{"id":30312,"date":"2019-10-31T21:34:49","date_gmt":"2019-10-31T18:34:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij\/"},"modified":"2019-10-31T21:34:49","modified_gmt":"2019-10-31T18:34:49","slug":"lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","title":{"rendered":"Tarpit pentru conexiunile SSH incoming","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nu este un secret c\u0103 internetul este un mediu foarte ostil. De \u00eendat\u0103 ce ridici un server, acesta este imediat supus atacurilor masive \u0219i scan\u0103rilor multiple. Exemplul honey pot-ului de la securitate<\/a><\/noindex> poate evalua amploarea acestui trafic nedorit. De fapt, pe un server mediu, 99% din trafic poate fi malitios.<\/p>\n

Tarpit este un port capcan\u0103, folosit pentru a \u00eencetini conexiunile de intrare. Dac\u0103 un sistem extern se conecteaz\u0103 la acest port, nu va putea \u00eenchide rapid conexiunea. Va trebui s\u0103 \u00ee\u0219i cheltuie resursele de sistem \u0219i s\u0103 a\u0219tepte p\u00e2n\u0103 c\u00e2nd conexiunea va fi rupt\u0103 din cauza timeout-ului sau s\u0103 o rup\u0103 manual.<\/p>\n

Cel mai adesea, tarpiturile sunt folosite pentru protec\u021bie. Tehnica a fost dezvoltat\u0103 ini\u021bial pentru a ap\u0103ra \u00eempotriva viermilor informatici. Acum poate fi folosit\u0103 pentru a strica via\u021ba spammerilor \u0219i cercet\u0103torilor care efectueaz\u0103 scan\u0103ri largi ale tuturor adreselor IP (exemple pe Habr: Austria<\/a><\/noindex>, Ucraina<\/a><\/noindex>).
\n<\/a><\/noindex>
\nUnui dintre administratori, pe nume Chris Vellons, probabil c\u0103 i-a s\u0103rit \u00een ochi aceast\u0103 mizerie - \u0219i a scris un mic program Endlessh<\/a><\/noindex>, un tarpit pentru SSH care \u00eencetine\u0219te conexiunile de intrare. Programul deschide un port (\u00een mod implicit, pentru teste este specificat portul 2222) \u0219i se pretinde a fi un server SSH, dar de fapt stabile\u0219te o conexiune infinit\u0103 cu clientul de intrare, p\u00e2n\u0103 c\u00e2nd acesta se d\u0103 b\u0103tut. Aceasta poate dura c\u00e2teva zile sau mai mult, p\u00e2n\u0103 c\u00e2nd clientul abandoneaz\u0103.<\/p>\n

Instalarea utilitarului:<\/p>\n

$ make\n$ .\/endlessh &\n$ ssh -p2222 localhost<\/code><\/pre>\n
\nUn tarpit bine implementat va consuma mai multe resurse de la atacator dec\u00e2t de la tine. Dar problema nu este doar resursele. Autorul scrie<\/a><\/noindex>, afirm\u0103 c\u0103 programul devine adictiv. Chiar acum, \u00een capcana sa sunt 27 de clien\u021bi, unii dintre ei fiind conecta\u021bi de s\u0103pt\u0103m\u00e2ni. La v\u00e2rful activit\u0103\u021bii, \u00een capcan\u0103 erau 1378 de clien\u021bi timp de 20 de ore!<\/p>\n
\u00cen regimul de lucru, serverul Endlessh trebuie s\u0103 fie pus pe portul standard 22, unde intr\u0103 \u00een mod constant atacatori. Recomand\u0103rile standard de securitate sugereaz\u0103 \u00eentotdeauna mutarea SSH pe un alt port, ceea ce reduce imediat volumul de loguri.<\/p>\n
Chris Vellons spune c\u0103 programul s\u0103u exploateaz\u0103 un paragraf din specifica\u021bie RFC 4253<\/a><\/noindex> despre protocolul SSH. Imediat dup\u0103 stabilirea conexiunii TCP, dar \u00eenainte de aplicarea criptografiei, ambele p\u0103r\u021bi trebuie s\u0103 trimit\u0103 un string de identificare. \u0218i acolo se g\u0103se\u0219te o not\u0103: \u201eServerul POATE trimite alte \u0219iruri de date \u00eenainte de a trimite \u0219irul cu versiunea\u201c<\/i>. \u0218i f\u0103r\u0103 limit\u0103<\/b> la volumul acestor date, trebuie doar ca fiecare \u0219ir s\u0103 \u00eenceap\u0103 cu SSH-<\/code>.<\/p>\n
Exact asta face programul Endlessh: acesta trimite genereaz\u0103<\/i> un flux continuu de date generate aleator<\/b>, care respect\u0103 RFC 4253, adic\u0103 trimiterea \u00eenainte de identificare, iar fiecare \u0219ir \u00eencepe cu SSH-<\/code> \u0219i nu dep\u0103\u0219e\u0219te 255 de caractere, inclusiv simbolul de \u00eencheiere a liniei. \u00cen general, totul conform standardului.<\/p>\n
\u00cen mod implicit, programul a\u0219teapt\u0103 10 secunde \u00eentre trimiterea pachetelor. Aceasta previne deconectarea din cauza timeout-ului, astfel \u00eenc\u00e2t clientul va fi prins pe termen lung.<\/p>\n
Deoarece trimiterea datelor are loc \u00eenainte de aplicarea criptografiei, programul este extrem de simplu. Nu trebuie s\u0103 integreze cript\u0103ri \u0219i s\u0103 suporte numeroase protocoale.<\/p>\n
Autorul s-a str\u0103duit s\u0103 fac\u0103 utilitarul s\u0103 consume c\u00e2t mai pu\u021bine resurse \u0219i s\u0103 func\u021bioneze complet neobservat pe ma\u0219in\u0103. Spre deosebire de antivirusurile moderne \u0219i alte \u201esisteme de securitate\u201d, acesta nu ar trebui s\u0103 \u00eencetineasc\u0103 computerul. A reu\u0219it s\u0103 minimizeze at\u00e2t traficul, c\u00e2t \u0219i consumul de memorie printr-o implementare software pu\u021bin mai sofisticat\u0103. Dac\u0103 ar fi lansat pur \u0219i simplu un proces separat pentru fiecare nou\u0103 conexiune, poten\u021bialii atacatori ar putea efectua un atac DDoS, deschiz\u00e2nd numeroase conexiuni pentru a epuiza resursele de pe ma\u0219in\u0103. Un singur flux pe conexiune - de asemenea, nu este cea mai bun\u0103 op\u021biune, deoarece nucleul va consuma resurse pentru gestionarea fluxurilor.<\/p>\n
De aceea, Chris Vellons a ales pentru Endlessh cea mai u\u0219oar\u0103 variant\u0103: un server cu un singur fir poll(2)<\/code>, unde clien\u021bii prizonieri consum\u0103 practic resurse suplimentare, cu excep\u021bia obiectului socket \u00een nucleu \u0219i \u00eenc\u0103 78 de bi\u021bi pentru urm\u0103rirea \u00een Endlessh. Pentru a nu aloca buffere de primire \u0219i trimitere pentru fiecare client, Endlessh deschide un socket de acces direct \u0219i transmite direct pachetele TCP, ignor\u00e2nd aproape \u00eentregul stack TCP\/IP al sistemului de operare. Bufferul de intrare nu este deloc necesar, deoarece datele de intrare nu ne intereseaz\u0103.<\/p>\n
Autorul men\u021bioneaz\u0103 c\u0103 \u00een momentul cre\u0103rii programului s\u0103u nu \u0219tia<\/a><\/noindex> despre existen\u021ba lui asyncio din Python \u0219i alte limit\u0103ri. Dac\u0103 ar fi \u0219tiut despre asyncio, ar fi putut implementa utilitarul s\u0103u \u00een doar 18 linii de cod pe Python:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\ntry:\nwhile True:\nawait asyncio.sleep(10)\nwriter.write(b'%xrn' % random.randint(0, 2**32))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 2222)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nAsyncio este perfect pentru a scrie tarp-uri. De exemplu, un astfel de tarp poate suspenda Firefox, Chrome sau alt client care \u00eencearc\u0103 s\u0103 se conecteze la serverul dumneavoastr\u0103 HTTP timp de ore \u00eentregi:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\nwriter.write(b'HTTP\/1.1 200 OKrn')\ntry:\nwhile True:\nawait asyncio.sleep(5)\nheader = random.randint(0, 2**32)\nvalue = random.randint(0, 2**32)\nwriter.write(b'X-%x: %xrn' % (header, value))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 8080)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nTarp-ul este un instrument excelent pentru a pedepsi infractorii cibernetici. Totu\u0219i, exist\u0103 un anumit risc c\u0103, \u00een schimb, le va atrage aten\u021bia asupra comportamentului neobi\u0219nuit al unui server anumit. Cineva ar putea g\u00e2ndi la o r\u0103zbunare<\/a><\/noindex> \u0219i la un atac DDoS direc\u021bionat asupra IP-ului dumneavoastr\u0103. Totu\u0219i, p\u00e2n\u0103 acum nu au fost astfel de incidente, iar tarp-urile func\u021bioneaz\u0103 excelent.<\/p>\n
Hub-uri:
\nPython, Securitate cibernetic\u0103, Software, Administrare de sistem<\/p>\n
Etichete:
\nSSH, Endlessh, tarpit, tarp, capcan\u0103, asycio
\nTarpit pentru conexiunile SSH incoming<\/p>\n
Nu este un secret c\u0103 internetul este un mediu foarte ostil. De \u00eendat\u0103 ce ridici un server, acesta este imediat supus atacurilor masive \u0219i scan\u0103rilor multiple. Exemplul honey pot-ului de la securitate<\/a><\/noindex> poate evalua amploarea acestui trafic nedorit. De fapt, pe un server mediu, 99% din trafic poate fi malitios.<\/p>\n
Tarpit este un port capcan\u0103, folosit pentru a \u00eencetini conexiunile de intrare. Dac\u0103 un sistem extern se conecteaz\u0103 la acest port, nu va putea \u00eenchide rapid conexiunea. Va trebui s\u0103 \u00ee\u0219i cheltuie resursele de sistem \u0219i s\u0103 a\u0219tepte p\u00e2n\u0103 c\u00e2nd conexiunea va fi rupt\u0103 din cauza timeout-ului sau s\u0103 o rup\u0103 manual.<\/p>\n
Cel mai adesea, tarpiturile sunt folosite pentru protec\u021bie. Tehnica a fost dezvoltat\u0103 ini\u021bial pentru a ap\u0103ra \u00eempotriva viermilor informatici. Acum poate fi folosit\u0103 pentru a strica via\u021ba spammerilor \u0219i cercet\u0103torilor care efectueaz\u0103 scan\u0103ri largi ale tuturor adreselor IP (exemple pe Habr: Austria<\/a><\/noindex>, Ucraina<\/a><\/noindex>).<\/p>\n
Unui dintre administratori, pe nume Chris Vellons, probabil c\u0103 i-a s\u0103rit \u00een ochi aceast\u0103 mizerie - \u0219i a scris un mic program Endlessh<\/a><\/noindex>, un tarpit pentru SSH care \u00eencetine\u0219te conexiunile de intrare. Programul deschide un port (\u00een mod implicit, pentru teste este specificat portul 2222) \u0219i se pretinde a fi un server SSH, dar de fapt stabile\u0219te o conexiune infinit\u0103 cu clientul de intrare, p\u00e2n\u0103 c\u00e2nd acesta se d\u0103 b\u0103tut. Aceasta poate dura c\u00e2teva zile sau mai mult, p\u00e2n\u0103 c\u00e2nd clientul abandoneaz\u0103.<\/p>\n
Instalarea utilitarului:<\/p>\n
$ make\n$ .\/endlessh &\n$ ssh -p2222 localhost<\/code><\/pre>\n
\nUn tarpit bine implementat va consuma mai multe resurse de la atacator dec\u00e2t de la tine. Dar problema nu este doar resursele. Autorul scrie<\/a><\/noindex>, afirm\u0103 c\u0103 programul devine adictiv. Chiar acum, \u00een capcana sa sunt 27 de clien\u021bi, unii dintre ei fiind conecta\u021bi de s\u0103pt\u0103m\u00e2ni. La v\u00e2rful activit\u0103\u021bii, \u00een capcan\u0103 erau 1378 de clien\u021bi timp de 20 de ore!<\/p>\n
\u00cen regimul de lucru, serverul Endlessh trebuie s\u0103 fie pus pe portul standard 22, unde intr\u0103 \u00een mod constant atacatori. Recomand\u0103rile standard de securitate sugereaz\u0103 \u00eentotdeauna mutarea SSH pe un alt port, ceea ce reduce imediat volumul de loguri.<\/p>\n
Chris Vellons spune c\u0103 programul s\u0103u exploateaz\u0103 un paragraf din specifica\u021bie RFC 4253<\/a><\/noindex> despre protocolul SSH. Imediat dup\u0103 stabilirea conexiunii TCP, dar \u00eenainte de aplicarea criptografiei, ambele p\u0103r\u021bi trebuie s\u0103 trimit\u0103 un string de identificare. \u0218i acolo se g\u0103se\u0219te o not\u0103: \u201eServerul POATE trimite alte \u0219iruri de date \u00eenainte de a trimite \u0219irul cu versiunea\u201c<\/i>. \u0218i f\u0103r\u0103 limit\u0103<\/b> la volumul acestor date, trebuie doar ca fiecare \u0219ir s\u0103 \u00eenceap\u0103 cu SSH-<\/code>.<\/p>\n
Exact asta face programul Endlessh: acesta trimite genereaz\u0103<\/i> un flux continuu de date generate aleator<\/b>, care respect\u0103 RFC 4253, adic\u0103 trimiterea \u00eenainte de identificare, iar fiecare \u0219ir \u00eencepe cu SSH-<\/code> \u0219i nu dep\u0103\u0219e\u0219te 255 de caractere, inclusiv simbolul de \u00eencheiere a liniei. \u00cen general, totul conform standardului.<\/p>\n
\u00cen mod implicit, programul a\u0219teapt\u0103 10 secunde \u00eentre trimiterea pachetelor. Aceasta previne deconectarea din cauza timeout-ului, astfel \u00eenc\u00e2t clientul va fi prins pe termen lung.<\/p>\n
Deoarece trimiterea datelor are loc \u00eenainte de aplicarea criptografiei, programul este extrem de simplu. Nu trebuie s\u0103 integreze cript\u0103ri \u0219i s\u0103 suporte numeroase protocoale.<\/p>\n
Autorul s-a str\u0103duit s\u0103 fac\u0103 utilitarul s\u0103 consume c\u00e2t mai pu\u021bine resurse \u0219i s\u0103 func\u021bioneze complet neobservat pe ma\u0219in\u0103. Spre deosebire de antivirusurile moderne \u0219i alte \u201esisteme de securitate\u201d, acesta nu ar trebui s\u0103 \u00eencetineasc\u0103 computerul. A reu\u0219it s\u0103 minimizeze at\u00e2t traficul, c\u00e2t \u0219i consumul de memorie printr-o implementare software pu\u021bin mai sofisticat\u0103. Dac\u0103 ar fi lansat pur \u0219i simplu un proces separat pentru fiecare nou\u0103 conexiune, poten\u021bialii atacatori ar putea efectua un atac DDoS, deschiz\u00e2nd numeroase conexiuni pentru a epuiza resursele de pe ma\u0219in\u0103. Un singur flux pe conexiune - de asemenea, nu este cea mai bun\u0103 op\u021biune, deoarece nucleul va consuma resurse pentru gestionarea fluxurilor.<\/p>\n
De aceea, Chris Vellons a ales pentru Endlessh cea mai u\u0219oar\u0103 variant\u0103: un server cu un singur fir poll(2)<\/code>, unde clien\u021bii prizonieri consum\u0103 practic resurse suplimentare, cu excep\u021bia obiectului socket \u00een nucleu \u0219i \u00eenc\u0103 78 de bi\u021bi pentru urm\u0103rirea \u00een Endlessh. Pentru a nu aloca buffere de primire \u0219i trimitere pentru fiecare client, Endlessh deschide un socket de acces direct \u0219i transmite direct pachetele TCP, ignor\u00e2nd aproape \u00eentregul stack TCP\/IP al sistemului de operare. Bufferul de intrare nu este deloc necesar, deoarece datele de intrare nu ne intereseaz\u0103.<\/p>\n
Autorul men\u021bioneaz\u0103 c\u0103 \u00een momentul cre\u0103rii programului s\u0103u nu \u0219tia<\/a><\/noindex> despre existen\u021ba lui asyncio din Python \u0219i alte limit\u0103ri. Dac\u0103 ar fi \u0219tiut despre asyncio, ar fi putut implementa utilitarul s\u0103u \u00een doar 18 linii de cod pe Python:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    try:\n        while True:\n            await asyncio.sleep(10)\n            writer.write(b'%xrn' % random.randint(0, 2**32))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 2222)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nAsyncio este perfect pentru a scrie tarp-uri. De exemplu, un astfel de tarp poate suspenda Firefox, Chrome sau alt client care \u00eencearc\u0103 s\u0103 se conecteze la serverul dumneavoastr\u0103 HTTP timp de ore \u00eentregi:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    writer.write(b'HTTP\/1.1 200 OKrn')\n    try:\n        while True:\n            await asyncio.sleep(5)\n            header = random.randint(0, 2**32)\n            value = random.randint(0, 2**32)\n            writer.write(b'X-%x: %xrn' % (header, value))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 8080)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nTarp-ul este un instrument excelent pentru a pedepsi infractorii cibernetici. Totu\u0219i, exist\u0103 un anumit risc c\u0103, \u00een schimb, le va atrage aten\u021bia asupra comportamentului neobi\u0219nuit al unui server anumit. Cineva ar putea g\u00e2ndi la o r\u0103zbunare<\/a><\/noindex> \u0219i la un atac DDoS direc\u021bionat asupra IP-ului dumneavoastr\u0103. Totu\u0219i, p\u00e2n\u0103 acum nu au fost astfel de incidente, iar tarp-urile func\u021bioneaz\u0103 excelent.<\/p>\n
\n\"Tarpit<\/a><\/noindex>
\n
Sursa: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432 \u043c\u043e\u0436\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u044d\u0442\u043e\u0433\u043e \u043c\u0443\u0441\u043e\u0440\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u043d\u0430 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 99% \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c. Tarpit \u2014 \u044d\u0442\u043e \u043f\u043e\u0440\u0442-\u043b\u043e\u0432\u0443\u0448\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u0415\u0441\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u044f\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30312","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Capcan\u0103 (tarp) pentru conexiunile SSH \u00een intrare | ProHoster","description":"Nu este un secret c\u0103 internetul este un mediu foarte ostil. De \u00eendat\u0103 ce ridica\u021bi un server, acesta este expus instantaneu la atacuri masive \u0219i scan\u0103ri multiple.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041b\u043e\u0432\u0443\u0448\u043a\u0430 (\u0442\u0430\u0440\u043f\u0438\u0442) \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:49+00:00","article:modified_time":"2019-10-31T18:34:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30312","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:38:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:37:27","updated":"2026-01-21 00:38:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/30312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=30312"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/30312\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=30312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=30312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=30312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}