{"id":30312,"date":"2019-10-31T21:34:49","date_gmt":"2019-10-31T18:34:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij\/"},"modified":"2019-10-31T21:34:49","modified_gmt":"2019-10-31T18:34:49","slug":"lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","title":{"rendered":"SSH-\u00fchenduste sissetulevate \u00fchenduste tarpit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ei ole saladus, et Internet on v\u00e4ga vaenulik keskkond. Niipea kui serveri k\u00e4ivitad, on see kohe massiliste r\u00fcnnakute ja mitmete skaneerimiste sihtm\u00e4rk. N\u00e4itena turvameestelt saadud honeypot<\/a><\/noindex> v\u00f5ib hinnata selle pr\u00fcgitrafiku ulatust. Tegelikult v\u00f5ib keskmisel serveril 99% liiklusest olla kahjulik.<\/p>\n

Tarpit on pordil\u00f5ks, mida kasutatakse sissetulevate \u00fchenduste aeglustamiseks. Kui kolmas s\u00fcsteem selle p\u00f6\u00f6rdub, ei saa kiiresti \u00fchendust sulgeda. Peab kasutama oma s\u00fcsteemi ressursse ja ootama, kuni \u00fchendus katkestatakse ajutine, v\u00f5i katkestama selle k\u00e4sitsi.<\/p>\n

Tavaliselt kasutatakse tarpitisid kaitseks. Tehnika t\u00f6\u00f6tati esmakordselt v\u00e4lja arvutiviiruste kaitsmiseks. Ja n\u00fc\u00fcd saab seda kasutada, et elu spammeritele ja uurijatele, kes skaneerivad j\u00e4rjest k\u00f5iki IP-aadresse, keeruliseks teha (n\u00e4iteid Habr'i pealt: Austria<\/a><\/noindex>, Ukraina<\/a><\/noindex>).
\n<\/a><\/noindex>
\n\u00dchel s\u00fcsteemiadministraatoril nimega Chris Vellonsil tundus, et tal on sellest jaburusest piisavalt \u2014 ja ta kirjutas v\u00e4ikese programmi Endlessh<\/a><\/noindex>, tarpit SSH jaoks, mis aeglustab sisenevaid \u00fchendusi. Programm avab portaali (ennek\u00f5ike testimiseks on m\u00e4\u00e4ratud port 2222) ja n\u00e4itab v\u00e4lja SSH-serverina, samal ajal kui see loob l\u00f5putu \u00fchenduse siseneva kliendiga, kuni viimane annab alla. See v\u00f5ib kesta mitu p\u00e4eva v\u00f5i rohkem, kuni klient katkestab.<\/p>\n

Utiliidi paigaldamine:<\/p>\n

$ make\n$ .\/endlessh &\n$ ssh -p2222 localhost<\/code><\/pre>\n
\nKorrektselt rakendatud tarpit n\u00f5uab kurjategijalt rohkem ressursse kui sinult. Kuid asi ei ole ainult ressurssides. Autor writes<\/a><\/noindex>, et programm tekitab s\u00f5ltuvust. Praegu on tema l\u00f5ksus 27 klienti, m\u00f5ned neist on olnud \u00fchendatud n\u00e4dalaid. Tiputegevuse ajal oli l\u00f5ksus 1378 klienti 20 tunni jooksul!<\/p>\n
T\u00f6\u00f6p\u00f5him\u00f5ttel tuleb server Endlessh paigutada tavap\u00e4rasele portile 22, kuhu massiliselt r\u00fcndajad sisse kolivad. Tavalised turvaneuvood soovitavad alati t\u00f5sta SSH teisele portile, mis kohe k\u00e4rbib logide mahtu.<\/p>\n
Chris Wellons \u00fctleb, et tema programm kasutab \u00e4ra \u00fche l\u00f5igu spetsifikatsioonist RFC 4253<\/a><\/noindex> SSH protokolli. Vahetult p\u00e4rast TCP \u00fchenduse loomist, kuid enne kr\u00fcptograafia rakendamist peavad m\u00f5lemad pooled saatma identifitseerimisjoone. Ja seal samas lisatakse: \u201eServer v\u00f5ib saata t\u00e4iendavaid andmerekke enne versioonijoonte saatmist\u201c<\/i>. Ja ei ole piirangut<\/b> neid andmeid mahule, lihtsalt iga rida peab hakkama SSH-<\/code>.<\/p>\n
Just seda teeb programm Endlessh: see saadetud l\u00f5putu<\/i> juhuslikult genereeritud andmevoog<\/b>, mis vastab RFC 4253, see t\u00e4hendab, et andmed saadetakse enne identifitseerimist ning iga rida algab SSH-<\/code> ja ei \u00fcleta 255 m\u00e4rki, sealhulgas ridade l\u00f5pus olevat t\u00e4hist. \u00dches\u00f5naga, k\u00f5ik on vastavalt standardile.<\/p>\n
Vaikimisi ootab programm pakettide saatmise vahel 10 sekundit. See takistab ajaliselt v\u00e4lja l\u00fclitumist, nii et klient j\u00e4\u00e4b l\u00f5ksu igaveseks.<\/p>\n
Kuna andmete saatmine toimub enne kr\u00fcptograafia rakendamist, on programm \u00e4\u00e4rmiselt lihtne. Sellel ei ole vaja rakendada mingeid kr\u00fcpteerimisi ega toetada mitut protokolli.<\/p>\n
Autor p\u00fc\u00fcdis, et t\u00f6\u00f6riist kasutaks minimaalset ressursi ja t\u00f6\u00f6taks t\u00e4iesti m\u00e4rkamatult seadmes. Erinevalt t\u00e4nap\u00e4evastest viirust\u00f5rjetest ja muudest \"turvas\u00fcsteemidest\" ei tohi see arvutit pidurdada. Tal \u00f5nnestus minimeerida nii liiklus kui ka m\u00e4lu tarbimist t\u00e4nu veidi nutikamale tarkvarale. Kui ta lihtsalt k\u00e4ivitaks eraldi protsessi uue \u00fchenduse jaoks, saaksid potentsiaalsed kurjategijad korraldada DDoS-r\u00fcnnaku, avades arvukalt \u00fchendusi, et ammendada seadme ressursse. \u00dche vooga iga \u00fchenduse jaoks ei oleks samuti parim variant, kuna tuum kulutab ressursse voogude haldamiseks.<\/p>\n
Seet\u00f5ttu valis Chris Vellons Endlessh jaoks k\u00f5ige kergema variandi: \u00fchesuunalise serveri poll(2)<\/code>, kus kliendid on kinni, praktiliselt ei kasuta liigseid ressursse, v\u00e4lja arvatud soketi objekt tuumas ja veel 78 baiti j\u00e4lgimiseks Endlessh. Et mitte eraldada vastuv\u00f5tu ja saatmise puhvreid igale kliendile, avab Endlessh otse\u00fclekande soketi ja edastab TCP-pakette otse, ignoreerides peaaegu kogu TCP\/IP operatsioonis\u00fcsteemi reeglit. Sissetulev puhver pole \u00fcldse vajalik, kuna meid ei huvita sissetulevad andmed.<\/p>\n
Autor \u00fctleb, et tema programmi ajal ei teadnud<\/a><\/noindex> Python'i asycio ja teiste trapitite olemasolust. Kui ta oleks asycio'st teadnud, oleks ta oma utiliiti saanud rakendada vaid 18 reaga Python'is:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\ntry:\nwhile True:\nawait asyncio.sleep(10)\nwriter.write(b'%xrn' % random.randint(0, 2**32))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 2222)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nAsyncio sobib ideaalselt trapitite kirjutamiseks. N\u00e4iteks selline l\u00f5ks viib Firefoxi, Chrome'i v\u00f5i m\u00f5ne muu kliendi, kes \u00fcritab teie HTTP-serveriga \u00fchendust luua, mitmeks tunniks ummikus:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\nwriter.write(b'HTTP\/1.1 200 OKrn')\ntry:\nwhile True:\nawait asyncio.sleep(5)\nheader = random.randint(0, 2**32)\nvalue = random.randint(0, 2**32)\nwriter.write(b'X-%x: %xrn' % (header, value))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 8080)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nTarpit on suurep\u00e4rane t\u00f6\u00f6riist internetikiusajate karistamiseks. T\u00f5si, on teatud oht, et see v\u00f5ib vastupidi, juhtida nende t\u00e4helepanu konkreetse serveri ebatavalisele k\u00e4itumisele. Keegi v\u00f5ib m\u00f5elda k\u00e4ttemaksule<\/a><\/noindex> ja sihtr\u00fcnnale teie IP-le. Sellegipoolest pole selliseid juhtumeid seni olnud ning tarpiter t\u00f6\u00f6tavad suurep\u00e4raselt.<\/p>\n
Hubid:
\nPython, Teabe turve, Tarkvara, S\u00fcsteemi haldus<\/p>\n
M\u00e4rgid:
\nSSH, Endlessh, tarpit, tarp, l\u00f5ks, asyncio
\nSSH-\u00fchenduste sissetulevate \u00fchenduste tarpit<\/p>\n
Ei ole saladus, et Internet on v\u00e4ga vaenulik keskkond. Niipea kui serveri k\u00e4ivitad, on see kohe massiliste r\u00fcnnakute ja mitmete skaneerimiste sihtm\u00e4rk. N\u00e4itena turvameestelt saadud honeypot<\/a><\/noindex> v\u00f5ib hinnata selle pr\u00fcgitrafiku ulatust. Tegelikult v\u00f5ib keskmisel serveril 99% liiklusest olla kahjulik.<\/p>\n
Tarpit on pordil\u00f5ks, mida kasutatakse sissetulevate \u00fchenduste aeglustamiseks. Kui kolmas s\u00fcsteem selle p\u00f6\u00f6rdub, ei saa kiiresti \u00fchendust sulgeda. Peab kasutama oma s\u00fcsteemi ressursse ja ootama, kuni \u00fchendus katkestatakse ajutine, v\u00f5i katkestama selle k\u00e4sitsi.<\/p>\n
Tavaliselt kasutatakse tarpitisid kaitseks. Tehnika t\u00f6\u00f6tati esmakordselt v\u00e4lja arvutiviiruste kaitsmiseks. Ja n\u00fc\u00fcd saab seda kasutada, et elu spammeritele ja uurijatele, kes skaneerivad j\u00e4rjest k\u00f5iki IP-aadresse, keeruliseks teha (n\u00e4iteid Habr'i pealt: Austria<\/a><\/noindex>, Ukraina<\/a><\/noindex>).<\/p>\n
\u00dchel s\u00fcsteemiadministraatoril nimega Chris Vellonsil tundus, et tal on sellest jaburusest piisavalt \u2014 ja ta kirjutas v\u00e4ikese programmi Endlessh<\/a><\/noindex>, tarpit SSH jaoks, mis aeglustab sisenevaid \u00fchendusi. Programm avab portaali (ennek\u00f5ike testimiseks on m\u00e4\u00e4ratud port 2222) ja n\u00e4itab v\u00e4lja SSH-serverina, samal ajal kui see loob l\u00f5putu \u00fchenduse siseneva kliendiga, kuni viimane annab alla. See v\u00f5ib kesta mitu p\u00e4eva v\u00f5i rohkem, kuni klient katkestab.<\/p>\n
Utiliidi paigaldamine:<\/p>\n
$ make\n$ .\/endlessh &\n$ ssh -p2222 localhost<\/code><\/pre>\n
\nKorrektselt rakendatud tarpit n\u00f5uab kurjategijalt rohkem ressursse kui sinult. Kuid asi ei ole ainult ressurssides. Autor writes<\/a><\/noindex>, et programm tekitab s\u00f5ltuvust. Praegu on tema l\u00f5ksus 27 klienti, m\u00f5ned neist on olnud \u00fchendatud n\u00e4dalaid. Tiputegevuse ajal oli l\u00f5ksus 1378 klienti 20 tunni jooksul!<\/p>\n
T\u00f6\u00f6p\u00f5him\u00f5ttel tuleb server Endlessh paigutada tavap\u00e4rasele portile 22, kuhu massiliselt r\u00fcndajad sisse kolivad. Tavalised turvaneuvood soovitavad alati t\u00f5sta SSH teisele portile, mis kohe k\u00e4rbib logide mahtu.<\/p>\n
Chris Wellons \u00fctleb, et tema programm kasutab \u00e4ra \u00fche l\u00f5igu spetsifikatsioonist RFC 4253<\/a><\/noindex> SSH protokolli. Vahetult p\u00e4rast TCP \u00fchenduse loomist, kuid enne kr\u00fcptograafia rakendamist peavad m\u00f5lemad pooled saatma identifitseerimisjoone. Ja seal samas lisatakse: \u201eServer v\u00f5ib saata t\u00e4iendavaid andmerekke enne versioonijoonte saatmist\u201c<\/i>. Ja ei ole piirangut<\/b> neid andmeid mahule, lihtsalt iga rida peab hakkama SSH-<\/code>.<\/p>\n
Just seda teeb programm Endlessh: see saadetud l\u00f5putu<\/i> juhuslikult genereeritud andmevoog<\/b>, mis vastab RFC 4253, see t\u00e4hendab, et andmed saadetakse enne identifitseerimist ning iga rida algab SSH-<\/code> ja ei \u00fcleta 255 m\u00e4rki, sealhulgas ridade l\u00f5pus olevat t\u00e4hist. \u00dches\u00f5naga, k\u00f5ik on vastavalt standardile.<\/p>\n
Vaikimisi ootab programm pakettide saatmise vahel 10 sekundit. See takistab ajaliselt v\u00e4lja l\u00fclitumist, nii et klient j\u00e4\u00e4b l\u00f5ksu igaveseks.<\/p>\n
Kuna andmete saatmine toimub enne kr\u00fcptograafia rakendamist, on programm \u00e4\u00e4rmiselt lihtne. Sellel ei ole vaja rakendada mingeid kr\u00fcpteerimisi ega toetada mitut protokolli.<\/p>\n
Autor p\u00fc\u00fcdis, et t\u00f6\u00f6riist kasutaks minimaalset ressursi ja t\u00f6\u00f6taks t\u00e4iesti m\u00e4rkamatult seadmes. Erinevalt t\u00e4nap\u00e4evastest viirust\u00f5rjetest ja muudest \"turvas\u00fcsteemidest\" ei tohi see arvutit pidurdada. Tal \u00f5nnestus minimeerida nii liiklus kui ka m\u00e4lu tarbimist t\u00e4nu veidi nutikamale tarkvarale. Kui ta lihtsalt k\u00e4ivitaks eraldi protsessi uue \u00fchenduse jaoks, saaksid potentsiaalsed kurjategijad korraldada DDoS-r\u00fcnnaku, avades arvukalt \u00fchendusi, et ammendada seadme ressursse. \u00dche vooga iga \u00fchenduse jaoks ei oleks samuti parim variant, kuna tuum kulutab ressursse voogude haldamiseks.<\/p>\n
Seet\u00f5ttu valis Chris Vellons Endlessh jaoks k\u00f5ige kergema variandi: \u00fchesuunalise serveri poll(2)<\/code>, kus kliendid on kinni, praktiliselt ei kasuta liigseid ressursse, v\u00e4lja arvatud soketi objekt tuumas ja veel 78 baiti j\u00e4lgimiseks Endlessh. Et mitte eraldada vastuv\u00f5tu ja saatmise puhvreid igale kliendile, avab Endlessh otse\u00fclekande soketi ja edastab TCP-pakette otse, ignoreerides peaaegu kogu TCP\/IP operatsioonis\u00fcsteemi reeglit. Sissetulev puhver pole \u00fcldse vajalik, kuna meid ei huvita sissetulevad andmed.<\/p>\n
Autor \u00fctleb, et tema programmi ajal ei teadnud<\/a><\/noindex> Python'i asycio ja teiste trapitite olemasolust. Kui ta oleks asycio'st teadnud, oleks ta oma utiliiti saanud rakendada vaid 18 reaga Python'is:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    try:\n        while True:\n            await asyncio.sleep(10)\n            writer.write(b'%xrn' % random.randint(0, 2**32))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 2222)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nAsyncio sobib ideaalselt trapitite kirjutamiseks. N\u00e4iteks selline l\u00f5ks viib Firefoxi, Chrome'i v\u00f5i m\u00f5ne muu kliendi, kes \u00fcritab teie HTTP-serveriga \u00fchendust luua, mitmeks tunniks ummikus:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    writer.write(b'HTTP\/1.1 200 OKrn')\n    try:\n        while True:\n            await asyncio.sleep(5)\n            header = random.randint(0, 2**32)\n            value = random.randint(0, 2**32)\n            writer.write(b'X-%x: %xrn' % (header, value))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 8080)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nTarpit on suurep\u00e4rane t\u00f6\u00f6riist internetikiusajate karistamiseks. T\u00f5si, on teatud oht, et see v\u00f5ib vastupidi, juhtida nende t\u00e4helepanu konkreetse serveri ebatavalisele k\u00e4itumisele. Keegi v\u00f5ib m\u00f5elda k\u00e4ttemaksule<\/a><\/noindex> ja sihtr\u00fcnnale teie IP-le. Sellegipoolest pole selliseid juhtumeid seni olnud ning tarpiter t\u00f6\u00f6tavad suurep\u00e4raselt.<\/p>\n
\n\"SSH-\u00fchenduste<\/a><\/noindex>
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432 \u043c\u043e\u0436\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u044d\u0442\u043e\u0433\u043e \u043c\u0443\u0441\u043e\u0440\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u043d\u0430 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 99% \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c. Tarpit \u2014 \u044d\u0442\u043e \u043f\u043e\u0440\u0442-\u043b\u043e\u0432\u0443\u0448\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u0415\u0441\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u044f\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30312","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Tarpit sisenevatele SSH-\u00fchendustele | ProHoster","description":"Ei ole saladus, et internet on v\u00e4ga vaenulik keskkond. Niipea, kui t\u00f5state serveri \u00fcles, kogeb see kohe massilisi r\u00fcnnakuid ja mitmeid skaneerimisi. N\u00e4iteks turvafirmade honeypot'id n\u00e4itavad, kui suur on see pr\u00fcgitrafik. Tegelikult v\u00f5ib keskmisel serveril 99% liiklusest olla pahatahtlik. Tarpit on sadamatarv, mida kasutatakse sisenevate \u00fchenduste aeglustamiseks. Kui kolmas osapool \u00fchendub,","canonical_url":"https:\/\/prohoster.info\/et\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041b\u043e\u0432\u0443\u0448\u043a\u0430 (\u0442\u0430\u0440\u043f\u0438\u0442) \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432 \u043c\u043e\u0436\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u044d\u0442\u043e\u0433\u043e \u043c\u0443\u0441\u043e\u0440\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u043d\u0430 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 99% \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c. Tarpit \u2014 \u044d\u0442\u043e \u043f\u043e\u0440\u0442-\u043b\u043e\u0432\u0443\u0448\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u0415\u0441\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u044f\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f","og:url":"https:\/\/prohoster.info\/et\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:49+00:00","article:modified_time":"2019-10-31T18:34:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30312","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:38:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:37:27","updated":"2026-01-21 00:38:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=30312"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30312\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=30312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=30312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=30312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}