Binciken ayyukan maharin da ke da alaƙa da tantance kalmar sirri ta hanyar SSH

Buga sakamakon bincike na hare-haren da suka danganci tantance kalmar sirri don sabobin ta hanyar SSH. A yayin gwajin, an ƙaddamar da wuraren ajiyar zuma da yawa, ana yin riya a matsayin uwar garken OpenSSH mai sauƙi kuma an shirya su akan cibiyoyin sadarwa daban-daban na masu samar da girgije, kamar su.
Google Cloud, DigitalOcean da NameCheap. Fiye da watanni uku, 929554 ƙoƙarin haɗi zuwa uwar garke an yi rikodin.

A cikin kashi 78% na lokuta, an yi binciken ne don tantance kalmar sirri ta tushen mai amfani. Kalmomin sirri da aka fi bincika akai-akai sune “123456” da “Password”, amma manyan goma kuma sun haɗa da kalmar sirri “J5cmmu=Kyf0-br8CsW”, mai yiwuwa tsohuwar wacce wasu masana’anta ke amfani da ita.

Shahararrun shiga da kalmomin shiga:

Login
Yawan yunkurin
Kalmar sirri
Yawan yunkurin

tushen
729108

40556

admin
23302
123456
14542

mai amfani
8420
admin
7757

gwajin
7547
123
7355

magana
6211
1234
7099

ftpuser
4012
tushen
6999

Ubuntu
3657
password
6118

bako
3606
gwajin
5671

matsayi
3455
12345
5223

mai amfani
2876
bako
4423

Daga yunƙurin zaɓin da aka bincika, an gano nau'ikan kalmar shiga na musamman guda 128588, yayin da aka yi ƙoƙarin bincika 38112 daga cikinsu sau 5 ko fiye. nau'i-nau'i 25 da aka fi yawan gwadawa:

Login
Kalmar sirri
Yawan yunkurin

tushen
 
37580

tushen
tushen
4213

mai amfani
mai amfani
2794

tushen
123456
2569

gwajin
gwajin
2532

admin
admin
2531

tushen
admin
2185

bako
bako
2143

tushen
password
2128

magana
magana
1869

Ubuntu
Ubuntu
1811

tushen
1234
1681

tushen
123
1658

matsayi
matsayi
1594

goyon bayan
goyon bayan
1535

Jenkins
Jenkins
1360

admin
password
1241

tushen
12345
1177

pi
rasberi
1160

tushen
12345678
1126

tushen
123456789
1069

ubnt ba
ubnt ba
1069

admin
1234
1012

tushen
1234567890
967

mai amfani da ec2
mai amfani da ec2
963

Rarraba yunƙurin dubawa ta ranar mako da sa'a:

Binciken ayyukan maharin da ke da alaƙa da tantance kalmar sirri ta hanyar SSH

Binciken ayyukan maharin da ke da alaƙa da tantance kalmar sirri ta hanyar SSH

Gabaɗaya, an yi rikodin buƙatun daga adiresoshin IP na musamman guda 27448.
Mafi yawan adadin cak da aka yi daga IP guda ɗaya shine 64969. Rabon cak ta hanyar Tor shine kawai 0.8%. Kashi 62.2% na adiresoshin IP da ke cikin zaɓin suna da alaƙa da rukunin yanar gizo na kasar Sin:

Binciken ayyukan maharin da ke da alaƙa da tantance kalmar sirri ta hanyar SSH

source: budenet.ru

Add a comment