Kompromitovan isi.ac.rs / pisi.co.rs
#1
Veb lokacija isi.ac.rs (Institut za savremenu istoriju) je korišćena za phishing napade. IP: 116.202.213.97, zemlja Nemačka, provajder: Hetzner Online.

VirusTotal: https://www.virustotal.com/gui/url/c8cc9.../detection
AbuseIPDB: https://www.abuseipdb.com/check/116.202.213.97

[Image: attachment.php?aid=694]

[Image: attachment.php?aid=695]


Attached Files Image(s)
       
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Reply
#2
Da se nastavim na ovu temu, i drugi povezani sajt je kompromitovan pisi.co.rs. IP: 116.202.213.97, zemlja Nemačka, provajder: Hetzner Online.

[Image: attachment.php?aid=809]


Attached Files Image(s)
   
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Reply
#3
Wink 
Nisam siguran ali mi deluje kao da koriste neki deljeni VPS na Htezneru, jer ima preko 600 registrovanih domena koji svi gađaju tu IP adresu....iz edicije "ko ti je ovo radio" i "ako može to malo jeftinije"...


Attached Files Image(s)
   
Reply
#4
U pravu si, i to je neko ko koristi usluge DreamWeb Hosting kompanije (host105.dwhost.net / dreamwebhosting.net): https://www.shodan.io/host/116.202.213.97.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Reply
#5
Da video sam i Shodan, kad me srčka nije strefila, ne smem ni da podelim. Confused Confused

Prosto neverovatno da sve hostuju na jednom serveru, razumem da klijenti ne žele da plaćaju dodatno IP adrese, ali brate razdvoj server...tuga.
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)