Ekipa, jel netko mozda koristio IP adresu 161.53.68.4?


-------- Forwarded Message --------
Subject:        RE: Upit - novi upit - CN-Abuse#073854 - prijava incidenta
[#3061611]
Date:   Mon, 9 Jan 2017 13:53:36 +0100
From:   Damir Josić <Damir.Josic@fer.hr>
To:     Damjan Miklić <Damjan.Miklic@fer.hr>
CC:     Tomislav Žganec <Tomislav.Zganec@fer.hr>, Stjepan Bogdan
<Stjepan.Bogdan@fer.hr>



Pozdrav,

Molio bi da provjerite da li je to jedna od adresa koju koristite
(AUSwlan), i u koliko je, da na računalu poduzmete mjere opisane u
nastavku maila, kako se incident ne bi ponovio.

Lijepi pozdrav,
/D//amir///

*From:*Tomislav Žganec
*Sent:* Monday, January 09, 2017 1:28 PM
*To:* Stjepan Bogdan
*Cc:* Damir Josić
*Subject:* FW: Upit - novi upit - CN-Abuse#073854 - prijava incidenta
[#3061611]

*From:*Sigurnost [mailto:sigurnost@fer.hr]
*Sent:* Monday, January 9, 2017 9:45 AM
*To:* Tomislav Žganec <Tomislav.Zganec@fer.hr
<mailto:Tomislav.Zganec@fer.hr>>
*Subject:* Upit - novi upit - CN-Abuse#073854 - prijava incidenta [#3061611]


Od: CARNet Abuse
Tema: CN-Abuse#073854 - prijava incidenta

Postovani, CARNet Abuse sluzba zaprimila je prijavu kojom je prijavljen
pokusaj neovlastenog pristupa racunalu i/ili mrezi. Molimo Vas da
poduzmete odgovarajuce akcije kako se incident ne bi ponovio te nas
e-mailom obavijestite o statusu rjesavanja problema. Ovom incidentu
pridijeljena je oznaka CN-Abuse#073854 te vas molimo da je navedete u
slucaju daljnje komunikacije vezane uz ovaj incident. Slijede podaci o
incidentu: Vrsta incidenta: pokusaj neovlastenog pristupa Izvor
incidenta: 161.53.68.4 Datum incidenta: 08 Jan 2017 Vrijeme incidenta:
11:25:00 Vremenska zona: UTC+01 Izvod iz log datoteke: Greetings, the
security team CSIRT-MU detected in the time 2017-01-08 11:25:00 +0100
involvement of the IP address 161.53.68.4 into security incident Port
scanning. Because of severity of the incident, the the IP address
161.53.68.4 was blocked for 7 days from accessing Masaryk University
network. The block was performed to protect the network and can be
lifted earlier only after the security issue that led to it is resolved.
Description of the incident: A computer use port scanning to contact
other computers in a network to find what services are remotely
accessible. Users cannot trigger the scanning by chance and rarely
experienced users do so intentionally. This activity most often means
that the computer is infected by a virus or other malicious code, or
runs some misconfigured service. Incident solution: We strongly recomend
to check the computer with up-to-date antivirus software and eventually
check configuration of network services. Details of the incident:
Detailed information about this incident can be found at this address:
http://reports.csirt.muni.cz/AD6E789C-D58E-11E6-9FDB-FFAED9264186/?lang=
EN S postovanjem, -- Abuse sluzba Hrvatska akademska i istrazivacka
mreza - CARNet Josipa Marohnica 5, 10000 Zagreb tel: +385 1 6661 655
eml: abuse@CARNet.hr <mailto:abuse@CARNet.hr> http://www.CARNet.hr/abuse
radno vrijeme: pon-pet 9:00-16:00