{"id":34790,"date":"2019-10-31T22:00:24","date_gmt":"2019-10-31T19:00:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe\/"},"modified":"2019-10-31T22:00:24","modified_gmt":"2019-10-31T19:00:24","slug":"opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe","title":{"rendered":"Zn\u00f3w setki tysi\u0119cy p\u0142atno\u015bci obywateli do GIBDD i FSSP by\u0142y dost\u0119pne publicznie","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Pami\u0119tasz, jak <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/448440\/\">pisa\u0142em na Habra<\/a><\/noindex> i u siebie <noindex><a rel=\"nofollow\" href=\"http:\/\/tele.click\/dataleak\/961\">na kanale Telegram<\/a><\/noindex>, jak szczeg\u00f3\u0142y p\u0142atno\u015bci na rzecz GIBDD i FSSP u\u017cytkownik\u00f3w stron <em>oplatagibdd.rf<\/em>, <em>paygibdd.ru<\/em>, <em>gos-oplata.ru<\/em>, <em>szyb.fr<\/em> i <em>oplata-fssp.ru<\/em>?<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Zn\u00f3w setki tysi\u0119cy p\u0142atno\u015bci obywateli do GIBDD i FSSP by\u0142y dost\u0119pne publicznie\" src=\"\/wp-content\/uploads\/2019\/05\/3f0928a00144c08cb608032ad7550ae5.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Tylko nie \u015bmiejcie si\u0119, to wcale nie jest \u017cart \u2014 ten sam serwer z danymi tej samej systemu znowu okaza\u0142 si\u0119 otwarty dla ca\u0142ego \u015bwiata.<\/p>\n<p><\/p>\n<p>No to zaczynajmy rozwi\u0105zywa\u0107 spraw\u0119...<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<pre><code class=\"plaintext\">Zastrze\u017cenie: wszystkie informacje poni\u017cej publikowane s\u0105 wy\u0142\u0105cznie w celach edukacyjnych. Autor nie mia\u0142 dost\u0119pu do danych osobowych os\u00f3b trzecich ani firm. Informacje pochodz\u0105 albo z otwartych \u017ar\u00f3de\u0142, albo zosta\u0142y przekazane autorowi przez anonimowych \u017cyczliwych.<\/code><\/pre>\n<p><\/p>\n<p>Na pocz\u0105tek przypomn\u0119 chronologi\u0119 wydarze\u0144:<\/p>\n<p><\/p>\n<ul>\n<li>12.04.2019 (w nocy) odkryto serwer Elasticsearch, kt\u00f3ry nie wymaga\u0142 uwierzytelnienia do po\u0142\u0105czenia.<\/li>\n<li>13.04.2019 (rano) wys\u0142ano powiadomienie do w\u0142a\u015bcicieli serwera.<\/li>\n<li>13.04.2019 (w ci\u0105gu dnia) serwer zosta\u0142 \"cicho\" usuni\u0119ty z publicznego dost\u0119pu.<\/li>\n<\/ul>\n<p><\/p>\n<p>W momencie pierwszego zamkni\u0119cia serwera, indeksy Elasticsearch wygl\u0105da\u0142y tak:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Zn\u00f3w setki tysi\u0119cy p\u0142atno\u015bci obywateli do GIBDD i FSSP by\u0142y dost\u0119pne publicznie\" src=\"\/wp-content\/uploads\/2019\/05\/7f2ee67a67a4caf7c7e0eebb0f50b33d.png\" style=\"display:block;margin: 0 auto;\" \/> <\/p>\n<p><\/p>\n<p>I oto 21.05.2019 oko\u0142o 16:00 (MSK) ten sam serwer Elasticsearch, z tymi samymi (plus nowymi) indeksami ponownie pojawi\u0142 si\u0119 publicznie:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Zn\u00f3w setki tysi\u0119cy p\u0142atno\u015bci obywateli do GIBDD i FSSP by\u0142y dost\u0119pne publicznie\" src=\"\/wp-content\/uploads\/2019\/05\/f915e575967ca597f19e913944dbc3dc.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Nie mog\u0142em uwierzy\u0107 w\u0142asnym oczom, gdy zobaczy\u0142em (zaraz po wyst\u0105pieniu na <em>PHDays<\/em> na temat odkrywania otwartych baz) w mailu powiadomienie od naszego <noindex><a rel=\"nofollow\" href=\"https:\/\/www.devicelock.com\/ru\/data-breach-intelligence\/\">DeviceLock Data Breach Intelligence<\/a><\/noindex>. Szczerze m\u00f3wi\u0105c, pierwsza my\u015bl to by\u0142a, \u017ce to jaki\u015b b\u0142\u0105d systemu.<\/p>\n<p><\/p>\n<p>Jednak nie, to nie by\u0142 b\u0142\u0105d i po r\u0119cznym sprawdzeniu, o 01:25 ju\u017c 22.05.2019 ponownie wys\u0142a\u0142em powiadomienie na te same adresy, co za pierwszym razem.<\/p>\n<p><\/p>\n<p>Od momentu pierwszego zamkni\u0119cia, ten serwer zosta\u0142 przeskanowany przez Shodan 11 razy i do 21 maja Elasticsearch na nim by\u0142 zablokowany.<\/p>\n<p><\/p>\n<p>Dopiero 24.05.2019 rano ten Elasticsearch znikn\u0105\u0142 z publicznego dost\u0119pu po raz drugi. W mi\u0119dzyczasie indeksy solidnie uros\u0142y:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Zn\u00f3w setki tysi\u0119cy p\u0142atno\u015bci obywateli do GIBDD i FSSP by\u0142y dost\u0119pne publicznie\" src=\"\/wp-content\/uploads\/2019\/05\/889a939c98424e316308b41f0392e7ae.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>A je\u015bli spojrzymy na dane (tylko istotne informacje zawieraj\u0105ce dane osobowe obywateli) w indeksach za okres od 1 do 22 maja, to wygl\u0105da to tak:<\/p>\n<p><\/p>\n<ul>\n<li>127,525 rekord\u00f3w w indeksie <em>paygibdd<\/em> <\/li>\n<li>49,627 rekord\u00f3w w indeksie <em>shtrafov-net<\/em><\/li>\n<li>162,282 rekord\u00f3w w indeksie <em>oplata-fssp<\/em><\/li>\n<li>220,201 rekord\u00f3w w indeksie <em>gosoplata<\/em><\/li>\n<\/ul>\n<p><\/p>\n<p>Przyk\u0142ad danych z indeksu <em>gosoplata<\/em>:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Zn\u00f3w setki tysi\u0119cy p\u0142atno\u015bci obywateli do GIBDD i FSSP by\u0142y dost\u0119pne publicznie\" src=\"\/wp-content\/uploads\/2019\/05\/8f596de149b6c6a4bf7d06abfcc90e2c.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Przyk\u0142ad danych z indeksu <em>paygibdd<\/em>:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Zn\u00f3w setki tysi\u0119cy p\u0142atno\u015bci obywateli do GIBDD i FSSP by\u0142y dost\u0119pne publicznie\" src=\"\/wp-content\/uploads\/2019\/05\/20c88b7f644f551775bd73d02f6c4dc6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>A wisienk\u0105 na torcie by\u0142o pismo z jednego z adres\u00f3w, na kt\u00f3re wysy\u0142a\u0142em powiadomienia:<\/p>\n<p><\/p>\n<blockquote><p>Dzi\u0119kujemy za Twoj\u0105 wiadomo\u015b\u0107 na temat otwartego ElasticSearch \u2014 dzi\u0119kujemy za informacj\u0119, baza danych zosta\u0142a zamkni\u0119ta. Administrator systemu, kt\u00f3ry ponownie otworzy\u0142 dost\u0119p, zosta\u0142 zwolniony. Ponadto s\u0142u\u017cba prawna przygotowuje wniosek do Ministerstwa Spraw Wewn\u0119trznych Republiki Tatarstan dotycz\u0105cy wykrycia w dzia\u0142aniach administratora systemu znamion przest\u0119pstwa wed\u0142ug artyku\u0142\u00f3w 272 i 273 Kodeksu Karnego Federacji Rosyjskiej.<\/p><\/blockquote>\n<p>Informacje o wyciekach danych i insiderach zawsze mo\u017cna znale\u017a\u0107 na moim kanale Telegram \u201e<noindex><a rel=\"nofollow\" href=\"http:\/\/tele.click\/dataleak\">Wyciek informacji<\/a><\/noindex>\u00bb: <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/dataleak\">https:\/\/t.me\/dataleak<\/a><\/noindex>.<\/p>\n<p>\u0179r\u00f3d\u0142o: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/454048\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u043c\u043d\u0438\u0442\u0435 \u044f \u043f\u0438\u0441\u0430\u043b \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u0438 \u0443 \u0441\u0435\u0431\u044f \u0432 Telegram-\u043a\u0430\u043d\u0430\u043b\u0435, \u043a\u0430\u043a \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439 \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 \u0413\u0418\u0411\u0414\u0414 \u0438 \u0424\u0421\u0421\u041f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0430\u0439\u0442\u043e\u0432 \u043e\u043f\u043b\u0430\u0442\u0430\u0433\u0438\u0431\u0434\u0434.\u0440\u0444, paygibdd.ru, gos-oplata.ru, \u0448\u0442\u0440\u0430\u0444\u043e\u0432.net \u0438 oplata-fssp.ru? \u0422\u043e\u043b\u044c\u043a\u043e \u043d\u0435 \u043d\u0430\u0434\u043e \u0441\u043c\u0435\u044f\u0442\u044c\u0441\u044f, \u044d\u0442\u043e \u0432\u043e\u0432\u0441\u0435 \u043d\u0435 \u0448\u0443\u0442\u043a\u0430 \u2014 \u0442\u043e\u0442 \u0436\u0435 \u0441\u0430\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0430\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u043d\u043e\u0432\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0434\u043b\u044f \u0432\u0441\u0435\u0433\u043e \u043c\u0438\u0440\u0430. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26212,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34790","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u043c\u043d\u0438\u0442\u0435 \u044f \u043f\u0438\u0441\u0430\u043b \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u0438 \u0443 \u0441\u0435\u0431\u044f \u0432 Telegram-\u043a\u0430\u043d\u0430\u043b\u0435, \u043a\u0430\u043a.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"pl_PL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u043f\u044f\u0442\u044c \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439 \u0433\u0440\u0430\u0436\u0434\u0430\u043d \u0432 \u0413\u0418\u0411\u0414\u0414 \u0438 \u0424\u0421\u0421\u041f \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u043c\u043d\u0438\u0442\u0435 \u044f \u043f\u0438\u0441\u0430\u043b \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u0438 \u0443 \u0441\u0435\u0431\u044f \u0432 Telegram-\u043a\u0430\u043d\u0430\u043b\u0435, \u043a\u0430\u043a.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:00:24+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:00:24+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Znowu setki tysi\u0119cy p\u0142atno\u015bci obywateli w GIBDD i FSSP by\u0142y dost\u0119pne publicznie | ProHoster","description":"Pami\u0119tasz, jak pisa\u0142em na Habra i na moim kanale Telegram?","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u044f\u0442\u044c \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439 \u0433\u0440\u0430\u0436\u0434\u0430\u043d \u0432 \u0413\u0418\u0411\u0414\u0414 \u0438 \u0424\u0421\u0421\u041f \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 | ProHoster","og:description":"\u041f\u043e\u043c\u043d\u0438\u0442\u0435 \u044f \u043f\u0438\u0441\u0430\u043b \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u0438 \u0443 \u0441\u0435\u0431\u044f \u0432 Telegram-\u043a\u0430\u043d\u0430\u043b\u0435, \u043a\u0430\u043a.","og:url":"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:00:24+00:00","article:modified_time":"2019-10-31T19:00:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34790","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 20:38:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:15:37","updated":"2026-01-21 20:38:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/34790","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=34790"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/34790\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media\/26212"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=34790"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=34790"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=34790"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}