{"id":41229,"date":"2020-02-06T20:43:00","date_gmt":"2020-02-06T17:43:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/opasno-li-derzhat-otkrytym-rdp-v-internete"},"modified":"2020-02-06T20:43:00","modified_gmt":"2020-02-06T17:43:00","slug":"opasno-li-derzhat-otkrytym-rdp-v-internete","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/opasno-li-derzhat-otkrytym-rdp-v-internete","title":{"rendered":"Kas on oht, et hoida RDP avatuna Internetis?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u041d\u0435\u0440\u0435\u0434\u043a\u043e \u044f \u0447\u0438\u0442\u0430\u043b \u043c\u043d\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0434\u0435\u0440\u0436\u0430\u0442\u044c RDP (Remote Desktop Protocol) \u043f\u043e\u0440\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e, \u0438 \u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a \u043d\u0435 \u043d\u0430\u0434\u043e. \u0410 \u043d\u0430\u0434\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a RDP \u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 VPN, \u0438\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 &quot;\u0431\u0435\u043b\u044b\u0445&quot; IP \u0430\u0434\u0440\u0435\u0441\u043e\u0432.<\/p>\n<p><\/p>\n<p>Haldan mitut Windows Serverit v\u00e4ikestele ettev\u00f5tetele, kellele on antud \u00fclesanne tagada kaugjuurdep\u00e4\u00e4s Windows Serverile raamatupidajatele. Selline kaasaegne trend on t\u00f6\u00f6tamine kodus. Suhteliselt kiiresti m\u00f5istsin, et raamatupidajate piinamine VPN-iga on t\u00e4namatu tegevus ning k\u00f5ikide IP-de valge nimekirja kogumine ei \u00f5nnestu, sest inimestel on d\u00fcnaamilised IP-aadressid.<\/p>\n<p><\/p>\n<p>Seet\u00f5ttu l\u00e4ksin k\u00f5ige lihtsama teed \u2014 suunasin RDP pordi v\u00e4ljapoole. N\u00fc\u00fcd peavad raamatupidajad RDP-d k\u00e4ivitama ja sisestama hostinime (sealhulgas port), kasutajanime ja parooli.<\/p>\n<p><\/p>\n<p>Selles artiklis jagan kogemusi (positiivseid ja mitte nii positiivseid) ning soovitusi.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Riskid<\/h3>\n<p><\/p>\n<p>Milliseid riske te v\u00f5tate, kui avate RDP pordi?<\/p>\n<p><\/p>\n<p><b>1) Autoriseerimata juurdep\u00e4\u00e4s tundlikele andmetele<\/b><br \/>\n\u0415\u0441\u043b\u0438 \u043a\u0442\u043e-\u0442\u043e \u043f\u043e\u0434\u0431\u0435\u0440\u0451\u0442 \u043f\u0430\u0440\u043e\u043b\u044c \u043a RDP, \u0442\u043e \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b \u0445\u043e\u0442\u0438\u0442\u0435 \u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u043c\u0438: \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0441\u0447\u0435\u0442\u043e\u0432, \u0431\u0430\u043b\u0430\u043d\u0441\u044b, \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, &#8230;<\/p>\n<p><\/p>\n<p><b>2) Andmete kaotus<\/b><br \/>\nN\u00e4iteks v\u00f5ib kr\u00fcptoviru t\u00f6\u00f6 tulemusena.<br \/>\nV\u00f5i kurjategija sihip\u00e4rase tegevuse t\u00f5ttu.<\/p>\n<p><\/p>\n<p><b>3) T\u00f6\u00f6stusjaama kaotus<\/b><br \/>\nT\u00f6\u00f6tajad peavad t\u00f6\u00f6tama, kuid s\u00fcsteem on kompromiteeritud, tuleb uuesti installida \/ taastada \/ konfigureerida.<\/p>\n<p><\/p>\n<p><b>4) Kohaliku v\u00f5rgu kompromiteerimine<\/b><br \/>\nKui kurjategija p\u00e4\u00e4seb Windowsi arvutisse, siis juba sellelt arvutilt saab ta juurdep\u00e4\u00e4su s\u00fcsteemidele, mis pole v\u00e4ljastpoolt, Internetist, ligip\u00e4\u00e4setavad. N\u00e4iteks failiserveritele, v\u00f5rguprinteritele jne.<\/p>\n<p>\n<b class=\"spoiler_title\">Mul oli juhtum, kus Windows Server sai kr\u00fcptoviru.<\/b><\/p>\n<p>see kr\u00fcptovirus kr\u00fcptis k\u00f5igepealt peaaegu k\u00f5ik failid C: kettal, seej\u00e4rel hakkas see kr\u00fcptima faile NAS-is \u00fcle v\u00f5rgu. Kuna NAS oli Synology ja seal olid seadistatud snapshots, siis taastasin NAS-i 5 minutiga, kuid Windows Serveri pidin uuesti installima.<\/p>\n<p><\/p>\n<h3>J\u00e4reldused ja Soovitused<\/h3>\n<p><\/p>\n<p>J\u00e4lgin Windows Servereid kasutades <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/beats\/winlogbeat\">Winlogbeat<\/a><\/noindex>, mis saadab logisid ElasticSearchi. Kibanas on m\u00f5ned visualiseerimised, ja ma olen endale seadistanud kohandatud juhtpaneeli.<br \/>\nIse j\u00e4lgimine ei kaitse, aga aitab m\u00e4\u00e4rata vajalikke meetmeid.<\/p>\n<p><\/p>\n<p>Siin on m\u00f5ned t\u00e4helepanekud:<br \/>\n<b>a) RDP-d proovivad bruteforce'ida.<\/b><br \/>\n\u00dchel minu serveritest panin RDP mitte standardporti 3389, vaid 443 \u2014 nii nagu maskeeriksin ennast HTTPS-ina. Porti vale standardist muuta on ilmselt m\u00f5tet, kuid sellest ei ole palju kasu. Siin on statistika sellelt serverilt:<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kas on oht, et hoida RDP avatuna Internetis?\" src=\"\/wp-content\/uploads\/2020\/02\/6f7fccd9378d323b67a6186bde54fc2c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>N\u00e4ha on, et n\u00e4dala jooksul oli peaaegu 400 000 eba\u00f5nnestunud katset RDP-le sisse logida.<br \/>\nN\u00e4ha on, et sisenemiseks oli 55 001 IP-aadressi (m\u00f5ned IP-aadressid olid juba blokeeritud).<\/p>\n<p><\/p>\n<p>Siit tuleb j\u00e4reldus, et peaksite seadma fail2ban-i, kuid <\/p>\n<p>\n<b class=\"spoiler_title\">\u0434\u043b\u044f Windows \u0442\u0430\u043a\u043e\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u044b &#8212; \u043d\u0435\u0442\u0443.<\/b><\/p>\n<p>On paar h\u00fcljatud projekti GitHubis, mis n\u00e4iliselt teevad seda, kuid ma ei ole neid isegi proovinud installida:<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/glasnt\/wail2ban\">https:\/\/github.com\/glasnt\/wail2ban<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/EvanAnderson\/ts_block\">https:\/\/github.com\/EvanAnderson\/ts_block<\/a><\/noindex><\/p>\n<p><\/p>\n<p>Veel on tasulisi t\u00f6\u00f6riistu, kuid ma ei ole neid kaalunud.<\/p>\n<p><\/p>\n<p>Kui tead m\u00f5nda avatud t\u00f6\u00f6riista selle eesm\u00e4rgi jaoks \u2014 jaga palun kommentaarides.<\/p>\n<p><\/p>\n<p><strong>Uuendus<\/strong>: Kommentaarides \u00f6eldi, et port 443 \u2014 ei ole hea valik, parem on valida k\u00f5rged portid (32000+), sest 443 skaneeritakse sagedamini, ja RDP tuvastamine sellel pordil ei ole probleem.<\/p>\n<p><\/p>\n<p><strong>Uuendus:<\/strong> Kommentaarides \u00f6eldi, et selline t\u00f6\u00f6riist on olemas:<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/digitalruby\/ipban\">https:\/\/github.com\/digitalruby\/ipban<\/a><\/noindex><\/p>\n<p><\/p>\n<p><b>b) On kindlad kasutajanimeid, mida kurjategijad eelistavad<\/b><br \/>\nN\u00e4ha on, et \u00fcritatakse s\u00f5nastiku abil proovida erinevaid nimesid.<br \/>\nKuid mida ma m\u00e4rkasin: m\u00e4rkimisv\u00e4\u00e4rne hulk sisenemisv\u00f5tteid tuleneb serveri nime kasutamisest sisselogimisena. Soovitus: \u00e4rge kasutage sama nime arvuti ja kasutaja jaoks. M\u00f5nikord tundub, nagu prooviks serverinime mingil moel lahendada: n\u00e4iteks s\u00fcsteemiga, mille nimi on DESKTOP-DFTHD7C, on rohkem sisenemiskatseid nimega DFTHD7C.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kas on oht, et hoida RDP avatuna Internetis?\" src=\"\/wp-content\/uploads\/2020\/02\/cd13cf169b3b9ed57db9e5706c735c06.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Seega, kui teil on arvuti nimega DESKTOP-MARIA, siis t\u00f5en\u00e4oliselt katsetatakse sisenemist kasutajana MARIA.<\/p>\n<p><\/p>\n<p>\u0415\u0449\u0451, \u0447\u0442\u043e \u044f \u0437\u0430\u043c\u0435\u0442\u0438\u043b \u0438\u0437 \u043b\u043e\u0433\u043e\u0432: \u043d\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0437\u0430\u0439\u0442\u0438 \u2014 \u044d\u0442\u043e \u0441 \u0438\u043c\u0435\u043d\u0435\u043c &quot;administrator&quot;. \u0418 \u044d\u0442\u043e \u043d\u0435\u0441\u043f\u0440\u043e\u0441\u0442\u0430, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Windows, \u044d\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e \u2014 \u0435\u0433\u043e \u043d\u0435\u043b\u044c\u0437\u044f \u0443\u0434\u0430\u043b\u0438\u0442\u044c. \u042d\u0442\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u0437\u0430\u0434\u0430\u0447\u0443 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432: \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u0438\u043c\u0435\u043d\u0438 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f \u043d\u0443\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c.<br \/>\nMuide, see s\u00fcsteem, mis p\u00fc\u00fcti kr\u00fcptima, oli Administratori kasutaja ja parool Murmansk#9. Ma ei ole endiselt kindel, kuidas seda s\u00fcsteemi h\u00e4kitud sai, kuna hakkasin j\u00e4lgima just p\u00e4rast seda juhtumit, kuid arvan, et paroolide proovimine on t\u00f5en\u00e4oline.<br \/>\nNii et kui kasutaja Administrator ei saa kustutada, siis mida teha? Seda saab \u00fcmber nimetada!<\/p>\n<p><\/p>\n<p>Soovitused selle punkti jaoks: <\/p>\n<p><\/p>\n<ul>\n<li>\u00e4rge kasutage kasutajanime arvuti nimeks<\/li>\n<li>veenduge, et s\u00fcsteemis ei oleks Administrator kasutajat<\/li>\n<li>kasutage tugevaid salas\u00f5nu<\/li>\n<\/ul>\n<p><\/p>\n<p>Nii j\u00e4lgin, kuidas mitu Windows Serverit on minu kontrolli all bruutforce'itud juba paar aastat, ja tulutult.<\/p>\n<p><\/p>\n<p>Kust ma tean, et tulutult?<br \/>\nSest \u00fclaltoodud ekraanipiltidel on n\u00e4ha, et RDP kaudu on olnud sisenemise logisid, kus on teavet:<\/p>\n<p><\/p>\n<ul>\n<li>kust IP-st<\/li>\n<li>milliselt arvutilt (hostname)<\/li>\n<li>username<\/li>\n<li>GeoIP info<\/li>\n<\/ul>\n<p><\/p>\n<p>Ja ma vaatan regulaarselt sinna \u2014 anomaaliaid pole leitud.<\/p>\n<p><\/p>\n<p>Muide, kui m\u00f5nest IP-st bruutforce'itakse eriti agaralt, siis saab teatud IP (v\u00f5i alamv\u00f5rke) PowerShellis nii blokeerida:<\/p>\n<p><\/p>\n<pre><code class=\"powershell\">New-NetFirewallRule -Direction Inbound -DisplayName &quot;fail2ban&quot; -Name &quot;fail2ban&quot; -RemoteAddress (&quot;185.143.0.0\/16&quot;, &quot;185.153.0.0\/16&quot;, &quot;193.188.0.0\/16&quot;) -Action Block<\/code><\/pre>\n<p><\/p>\n<p>Muide, Elasticil on peale Winlogbeat'i veel <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/beats\/auditbeat\">Auditbeat<\/a><\/noindex>, mis suudab j\u00e4lgida failide ja protsesside olekuid s\u00fcsteemis. On olemas ka SIEM (Security Information &amp; Event Management) rakendus Kibanas. Olen proovinud m\u00f5lemat, kuid suuri eeliseid ei n\u00e4inud - tundub, et Auditbeat on Linuxi s\u00fcsteemide jaoks kasulikum, samas kui SIEM ei ole veel midagi arusaadavat n\u00e4idanud.<\/p>\n<p><\/p>\n<p>Ja viimased soovitused:<\/p>\n<p><\/p>\n<ul>\n<li>tehke regulaarseid automaatseid varukoopiaid.<\/li>\n<li>paigaldage turvav\u00e4rskendused \u00f5igeaegselt.<\/li>\n<\/ul>\n<p>\n<b class=\"spoiler_title\">Boonus: 50 kasutaja nimekiri, keda on k\u00f5ige sagedamini proovitud RDP-le sisenemiseks.<\/b><\/p>\n<p>&quot;user.name: Descending&quot;<br \/>\nArv<\/p>\n<p>dfthd7c (hostname)<br \/>\n842941<\/p>\n<p>winsrv1 (hostname)<br \/>\n266525<\/p>\n<p>ADMINISTRAATOR<br \/>\n180678<\/p>\n<p>administratore<br \/>\n163842<\/p>\n<p>Administraator<br \/>\n53541<\/p>\n<p>michael<br \/>\n23101<\/p>\n<p>server<br \/>\n21983<\/p>\n<p>steve<br \/>\n21936<\/p>\n<p>john<br \/>\n21927<\/p>\n<p>paul<br \/>\n21913<\/p>\n<p>vastuv\u00f5tt<br \/>\n21909<\/p>\n<p>mike<br \/>\n21899<\/p>\n<p>kontor<br \/>\n21888<\/p>\n<p>skanner<br \/>\n21887<\/p>\n<p>skaneeri<br \/>\n21867<\/p>\n<p>david<br \/>\n21865<\/p>\n<p>chris<br \/>\n21860<\/p>\n<p>omanik<br \/>\n21855<\/p>\n<p>juht<br \/>\n21852<\/p>\n<p>administrateur<br \/>\n21841<\/p>\n<p>brian<br \/>\n21839<\/p>\n<p>administrador<br \/>\n21837<\/p>\n<p>mark<br \/>\n21824<\/p>\n<p>t\u00f6\u00f6taja<br \/>\n21806<\/p>\n<p>ADMIN<br \/>\n12748<\/p>\n<p>ROOT<br \/>\n7772<\/p>\n<p>ADMINISTRADOR<br \/>\n7325<\/p>\n<p>TOE<br \/>\n5577<\/p>\n<p>SUPPORT<br \/>\n5418<\/p>\n<p>USER<br \/>\n4558<\/p>\n<p>admin<br \/>\n2832<\/p>\n<p>TEST<br \/>\n1928<\/p>\n<p>MySql<br \/>\n1664<\/p>\n<p>Admin<br \/>\n1652<\/p>\n<p>K\u00dcLALINE<br \/>\n1322<\/p>\n<p>KASUTAJAD1<br \/>\n1179<\/p>\n<p>SKANNER<br \/>\n1121<\/p>\n<p>SCAN<br \/>\n1032<\/p>\n<p>ADMINISTRATEUR<br \/>\n842<\/p>\n<p>ADMIN1<br \/>\n525<\/p>\n<p>VARUNDUS<br \/>\n518<\/p>\n<p>MySqlAdmin<br \/>\n518<\/p>\n<p>VASTUV\u00d5TT<br \/>\n490<\/p>\n<p>KASUTAJAD2<br \/>\n466<\/p>\n<p>AJUTINE<br \/>\n452<\/p>\n<p>SQLADMIN<br \/>\n450<\/p>\n<p>KASUTAJAD3<br \/>\n441<\/p>\n<p>1<br \/>\n422<\/p>\n<p>JUHT<br \/>\n418<\/p>\n<p>OMANIK<br \/>\n410<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/487056\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0435\u0440\u0435\u0434\u043a\u043e \u044f \u0447\u0438\u0442\u0430\u043b \u043c\u043d\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0434\u0435\u0440\u0436\u0430\u0442\u044c RDP (Remote Desktop Protocol) \u043f\u043e\u0440\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e, \u0438 \u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a \u043d\u0435 \u043d\u0430\u0434\u043e. \u0410 \u043d\u0430\u0434\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a RDP \u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 VPN, \u0438\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 &quot;\u0431\u0435\u043b\u044b\u0445&quot; IP \u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u042f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e Windows Server \u0434\u043b\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0444\u0438\u0440\u043c, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043d\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0437\u0430\u0434\u0430\u0447\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":41230,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41229","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0435\u0440\u0435\u0434\u043a\u043e \u044f \u0447\u0438\u0442\u0430\u043b \u043c\u043d\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0434\u0435\u0440\u0436\u0430\u0442\u044c RDP (Remote Desktop Protocol) \u043f\u043e\u0440\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e, \u0438 \u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a \u043d\u0435 \u043d\u0430\u0434\u043e. \u0410 \u043d\u0430\u0434\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a RDP \u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 VPN, \u0438\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 &quot;\u0431\u0435\u043b\u044b\u0445&quot; IP \u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u042f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e Windows Server \u0434\u043b\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0444\u0438\u0440\u043c, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043d\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0437\u0430\u0434\u0430\u0447\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/opasno-li-derzhat-otkrytym-rdp-v-internete\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u043f\u0430\u0441\u043d\u043e \u043b\u0438 \u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c RDP \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0435\u0440\u0435\u0434\u043a\u043e \u044f \u0447\u0438\u0442\u0430\u043b \u043c\u043d\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0434\u0435\u0440\u0436\u0430\u0442\u044c RDP (Remote Desktop Protocol) \u043f\u043e\u0440\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e, \u0438 \u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a \u043d\u0435 \u043d\u0430\u0434\u043e. \u0410 \u043d\u0430\u0434\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a RDP \u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 VPN, \u0438\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 &quot;\u0431\u0435\u043b\u044b\u0445&quot; IP \u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u042f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e Windows Server \u0434\u043b\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0444\u0438\u0440\u043c, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043d\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0437\u0430\u0434\u0430\u0447\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/opasno-li-derzhat-otkrytym-rdp-v-internete\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-06T17:43:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-06T17:43:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kas on oht hoida RDP avatud Internetis? | ProHoster","description":"Olen korduvalt lugenud arvamust, et hoida RDP (Remote Desktop Protocol) port avatuna Internetis on v\u00e4ga ohtlik ja seda ei tohiks teha. RDP juurdep\u00e4\u00e4s tuleks anda kas VPN kaudu v\u00f5i ainult m\u00e4\u00e4ratud \"valgete\" IP-aadresside kaudu. Haldaan mitmeid Windows Server'e v\u00e4ikeste ettev\u00f5tete jaoks, kus mulle on antud \u00fclesanne tagada kaugjuurdep\u00e4\u00e4s.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/opasno-li-derzhat-otkrytym-rdp-v-internete","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0430\u0441\u043d\u043e \u043b\u0438 \u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c RDP \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435? | ProHoster","og:description":"\u041d\u0435\u0440\u0435\u0434\u043a\u043e \u044f \u0447\u0438\u0442\u0430\u043b \u043c\u043d\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0434\u0435\u0440\u0436\u0430\u0442\u044c RDP (Remote Desktop Protocol) \u043f\u043e\u0440\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e, \u0438 \u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a \u043d\u0435 \u043d\u0430\u0434\u043e. \u0410 \u043d\u0430\u0434\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a RDP \u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 VPN, \u0438\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 &quot;\u0431\u0435\u043b\u044b\u0445&quot; IP \u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u042f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e Windows Server \u0434\u043b\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0444\u0438\u0440\u043c, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043d\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0437\u0430\u0434\u0430\u0447\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f","og:url":"https:\/\/prohoster.info\/et\/blog\/opasno-li-derzhat-otkrytym-rdp-v-internete","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-06T17:43:00+00:00","article:modified_time":"2020-02-06T17:43:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41229","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:21:32","updated":"2022-09-28 03:38:38"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/41229","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=41229"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/41229\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/41230"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=41229"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=41229"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=41229"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}