Falanqaynta hawsha weeraryahanada ee la xidhiidha qiyaasida erayga sirta ah ee loo maro SSH

La daabacay Natiijooyinka falanqaynta weerarrada la xidhiidha qiyaasaha erayga sirta ah ee server-yada loo maro SSH. Intii lagu guda jiray tijaabada, dhowr goobood oo malabka ah ayaa la bilaabay, iyagoo iska dhigaya inay yihiin server OpenSSH ah oo la heli karo oo lagu marti galiyay shabakado kala duwan oo bixiyeyaasha daruuraha ah, sida
Google Cloud, DigitalOcean iyo NameCheap. In ka badan saddex bilood, 929554 isku dayo in lagu xidho serfarka ayaa la duubay.

78% kiisaska, raadinta waxaa loola dan lahaa in la go'aamiyo erayga sirta ah ee isticmaalaha xididka. Erayada sirta ah ee inta badan la hubiyay waxay ahaayeen “123456” iyo “password”, laakiin tobanka ugu sarreeya waxa kale oo ka mid ahaa erayga sirta ah “J5cmmu=Kyf0-br8CsW”, malaha kan caadiga ah ee ay isticmaalaan qaar ka mid ah soo-saarayaasha.

Login-yada ugu caansan iyo ereyada sirta ah:

Login
Tirada isku dayga
Password
Tirada isku dayga

xidid
729108

40556

admin
23302
123456
14542

user
8420
admin
7757

imtixaanka
7547
123
7355

oracle
6211
1234
7099

ftpuser
4012
xidid
6999

ubuntu
3657
password
6118

martida
3606
imtixaanka
5671

postgres
3455
12345
5223

user
2876
martida
4423

Isku daygii xulashada ee la lafa-guray, 128588 lammaane-password gaar ah ayaa la aqoonsaday, halka 38112 ka mid ah la isku dayay in la hubiyo 5 ama ka badan. 25ka lamaane ee inta badan la tijaabiyo:

Login
Password
Tirada isku dayga

xidid
 
37580

xidid
xidid
4213

user
user
2794

xidid
123456
2569

imtixaanka
imtixaanka
2532

admin
admin
2531

xidid
admin
2185

martida
martida
2143

xidid
password
2128

oracle
oracle
1869

ubuntu
ubuntu
1811

xidid
1234
1681

xidid
123
1658

postgres
postgres
1594

taageero
taageero
1535

jenkins
jenkins
1360

admin
password
1241

xidid
12345
1177

pi
raspberry
1160

xidid
12345678
1126

xidid
123456789
1069

ubnt
ubnt
1069

admin
1234
1012

xidid
1234567890
967

ec2-user
ec2-user
963

Qaybinta isku dayga iskaanka maalinta toddobaadka iyo saacada:

Falanqaynta hawsha weeraryahanada ee la xidhiidha qiyaasida erayga sirta ah ee loo maro SSH

Falanqaynta hawsha weeraryahanada ee la xidhiidha qiyaasida erayga sirta ah ee loo maro SSH

Wadar ahaan, codsiyada 27448 ciwaanno IP gaar ah ayaa la duubay.
Tirada ugu badan ee jeegaga laga sameeyay hal IP waxay ahayd 64969. Qaybta jeegaga Tor waxay ahayd 0.8% kaliya. 62.2% ciwaanada IP-ga ee ku lug leh doorashada ayaa lala xiriiriyay shabakadaha Shiinaha:

Falanqaynta hawsha weeraryahanada ee la xidhiidha qiyaasida erayga sirta ah ee loo maro SSH

Source: opennet.ru

Add a comment