{"id":85702,"date":"2020-06-18T13:42:59","date_gmt":"2020-06-18T11:42:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/bhunter-vzlamyvaem-uzly-bot-setej"},"modified":"2020-06-18T13:42:59","modified_gmt":"2020-06-18T11:42:59","slug":"bhunter-vzlamyvaem-uzly-bot-setej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/bhunter-vzlamyvaem-uzly-bot-setej","title":{"rendered":"Bhunter \u2014 me murda botiv\u00f5rkude s\u00f5lmede turvaaukudega","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Viirusanal\u00fc\u00fctikud ja arvutiturbeeksperdid p\u00fc\u00fcavad koguda v\u00f5imalikult palju uusi botnetide n\u00e4idiseid. Sel eesm\u00e4rgil kasutavad nad honeypote.\u2026 Aga mis siis, kui soovid j\u00e4lgida pahavara reaalsetes tingimustes? Kuidas oma serverit v\u00f5i ruuterit ohvrirolli seada? Ja mis siis, kui sobivat seadet pole? Just need k\u00fcsimused viisid mind bhunteri loomisele \u2014 t\u00f6\u00f6riistale, mis annab p\u00e4\u00e4su botnetside s\u00f5lmedele.<\/p>\n<p><img decoding=\"async\" alt=\"Bhunter \u2014 me murda botiv\u00f5rkude s\u00f5lmede turvaaukudega\" src=\"\/wp-content\/uploads\/2020\/06\/eb488707720f4584577a1ee20c266868.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h1>Peamine idee<\/h1>\n<p>\nOn palju viise pahavara levitamiseks botiv\u00f5rkude laienemiseks: alates fi\u0161ingust kuni 0-p\u00e4evaste haavatavuste \u00e4rakasutamiseni. Kuid k\u00f5ige levinum meetod on endiselt SSH paroolide proovimine.<\/p>\n<p>Idee on v\u00e4ga lihtne. Kui m\u00f5nelt botiv\u00f5rgus\u00f5lmelt proovitakse parooli teie serverisse, on t\u00f5en\u00e4oliselt see s\u00f5lm ise saanud nakatunud lihtsate paroolide proovimisel. Seega, et sellele juurdep\u00e4\u00e4s saada, tuleb lihtsalt vastata \u00abvastastikuste\u00bb suhtlemisega.<\/p>\n<p>Just\u8fd9\u6837 bhunter\u7684\u5de5\u4f5c\u539f\u7406\u3002\u5b83\u76d1\u542c22\u7aef\u53e3\uff08SSH\u670d\u52a1\uff09\uff0c\u5e76\u6536\u96c6\u6240\u6709\u5c1d\u8bd5\u8fde\u63a5\u7684\u767b\u5f55\u540d\u548c\u5bc6\u7801\u3002\u7136\u540e\uff0c\u4f7f\u7528\u6536\u96c6\u5230\u7684\u5bc6\u7801\uff0c\u5c1d\u8bd5\u8fde\u63a5\u5230\u653b\u51fb\u8282\u70b9\u3002<\/p>\n<h1>T\u00f6\u00f6algoritm<\/h1>\n<p>\n\u8be5\u7a0b\u5e8f\u5927\u81f4\u53ef\u4ee5\u5206\u4e3a\u4e24\u4e2a\u4e3b\u8981\u90e8\u5206\uff0c\u8fd9\u4e24\u4e2a\u90e8\u5206\u5728\u4e0d\u540c\u7684\u7ebf\u7a0b\u4e2d\u8fd0\u884c\u3002\u7b2c\u4e00\u90e8\u5206\u662f\u871c\u7f50\u3002\u5b83\u5904\u7406\u767b\u5f55\u5c1d\u8bd5\uff0c\u6536\u96c6\u72ec\u7279\u7684\u767b\u5f55\u540d\u548c\u5bc6\u7801\uff08\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u767b\u5f55\u540d\u548c\u5bc6\u7801\u5bf9\u88ab\u89c6\u4e3a\u4e00\u4e2a\u6574\u4f53\uff09\uff0c\u5e76\u5c06\u5c1d\u8bd5\u8fde\u63a5\u7684IP\u5730\u5740\u6dfb\u52a0\u5230\u961f\u5217\u4e2d\u4ee5\u4fbf\u540e\u7eed\u653b\u51fb\u3002<\/p>\n<p>\u7b2c\u4e8c\u90e8\u5206\u8d1f\u8d23\u76f4\u63a5\u653b\u51fb\u3002\u653b\u51fb\u6709\u4e24\u79cd\u6a21\u5f0f\uff1aBurstAttack\uff08\u961f\u5217\u653b\u51fb\uff09\u2014\u2014\u4ece\u603b\u5217\u8868\u4e2d\u66b4\u529b\u7834\u89e3\u767b\u5f55\u540d\u548c\u5bc6\u7801\uff1b\u548cSingleShotAttack\uff08\u5355\u53d1\u653b\u51fb\uff09\u2014\u2014\u66b4\u529b\u7834\u89e3\u5df2\u7ecf\u88ab\u653b\u51fb\u8282\u70b9\u4f7f\u7528\u8fc7\u4f46\u5c1a\u672a\u6dfb\u52a0\u5230\u603b\u5217\u8868\u4e2d\u7684\u5bc6\u7801\u3002<\/p>\n<p>\u4e3a\u4e86\u5728\u542f\u52a8\u540e\u7acb\u5373\u62e5\u6709\u4e00\u4e9b\u767b\u5f55\u540d\u548c\u5bc6\u7801\u7684\u57fa\u7840\uff0cbhunter\u4f7f\u7528\u6765\u81ea\u6587\u4ef6\/etc\/bhunter\/defaultLoginPairs\u7684\u5217\u8868\u8fdb\u884c\u521d\u59cb\u5316\u3002 <\/p>\n<h1>Liides<\/h1>\n<p>\nbhunter\u63d0\u4f9b\u4e86\u51e0\u79cd\u542f\u52a8\u65b9\u5f0f\uff1a<\/p>\n<h5>\u53ea\u9700\u4f7f\u7528\u547d\u4ee4<\/h5>\n<p><\/p>\n<pre><code class=\"bash\">sudo bhunter<\/code><\/pre>\n<p>\nSelle k\u00e4ivitamise korral on v\u00f5imalik hallata bhunterit tema tekstimen\u00fc\u00fc kaudu: lisada sisselogimiseid ja paroole r\u00fcnnaku jaoks, eksportida sisselogimiste ja paroolide andmebaasi, m\u00e4\u00e4rata r\u00fcnnaku sihtm\u00e4rk. K\u00f5iki r\u00fcnnatavaid s\u00f5lmi saab n\u00e4ha failis \/var\/log\/bhunter\/hacked.log.<\/p>\n<h5>Kasutades tmux<\/h5>\n<p><\/p>\n<pre><code class=\"bash\">sudo bhunter-ts # k\u00e4sk bhunter'i k\u00e4ivitamiseks l\u00e4bi tmux  \nsudo tmux attach -t bhunter # \u00fchendame sessiooni, kus bhunter on k\u00e4imas\n<\/code><\/pre>\n<p>\nTmux on terminali multiplexer, v\u00e4ga mugav t\u00f6\u00f6riist. See v\u00f5imaldab \u00fches terminalis luua mitu akent ja jagada aknad paneelideks. Selle kasutamisel saab terminalist v\u00e4lja minna ja hiljem tagasi tulla, katkestamata k\u00e4imasolevaid protsesse. <\/p>\n<p>bhunter-ts skript loob tmux-istungi ja jagab akna kolme paneeli. Suuremas paneelis on tekstimen\u00fc\u00fc. \u00dclemises paremas nurgas on honeypoti logid, kus saab n\u00e4ha sisselogimiskatsete teateid honeypotile. Alumises paremas paneelis kuvatakse teave r\u00fcnnaku k\u00e4igust botnetside s\u00f5lmede vastu ja edukatest r\u00fcnnakutest.<\/p>\n<p>Selle meetodi eelis esimesega on see, et me v\u00f5ime julgelt terminali sulgeda ja hiljem tagasi tulla, ilma et bhunter peataks oma t\u00f6\u00f6. Neile, kes ei ole tmux'iga palju tuttavad, soovitan <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/126996\/\"> seda mao m\u00e4rkmeid<\/a><\/noindex>.<\/p>\n<h5>Teenusena<\/h5>\n<p><\/p>\n<pre><code class=\"bash\">systemctl enable bhunter\nsystemctl start bhunter<\/code><\/pre>\n<p>\nSel juhul lubame bhunteri automaatse k\u00e4ivitamise s\u00fcsteemi k\u00e4ivitamisel. Selles meetodis ei ole bhunteriga suhtlemine ette n\u00e4htud ning loetelu rikutud s\u00f5lmedest saab \/var\/log\/bhunter\/hacked.log failist<\/p>\n<h1>T\u00f5husus<\/h1>\n<p>\nBhunteriga t\u00f6\u00f6tades olen suutnud leida ja juurde p\u00e4\u00e4seda t\u00e4iesti erinevatele seadmetele: raspberry pi, ruuteritele (eriti mikrotik), veebiserveritele, ja kord ka kaevandustalule (kahjuks oli sellele juurdep\u00e4\u00e4s ainult p\u00e4evaks, seega huvitavat lugu ei tulnud). Siin on ekraanipilt programmist, kus on n\u00e4ha rikutud s\u00f5lmede nimekiri p\u00e4rast mitmeid p\u00e4evi t\u00f6\u00f6d:<\/p>\n<p><img decoding=\"async\" alt=\"Bhunter \u2014 me murda botiv\u00f5rkude s\u00f5lmede turvaaukudega\" src=\"\/wp-content\/uploads\/2020\/06\/3886b6a7188a5b77b4e0a1a7d58f0324.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKahjuks ei ole see t\u00f6\u00f6riist saavutanud minu ootusi: bhunter v\u00f5ib s\u00f5lmede paroolide proovimist mitu p\u00e4eva ilma tulemusi andmata, v\u00f5i v\u00f5ib murda mitu sihtm\u00e4rki vaid paaritunniga. Kuid uute botneti koopiate regulaarseks vooluks piisab sellest.<\/p>\n<p>T\u00f5husust m\u00f5jutavad sellised parameetrid nagu: riik, kus asub server bhunteriga, hostimine ja vahemik, millest IP-aadress eraldatakse. Minu kogemuse p\u00f5hjal oli juhtum, kus rentisin kaks virtuaalset serverit \u00fchest hostimisest ning \u00fcks neist oli kaks korda sagedamini botnetide r\u00fcnnakute all.<\/p>\n<h1>Vigade nimekiri, mille olen veel parandamata<\/h1>\n<p>\nR\u00fcnnaku ajal nakatatud s\u00f5lmedele ei ole m\u00f5nel juhul v\u00f5imalik selgelt m\u00e4\u00e4rata, kas parool sobis v\u00f5i mitte. Selliste juhtumite logimist hoitakse failis \/var\/log\/debug.log.<\/p>\n<p>Paramiko moodul, mida kasutatakse SSH-ga t\u00f6\u00f6tamiseks, k\u00e4itub vahel eba\u00f5igesti: see j\u00e4\u00e4b l\u00f5putusse ootusse vastuse p\u00e4rast s\u00f5lme, kui p\u00fc\u00fcab sellele \u00fchendust luua. Olen katsetanud taimeritega, kuid soovitud tulemust ei saanud.<\/p>\n<h1>Millise kallal tuleb veel t\u00f6\u00f6tada?<\/h1>\n<p><\/p>\n<h5>Teenuse nimi<\/h5>\n<p>\nVastavalt RFC-4253-le vahetavad klient ja server enne \u00fchenduse loomist teenuse nimed, mis rakendavad SSH protokolli. See nimi on sisaldatud 'SERVICE NAME' v\u00e4ljas, mis on nii kliendi p\u00e4ringus kui ka serveri vastuses. V\u00e4li on string ja selle v\u00e4\u00e4rtuse saab teada, kasutades wireshark'i v\u00f5i nmap'i. Siin on n\u00e4ide OpenSSH jaoks:<\/p>\n<pre><code class=\"plaintext\">$ nmap -p 22 ***.**.***.** -sV\nNmap alustamine ...\nPORT   STATE SERVICE VERSION\n22\/tcp avatud  ssh     &lt;b&gt;OpenSSH 7.9p1 Debian 10+deb10u2&lt;\/b&gt; (protokoll 2.0)\nNmap l&otilde;petatud: 1 IP-aadress (1 host aktiivne) skaneeritud 0.47 sekundiga\n<\/code><\/pre>\n<p>\nKuid Paramiko puhul sisaldab see v\u00e4li sellist stringi nagu \u201eParamiko Python sshd 2.4.2\u201c, mis v\u00f5ib hirmutada botnet\u2019e, millele on programmeeritud \u201ep\u00fc\u00fcniste v\u00e4ltimine\u201c. Seet\u00f5ttu arvan, et oleks vajalik see string asendada millegagi neutraalsemaga.<\/p>\n<h5>Teised vektorid<\/h5>\n<p>\nSSH ei ole ainus kaugjuhtimise vahend. On veel telnet, rdp. Tasub ka neile pilk heita.<\/p>\n<h5>Laiendus<\/h5>\n<p>\nOleks tore omada mitmeid p\u00fc\u00fcniseid erinevates riikides ja koguda neist kesksetesse andmebaasidesse logisid, paroole ja rikutud s\u00f5lmi. <\/p>\n<h1>Kus alla laadida?<\/h1>\n<p>\nArtikli kirjutamise hetkel on saadaval ainult testversioon, mille saab alla laadida <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/dvoropaev\/bhunter\">Githubi hoidlast<\/a><\/noindex>.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/491098\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0435\u043c\u044f\u0442\u0441\u044f \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 \u043d\u043e\u0432\u044b\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432. \u0412 \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u044f\u0445 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 honeypot&#8217;\u044b.\u2026 \u041d\u043e \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u0445\u043e\u0447\u0435\u0442\u0441\u044f \u043f\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u0437\u0430 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043e\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445? \u041f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0434\u0430\u0440 \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440? \u0410 \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435\u0442? \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0438 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u043d\u0430\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438 \u043c\u0435\u043d\u044f \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 bhunter \u2014 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85703,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-85702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0435\u043c\u044f\u0442\u0441\u044f \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 \u043d\u043e\u0432\u044b\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432. \u0412 \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u044f\u0445 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 honeypot&#039;\u044b.\u2026 \u041d\u043e \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u0445\u043e\u0447\u0435\u0442\u0441\u044f \u043f\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u0437\u0430 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043e\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445? \u041f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0434\u0430\u0440 \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440? \u0410 \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435\u0442? \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0438 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u043d\u0430\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438 \u043c\u0435\u043d\u044f \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 bhunter \u2014 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/bhunter-vzlamyvaem-uzly-bot-setej\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Bhunter \u2014 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u043c \u0443\u0437\u043b\u044b \u0431\u043e\u0442-\u0441\u0435\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0435\u043c\u044f\u0442\u0441\u044f \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 \u043d\u043e\u0432\u044b\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432. \u0412 \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u044f\u0445 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 honeypot&#039;\u044b.\u2026 \u041d\u043e \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u0445\u043e\u0447\u0435\u0442\u0441\u044f \u043f\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u0437\u0430 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043e\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445? \u041f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0434\u0430\u0440 \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440? \u0410 \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435\u0442? \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0438 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u043d\u0430\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438 \u043c\u0435\u043d\u044f \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 bhunter \u2014 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/bhunter-vzlamyvaem-uzly-bot-setej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-18T11:42:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-18T11:42:59+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Bhunter \u2014 h\u00e4kkime botnet\u2019ide s\u00f5lmi | ProHoster","description":"Viirusanal\u00fc\u00fctikud ja k\u00fcberjulgeoleku teadlased p\u00fc\u00fcavad koguda v\u00f5imalikult palju uusi botnet\u2019i n\u00e4idiseid. Oma eesm\u00e4rkidel kasutavad nad honeypot\u2019e.\u2026 Aga mis siis, kui tahad j\u00e4lgida pahavara reaalsetes tingimustes? Kuidas v\u00f5tta risk oma serveri v\u00f5i ruuteri peale? Ent mis siis, kui sobivat seadet pole? Just need k\u00fcsimused panid mind kokku panema bhunter\u2019i \u2014 t\u00f6\u00f6riista juurdep\u00e4\u00e4su saamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/bhunter-vzlamyvaem-uzly-bot-setej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Bhunter \u2014 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u043c \u0443\u0437\u043b\u044b \u0431\u043e\u0442-\u0441\u0435\u0442\u0435\u0439 | ProHoster","og:description":"\u0412\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0435\u043c\u044f\u0442\u0441\u044f \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 \u043d\u043e\u0432\u044b\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432. \u0412 \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u044f\u0445 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 honeypot'\u044b.\u2026 \u041d\u043e \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u0445\u043e\u0447\u0435\u0442\u0441\u044f \u043f\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u0437\u0430 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043e\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445? \u041f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0434\u0430\u0440 \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440? \u0410 \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435\u0442? \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0438 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u043d\u0430\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438 \u043c\u0435\u043d\u044f \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 bhunter \u2014 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/bhunter-vzlamyvaem-uzly-bot-setej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-18T11:42:59+00:00","article:modified_time":"2020-06-18T11:42:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85702","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:32:46","updated":"2022-09-27 21:52:04"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/85702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=85702"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/85702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/85703"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=85702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=85702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=85702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}