{"id":30311,"date":"2019-10-31T21:34:49","date_gmt":"2019-10-31T18:34:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/analiz-atak-na-hanipot-cowrie\/"},"modified":"2019-10-31T21:34:49","modified_gmt":"2019-10-31T18:34:49","slug":"analiz-atak-na-hanipot-cowrie","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/analiz-atak-na-hanipot-cowrie","title":{"rendered":"Analiza e sulmeve n\u00eb honeypot Cowrie","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><b>Statistika p\u00ebr 24 or\u00eb pas instalimit t\u00eb honeypot n\u00eb nodin Digital Ocean n\u00eb Singapor<\/b> <\/p>\n<h1>Piu-piu! T\u00eb fillojm\u00eb menj\u00ebher\u00eb me hart\u00ebn e sulmeve<\/h1>\n<p>\nHarta jon\u00eb super e bukur tregon ASN unike q\u00eb jan\u00eb lidhur me honeypot-in ton\u00eb Cowrie p\u00ebr 24 or\u00eb. E verdha p\u00ebrkon me lidhjet SSH, nd\u00ebrsa e kuqja me Telnet. K\u00ebto animacione shpesh i impresionojn\u00eb an\u00ebtar\u00ebt e bordit t\u00eb kompanis\u00eb, duke lejuar t\u00eb sigurojm\u00eb m\u00eb shum\u00eb financim p\u00ebr sigurin\u00eb dhe burimet. Megjithat\u00eb, harta ka vler\u00eb, duke demonstruar qart\u00eb shp\u00ebrndarjen gjeografike dhe organizative t\u00eb burimeve t\u00eb sulmeve ndaj hostit ton\u00eb brenda 24 or\u00ebve. Animacioni nuk reflekton volumet e trafikut nga \u00e7do burim.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>\u00c7far\u00eb \u00ebsht\u00eb harta Pew Pew?<\/h3>\n<p>\n<i>Harta Pew Pew<\/i> \u2014 kjo \u00ebsht\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/krebsonsecurity.com\/2015\/01\/whos-attacking-whom-realtime-attack-trackers\/\">visualizimi i sulmeve kibernetike<\/a><\/noindex>, zakonisht e animuar dhe shum\u00eb e bukur. Kjo \u00ebsht\u00eb nj\u00eb m\u00ebnyr\u00eb moderne p\u00ebr t\u00eb shitur produktin tuaj, e njohur p\u00ebr faktin q\u00eb u p\u00ebrdor nga kompania Norse Corp. Kompani e cila p\u00ebrfundoi keq: doli q\u00eb animacionet e bukura ishin vlera e vetme, dhe p\u00ebr analiz\u00eb p\u00ebrdornin t\u00eb dh\u00ebna t\u00eb fragmentuara.<\/p>\n<h3>E b\u00ebr\u00eb me Leafletjs<\/h3>\n<p>\nP\u00ebr ata q\u00eb duan t\u00eb zhvillojn\u00eb nj\u00eb hart\u00eb sulmi p\u00ebr ekran t\u00eb madh n\u00eb qendr\u00ebn e operacioneve (shefi juaj do ta p\u00eblqej\u00eb), ekziston nj\u00eb bibliotek\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/leafletjs.com\/\">leafletjs<\/a><\/noindex>. E kombinojm\u00eb at\u00eb me plugins <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/lit-forest\/leaflet.migrationLayer\">t\u00eb shtresave t\u00eb migrimit leaflet<\/a><\/noindex>, sh\u00ebrbimi Maxmind GeoIP - <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/pewpew\/map.html\">dhe jemi gati<\/a><\/noindex>.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/pewpew\/map.html\"><img decoding=\"async\" alt=\"Analiza e sulmeve n\u00eb honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/c4765ba5f2c89e502e5d8791dcfcfc62.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h1>WTF: \u00e7far\u00eb \u00ebsht\u00eb ky hanipot Cowrie?<\/h1>\n<p>\nHanipoti \u00ebsht\u00eb nj\u00eb sistem q\u00eb vendoset n\u00eb rrjet posa\u00e7\u00ebrisht p\u00ebr t\u00eb t\u00ebrhequr sulmuesit. Lidhjet me sistemin, zakonisht, jan\u00eb t\u00eb paligjshme dhe lejojn\u00eb t\u00eb zbulohet sulmuesi p\u00ebrmes regjistrimeve t\u00eb detajuara. Regjistrimet ruajn\u00eb jo vet\u00ebm informacionin e zakonsh\u00ebm mbi lidhjen, por edhe informacionin mbi seanc\u00ebn q\u00eb zbulon <b>teknikat, taktik\u00ebn dhe procedurat (TTP)<\/b> e sulmuesit.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/micheloosterhof\/cowrie\">Hanipoti Cowrie<\/a><\/noindex> \u00ebsht\u00eb krijuar p\u00ebr <b>t\u00eb regjistroj\u00eb lidhjet SSH dhe Telnet<\/b>. K\u00ebta hanipota shpesh publikohen n\u00eb internet p\u00ebr t\u00eb ndjekur mjetet, skriptet dhe hostet e sulmuesve.<\/p>\n<blockquote><p>Mesazhi im p\u00ebr kompanit\u00eb q\u00eb mendojn\u00eb se nuk sulmohen: \"Ju po k\u00ebrkoni keq.\"<br \/>\n<i>- James Snook<\/i><\/p><\/blockquote>\n<p>\n<img decoding=\"async\" alt=\"Analiza e sulmeve n\u00eb honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/40feddaacc42add563f98a0f64c1c3b0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h1>\u00c7far\u00eb ka n\u00eb regjistrime?<\/h1>\n<p><\/p>\n<h3>Numri total i lidhjeve<\/h3>\n<p>\nNga shum\u00eb host-e kan\u00eb ardhur p\u00ebrpjekje t\u00eb shumta p\u00ebr t'u lidhur. Kjo \u00ebsht\u00eb normale, pasi n\u00eb skriptet sulmuese \u00ebsht\u00eb e regjistruar nj\u00eb list\u00eb kredencialesh dhe ato p\u00ebrpiqen me disa kombinacione. Honeypot-i Cowrie \u00ebsht\u00eb konfiguruar p\u00ebr t\u00eb pranuar kombinacione t\u00eb caktuara t\u00eb emrit t\u00eb p\u00ebrdoruesit dhe fjal\u00ebkalimit. Kjo \u00ebsht\u00eb e konfigurueshme n\u00eb <b>sked\u00ebn user.db<\/b>.<\/p>\n<p><img decoding=\"async\" alt=\"Analiza e sulmeve n\u00eb honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/d7da6ec208e821453607fb6c29c7e347.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Geografia e sulmeve<\/h3>\n<p>\nSipas t\u00eb dh\u00ebnave t\u00eb gjeolokacionit Maxmind, kam num\u00ebruar numrin e lidhjeve nga \u00e7do vend. Brazili dhe Kina udh\u00ebheqin me nj\u00eb distanc\u00eb t\u00eb madhe, nga k\u00ebto vende shpesh vjen nj\u00eb zhurm\u00eb e madhe nga skanuesit.<\/p>\n<p><img decoding=\"async\" alt=\"Analiza e sulmeve n\u00eb honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/0dd7a52da1c12db2f317f2195e92bccf.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Pronari i bllokut rrjetor<\/h3>\n<p>\nStudimi i pronar\u00ebve t\u00eb bllokut rrjetor (ASN) mund t\u00eb zbuloj\u00eb organizata me nj\u00eb num\u00ebr t\u00eb madh host-esh sulmuese. Sigurisht, n\u00eb k\u00ebto raste gjithmon\u00eb duhet t\u00eb mbahet mend se shum\u00eb sulme vijn\u00eb nga host-e t\u00eb infektuar. \u00cbsht\u00eb e arsyeshme t\u00eb supozohet se shumica e sulmuesve nuk jan\u00eb aq t\u00eb stupid sa t\u00eb skanojn\u00eb Rjetin nga nj\u00eb kompjuter sht\u00ebpie.<\/p>\n<p><img decoding=\"async\" alt=\"Analiza e sulmeve n\u00eb honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/0f60be7772ea993e2c0a5d0ab6c08cd8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Portet e hapura n\u00eb sistemet sulmuese (t\u00eb dh\u00ebna nga Shodan.io)<\/h3>\n<p>\nKalimi i list\u00ebs IP p\u00ebrmes nj\u00eb t\u00eb shk\u00eblqyer <noindex><a rel=\"nofollow\" href=\"https:\/\/developer.shodan.io\/\">API i Shodan<\/a><\/noindex> shpejt identifikon <b>sistemet me porte t\u00eb hapura<\/b> dhe \u00e7far\u00eb jan\u00eb k\u00ebto porte. N\u00eb figur\u00ebn m\u00eb posht\u00eb tregohet p\u00ebrqendrimi i porteve t\u00eb hapura sipas vendeve dhe organizatave. Mund t\u00eb identifikohen blloqet e sistemeve t\u00eb komprometuara, por brenda <b>nje mostre t\u00eb vog\u00ebl<\/b> n\u00eb nuk ka asgj\u00eb t\u00eb jasht\u00ebzakonshme, p\u00ebrve\u00e7 nj\u00eb numri t\u00eb madh <b>t\u00eb porteve t\u00eb hapura 500 n\u00eb Kin\u00eb<\/b>.<\/p>\n<p>Nj\u00eb zbulim interesante - nj\u00eb num\u00ebr i madh i sistemeve n\u00eb Brazil, t\u00eb cilat <b>nuk kan\u00eb hapur 22, 23<\/b> ose <b>porte t\u00eb tjera<\/b>, sipas t\u00eb dh\u00ebnave nga Censys dhe Shodan. Sipas gjith\u00e7kaje, k\u00ebto jan\u00eb lidhje nga kompjuter\u00ebt e p\u00ebrdoruesve t\u00eb fundit.<\/p>\n<p><img decoding=\"async\" alt=\"Analiza e sulmeve n\u00eb honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/6138379c7d069807f01b57a8d97784fb.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <\/p>\n<h3>Bot\u00eb? Nuk \u00ebsht\u00eb e domosdoshme<\/h3>\n<p>\nT\u00eb dh\u00ebnat <noindex><a rel=\"nofollow\" href=\"https:\/\/censys.io\/\">Censys<\/a><\/noindex> p\u00ebr portet 22 dhe 23 p\u00ebr at\u00eb dit\u00eb treguan di\u00e7ka t\u00eb \u00e7uditshme. Un\u00eb supozova se shumica e skanimeve dhe sulmeve me fjal\u00ebkalim vijn\u00eb nga robot\u00ebt. Skripti shp\u00ebrndahet p\u00ebrmes porteve t\u00eb hapura, duke provuar fjal\u00ebkalime, dhe nga nj\u00eb sistem i ri kopjon veten dhe vazhdon t\u00eb p\u00ebrhapet me t\u00eb nj\u00ebjt\u00ebn metod\u00eb.<\/p>\n<p>Por k\u00ebtu duket se vet\u00ebm nj\u00eb num\u00ebr i vog\u00ebl i hosteve q\u00eb skanojn\u00eb telnet kan\u00eb portin 23 t\u00eb hapur jasht\u00eb. Kjo do t\u00eb thot\u00eb se sistemet jan\u00eb ose t\u00eb komprometuara n\u00eb nj\u00eb m\u00ebnyr\u00eb tjet\u00ebr, ose sulmuesit po ekzekutojn\u00eb skriptet manualisht.<\/p>\n<p><img decoding=\"async\" alt=\"Analiza e sulmeve n\u00eb honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/4c3ccbc609a46365473f582315ca90bd.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Lidhjet n\u00eb sht\u00ebpi<\/h3>\n<p>\nNj\u00eb zbulim tjet\u00ebr interesant ishte numri i madh i p\u00ebrdoruesve sht\u00ebpiak\u00eb n\u00eb most\u00ebr. Me ndihm\u00ebn e <b>kthimin e kthyer <\/b> Un\u00eb kam identifikuar 105 lidhje nga kompjuter\u00eb t\u00eb ve\u00e7ant\u00eb n\u00eb sht\u00ebpi. P\u00ebr shum\u00eb lidhje sht\u00ebpiake, gjat\u00eb kthimit t\u00eb DNS, shfaqet emri i hostit me fjal\u00ebt dsl, sht\u00ebpi, kabllo, fiber dhe k\u00ebshtu me radh\u00eb.<\/p>\n<p><img decoding=\"async\" alt=\"Analiza e sulmeve n\u00eb honeypot Cowrie\" src=\"\/wp-content\/uploads\/2019\/03\/a665a90dfdbbfb5e9971fb2885ccd669.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h1>M\u00ebsoni dhe hulumtoni: ngjeni nj\u00eb honeypot t\u00eb vetin<\/h1>\n<p>\nS\u00eb fundmi shkrova nj\u00eb manual t\u00eb shkurt\u00ebr se si <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/cowrie-honeypot-ubuntu\/\">t\u00eb vendosni honeypotin Cowrie n\u00eb sistemin tuaj<\/a><\/noindex>. Si\u00e7 u p\u00ebrmend m\u00eb par\u00eb, n\u00eb rastin ton\u00eb \u00ebsht\u00eb p\u00ebrdorur nj\u00eb Digital Ocean VPS n\u00eb Singapor. P\u00ebr 24 or\u00eb analiz\u00eb, kostoja ishte literalisht disa cent\u00eb, dhe koha p\u00ebr nd\u00ebrtimin e sistemit ishte 30 minuta.<\/p>\n<p>N\u00eb vend q\u00eb t\u00eb drejtoni Cowrie n\u00eb internet dhe t\u00eb kapni t\u00eb gjith\u00eb zhurm\u00ebn, mund t\u00eb nxjerrni p\u00ebrfitime nga honeypoti n\u00eb rrjetin lokal. Thjesht vendosni nj\u00eb njoftim n\u00ebse k\u00ebrkesat shkojn\u00eb p\u00ebr porto t\u00eb caktuara. Kjo mund t\u00eb jet\u00eb ose nj\u00eb sulmues brenda rrjetit, ose nj\u00eb punonj\u00ebs kurioz, ose skanimi i dob\u00ebsive.<\/p>\n<h1>P\u00ebrfundimet<\/h1>\n<p>\nPas shqyrtimit t\u00eb veprimeve t\u00eb sulmuesve p\u00ebr nj\u00eb dit\u00eb, b\u00ebhet e qart\u00eb se nuk mund t\u00eb identifikohet nj\u00eb burim i caktuar i sulmeve n\u00eb ndonj\u00eb organizat\u00eb, vend, ose madje edhe sistem operativ.<\/p>\n<p>Shp\u00ebrndarja e gjer\u00eb e burimeve tregon se zhurma e skanimit \u00ebsht\u00eb e konstant dhe nuk \u00ebsht\u00eb e lidhur me nj\u00eb burim t\u00eb ve\u00e7ant\u00eb. \u00c7do kush q\u00eb punon n\u00eb internet duhet t\u00eb sigurohet q\u00eb sistemi i tij <b>t\u00eb ket\u00eb disa nivele sigurie<\/b>. Nj\u00eb zgjidhje e zakonshme dhe efektive p\u00ebr <b>SSH<\/b> do t\u00eb jet\u00eb zhvendosja e sh\u00ebrbimit n\u00eb nj\u00eb port t\u00eb lart\u00eb t\u00eb rast\u00ebsish\u00ebm. Kjo nuk eliminon nevoj\u00ebn p\u00ebr mbrojtje t\u00eb fort\u00eb me fjal\u00ebkalim dhe monitorim, por t\u00eb pakt\u00ebn garanton q\u00eb log-et nuk mbushen nga skanime t\u00eb vazhdueshme. Koneksionet n\u00eb portin e lart\u00eb ka t\u00eb ngjar\u00eb t\u00eb jen\u00eb sulme t\u00eb synuara, q\u00eb mund t'ju interesojn\u00eb.<\/p>\n<p>Shpesh, portet e hapura telnet gjenden n\u00eb router-a ose pajisje t\u00eb tjera, k\u00ebshtu q\u00eb ato nuk mund t\u00eb zhvendosen leht\u00eb n\u00eb nj\u00eb port t\u00eb lart\u00eb. <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/nmap-online-port-scanner\/\">Informacioni mbi t\u00eb gjitha portet e hapura<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/hackertarget.com\/domain-profiler\/\">sip\u00ebrfaqen e sulmit<\/a><\/noindex> \u00ebsht\u00eb m\u00ebnyra e vetme p\u00ebr t'u siguruar q\u00eb k\u00ebto sh\u00ebrbime jan\u00eb t\u00eb mbrojtura nga firewall-i ose jan\u00eb \u00e7aktivizuar. Sa m\u00eb shum\u00eb t\u00eb jet\u00eb e mundur, duhet t\u00eb shmanget p\u00ebrdorimi i Telnet-it, ky protokoll nuk \u00ebsht\u00eb i enkriptuar. N\u00ebse \u00ebsht\u00eb e nevojshme dhe nuk ka m\u00ebnyr\u00eb tjet\u00ebr, monitoroni at\u00eb me kujdes dhe p\u00ebrdorni fjal\u00ebkalime t\u00eb sigurta.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/436076\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443! \u041d\u0430\u0447\u043d\u0451\u043c \u0441\u0440\u0430\u0437\u0443 \u0441 \u043a\u0430\u0440\u0442\u044b \u0430\u0442\u0430\u043a \u041d\u0430\u0448\u0430 \u0441\u0443\u043f\u0435\u0440\u043a\u043b\u0430\u0441\u0441\u043d\u0430\u044f \u043a\u0430\u0440\u0442\u0430 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 ASN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0438\u0441\u044c \u043a \u043d\u0430\u0448\u0435\u043c\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0443 Cowrie \u0437\u0430 24 \u0447\u0430\u0441\u0430. \u0416\u0451\u043b\u0442\u044b\u0439 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u043c, \u0430 \u043a\u0440\u0430\u0441\u043d\u044b\u0439\u00a0\u2014 Telnet. \u0422\u0430\u043a\u0438\u0435 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438 \u0447\u0430\u0441\u0442\u043e \u0432\u043f\u0435\u0447\u0430\u0442\u043b\u044f\u044e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0431\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30311","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443! \u041d\u0430\u0447\u043d\u0451\u043c \u0441\u0440\u0430\u0437\u0443 \u0441 \u043a\u0430\u0440\u0442\u044b \u0430\u0442\u0430\u043a \u041d\u0430\u0448\u0430 \u0441\u0443\u043f\u0435\u0440\u043a\u043b\u0430\u0441\u0441\u043d\u0430\u044f \u043a\u0430\u0440\u0442\u0430 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 ASN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0438\u0441\u044c \u043a \u043d\u0430\u0448\u0435\u043c\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0443 Cowrie \u0437\u0430 24 \u0447\u0430\u0441\u0430. \u0416\u0451\u043b\u0442\u044b\u0439 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u043c, \u0430 \u043a\u0440\u0430\u0441\u043d\u044b\u0439 \u2014 Telnet. \u0422\u0430\u043a\u0438\u0435 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438 \u0447\u0430\u0441\u0442\u043e \u0432\u043f\u0435\u0447\u0430\u0442\u043b\u044f\u044e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0431\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/analiz-atak-na-hanipot-cowrie\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 \u0445\u0430\u043d\u0438\u043f\u043e\u0442 Cowrie | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443! \u041d\u0430\u0447\u043d\u0451\u043c \u0441\u0440\u0430\u0437\u0443 \u0441 \u043a\u0430\u0440\u0442\u044b \u0430\u0442\u0430\u043a \u041d\u0430\u0448\u0430 \u0441\u0443\u043f\u0435\u0440\u043a\u043b\u0430\u0441\u0441\u043d\u0430\u044f \u043a\u0430\u0440\u0442\u0430 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 ASN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0438\u0441\u044c \u043a \u043d\u0430\u0448\u0435\u043c\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0443 Cowrie \u0437\u0430 24 \u0447\u0430\u0441\u0430. \u0416\u0451\u043b\u0442\u044b\u0439 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u043c, \u0430 \u043a\u0440\u0430\u0441\u043d\u044b\u0439 \u2014 Telnet. \u0422\u0430\u043a\u0438\u0435 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438 \u0447\u0430\u0441\u0442\u043e \u0432\u043f\u0435\u0447\u0430\u0442\u043b\u044f\u044e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0431\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/analiz-atak-na-hanipot-cowrie\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:34:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:34:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Analiza e sulmeve ndaj honeypot-it Cowrie | ProHoster","description":"Statistikat p\u00ebr 24 or\u00ebt pas instalimit t\u00eb honeypot-it n\u00eb Digital Ocean n\u00eb Singapor Pi\u00f9-pi\u00fa! T\u00eb fillojm\u00eb menj\u00ebher\u00eb me hart\u00ebn e sulmeve. Harta jon\u00eb super e mrekullueshme tregon ASN t\u00eb ve\u00e7anta q\u00eb jan\u00eb lidhur me honeypot-in ton\u00eb Cowrie n\u00eb 24 or\u00ebt e fundit. E verdha i p\u00ebrket lidhjeve SSH, nd\u00ebrsa e kuqja Telnet-it. K\u00ebto animacione shpesh impresionojn\u00eb bordin e kompanis\u00eb, duke mund\u00ebsuar sigurimin e financimit m\u00eb shum\u00eb p\u00ebr sigurin\u00eb dhe","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/analiz-atak-na-hanipot-cowrie","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 \u0445\u0430\u043d\u0438\u043f\u043e\u0442 Cowrie | ProHoster","og:description":"\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0437\u0430 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 Digital Ocean \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u041f\u0438\u0443-\u043f\u0438\u0443! \u041d\u0430\u0447\u043d\u0451\u043c \u0441\u0440\u0430\u0437\u0443 \u0441 \u043a\u0430\u0440\u0442\u044b \u0430\u0442\u0430\u043a \u041d\u0430\u0448\u0430 \u0441\u0443\u043f\u0435\u0440\u043a\u043b\u0430\u0441\u0441\u043d\u0430\u044f \u043a\u0430\u0440\u0442\u0430 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 ASN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0438\u0441\u044c \u043a \u043d\u0430\u0448\u0435\u043c\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0443 Cowrie \u0437\u0430 24 \u0447\u0430\u0441\u0430. \u0416\u0451\u043b\u0442\u044b\u0439 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u043c, \u0430 \u043a\u0440\u0430\u0441\u043d\u044b\u0439 \u2014 Telnet. \u0422\u0430\u043a\u0438\u0435 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438 \u0447\u0430\u0441\u0442\u043e \u0432\u043f\u0435\u0447\u0430\u0442\u043b\u044f\u044e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0431\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438","og:url":"https:\/\/prohoster.info\/sq\/blog\/analiz-atak-na-hanipot-cowrie","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:34:49+00:00","article:modified_time":"2019-10-31T18:34:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30311","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:36:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:37:27","updated":"2026-01-21 00:36:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/30311","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=30311"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/30311\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=30311"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=30311"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=30311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}