{"id":30312,"date":"2019-10-31T21:34:49","date_gmt":"2019-10-31T18:34:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij\/"},"modified":"2019-10-31T21:34:49","modified_gmt":"2019-10-31T18:34:49","slug":"lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","title":{"rendered":"Tarpit za SSH povezave","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ni skrivnost, da je internet zelo sovra\u017eno okolje. Takoj ko postavite stre\u017enik, je takoj izpostavljen obse\u017enim napadom in ve\u010dkratnim skeniranjem. Na primeru <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/436076\/\">honeypota varnostnikov<\/a><\/noindex> lahko ocenimo obseg tega smetnjak prometa. Dejansko je lahko na povpre\u010dnem stre\u017eniku 99 % prometa zlonamernega.<\/p>\n<p>Tarpit je vrata-lovilec, ki se uporablja za upo\u010dasnitev vhodnih povezav. \u010ce se zunanja sistema pove\u017eejo na ta vrata, povezava ne bo hitro zaprta. Pora\u010dunala se bo morala porabiti svoje sistemske vire in \u010dakati, da se povezava pretrga zaradi \u010dasovne omejitve, ali jo ro\u010dno prekiniti.<\/p>\n<p>Najpogosteje se tarpiti uporabljajo za za\u0161\u010dito. Tehniko so prvi\u010d razvili za za\u0161\u010dito pred ra\u010dunalni\u0161kimi \u010drvi. Zdaj jo lahko uporabimo za ote\u017eevanje \u017eivljenja spammerjem in raziskovalcem, ki opravljajo \u0161iroko skeniranje vseh IP naslovov zaporedoma (primeri na Habr\u00e9: <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.haschek.at\/2019\/i-scanned-austria.html\">Avstrija<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/444490\/\">Ukrajina<\/a><\/noindex>).<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nEden od sistemskih administratorjev po imenu Chris Wellons se je o\u010ditno naveli\u010dal opazovati to zmedo \u2014 in napisal je majhno aplikacijo <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/skeeto\/endlessh\">Endlessh<\/a><\/noindex>, tarpit za SSH, ki upo\u010dasnjuje vhodne povezave. Program odpre vrata (privzeto za testiranje je navedena vrata 2222) in se pretvarja, da je SSH stre\u017enik, medtem ko v resnici vzpostavi neskon\u010dno povezavo z prihajajo\u010dim odjemalcem, dokler se ta ne predaja. To lahko traja ve\u010d dni ali ve\u010d, dokler se odjemalec ne odklopi.<\/p>\n<p>Namestitev orodja:<\/p>\n<pre><code class=\"bash\">$ make\n$ .\/endlessh &amp;\n$ ssh -p2222 localhost<\/code><\/pre>\n<p>\nPravilno izveden tarpit bo odvzel ve\u010d virov napadalcu kot vam. A to ni samo o virih. Avtor <noindex><a rel=\"nofollow\" href=\"https:\/\/nullprogram.com\/blog\/2019\/03\/22\/\">, that multimodelity is a sine qua non condition primarily for<\/a><\/noindex>, da program povzro\u010da zasvojenost. Prav zdaj je v njegovi pasti 27 odjemalcev, nekateri so povezani \u017ee tedne. Ob vrhuncu aktivnosti je bilo v pasti 1378 odjemalcev v \u010dasu 20 ur!<\/p>\n<p>V delovnem na\u010dinu je treba stre\u017enik Endlessh namestiti na obi\u010dajna vrata 22, kjer se mno\u017ei\u010dno povezujejo huligani. Standardne varnostne priporo\u010dila vedno svetujejo, da SSH premaknete na druga vrata, kar takoj znatno zmanj\u0161a velikost logov.<\/p>\n<p>Chris Wellons pravi, da njegov program izkori\u0161\u010da en odstavek iz specifikacije <noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc4253#section-4.2\">RFC 4253<\/a><\/noindex> na protokolu SSH. Takoj zhe moment, kak tol'ko ustanovleno TCP-soedinenie, no do primeneniya kriptografii obe storony dolzhny otpravit' identifikatsionnuyu stroku. I tam zhe pripeska: <i>\u00abServer MOZHET otpravit' drugie stroki dannykh pered otpravkoy stroki s versiyey\u00bb<\/i>. I <b>net ogranicheniya<\/b> na ob'yem etikh dannykh, prosto kazhdaya stroka nuzhno nachinat' s <code>SSH-<\/code>.<\/p>\n<p>Imenno etim zanymaya programma Endlessh: ona <b>otpravlyaet <i>beskonechnyy<\/i> potok sluchayno sgenerirovannykh dannykh<\/b>, kotorye sootvetstvuyut RFC 4253, to yest' otpravka pered identifikatsiey, a kazhdaya stroka nachinaetsya s <code>SSH-<\/code> i ne prevyshaet 255 simvolov, vklyuchaya simvol okonchaniya stroki. V obshchem, vse po standartu.<\/p>\n<p>Po umolchaniyu programma zhdet 10 sekund mezhdu otpravkami paketov. Eto predotvrashchayet otklyuchenie po taym-autu, tak chto klient budet sidet' v lovushke vyechno.<\/p>\n<p>Poskol'ku otpravka dannykh osushchestvlyaetsya do primeneniya kriptografii, programma iskluchitel'no prostaya. V ney ne nuzhno vnedryat' nikakikh shifrov i podderzhku mnogikh protokolov.<\/p>\n<p>Avtor postaralsya, chtoby utilita potreblyala minimum resursov i rabotala aboslutno nezametno na mashine. V otlichie ot sovremennykh antivirusov i drugikh \u00absistem bezopasnosti\u00bb, ona ne dolzhna tormozit' komp'yuter. Yemu udalos' minimizirovat' i trafik, i potreblenie pamyati za schet chut' bolee khitroy programmnoi realizatsii. Esli by on prosto zapuskal otdel'nyy protsess na novoye soedinenie, to potentsial'nye zloumyshlenniki mogliby provesti DDoS-ataku, otkryv mnogochislenniye soedineniy dlya ischerpaniya resursov na mashine. Po odnomu potoku na soedinenie \u2014 tozhe ne luchshiy variant, potomu chto yadro budet tratit' resursy na upravlenie potokami.<\/p>\n<p>Poetomu Kris Vellons vybral dlya Endlessh samyy legkoves'tvennyy variant: odnopotochnyy server <code>poll(2)<\/code>, gde klienty v lovushke prakticheski ne potreblyayut lishnikh resursov, ne schitaya ob'yekta soketa v yadre i yeshche 78 bayt dlya otslezhivaniya v Endlessh. Chtoby ne vydelyat' bufery polucheniya i otpravki dlya kazhdogo klienta, Endlessh otkryvayet soket pryamogo dostupa i pryamoy transmityruet pakety TCP, ignoriruyushchi pochti vse yasku TCP\/IP operatsionnoi sistemy. Vkhodyashchiy bufyur voobshche ne nuzhen, potomu chto vkhodyashchie dannye nas ne interesuyut.<\/p>\n<p>Avtor govorit, chto na moment svoey programmy <noindex><a rel=\"nofollow\" href=\"https:\/\/nullprogram.com\/blog\/2019\/03\/10\/\">ne znal<\/a><\/noindex> o obstoju Pythonovega asyncio in drugih tarpitisov. \u010ce bi vedel za asyncio, bi svojo orodje lahko implementiral v le 18 vrsticah v Pythonu:<\/p>\n<pre><code class=\"python\">import asyncio\nimport random\n\nasync def handler(_reader, writer):\ntry:\nwhile True:\nawait asyncio.sleep(10)\nwriter.write(b'%xrn' % random.randint(0, 2**32))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 2222)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n<p>\nAsyncio je idealen za pisanje tarpitisov. Na primer, ta past bo na dolgi rok obvisela Firefox, Chrome ali drugega odjemalca, ki posku\u0161a povezati z va\u0161im HTTP stre\u017enikom:<\/p>\n<pre><code class=\"python\">import asyncio\nimport random\n\nasync def handler(_reader, writer):\nwriter.write(b'HTTP\\\/1.1 200 OKrn')\ntry:\nwhile True:\nawait asyncio.sleep(5)\nheader = random.randint(0, 2**32)\nvalue = random.randint(0, 2**32)\nwriter.write(b'X-%x: %xrn' % (header, value))\nawait writer.drain()\nexcept ConnectionResetError:\npass\n\nasync def main():\nserver = await asyncio.start_server(handler, '0.0.0.0', 8080)\nasync with server:\nawait server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n<p>\nTarpit je odli\u010dno orodje za kaznovanje internetnih huliganov. Vendar pa obstaja nekak\u0161na tveganje, da pritegne njihovo pozornost na nenavadno vedenje dolo\u010denega stre\u017enika. Nekdo <noindex><a rel=\"nofollow\" href=\"https:\/\/news.ycombinator.com\/item?id=19466867\">lahko pomisli na ma\u0161\u010devanje<\/a><\/noindex> in usmerjen DDoS napad na va\u0161 IP. Kljub temu takih primerov \u0161e ni bilo, in tarpiti odli\u010dno delujejo.<\/p>\n<p>Hubi:<br \/>\nPython, Informacijska varnost, Programska oprema, Sistemsko upravljanje<\/p>\n<p>Oznake:<br \/>\nSSH, Endlessh, tarpit, tarpiti, past, asyncio<br \/>\nTarpit za SSH povezave<\/p>\n<p>Ni skrivnost, da je internet zelo sovra\u017eno okolje. Takoj ko postavite stre\u017enik, je takoj izpostavljen obse\u017enim napadom in ve\u010dkratnim skeniranjem. Na primeru <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/436076\/\">honeypota varnostnikov<\/a><\/noindex> lahko ocenimo obseg tega smetnjak prometa. Dejansko je lahko na povpre\u010dnem stre\u017eniku 99 % prometa zlonamernega.<\/p>\n<p>Tarpit je vrata-lovilec, ki se uporablja za upo\u010dasnitev vhodnih povezav. \u010ce se zunanja sistema pove\u017eejo na ta vrata, povezava ne bo hitro zaprta. Pora\u010dunala se bo morala porabiti svoje sistemske vire in \u010dakati, da se povezava pretrga zaradi \u010dasovne omejitve, ali jo ro\u010dno prekiniti.<\/p>\n<p>Najpogosteje se tarpiti uporabljajo za za\u0161\u010dito. Tehniko so prvi\u010d razvili za za\u0161\u010dito pred ra\u010dunalni\u0161kimi \u010drvi. Zdaj jo lahko uporabimo za ote\u017eevanje \u017eivljenja spammerjem in raziskovalcem, ki opravljajo \u0161iroko skeniranje vseh IP naslovov zaporedoma (primeri na Habr\u00e9: <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.haschek.at\/2019\/i-scanned-austria.html\">Avstrija<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/444490\/\">Ukrajina<\/a><\/noindex>).<\/p>\n<p>Eden od sistemskih administratorjev po imenu Chris Wellons se je o\u010ditno naveli\u010dal opazovati to zmedo \u2014 in napisal je majhno aplikacijo <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/skeeto\/endlessh\">Endlessh<\/a><\/noindex>, tarpit za SSH, ki upo\u010dasnjuje vhodne povezave. Program odpre vrata (privzeto za testiranje je navedena vrata 2222) in se pretvarja, da je SSH stre\u017enik, medtem ko v resnici vzpostavi neskon\u010dno povezavo z prihajajo\u010dim odjemalcem, dokler se ta ne predaja. To lahko traja ve\u010d dni ali ve\u010d, dokler se odjemalec ne odklopi.<\/p>\n<p>Namestitev orodja:<\/p>\n<pre><code class=\"bash\">$ make\n$ .\/endlessh &amp;\n$ ssh -p2222 localhost<\/code><\/pre>\n<p>\nPravilno izveden tarpit bo odvzel ve\u010d virov napadalcu kot vam. A to ni samo o virih. Avtor <noindex><a rel=\"nofollow\" href=\"https:\/\/nullprogram.com\/blog\/2019\/03\/22\/\">, that multimodelity is a sine qua non condition primarily for<\/a><\/noindex>, da program povzro\u010da zasvojenost. Prav zdaj je v njegovi pasti 27 odjemalcev, nekateri so povezani \u017ee tedne. Ob vrhuncu aktivnosti je bilo v pasti 1378 odjemalcev v \u010dasu 20 ur!<\/p>\n<p>V delovnem na\u010dinu je treba stre\u017enik Endlessh namestiti na obi\u010dajna vrata 22, kjer se mno\u017ei\u010dno povezujejo huligani. Standardne varnostne priporo\u010dila vedno svetujejo, da SSH premaknete na druga vrata, kar takoj znatno zmanj\u0161a velikost logov.<\/p>\n<p>Chris Wellons pravi, da njegov program izkori\u0161\u010da en odstavek iz specifikacije <noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc4253#section-4.2\">RFC 4253<\/a><\/noindex> na protokolu SSH. Takoj zhe moment, kak tol'ko ustanovleno TCP-soedinenie, no do primeneniya kriptografii obe storony dolzhny otpravit' identifikatsionnuyu stroku. I tam zhe pripeska: <i>\u00abServer MOZHET otpravit' drugie stroki dannykh pered otpravkoy stroki s versiyey\u00bb<\/i>. I <b>net ogranicheniya<\/b> na ob'yem etikh dannykh, prosto kazhdaya stroka nuzhno nachinat' s <code>SSH-<\/code>.<\/p>\n<p>Imenno etim zanymaya programma Endlessh: ona <b>otpravlyaet <i>beskonechnyy<\/i> potok sluchayno sgenerirovannykh dannykh<\/b>, kotorye sootvetstvuyut RFC 4253, to yest' otpravka pered identifikatsiey, a kazhdaya stroka nachinaetsya s <code>SSH-<\/code> i ne prevyshaet 255 simvolov, vklyuchaya simvol okonchaniya stroki. V obshchem, vse po standartu.<\/p>\n<p>Po umolchaniyu programma zhdet 10 sekund mezhdu otpravkami paketov. Eto predotvrashchayet otklyuchenie po taym-autu, tak chto klient budet sidet' v lovushke vyechno.<\/p>\n<p>Poskol'ku otpravka dannykh osushchestvlyaetsya do primeneniya kriptografii, programma iskluchitel'no prostaya. V ney ne nuzhno vnedryat' nikakikh shifrov i podderzhku mnogikh protokolov.<\/p>\n<p>Avtor postaralsya, chtoby utilita potreblyala minimum resursov i rabotala aboslutno nezametno na mashine. V otlichie ot sovremennykh antivirusov i drugikh \u00absistem bezopasnosti\u00bb, ona ne dolzhna tormozit' komp'yuter. Yemu udalos' minimizirovat' i trafik, i potreblenie pamyati za schet chut' bolee khitroy programmnoi realizatsii. Esli by on prosto zapuskal otdel'nyy protsess na novoye soedinenie, to potentsial'nye zloumyshlenniki mogliby provesti DDoS-ataku, otkryv mnogochislenniye soedineniy dlya ischerpaniya resursov na mashine. Po odnomu potoku na soedinenie \u2014 tozhe ne luchshiy variant, potomu chto yadro budet tratit' resursy na upravlenie potokami.<\/p>\n<p>Poetomu Kris Vellons vybral dlya Endlessh samyy legkoves'tvennyy variant: odnopotochnyy server <code>poll(2)<\/code>, gde klienty v lovushke prakticheski ne potreblyayut lishnikh resursov, ne schitaya ob'yekta soketa v yadre i yeshche 78 bayt dlya otslezhivaniya v Endlessh. Chtoby ne vydelyat' bufery polucheniya i otpravki dlya kazhdogo klienta, Endlessh otkryvayet soket pryamogo dostupa i pryamoy transmityruet pakety TCP, ignoriruyushchi pochti vse yasku TCP\/IP operatsionnoi sistemy. Vkhodyashchiy bufyur voobshche ne nuzhen, potomu chto vkhodyashchie dannye nas ne interesuyut.<\/p>\n<p>Avtor govorit, chto na moment svoey programmy <noindex><a rel=\"nofollow\" href=\"https:\/\/nullprogram.com\/blog\/2019\/03\/10\/\">ne znal<\/a><\/noindex> o obstoju Pythonovega asyncio in drugih tarpitisov. \u010ce bi vedel za asyncio, bi svojo orodje lahko implementiral v le 18 vrsticah v Pythonu:<\/p>\n<pre><code class=\"python\">import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    try:\n        while True:\n            await asyncio.sleep(10)\n            writer.write(b'%xrn' % random.randint(0, 2**32))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 2222)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n<p>\nAsyncio je idealen za pisanje tarpitisov. Na primer, ta past bo na dolgi rok obvisela Firefox, Chrome ali drugega odjemalca, ki posku\u0161a povezati z va\u0161im HTTP stre\u017enikom:<\/p>\n<pre><code class=\"python\">import asyncio\nimport random\n\nasync def handler(_reader, writer):\n    writer.write(b'HTTP\\\/1.1 200 OKrn')\n    try:\n        while True:\n            await asyncio.sleep(5)\n            header = random.randint(0, 2**32)\n            value = random.randint(0, 2**32)\n            writer.write(b'X-%x: %xrn' % (header, value))\n            await writer.drain()\n    except ConnectionResetError:\n        pass\n\nasync def main():\n    server = await asyncio.start_server(handler, '0.0.0.0', 8080)\n    async with server:\n        await server.serve_forever()\n\nasyncio.run(main())<\/code><\/pre>\n<p>\nTarpit je odli\u010dno orodje za kaznovanje internetnih huliganov. Vendar pa obstaja nekak\u0161na tveganje, da pritegne njihovo pozornost na nenavadno vedenje dolo\u010denega stre\u017enika. Nekdo <noindex><a rel=\"nofollow\" href=\"https:\/\/news.ycombinator.com\/item?id=19466867\">lahko pomisli na ma\u0161\u010devanje<\/a><\/noindex> in usmerjen DDoS napad na va\u0161 IP. Kljub temu takih primerov \u0161e ni bilo, in tarpiti odli\u010dno delujejo.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/clck.ru\/EWJHw\"><img decoding=\"async\" alt=\"Tarpit za SSH povezave\" src=\"\/wp-content\/uploads\/2019\/03\/a1656e1e4a2ae612eaa58451579a488f.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<br \/>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/globalsign\/blog\/445318\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432 \u043c\u043e\u0436\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u044d\u0442\u043e\u0433\u043e \u043c\u0443\u0441\u043e\u0440\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u043d\u0430 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 99% \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c. Tarpit \u2014 \u044d\u0442\u043e \u043f\u043e\u0440\u0442-\u043b\u043e\u0432\u0443\u0448\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u0415\u0441\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u044f\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30312","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041b\u043e\u0432\u0443\u0448\u043a\u0430 (\u0442\u0430\u0440\u043f\u0438\u0442) \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:34:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:34:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Past (tarpit) za prihajajo\u010de SSH povezave | ProHoster","description":"Ni skrivnost, da je internet zelo sovra\u017eno okolje. Takoj ko dvignete stre\u017enik, je takoj izpostavljen masovnim napadom in \u0161tevilnim skeniranjem.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041b\u043e\u0432\u0443\u0448\u043a\u0430 (\u0442\u0430\u0440\u043f\u0438\u0442) \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u041d\u0435 \u0441\u0435\u043a\u0440\u0435\u0442, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u043e\u0447\u0435\u043d\u044c \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u043d \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u043c.","og:url":"https:\/\/prohoster.info\/sl\/blog\/lovushka-tarpit-dlya-vhodyashhih-ssh-soedinenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:49+00:00","article:modified_time":"2019-10-31T18:34:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30312","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:38:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:37:27","updated":"2026-01-21 00:38:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/30312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=30312"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/30312\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=30312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=30312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=30312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}