{"id":30312,"date":"2019-10-31T21:34:49","date_gmt":"2019-10-31T18:34:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij\/"},"modified":"2019-10-31T21:34:49","modified_gmt":"2019-10-31T18:34:49","slug":"lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","title":{"rendered":"Z\u00e1chytn\u00fd bod (tarpit) pre prich\u00e1dzaj\u00face SSH pripojenia","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nie je tajomstvom, \u017ee internet je ve\u013emi nepriate\u013esk\u00e9 prostredie. Hne\u010f ako spust\u00edte server, okam\u017eite sa st\u00e1va ter\u010dom mas\u00edvnych \u00fatokov a r\u00f4znych skenovan\u00ed. Na pr\u00edklade honeypotu od bezpe\u010dnostn\u00fdch expertov<\/a><\/noindex> je mo\u017en\u00e9 oceni\u0165 rozsah tohto odpadu. V skuto\u010dnosti m\u00f4\u017ee by\u0165 na priemernom serveri 99% prev\u00e1dzky \u0161kodlivej.<\/p>\n

Tarpit je port-z\u00e1rove\u0148, ktor\u00fd sa pou\u017e\u00edva na spomalenie prich\u00e1dzaj\u00facich pripojen\u00ed. Ak sa extern\u00fd syst\u00e9m pripojuje na tento port, r\u00fdchlo zavrie\u0165 pripojenie nebude mo\u017en\u00e9. Mus\u00ed vyu\u017e\u00edva\u0165 svoje syst\u00e9mov\u00e9 zdroje a \u010daka\u0165, k\u00fdm sa pripojenie neukon\u010d\u00ed \u010dasov\u00fdm limitom, alebo ho manu\u00e1lne preru\u0161ova\u0165.<\/p>\n

Tarpity sa naj\u010dastej\u0161ie pou\u017e\u00edvaj\u00fa na ochranu. Tento postup bol prv\u00fdkr\u00e1t vyvinut\u00fd na ochranu pred po\u010d\u00edta\u010dov\u00fdmi \u010dervami. A teraz ho mo\u017eno pou\u017ei\u0165, aby sp\u00f4sobil probl\u00e9my spamerom a v\u00fdskumn\u00edkom, ktor\u00ed sa zaoberaj\u00fa hromadn\u00fdm skenovan\u00edm v\u0161etk\u00fdch IP adries (pr\u00edklady na Habr: Rak\u00fasko<\/a><\/noindex>, Ukrajina<\/a><\/noindex>).
\n<\/a><\/noindex>
\nJedn\u00e9mu zo syst\u00e9mov\u00fdch administr\u00e1torov menom Chris Wellons sa o\u010dividne zunovalo sledova\u0165 toto zlo, a tak nap\u00edsal mal\u00fd program Endlessh<\/a><\/noindex>, tarpit pre SSH, ktor\u00fd spoma\u013euje prich\u00e1dzaj\u00face pripojenia. Program otvor\u00ed port (pre testovanie je predvolene uveden\u00fd port 2222) a predstiera SSH server, pri\u010dom v skuto\u010dnosti vytv\u00e1ra nekone\u010dn\u00e9 pripojenie s prich\u00e1dzaj\u00facim klientom, k\u00fdm sa ten nevzd\u00e1. To m\u00f4\u017ee trva\u0165 nieko\u013eko dn\u00ed alebo viac, pok\u00fdm klient neod\u00edde.<\/p>\n

In\u0161tal\u00e1cia utility:<\/p>\n

$ make\n$ .\/endlessh &\n$ ssh -p2222 localhost<\/code><\/pre>\n
\nSpr\u00e1vne realizovan\u00fd tarpit vezme \u00fato\u010dn\u00edkovi viac zdrojov ako v\u00e1m. Ale nejde len o zdroje. Autor p\u00ed\u0161e<\/a><\/noindex>, \u017ee program sp\u00f4sobuje n\u00e1vyk. Pr\u00e1ve teraz je v jeho pasci 27 klientov, niektor\u00ed z nich s\u00fa pripojen\u00ed nieko\u013eko t\u00fd\u017ed\u0148ov. V \u010dase najvy\u0161\u0161ej aktivity bolo v pasci 1378 klientov po dobu 20 hod\u00edn!<\/p>\n
V prev\u00e1dzkovom re\u017eime by sa server Endlessh mal nain\u0161talova\u0165 na \u0161tandardn\u00fd port 22, na ktor\u00fd bu\u0161ia zlodeji. \u0160tandardn\u00e9 bezpe\u010dnostn\u00e9 odpor\u00fa\u010dania v\u017edy radia presun\u00fa\u0165 SSH na in\u00fd port, \u010do okam\u017eite zmen\u0161uje objem logov.<\/p>\n
Chris Wellons hovor\u00ed, \u017ee jeho program vyu\u017e\u00edva jeden odsek zo \u0161pecifik\u00e1cie RFC 4253<\/a><\/noindex> na protokol SSH. Ihne\u010f po nadviazan\u00ed TCP spojenia, ale pred pou\u017eit\u00edm \u0161ifrovania by mali obidve strany posla\u0165 identifika\u010dn\u00fd re\u0165azec. A tam je aj pozn\u00e1mka: \u201eServer M\u00d4\u017dE posla\u0165 \u010fal\u0161ie riadky \u00fadajov pred odoslan\u00edm riadku s verziou\u201c<\/i>. A nie s\u00fa \u017eiadne obmedzenia<\/b> na objem t\u00fdchto \u00fadajov, jednoducho ka\u017ed\u00fd riadok mus\u00ed za\u010d\u00edna\u0165 s SSH-<\/code>.<\/p>\n
Presne toto rob\u00ed program Endlessh: on odosiela nekone\u010dn\u00fd<\/i> pr\u00fad n\u00e1hodne generovan\u00fdch \u00fadajov<\/b>, ktor\u00e9 zodpovedaj\u00fa RFC 4253, to znamen\u00e1 odosielanie pred identifik\u00e1ciou, pri\u010dom ka\u017ed\u00fd riadok za\u010d\u00edna s SSH-<\/code> a nepresahuje 255 znakov, vr\u00e1tane znaku ukon\u010denia riadka. V z\u00e1sade, v\u0161etko pod\u013ea \u0161tandardu.<\/p>\n
Program predvolene o\u010dak\u00e1va 10 sek\u00fand medzi odosielan\u00edm paketov. To zabra\u0148uje odpojeniu z d\u00f4vodu timeoutu, tak\u017ee klient zostane v pasci nav\u017edy.<\/p>\n
Ke\u010f\u017ee odosielanie \u00fadajov sa vykon\u00e1va pred pou\u017eit\u00edm \u0161ifrovania, program je mimoriadne jednoduch\u00fd. Nie je potrebn\u00e9 implementova\u0165 \u017eiadne \u0161ifry a podporu mnoh\u00fdch protokolov.<\/p>\n
Autor sa sna\u017eil, aby utilita spotrebovala minimum zdrojov a pracovala \u00faplne nen\u00e1padne na zariaden\u00ed. Na rozdiel od s\u00fa\u010dasn\u00fdch antiv\u00edrusov a in\u00fdch \u201ebezpe\u010dnostn\u00fdch syst\u00e9mov\u201c by nemala spoma\u013eova\u0165 po\u010d\u00edta\u010d. Podarilo sa mu minimalizova\u0165 aj prenos a spotrebu pam\u00e4te pomocou trochu premyslenej\u0161ej programovej realiz\u00e1cie. Keby jednoducho spustil samostatn\u00fd proces pre nov\u00e9 spojenie, potenci\u00e1lni \u00fato\u010dn\u00edci by mohli vykona\u0165 DDoS \u00fatok otvoren\u00edm mno\u017estva spojen\u00ed na vy\u010derpanie zdrojov na zariaden\u00ed. Jeden tok na spojenie - to tie\u017e nie je najlep\u0161\u00ed variant, preto\u017ee jadro by m\u00ed\u0148alo zdroje na spr\u00e1vu tokov.<\/p>\n
Preto Chris Vellons zvolil pre Endlessh naj\u013eah\u0161\u00ed variant: jednoprvkov\u00fd server poll(2)<\/code>, kde klienti v pasci prakticky nepodporuj\u00fa zbyto\u010dn\u00e9 zdroje, okrem objektu soketu v jadre a e\u0161te 78 bajtov na sledovanie v Endlessh. Aby sa nevytv\u00e1rali buffery pre prij\u00edmanie a odosielanie pre ka\u017ed\u00e9ho klienta, Endlessh otv\u00e1ra socket priameho pr\u00edstupu a priamo vysiela pakety TCP, pri\u010dom ignoruje takmer cel\u00fd TCP\/IP z\u00e1sobn\u00edk opera\u010dn\u00e9ho syst\u00e9mu. Prich\u00e1dzaj\u00faci buffer nie je v\u00f4bec potrebn\u00fd, preto\u017ee prich\u00e1dzaj\u00face \u00fadaje n\u00e1s nezauj\u00edmaj\u00fa.<\/p>\n
Autor hovor\u00ed, \u017ee v \u010dase svojej programy nevedel<\/a><\/noindex> o existencii Pythonovsk\u00e9ho asycio a in\u00fdch tarpitoch. Keby vedel o asycio, mohol by svoju utilitu realizova\u0165 iba v 18 riadkoch na Pythone:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\ntry:\nwhile True:\nawait asyncio.sleep(10)\nwriter.write(b'%xrn' % random.randint(0, 2**32))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 2222)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nAsyncio je ide\u00e1lne na p\u00edsanie tarpitoch. Napr\u00edklad tak\u00e1 pasca na mnoho hod\u00edn zablokuje Firefox, Chrome alebo in\u00e9ho klienta, ktor\u00fd sa pok\u00fa\u0161a pripoji\u0165 k v\u00e1\u0161mu HTTP serveru:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\nwriter.write(b'HTTP\/1.1 200 OKrn')\ntry:\nwhile True:\nawait asyncio.sleep(5)\nheader = random.randint(0, 2**32)\nvalue = random.randint(0, 2**32)\nwriter.write(b'X-%x: %xrn' % (header, value))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 8080)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nTarpit je v\u00fdborn\u00fd n\u00e1stroj na potrestanie internetov\u00fdch zlodejov. Pravda, existuje nejak\u00e9 riziko, \u017ee naopak pritiahnete ich pozornos\u0165 k nezvy\u010dajn\u00e9mu spr\u00e1vaniu konkr\u00e9tneho servera. Niekto m\u00f4\u017ee pomyslie\u0165 na pomstu<\/a><\/noindex> a zamera\u0165 sa na DDoS \u00fatok na va\u0161u IP. Av\u0161ak, zatia\u013e neboli tak\u00e9 pr\u00edpady a tarpity funguj\u00fa v\u00fdborne.<\/p>\n
Huby:
\nPython, Informa\u010dn\u00e1 bezpe\u010dnos\u0165, Softv\u00e9r, Syst\u00e9mov\u00e9 administrat\u00edvne pr\u00e1ce<\/p>\n
Tagy:
\nSSH, Endlessh, tarpit, tarpity, pasca, asycio
\nZ\u00e1chytn\u00fd bod (tarpit) pre prich\u00e1dzaj\u00face SSH pripojenia<\/p>\n
Nie je tajomstvom, \u017ee internet je ve\u013emi nepriate\u013esk\u00e9 prostredie. Hne\u010f ako spust\u00edte server, okam\u017eite sa st\u00e1va ter\u010dom mas\u00edvnych \u00fatokov a r\u00f4znych skenovan\u00ed. Na pr\u00edklade honeypotu od bezpe\u010dnostn\u00fdch expertov<\/a><\/noindex> je mo\u017en\u00e9 oceni\u0165 rozsah tohto odpadu. V skuto\u010dnosti m\u00f4\u017ee by\u0165 na priemernom serveri 99% prev\u00e1dzky \u0161kodlivej.<\/p>\n
Tarpit je port-z\u00e1rove\u0148, ktor\u00fd sa pou\u017e\u00edva na spomalenie prich\u00e1dzaj\u00facich pripojen\u00ed. Ak sa extern\u00fd syst\u00e9m pripojuje na tento port, r\u00fdchlo zavrie\u0165 pripojenie nebude mo\u017en\u00e9. Mus\u00ed vyu\u017e\u00edva\u0165 svoje syst\u00e9mov\u00e9 zdroje a \u010daka\u0165, k\u00fdm sa pripojenie neukon\u010d\u00ed \u010dasov\u00fdm limitom, alebo ho manu\u00e1lne preru\u0161ova\u0165.<\/p>\n
Tarpity sa naj\u010dastej\u0161ie pou\u017e\u00edvaj\u00fa na ochranu. Tento postup bol prv\u00fdkr\u00e1t vyvinut\u00fd na ochranu pred po\u010d\u00edta\u010dov\u00fdmi \u010dervami. A teraz ho mo\u017eno pou\u017ei\u0165, aby sp\u00f4sobil probl\u00e9my spamerom a v\u00fdskumn\u00edkom, ktor\u00ed sa zaoberaj\u00fa hromadn\u00fdm skenovan\u00edm v\u0161etk\u00fdch IP adries (pr\u00edklady na Habr: Rak\u00fasko<\/a><\/noindex>, Ukrajina<\/a><\/noindex>).<\/p>\n
Jedn\u00e9mu zo syst\u00e9mov\u00fdch administr\u00e1torov menom Chris Wellons sa o\u010dividne zunovalo sledova\u0165 toto zlo, a tak nap\u00edsal mal\u00fd program Endlessh<\/a><\/noindex>, tarpit pre SSH, ktor\u00fd spoma\u013euje prich\u00e1dzaj\u00face pripojenia. Program otvor\u00ed port (pre testovanie je predvolene uveden\u00fd port 2222) a predstiera SSH server, pri\u010dom v skuto\u010dnosti vytv\u00e1ra nekone\u010dn\u00e9 pripojenie s prich\u00e1dzaj\u00facim klientom, k\u00fdm sa ten nevzd\u00e1. To m\u00f4\u017ee trva\u0165 nieko\u013eko dn\u00ed alebo viac, pok\u00fdm klient neod\u00edde.<\/p>\n
In\u0161tal\u00e1cia utility:<\/p>\n
$ make\n$ .\/endlessh &\n$ ssh -p2222 localhost<\/code><\/pre>\n
\nSpr\u00e1vne realizovan\u00fd tarpit vezme \u00fato\u010dn\u00edkovi viac zdrojov ako v\u00e1m. Ale nejde len o zdroje. Autor p\u00ed\u0161e<\/a><\/noindex>, \u017ee program sp\u00f4sobuje n\u00e1vyk. Pr\u00e1ve teraz je v jeho pasci 27 klientov, niektor\u00ed z nich s\u00fa pripojen\u00ed nieko\u013eko t\u00fd\u017ed\u0148ov. V \u010dase najvy\u0161\u0161ej aktivity bolo v pasci 1378 klientov po dobu 20 hod\u00edn!<\/p>\n
V prev\u00e1dzkovom re\u017eime by sa server Endlessh mal nain\u0161talova\u0165 na \u0161tandardn\u00fd port 22, na ktor\u00fd bu\u0161ia zlodeji. \u0160tandardn\u00e9 bezpe\u010dnostn\u00e9 odpor\u00fa\u010dania v\u017edy radia presun\u00fa\u0165 SSH na in\u00fd port, \u010do okam\u017eite zmen\u0161uje objem logov.<\/p>\n
Chris Wellons hovor\u00ed, \u017ee jeho program vyu\u017e\u00edva jeden odsek zo \u0161pecifik\u00e1cie RFC 4253<\/a><\/noindex> na protokol SSH. Ihne\u010f po nadviazan\u00ed TCP spojenia, ale pred pou\u017eit\u00edm \u0161ifrovania by mali obidve strany posla\u0165 identifika\u010dn\u00fd re\u0165azec. A tam je aj pozn\u00e1mka: \u201eServer M\u00d4\u017dE posla\u0165 \u010fal\u0161ie riadky \u00fadajov pred odoslan\u00edm riadku s verziou\u201c<\/i>. A nie s\u00fa \u017eiadne obmedzenia<\/b> na objem t\u00fdchto \u00fadajov, jednoducho ka\u017ed\u00fd riadok mus\u00ed za\u010d\u00edna\u0165 s SSH-<\/code>.<\/p>\n
Presne toto rob\u00ed program Endlessh: on odosiela nekone\u010dn\u00fd<\/i> pr\u00fad n\u00e1hodne generovan\u00fdch \u00fadajov<\/b>, ktor\u00e9 zodpovedaj\u00fa RFC 4253, to znamen\u00e1 odosielanie pred identifik\u00e1ciou, pri\u010dom ka\u017ed\u00fd riadok za\u010d\u00edna s SSH-<\/code> a nepresahuje 255 znakov, vr\u00e1tane znaku ukon\u010denia riadka. V z\u00e1sade, v\u0161etko pod\u013ea \u0161tandardu.<\/p>\n
Program predvolene o\u010dak\u00e1va 10 sek\u00fand medzi odosielan\u00edm paketov. To zabra\u0148uje odpojeniu z d\u00f4vodu timeoutu, tak\u017ee klient zostane v pasci nav\u017edy.<\/p>\n
Ke\u010f\u017ee odosielanie \u00fadajov sa vykon\u00e1va pred pou\u017eit\u00edm \u0161ifrovania, program je mimoriadne jednoduch\u00fd. Nie je potrebn\u00e9 implementova\u0165 \u017eiadne \u0161ifry a podporu mnoh\u00fdch protokolov.<\/p>\n
Autor sa sna\u017eil, aby utilita spotrebovala minimum zdrojov a pracovala \u00faplne nen\u00e1padne na zariaden\u00ed. Na rozdiel od s\u00fa\u010dasn\u00fdch antiv\u00edrusov a in\u00fdch \u201ebezpe\u010dnostn\u00fdch syst\u00e9mov\u201c by nemala spoma\u013eova\u0165 po\u010d\u00edta\u010d. Podarilo sa mu minimalizova\u0165 aj prenos a spotrebu pam\u00e4te pomocou trochu premyslenej\u0161ej programovej realiz\u00e1cie. Keby jednoducho spustil samostatn\u00fd proces pre nov\u00e9 spojenie, potenci\u00e1lni \u00fato\u010dn\u00edci by mohli vykona\u0165 DDoS \u00fatok otvoren\u00edm mno\u017estva spojen\u00ed na vy\u010derpanie zdrojov na zariaden\u00ed. Jeden tok na spojenie - to tie\u017e nie je najlep\u0161\u00ed variant, preto\u017ee jadro by m\u00ed\u0148alo zdroje na spr\u00e1vu tokov.<\/p>\n
Preto Chris Vellons zvolil pre Endlessh naj\u013eah\u0161\u00ed variant: jednoprvkov\u00fd server poll(2)<\/code>, kde klienti v pasci prakticky nepodporuj\u00fa zbyto\u010dn\u00e9 zdroje, okrem objektu soketu v jadre a e\u0161te 78 bajtov na sledovanie v Endlessh. Aby sa nevytv\u00e1rali buffery pre prij\u00edmanie a odosielanie pre ka\u017ed\u00e9ho klienta, Endlessh otv\u00e1ra socket priameho pr\u00edstupu a priamo vysiela pakety TCP, pri\u010dom ignoruje takmer cel\u00fd TCP\/IP z\u00e1sobn\u00edk opera\u010dn\u00e9ho syst\u00e9mu. Prich\u00e1dzaj\u00faci buffer nie je v\u00f4bec potrebn\u00fd, preto\u017ee prich\u00e1dzaj\u00face \u00fadaje n\u00e1s nezauj\u00edmaj\u00fa.<\/p>\n
Autor hovor\u00ed, \u017ee v \u010dase svojej programy nevedel<\/a><\/noindex> o existencii Pythonovsk\u00e9ho asycio a in\u00fdch tarpitoch. Keby vedel o asycio, mohol by svoju utilitu realizova\u0165 iba v 18 riadkoch na Pythone:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    try:\n        while True:\n            await asyncio.sleep(10)\n            writer.write(b'%xrn' % random.randint(0, 2**32))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 2222)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nAsyncio je ide\u00e1lne na p\u00edsanie tarpitoch. Napr\u00edklad tak\u00e1 pasca na mnoho hod\u00edn zablokuje Firefox, Chrome alebo in\u00e9ho klienta, ktor\u00fd sa pok\u00fa\u0161a pripoji\u0165 k v\u00e1\u0161mu HTTP serveru:<\/p>\n
import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    writer.write(b'HTTP\/1.1 200 OKrn')\n    try:\n        while True:\n            await asyncio.sleep(5)\n            header = random.randint(0, 2**32)\n            value = random.randint(0, 2**32)\n            writer.write(b'X-%x: %xrn' % (header, value))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 8080)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n
\nTarpit je v\u00fdborn\u00fd n\u00e1stroj na potrestanie internetov\u00fdch zlodejov. Pravda, existuje nejak\u00e9 riziko, \u017ee naopak pritiahnete ich pozornos\u0165 k nezvy\u010dajn\u00e9mu spr\u00e1vaniu konkr\u00e9tneho servera. Niekto m\u00f4\u017ee pomyslie\u0165 na pomstu<\/a><\/noindex> a zamera\u0165 sa na DDoS \u00fatok na va\u0161u IP. Av\u0161ak, zatia\u013e neboli tak\u00e9 pr\u00edpady a tarpity funguj\u00fa v\u00fdborne.<\/p>\n
\n\"Z\u00e1chytn\u00fd<\/a><\/noindex>
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432 \u043c\u043e\u0436\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u044d\u0442\u043e\u0433\u043e \u043c\u0443\u0441\u043e\u0440\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u043d\u0430 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 99% \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c. Tarpit \u2014 \u044d\u0442\u043e \u043f\u043e\u0440\u0442-\u043b\u043e\u0432\u0443\u0448\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u0415\u0441\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u044f\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30312","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pasca (tarpit) pre prich\u00e1dzaj\u00face SSH spojenia | ProHoster","description":"Nie je tajomstvom, \u017ee internet je ve\u013emi nepriate\u013esk\u00e9 prostredie. Hne\u010f ako zdvihnete server, okam\u017eite je vystaven\u00fd mas\u00edvnym \u00fatokom a mnoh\u00fdm skenovaniam.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041b\u043e\u0432\u0443\u0448\u043a\u0430 (\u0442\u0430\u0440\u043f\u0438\u0442) \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c.","og:url":"https:\/\/prohoster.info\/sk\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:49+00:00","article:modified_time":"2019-10-31T18:34:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30312","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:38:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:37:27","updated":"2026-01-21 00:38:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/30312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=30312"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/30312\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=30312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=30312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=30312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}