教您部署蜜罐系统 让攻击者自投落网

豆豆网   技术应用频道   2008年01月21日  【字号: 收藏本文

内容摘要:“知己知彼,百战不殆”,安全人员只有在掌握了攻击者的攻击技术、技巧、甚至心理和习惯等,才能更有效地维护互联网安全,蜜罐系统正是获得攻击手段的最好工具之一……

教您部署蜜罐系统 让攻击者自投落网

  例如,蜜罐中显示信息如下:

  (9:20:52) The IP 192.168.1.6 () tried invasion by telnet (CONNECTION )

  (9:21:31) The IP 192.168.1.6 () tried invasion by telnet (USER administrator)

  (9:21:53) The IP 192.168.1.6 () tried invasion by telnet (PASSWORD )

  (9:22:21) The IP 192.168.1.6 () tried invasion by telnet (USER admin)

  (9:22:42) The IP 192.168.1.6 () tried invasion by telnet (PASSWORD )

  (9:23:08) The IP 192.168.1.6 () tried invasion by telnet (USER root)

  (9:23:29) The IP 192.168.1.6 () tried invasion by telnet (PASSWORD )

  The invasor disconnected from the telnet server

  (9:23:58) The IP 192.168.1.6 () tried invasion by telnet (CONNECTION )

  (9:24:22) The IP 192.168.1.6 () tried invasion by telnet (USER root)

  (9:24:44) The IP 192.168.1.6 () tried invasion by telnet (PASSWORD root)

  (9:25:08) The IP 192.168.1.6 () tried invasion by telnet (dir)

  (9:25:41) The IP 192.168.1.6 () tried invasion by telnet (cd files)

  (9:26:20) The IP 192.168.1.6 () tried invasion by telnet (net user)

  (9:26:49) The IP 192.168.1.6 () tried invasion by telnet (net user)

  (9:27:38) The IP 192.168.1.6 () tried invasion by telnet (net user asp$ test168 /add)

  (9:28:32) The IP 192.168.1.6 () tried invasion by telnet (net u)

来源:IT专家网    作者:老五    责编:豆豆技术应用

正在加载评论...