{"id":485,"date":"2026-09-30T07:48:44","date_gmt":"2026-09-30T07:48:44","guid":{"rendered":"http:\/\/www.cert.hr\/tjedni-izvjestaji\/zarazena-racunala\/"},"modified":"2026-11-04T17:12:55","modified_gmt":"2026-11-04T17:12:55","slug":"zarazena-racunala","status":"publish","type":"page","link":"https:\/\/cert.hr\/en\/tjedni-izvjestaji\/zarazena-racunala\/","title":{"rendered":"Zara\u017eena ra\u010dunala"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Nacionalni CERT svakog ponedjeljka priprema tjedne izvje\u0161taje o zara\u017eenim ra\u010dunalima i dostavlja ih vlasnicima IP adresnog prostora u kojem su zabilje\u017eena ra\u010dunala koja su dio botnet mre\u017ea. Izvje\u0161taji se dostavljaju u \u201c.zip\u201d formatu, a unutar njega se nalazi \u201c.csv\u201d datoteka s nazivom vlasnika adresnog prostora.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Datoteka je podijeljena u dvanaest stupaca, a opis svakog pojedinog stupca se nalazi u nastavku:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Stupac<\/th><th>Opis<\/th><\/tr><\/thead><tbody><tr><td><code>timestamp<\/code><\/td><td>datum, vrijeme i vremenska zona kad je aktivnost otkrivena<\/td><\/tr><tr><td><code>ip<\/code><\/td><td>IP adresa na kojoj je otkriven bot<\/td><\/tr><tr><td><code>port<\/code><\/td><td>broj porta na kojem je otkriven bot<\/td><\/tr><tr><td><code>hostname<\/code><\/td><td>hostname dobiven reverznim DNS upitom<\/td><\/tr><tr><td><code>source_as_name<\/code><\/td><td>naziv izvori\u0161nog autonomnog sustava (AS)<\/td><\/tr><tr><td><code>source_asn<\/code><\/td><td>izvori\u0161ni ASN<\/td><\/tr><tr><td><code>destination_ip<\/code><\/td><td>odredi\u0161na IP adresa prema kojoj je bot komunicirao<\/td><\/tr><tr><td><code>destination_port<\/code><\/td><td>port prema kojem je bot komunicirao<\/td><\/tr><tr><td><code>destination_hostname<\/code><\/td><td>hostname prema kojem je bot komunicirao<\/td><\/tr><tr><td><code>destination_url<\/code><\/td><td>url prema kojem je bot komunicirao<\/td><\/tr><tr><td><code>classification_type<\/code><\/td><td>tip klasifikacije bota<\/td><\/tr><tr><td><code>malware_name<\/code><\/td><td>naziv malvera<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Najva\u017eniji je drugi stupac pod oznakom \u201cIP\u201d u kojem se nalazi IP adresa ure\u0111aja na kojem je zabilje\u017eena komunikacija s upravlja\u010dkim poslu\u017eiteljem (C2, C&amp;C) botnet mre\u017ee. Va\u017eno je napomenuti kako se radi o javnoj IP adresi koja se ne mora podudarati s adresom ra\u010dunala, ona obi\u010dno posjeduju vlastitu privatnu IP adresu. Potrebno je obratiti pa\u017enju na prvi stupac \u201ctimestamp\u201d, koji predstavlja vrijeme kada je zara\u017eeno ra\u010dunalo komuniciralo s upravlja\u010dkim poslu\u017eiteljem botnet mre\u017ee. Va\u017ean podatak nalazi se u stupcu \u201cdestination_ip\u201d koji predstavlja IP adresu s kojom je zara\u017eeno ra\u010dunalo komuniciralo \u0161to mo\u017ee uvelike olak\u0161ati potragu za zara\u017eenim ra\u010dunalom unutar lokalne mre\u017ee. Kada se otkrije zara\u017eeno ra\u010dunalo, za daljnje postupanje odnosno \u010di\u0161\u0107enje ra\u010dunala od malicioznih datoteka potrebno je provjeriti o kojem se malwareu radi \u0161to je navedeno u posljednjem stupcu \u201cmalware_name\u201d.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a0d92f5a6&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a0d92f5a6\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2021\/04\/MicrosoftTeams-image-10-1024x511.png\" alt=\"Primjer sadr\u017eaja tjednog izvje\u0161taja o zara\u017eenim ra\u010dunalima\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>","protected":false},"excerpt":{"rendered":"<p>Izvje\u0161taj o ra\u010dunalima koja su dio botnet mre\u017ea.<\/p>","protected":false},"author":3,"featured_media":0,"parent":480,"menu_order":40,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"cert_hero":"","cert_deco":"","footnotes":""},"class_list":["post-485","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages\/485","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=485"}],"version-history":[{"count":2,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages\/485\/revisions"}],"predecessor-version":[{"id":1719,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages\/485\/revisions\/1719"}],"up":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages\/480"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=485"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}