To avoid allocating receive and send buffers for each client, Endlessh opens a direct access socket and directly streams TCP packets, ignoring almost the entire TCP\/IP stack of the operating system. The incoming buffer is not needed at all, as incoming data is not of interest to us.<\/p>\n<p>The author states that at the time of his program, <noindex><a rel=\"nofollow\" href=\"https:\/\/nullprogram.com\/blog\/2019\/03\/10\/\">he was unaware<\/a><\/noindex> om eksistensen af Python's asyncio og andre tarpit. Hvis han havde vidst om asyncio, kunne han have implementeret sit v\u00e6rkt\u00f8j med kun 18 linjer i Python:<\/p>\n<pre><code class=\"python\">import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    try:\n        while True:\n            await asyncio.sleep(10)\n            writer.write(b'%xrn' % random.randint(0, 2**32))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 2222)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n<p>\nAsyncio er ideelt til at skrive tarpits. For eksempel vil s\u00e5dan en f\u00e6lde h\u00e6nge Firefox, Chrome eller en anden klient, der fors\u00f8ger at forbinde til din HTTP-server, i flere timer:<\/p>\n<pre><code class=\"python\">import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    writer.write(b'HTTP\/1.1 200 OKrn')\n    try:\n        while True:\n            await asyncio.sleep(5)\n            header = random.randint(0, 2**32)\n            value = random.randint(0, 2**32)\n            writer.write(b'X-%x: %xrn' % (header, value))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 8080)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n<p>\nEn tarpit er et fremragende v\u00e6rkt\u00f8j til at straffe internet-bullies. Der er dog en vis risiko for at tiltr\u00e6kke deres opm\u00e6rksomhed til en bestemt servers us\u00e6dvanlige opf\u00f8rsel. Nogen <noindex><a rel=\"nofollow\" href=\"https:\/\/news.ycombinator.com\/item?id=19466867\">kan t\u00e6nke p\u00e5 h\u00e6vn<\/a><\/noindex> og en m\u00e5lrettet DDoS-angreb p\u00e5 din IP. Men indtil videre har der ikke v\u00e6ret s\u00e5danne tilf\u00e6lde, og tarpits fungerer fremragende.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/clck.ru\/EWJHw\"><img decoding=\"async\" alt=\"Trap (tarpit) for incoming SSH connections\" src=\"\/wp-content\/uploads\/2019\/03\/a1656e1e4a2ae612eaa58451579a488f.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<br \/>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/globalsign\/blog\/445318\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432 \u043c\u043e\u0436\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u044d\u0442\u043e\u0433\u043e \u043c\u0443\u0441\u043e\u0440\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u043d\u0430 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 99% \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c. Tarpit \u2014 \u044d\u0442\u043e \u043f\u043e\u0440\u0442-\u043b\u043e\u0432\u0443\u0448\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u0415\u0441\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u044f\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30312","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041b\u043e\u0432\u0443\u0448\u043a\u0430 (\u0442\u0430\u0440\u043f\u0438\u0442) \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:34:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:34:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47F\u00e6lde (tarpit) for indkommende SSH-forbindelser | ProHoster","description":"Det er ingen hemmelighed, at internettet er et meget fjendtligt milj\u00f8. S\u00e5 snart du opretter en server, bliver den straks udsat for massive angreb og adskillige scanninger.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041b\u043e\u0432\u0443\u0448\u043a\u0430 (\u0442\u0430\u0440\u043f\u0438\u0442) \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c.","og:url":"https:\/\/prohoster.info\/da\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:49+00:00","article:modified_time":"2019-10-31T18:34:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30312","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:38:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:37:27","updated":"2026-01-21 00:38:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/30312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=30312"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/30312\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=30312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=30312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=30312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}