{"id":483,"date":"2026-09-30T07:48:43","date_gmt":"2026-09-30T07:48:43","guid":{"rendered":"http:\/\/www.cert.hr\/tjedni-izvjestaji\/skeniranje\/"},"modified":"2026-11-04T17:12:57","modified_gmt":"2026-11-04T17:12:57","slug":"skeniranje","status":"publish","type":"page","link":"https:\/\/cert.hr\/en\/tjedni-izvjestaji\/skeniranje\/","title":{"rendered":"Skeniranje"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Nacionalni CERT svakog ponedjeljka priprema tjedne izvje\u0161taje o zara\u017eenim ra\u010dunalima ili poslu\u017eiteljima i dostavlja ih vlasnicima IP adresnog prostora u kojem je zabilje\u017eena ne\u017eeljena aktivnost, tj. neovla\u0161teno skeniranje tre\u0107ih strana (\u201cscanner\u201d) i\/ili neovla\u0161teni poku\u0161aji pristupa na druge servise (\u201cbrute-force\u201d). Izvje\u0161taji se dostavljaju u \u201c.zip\u201d formatu, a unutar njega se nalazi \u201c.csv\u201d datoteka s nazivom vlasnika adresnog prostora.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Datoteka je podijeljena u deset stupaca, a opis svakog pojedinog stupca se nalazi u nastavku:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Stupac<\/th><th>Opis<\/th><\/tr><\/thead><tbody><tr><td><code>timestamp<\/code><\/td><td>datum, vrijeme i vremenska zona zabilje\u017eene aktivnosti<\/td><\/tr><tr><td><code>source_ip<\/code><\/td><td>izvori\u0161na IP adresa otkrivene aktivnosti<\/td><\/tr><tr><td><code>source_port<\/code><\/td><td>izvori\u0161ni port<\/td><\/tr><tr><td><code>source_hostname<\/code><\/td><td>hostname izvori\u0161ta dobiven putem reverznog DNS-a<\/td><\/tr><tr><td><code>destination_ip<\/code><\/td><td>odredi\u0161na IP adresa<\/td><\/tr><tr><td><code>destination_port<\/code><\/td><td>odredi\u0161ni port<\/td><\/tr><tr><td><code>destination_hostname<\/code><\/td><td>hostname odredi\u0161ta dobiven putem reverznog DNS-a<\/td><\/tr><tr><td><code>source_as_name<\/code><\/td><td>ime izvori\u0161nog autonomnog sustava (AS)<\/td><\/tr><tr><td><code>source_asn<\/code><\/td><td>ASN izvori\u0161ta<\/td><\/tr><tr><td><code>classification_type<\/code><\/td><td>tip klasifikacije<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Najva\u017eniji je drugi stupac pod oznakom \u201cIP\u201d u kojem se nalazi IP adresa ure\u0111aja na kojem je zabilje\u017eena nedozvoljena aktivnost. Va\u017eno je napomenuti kako se radi o javnoj IP adresi koja se ne mora podudarati s adresom ra\u010dunala, ona obi\u010dno posjeduju vlastitu privatnu IP adresu. Potrebno je obratiti pa\u017enju na prvi stupac \u201ctimestamp\u201d, koji predstavlja vrijeme kada je zara\u017eeni ure\u0111aj vr\u0161io nedozvoljene aktivnosti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ako zaprimite ovakav tip izvje\u0161taja u najve\u0107em broju slu\u010dajeva se radi o ure\u0111aju (ra\u010dunalu ili poslu\u017eitelju) koji je zara\u017een nekom vrstom zlonamjernog programa putem kojeg napada\u010d vr\u0161i daljnje napade kao \u0161to su neovla\u0161teno skeniranje tre\u0107ih strana ili neovla\u0161teni poku\u0161aji pristupa na druge servise.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a0dbc406c&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a0dbc406c\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2021\/04\/MicrosoftTeams-image-9-1024x548.png\" alt=\"Primjer sadr\u017eaja tjednog izvje\u0161taja o skeniranju\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>","protected":false},"excerpt":{"rendered":"<p>Izvje\u0161taj o neovla\u0161tenom skeniranju tre\u0107ih strana i poku\u0161ajima pristupa drugim servisima.<\/p>","protected":false},"author":3,"featured_media":0,"parent":480,"menu_order":20,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"cert_hero":"","cert_deco":"","footnotes":""},"class_list":["post-483","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages\/483","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=483"}],"version-history":[{"count":2,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages\/483\/revisions"}],"predecessor-version":[{"id":1721,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages\/483\/revisions\/1721"}],"up":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages\/480"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=483"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}