01-26-2023, 07:27 PM
(This post was last modified: 04-06-2023, 01:10 PM by 1van.
Edit Reason: Ubačen IMG tag.
)
Cena: 14$
Na prodaju e-mail nalozi (OWA) na ems.rs
|
01-26-2023, 07:27 PM
(This post was last modified: 04-06-2023, 01:10 PM by 1van.
Edit Reason: Ubačen IMG tag.
)
Cena: 14$
04-06-2023, 03:24 PM
Usput imamo i da je jedna od IP adresa (91.201.138.4) koja pripada ems.rs kompromitovana: https://www.abuseipdb.com/check/91.201.138.4.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
04-07-2023, 11:09 AM
Upravo sam dobio info da prodaja ovih naloga još uvek traje.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
04-07-2023, 05:43 PM
(This post was last modified: 04-07-2023, 05:44 PM by 1van.
Edit Reason: Typo.
)
DNS zone za ems.rs: https://intodns.com/ems.rs, arhivirano: https://archive.ph/LsVlM
NS 1: 91.201.136.36 NS 2: 91.201.138.35 <- Iz ovog opsega, i u posedu JP Elektromreza Srbije Beograd, kompromitovana je IP 91.201.138.4: https://www.abuseipdb.com/check/91.201.138.4. NS 3: 13.93.12.34 <- Nije u Srbiji (Microsoft Azure) A: 49.12.166.11 <- Nije u Srbiji (Nemačka) MX 1: 91.201.138.76 MX 2: 91.201.138.77
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
04-24-2023, 08:58 AM
(This post was last modified: 04-24-2023, 08:59 AM by 1van.
Edit Reason: Typo.
)
Zanimljivo za IP 49.12.166.11 gde se hostuje ems.rs:
- Prijavljen za SPAM 2017/2018 godine: https://threatbook.io/ip/49.12.166.11 - Kompromitovan veb sajt na istoj IP, godina 2023: https://bezbedanbalkan.net/thread-645.html - Kompromitovan veb sajt na istoj IP, godina 2023: https://bezbedanbalkan.net/thread-437.html
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
08-04-2023, 03:32 PM
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
11-07-2023, 06:10 PM
(04-24-2023, 08:58 AM)1van Wrote: Zanimljivo za IP 49.12.166.11 gde se hostuje ems.rs: Zašto je ovo zanimljivo? ? U pitanju je shared hosting server.
11-07-2023, 06:38 PM
Upravo je to zanimljivo, zašto se sajt sa potencijalno osetljivim informacijama hostuje na (više puta kompromitovanom) shared hostingu?
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Kompromitovana su dva naloga u periodu od 3h. Koristimo LVE izolaciju tako da jedan korisnik ne može ni na koji način da "preskoči ogradu" i ugrozi druge korisnike. Da li imaš dokaze da je shared hosting odnosno server kompromitovan?
11-08-2023, 07:16 AM
Hvala na potvrdi kompromitacije hostova na serveru gde se nalazi i EMS.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
|
« Next Oldest | Next Newest »
|