ืืื ืคืขืืจืืึทืจ ืืึธื ืืขืจ ืขืกืืจืฒึทืืขืจ ืงืจืืกืืืขื ืืึทืกืืฉืขืง ืคึฟืึทืจืขืคึฟื ืืืขืื ืึทื ืืื ืืขืจืขืกืึทื ืื ืึทืจืืืงื ืืืืฃ ืืฒึทื ืืืึธื ืืืื ื ืึธืืขื . ืคืื ืงืืจืก, ืืื ืืขืืืืจื ืืื ืืขืจืขืกืืจื ืืื ืืืึธืก ืืืึธืื ืคึผืึทืกืืจื ืืืื ืืขื ืืขืจื ืขื ืืื ืจืืคึผืืืื, ืึธืืขืจ ืืื ืืืงืจืืื ื. ืขืืืขืืข ืืืึธืื ืคืื ืืจืื-ืื-ืืืืืขืจ ืืึทืืืื ื ืคืื ืืื ืคึฟืึธืจืืึทืฆืืข, ื ืึธื ืึท ืคึผืึธืจ ืืขื ืฆื ืฆืืืจืืืื ืืขื ืึทืจืืืงื, ืืื ืืขืฉืึทืก ืืขื ืคืึธืจืฉืื ื, ืฉืืืขืกื ืืื ืคืึทืจืฉืืื ืคืืจืฉืืืืขืจืก ืคืื ืืื ืืืขืจ ืืขืืขืืฉืึทืคื, ืืขืจื ืึธื ืืขืจืงืืขืจื, ืืื ืืขืคึฟืื ืขื ืืขืจ. ืืืืข ืืื ืืขืจ ืื ืืชื...
ืื; ืืจ
ืงืืื ืกืคึผืขืฆืืขืืข ืืืฉืืจืื ืืขื ืขื ืืขื ืืฆื ืฆื ืืึทืืืขื ืืื ืคึฟืึธืจืืึทืฆืืข (ืืึธืืฉ ืขืืืขืืข ืืขื ืืฉื ืึทืืืืืืื ื ืืฆื ืื ืืขืืืข OpenVAS ืฆื ืืึทืื ืื ืคืึธืจืฉืื ื ืืขืจ ืืจืื ืืืง ืืื ืื ืคืึธืจืืึทืืืื). ืืื ืื ืืืืขืจืืืื ืคืื IPs ืืืึธืก ืคืึทืจืืื ืื ืฆื ืืืงืจืืื ื (ืืขืจ ืืืขืื ืืื ืขืก ืืื ืืขืืืขื ืืืฉืืืกื ืืืืืืขืจ), ืื ืกืืืืึทืฆืืข, ืืื ืืืื ืืืื ืื ื, ืืื ืืึทื ืฅ ืฉืืขืื (ืืื ืืืฉืืืื ืขืจืืขืจ ืืื ืืืึธืก ืืื ืืขืฉืขืขื ืืฉ ืืื ืขืกืืจืืึทื). ืงืืื ืคึผืจืืืื ืืึธืื ืฉืืื ืืขืืืื ืึธืืขืจ ืคึผืืึทื ื ืขื ืฆื ืืืืืจืข ืื ืืืกืงืึทืืืขืจื ืฉืคึผืืจืขืืืืืง ืกืขืจืืืขืจืก.
ืขืจืฉืืขืจ ืคืื ืึทืืข: ืืื ืงืขื ืขื ืืืจ ืืึทืงืืืขื ืึทืืข ืื IP ืึทืืจืขืกืขืก ืืืึธืก ืืขืืขืจื ืฆื ืึท ืืืืขืจ ืืึทื ื?
ืขืก ืืื ืคืืงืืืฉ ืืืืขืจ ืคึผืฉืื. IP ืึทืืจืขืกืขืก ืืขื ืขื ื ืืฉื ืืืฉืขื ืขืจืืืืึทื ืืืจื ืื ืืืื ื ืืื, ืึธืืขืจ ืึทืืึทืงืืืืื ืฆื ืขืก. ืืขืจืืืขืจ, ืขืก ืืื ืึท ืจืฉืืื (ืืื ืขืก ืืื ืขืคื ืืืขื) ืคืื ืึทืืข ืืขื ืืขืจ ืืื ืึทืืข ืื IP ืก ืืืึธืก ืืขืืขืจื ืฆื ืืื.
ืืขืืขืจ ืงืขื ืืื ืืขืืึธืื ืคืืืืขืจ ืขืก ืืจืขืคึผ ืืืงืจืืื ื IP2LOCATION-LITE-DB1.CSV> ukraine.csv
, ืึทืืึทืื ืืืจ ืฆื ืืจืขื ืืขื ืื ืจืฉืืื ืืื ืึท ืืขืจ ื ืืฆืืขื ืคืึธืจืขื.
ืืืงืจืืื ื ืึธืื ื ืึผืืขื ืืื ืคืืืข IPv4 ืึทืืจืขืกืขืก ืืื ืขืกืืจืืื, ืืขืจ ืืื 11 ืืืืืึธื 11 ืฆื ืืืื ืคึผืื ืืืขื (ืคึฟืึทืจ ืคืึทืจืืืืึทื, ืขืกืืจืืื ืืื 640).
ืืืื ืืืจ ืืึธื ื ืืฉื ืืืขืื ืฆื ืฉืคึผืืื ืืื IP ืึทืืจืขืกืขืก ืืื (ืืื ืืืจ ืืึธื ื ืืฉื!), ืืืจ ืงืขื ื ื ืืฆื ืื ืกืขืจืืืืก .
ืืขื ืขื ืืึธืจื ืงืืื ืึทื ืคึผืึทืืฉื Windows ืืืฉืื ืขื ืืื ืืืงืจืืื ื ืืืึธืก ืืึธืื ืืืจืขืงื ืึทืงืกืขืก ืฆื ืื ืืื ืืขืจื ืขื?
ืคืื ืงืืจืก, ืงืืื ืืืื ืืึทืืืืกืืืื ืืง ืืืงืจืืื ืืฉ ืืืขื ืขืคืขื ืขื ืึทืืึท ืึทืงืกืขืก ืฆื ืืืืขืจ ืงืึธืืคึผืืืืขืจืก. ืึธืืขืจ ืืืขื ืขืก ืืืื?
masscan -p445 --rate 300 -iL ukraine.ips -oG ukraine.445.scan && cat ukraine.445.scan | wc -l5669 Windows ืืืฉืื ืขื ืืื ืืืจืขืงื ืึทืงืกืขืก ืฆื ืื ื ืขืฅ ืืขื ืขื ืืขืคึฟืื ืขื (ืืื ืขืกืืจืืึทื ืขืก ืืขื ืขื ืืืืื 1273, ืึธืืขืจ ืืึธืก ืืื ืึท ืคึผืืึทืฅ).
ืึธืืคึผืก. ืืขื ืขื ืขืก ืงืืื ืฆืืืืฉื ืืื ืืืึธืก ืงืขื ืืืื ืึทืืึทืงืืจื ืืื ETHERNALBLUE ืขืงืกืคึผืืืืฅ, ืืืึธืก ืืขื ืขื ืืึทืืืืกื ืืื ื 2017? ืืื ืขืกืืจืฒึทื ืืื ื ืืฉื ืืขืืืขื ืงืืื ืืืื ืึทืืึท ืืึทืฉืื, ืืื ืืื ืืึธื ืืขืืึธืคึฟื, ืึทื ืืขื ืืืขื ืขืก ืืืื ื ืืฉื ืืขืคึฟืื ืขื ืืื ืืืงืจืึทืึดื ืข. ืฆืื ืืึทืืืืขืจื, ืขืก ืก ืงืืื ื ืืฆื. ืืืจ ืืขืคึฟืื ืขื 198 IP ืึทืืจืขืกืขืก ืืืึธืก ืืึธืื ื ืืฉื ืคืึทืจืืึทืื ืืขื "ืืึธื" ืืื ืืื.
ืื ืก, ืืืึธืก ืืื ืื ืืืคืงืืึทื ืคืื ืื ืงืื ืืื ืืึธื
ืืขื ืื ืืืขืื Windows. ืืึธืืืจ ืืขื ืืืึธืก ืืืจ ืืึธืื ืืื ืื ืก ืกืขืจืืืขืจืก, ืืืึธืก ืืขื ืขื ืึธืคึฟื-ืจืขืกืึธืืืืขืจืก ืืื ืงืขื ืขื ืืืื ืืขืืืืื ื ืคึฟืึทืจ DDoS ืื ืคืืื.
ืขืก ืึทืจืืขื ืขืคึผืขืก ืืื ืืึธืก. ืืขืจ ืึทืืึทืงืขืจ ืกืขื ืื ืึท ืงืืืื ืื ืก ืืขืื, ืืื ืืขืจ ืฉืคึผืืจืขืืืืืง ืกืขืจืืืขืจ ืจืืกืคึผืึทื ืื ืฆื ืื ืงืึธืจืื ืืื ืึท ืคึผืึทืงืึทื ืืืึธืก ืืื 100 ืืื ืืจืขืกืขืจืข. ืืื! ืคึฟืืจืืข ื ืขืืืืึธืจืงืก ืงืขื ืขื ืืขืฉืืืื ื ืืึทื ืืจืึธื ืคืื ืึทืืึท ืึท ืืึทื ื ืคืื ืืึทืื, ืืื ืึท ืืึทืคืึทืื ืจืืงืืืืืขืจื ืื ืืึทื ืืืืืื ืืืึธืก ืึท ืืึธืืขืจื ืกืืึทืจืืคืึธื ืข ืงืขื ืขื ืฆืืฉืืขืื. ืืื ืขืก ืืขื ืขื ืืขืืืขื ืึทืืึท ืึทืืึทืงืก ืืคืืื ืืืืฃ GitHub.
ืืื ืก ืืขื ืืืื ืขืก ืืขื ืขื ืึทืืึท ืกืขืจืืืขืจืก ืืื ืืืงืจืืื ื.
masscan -pU 53 -iL ukraine.ips -oG ukraine.53.scan && cat ukraine.53.scan | wc -lืืขืจ ืขืจืฉืืขืจ ืฉืจืื ืืื ืฆื ืืขืคึฟืื ืขื ืื ืืืึธืก ืืึธืื ืึธืคึฟื ืคึผืึธืจื 53. ืืื ืึท ืจืขืืืืืึทื, ืืืจ ืืึธืื ืึท ืจืฉืืื ืคืื 58 IP ืึทืืจืขืกืขืก, ืึธืืขืจ ืืึธืก ืืื ื ืืฉื ืืืื ืขื ืึทื ืึทืืข ืคืื โโืืื ืงืขื ืขื ืืืื ืืขืืืืื ื ืคึฟืึทืจ ืึท DDoS ืืึทืคืึทืื. ืื ืฆืืืืืืข ืคืึธืืขืจืื ื ืืืื ืืืื ืืืืขืื ื, ื ืืืืื ืืื ืืืื ืืืื ืึธืคึฟื-ืจืขืกืึธืืืืขืจ.
ืฆื ืืึธื ืืึธืก, ืืืจ ืงืขื ืขื ื ืืฆื ืึท ืคึผืฉืื ืืจืึธืื ืืึทืคึฟืขื ืืื ืืขื ืึทื ืืืจ ืงืขื ืขื "ืืจืึธืื" ืืจืึธืื + ืงืืจืฅ test.openresolver.com TXT @ip.of.dns.server. ืืืื ืืขืจ ืกืขืจืืืขืจ ืืึธื ืจืขืึทืืืจื ืืื ืึธืคึฟื-ืจืขืกืึธืืืืขืจ-ืืืืขืงืืึทื, ืขืก ืงืขื ืืืื ืืขืจืขืื ื ืืื ืึท ืคึผืึธืืขื ืฆืืขื ืฆืื ืคืื ืืึทืคืึทืื. ืขืคึฟืขื ืขื ืจืขืกืึธืืืืขืจืก ืืึทืื ืืขืขืจืขื 25%, ืืืึธืก ืืื ืคืึทืจืืืืึทืืืขื ืฆื ืขืกืืจืืึทื. ืืื ืืขืจืืื ืขื ืคืื ืืึทื ืฅ ื ืืืขืจ, ืืึธืก ืืื ืืืขืื 0,02% ืคืื ืึทืืข ืืืงืจืืื ืืฉ IPs.
ืืืึธืก ืึทื ืืขืจืฉ ืงืขื ืขื ืืืจ ืืขืคึฟืื ืขื ืืื ืืืงืจืืื ื?
ืฆืืคืจืืื ืืืจ ืืขืืขืื. ืขืก ืืื ืืจืื ืืขืจ (ืืื ืื ืืขืจืกื ืืฉืืงืึทืืืข ืคึฟืึทืจ ืืืจ ืคึผืขืจืกื ืึทืื) ืฆื ืงืืงื ืืื ืื IP ืืื ืึธืคึฟื ืคึผืึธืจื 80 ืืื ืืืึธืก ืืื ืคืืืกื ืืืง ืืืืฃ ืขืก.
ืืืขื ืกืขืจืืืขืจ
260 ืืืงืจืืื ืืฉ ืืคึผืก ืจืืกืคึผืึทื ื ืฆื ืคึผืึธืจื 849 (http). 80 ืึทืืจืขืกืขืก ืืึธืื ืจืืกืคึผืึทื ืืื ืืืจืืืืก (125 ืกืืึทืืืก) ืฆื ืึท ืคึผืฉืื ืืึทืงืืืขื ืืขืื ืึทื ืืืื ืืืขืืขืจืขืจ ืงืขื ืขื ืฉืืงื. ืื ืืืืขืจืืงืข ืืึธืื ืืขืฉืืคื ืืืื ืึธืืขืจ ืื ืืขืจื ืืขืืช. ืขืก ืืื ืืฉืืงืึทืืืข ืึทื 444 ืกืขืจืืืขืจืก ืืึธืื ืืจืืืก ืึท ืกืืึทืืืก ืคืื 200, ืืื ืื ืจืึทืจืึทืกื ืกืืึทืืืกืขืก ืืขื ืขื 853 (ืืขืื ืคึฟืึทืจ ืคึผืจืึทืงืกื ืืขืจืืืืืขื ืืฉ) ืืื ืื ืืึธืจ ื ืื-ื ืึธืจืืึทื 500 (IP ื ืื ืืื ืื "ืืืืึทืก ืจืฉืืื") ืคึฟืึทืจ ืืืื ืขื ืืคืขืจ.
ืึทืคึผืึทืืฉื ืืื ืืขืืึทืืจืข ืืึธืืื ืึทื ื - 114 ืกืขืจืืืขืจืก ื ืืฆื ืขืก. ืื ืึธืืืืึทืกื ืืืขืจืกืืข ืืื ืืขืคึฟืื ืขื ืืื ืืืงืจืืื ื ืืื 544, ืืืคืจืืื ืืืืฃ 1.3.29 ืืงืืืืขืจ 29 (!!!). nginx ืืื ืืื ืฆืืืืื ืึธืจื ืืื 2003 ืกืขืจืืืขืจืก.
11 ืกืขืจืืืขืจืก ื ืืฆื WinCE, ืืืึธืก ืืื ืืืคืจืืื ืืื 1996, ืืื ืืื ืคืึทืจืืืง ืคึผืึทืืืฉืื ื ืขืก ืืื 2013 (ืขืก ืืขื ืขื ืืืืื 4 ืคืื ืื ืืื ืขืกืืจืืึทื).
ืืขืจ HTTP/2 ืคึผืจืึธืืึธืงืึธื ื ืืฆื 5 ืกืขืจืืืขืจืก, HTTP/144 - 1.1, HTTP/256 - 836.
ืคึผืจืื ืืขืจืก... ืืืืื... ืคืืจืืืืก ื ืืฉื?
2 HP, 5 Epson ืืื 4 Canon, ืืืึธืก ืืขื ืขื ืฆืืืจืืืืขื ืคึฟืื ืื ื ืขืฅ, ืขืืืขืืข ืคืื โโโโืืื ืึธื ืืขืจืืืืืขื ืืฉ.
ืืืขืืงืึทื
ืขืก ืืื ื ืืฉื ืงืืื ื ืืึทืขืก ืึทื ืืื ืืืงืจืืื ื ืขืก ืืขื ืขื ืคืืืข ืืืขืืงืึทืืก ืืจืึธืืงืึทืกืืื ื ืืื ืฆื ืื ืืื ืืขืจื ืขื, ืืขืืืืื ืืืืฃ ืคืึทืจืฉืืื ืจืขืกืืจืกื. ืืื ืืื ืืกืืขืจ 75 ืงืึทืืขืจืึทืก ืืจืึธืืงืึทืกื ืืื ืฆื ืื ืืื ืืขืจื ืขื ืึธื ืงืืื ืฉืืฅ. ืืืจ ืงืขื ืขื ืงืืงื ืืืึท ืืื .
ืืืึธืก ืก ืืืืึทืืขืจ?
ืืืงืจืืื ื ืืื ืึท ืงืืืื ืืึทื ื, ืืื ืขืกืืจืืื, ืึธืืขืจ ืืื ืื ืืขืืืข ืคืจืืืืขืืขื ืืื ืืจืืืก ืืขื ืืขืจ ืืื ืื ืขืก ืกืขืงืืึธืจ. ืืืจ ืืึทืจืคึฟื ืฆื ืึทื ืืืืืงืืขื ืึท ืืขืกืขืจ ืคืืจืฉืืื ื ืคืื ืืืึธืก ืืื ืืืืขืจ ืืื ืืืึธืก ืืื ืืขืคืขืจืืขื, ืืื ืืืกืจืืื ืืึทื ืืึทืคืึทืงืืฉืขืจืขืจื ืืืื ืฆืืฉืืขืื ืืืืขืจ ืขืจืฉื ืงืึทื ืคืืืืขืจืืืฉืึทื ื ืคึฟืึทืจ ืืืืขืจ ืืืกืจืืื.
ืืื ืืขืจืฆื, ืืื ืงืืืึทืื ืคึผืึทืจืื ืขืจ ืงืึธืืคึผืึทื ืืขืก (), ืืืึธืก ืงืขื ืขื ืืขืืคึฟื ืืืจ ืขื ืฉืืจ ืื ืึธืจื ืืืขืืงืืึทื ืคืื ืืืื ืืืืืขื ืข IT ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ. ืืขืจ ืืืืึทืืขืจ ืฉืจืื ืืื ืคึผืืึทื ืฆื ืืึธื ืืื ืึธืคึผืฉืึทืฆื ืื ืืืืขืจืืืื ืคืื ืืืงืจืืื ืืฉ ืืืขืืกืืืขืก. ืฆื ื ืื ืืึทืฉืืืืขื!
ืืงืืจ: www.habr.com