{"id":30311,"date":"2019-10-31T21:34:49","date_gmt":"2019-10-31T18:34:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/analiz-atak-na-hanipot-cowrie\/"},"modified":"2019-10-31T21:34:49","modified_gmt":"2019-10-31T18:34:49","slug":"analiz-atak-na-hanipot-cowrie","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/analiz-atak-na-hanipot-cowrie","title":{"rendered":"Analiza atacurilor asupra honeypot-ului Cowrie","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><b>Statistici pentru ultimele 24 de ore dup\u0103 instalarea honeypot-ului pe nodul Digital Ocean din Singapore<\/b> <\/p>\n<h1>Piu-piu! S\u0103 \u00eencepem direct cu harta atacurilor<\/h1>\n<p>\nHarta noastr\u0103 super tare arat\u0103 ASN-urile unice care s-au conectat la honeypot-ul nostru Cowrie \u00een ultimele 24 de ore. Galben reprezint\u0103 conexiunile SSH, iar ro\u0219u \u2014 Telnet. Animatiile de acest tip impresioneaz\u0103 adesea consiliul de administra\u021bie, ceea ce permite ob\u021binerea unui buget suplimentar pentru securitate \u0219i resurse. Totu\u0219i, harta are o anumit\u0103 valoare, demonstr\u00e2nd clar r\u0103sp\u00e2ndirea geografic\u0103 \u0219i organiza\u021bional\u0103 a surselor atacurilor asupra g\u0103zduirii noastre \u00een doar 24 de ore. \u00cen anima\u021bie nu este reflectat volumul de trafic din fiecare surs\u0103.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Ce este harta Pew Pew?<\/h3>\n<p>\n<i>Harta Pew Pew<\/i> \u2014 acesta este <noindex><a rel=\"nofollow\" href=\"https:\/\/krebsonsecurity.com\/2015\/01\/whos-attacking-whom-realtime-attack-trackers\/\">vizualizarea atacurilor cibernetice<\/a><\/noindex>, de obicei animat\u0103 \u0219i foarte frumoas\u0103. Este o modalitate la mod\u0103 de a vinde produsul t\u0103u, trist cunoscut\u0103 pentru utilizarea sa de c\u0103tre compania Norse Corp. Aceasta a avut un sf\u00e2r\u0219it nefericit: s-a dovedit c\u0103 anima\u021biile frumoase erau singurul lor merit, iar pentru analiz\u0103 foloseau date fragmentate.<\/p>\n<h3>Realizat\u0103 cu Leafletjs<\/h3>\n<p>\nPentru cei care doresc s\u0103 dezvolte o hart\u0103 a atacurilor pentru un ecran mare \u00een centrul de opera\u021biuni (\u0219efului t\u0103u o va pl\u0103cea), exist\u0103 o bibliotec\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/leafletjs.com\/\">leafletjs<\/a><\/noindex>. O combin\u0103m cu pluginul <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/lit-forest\/leaflet.migrationLayer\">layerul de migrare leaflet<\/a><\/noindex>, serviciul Maxmind GeoIP \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/pewpew\/map.html\">\u0219i gata<\/a><\/noindex>.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/pewpew\/map.html\"><img decoding=\"async\" alt=\"Analiza atacurilor asupra honeypot-ului Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/c4765ba5f2c89e502e5d8791dcfcfc62.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h1>WTF: ce este acest honeypot Cowrie?<\/h1>\n<p>\nUn honeypot este un sistem care este plasat \u00een re\u021bea special pentru a atrage atacatorii. Conexiunile la sistem sunt, de obicei, ilegale \u0219i permit identificarea atacatorului prin loguri detaliate. Logurile p\u0103streaz\u0103 nu doar informa\u021bii obi\u0219nuite despre conexiune, ci \u0219i informa\u021bii despre sesiune, care dezv\u0103luie <b>tehnica, tacticile \u0219i procedurile (TTP)<\/b> atacatorului.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/micheloosterhof\/cowrie\">Honeypot-ul Cowrie<\/a><\/noindex> este destinat <b>\u00eenregistr\u0103rii conexiunilor SSH \u0219i Telnet<\/b>. Aceste honeypot-uri sunt adesea expuse pe internet pentru a urm\u0103ri instrumentele, scripturile \u0219i gazdele atacatorilor.<\/p>\n<blockquote><p>Mesajul meu pentru companiile care cred c\u0103 nu sunt atacate: \u201eC\u0103uta\u021bi mai bine\u201d.<br \/>\n<i>\u2014 James Snook<\/i><\/p><\/blockquote>\n<p>\n<img decoding=\"async\" alt=\"Analiza atacurilor asupra honeypot-ului Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/40feddaacc42add563f98a0f64c1c3b0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h1>Ce este \u00een loguri?<\/h1>\n<p><\/p>\n<h3>Num\u0103rul total de conexiuni<\/h3>\n<p>\nDe pe multe gazde au fost \u00eenregistrate \u00eencerc\u0103ri de conectare repetate. Acest lucru este normal, deoarece scripturile de atac con\u021bin o list\u0103 de acreditive \u0219i \u00eencearc\u0103 mai multe combina\u021bii. Honeypot-ul Cowrie este configurat s\u0103 primeasc\u0103 anumite combina\u021bii de nume de utilizator \u0219i parol\u0103. Acest lucru este configurat \u00een <b>fi\u0219ierul user.db<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"Analiza atacurilor asupra honeypot-ului Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/d7da6ec208e821453607fb6c29c7e347.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Geografia atacurilor<\/h3>\n<p>\nConform datelor de geoloca\u021bie de la Maxmind, am calculat num\u0103rul de conexiuni din fiecare \u021bar\u0103. Brazilia \u0219i China conduc cu un avans considerabil, din aceste \u021b\u0103ri vin frecvent zgomote mari din partea scanerelor.<\/p>\n<p><img decoding=\"async\" alt=\"Analiza atacurilor asupra honeypot-ului Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/0dd7a52da1c12db2f317f2195e92bccf.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Proprietarul blocului de re\u021bea<\/h3>\n<p>\nStudiul proprietarilor blocurilor de re\u021bea (ASN) poate dezv\u0103lui organiza\u021bii cu un num\u0103r mare de gazde atacatoare. Desigur, \u00een astfel de cazuri, trebuie s\u0103 ne amintim \u00eentotdeauna c\u0103 multe atacuri provin de la gazde infectate. Este rezonabil s\u0103 presupunem c\u0103 majoritatea infractorilor nu sunt at\u00e2t de pro\u0219ti \u00eenc\u00e2t s\u0103 scaneze re\u021beaua de pe un computer de acas\u0103.<\/p>\n<p><img decoding=\"async\" alt=\"Analiza atacurilor asupra honeypot-ului Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/0f60be7772ea993e2c0a5d0ab6c08cd8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Porturi deschise pe sistemele atacatoare (date Shodan.io)<\/h3>\n<p>\nRularea listei de IP-uri prin excelentul <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.shodan.io\/\">Shodan API<\/a><\/noindex> identific\u0103 rapid <b>sistemele cu porturi deschise<\/b> \u0219i ce porturi sunt acestea. \u00cen imaginea de mai jos este reprezentat\u0103 concentra\u021bia porturilor deschise pe \u021b\u0103ri \u0219i organiza\u021bii. Ar fi putut fi identificate blocuri de sisteme compromise, dar \u00een limita <b>unei mostre mici<\/b> nu se observ\u0103 nimic neobi\u0219nuit, \u00een afar\u0103 de un num\u0103r mare de <b>porturi deschise 500 \u00een China<\/b>.<\/p>\n<p>O descoperire interesant\u0103 este num\u0103rul mare de sisteme din Brazilia, care <b>nu au porturile 22, 23<\/b> sau <b>alte porturi<\/b>, conform Censys \u0219i Shodan. Se pare c\u0103 acestea sunt conexiuni de la computerele utilizatorilor finali.<\/p>\n<p><img decoding=\"async\" alt=\"Analiza atacurilor asupra honeypot-ului Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/6138379c7d069807f01b57a8d97784fb.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <\/p>\n<h3>Boti? Nu neap\u0103rat<\/h3>\n<p>\nDate <noindex><a rel=\"nofollow\" href=\"https:\/\/censys.io\/\">Censys<\/a><\/noindex> pentru porturile 22 \u0219i 23 \u00een acea zi au ar\u0103tat ciudat. Am presupus c\u0103 majoritatea scan\u0103rilor \u0219i atacurilor prin parol\u0103 provin de la bo\u021bi. Scriptul se r\u0103sp\u00e2nde\u0219te prin porturi deschise, \u00eencerc\u00e2nd parole, iar de pe un nou sistem se copiaz\u0103 pe sine \u0219i continu\u0103 s\u0103 se r\u0103sp\u00e2ndeasc\u0103 prin aceea\u0219i metod\u0103.<\/p>\n<p>Dar aici se observ\u0103 c\u0103 doar un num\u0103r mic de gazde care scaneaz\u0103 telnet au portul 23 deschis. Asta \u00eenseamn\u0103 c\u0103 sistemele sunt fie compromise \u00een alt mod, fie infractorii ruleaz\u0103 scripturi manual.<\/p>\n<p><img decoding=\"async\" alt=\"Analiza atacurilor asupra honeypot-ului Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/4c3ccbc609a46365473f582315ca90bd.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Conexiuni de acas\u0103<\/h3>\n<p>\nO alt\u0103 descoperire interesant\u0103 a fost num\u0103rul mare de utilizatori de acas\u0103 din mostr\u0103. Cu ajutorul <b>rezolv\u0103rii inverse <\/b> am identificat 105 conexiuni din anumite computere de acas\u0103. Pentru multe conexiuni de acas\u0103, rezolvarea invers\u0103 DNS arat\u0103 numele gazdei cu cuvinte precum dsl, home, cable, fiber \u0219i a\u0219a mai departe.<\/p>\n<p><img decoding=\"async\" alt=\"Analiza atacurilor asupra honeypot-ului Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/a665a90dfdbbfb5e9971fb2885ccd669.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h1>\u00cenv\u0103\u021ba\u021bi \u0219i explora\u021bi: ridica\u021bi propriul honeypot<\/h1>\n<p>\nRecent am scris un scurt ghid despre cum s\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/cowrie-honeypot-ubuntu\/\">instalez un honeypot Cowrie pe sistemul meu<\/a><\/noindex>. A\u015fa cum am men\u021bionat anterior, \u00een cazul nostru am folosit un VPS Digital Ocean \u00een Singapore. \u00cen urma analizei de 24 de ore, costul a fost de c\u00e2\u021biva cen\u021bi, iar timpul de configurare a sistemului a fost de 30 de minute.<\/p>\n<p>\u00cen loc s\u0103 rulezi Cowrie pe internet \u0219i s\u0103 capturezi toat\u0103 agita\u021bia, po\u021bi beneficia de honeypot \u00een re\u021beaua local\u0103. Configureaz\u0103 o notificare dac\u0103 sunt trimise cereri c\u0103tre anumite porturi. Acesta poate fi un atacator \u00een re\u021bea, un angajat curios sau un scaner de vulnerabilit\u0103\u021bi.<\/p>\n<h1>Conclusions<\/h1>\n<p>\nDup\u0103 ce ai observat ac\u021biunile atacatorilor timp de 24 de ore, devine evident c\u0103 nu po\u021bi identifica un surs\u0103 clar\u0103 a atacurilor \u00eentr-o anumit\u0103 organiza\u021bie, \u021bar\u0103 sau chiar sistem de operare.<\/p>\n<p>R\u0103sp\u00e2ndirea larg\u0103 a surselor arat\u0103 c\u0103 agita\u021bia scan\u0103rii este constant\u0103 \u0219i nu se asociaz\u0103 cu o surs\u0103 specific\u0103. Oricine lucreaz\u0103 pe internet trebuie s\u0103 se asigure c\u0103 sistemul s\u0103u <b>are mai multe niveluri de securitate<\/b>. O solu\u021bie comun\u0103 \u0219i eficient\u0103 pentru <b>SSH<\/b> ar fi mutarea serviciului pe un port \u00eenalt ales aleatoriu. Aceasta nu elimin\u0103 necesitatea unei protec\u021bii stricte prin parol\u0103 \u0219i monitorizare, dar garanteaz\u0103 m\u0103car c\u0103 jurnalele nu sunt umplute cu scan\u0103ri constante. Conexiunile la un port \u00eenalt sunt, cu o probabilitate mai mare, atacuri \u021bintite care te-ar putea interesa.<\/p>\n<p>Adesea, porturile telnet deschise se afl\u0103 pe routere sau alte dispozitive, astfel c\u0103 acestea nu pot fi mutate u\u0219or pe un port \u00eenalt. <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/nmap-online-port-scanner\/\">Informa\u021biile despre toate porturile deschise<\/a><\/noindex> \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/domain-profiler\/\">sunt suprafa\u021ba de atac<\/a><\/noindex> \u2014 singura modalitate de a te asigura c\u0103 aceste servicii sunt protejate de un firewall sau sunt dezactivate. Dac\u0103 este posibil, nu ar trebui s\u0103 folose\u0219ti Telnet deloc, acest protocol nu este criptat. Dac\u0103 este necesar \u0219i nu exist\u0103 alt\u0103 op\u021biune, at\u00e2ta timp c\u00e2t \u00eel controlezi cu aten\u021bie \u0219i folose\u0219te parole puternice.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/436076\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443! \u041d\u0430\u0447\u043d\u0451\u043c \u0441\u0440\u0430\u0437\u0443 \u0441 \u043a\u0430\u0440\u0442\u044b \u0430\u0442\u0430\u043a \u041d\u0430\u0448\u0430 \u0441\u0443\u043f\u0435\u0440\u043a\u043b\u0430\u0441\u0441\u043d\u0430\u044f \u043a\u0430\u0440\u0442\u0430 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 ASN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0438\u0441\u044c \u043a \u043d\u0430\u0448\u0435\u043c\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0443 Cowrie \u0437\u0430 24 \u0447\u0430\u0441\u0430. \u0416\u0451\u043b\u0442\u044b\u0439 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u043c, \u0430 \u043a\u0440\u0430\u0441\u043d\u044b\u0439\u00a0\u2014 Telnet. \u0422\u0430\u043a\u0438\u0435 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438 \u0447\u0430\u0441\u0442\u043e \u0432\u043f\u0435\u0447\u0430\u0442\u043b\u044f\u044e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0431\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30311","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443!\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/analiz-atak-na-hanipot-cowrie\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 \u0445\u0430\u043d\u0438\u043f\u043e\u0442 Cowrie | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443!\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/analiz-atak-na-hanipot-cowrie\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:34:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:34:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Analiza atacurilor pe honeypot-ul Cowrie | ProHoster","description":"Statistici pentru 24 de ore dup\u0103 instalarea honeypot-ului pe nodul Digital Ocean din Singapore. Piou-piou!","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/analiz-atak-na-hanipot-cowrie","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 \u0445\u0430\u043d\u0438\u043f\u043e\u0442 Cowrie | ProHoster","og:description":"\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443!","og:url":"https:\/\/prohoster.info\/ro\/blog\/analiz-atak-na-hanipot-cowrie","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:49+00:00","article:modified_time":"2019-10-31T18:34:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30311","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:36:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:37:27","updated":"2026-01-21 00:36:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/30311","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=30311"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/30311\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=30311"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=30311"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=30311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}