01-26-2023, 10:27 PM
Cena: 14$
![[Image: attachment.php?aid=520]](https://bezbedanbalkan.net/attachment.php?aid=520)
Image(s)
Na prodaju e-mail nalozi (OWA) na ems.rs
04-06-2023, 06:24 PM
Usput imamo i da je jedna od IP adresa (91.201.138.4) koja pripada ems.rs kompromitovana: https://www.abuseipdb.com/check/91.201.138.4.
![[Image: attachment.php?aid=821]](https://bezbedanbalkan.net/attachment.php?aid=821)
Image(s)
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
04-07-2023, 02:09 PM
Upravo sam dobio info da prodaja ovih naloga još uvek traje.
![[Image: attachment.php?aid=824]](https://bezbedanbalkan.net/attachment.php?aid=824)
Image(s)
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
04-07-2023, 08:43 PM
DNS zone za ems.rs: https://intodns.com/ems.rs, arhivirano: https://archive.ph/LsVlM
NS 1: 91.201.136.36
NS 2: 91.201.138.35 <- Iz ovog opsega, i u posedu JP Elektromreza Srbije Beograd, kompromitovana je IP 91.201.138.4: https://www.abuseipdb.com/check/91.201.138.4.
NS 3: 13.93.12.34 <- Nije u Srbiji (Microsoft Azure)
A: 49.12.166.11 <- Nije u Srbiji (Nemačka)
MX 1: 91.201.138.76
MX 2: 91.201.138.77
NS 1: 91.201.136.36
NS 2: 91.201.138.35 <- Iz ovog opsega, i u posedu JP Elektromreza Srbije Beograd, kompromitovana je IP 91.201.138.4: https://www.abuseipdb.com/check/91.201.138.4.
NS 3: 13.93.12.34 <- Nije u Srbiji (Microsoft Azure)
A: 49.12.166.11 <- Nije u Srbiji (Nemačka)
MX 1: 91.201.138.76
MX 2: 91.201.138.77
Image(s)
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
04-24-2023, 11:58 AM
Zanimljivo za IP 49.12.166.11 gde se hostuje ems.rs:
- Prijavljen za SPAM 2017/2018 godine: https://threatbook.io/ip/49.12.166.11
- Kompromitovan veb sajt na istoj IP, godina 2023: https://bezbedanbalkan.net/thread-645.html
- Kompromitovan veb sajt na istoj IP, godina 2023: https://bezbedanbalkan.net/thread-437.html
- Prijavljen za SPAM 2017/2018 godine: https://threatbook.io/ip/49.12.166.11
- Kompromitovan veb sajt na istoj IP, godina 2023: https://bezbedanbalkan.net/thread-645.html
- Kompromitovan veb sajt na istoj IP, godina 2023: https://bezbedanbalkan.net/thread-437.html
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
08-04-2023, 06:32 PM
Image(s)
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
11-07-2023, 09:10 PM
(04-24-2023, 11:58 AM)1van Wrote: Zanimljivo za IP 49.12.166.11 gde se hostuje ems.rs:
- Prijavljen za SPAM 2017/2018 godine: https://threatbook.io/ip/49.12.166.11
- Kompromitovan veb sajt na istoj IP, godina 2023: https://bezbedanbalkan.net/thread-645.html
- Kompromitovan veb sajt na istoj IP, godina 2023: https://bezbedanbalkan.net/thread-437.html
Zašto je ovo zanimljivo? ?
U pitanju je shared hosting server.
11-07-2023, 09:38 PM
Upravo je to zanimljivo, zašto se sajt sa potencijalno osetljivim informacijama hostuje na (više puta kompromitovanom) shared hostingu?
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
11-07-2023, 09:43 PM
Kompromitovana su dva naloga u periodu od 3h. Koristimo LVE izolaciju tako da jedan korisnik ne može ni na koji način da "preskoči ogradu" i ugrozi druge korisnike. Da li imaš dokaze da je shared hosting odnosno server kompromitovan?
« Next Oldest | Next Newest »
Users browsing this thread: 1 Guest(s)