{"id":30312,"date":"2019-10-31T21:34:49","date_gmt":"2019-10-31T18:34:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij\/"},"modified":"2019-10-31T21:34:49","modified_gmt":"2019-10-31T18:34:49","slug":"lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","title":{"rendered":"SSH \u00fchenduste l\u00f5ks (tarpit)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ei ole saladus, et internet on \u00e4\u00e4rmiselt vaenulik keskkond. Niipea kui server \u00fcles t\u00f5state, on see kohe massiliste r\u00fcnnakute ja mitmekesiste skannimiste objektiks. Selle n\u00e4ite p\u00f5hjal ohutuse ekspertide honeypotist<\/a><\/noindex> v\u00f5ib hinnata selle pr\u00fcgitrafiku ulatust. Tegelikult v\u00f5ib keskmisel serveril kuni 99% liiklusest olla pahatahtlik.<\/p>\n

Tarpit on sadama l\u00f5ks, mida kasutatakse sissetulevate \u00fchenduste aeglustamiseks. Kui kolmas osapool \u00fchendub sellele sadamale, ei saa \u00fchendust kiiresti sulgeda. See peab kulutama oma s\u00fcsteemi ressursse ja ootama, kuni \u00fchendus katkeb aja\u00fclesande t\u00f5ttu v\u00f5i murdmise korral.<\/p>\n

Tavaliselt kasutatakse tarpite kaitseks. Tehnika loodi esmakordselt arvutikiirte kaitseks. Praegu saab seda kasutada, et rikkuda sp\u00e4mmerite ja uurijate elu, kes tegelevad k\u00f5igi IP-aadresside suvalise skannimisega (n\u00e4ited Habr\u2019s: Austria<\/a><\/noindex>, Ukraina<\/a><\/noindex>).
\n<\/a><\/noindex>
\n\u00dchel s\u00fcsteemiadministraatoril nimega Chris Vellons n\u00e4ib, et on k\u00fcllalt vaadanud seda h\u00e4marust \u2014 ja ta kirjutas v\u00e4ikese programmi Endlessh<\/a><\/noindex>, SSH tarpit, mis aeglustab sissetulevaid \u00fchendusi. Programm avab sadama (vaikimisi on katsetamiseks m\u00e4\u00e4ratud sadam 2222) ja teeb n\u00e4gu nagu oleks see SSH-server, kuid tegelikult loob see l\u00f5putu \u00fchenduse sissetuleva kliendiga, kuni see alla annab. See v\u00f5ib kesta mitu p\u00e4eva v\u00f5i rohkem, kuni klient katkeb.<\/p>\n

Utiliidi installimine:<\/p>\n

$ make\n$ .\/endlessh &\n$ ssh -p2222 localhost<\/code><\/pre>\n
\nH\u00e4sti rakendatud tarpit v\u00f5tab r\u00fcndajalt rohkem ressursse kui teil endal. Aga asi ei ole \u00fcksi ressurssides. Autor kirjutab<\/a><\/noindex>, et programm tekitab s\u00f5ltuvust. Praegu on tema l\u00f5ksus 27 klienti, m\u00f5ned neist on olnud \u00fchenduses n\u00e4dalate viisi. Haripunktis oli l\u00f5ksus 1378 klienti 20 tunni v\u00e4ltel!<\/p>\n
T\u00f6\u00f6korras tuleb server Endlessh paigaldada tavap\u00e4raselt sadamale 22, kuhu massiliselt koputavad kurjategijad. Standardid soovitavad alati muuta SSH teisele sadamale, mis v\u00e4hendab p\u00e4evikute mahtu j\u00e4rsult.<\/p>\n
Chris Vellons \u00fctleb, et tema programm kasutab \u00e4ra \u00fche l\u00f5igu spetsifikatsioonist RFC 4253<\/a><\/noindex> SSH-protokollil. Kohe p\u00e4rast TCP-\u00fchenduse loomist, kuid enne kr\u00fcptograafia rakendamist peavad m\u00f5lemad osapooled saatma identifitseerimise rea. Seal on ka lisamine: \u201eServer v\u00f5ib saata teisi andmereale enne versiooni rea saatmist\u201c<\/i>. Ja ei ole piirangut<\/b> nende andmete mahule, lihtsalt iga rida tuleb alustada SSH-<\/code>.<\/p>\n
Just sellega tegeleb programm Endlessh: see saadab l\u00f5putu<\/i> juhuslikult genereeritud andmete voogu<\/b>, mis vastavad RFC 4253-le, see t\u00e4hendab, et need saadetakse enne identifitseerimist ja iga rida algab SSH-<\/code> ja ei \u00fcleta 255 m\u00e4rki, sealhulgas rea l\u00f5ppem\u00e4rki. \u00dches\u00f5naga, k\u00f5ik vastab standardile.<\/p>\n
Vaikimisi ootab programm 10 sekundit pakettide saatmise vahel. See takistab ajautumise t\u00f5ttu katkestamist, nii et klient j\u00e4\u00e4b l\u00f5ksu igavesti.<\/p>\n
Kuna andmete saatmine toimub enne kr\u00fcptograafia rakendamist, on programm \u00e4\u00e4rmiselt lihtne. Seal ei ole vaja sisse viia kr\u00fcptimist ega toetada mitmeid protokolle.<\/p>\n
Autor p\u00fc\u00fcdis, et utiliit tarbiks minimaalselt ressursse ja t\u00f6\u00f6taks t\u00e4iesti m\u00e4rkamatult masinas. Erinevalt kaasaegsetest viiruset\u00f5rjetest ja muudest \u201eturvas\u00fcsteemidest\u201c ei tohiks see arvutit pidurdada. Tal \u00f5nnestus minimiseerida nii liiklus kui ka m\u00e4lu tarbimine veidi nutikama tarkvarateostusega. Kui ta lihtsalt k\u00e4ivitaks eraldi protsessi uue \u00fchenduse jaoks, v\u00f5iksid potentsiaalsed kurikaelad korraldada DDoS-r\u00fcnnaku, avades mitmeid \u00fchendusi, et ammendada masina ressursse. \u00dche vooga \u00fchenduse kohta - ka mitte parim valik, sest tuum kulutab ressursse voogude haldamiseks.<\/p>\n
Seet\u00f5ttu valis Chris Wellons Endlesshi jaoks k\u00f5ige kergema variandi: \u00fcksikl\u00f5ime serveri poll(2)<\/code>, kus l\u00f5ksus olevad kliendid ei tarbi praktiliselt lisandeid, v\u00e4lja arvatud tuuma soketi objekt ja veel 78 baiti j\u00e4lgimiseks Endlesshis. Et mitte eraldada vastuv\u00f5tu ja saatmise puhver iga kliendi jaoks, avab Endlessh otsep\u00f6\u00f6rdussoketi ja edastab TCP-paketid otse, ignoreerides peaaegu kogu TCP\/IP protokolli virna. Sissetulev puffer ei ole \u00fcldse vajalik, kuna sissetulevad andmed meid ei huvita.<\/p>\n
Autor \u00fctleb, et oma programmi loomise ajal ei teadnud<\/a><\/noindex> Python'i asycio ja teiste tarpitite olemasolust. Kui ta oleks teadnud asyciost, oleks ta oma utiliidi saanud ellu viia vaid 18 realise Python koodiga:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\ntry:\nwhile True:\nawait asyncio.sleep(10)\nwriter.write(b'%xrn' % random.randint(0, 2**32))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 2222)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nAsyncio sobib ideaalselt tarpitite kirjutamiseks. N\u00e4iteks selline l\u00f5ks v\u00f5ib mitu tundi peatada Firefoxi, Chrome'i v\u00f5i muu kliendi, kes p\u00fc\u00fcab teie HTTP-serveriga \u00fchendust luua:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\nwriter.write(b'HTTP\/1.1 200 OKrn')\ntry:\nwhile True:\nawait asyncio.sleep(5)\nheader = random.randint(0, 2**32)\nvalue = random.randint(0, 2**32)\nwriter.write(b'X-%x: %xrn' % (header, value))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 8080)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nTarpit on suurep\u00e4rane t\u00f6\u00f6riist interneti tigedate kasutajate karistamiseks. T\u00f5si, on mingisugune risk, et see t\u00f5mbab k\u00fcll t\u00e4helepanu serveri ebatavalisele k\u00e4itumisele. Keegi v\u00f5ib m\u00f5elda k\u00e4ttemaksu<\/a><\/noindex> ja suunatud DDoS-r\u00fcnnakule teie IP-aadressile. Kuid seni pole selliseid juhtumeid olnud ja tarpitid toimivad suurep\u00e4raselt.<\/p>\n
Sildid:
\nPython, Teabe turve, Tarkvara, S\u00fcsteemi haldus<\/p>\n
M\u00e4rks\u00f5nad:
\nSSH, Endlessh, tarpit, l\u00f5ks, asycio
\nSSH \u00fchenduste l\u00f5ks (tarpit)<\/p>\n
Ei ole saladus, et internet on \u00e4\u00e4rmiselt vaenulik keskkond. Niipea kui server \u00fcles t\u00f5state, on see kohe massiliste r\u00fcnnakute ja mitmekesiste skannimiste objektiks. Selle n\u00e4ite p\u00f5hjal ohutuse ekspertide honeypotist<\/a><\/noindex> v\u00f5ib hinnata selle pr\u00fcgitrafiku ulatust. Tegelikult v\u00f5ib keskmisel serveril kuni 99% liiklusest olla pahatahtlik.<\/p>\n
Tarpit on sadama l\u00f5ks, mida kasutatakse sissetulevate \u00fchenduste aeglustamiseks. Kui kolmas osapool \u00fchendub sellele sadamale, ei saa \u00fchendust kiiresti sulgeda. See peab kulutama oma s\u00fcsteemi ressursse ja ootama, kuni \u00fchendus katkeb aja\u00fclesande t\u00f5ttu v\u00f5i murdmise korral.<\/p>\n
Tavaliselt kasutatakse tarpite kaitseks. Tehnika loodi esmakordselt arvutikiirte kaitseks. Praegu saab seda kasutada, et rikkuda sp\u00e4mmerite ja uurijate elu, kes tegelevad k\u00f5igi IP-aadresside suvalise skannimisega (n\u00e4ited Habr\u2019s: Austria<\/a><\/noindex>, Ukraina<\/a><\/noindex>).<\/p>\n
\u00dchel s\u00fcsteemiadministraatoril nimega Chris Vellons n\u00e4ib, et on k\u00fcllalt vaadanud seda h\u00e4marust \u2014 ja ta kirjutas v\u00e4ikese programmi Endlessh<\/a><\/noindex>, SSH tarpit, mis aeglustab sissetulevaid \u00fchendusi. Programm avab sadama (vaikimisi on katsetamiseks m\u00e4\u00e4ratud sadam 2222) ja teeb n\u00e4gu nagu oleks see SSH-server, kuid tegelikult loob see l\u00f5putu \u00fchenduse sissetuleva kliendiga, kuni see alla annab. See v\u00f5ib kesta mitu p\u00e4eva v\u00f5i rohkem, kuni klient katkeb.<\/p>\n
Utiliidi installimine:<\/p>\n
$ make\n$ .\/endlessh &\n$ ssh -p2222 localhost<\/code><\/pre>\n
\nH\u00e4sti rakendatud tarpit v\u00f5tab r\u00fcndajalt rohkem ressursse kui teil endal. Aga asi ei ole \u00fcksi ressurssides. Autor kirjutab<\/a><\/noindex>, et programm tekitab s\u00f5ltuvust. Praegu on tema l\u00f5ksus 27 klienti, m\u00f5ned neist on olnud \u00fchenduses n\u00e4dalate viisi. Haripunktis oli l\u00f5ksus 1378 klienti 20 tunni v\u00e4ltel!<\/p>\n
T\u00f6\u00f6korras tuleb server Endlessh paigaldada tavap\u00e4raselt sadamale 22, kuhu massiliselt koputavad kurjategijad. Standardid soovitavad alati muuta SSH teisele sadamale, mis v\u00e4hendab p\u00e4evikute mahtu j\u00e4rsult.<\/p>\n
Chris Vellons \u00fctleb, et tema programm kasutab \u00e4ra \u00fche l\u00f5igu spetsifikatsioonist RFC 4253<\/a><\/noindex> SSH-protokollil. Kohe p\u00e4rast TCP-\u00fchenduse loomist, kuid enne kr\u00fcptograafia rakendamist peavad m\u00f5lemad osapooled saatma identifitseerimise rea. Seal on ka lisamine: \u201eServer v\u00f5ib saata teisi andmereale enne versiooni rea saatmist\u201c<\/i>. Ja ei ole piirangut<\/b> nende andmete mahule, lihtsalt iga rida tuleb alustada SSH-<\/code>.<\/p>\n
Just sellega tegeleb programm Endlessh: see saadab l\u00f5putu<\/i> juhuslikult genereeritud andmete voogu<\/b>, mis vastavad RFC 4253-le, see t\u00e4hendab, et need saadetakse enne identifitseerimist ja iga rida algab SSH-<\/code> ja ei \u00fcleta 255 m\u00e4rki, sealhulgas rea l\u00f5ppem\u00e4rki. \u00dches\u00f5naga, k\u00f5ik vastab standardile.<\/p>\n
Vaikimisi ootab programm 10 sekundit pakettide saatmise vahel. See takistab ajautumise t\u00f5ttu katkestamist, nii et klient j\u00e4\u00e4b l\u00f5ksu igavesti.<\/p>\n
Kuna andmete saatmine toimub enne kr\u00fcptograafia rakendamist, on programm \u00e4\u00e4rmiselt lihtne. Seal ei ole vaja sisse viia kr\u00fcptimist ega toetada mitmeid protokolle.<\/p>\n
Autor p\u00fc\u00fcdis, et utiliit tarbiks minimaalselt ressursse ja t\u00f6\u00f6taks t\u00e4iesti m\u00e4rkamatult masinas. Erinevalt kaasaegsetest viiruset\u00f5rjetest ja muudest \u201eturvas\u00fcsteemidest\u201c ei tohiks see arvutit pidurdada. Tal \u00f5nnestus minimiseerida nii liiklus kui ka m\u00e4lu tarbimine veidi nutikama tarkvarateostusega. Kui ta lihtsalt k\u00e4ivitaks eraldi protsessi uue \u00fchenduse jaoks, v\u00f5iksid potentsiaalsed kurikaelad korraldada DDoS-r\u00fcnnaku, avades mitmeid \u00fchendusi, et ammendada masina ressursse. \u00dche vooga \u00fchenduse kohta - ka mitte parim valik, sest tuum kulutab ressursse voogude haldamiseks.<\/p>\n
Seet\u00f5ttu valis Chris Wellons Endlesshi jaoks k\u00f5ige kergema variandi: \u00fcksikl\u00f5ime serveri poll(2)<\/code>, kus l\u00f5ksus olevad kliendid ei tarbi praktiliselt lisandeid, v\u00e4lja arvatud tuuma soketi objekt ja veel 78 baiti j\u00e4lgimiseks Endlesshis. Et mitte eraldada vastuv\u00f5tu ja saatmise puhver iga kliendi jaoks, avab Endlessh otsep\u00f6\u00f6rdussoketi ja edastab TCP-paketid otse, ignoreerides peaaegu kogu TCP\/IP protokolli virna. Sissetulev puffer ei ole \u00fcldse vajalik, kuna sissetulevad andmed meid ei huvita.<\/p>\n
Autor \u00fctleb, et oma programmi loomise ajal ei teadnud<\/a><\/noindex> Python'i asycio ja teiste tarpitite olemasolust. Kui ta oleks teadnud asyciost, oleks ta oma utiliidi saanud ellu viia vaid 18 realise Python koodiga:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    try:\n        while True:\n            await asyncio.sleep(10)\n            writer.write(b'%xrn' % random.randint(0, 2**32))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 2222)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nAsyncio sobib ideaalselt tarpitite kirjutamiseks. N\u00e4iteks selline l\u00f5ks v\u00f5ib mitu tundi peatada Firefoxi, Chrome'i v\u00f5i muu kliendi, kes p\u00fc\u00fcab teie HTTP-serveriga \u00fchendust luua:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    writer.write(b'HTTP\/1.1 200 OKrn')\n    try:\n        while True:\n            await asyncio.sleep(5)\n            header = random.randint(0, 2**32)\n            value = random.randint(0, 2**32)\n            writer.write(b'X-%x: %xrn' % (header, value))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 8080)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nTarpit on suurep\u00e4rane t\u00f6\u00f6riist interneti tigedate kasutajate karistamiseks. T\u00f5si, on mingisugune risk, et see t\u00f5mbab k\u00fcll t\u00e4helepanu serveri ebatavalisele k\u00e4itumisele. Keegi v\u00f5ib m\u00f5elda k\u00e4ttemaksu<\/a><\/noindex> ja suunatud DDoS-r\u00fcnnakule teie IP-aadressile. Kuid seni pole selliseid juhtumeid olnud ja tarpitid toimivad suurep\u00e4raselt.<\/p>\n
\n\"SSH<\/a><\/noindex>
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432 \u043c\u043e\u0436\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u044d\u0442\u043e\u0433\u043e \u043c\u0443\u0441\u043e\u0440\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u043d\u0430 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 99% \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c. Tarpit \u2014 \u044d\u0442\u043e \u043f\u043e\u0440\u0442-\u043b\u043e\u0432\u0443\u0448\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u0415\u0441\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u044f\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30312","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47L\u00f5ks (tarpit) sisenemise SSH-\u00fchenduste jaoks | ProHoster","description":"Pole saladus, et internet on v\u00e4ga vaenulik keskkond. Niipea kui server k\u00e4ivitatakse, on see kohe massiliste r\u00fcnnakute ja mitmete skaneerimiste objekte.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041b\u043e\u0432\u0443\u0448\u043a\u0430 (\u0442\u0430\u0440\u043f\u0438\u0442) \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c.","og:url":"https:\/\/prohoster.info\/et\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:49+00:00","article:modified_time":"2019-10-31T18:34:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30312","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:38:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:37:27","updated":"2026-01-21 00:38:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=30312"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30312\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=30312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=30312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=30312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}