{"id":93316,"date":"2020-09-05T19:42:19","date_gmt":"2020-09-05T17:42:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/analiz-aktivnosti-atakuyushhih-svyazannoj-s-podborom-parolej-po-ssh"},"modified":"2020-09-05T19:42:19","modified_gmt":"2020-09-05T17:42:19","slug":"analiz-aktivnosti-atakuyushhih-svyazannoj-s-podborom-parolej-po-ssh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/analiz-aktivnosti-atakuyushhih-svyazannoj-s-podborom-parolej-po-ssh","title":{"rendered":"Analiza activit\u0103\u021bii atacatorilor legat\u0103 de \u0219irurile de parole SSH","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Publicate<\/a><\/noindex> rezultatele analizei atacurilor legate de ghicirea parolelor pentru serverele SSH. \u00cen timpul experimentului au fost lansate mai multe capcane (honeypot) care se d\u0103deau drept server OpenSSH accesibil, plasate \u00een diverse re\u021bele ale furnizorilor de cloud, cum ar fi
\nGoogle Cloud, DigitalOcean \u0219i NameCheap. \u00cen decursul a trei luni, au fost \u00eenregistrate 929554 de \u00eencerc\u0103ri de conectare la server.<\/p>\n

\u00cen 78% din cazuri, \u00eencercarea a fost concentrat\u0103 pe determinarea parolei utilizatorului root. Cele mai frecvent verificate parole au fost \u201e123456\u201d \u0219i \u201epassword\u201d, dar \u00een primele zece s-a reg\u0103sit \u0219i parola \u201eJ5cmmu=Kyf0-br8CsW\u201d, probabil utilizat\u0103 \u00een mod implicit de un anumit produc\u0103tor.<\/p>\n

Cele mai populare utilizatorii \u0219i parole:<\/p>\n

<\/p>\n

Login
\n Num\u0103rul \u00eencerc\u0103rilor
\n Parola
\n Num\u0103rul \u00eencerc\u0103rilor<\/p>\n

root
\n 729108<\/p>\n

40556<\/p>\n

admin
\n 23302
\n 123456
\n 14542<\/p>\n

utilizator
\n 8420
\n admin
\n 7757<\/p>\n

test
\n 7547
\n 123
\n 7355<\/p>\n

oracle
\n 6211
\n 1234
\n 7099<\/p>\n

ftpuser
\n 4012
\n root
\n 6999<\/p>\n

ubuntu
\n 3657
\n parola
\n 6118<\/p>\n

guest
\n 3606
\n test
\n 5671<\/p>\n

postgres
\n 3455
\n 12345
\n 5223<\/p>\n

usuario
\n 2876
\n guest
\n 4423<\/p>\n

<\/center><\/p>\n

Din \u00eencerc\u0103rile analizate, au fost identificate 128588 de perechi unice utilizator-parol\u0103, dintre care 38112 au \u00eencercat s\u0103 fie verificate de 5 sau mai multe ori. Cele 25 cele mai frecvente perechi:<\/p>\n

<\/p>\n

Login
\n Parola
\n Num\u0103rul \u00eencerc\u0103rilor<\/p>\n

root
\n \u00a0
\n 37580<\/p>\n

root
\n root
\n 4213<\/p>\n

utilizator
\n utilizator
\n 2794<\/p>\n

root
\n 123456
\n 2569<\/p>\n

test
\n test
\n 2532<\/p>\n

admin
\n admin
\n 2531<\/p>\n

root
\n admin
\n 2185<\/p>\n

guest
\n guest
\n 2143<\/p>\n

root
\n parola
\n 2128<\/p>\n

oracle
\n oracle
\n 1869<\/p>\n

ubuntu
\n ubuntu
\n 1811<\/p>\n

root
\n 1234
\n 1681<\/p>\n

root
\n 123
\n 1658<\/p>\n

postgres
\n postgres
\n 1594<\/p>\n

support
\n support
\n 1535<\/p>\n

jenkins
\n jenkins
\n 1360<\/p>\n

admin
\n parola
\n 1241<\/p>\n

root
\n 12345
\n 1177<\/p>\n

pi
\n raspberry
\n 1160<\/p>\n

root
\n 12345678
\n 1126<\/p>\n

root
\n 123456789
\n 1069<\/p>\n

ubnt
\n ubnt
\n 1069<\/p>\n

admin
\n 1234
\n 1012<\/p>\n

root
\n 1234567890
\n 967<\/p>\n

ec2-user
\n ec2-user
\n 963<\/p>\n

<\/center><\/p>\n

Distribu\u021bia \u00eencerc\u0103rilor de scanare pe zilele s\u0103pt\u0103m\u00e2nii \u0219i ore:
\n

\"Analiza<\/a><\/noindex><\/center><\/p>\n

\"Analiza<\/a><\/noindex><\/center><\/p>\n

\u00cen total, au fost \u00eenregistrate apeluri de la 27448 de unici adreselor IP<\/a>.
\nCel mai mare num\u0103r de verific\u0103ri efectuate de la o singur\u0103 adres\u0103 IP a fost de 64969. Procentul verific\u0103rilor prin Tor a fost de doar 0,8%. 62,2% dintre adresele IP implicate \u00een \u00eencerc\u0103ri de acces erau legate de subre\u021bele chineze\u0219ti:<\/p>\n

\"Analiza<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u043e\u0434\u0431\u043e\u0440\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u043f\u043e SSH. \u0412 \u0445\u043e\u0434\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u0431\u044b\u043b\u043e \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u043e\u0432\u0443\u0448\u0435\u043a (honeypot), \u043f\u0440\u0438\u0442\u0432\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c OpenSSH \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Google Cloud, DigitalOcean \u0438 NameCheap. \u0417\u0430 \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430 \u0431\u044b\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 929554 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443. \u0412 78% \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u043e\u0434\u0431\u043e\u0440 \u0431\u044b\u043b \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93317,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-93316","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 analiza activit\u0103\u021bii atacatorilor legat\u0103 de ghicirea parolelor prin SSH | ProHoster","description":"Au fost publicate rezultatele analizei atacurilor legate de ghicirea parolelor pentru servere.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/analiz-aktivnosti-atakuyushhih-svyazannoj-s-podborom-parolej-po-ssh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u043e\u0434\u0431\u043e\u0440\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e SSH | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u043e\u0434\u0431\u043e\u0440\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/analiz-aktivnosti-atakuyushhih-svyazannoj-s-podborom-parolej-po-ssh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-05T17:42:19+00:00","article:modified_time":"2020-09-05T17:42:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93316","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:50:29","updated":"2026-02-08 20:40:13","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/93316","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=93316"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/93316\/revisions"}],"predecessor-version":[{"id":158013,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/93316\/revisions\/158013"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/93317"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=93316"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=93316"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=93316"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}