Muuji HN: Knock-Knock.net - Aragtida bots-yada garaacaya albaabka server-kayga

\u003ch2\u003e Muuji HN: Knock-Knock.net - Aragtida bots-ka garaaca albaabka server-kayga\u003c/h2\u003e \u003cp\u003e Warkan Hackers-ka ah "Show HN" boostada waxay soo bandhigaysaa mashruuc ama qalab hal abuur leh oo ay abuureen horumariyayaal bulshada. Soo gudbintu waxay ka dhigan tahay hal-abuurnimo farsamo iyo xalinta mushkiladda ficil ahaan.\u003c/p\u003e \u003ch3\u003e Qodobbada ugu muhiimsan ee Mashruuca\u003c/h3\u003e \u003cp\u003e Dhinacyada muhiimka ah ee ka dhigaya mashruucan mid xusid mudan:\u003c/p\u003e \u003cul\u003e \u003c\u003e Habka il furan ee kor u qaadida iskaashiga\u003c/li\u003e \u003c\u003e Xalka wax ku oolka ah ee dhibaatooyinka aduunka dhabta ah\u003c/li\u003e \u003c\u003e Hal-abuurnimada farsamada ee horumarinta software\u003c/li\u003e \u003c\u003e Ka-qaybgalka bulshada iyo horumarinta jawaab-celinta ay wado\u003c/li\u003e \u003c/ul\u003e \u003ch3\u003e Muhiimadda Farsamada\u003c/h3\u003e \u003cp\u003e Mashruuca noocan oo kale ah wuxuu muujinayaa awoodda horumarinta bulshadu wado iyo horumarinta joogtada ah ee xalalka farsamada iyada oo loo marayo dadaallo iskaashi.\u003c/p\u003e

Su'aalaha Inta badan La Isweydiiyo

Waa maxay Knock-Knock.net sideese u shaqeeyaa?

Knock-Knock.net waa aalad muuqaal ah oo la socota oo muujisa taraafikada bot-ka ee isku dayaya gelitaanka serfarkaaga wakhtiga dhabta ah. Waxay qabtaa isku dayga isku xirka - sida weerarrada xoogga ah ee SSH, sawirada dekedaha, iyo gurguurtayaal otomaatig ah - waxayna u beddeshaa xogta log ee ceeriin muraayado muuqaal ah oo dareen leh. Tani waxay u sahlaysaa maamulayaasha server-ka inay fahmaan qaababka khatarta ah oo ay ogaadaan dhaqdhaqaaqa shakiga leh iyaga oo aan gacanta ku kala saarin faylasha log.

Waa maxay sababta ay bots-yadu had iyo jeer isugu dayaan inay galaan server-kayga?

Bots otomaatig ah ayaa si joogto ah u baadha intarneedka, iyaga oo baadhaya seerfarka meelaha nugul, dekedaha furan, iyo aqoonsiga daciifka ah. Bots-yadani waxay caadi ahaan qayb ka yihiin botnets-yada waaweyn ee doonaya inay ka faa'iidaystaan ​​​​software-ka aan la daboolin, ereyada sirta ah ee caadiga ah, ama adeegyada aan habayn. Serfer kasta oo ku xidhan intarneedka waxa uu wajahayaa taraafikadan-ma aha mid gaar ah. Aaladaha sida Knock-Knock.net waxay kaa caawinayaan inaad sawirto hawshan si aad u qaado tallaabooyin difaac oo xog ogaal ah.

Sideen uga ilaalin karaa serfarkayga gelitaanka bot-ka ee aan la ogalayn?

Ka bilow aasaaska: dami gelida SSH-ku-salaysan sirta ah, isticmaal xaqiijinta furaha, beddel dekedaha caadiga ah, oo hirgeli fail2ban si aad u xannibto dembiilayaasha soo noqnoqda. Firewall-ka codsiga shabakadda iyo cusbooneysiinta amniga ee joogtada ah ayaa sidoo kale muhiim ah. Goobaha WordPress-ku-saleysan ama CMS-ga, aaladaha sida Mewayz waxay ku adkeeyaan adkaynta amniga guud ahaan 207 qeybood oo ka bilaabanaya $19/mo, iyagoo ku siinaya ilaalin ku dhisan adigoon lakab walba gacanta ku habeynin.

Ma u dhisi karaa qalab bot oo la mid ah seerfarkayga?

Dhab ahaantii. Dabeecadda isha furan ee mashruuca waxay la macno tahay inaad fargeeto oo aad la qabsan karto kaabayaashaaga. Waxaad u baahan doontaa inaad gasho diiwaanka server-kaaga, dhabarka dambe ee wax kala soocida, iyo maktabad aragga hore sida D3.js ama Chart.js. Haddii aad doorbidi lahayd inaad diirada saarto dhisitaanka goobtaada halkii aad ka isticmaali lahayd qalabka amniga, xalalka la maareeyay sida Mewayz ayaa wax ka qabta la socodka khatarta iyo adkaynta serverka ee ka baxsan sanduuqa 207 qaybood oo isku dhafan.