Tilasin Kiinasta jonkun piraatti IP-kameran, joka ei toiminut, mutta asensi hirveän kasan haittaohjelmia. Tänään sain innovaation lisätä tietoturvaa verkkooni sen seurauksean. Ei mukamaas päässyt verkkoon, taas sellainen vitutuksen vitutus, että piti ihan selvitellä verkkoasioita. Olen huono verkkopuolen asioissa, olen vain koodari. Joskus vain on pakko mennä etsimään niitä bugeja (ötököitä) mukavuusaluuensa ulkopuolelle.
Pääsin tähän asti VPN-yhteyksien luonnilla suojautumaan.:
C:\WINDOWS\system32>tracert google.com
Tracing route to google.com [172.217.14.78]
over a maximum of 30 hops:
1 216 ms 207 ms 207 ms 10.111.170.1
2 216 ms 248 ms 242 ms 208.87.165.33
3 208 ms 211 ms 215 ms v715.core1.lax2.he.net [64.71.128.165]
4 205 ms 211 ms * google.as15169.any2ix.coresite.com [206.72.210.41]
5 209 ms 249 ms 250 ms 108.170.247.193
6 208 ms 218 ms 206 ms 74.125.251.39
7 217 ms 209 ms 224 ms lax17s38-in-f14.1e100.net [172.217.14.78]
Trace Complete
Edellinen liikenteen selvitin komentokehotteen kautta, toinen sitten selaimen päästä Kuvan 1. mukaisesti. Tiedä sitten, että mitä väliä sillä suunnakka sinällään on, mutta ehkä hyvä käydä reitit läpi molemmista suunnista. Olinkin tosi hyvä tekemään lyhimmän reitin algoritmeja yliopistossa, niin ihan kiinnostukesta kävin läpi. Myö algoritmeista tiesin, että vaikka A->B->C, niin se ei tarkoita, että liikenne menisi C->B->A. Siis ihan perus logiin syy ja seuraus.
Microsoft Windows [Version 10.0.17134.523]
(c) 2018 Microsoft Corporation. All rights reserved.
C:\WINDOWS\system32>nslookup tuppu.fi
Server: UnKnown
Address: 10.255.255.2
Non-authoritative answer:
Name: tuppu.fi
Addresses: 2001:41d0:301:8::26
137.74.48.119
C:\WINDOWS\system32>nslookup google.fi
Server: UnKnown
Address: 10.255.255.2
Non-authoritative answer:
Name: google.fi
Addresses: 2607:f8b0:4007:804::2003
172.217.11.163
C:\WINDOWS\system32>nslookup sofiadigital.com
Server: UnKnown
Address: 10.255.255.2
Non-authoritative answer:
Name: sofiadigital.com
Address: 212.226.118.8
C:\WINDOWS\system32>nslookup dns.google
Server: UnKnown
Address: 10.255.255.2
Non-authoritative answer:
Name: dns.google
Addresses: 2001:4860:4860::8844
2001:4860:4860::8888
8.8.8.8
8.8.4.4
C:\WINDOWS\system32>nslookup openDNS
Server: UnKnown
Address: 10.255.255.2
*** UnKnown can’t find openDNS: Non-existent domain
C:\WINDOWS\system32>ping 1.1.1.1
Pinging 1.1.1.1 with 32 bytes of data:
Reply from 1.1.1.1: bytes=32 time=203ms TTL=59
Reply from 1.1.1.1: bytes=32 time=223ms TTL=59
Reply from 1.1.1.1: bytes=32 time=210ms TTL=59
Reply from 1.1.1.1: bytes=32 time=317ms TTL=59
Ping statistics for 1.1.1.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 203ms, Maximum = 317ms, Average = 238ms
Ping statistics for 1.1.1.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 203ms, Maximum = 317ms, Average = 238ms
Control-C
^C
C:\WINDOWS\system32>^X
C:\WINDOWS\system32>nslookup 1.1.1.1
Server: UnKnown
Address: 10.255.255.2
Name: one.one.one.one
Address: 1.1.1.1
C:\WINDOWS\system32>ping isla.ns.cloudflare.com
Pinging isla.ns.cloudflare.com [173.245.58.119] with 32 bytes of data:
Reply from 173.245.58.119: bytes=32 time=211ms TTL=59
Request timed out.
Reply from 173.245.58.119: bytes=32 time=205ms TTL=59
Reply from 173.245.58.119: bytes=32 time=218ms TTL=59
Ping statistics for 173.245.58.119:
Packets: Sent = 4, Received = 3, Lost = 1 (25% loss),
Approximate round trip times in milli-seconds:
Minimum = 205ms, Maximum = 218ms, Average = 211ms
C:\WINDOWS\system32>ping isla.ns.cloudflare.com
Pinging isla.ns.cloudflare.com [2400:cb00:2049:1::adf5:3a77] with 32 bytes of data:
Reply from 2400:cb00:2049:1::adf5:3a77: time=30ms
Reply from 2400:cb00:2049:1::adf5:3a77: time=28ms
Reply from 2400:cb00:2049:1::adf5:3a77: time=27ms
Reply from 2400:cb00:2049:1::adf5:3a77: time=25ms
Ping statistics for 2400:cb00:2049:1::adf5:3a77:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 25ms, Maximum = 30ms, Average = 27ms
C:\WINDOWS\system32>
Microsoft Windows [Version 10.0.17134.523]
(c) 2018 Microsoft Corporation. All rights reserved.
C:\WINDOWS\system32>Tracing tuppu.fi
’Tracing’ is not recognized as an internal or external command,
operable program or batch file.
C:\WINDOWS\system32>tracert tuppu.fi
Tracing route to tuppu.fi [137.74.48.119]
over a maximum of 30 hops:
1 243 ms 221 ms 210 ms 10.111.170.1
2 238 ms 209 ms 216 ms 208.87.165.33
3 201 ms 211 ms 208 ms v715.core1.lax2.he.net [64.71.128.165]
4 * * * Request timed out.
5 280 ms 264 ms 329 ms be100-1366.ash-1-a9.va.us [178.32.135.156]
6 326 ms 272 ms 307 ms be100-1039.nwk-1-a9.nj.us [198.27.73.202]
7 346 ms 349 ms 344 ms be100-1295.ldn-1-a9.uk.eu [192.99.146.126]
8 363 ms 392 ms 365 ms be103.gra-g1-nc5.fr.eu [91.121.215.178]
9 * * * Request timed out.
10 374 ms 386 ms 436 ms be5.gra-iplb2-a70.fr.eu [37.187.232.187]
11 360 ms 348 ms 357 ms ip119.ip-137-74-48.eu [137.74.48.119]
Trace complete.
C:\WINDOWS\system32>ipconfig
Windows IP Configuration
Ethernet adapter Ethernet 2:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::68dc:f91f:7727:461a%9
IPv4 Address. . . . . . . . . . . : 10.111.170.52
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . :
Ethernet adapter Ethernet:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Wireless LAN adapter Local Area Connection* 1:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Wireless LAN adapter Local Area Connection* 3:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
PPP adapter IPVanish VPN (IKEv2):
Connection-specific DNS Suffix . :
IPv4 Address. . . . . . . . . . . : 172.20.153.67
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 0.0.0.0
Wireless LAN adapter Wi-Fi:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::8885:637d:7327:ad3%13
IPv4 Address. . . . . . . . . . . : 192.168.43.86
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.43.80
Ethernet adapter Bluetooth Network Connection:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
C:\WINDOWS\system32>tracert 8.8.8.8
Tracing route to google-public-dns-a.google.com [8.8.8.8]
over a maximum of 30 hops:
1 197 ms 197 ms 210 ms 10.111.170.1
2 210 ms 213 ms 193 ms 208.87.165.33
3 211 ms 192 ms 196 ms v715.core1.lax2.he.net [64.71.128.165]
4 196 ms 193 ms 207 ms google.as15169.any2ix.coresite.com [206.72.210.41]
5 203 ms 193 ms 196 ms 108.170.247.193
6 206 ms 190 ms 223 ms 108.170.238.15
7 214 ms 231 ms 195 ms google-public-dns-a.google.com [8.8.8.8]
Trace complete.
C:\WINDOWS\system32>Tracing 85.76.104.229
’Tracing’ is not recognized as an internal or external command,
operable program or batch file.
C:\WINDOWS\system32>tracert 85.76.104.229
Tracing route to 85-76-104-229-nat.elisa-mobile.fi [85.76.104.229]
over a maximum of 30 hops:
1 208 ms 205 ms 222 ms 10.111.170.1
2 195 ms 199 ms 209 ms 208.87.165.33
3 208 ms 193 ms 212 ms v715.core1.lax2.he.net [64.71.128.165]
4 220 ms 197 ms 199 ms 100ge2-2.core1.lax1.he.net [72.52.92.121]
5 253 ms 277 ms 244 ms 100ge12-1.core1.ash1.he.net [184.105.80.201]
6 259 ms 249 ms 249 ms 100ge5-1.core2.ash1.he.net [72.52.92.226]
7 253 ms 266 ms 251 ms 100ge8-1.core1.nyc5.he.net [184.105.81.149]
8 251 ms 272 ms 268 ms 100ge14-1.core1.nyc6.he.net [72.52.92.101]
9 367 ms 366 ms 371 ms nyiix.eunetip.net [198.32.160.41]
10 354 ms 371 ms 378 ms ge2-0-0-0.bbr2.hel1.fi.eunetip.net [213.192.184.81]
11 360 ms 359 ms 358 ms 213.192.186.82
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.
Trace complete.
C:\WINDOWS\system32>tracert -m 10000 85.76.104.229
-m is not a valid command option.
Usage: tracert [-d] [-h maximum_hops] [-j host-list] [-w timeout]
[-R] [-S srcaddr] [-4] [-6] target_name
Options:
-d Do not resolve addresses to hostnames.
-h maximum_hops Maximum number of hops to search for target.
-j host-list Loose source route along host-list (IPv4-only).
-w timeout Wait timeout milliseconds for each reply.
-R Trace round-trip path (IPv6-only).
-S srcaddr Source address to use (IPv6-only).
-4 Force using IPv4.
-6 Force using IPv6.
C:\WINDOWS\system32>tracert -h 10000 85.76.104.229
Bad value for option -h.
C:\WINDOWS\system32>tracert -h 100 85.76.104.229
Tracing route to 85-76-104-229-nat.elisa-mobile.fi [85.76.104.229]
over a maximum of 100 hops:
1 227 ms ^C
C:\WINDOWS\system32>tracert -h 1000 85.76.104.229
Bad value for option -h.
C:\WINDOWS\system32>tracert -h 999 85.76.104.229
Bad value for option -h.
C:\WINDOWS\system32>tracert -h 500 85.76.104.229
Bad value for option -h.
C:\WINDOWS\system32>tracert -h 200 85.76.104.229
Tracing route to 85-76-104-229-nat.elisa-mobile.fi [85.76.104.229]
over a maximum of 200 hops:
1 348 ms 270 ms 336 ms ^C
C:\WINDOWS\system32>tracert -h 300 85.76.104.229
Bad value for option -h.
C:\WINDOWS\system32>tracert -h 299 85.76.104.229
Bad value for option -h.
C:\WINDOWS\system32>tracert -h 270 85.76.104.229
Bad value for option -h.
C:\WINDOWS\system32>tracert -h 260 85.76.104.229
Bad value for option -h.
C:\WINDOWS\system32>tracert -h 256 85.76.104.229
Bad value for option -h.
C:\WINDOWS\system32>tracert -h 255 85.76.104.229
Tracing route to 85-76-104-229-nat.elisa-mobile.fi [85.76.104.229]
over a maximum of 255 hops:
1 205 ms 199 ms 204 ms 10.111.170.1
2 217 ms 226 ms 214 ms 208.87.165.33
3 207 ms 208 ms 215 ms v715.core1.lax2.he.net [64.71.128.165]
4 299 ms 210 ms 243 ms 100ge2-2.core1.lax1.he.net [72.52.92.121]
5 296 ms 318 ms 261 ms 100ge12-1.core1.ash1.he.net [184.105.80.201]
6 261 ms 264 ms 266 ms 100ge5-1.core2.ash1.he.net [72.52.92.226]
7 271 ms 272 ms 266 ms 100ge8-1.core1.nyc5.he.net [184.105.81.149]
8 296 ms 296 ms 298 ms 100ge14-1.core1.nyc6.he.net [72.52.92.101]
9 365 ms 362 ms 365 ms nyiix.eunetip.net [198.32.160.41]
10 381 ms 368 ms 367 ms ge2-0-0-0.bbr2.hel1.fi.eunetip.net [213.192.184.81]
11 376 ms 385 ms 371 ms 213.192.186.82
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.
31 * * * Request timed out.
32 * * * Request timed out.
33 * * * Request timed out.
34 * * * Request timed out.
35 * * * Request timed out.
36 * * * Request timed out.
37 * * * Request timed out.
38 * * * Request timed out.
39 * * * Request timed out.
40 * * * Request timed out.
41 * * * Request timed out.
42 * * * Request timed out.
43 * * * Request timed out.
44 * * * Request timed out.
45 * * * Request timed out.
46 * * * Request timed out.
47 * * * Request timed out.
48 * * * Request timed out.
49 * * * Request timed out.
50 * * * Request timed out.
51 * * * Request timed out.
52 * * * Request timed out.
53 * * * Request timed out.
54 * * * Request timed out.
55 * * * Request timed out.
56 * * * Request timed out.
57 * * * Request timed out.
58 * * * Request timed out.
59 * * * Request timed out.
60 * * * Request timed out.
61 * * * Request timed out.
62 * * * Request timed out.
63 * * * Request timed out.
64 * * * Request timed out.
65 * * * Request timed out.
66 * * * Request timed out.
67 * * * Request timed out.
68 * * * Request timed out.
69 * * * Request timed out.
70 * * * Request timed out.
71 * * * Request timed out.
72 * * * Request timed out.
73 * * * Request timed out.
74 * * * Request timed out.
75 * * * Request timed out.
76 * * * Request timed out.
77 * * * Request timed out.
78 * * * Request timed out.
79 * * * Request timed out.
80 * * * Request timed out.
81 * * * Request timed out.
82 * * * Request timed out.
83 * * * Request timed out.
84 * * * Request timed out.
85 * * * Request timed out.
86 * * * Request timed out.
87 * * * Request timed out.
88 * * * Request timed out.
89 * * * Request timed out.
90 * * * Request timed out.
91 * * * Request timed out.
92 * * * Request timed out.
93 * * * Request timed out.
94 * * * Request timed out.
95 * * * Request timed out.
96 * * * Request timed out.
97 * * * Request timed out.
98 * * * Request timed out.
99 * * * Request timed out.
100 * * * Request timed out.
101 * * * Request timed out.
102 * * * Request timed out.
103 * * * Request timed out.
104 * * * Request timed out.
105 * * * Request timed out.
106 * * * Request timed out.
107 * * * Request timed out.
108 * * * Request timed out.
109 * * * Request timed out.
110 * * * Request timed out.
111 * * * Request timed out.
112 * * * Request timed out.
113 * * * Request timed out.
114 * * * Request timed out.
115 * * * Request timed out.
116 * * * Request timed out.
117 * * * Request timed out.
118 * * * Request timed out.
119 * * * Request timed out.
120 * * * Request timed out.
121 * * * Request timed out.
122 * * * Request timed out.
123 * * * Request timed out.
124 * * * Request timed out.
125 * * * Request timed out.
126 * * * Request timed out.
127 * * * Request timed out.
128 * * * Request timed out.
129 * * * Request timed out.
130 * * * Request timed out.
131 * * * Request timed out.
132 * * * Request timed out.
133 * * * Request timed out.
134 * * * Request timed out.
135 * * * Request timed out.
136 * * * Request timed out.
137 * * * Request timed out.
138 * * * Request timed out.
139 * * * Request timed out.
140 * * * Request timed out.
141 * * * Request timed out.
142 * * * Request timed out.
143 * * * Request timed out.
144 * * * Request timed out.
145 * * * Request timed out.
146 * * * Request timed out.
147 * * * Request timed out.
148 * * * Request timed out.
149 * * * Request timed out.
150 * * * Request timed out.
151 * * * Request timed out.
152 * * * Request timed out.
153 * * * Request timed out.
154 * * * Request timed out.
155 * * * Request timed out.
156 * * * Request timed out.
157 * * * Request timed out.
158 * * * Request timed out.
159 * * * Request timed out.
160 * * * Request timed out.
161 * * * Request timed out.
162 * * * Request timed out.
163 * * * Request timed out.
164 * * * Request timed out.
165 * * * Request timed out.
166 * * * Request timed out.
167 * * * Request timed out.
168 * * * Request timed out.
169 * * * Request timed out.
170 * * * Request timed out.
171 * * * Request timed out.
172 * * * Request timed out.
173 * * * Request timed out.
174 * * * Request timed out.
175 * * * Request timed out.
176 * * * Request timed out.
177 * * * Request timed out.
178 * * * Request timed out.
179 * * * Request timed out.
180 * * * Request timed out.
181 * * * Request timed out.
182 * * * Request timed out.
183 * * * Request timed out.
184 * * * Request timed out.
185 * * * Request timed out.
186 * * * Request timed out.
187 * * * Request timed out.
188 * * * Request timed out.
189 * * * Request timed out.
190 * * * Request timed out.
191 * * * Request timed out.
192 * * * Request timed out.
193 * * * Request timed out.
194 * * * Request timed out.
195 * * * Request timed out.
196 * * * Request timed out.
197 * * * Request timed out.
198 * * * Request timed out.
199 * * * Request timed out.
200 * * * Request timed out.
201 * * * Request timed out.
202 * * * Request timed out.
203 * * * Request timed out.
204 * * * Request timed out.
205 * * * Request timed out.
206 * * * Request timed out.
207 * * * Request timed out.
208 * * * Request timed out.
209 * * * Request timed out.
210 * * * Request timed out.
211 * * * Request timed out.
212 * * * Request timed out.
213 * * * Request timed out.
214 * * * Request timed out.
215 * * * Request timed out.
216 * * * Request timed out.
217 * * * Request timed out.
218 * * * Request timed out.
219 * * * Request timed out.
220 * * * Request timed out.
221 * * * Request timed out.
222 * * * Request timed out.
223 * * * Request timed out.
224 * * * Request timed out.
225 * * * Request timed out.
226 * * * Request timed out.
227 * * * Request timed out.
228 * * * Request timed out.
229 * * * Request timed out.
230 * * * Request timed out.
231 * * * Request timed out.
232 * * * Request timed out.
233 * * * Request timed out.
234 * * * Request timed out.
235 * * * Request timed out.
236 * * * Request timed out.
237 * * * Request timed out.
238 * * * Request timed out.
239 * * * Request timed out.
240 * * * Request timed out.
241 * * * Request timed out.
242 * * * Request timed out.
243 * * * Request timed out.
244 * * * Request timed out.
245 * * * Request timed out.
246 * * * Request timed out.
247 * * * Request timed out.
248 * * * Request timed out.
249 * * * Request timed out.
250 * * * Request timed out.
251 * * * Request timed out.
252 * * * Request timed out.
253 * * * Request timed out.
254 * * * Request timed out.
255 * * * Request timed out.
Trace complete.
C:\WINDOWS\system32>tracert 10.255.255.2
Tracing route to 10.255.255.2 over a maximum of 30 hops
1 213 ms 210 ms 212 ms 10.255.255.2
Trace complete.
C:\WINDOWS\system32>ping 10.255.255.2
Pinging 10.255.255.2 with 32 bytes of data:
Reply from 10.255.255.2: bytes=32 time=210ms TTL=64
Reply from 10.255.255.2: bytes=32 time=209ms TTL=64
Reply from 10.255.255.2: bytes=32 time=211ms TTL=64
Reply from 10.255.255.2: bytes=32 time=213ms TTL=64
Ping statistics for 10.255.255.2:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 209ms, Maximum = 213ms, Average = 210ms
C:\WINDOWS\system32>
Nyt tämä sivusto on saavuttanut aivan uuden tason tietoturvassa kuten seuraavasta tiedosta voisi päätellä. Ei meinannut edes saada pois OVH:n DNS-asetuksia, piti itse käsin puukottaa ne kuntoon. Rekisteröidyin 1.1.1.1 sivustolle eli , jotta varmasti verkko-osoitteeni on oikeassa paikassa oikeissa tiedossa. [5]
”Microsoft Windows [Version 10.0.17134.523]
(c) 2018 Microsoft Corporation. All rights reserved.
C:\WINDOWS\system32>nslookup tuppu.fi
Server: one.one.one.one
Address: 1.1.1.1
Non-authoritative answer:
Name: tuppu.fi
Addresses: 2001:41d0:301:8::26
137.74.48.119
C:\WINDOWS\system32>”
No joo, ehkä tuli taas hieman foliohattuiltua? Meinasin vielä tuplata tuosta tämä nykyisen reitityksen. Nyt jo niin hidas, ettei edes tuppu.fi -blogi auennut tuolla setillä suoraa selaimessa. Sain sentäs kiertämään kaikki maapallon mantereet läpi. Osoitteet tietysti muuttuvia jatkuvasti – jopa liian dynaamisessti, mutta en halua niitä silti kertoa yleisen tieoturvan ylläpitämiseksi. 😀
Jos oma foliohattu-visio olisi mennyt loppuun asti, niin latenssi olisi ollut 10 sekunnin eli 10 000 ms luokkaa. Vähä sellaista Voyager-luotaimen ohjausta, joka on nyt mennyt aurinkokunnasta ulos. Kaikelaista paskaa sitä tulee twiikattua, piti ADSL:n toimimattomuudesta tehdä valitus alunperin asuntoyhtiölle.
Ärsyttää kun on kohta jo sellaiset turvajärjestelmät kotona, ettei edes supolta löydy vastaavia. Rahan kuluttaminen eniten kaduttaa, myös väsymys, kun rankka töyviikko jo takana.