月度归档:2017年11月

Fail2ban启动失败分析,secure没有日志分析

Fail2ban启动失败提示没有日志,查看配置文件/etc/fail2ban/jail.local,日志路径为/var/log/secure,发现secure不存在

通过搜索,安装syslog,发现定向到systemd已经安装,然后继续搜索,安装rsyslog,重启rsyslog,日志出来,重装Fail2ban,顺利

yum install rsyslog -y
service rsyslog restart

一键Fail2ban

项目https://github.com/FunctionClub/Fail2ban

安装

wget https://raw.githubusercontent.com/FunctionClub/Fail2ban/master/fail2ban.sh && bash fail2ban.sh

卸载

wget https://raw.githubusercontent.com/FunctionClub/Fail2ban/master/uninstall.sh && bash uninstall.sh

clear
#CheckIfRoot
[ $(id -u) != "0" ] && { echo "${CFAILURE}Error: You must be root to run this script${CEND}"; exit 1; }


#ReadSSHPort
[ -z "`grep ^Port /etc/ssh/sshd_config`" ] && ssh_port=22 || ssh_port=`grep ^Port /etc/ssh/sshd_config | awk '{print $2}'`

#CheckOS
if [ -n "$(grep 'Aliyun Linux release' /etc/issue)" -o -e /etc/redhat-release ]; then
  OS=CentOS
  [ -n "$(grep ' 7\.' /etc/redhat-release)" ] && CentOS_RHEL_version=7
  [ -n "$(grep ' 6\.' /etc/redhat-release)" -o -n "$(grep 'Aliyun Linux release6 15' /etc/issue)" ] && CentOS_RHEL_version=6
  [ -n "$(grep ' 5\.' /etc/redhat-release)" -o -n "$(grep 'Aliyun Linux release5' /etc/issue)" ] && CentOS_RHEL_version=5
elif [ -n "$(grep 'Amazon Linux AMI release' /etc/issue)" -o -e /etc/system-release ]; then
  OS=CentOS
  CentOS_RHEL_version=6
elif [ -n "$(grep 'bian' /etc/issue)" -o "$(lsb_release -is 2>/dev/null)" == "Debian" ]; then
  OS=Debian
  [ ! -e "$(which lsb_release)" ] && { apt-get -y update; apt-get -y install lsb-release; clear; }
  Debian_version=$(lsb_release -sr | awk -F. '{print $1}')
elif [ -n "$(grep 'Deepin' /etc/issue)" -o "$(lsb_release -is 2>/dev/null)" == "Deepin" ]; then
  OS=Debian
  [ ! -e "$(which lsb_release)" ] && { apt-get -y update; apt-get -y install lsb-release; clear; }
  Debian_version=$(lsb_release -sr | awk -F. '{print $1}')
# kali rolling
elif [ -n "$(grep 'Kali GNU/Linux Rolling' /etc/issue)" -o "$(lsb_release -is 2>/dev/null)" == "Kali" ]; then
  OS=Debian
  [ ! -e "$(which lsb_release)" ] && { apt-get -y update; apt-get -y install lsb-release; clear; }
  if [ -n "$(grep 'VERSION="2016.*"' /etc/os-release)" ]; then
    Debian_version=8
  else
    echo "${CFAILURE}Does not support this OS, Please contact the author! ${CEND}"
    kill -9 $$
  fi
elif [ -n "$(grep 'Ubuntu' /etc/issue)" -o "$(lsb_release -is 2>/dev/null)" == "Ubuntu" -o -n "$(grep 'Linux Mint' /etc/issue)" ]; then
  OS=Ubuntu
  [ ! -e "$(which lsb_release)" ] && { apt-get -y update; apt-get -y install lsb-release; clear; }
  Ubuntu_version=$(lsb_release -sr | awk -F. '{print $1}')
  [ -n "$(grep 'Linux Mint 18' /etc/issue)" ] && Ubuntu_version=16
elif [ -n "$(grep 'elementary' /etc/issue)" -o "$(lsb_release -is 2>/dev/null)" == 'elementary' ]; then
  OS=Ubuntu
  [ ! -e "$(which lsb_release)" ] && { apt-get -y update; apt-get -y install lsb-release; clear; }
  Ubuntu_version=16
else
  echo "${CFAILURE}Does not support this OS, Please contact the author! ${CEND}"
  kill -9 $$
fi
#Read Imformation From The User
echo "Welcome to Fail2ban!"
echo "--------------------"
echo "This Shell Script can protect your server from SSH attacks with the help of Fail2ban and iptables"
echo ""

while :; do echo
  read -p "Do you want to change your SSH Port? [y/n]: " IfChangeSSHPort
  if [ ${IfChangeSSHPort} == 'y' ]; then
    if [ -e "/etc/ssh/sshd_config" ];then
    [ -z "`grep ^Port /etc/ssh/sshd_config`" ] && ssh_port=22 || ssh_port=`grep ^Port /etc/ssh/sshd_config | awk '{print $2}'`
    while :; do echo
        read -p "Please input SSH port(Default: $ssh_port): " SSH_PORT
        [ -z "$SSH_PORT" ] && SSH_PORT=$ssh_port
        if [ $SSH_PORT -eq 22 >/dev/null 2>&1 -o $SSH_PORT -gt 1024 >/dev/null 2>&1 -a $SSH_PORT -lt 65535 >/dev/null 2>&1 ];then
            break
        else
            echo "${CWARNING}input error! Input range: 22,1025~65534${CEND}"
        fi
    done
    if [ -z "`grep ^Port /etc/ssh/sshd_config`" -a "$SSH_PORT" != '22' ];then
        sed -i "s@^#Port.*@&\nPort $SSH_PORT@" /etc/ssh/sshd_config
    elif [ -n "`grep ^Port /etc/ssh/sshd_config`" ];then
        sed -i "s@^Port.*@Port $SSH_PORT@" /etc/ssh/sshd_config
    fi
    fi
    break
  elif [ ${IfChangeSSHPort} == 'n' ]; then
    break
  else
    echo "${CWARNING}Input error! Please only input y or n!${CEND}"
  fi
done
ssh_port=$SSH_PORT
echo ""
	read -p "Input the maximun times for trying [2-10]:  " maxretry
echo ""
read -p "Input the lasting time for blocking a IP [hours]:  " bantime
if [ ${maxretry} == '' ]; then
	maxretry=3
fi
if [ ${bantime} == '' ];then
	bantime=24
fi
((bantime=$bantime*60*60))
#Install
if [ ${OS} == CentOS ]; then
  yum -y install epel-release
  yum -y install fail2ban
fi

if [ ${OS} == Ubuntu ] || [ ${OS} == Debian ];then
  apt-get -y update
  apt-get -y install fail2ban
fi

#Configure
rm -rf /etc/fail2ban/jail.local
touch /etc/fail2ban/jail.local
if [ ${OS} == CentOS ]; then
cat <<EOF >> /etc/fail2ban/jail.local
[DEFAULT]
ignoreip = 127.0.0.1
bantime = 86400
maxretry = 3
findtime = 1800

[ssh-iptables]
enabled = true
filter = sshd
action = iptables[name=SSH, port=ssh, protocol=tcp]
logpath = /var/log/secure
maxretry = $maxretry
findtime = 3600
bantime = $bantime
EOF
else
cat <<EOF >> /etc/fail2ban/jail.local
[DEFAULT]
ignoreip = 127.0.0.1
bantime = 86400
maxretry = $maxretry
findtime = 1800

[ssh-iptables]
enabled = true
filter = sshd
action = iptables[name=SSH, port=ssh, protocol=tcp]
logpath = /var/log/auth.log
maxretry = $maxretry
findtime = 3600
bantime = $bantime
EOF
fi

#Start
if [ ${OS} == CentOS ]; then
  if [ ${CentOS_RHEL_version} == 7 ]; then
    systemctl restart fail2ban
    systemctl enable fail2ban
  else
    service fail2ban restart
    chkconfig fail2ban on
  fi
fi

if [[ ${OS} =~ ^Ubuntu$|^Debian$ ]]; then
  service fail2ban restart
fi

#Finish
echo "Finish Installing ! Reboot the sshd now !"

if [ ${OS} == CentOS ]; then
  if [ ${CentOS_RHEL_version} == 7 ]; then
    systemctl restart sshd
  else
    service ssh restart
  fi
fi

if [[ ${OS} =~ ^Ubuntu$|^Debian$ ]]; then
  service ssh restart
fi
echo ""
echo 'Telegram Group: https://t.me/functionclub'
echo 'Google Puls: https://plus.google.com/communities/113154644036958487268'
echo 'Github: https://github.com/FunctionClub'
echo 'QQ Group:277717865'

echo "Fail2ban is now runing on this server now!"

clear
#CheckIfRoot
[ $(id -u) != "0" ] && { echo "${CFAILURE}Error: You must be root to run this script${CEND}"; exit 1; }


#ReadSSHPort
[ -z "`grep ^Port /etc/ssh/sshd_config`" ] && ssh_port=22 || ssh_port=`grep ^Port /etc/ssh/sshd_config | awk '{print $2}'`

#CheckOS
if [ -n "$(grep 'Aliyun Linux release' /etc/issue)" -o -e /etc/redhat-release ]; then
  OS=CentOS
  [ -n "$(grep ' 7\.' /etc/redhat-release)" ] && CentOS_RHEL_version=7
  [ -n "$(grep ' 6\.' /etc/redhat-release)" -o -n "$(grep 'Aliyun Linux release6 15' /etc/issue)" ] && CentOS_RHEL_version=6
  [ -n "$(grep ' 5\.' /etc/redhat-release)" -o -n "$(grep 'Aliyun Linux release5' /etc/issue)" ] && CentOS_RHEL_version=5
elif [ -n "$(grep 'Amazon Linux AMI release' /etc/issue)" -o -e /etc/system-release ]; then
  OS=CentOS
  CentOS_RHEL_version=6
elif [ -n "$(grep 'bian' /etc/issue)" -o "$(lsb_release -is 2>/dev/null)" == "Debian" ]; then
  OS=Debian
  [ ! -e "$(which lsb_release)" ] && { apt-get -y update; apt-get -y install lsb-release; clear; }
  Debian_version=$(lsb_release -sr | awk -F. '{print $1}')
elif [ -n "$(grep 'Deepin' /etc/issue)" -o "$(lsb_release -is 2>/dev/null)" == "Deepin" ]; then
  OS=Debian
  [ ! -e "$(which lsb_release)" ] && { apt-get -y update; apt-get -y install lsb-release; clear; }
  Debian_version=$(lsb_release -sr | awk -F. '{print $1}')
# kali rolling
elif [ -n "$(grep 'Kali GNU/Linux Rolling' /etc/issue)" -o "$(lsb_release -is 2>/dev/null)" == "Kali" ]; then
  OS=Debian
  [ ! -e "$(which lsb_release)" ] && { apt-get -y update; apt-get -y install lsb-release; clear; }
  if [ -n "$(grep 'VERSION="2016.*"' /etc/os-release)" ]; then
    Debian_version=8
  else
    echo "${CFAILURE}Does not support this OS, Please contact the author! ${CEND}"
    kill -9 $$
  fi
elif [ -n "$(grep 'Ubuntu' /etc/issue)" -o "$(lsb_release -is 2>/dev/null)" == "Ubuntu" -o -n "$(grep 'Linux Mint' /etc/issue)" ]; then
  OS=Ubuntu
  [ ! -e "$(which lsb_release)" ] && { apt-get -y update; apt-get -y install lsb-release; clear; }
  Ubuntu_version=$(lsb_release -sr | awk -F. '{print $1}')
  [ -n "$(grep 'Linux Mint 18' /etc/issue)" ] && Ubuntu_version=16
elif [ -n "$(grep 'elementary' /etc/issue)" -o "$(lsb_release -is 2>/dev/null)" == 'elementary' ]; then
  OS=Ubuntu
  [ ! -e "$(which lsb_release)" ] && { apt-get -y update; apt-get -y install lsb-release; clear; }
  Ubuntu_version=16
else
  echo "${CFAILURE}Does not support this OS, Please contact the author! ${CEND}"
  kill -9 $$
fi



if [ ${OS} == CentOS ]; then
  yum -y remove fail2ban
fi

if [ ${OS} == Ubuntu ] || [ ${OS} == Debian ];then
  apt-get -y remove fail2ban
fi

rm -rf /etc/fail2ban

方案2

wget "https://raw.githubusercontent.com/qinghuas/fail2ban/master/fail2ban.sh" && bash fail2ban.sh install
#from https://github.com/qinghuas/fail2ban
#!/bin/bash

CHECK_OS(){
	if [[ -f /etc/redhat-release ]];then
		release="centos"
	elif cat /etc/issue | grep -q -E -i "debian";then
		release="debian"
	elif cat /etc/issue | grep -q -E -i "ubuntu";then
		release="ubuntu"
	elif cat /etc/issue | grep -q -E -i "centos|red hat|redhat";then
		release="centos"
	elif cat /proc/version | grep -q -E -i "debian";then
		release="debian"
	elif cat /proc/version | grep -q -E -i "ubuntu";then
		release="ubuntu"
	elif cat /proc/version | grep -q -E -i "centos|red hat|redhat";then
		release="centos"
	fi
}

GET_SETTING_FAIL2BAN_INFO(){
	read -p "允许SSH登陆失败次数,默认10:" BLOCKING_THRESHOLD
	if [[ ${BLOCKING_THRESHOLD} = "" ]];then
		BLOCKING_THRESHOLD='10'
	fi
	
	read -p "SSH登陆失败次数超过${BLOCKING_THRESHOLD}次时,封禁时长(h),默认8760:" BLOCKING_TIME_H
	if [[ ${BLOCKING_TIME_H} = "" ]];then
		BLOCKING_TIME_H='8760'
	fi

	BLOCKING_TIME_S=$(expr ${BLOCKING_TIME_H} \* 3600)
}

INSTALL_FAIL2BAN(){
	if [ ! -e /etc/fail2ban/jail.local ];then
		CHECK_OS
		case "${release}" in
			centos)
				GET_SETTING_FAIL2BAN_INFO
				yum -y install epel-release
				yum -y install fail2ban;;
			debian|ubuntu)
				GET_SETTING_FAIL2BAN_INFO
				apt-get -y install fail2ban;;
			*)
				echo "请使用CentOS,Debian,Ubuntu系统.";;
		esac
	else
		echo "fail2ban已经安装了.";exit
	fi
}

REMOVE_FAIL2BAN(){
	if [ -e /etc/fail2ban/jail.local ];then
		CHECK_OS
		case "${release}" in
			centos)
				service fail2ban stop
				yum -y remove fail2ban
				rm -rf /etc/fail2ban/jail.local;;
			debian|ubuntu)
				service fail2ban stop
				apt-get -y remove fail2ban
				rm -rf /etc/fail2ban/jail.local;;
		esac
	else
		echo "fail2ban尚未安装.";exit
	fi
}

SETTING_FAIL2BAN(){
	CHECK_OS
	case "${release}" in
		centos)
			echo "[DEFAULT]
ignoreip = 127.0.0.1
bantime = 86400
maxretry = 3
findtime = 1800

[ssh-iptables]
enabled = true
filter = sshd
action = iptables[name=SSH, port=ssh, protocol=tcp]
logpath = /var/log/secure
maxretry = ${BLOCKING_THRESHOLD}
findtime = 3600
bantime = ${BLOCKING_TIME_S}" > /etc/fail2ban/jail.local
			if [ -e /usr/bin/systemctl ];then
				systemctl restart fail2ban
				systemctl enable fail2ban
				systemctl restart sshd
			else
				service fail2ban restart
				chkconfig fail2ban on
				service ssh restart
			fi;;
		debian|ubuntu)
			echo "[DEFAULT]
ignoreip = 127.0.0.1
bantime = 86400
maxretry = ${BLOCKING_THRESHOLD}
findtime = 1800

[ssh-iptables]
enabled = true
filter = sshd
action = iptables[name=SSH, port=ssh, protocol=tcp]
logpath = /var/log/auth.log
maxretry = ${BLOCKING_THRESHOLD}
findtime = 3600
bantime = ${BLOCKING_TIME_S}" > /etc/fail2ban/jail.local
			service fail2ban restart
			service ssh restart;;
	esac
}

VIEW_RUN_LOG(){
	CHECK_OS
	case "${release}" in
		centos)
			tail -f /var/log/secure;;
		debian|ubuntu)
			tail -f /var/log/auth.log;;
	esac
}

case "${1}" in
	install)
		INSTALL_FAIL2BAN
		SETTING_FAIL2BAN;;
	uninstall)
		REMOVE_FAIL2BAN;;
	status)
		echo -e "\033[41;37m【进程】\033[0m";ps aux | grep fail2ban
		echo;echo -e "\033[41;37m【状态】\033[0m";fail2ban-client ping
		echo;echo -e "\033[41;37m【Service】\033[0m";service fail2ban status;;
	blocklist|bl)
		if [ -e /etc/fail2ban/jail.local ];then
			fail2ban-client status ssh-iptables
		else
			echo "fail2ban尚未安装.";exit
		fi;;
	unlock|ul)
		if [ -e /etc/fail2ban/jail.local ];then
			if [[ "${2}" = "" ]];then
				read -p "请输入需要解封的IP:" UNLOCK_IP
				if [[ ${UNLOCK_IP} = "" ]];then
					echo "不允许空值,请重试.";exit
				else
					fail2ban-client set ssh-iptables unbanip ${UNLOCK_IP}
				fi
			else
				fail2ban-client set ssh-iptables unbanip ${2}
			fi
		else
			echo "fail2ban尚未安装.";exit
		fi;;
	more)
		echo "【参考文章】
https://www.fail2ban.org
https://linux.cn/article-5067-1.html

【更多命令】
fail2ban-client -h";;
	runlog)
		VIEW_RUN_LOG;;
	start)
		service fail2ban start;;
	stop)
		service fail2ban stop;;
	restart)
		service fail2ban restart;;
	*)
		echo "bash fail2ban.sh {install|uninstall|runlog|more}"
		echo "bash fail2ban.sh {start|stop|restart|status}"
		echo "bash fail2ban.sh {blocklist|unlock}";;
esac

#END

KMS Client Setup Keys/KMS客户端安装KEY 2019.4.19 Update

#https://docs.microsoft.com/en-us/windows-server/get-started/kmsclientkeys
Office 2016 Professional Plus
key=XQNVK-8JYDB-WJ9W3-YJ8YR-WFG99

Office 2016 Standard
key=JNRGM-WHDWX-FJJG3-K47QV-DRTFM

Office 2016 Mondo
key=HFTND-W9MK4-8B7MJ-B6C4G-XQBR2

Project 2016 Professional
key=YG9NW-3K39V-2T3HJ-93F3Q-G83KT

Project 2016 Standard
key=GNFHQ-F6YQM-KQDGJ-327XX-KQBVC

Visio 2016 Professional
key=PD3PC-RHNGV-FXJ29-8JK7D-RJRJK

Visio 2016 Standard
key=7WHWN-4T7MP-G96JF-G33KR-W8GF4

Access 2016
key=GNH9Y-D2J4T-FJHGG-QRVH7-QPFDW

Excel 2016
key=9C2PK-NWTVB-JMPW8-BFT28-7FTBF

OneNote 2016
key=DR92N-9HTF2-97XKM-XW2WJ-XW3J6

Outlook 2016
key=R69KK-NTPKF-7M3Q4-QYBHW-6MT9B

PowerPoint 2016
key=J7MQP-HNJ4Y-WJ7YM-PFYGF-BY6C6

Publisher 2016
key=F47MM-N3XJP-TQXJ9-BP99D-8K837

Skype for Business 2016
key=869NQ-FJ69K-466HW-QYCP2-DDBV6

Word 2016
key=WXY84-JN2Q9-RBCCQ-3Q3J3-3PFJ6

Project 2016 Professional XC2RVL KMS ClientC2R
key=WGT24-HCNMF-FQ7XH-6M8K7-DRTW9

Project 2016 Standard XC2RVL KMS ClientC2R
key=D8NRQ-JTYM3-7J2DX-646CT-6836M

Visio 2016 Professional XC2RVL KMS ClientC2R
key=69WXN-MBYV6-22PQG-3WGHK-RM6XC

Visio 2016 Standard XC2RVL KMS ClientC2R
key=NY48V-PPYYH-3F4PX-XJRKJ-W4423

Office 2016 MondoR Automation
key=DMTCJ-KNRKX-26982-JYCKT-P7KB6

Office 2013 Professional Plus key=YC7DK-G2NP3-2QQC3-J6H88-GVGXT Office 2013 Standard key=KBKQT-2NMXY-JJWGP-M62JB-92CD4 Project 2013 Professional key=FN8TT-7WMH6-2D4X9-M337T-2342K Project 2013 Standard key=6NTH3-CW976-3G3Y2-JK3TX-8QHTT Visio 2013 Professional key=C2FG9-N6J68-H8BTJ-BW3QX-RM3B3 Visio 2013 Standard key=J484Y-4NKBF-W2HMG-DBMJC-PGWR7 Access 2013 key=NG2JY-H4JBT-HQXYP-78QH9-4JM2D Excel 2013 key=VGPNG-Y7HQW-9RHP7-TKPV3-BG7GB InfoPath 2013 key=DKT8B-N7VXH-D963P-Q4PHY-F8894 Lync 2013 key=2MG3G-3BNTT-3MFW9-KDQW3-TCK7R OneNote 2013 key=TGN6P-8MMBC-37P2F-XHXXK-P34VW Outlook 2013 key=QPN8Q-BJBTJ-334K3-93TGY-2PMBT PowerPoint 2013 key=4NT99-8RJFH-Q2VDH-KYG2C-4RD4F Publisher 2013 key=PN2WF-29XG2-T9HJ7-JQPJR-FCXK4 Word 2013 key=6Q7VD-NX8JD-WJ2VH-88V73-4GBJ7 SharePoint Designer 2013 Retail8 key=GYJRG-NMYMF-VGBM4-T3QD4-842DW Mondo 2013 key=42QTK-RN8M7-J3C4G-BBGYM-88CYV
Office 2010 Professional Plus key=VYBBJ-TRJPB-QFQRF-QFT4D-H3GVB Office 2010 Standard key=V7QKV-4XVVR-XYV4D-F7DFM-8R6BM Office 2010 Starter Retail key=VXHHB-W7HBD-7M342-RJ7P8-CHBD6 Access 2010 key=V7Y44-9T38C-R2VJK-666HK-T7DDX Excel 2010 key=H62QG-HXVKF-PP4HP-66KMR-CW9BM SharePoint Workspace 2010 (Groove) key=QYYW6-QP4CB-MBV6G-HYMCJ-4T3J4 SharePoint Designer 2010 Retail key=H48K6-FB4Y6-P83GH-9J7XG-HDKKX InfoPath 2010 key=K96W8-67RPQ-62T9Y-J8FQJ-BT37T OneNote 2010 key=Q4Y4M-RHWJM-PY37F-MTKWH-D3XHX Outlook 2010 key=7YDC2-CWM8M-RRTJC-8MDVC-X3DWQ PowerPoint 2010 key=RC8FX-88JRY-3PF7C-X8P67-P4VTT Project 2010 Professional key=YGX6F-PGV49-PGW3J-9BTGG-VHKC6 Project 2010 Standard key=4HP3K-88W3F-W2K3D-6677X-F9PGB Publisher 2010 key=BFK7F-9MYHM-V68C7-DRQ66-83YTP Word 2010 key=HVHB3-C6FV7-KQX9W-YQG79-CRY7T Visio 2010 Premium key=D9DWC-HPYVV-JGF4P-BTWQB-WX8BJ Visio 2010 Professional key=7MCW8-VRQVK-G677T-PDJCM-Q8TCP Visio 2010 Standard key=767HD-QGMWX-8QTDB-9G3R2-KHFGJ Office 2010 Home and Business key=D6QFG-VBYP2-XQHM7-J97RH-VVRCK Office 2010 Mondo key=YBJTT-JG6MD-V9Q7P-DBKXJ-38W9R Office 2010 Mondo key=7TC2V-WXF6P-TD7RT-BQRXR-B8K32
Windows 10 Professional key=W269N-WFGWX-YVC9B-4J6C9-T83GX Windows 10 Professional N key=MH37W-N47XK-V7XM9-C7227-GCQG9 Windows 10 Professional Education key=6TP4R-GNPTD-KYYHQ-7B7DP-J447Y Windows 10 Professional Education N key=YVWGF-BXNMC-HTQYQ-CPQ99-66QFC Windows 10 Enterprise key=NPPR9-FWDCX-D2C8J-H872K-2YT43 Windows 10 Enterprise N key=DPH2V-TTNVB-4X9Q3-TJR4H-KHJW4 Windows 10 Professional for Advanced PCs key=NRG8B-VKK3Q-CXVCJ-9G2XF-6Q84J Windows 10 Professional for Advanced PCs N key=9FNHH-K3HBT-3W4TD-6383H-6XYWF Windows 10 Education key=NW6C2-QMPVW-D7KKK-3GKT6-VCFB2 Windows 10 Education N key=2WH4N-8QGBV-H22JP-CT43Q-MDWWJ Windows 10 Enterprise G key=YYVX9-NTFWV-6MDM3-9PT4T-4M68B Windows 10 Enterprise GN key=44RPN-FTY23-9VTTB-MP9BX-T84FV Windows 10 Home key=TX9XD-98N7V-6WMQ6-BX7FG-H8Q99 Windows 10 Home N key=3KHY7-WNT83-DGQKR-F7HPR-844BM Windows 10 Home Single Language key=7HNRX-D7KGG-3K4RQ-4WPJ4-YTDFH Windows 10 Home Country Specific key=PVMJN-6DFY6-9CCP6-7BKTT-D3WVR
Windows 10 LTSC 2019 Windows 10 Enterprise LTSC 2019     M7XTQ-FN8P6-TTKYV-9D4CC-J462D Windows 10 Enterprise N LTSC 2019     92NFX-8DJQP-P6BBQ-THF9C-7CG2H Windows 10 LTSB 2016 Windows 10 Enterprise LTSB 2016     DCPHK-NFMTC-H88MJ-PFHPY-QJ4BJ Windows 10 Enterprise N LTSB 2016     QFFDN-GRT3P-VKWWX-X7T3R-8B639 Windows 10 LTSB 2015 Windows 10 Enterprise 2015 LTSB     WNMTR-4C88C-JK8YV-HQ7T2-76DF9 Windows 10 Enterprise 2015 LTSB N     2F77B-TNFGY-69QQF-B8YKP-D69TJ
Windows Server 2016 Essentials key=JCKRF-N37P4-C2D82-9YXRT-4M63B Windows Server 2016 Standard key=WC2BQ-8NRM3-FDDYY-2BFGV-KHKQY Windows Server 2016 Datacenter key=CB7KF-BWN84-R7R2Y-793K2-8XDDG Windows Server 2016 Standard ACor key=PTXN8-JFHJM-4WC78-MPCBR-9W4KR Windows Server 2016 Datacenter ACor key=2HXDN-KRXHB-GPYC7-YCKFJ-7FVDG Windows Server 2016 Cloud Storage key=QN4C6-GBJD2-FB422-GHWJK-GJG2R Windows Server 2016 Azure Core key=VP34G-4NPPG-79JTQ-864T4-R3MQX Windows Server 2016 RDSH key=7NBT4-WGBQX-MP4H7-QXFF8-YP3KX Windows Server, version 1809 Windows Server Datacenter     6NMRW-2C8FM-D24W7-TQWMY-CWH2D Windows Server Standard     N2KJX-J94YW-TQVFB-DG9YT-724CC Windows Server, version 1803 Windows Server Datacenter     2HXDN-KRXHB-GPYC7-YCKFJ-7FVDG Windows Server Standard     PTXN8-JFHJM-4WC78-MPCBR-9W4KR Windows Server, version 1709 Windows Server Datacenter     6Y6KB-N82V8-D8CQV-23MJW-BWTG6 Windows Server Standard     DPCNP-XQFKJ-BJF7R-FRC8D-GF6G4 Windows Server 2019 Windows Server 2019 Datacenter     WMDGN-G9PQG-XVVXX-R3X43-63DFG Windows Server 2019 Standard     N69G4-B89J2-4G8F4-WWYCC-J464C Windows Server 2019 Essentials     WVDHN-86M7X-466P6-VHXV7-YY726
Windows 8.1 Professional key=GCRJD-8NW9H-F2CDX-CCM8D-9D6T9 Windows 8.1 Professional N key=HMCNV-VVBFX-7HMBH-CTY9B-B4FXY Windows 8.1 Enterprise key=MHF9N-XY6XB-WVXMC-BTDCT-MKKG7 Windows 8.1 Enterprise N key=TT4HM-HN7YT-62K67-RGRQJ-JFFXW Windows 8.1 Professional WMC key=789NJ-TQK6T-6XTH8-J39CJ-J8D3P Windows 8.1 Core key=M9Q9P-WNJJT-6PXPY-DWX8H-6XWKK Windows 8.1 Core N key=7B9N3-D94CG-YTVHR-QBPX3-RJP64 Windows 8.1 Core ARM key=XYTND-K6QKT-K2MRH-66RTM-43JKP Windows 8.1 Core Single Language key=BB6NG-PQ82V-VRDPW-8XVD2-V8P66 Windows 8.1 Core Country Specific key=NCTT7-2RGK8-WMHRF-RY7YQ-JTXG3 Windows 8.1 Embedded Industry key=NMMPB-38DD4-R2823-62W8D-VXKJB Windows 8.1 Embedded Industry Enterprise key=FNFKF-PWTVT-9RC8H-32HB2-JB34X Windows 8.1 Embedded Industry Automotive key=VHXM3-NR6FT-RY6RT-CK882-KW2CJ Windows 8.1 Core Connected (with Bing) key=3PY8R-QHNP9-W7XQD-G6DPH-3J2C9 Windows 8.1 Core Connected N (with Bing) key=Q6HTR-N24GM-PMJFP-69CD8-2GXKR Windows 8.1 Core Connected Single Language (with Bing) key=KF37N-VDV38-GRRTV-XH8X6-6F3BB Windows 8.1 Core Connected Country Specific (with Bing) key=R962J-37N87-9VVK2-WJ74P-XTMHR Windows 8.1 Professional Student key=MX3RK-9HNGX-K3QKC-6PJ3F-W8D7B Windows 8.1 Professional Student N key=TNFGH-2R6PB-8XM3K-QYHX2-J4296
Windows Server 2012 R2 Standard key=D2N9P-3P6X9-2R39C-7RTCD-MDVJX Windows Server 2012 R2 Datacenter key=W3GGN-FT8W3-Y4M27-J84CP-Q3VJ9 Windows Server 2012 R2 Essentials key=KNC87-3J2TX-XB4WP-VCPJV-M4FWM Windows Server 2012 R2 Cloud Storage key=3NPTF-33KPT-GGBPR-YX76B-39KDD
Windows 8 Professional key=NG4HW-VH26C-733KW-K6F98-J8CK4 Windows 8 Professional N key=XCVCF-2NXM9-723PB-MHCB7-2RYQQ Windows 8 Enterprise key=32JNW-9KQ84-P47T8-D8GGY-CWCK7 Windows 8 Enterprise N key=JMNMF-RHW7P-DMY6X-RF3DR-X2BQT Windows 8 Professional WMC key=GNBB8-YVD74-QJHX6-27H4K-8QHDG Windows 8 Core ARM key=DXHJF-N9KQX-MFPVR-GHGQK-Y7RKV Windows 8 Embedded Industry Professional key=RYXVT-BNQG7-VD29F-DBMRY-HT73M Windows 8 Embedded Industry Enterprise key=NKB3R-R2F8T-3XCDP-7Q2KW-XWYQ2
Windows Server 2012 / Windows 8 Core key=BN3D2-R7TKB-3YPBD-8DRP2-27GG4 Windows Server 2012 N / Windows 8 Core N key=8N2M2-HWPGY-7PGT9-HGDD8-GVGGY Windows Server 2012 Single Language / Windows 8 Core Single Language key=2WN2H-YGCQR-KFX6K-CD6TF-84YXQ Windows Server 2012 Country Specific / Windows 8 Core Country Specific key=4K36P-JN4VD-GDC6V-KDT89-DYFKP Windows Server 2012 Standard key=XC9B7-NBPP2-83J2H-RHMBY-92BT4 Windows Server 2012 MultiPoint Standard key=HM7DN-YVMH3-46JC3-XYTG7-CYQJJ Windows Server 2012 MultiPoint Premium key=XNH6W-2V9GX-RGJ4K-Y8X6F-QGJ2G Windows Server 2012 Datacenter key=48HP8-DN98B-MYWDG-T2DCC-8W83P
Windows 7 Professional key=FJ82H-XT6CR-J8D7P-XQJJ2-GPDD4 Windows 7 Professional N key=MRPKT-YTG23-K7D7T-X2JMM-QY7MG Windows 7 Professional E key=W82YF-2Q76Y-63HXB-FGJG9-GF7QX Windows 7 Enterprise key=33PXH-7Y6KF-2VJC9-XBBR8-HVTHH Windows 7 Enterprise N key=YDRBP-3D83W-TY26F-D46B2-XCKRJ Windows 7 Enterprise E key=C29WB-22CC8-VJ326-GHFJW-H9DH4
Windows Server 2008 R2 Web key=6TPJF-RBVHG-WBW2R-86QPH-6RTM4 Windows Server 2008 R2 HPC edition key=TT8MH-CG224-D3D7Q-498W2-9QCTX Windows Server 2008 R2 Standard key=YC6KT-GKW9T-YTKYR-T4X34-R7VHC Windows Server 2008 R2 Enterprise key=489J6-VHDMP-X63PK-3K798-CPX3Y Windows Server 2008 R2 Datacenter key=74YFP-3QFB3-KQT8W-PMXWJ-7M648 Windows Server 2008 R2 for Itanium-based Systems key=GT63C-RJFQ3-4GMB6-BRFB9-CB83V Windows MultiPoint Server 2010 key=736RG-XDKJK-V34PF-BHK87-J6X3K
Windows 7 Embedded POS Ready key=YBYF6-BHCR3-JPKRB-CDW7B-F9BK4 Windows 7 Embedded ThinPC key=73KQT-CD9G6-K7TQG-66MRP-CQ22C Windows 7 Embedded Standard OEM key=XGY72-BRBBT-FF8MH-2GG8H-W7KCW
Windows Vista Business key=YFKBB-PQJJV-G996G-VWGXY-2V3X8 Windows Vista Business N key=HMBQG-8H2RH-C77VX-27R82-VMQBT Windows Vista Enterprise key=VKK3X-68KWM-X2YGT-QR4M6-4BWMV Windows Vista Enterprise N key=VTC42-BM838-43QHV-84HX6-XJXKV
Windows Server 2008 Web key=WYR28-R7TFJ-3X2YQ-YCY4H-M249D Windows Server 2008 Standard key=TM24T-X9RMF-VWXK6-X8JC9-BFGM2