{"id":41229,"date":"2020-02-06T20:43:00","date_gmt":"2020-02-06T17:43:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/opasno-li-derzhat-otkrytym-rdp-v-internete"},"modified":"2020-02-06T20:43:00","modified_gmt":"2020-02-06T17:43:00","slug":"opasno-li-derzhat-otkrytym-rdp-v-internete","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/opasno-li-derzhat-otkrytym-rdp-v-internete","title":{"rendered":"A \u00ebsht\u00eb e rrezikshme t\u00eb mbash RDP t\u00eb hapur n\u00eb Internet?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u041d\u0435\u0440\u0435\u0434\u043a\u043e \u044f \u0447\u0438\u0442\u0430\u043b \u043c\u043d\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0434\u0435\u0440\u0436\u0430\u0442\u044c RDP (Remote Desktop Protocol) \u043f\u043e\u0440\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e, \u0438 \u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a \u043d\u0435 \u043d\u0430\u0434\u043e. \u0410 \u043d\u0430\u0434\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a RDP \u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 VPN, \u0438\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 &quot;\u0431\u0435\u043b\u044b\u0445&quot; IP \u0430\u0434\u0440\u0435\u0441\u043e\u0432.<\/p>\n<p><\/p>\n<p>Un\u00eb administroj disa Windows Server p\u00ebr kompani t\u00eb vogla, ku m\u00eb \u00ebsht\u00eb dh\u00ebn\u00eb detyra t\u00eb siguroj qasje t\u00eb larg\u00ebt n\u00eb Windows Server p\u00ebr kontabilist\u00ebt. Ky \u00ebsht\u00eb nj\u00eb trend modern - pun\u00eb nga sht\u00ebpia. M\u00eb shpjet e kuptova se t\u00eb torturosh kontabilist\u00ebt me VPN \u00ebsht\u00eb nj\u00eb aktivitet jo produktiv, dhe t\u00eb mbledh\u00ebsh t\u00eb gjitha IP-t\u00eb p\u00ebr list\u00ebn e bardh\u00eb nuk do t\u00eb funksionoj\u00eb, sepse adresat IP t\u00eb njer\u00ebzve jan\u00eb dinamike.<\/p>\n<p><\/p>\n<p>Prandaj, ndoqa rrug\u00ebn m\u00eb t\u00eb thjesht\u00eb - hapja e portit RDP nga jasht\u00eb. Tani, p\u00ebr t\u00eb pasur qasje, kontabilist\u00ebt duhet t\u00eb nisin RDP dhe t\u00eb futin emrin e hostit (duke p\u00ebrfshir\u00eb portin), emrin e p\u00ebrdoruesit dhe fjal\u00ebkalimin.<\/p>\n<p><\/p>\n<p>N\u00eb k\u00ebt\u00eb artikull do t\u00eb ndaj p\u00ebrvoj\u00ebn time (pozitive dhe jo shum\u00eb) dhe rekomandimet.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Rreziqet<\/h3>\n<p><\/p>\n<p>\u00c7far\u00eb rrezikoni duke hapur portin RDP?<\/p>\n<p><\/p>\n<p><b>1) Qasje e paautorizuar n\u00eb t\u00eb dh\u00ebna t\u00eb ndjeshme<\/b><br \/>\n\u0415\u0441\u043b\u0438 \u043a\u0442\u043e-\u0442\u043e \u043f\u043e\u0434\u0431\u0435\u0440\u0451\u0442 \u043f\u0430\u0440\u043e\u043b\u044c \u043a RDP, \u0442\u043e \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b \u0445\u043e\u0442\u0438\u0442\u0435 \u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u043c\u0438: \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0441\u0447\u0435\u0442\u043e\u0432, \u0431\u0430\u043b\u0430\u043d\u0441\u044b, \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, &#8230;<\/p>\n<p><\/p>\n<p><b>2) Humbje t\u00eb t\u00eb dh\u00ebnave<\/b><br \/>\nP\u00ebr shembull, si pasoj\u00eb e veprimeve t\u00eb nj\u00eb virusi-kriptues.<br \/>\nOse veprimi i q\u00ebllimsh\u00ebm i nj\u00eb sulmuesi.<\/p>\n<p><\/p>\n<p><b>3) Humbje e stacionit t\u00eb pun\u00ebs<\/b><br \/>\nPunonj\u00ebsit duhet t\u00eb punojn\u00eb, nd\u00ebrsa sistemi \u00ebsht\u00eb i komprometuar, duhet t\u00eb rinovohet \/ rikuperohet \/ konfiguroni.<\/p>\n<p><\/p>\n<p><b>4) Komprometimi i rrjetit lokal<\/b><br \/>\nN\u00ebse nj\u00eb sulmues ka arritur t\u00eb qaset n\u00eb nj\u00eb kompjuter Windows, ai tashm\u00eb mund t\u00eb ket\u00eb qasje n\u00eb sisteme q\u00eb nuk jan\u00eb t\u00eb qasshme nga jasht\u00eb, nga Interneti. P\u00ebr shembull, n\u00eb ndarjet e skedar\u00ebve, n\u00eb printer\u00ebt rrjet\u00eb, etj.<\/p>\n<p>\n<b class=\"spoiler_title\">Kam pasur nj\u00eb rast kur Windows Server u kap nga nj\u00eb kriptues<\/b><\/p>\n<p>dhe ky kriptues fillimisht kodoi shumic\u00ebn e skedar\u00ebve n\u00eb diskun C:, dhe m\u00eb pas filloi t\u00eb kodonte skedar\u00ebt n\u00eb NAS p\u00ebrmes rrjetit. Duke qen\u00eb se NAS ishte Synology, me snapshots t\u00eb konfiguruara, e rigjenerova NAS-in p\u00ebr n\u00eb 5 minuta, nd\u00ebrsa Windows Server e rigjenerova nga fillimi.<\/p>\n<p><\/p>\n<h3>V\u00ebzhgimet dhe Rekomandimet<\/h3>\n<p><\/p>\n<p>Un\u00eb monitoroj Windows Servers me an\u00eb t\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/beats\/winlogbeat\">Winlogbeat<\/a><\/noindex>, t\u00eb cilat d\u00ebrgojn\u00eb loget n\u00eb ElasticSearch. N\u00eb Kibana ka disa vizualizime, dhe un\u00eb gjithashtu kam konfiguruar nj\u00eb tabel\u00eb t\u00eb personalizuar.<br \/>\nMonitorimi i vet\u00eb nuk mbron, por ndihmon n\u00eb p\u00ebrcaktimin e masave t\u00eb nevojshme.<\/p>\n<p><\/p>\n<p>Ja disa v\u00ebzhgime:<br \/>\n<b>a) RDP do t\u00eb b\u00ebhet objekt i brute-forcing.<\/b><br \/>\nN\u00eb nj\u00eb nga server\u00ebt e mi e kam vendosur RDP jo n\u00eb portin standard 3389, por n\u00eb 443 \u2014 p\u00ebr t\u00eb u maskuar si HTTPS. Ndoshta ja vlen t\u00eb ndryshohet porti nga ai standard, por nuk ka shum\u00eb p\u00ebrdorim. K\u00ebtu \u00ebsht\u00eb statistika nga ky server:<\/p>\n<p>\n<img decoding=\"async\" alt=\"A \u00ebsht\u00eb e rrezikshme t\u00eb mbash RDP t\u00eb hapur n\u00eb Internet?\" src=\"\/wp-content\/uploads\/2020\/02\/6f7fccd9378d323b67a6186bde54fc2c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>E dukshme \u00ebsht\u00eb se p\u00ebr nj\u00eb jav\u00eb ka pasur pothuajse 400,000 p\u00ebrpjekje t\u00eb d\u00ebshtuara p\u00ebr t\u00eb hyr\u00eb p\u00ebrmes RDP.<br \/>\nE dukshme \u00ebsht\u00eb se p\u00ebrpjekjet p\u00ebr t\u00eb hyr\u00eb kan\u00eb ardhur nga 55,001 adresa IP (disa adresa IP tashm\u00eb ishin bllokuar nga un\u00eb).<\/p>\n<p><\/p>\n<p>K\u00ebtu del qart\u00eb se duhet vendosur fail2ban, por <\/p>\n<p>\n<b class=\"spoiler_title\">\u0434\u043b\u044f Windows \u0442\u0430\u043a\u043e\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u044b &#8212; \u043d\u0435\u0442\u0443.<\/b><\/p>\n<p>Ka disa projekte t\u00eb braktisura n\u00eb GitHub, t\u00eb cilat duket se e b\u00ebjn\u00eb k\u00ebt\u00eb, por as q\u00eb i kam provuar ato:<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/glasnt\/wail2ban\">https:\/\/github.com\/glasnt\/wail2ban<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/EvanAnderson\/ts_block\">https:\/\/github.com\/EvanAnderson\/ts_block<\/a><\/noindex><\/p>\n<p><\/p>\n<p>P\u00ebrve\u00e7 k\u00ebsaj, ka disa utilitar\u00eb me pages\u00eb, por un\u00eb nuk i kam shqyrtuar.<\/p>\n<p><\/p>\n<p>N\u00ebse dini nj\u00eb utilitar t\u00eb hapur p\u00ebr k\u00ebt\u00eb q\u00ebllim \u2014 ndani n\u00eb komentet.<\/p>\n<p><\/p>\n<p><strong>P\u00ebrdit\u00ebso<\/strong>: N\u00eb komentet m\u00eb sugjeruan se porta 443 \u2014 \u00ebsht\u00eb nj\u00eb zgjedhje e keqe, dhe \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb zgjidhen porta t\u00eb larta (32000+), sepse 443 skanohet shpesh, dhe t\u00eb identifikosh RDP n\u00eb k\u00ebt\u00eb port \u2014 nuk \u00ebsht\u00eb problem.<\/p>\n<p><\/p>\n<p><strong>P\u00ebrdit\u00ebsim:<\/strong> N\u00eb komentet m\u00eb njoftuan se nj\u00eb utilitar i till\u00eb ekziston:<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/digitalruby\/ipban\">https:\/\/github.com\/digitalruby\/ipban<\/a><\/noindex><\/p>\n<p><\/p>\n<p><b>b) Ka disa emra p\u00ebrdoruesish, t\u00eb cil\u00ebt hakerat preferojn\u00eb<\/b><br \/>\nE dukshme \u00ebsht\u00eb se p\u00ebrb\u00ebrja po b\u00ebhet p\u00ebrmes nj\u00eb fjalori me emra t\u00eb ndrysh\u00ebm.<br \/>\nPor ajo q\u00eb vura re: nj\u00eb num\u00ebr i konsideruesh\u00ebm p\u00ebrpjekjesh \u2014 \u00ebsht\u00eb p\u00ebrdorimi i emrit t\u00eb serverit si em\u00ebr p\u00ebrdoruesi. Rekomandimi: mos p\u00ebrdorni t\u00eb nj\u00ebjtin em\u00ebr p\u00ebr kompjuterin dhe p\u00ebr p\u00ebrdoruesin. P\u00ebr m\u00eb tep\u00ebr, nganj\u00ebher\u00eb duket se emri i serverit p\u00ebrpiqet t\u00eb analizohet: p\u00ebr shembull, p\u00ebr sistemin me emrin DESKTOP-DFTHD7C, m\u00eb s\u00eb shumti p\u00ebrpjekje p\u00ebr t\u00eb hyr\u00eb jan\u00eb me emrin DFTHD7C:<\/p>\n<p>\n<img decoding=\"async\" alt=\"A \u00ebsht\u00eb e rrezikshme t\u00eb mbash RDP t\u00eb hapur n\u00eb Internet?\" src=\"\/wp-content\/uploads\/2020\/02\/cd13cf169b3b9ed57db9e5706c735c06.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u00ebr rrjedhoj\u00eb, n\u00ebse keni nj\u00eb kompjuter DESKTOP-MARIA, ndoshta do ket\u00eb p\u00ebrpjekje p\u00ebr t\u00eb hyr\u00eb n\u00ebn p\u00ebrdoruesin MARIA.<\/p>\n<p><\/p>\n<p>\u0415\u0449\u0451, \u0447\u0442\u043e \u044f \u0437\u0430\u043c\u0435\u0442\u0438\u043b \u0438\u0437 \u043b\u043e\u0433\u043e\u0432: \u043d\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0437\u0430\u0439\u0442\u0438 \u2014 \u044d\u0442\u043e \u0441 \u0438\u043c\u0435\u043d\u0435\u043c &quot;administrator&quot;. \u0418 \u044d\u0442\u043e \u043d\u0435\u0441\u043f\u0440\u043e\u0441\u0442\u0430, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Windows, \u044d\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e \u2014 \u0435\u0433\u043e \u043d\u0435\u043b\u044c\u0437\u044f \u0443\u0434\u0430\u043b\u0438\u0442\u044c. \u042d\u0442\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u0437\u0430\u0434\u0430\u0447\u0443 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432: \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u0438\u043c\u0435\u043d\u0438 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f \u043d\u0443\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c.<br \/>\nMesazhi \u00ebsht\u00eb se sistemi, q\u00eb m\u00eb kapte ransomware, kishte p\u00ebrdoruesin Administrator dhe fjal\u00ebkalimin Murmansk#9. Ende nuk jam i sigurt se si e hackuan at\u00eb sistem, sepse fillova t\u00eb monitoroj pik\u00ebrisht pas atij rasti, por mendoj se p\u00ebrb\u00ebrja \u2014 \u00ebsht\u00eb e mundshme.<br \/>\nPra, n\u00ebse p\u00ebrdoruesi Administrator nuk mund t\u00eb fshihet, \u00e7far\u00eb t\u00eb b\u00ebjm\u00eb? Mund t\u00eb rinovohet!<\/p>\n<p><\/p>\n<p>Rekomandimet nga ky pik\u00eb: <\/p>\n<p><\/p>\n<ul>\n<li>mos p\u00ebrdorni emrin e p\u00ebrdoruesit n\u00eb emrin e kompjuterit<\/li>\n<li>sigurohuni q\u00eb n\u00eb sistem nuk ka p\u00ebrdorues Administrator<\/li>\n<li>p\u00ebrdorni fjal\u00ebkalime t\u00eb sigurta<\/li>\n<\/ul>\n<p><\/p>\n<p>K\u00ebshtu, un\u00eb kam v\u00ebzhguar se disa Windows Server n\u00ebn kontrollin tim jan\u00eb sulmuar me bruteforce p\u00ebr disa vite tani, dhe pa sukses.<\/p>\n<p><\/p>\n<p>Si e di q\u00eb nuk ka pasur sukses?<br \/>\nSepse n\u00eb screenshotet m\u00eb sip\u00ebr \u00ebsht\u00eb e dukshme se ka logje t\u00eb hyrjeve t\u00eb suksesshme p\u00ebrmes RDP, n\u00eb t\u00eb cilat ka informacion:<\/p>\n<p><\/p>\n<ul>\n<li>nga cili IP<\/li>\n<li>nga cila kompjuter (hostname)<\/li>\n<li>emri i p\u00ebrdoruesit<\/li>\n<li>informacioni GeoIP<\/li>\n<\/ul>\n<p><\/p>\n<p>Dhe un\u00eb e shikoj rregullisht atje \u2014 nuk kam gjetur anomali.<\/p>\n<p><\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, n\u00ebse nga ndonj\u00eb IP sulmohet me intensitet t\u00eb ve\u00e7ant\u00eb, mund t\u00eb bllokoni IP-t\u00eb e ve\u00e7anta (ose subnet) k\u00ebshtu n\u00eb PowerShell:<\/p>\n<p><\/p>\n<pre><code class=\"powershell\">New-NetFirewallRule -Direction Inbound -DisplayName &quot;fail2ban&quot; -Name &quot;fail2ban&quot; -RemoteAddress (&quot;185.143.0.0\/16&quot;, &quot;185.153.0.0\/16&quot;, &quot;193.188.0.0\/16&quot;) -Action Block<\/code><\/pre>\n<p><\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, Elastic ka, p\u00ebrve\u00e7 Winlogbeat, gjithashtu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/beats\/auditbeat\">Auditbeat<\/a><\/noindex>, i cili mund t\u00eb monitoroj\u00eb skedar\u00ebt dhe proceset n\u00eb sistem. Ka gjithashtu nj\u00eb aplikacion SIEM (Menaxhimi i Informacionit dhe Ngjarjeve t\u00eb Siguris\u00eb) n\u00eb Kibana. Kam provuar t\u00eb dyja, por nuk pash\u00eb ndonj\u00eb dobi t\u00eb madhe \u2014 duket se Auditbeat do t\u00eb jet\u00eb m\u00eb i dobish\u00ebm p\u00ebr sistemet Linux, nd\u00ebrsa SIEM nuk m\u00eb ka treguar asgj\u00eb t\u00eb qart\u00eb deri tani.<\/p>\n<p><\/p>\n<p>Dhe rekomandimet p\u00ebrfundimtare:<\/p>\n<p><\/p>\n<ul>\n<li>b\u00ebni kopje rezerv\u00eb automatike rregullisht.<\/li>\n<li>instaloni n\u00eb koh\u00eb Patches t\u00eb Siguris\u00eb<\/li>\n<\/ul>\n<p>\n<b class=\"spoiler_title\">Bonus: lista e 50 p\u00ebrdoruesve q\u00eb jan\u00eb p\u00ebrdorur m\u00eb shpesh p\u00ebr p\u00ebrpjekjet e hyrjes p\u00ebrmes RDP<\/b><\/p>\n<p>&quot;user.name: Descending&quot;<br \/>\nNumri<\/p>\n<p>dfthd7c (hostname)<br \/>\n842941<\/p>\n<p>winsrv1 (hostname)<br \/>\n266525<\/p>\n<p>ADMINISTRATOR<br \/>\n180678<\/p>\n<p>administrator<br \/>\n163842<\/p>\n<p>Administrator<br \/>\n53541<\/p>\n<p>michael<br \/>\n23101<\/p>\n<p>server<br \/>\n21983<\/p>\n<p>steve<br \/>\n21936<\/p>\n<p>john<br \/>\n21927<\/p>\n<p>paul<br \/>\n21913<\/p>\n<p>reception<br \/>\n21909<\/p>\n<p>mike<br \/>\n21899<\/p>\n<p>office<br \/>\n21888<\/p>\n<p>scanner<br \/>\n21887<\/p>\n<p>scan<br \/>\n21867<\/p>\n<p>david<br \/>\n21865<\/p>\n<p>chris<br \/>\n21860<\/p>\n<p>owner<br \/>\n21855<\/p>\n<p>manager<br \/>\n21852<\/p>\n<p>administrateur<br \/>\n21841<\/p>\n<p>brian<br \/>\n21839<\/p>\n<p>administrador<br \/>\n21837<\/p>\n<p>mark<br \/>\n21824<\/p>\n<p>staff<br \/>\n21806<\/p>\n<p>ADMIN<br \/>\n12748<\/p>\n<p>ROOT<br \/>\n7772<\/p>\n<p>ADMINISTRADOR<br \/>\n7325<\/p>\n<p>SUPPORT<br \/>\n5577<\/p>\n<p>SOPORTE<br \/>\n5418<\/p>\n<p>USER<br \/>\n4558<\/p>\n<p>admin<br \/>\n2832<\/p>\n<p>TEST<br \/>\n1928<\/p>\n<p>MySql<br \/>\n1664<\/p>\n<p>Admin<br \/>\n1652<\/p>\n<p>GUEST<br \/>\n1322<\/p>\n<p>USER1<br \/>\n1179<\/p>\n<p>SCANNER<br \/>\n1121<\/p>\n<p>SCAN<br \/>\n1032<\/p>\n<p>ADMINISTRATEUR<br \/>\n842<\/p>\n<p>ADMIN1<br \/>\n525<\/p>\n<p>BACKUP<br \/>\n518<\/p>\n<p>MySqlAdmin<br \/>\n518<\/p>\n<p>RECEPTION<br \/>\n490<\/p>\n<p>USER2<br \/>\n466<\/p>\n<p>TEMP<br \/>\n452<\/p>\n<p>SQLADMIN<br \/>\n450<\/p>\n<p>USER3<br \/>\n441<\/p>\n<p>1<br \/>\n422<\/p>\n<p>MANAGER<br \/>\n418<\/p>\n<p>OWNER<br \/>\n410<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/487056\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0435\u0440\u0435\u0434\u043a\u043e \u044f \u0447\u0438\u0442\u0430\u043b \u043c\u043d\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0434\u0435\u0440\u0436\u0430\u0442\u044c RDP (Remote Desktop Protocol) \u043f\u043e\u0440\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e, \u0438 \u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a \u043d\u0435 \u043d\u0430\u0434\u043e. \u0410 \u043d\u0430\u0434\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a RDP \u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 VPN, \u0438\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 &quot;\u0431\u0435\u043b\u044b\u0445&quot; IP \u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u042f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e Windows Server \u0434\u043b\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0444\u0438\u0440\u043c, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043d\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0437\u0430\u0434\u0430\u0447\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":41230,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41229","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0435\u0440\u0435\u0434\u043a\u043e \u044f \u0447\u0438\u0442\u0430\u043b \u043c\u043d\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0434\u0435\u0440\u0436\u0430\u0442\u044c RDP (Remote Desktop Protocol) \u043f\u043e\u0440\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e, \u0438 \u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a \u043d\u0435 \u043d\u0430\u0434\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/opasno-li-derzhat-otkrytym-rdp-v-internete\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u043f\u0430\u0441\u043d\u043e \u043b\u0438 \u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c RDP \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0435\u0440\u0435\u0434\u043a\u043e \u044f \u0447\u0438\u0442\u0430\u043b \u043c\u043d\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0434\u0435\u0440\u0436\u0430\u0442\u044c RDP (Remote Desktop Protocol) \u043f\u043e\u0440\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e, \u0438 \u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a \u043d\u0435 \u043d\u0430\u0434\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/opasno-li-derzhat-otkrytym-rdp-v-internete\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-06T17:43:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-06T17:43:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47A \u00ebsht\u00eb e rrezikshme t\u00eb mbash RDP hapur n\u00eb Internet? | ProHoster","description":"Shpesh kam lexuar mendime se mbajtja e portit RDP (Remote Desktop Protocol) t\u00eb hapur n\u00eb internet \u00ebsht\u00eb mjaft e pasigurt, dhe nuk duhet t\u00eb b\u00ebhet k\u00ebshtu.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/opasno-li-derzhat-otkrytym-rdp-v-internete","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0430\u0441\u043d\u043e \u043b\u0438 \u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c RDP \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435? | ProHoster","og:description":"\u041d\u0435\u0440\u0435\u0434\u043a\u043e \u044f \u0447\u0438\u0442\u0430\u043b \u043c\u043d\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0434\u0435\u0440\u0436\u0430\u0442\u044c RDP (Remote Desktop Protocol) \u043f\u043e\u0440\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u2014 \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e, \u0438 \u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a \u043d\u0435 \u043d\u0430\u0434\u043e.","og:url":"https:\/\/prohoster.info\/sq\/blog\/opasno-li-derzhat-otkrytym-rdp-v-internete","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-06T17:43:00+00:00","article:modified_time":"2020-02-06T17:43:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41229","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:21:32","updated":"2022-09-28 03:38:38","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/41229","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=41229"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/41229\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/41230"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=41229"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=41229"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=41229"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}