{"id":30311,"date":"2019-10-31T21:34:49","date_gmt":"2019-10-31T18:34:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/analiz-atak-na-hanipot-cowrie\/"},"modified":"2019-10-31T21:34:49","modified_gmt":"2019-10-31T18:34:49","slug":"analiz-atak-na-hanipot-cowrie","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/analiz-atak-na-hanipot-cowrie","title":{"rendered":"Anal\u00fdza \u00fatokov na honeypot Cowrie","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><b>\u0160tatistika za 24 hodiny po in\u0161tal\u00e1cii honeypotu na uzle Digital Ocean v Singapure<\/b> <\/p>\n<h1>Piu-piu! Za\u010dnime hne\u010f s mapou \u00fatokov<\/h1>\n<p>\nNa\u0161a supercool mapa zobrazuje jedine\u010dn\u00e9 ASN, ktor\u00e9 sa pripojili k n\u00e1\u0161mu honeypotu Cowrie za 24 hod\u00edn. \u017dlt\u00e1 farba zodpoved\u00e1 SSH pripojeniam, \u010derven\u00e1 je pre Telnet. Tak\u00e9to anim\u00e1cie \u010dasto zap\u00f4sobia na predstavenstvo spolo\u010dnosti, \u010do umo\u017e\u0148uje z\u00edska\u0165 viac financovania na bezpe\u010dnos\u0165 a zdroje. Napriek tomu m\u00e1 mapa ur\u010dit\u00fa hodnotu, jasne demon\u0161truj\u00fac geografick\u00e9 a organiza\u010dn\u00e9 rozlo\u017eenie zdrojov \u00fatokov na n\u00e1\u0161 hostite\u013e za pouh\u00fdch 24 hod\u00edn. Anim\u00e1cia nezobrazuje objem prev\u00e1dzky z ka\u017ed\u00e9ho zdroja.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>\u010co je mapa Pew Pew?<\/h3>\n<p>\n<i>Mapa Pew Pew<\/i> \u2014 s\u00fa <noindex><a rel=\"nofollow\" href=\"https:\/\/krebsonsecurity.com\/2015\/01\/whos-attacking-whom-realtime-attack-trackers\/\">vizualiz\u00e1cia kybernetick\u00fdch \u00fatokov<\/a><\/noindex>, zvy\u010dajne animovan\u00e1 a ve\u013emi p\u00f4sobiv\u00e1. Je to m\u00f3dny sp\u00f4sob, ako preda\u0165 svoj produkt, zn\u00e1me t\u00fdm, \u017ee ho pou\u017e\u00edvala spolo\u010dnos\u0165 Norse Corp. Spolo\u010dnos\u0165 skon\u010dila zle: uk\u00e1zalo sa, \u017ee kr\u00e1sne anim\u00e1cie s\u00fa ich jedinou prednos\u0165ou, a na anal\u00fdzu vyu\u017e\u00edvali fragmentovan\u00e9 \u00fadaje.<\/p>\n<h3>Vyroben\u00e9 pomocou Leafletjs<\/h3>\n<p>\nPre t\u00fdch, ktor\u00ed chc\u00fa vyvin\u00fa\u0165 mapu \u00fatokov pre ve\u013ek\u00fa obrazovku v opera\u010dnom stredisku (v\u00e1\u0161mu \u0161\u00e9fovi sa to bude p\u00e1\u010di\u0165), existuje kni\u017enica <noindex><a rel=\"nofollow\" href=\"https:\/\/leafletjs.com\/\">leafletjs<\/a><\/noindex>. Spoj\u00edme ju s pluginom <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/lit-forest\/leaflet.migrationLayer\">plochy migr\u00e1cie leaflet<\/a><\/noindex>, slu\u017ebou Maxmind GeoIP \u2013 <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/pewpew\/map.html\">a hotovo<\/a><\/noindex>.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/pewpew\/map.html\"><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatokov na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/c4765ba5f2c89e502e5d8791dcfcfc62.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h1>WTF: \u010do je e\u0161te honeypot Cowrie?<\/h1>\n<p>\nHoneypot je syst\u00e9m, ktor\u00fd je umiestnen\u00fd v sieti \u0161peci\u00e1lne na l\u00e1kanie \u00fato\u010dn\u00edkov. Pripojenia k syst\u00e9mu s\u00fa zvy\u010dajne neleg\u00e1lne a umo\u017e\u0148uj\u00fa odhali\u0165 \u00fato\u010dn\u00edka pomocou podrobn\u00fdch logov. Logy uchov\u00e1vaj\u00fa nielen be\u017en\u00e9 inform\u00e1cie o pripojen\u00ed, ale aj inform\u00e1cie o rel\u00e1cii, ktor\u00e9 odha\u013euj\u00fa <b>techniky, taktiky a proced\u00fary (TTP)<\/b> \u00fato\u010dn\u00edka.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/micheloosterhof\/cowrie\">Honeypot Cowrie<\/a><\/noindex> je ur\u010den\u00fd na <b>zaznamen\u00e1vanie pripojen\u00ed SSH a Telnet<\/b>. Tak\u00e9to honeypoty s\u00fa \u010dasto vystaven\u00e9 na internete, aby sledovali n\u00e1stroje, skripty a hostite\u013eov \u00fato\u010dn\u00edkov.<\/p>\n<blockquote><p>Moje posolstvo pre spolo\u010dnosti, ktor\u00e9 si myslia, \u017ee nie s\u00fa nap\u00e1dan\u00e9: \u201eZle h\u013ead\u00e1te.\u201c<br \/>\n<i>\u2014 James Snook<\/i><\/p><\/blockquote>\n<p>\n<img decoding=\"async\" alt=\"Anal\u00fdza \u00fatokov na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/40feddaacc42add563f98a0f64c1c3b0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h1>\u010co je v logoch?<\/h1>\n<p><\/p>\n<h3>Celkov\u00fd po\u010det pripojen\u00ed<\/h3>\n<p>\nZ mnoh\u00fdch hostite\u013eov prich\u00e1dzali opakovan\u00e9 pokusy o pripojenie. To je norm\u00e1lne, preto\u017ee v \u00fato\u010dn\u00fdch skriptoch je ulo\u017een\u00fd zoznam poveren\u00ed a sk\u00fasia nieko\u013eko kombin\u00e1ci\u00ed. Honeypot Cowrie je nastaven\u00fd na prij\u00edmanie ur\u010dit\u00fdch kombin\u00e1ci\u00ed pou\u017e\u00edvate\u013esk\u00e9ho mena a hesla. Toto sa nastavuje v <b>s\u00fabore user.db<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatokov na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/d7da6ec208e821453607fb6c29c7e347.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Geografia \u00fatokov<\/h3>\n<p>\nPod\u013ea \u00fadajov geolok\u00e1cie Maxmind som spo\u010d\u00edtal mno\u017estvo pripojen\u00ed z ka\u017edej krajiny. Braz\u00edlia a \u010c\u00edna ved\u00fa s ve\u013ek\u00fdm odstupom, z t\u00fdchto kraj\u00edn \u010dasto prich\u00e1dzaj\u00fa siln\u00e9 ru\u0161enia od skenerov.<\/p>\n<p><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatokov na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/0dd7a52da1c12db2f317f2195e92bccf.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Majite\u013e sie\u0165ov\u00e9ho bloku<\/h3>\n<p>\n\u0160t\u00fadium majite\u013eov sie\u0165ov\u00fdch blokov (ASN) m\u00f4\u017ee odhali\u0165 organiz\u00e1cie s ve\u013ek\u00fdm mno\u017estvom \u00fato\u010dn\u00fdch hostite\u013eov. Samozrejme, v tak\u00fdchto pr\u00edpadoch by sa malo v\u017edy pam\u00e4ta\u0165 na to, \u017ee mnoho \u00fatokov prich\u00e1dza z infikovan\u00fdch hostite\u013eov. Racion\u00e1lne je predpoklada\u0165, \u017ee v\u00e4\u010d\u0161ina zlo\u010dincov nie je nato\u013eko hl\u00fapa, aby skenovala Sie\u0165 z dom\u00e1ceho po\u010d\u00edta\u010da.<\/p>\n<p><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatokov na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/0f60be7772ea993e2c0a5d0ab6c08cd8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Otvoren\u00e9 porty na \u00fato\u010dn\u00fdch syst\u00e9moch (\u00fadaje Shodan.io)<\/h3>\n<p>\nBe\u017en\u00fd zoznam IP cez vynikaj\u00faci <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.shodan.io\/\">Shodan API<\/a><\/noindex> r\u00fdchlo ur\u010duje <b>syst\u00e9my s otvoren\u00fdmi portami<\/b> a ak\u00e9 to s\u00fa porty. Na obr\u00e1zku ni\u017e\u0161ie je zobrazen\u00e1 koncentr\u00e1cia otvoren\u00fdch portov pod\u013ea kraj\u00edn a organiz\u00e1ci\u00ed. Mohli by sa odhali\u0165 bloky kompromitovan\u00fdch syst\u00e9mov, ale v r\u00e1mci <b>malej vzorky<\/b> nie je vidie\u0165 ni\u010d v\u00fdnimo\u010dn\u00e9, okrem ve\u013ek\u00e9ho po\u010dtu <b>otvoren\u00fdch portov 500 v \u010c\u00edne<\/b>.<\/p>\n<p>Zauj\u00edmav\u00fd n\u00e1lez \u2014 ve\u013ek\u00e9 mno\u017estvo syst\u00e9mov v Braz\u00edlii, ktor\u00e9 <b>neotv\u00e1raj\u00fa 22, 23<\/b> alebo <b>in\u00e9 porty<\/b>, pod\u013ea \u00fadajov Censys a Shodan. Zd\u00e1 sa, \u017ee toto s\u00fa pripojenia z po\u010d\u00edta\u010dov koncov\u00fdch pou\u017e\u00edvate\u013eov.<\/p>\n<p><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatokov na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/6138379c7d069807f01b57a8d97784fb.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <\/p>\n<h3>Boty? Nevyhnutne<\/h3>\n<p>\n\u00dadaje <noindex><a rel=\"nofollow\" href=\"https:\/\/censys.io\/\">Censys<\/a><\/noindex> pre porty 22 a 23 za ten de\u0148 uk\u00e1zali zvl\u00e1\u0161tnosti. Predpokladal som, \u017ee v\u00e4\u010d\u0161ina skenovan\u00ed a \u00fatokov na hesl\u00e1 prich\u00e1dza od botov. Skript sa \u0161\u00edri cez otvoren\u00e9 porty, h\u00e1d\u017ee hesl\u00e1 a z novej syst\u00e9my sa kop\u00edruje a na\u010falej sa \u0161\u00edri rovnakou met\u00f3dou.<\/p>\n<p>Ale tu je vidno, \u017ee len mal\u00e9 mno\u017estvo hostite\u013eov, ktor\u00e9 skenuj\u00fa telnet, m\u00e1 otvoren\u00fd port 23 navonok. To znamen\u00e1, \u017ee syst\u00e9my s\u00fa bu\u010f kompromitovan\u00e9 in\u00fdm sp\u00f4sobom, alebo zlo\u010dinci sp\u00fa\u0161\u0165aj\u00fa skripty manu\u00e1lne.<\/p>\n<p><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatokov na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/4c3ccbc609a46365473f582315ca90bd.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Dom\u00e1ce pripojenia<\/h3>\n<p>\n\u010eal\u0161\u00edm zauj\u00edmav\u00fdm n\u00e1lezom bolo ve\u013ek\u00e9 mno\u017estvo dom\u00e1cich pou\u017e\u00edvate\u013eov vo vzorke. S pomocou <b>sp\u00e4tn\u00e9ho poh\u013eadu <\/b> som ur\u010dil 105 pripojen\u00ed z konkr\u00e9tnych dom\u00e1cich po\u010d\u00edta\u010dov. Pre mnoh\u00e9 dom\u00e1ce pripojenia pri sp\u00e4tnom poh\u013eade DNS zobrazuje n\u00e1zov hostite\u013ea so slovami dsl, home, cable, fiber a podobne.<\/p>\n<p><img decoding=\"async\" alt=\"Anal\u00fdza \u00fatokov na honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/a665a90dfdbbfb5e9971fb2885ccd669.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h1>U\u010dte sa a sk\u00famajte: zria\u010fte si vlastn\u00fd honeypot<\/h1>\n<p>\nNed\u00e1vno som nap\u00edsal kr\u00e1tky manu\u00e1l, ako <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/cowrie-honeypot-ubuntu\/\">nain\u0161talova\u0165 na svojom syst\u00e9me honeypot Cowrie<\/a><\/noindex>. Ako sme u\u017e spomenuli, v na\u0161om pr\u00edpade bol pou\u017eit\u00fd Digital Ocean VPS v Singapure. Po\u010das 24 hod\u00edn anal\u00fdzy n\u00e1klady \u010dinili len nieko\u013eko centov a \u010das na zostavenie syst\u00e9mu \u2014 30 min\u00fat.<\/p>\n<p>Namiesto toho, aby ste sp\u00fa\u0161\u0165ali Cowrie na internete a chytali cel\u00fd \u0161um, m\u00f4\u017eete vyu\u017ei\u0165 honeypot v lok\u00e1lnej sieti. Jednoducho si nastavte upozornenie, ak prich\u00e1dzaj\u00fa po\u017eiadavky na ur\u010dit\u00e9 porty. To m\u00f4\u017ee by\u0165 alebo \u00fato\u010dn\u00edk vo vn\u00fatri siete, alebo zvedav\u00fd zamestnanec, alebo skenovanie zranite\u013enost\u00ed.<\/p>\n<h1>Zhrnutie<\/h1>\n<p>\nPo sledovan\u00ed \u010dinnost\u00ed \u00fato\u010dn\u00edkov za 24 hod\u00edn je jasn\u00e9, \u017ee nemo\u017eno ur\u010di\u0165 jednozna\u010dn\u00fd zdroj \u00fatokov v nejakej organiz\u00e1cii, krajine alebo dokonca opera\u010dnom syst\u00e9me.<\/p>\n<p>\u0160irok\u00e9 roz\u0161\u00edrenie zdrojov ukazuje, \u017ee \u0161um skenovania je kon\u0161tantn\u00fd a nes\u00favis\u00ed s konkr\u00e9tnym zdrojom. Ka\u017ed\u00fd, kto pracuje na internete, by mal zabezpe\u010di\u0165, aby jeho syst\u00e9m <b>mal nieko\u013eko \u00farovn\u00ed bezpe\u010dnosti<\/b>. Be\u017en\u00fdm a efekt\u00edvnym rie\u0161en\u00edm pre <b>SSH<\/b> bude presun slu\u017eby na n\u00e1hodn\u00fd vysok\u00fd port. To nezbavuje potreby pr\u00edsnej heslovej ochrany a monitorovania, ale aspo\u0148 zabezpe\u010duje, \u017ee protokoly nie s\u00fa zahlten\u00e9 neust\u00e1lym skenovan\u00edm. Pripojenia na vysok\u00fd port s\u00fa s v\u00e4\u010d\u0161ou pravdepodobnos\u0165ou cielen\u00e9 \u00fatoky, ktor\u00e9 v\u00e1s m\u00f4\u017eu zauj\u00edma\u0165.<\/p>\n<p>\u010casto s\u00fa otvoren\u00e9 porty telnet na smerova\u010doch alebo in\u00fdch zariadeniach, tak\u017ee ich nemo\u017eno \u013eahko presun\u00fa\u0165 na vysok\u00fd port. <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/nmap-online-port-scanner\/\">Inform\u00e1cie o v\u0161etk\u00fdch otvoren\u00fdch portoch<\/a><\/noindex> a <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/domain-profiler\/\">povrch \u00fatoku<\/a><\/noindex> \u2014 je jedin\u00fd sp\u00f4sob, ako sa uisti\u0165, \u017ee tieto slu\u017eby s\u00fa chr\u00e1nen\u00e9 firewallom alebo s\u00fa vypnut\u00e9. Pokia\u013e je to mo\u017en\u00e9, vyhnite sa pou\u017e\u00edvaniu Telnetu, tento protokol nie je \u0161ifrovan\u00fd. Ak je nevyhnutn\u00fd a inak to nejde, starostlivo ho monitorujte a pou\u017e\u00edvajte spo\u013eahliv\u00e9 hesl\u00e1.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/436076\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443! \u041d\u0430\u0447\u043d\u0451\u043c \u0441\u0440\u0430\u0437\u0443 \u0441 \u043a\u0430\u0440\u0442\u044b \u0430\u0442\u0430\u043a \u041d\u0430\u0448\u0430 \u0441\u0443\u043f\u0435\u0440\u043a\u043b\u0430\u0441\u0441\u043d\u0430\u044f \u043a\u0430\u0440\u0442\u0430 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 ASN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0438\u0441\u044c \u043a \u043d\u0430\u0448\u0435\u043c\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0443 Cowrie \u0437\u0430 24 \u0447\u0430\u0441\u0430. \u0416\u0451\u043b\u0442\u044b\u0439 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u043c, \u0430 \u043a\u0440\u0430\u0441\u043d\u044b\u0439\u00a0\u2014 Telnet. \u0422\u0430\u043a\u0438\u0435 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438 \u0447\u0430\u0441\u0442\u043e \u0432\u043f\u0435\u0447\u0430\u0442\u043b\u044f\u044e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0431\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30311","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443!\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/analiz-atak-na-hanipot-cowrie\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 \u0445\u0430\u043d\u0438\u043f\u043e\u0442 Cowrie | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443!\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/analiz-atak-na-hanipot-cowrie\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:34:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:34:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Anal\u00fdza \u00fatokov na honeypot Cowrie | ProHoster","description":"\u0160tatistika za 24 hod\u00edn po in\u0161tal\u00e1cii honeypotu na uzle Digital Ocean v Singapure Piu-piu!","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/analiz-atak-na-hanipot-cowrie","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 \u0445\u0430\u043d\u0438\u043f\u043e\u0442 Cowrie | ProHoster","og:description":"\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443!","og:url":"https:\/\/prohoster.info\/sk\/blog\/analiz-atak-na-hanipot-cowrie","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:49+00:00","article:modified_time":"2019-10-31T18:34:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30311","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:36:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:37:27","updated":"2026-01-21 00:36:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/30311","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=30311"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/30311\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=30311"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=30311"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=30311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}