{"id":99147,"date":"2021-02-16T16:22:36","date_gmt":"2021-02-16T14:22:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/skanirovnie-portov-privelo-k-blokirovke-podseti-provajderom-iz-za-popadaniya-v-spisok-uceprotect"},"modified":"2021-02-16T16:22:36","modified_gmt":"2021-02-16T14:22:36","slug":"skanirovnie-portov-privelo-k-blokirovke-podseti-provajderom-iz-za-popadaniya-v-spisok-uceprotect","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/skanirovnie-portov-privelo-k-blokirovke-podseti-provajderom-iz-za-popadaniya-v-spisok-uceprotect","title":{"rendered":"Skenovanie portov viedlo k zablokovaniu podsiete poskytovate\u013eom kv\u00f4li zaradeniu do zoznamu UCEPROTECT.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vincent Canfield, administr\u00e1tor emailov\u00e9ho servisu a hostingov\u00e9ho resellera cock.li, zistil, \u017ee cel\u00e1 jeho IP sie\u0165 bola automaticky zaraden\u00e1 do zoznamu DNSBL UCEPROTECT za skenovanie portov zo susedn\u00fdch virtu\u00e1lnych strojov. Vincentova podsiete bola zaraden\u00e1 do Level 3, kde sa blokovanie vykon\u00e1va pod\u013ea \u010d\u00edsel autonomn\u00fdch syst\u00e9mov a pokr\u00fdva cel\u00e9 podsiete, z ktor\u00fdch sa opakovane a pre r\u00f4zne adresy aktivovali detektory spamu. V d\u00f4sledku toho poskytovate\u013e M247 odpojil oznam jednej z jeho siet\u00ed v BGP, \u010d\u00edm fakticky pozastavil jej prev\u00e1dzku. <\/p>\n

Probl\u00e9m spo\u010d\u00edva v tom, \u017ee falo\u0161n\u00e9 servery<\/a> UCEPROTECT, ktor\u00e9 sa tv\u00e1ria ako otvoren\u00e9 relaye a zaznamen\u00e1vaj\u00fa pokusy o odosielanie emailov prostredn\u00edctvom seba, automaticky zarad\u00ed adresy do zoznamu blokovania na z\u00e1klade akejko\u013evek sie\u0165ovej aktivity, bez overovania nadviazania sie\u0165ov\u00e9ho spojenia. Podobn\u00e1 met\u00f3da zaradenia do zoznamu blokovania sa tie\u017e pou\u017e\u00edva projektom Spamhaus. <\/p>\n

Na zaradenie do zoznamu blokovania sta\u010d\u00ed odosla\u0165 jeden paket TCP SYN, \u010do m\u00f4\u017eu zneu\u017e\u00edva\u0165 \u00fato\u010dn\u00edci. Konkr\u00e9tne, ke\u010f\u017ee obojsmern\u00e9 potvrdenie TCP spojenia nie je potrebn\u00e9, je mo\u017en\u00e9 pomocou spoofingu odosla\u0165 paket s uveden\u00edm falo\u0161n\u00e9ho IP adresy<\/a> a iniciova\u0165 zaradenie do zoznamu blokovania ak\u00e9hoko\u013evek hostite\u013ea. Pri simul\u00e1cii aktivity z viacer\u00fdch adries je mo\u017en\u00e9 dosiahnu\u0165 eskal\u00e1ciu blokovania na \u00farove\u0148 Level 2 a Level 3, ktor\u00e9 vykon\u00e1vaj\u00fa blokovanie pod\u013ea podsiet\u00ed a \u010d\u00edsel autonomn\u00fdch syst\u00e9mov. <\/p>\n

Zoznam Level 3 bol p\u00f4vodne vytvoren\u00fd na boj proti poskytovate\u013eom, ktor\u00ed podporuj\u00fa \u0161kodliv\u00fa aktivitu svojich klientov a nereaguj\u00fa na s\u0165a\u017enosti (napr\u00edklad hostingy, ktor\u00e9 boli \u0161peci\u00e1lne vytvoren\u00e9 na umiest\u0148ovanie nez\u00e1konn\u00e9ho obsahu alebo obsluhu spammerov). Pred nieko\u013ek\u00fdmi d\u0148ami UCEPROTECT zmenil pravidl\u00e1 zaradenia do zoznamov Level 2 a Level 3, \u010do viedlo k agres\u00edvnej\u0161iemu filtrovanie a zv\u00fd\u0161eniu ve\u013ekosti zoznamov. Napr\u00edklad, po\u010det z\u00e1znamov v zozname Level 3 vzr\u00e1stol z 28 na 843 autonomn\u00fdch syst\u00e9mov. <\/p>\n

Na odpor vo\u010di UCEPROTECT bola navrhnut\u00e1 my\u0161lienka pou\u017eit\u00edm spoofingu adries s uveden\u00edm IP z rozsahu sponzorov UCEPROTECT pri skenovan\u00ed. V\u00fdsledkom bolo, \u017ee UCEPROTECT zaradil adresy svojich sponzorov a mnoh\u00fdch \u010fal\u0161\u00edch nevinn\u00fdch do svojich datab\u00e1z, \u010do sp\u00f4sobilo probl\u00e9my s doru\u010dovan\u00edm emailov. Do zoznamu blokovania sa dostala aj CDN sie\u0165 spolo\u010dnosti Sucuri.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u0438\u043d\u0441\u0435\u043d\u0442 \u041a\u044d\u043d\u0444\u0438\u043b\u0434 (Vincent Canfield), \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u0430-\u0440\u0435\u0441\u0435\u043b\u043b\u0435\u0440\u0430 cock.li, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u0432\u0441\u044e \u0435\u0433\u043e IP-\u0441\u0435\u0442\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043d\u0435\u0441\u043b\u0438 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a DNSBL UCEPROTECT \u0437\u0430 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 \u0441 \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u041f\u043e\u0434\u0441\u0435\u0442\u044c \u0412\u0438\u043d\u0441\u0435\u043d\u0442\u0430 \u043f\u043e\u043f\u0430\u043b\u0430 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a Level 3, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e \u043d\u043e\u043c\u0435\u0440\u0430\u043c \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0446\u0435\u043b\u044b\u0435 \u043f\u043e\u0434\u0441\u0435\u0442\u0438, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99147","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Skenovanie portov viedlo k zablokovaniu podsiete poskytovate\u013eom kv\u00f4li zaradeniu do zoznamu UCEPROTECT | ProHoster","description":"Vincent Canfield, administr\u00e1tor po\u0161tov\u00fdch slu\u017eieb a hos\u0165ovania resellersk\u00e9ho servisu cock.li, zistil, \u017ee cel\u00e1 jeho IP sie\u0165 bola automaticky zaraden\u00e1 do DNSBL UCEPROTECT za skenovanie portov z okolia.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/skanirovnie-portov-privelo-k-blokirovke-podseti-provajderom-iz-za-popadaniya-v-spisok-uceprotect","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0435 \u043f\u043e\u0434\u0441\u0435\u0442\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u043c \u0438\u0437-\u0437\u0430 \u043f\u043e\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u0432 \u0441\u043f\u0438\u0441\u043e\u043a UCEPROTECT | ProHoster","og:description":"\u0412\u0438\u043d\u0441\u0435\u043d\u0442 \u041a\u044d\u043d\u0444\u0438\u043b\u0434 (Vincent Canfield), \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u0430-\u0440\u0435\u0441\u0435\u043b\u043b\u0435\u0440\u0430 cock.li, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u0432\u0441\u044e \u0435\u0433\u043e IP-\u0441\u0435\u0442\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043d\u0435\u0441\u043b\u0438 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a DNSBL UCEPROTECT \u0437\u0430 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 \u0441 \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0445.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/skanirovnie-portov-privelo-k-blokirovke-podseti-provajderom-iz-za-popadaniya-v-spisok-uceprotect","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-02-16T14:22:36+00:00","article:modified_time":"2021-02-16T14:22:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99147","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:54:35","updated":"2026-02-09 16:53:41","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99147","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=99147"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99147\/revisions"}],"predecessor-version":[{"id":159158,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99147\/revisions\/159158"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=99147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=99147"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=99147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}