Linux.Mirai.2252

Technical Information

Malicious functions:

Launches itself as a daemon

Network activity:

Awaits incoming connections on ports:

127.0.0.1:18236
0.0.0.0:23
0.0.0.0:22
0.0.0.0:80
0.0.0.0:8080

Establishes connection:

8.#.8.8:53
68.###.118.143:536

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

DNS ASK:

cn#.#oatnet.xyz

Sends data to the following servers:

68.###.118.143:536
14#.##.31.142:23
86.###.183.165:23
10#.##2.146.147:23
17.##.30.244:23
12#.##8.0.143:23
40.##.171.167:23
17#.##8.159.1:23
10#.#5.64.19:23
41.###.159.104:23
74.##.52.14:23
52.###.202.95:23
20#.##.44.158:23
47.###.69.145:23
40.#.183.133:23
80.###.105.241:23
64.###.109.231:23
85.##.27.235:23
53.###.97.250:23
20#.##8.45.89:23
12#.##.97.124:23
50.##4.89.61:23
16#.##4.72.94:23
15#.##.94.133:23
13#.##9.240.124:23
12#.##2.192.82:23
17#.##.253.119:23
20#.##4.122.162:23
17#.##.100.39:23
46.###.107.81:23
19#.##7.229.72:23
39.##.167.253:23
25.#.242.186:23
14#.##4.146.217:23
31.###.29.200:23
15#.##4.69.222:23
21#.##1.67.180:23
10#.##5.190.116:23
38.##.231.29:23
9.###.130.113:23
18#.##6.134.222:23
21#.##.148.74:23
51.##2.90.61:23
17#.##6.209.96:23
88.###.210.163:23
60.##.20.102:23
67.###.74.104:23
21#.##6.120.70:23
35.###.231.115:23
65.##8.254.8:23
18.##.93.159:23
50.###.112.89:23
76.##.122.198:23
58.##4.42.26:23
38.##.58.36:23
42.###.101.129:23
63.##.250.55:23
97.##1.43.48:23
22#.##8.14.146:23
12#.##3.133.152:23
19#.#9.64.0:23
18#.##2.26.173:23
76.###.241.207:23
11#.##3.89.187:23
75.##4.25.83:23
18#.##3.242.51:23
37.###.42.204:23
66.##.20.152:23
51.##.33.227:23
80.###.129.146:23
15#.##2.106.106:23
75.##.147.165:23
82.##.137.6:23
49.##.254.131:23
17#.#28.47.3:23
60.##.94.68:23
53.###.193.235:23
13#.##2.193.47:23
43.##.89.231:23
17#.##8.44.30:23
51.##.157.201:23
11#.##3.40.207:23
14#.##.104.119:23
13#.##4.25.110:23
32.###.232.87:23
10#.##.171.214:23
17.##.166.154:23
15#.##.244.42:23
20#.##9.153.0:23
42.##.31.203:23
21#.##.254.82:23
95.###.223.157:23
19#.##1.96.19:23
18#.##5.241.36:23
11#.#.125.225:23
62.##0.16.27:23
13#.##9.171.207:23
35.###.95.163:23
14.###.198.113:23
20#.##.238.142:23
21#.##2.76.253:23
15#.##.226.230:23
84.#.41.169:23
12#.##2.11.212:23
20#.##2.187.208:23
14.##.94.244:23
85.##.27.207:23
19#.##7.238.108:23
11#.##1.110.76:23
18#.##6.84.248:23
12#.##.244.178:23
48.##.111.216:23
16#.##.107.100:23
85.###.197.217:23
14#.##9.80.66:23
11#.##.179.119:23
13#.##.57.220:23
21#.##9.231.193:23
95.##.169.178:23
20#.##.156.181:23
27.###.219.238:23
40.##.111.209:23
13#.##.207.232:23
69.##.171.16:23
11#.##1.248.234:23
38.##.108.242:23
18#.#23.8.43:23
17#.##.87.110:23
16#.##3.213.3:23
13#.#3.79.84:23
91.##.232.247:23
15#.#.160.153:23
14#.##.103.72:23
41.##.169.47:23
11#.##2.69.176:23
38.##.159.23:23
8.##.102.232:23
18.###.173.229:23
18#.##.123.203:23
16#.##.163.99:23
11#.##.18.205:23
16#.##3.220.56:23
18#.##.71.166:23
69.###.105.232:23
78.###.38.199:23
64.###.100.168:23
10#.##.224.166:23
19#.##.192.213:23
31.##.11.114:23
74.###.183.136:23
16#.##9.184.200:23
19#.##.224.72:23
83.##2.15.81:23
10#.##3.226.109:23
79.###.162.212:23
27.##.149.107:23
27.###.156.24:23
11#.##3.158.7:23
13#.##1.28.63:23
9.###.138.22:23
18#.##6.236.114:23
16#.##.210.174:23
9.##.226.181:23
13#.##4.40.159:23
22#.##.192.180:23
20#.##3.224.200:23
13#.#6.65.9:23
12.###.61.143:23
18#.##.86.140:23
19#.##6.155.93:23
20#.##0.52.79:23
96.##9.47.43:23
11#.##.172.22:23
97.###.221.91:23
11#.##5.239.185:23
10#.##3.193.124:23
11#.##8.129.208:23
14#.##.117.242:23
18#.#.100.60:23
13.###.96.158:23
16#.##4.168.59:23
77.###.211.227:23
70.#.146.207:23
13#.##3.124.43:23
16#.##9.163.175:23
11#.##.157.38:23
15#.#.230.116:23
20#.#.6.166:23
2.###.124.167:23
11#.##0.196.167:23
12#.##9.193.67:23
74.###.48.101:23
10#.##0.18.238:23
19#.##5.29.39:23
59.###.250.244:23
19#.##.129.142:23
97.##4.70.35:23
14#.##.126.19:23
12.###.124.85:23
94.##0.38.26:23
91.###.135.26:23
12#.##0.61.185:23
54.###.123.102:23
15#.##7.100.243:23
17#.##1.69.219:23
13#.##2.101.158:23
16#.##3.254.239:23
38.###.223.219:23
19#.##.205.244:23
10#.##6.60.137:23
10#.##.152.177:23
13#.##.196.109:23
99.##.110.49:23
18#.##4.184.172:23
21#.##5.18.77:23
20#.#7.73.62:23
19#.##1.241.143:23
21#.##1.152.181:23
1.###.118.87:23
18#.#3.28.35:23
16#.##3.133.139:23
18#.##5.180.235:23
14#.#.167.225:23
25.###.33.210:23
99.###.131.148:23
20#.##.121.172:23
20#.##0.161.44:23
11#.##5.201.149:23
71.###.163.69:23
99.#.161.58:23
95.##4.46.91:23
32.##.159.210:23
70.###.101.139:23
18#.##.115.62:23
96.##5.94.22:23
13#.##8.237.58:23
11#.##4.17.202:23
31.###.131.16:23
18#.##.12.104:23
13#.##.182.180:23
11#.##6.202.136:23
17#.##1.174.27:23
18#.##.242.170:23
11#.##.253.218:23
12#.##.44.148:23
61.###.204.206:23
18#.##1.95.50:23
21#.##9.243.191:23
24.###.210.255:23
13#.##5.27.174:23
20#.##1.68.128:23
15#.#5.63.79:23
12#.##3.102.145:23
15#.##6.245.40:23
95.###.203.178:23
58.###.30.193:23
14#.##4.243.63:23
49.###.91.166:23
10#.##5.90.73:23
18#.##.178.121:23
15#.##7.141.12:23
15#.##6.81.32:23
11#.##1.212.16:23
11#.##7.184.120:23
16#.##6.13.61:23
13#.##2.143.242:23
13#.##.237.48:23
10#.#.190.17:23
82.###.63.225:23
90.#.210.207:23
59.###.205.85:23
67.##.221.157:23
14#.#3.61.59:23
13#.##1.71.176:23
5.##.116.17:23
14.##.193.153:23
13#.##0.82.125:23
93.###.252.224:23
60.###.153.239:23
14#.#.37.121:23
21#.#7.3.34:23
31.###.185.18:23
67.###.129.167:23
11#.##9.172.177:23
95.###.171.175:23
10#.##0.0.104:23
16#.##0.53.89:23
39.###.196.141:23
16#.##2.142.188:23
19#.##1.193.236:23
79.###.22.217:23
18#.##3.16.210:23
10#.##4.112.119:23
10#.##4.88.10:23
22#.#3.17.67:23
54.###.235.72:23
36.###.248.182:23
2.##.5.198:23
13#.##3.225.135:23
12#.##8.104.213:23
14#.##.248.174:23
17.##.164.146:23
14#.##4.51.165:23
68.##.138.185:23
12#.##5.13.242:23
20#.##.41.166:23
15#.##.180.15:23
18#.##.211.180:23
15#.#3.155.6:23
32.##.194.217:23
17#.##.244.123:23
35.###.225.211:23
13#.##7.232.69:23
16#.##6.123.223:23
18#.##9.30.131:23
15#.##2.220.120:23
18#.##7.60.51:23
15#.##.26.240:23
57.###.197.176:23
10#.##7.127.244:23
22#.##5.134.139:23
38.##.133.82:23
19#.#.4.219:23
18#.##.134.173:23
16#.##0.159.113:23
88.###.111.141:23
12#.#8.8.87:23
22#.##.124.160:23
14#.##.23.100:23
90.###.131.251:23
44.###.241.155:23
15#.##6.58.53:23
17.###.124.115:23
53.##.182.112:23
89.###.198.220:23
20#.##1.255.174:23
19#.#2.1.197:23
50.###.214.187:23
20.###.193.184:23
89.##.98.115:23
1.###.47.41:23
80.##.34.11:23
36.##.66.199:23
37.###.16.163:23
20#.##5.155.49:23
12#.##4.115.247:23
13#.##.112.241:23
21#.##3.68.114:23
66.###.141.80:23
20#.##.153.129:23
14.###.108.72:23
13#.##.126.156:23
13#.#1.88.61:23
69.###.101.70:23
12#.##.236.221:23
60.###.128.128:23
10#.##1.153.63:23
11#.##.56.129:23
19#.##.52.225:23
9.##.156.102:23
11#.##9.201.79:23
42.##.226.247:23
31.##1.8.134:23
14#.##1.255.139:23
71.##.207.79:23
21#.##.240.66:23
17#.#.165.19:23
17.###.131.79:23
62.###.193.229:23
12#.##.250.149:23
15#.##4.172.207:23
14#.##.223.117:23
11#.#.142.30:23
50.###.191.193:23
19#.##.177.255:23
12#.##1.10.70:23
90.###.96.241:23
78.###.202.18:23
16#.##2.71.38:23
11#.##1.73.239:23
18#.##9.86.28:23
16#.##7.8.237:23
71.##0.76.38:23
86.##3.8.96:23
11#.##0.44.105:23
13#.##6.252.87:23
11#.##.236.193:23
69.###.32.193:23
10#.##.109.35:23
13#.##6.226.232:23
16#.##9.73.213:23
22#.##4.21.154:23
79.###.240.245:23
11#.##.20.220:23
83.###.102.180:23
66.##2.99.34:23
51.###.12.156:23
19#.##7.15.77:23
20#.##1.26.33:23
16#.##5.55.44:23
14#.##7.126.113:23
19#.##4.228.182:23
51.##.25.198:23
38.##.136.130:23
11#.##5.86.53:23
14#.##6.136.1:23
49.##7.96.94:23
43.##.122.92:23
10#.##9.132.91:23
46.##.232.152:23
13#.##.192.249:23
14#.##5.165.62:23
19#.##2.38.166:23
20#.##5.58.182:23
68.###.26.220:23
76.###.213.35:23
12#.#53.70.9:23
61.##.48.30:23
19#.##5.140.129:23
38.##9.21.75:23
24.###.235.91:23
10#.##9.29.119:23
51.##.176.247:23
15#.##.252.234:23
12#.##9.93.73:23
11#.##2.52.46:23
21#.##.79.160:23
75.###.196.89:23
51.##.13.115:23
78.##.215.41:23
5.###.102.102:23
86.##4.31.82:23
8.###.115.49:23
95.##.167.234:23
81.###.226.212:23
20#.##1.184.201:23
16#.##0.133.15:23
48.###.119.127:23
13#.##4.15.232:23
61.###.187.15:23
40.###.56.137:23
5.###.42.157:23
4.###.97.177:23
14#.##.221.224:23
21#.#0.3.142:23
97.##.88.189:23
44.#.165.74:23
20#.#.250.203:23
68.##.224.219:23
15#.##9.168.25:23
20#.##.161.77:23
17.##.60.105:23
17#.##.72.248:23
95.##.243.68:23
21#.##.102.118:23
15#.##.156.237:23
17#.##.229.75:23
68.##.131.255:23
14#.#.224.86:23
21#.##2.170.57:23
72.###.114.84:23
21#.##2.183.44:23
21#.##5.199.131:23
97.###.229.83:23
11#.##6.25.132:23
20#.##1.106.13:23
77.###.34.153:23
14#.##7.80.246:23
68.###.107.149:23
17#.##.126.150:23
10#.##6.57.70:23
16#.##.250.142:23
61.###.147.183:23
37.###.97.108:23
19#.##3.188.235:23
18#.##.65.131:23
11#.#.182.172:23
18#.##3.33.95:23
13#.##8.141.89:23
15#.##0.174.74:23
88.##.159.97:23
20.###.219.119:23
38.##.174.160:23
97.##3.53.50:23
16#.#8.91.77:23
19#.##.73.238:23
71.##.115.79:23
96.###.226.20:23
12#.##4.185.104:23
13#.##0.18.240:23
52.##.106.242:23
65.###.195.43:23
87.###.14.207:23
18#.##4.38.47:23
16#.##.197.251:23
12#.##8.238.83:23
21#.##.204.232:23
19#.##1.72.227:23
58.##7.17.23:23
5.##.111.173:23
14#.##.237.160:23
81.##0.156.1:23
23.##.232.124:23
21#.##3.193.206:23
25.##.84.110:23
20#.##7.20.40:23
14#.##7.33.20:23
34.###.128.164:23
11#.##8.166.212:23
39.###.84.123:23
16#.##1.232.2:23
20#.##.108.105:23
21#.#03.4.29:23
11#.#.194.178:23
16#.##.196.179:23
17#.##.156.163:23
72.##.255.210:23
17#.##5.198.89:23
11#.##9.41.108:23
20#.##1.21.217:23
8.###.46.46:23
24.##5.95.30:23
11#.##2.249.155:23
16#.##5.220.3:23
20#.##7.154.165:23
62.###.131.242:23
22#.#.14.250:23
15#.#.255.40:23
54.###.51.224:23
20#.##.145.184:23
51.###.165.229:23
11#.##5.180.46:23
17#.##5.101.159:23
2.##.162.150:23
10#.#14.98.4:23
50.###.50.116:23
18#.##.43.221:23
59.##7.30.30:23
24.###.51.147:23
58.###.254.64:23
21#.##0.180.206:23
13#.##1.236.37:23
18#.##.209.78:23
20#.##.246.235:23
11#.##3.11.90:23
61.###.184.90:23
34.##.238.205:23
16#.##0.68.93:23
16#.#4.91.62:23
16#.#.33.31:23
35.##6.197.4:23
32.###.165.173:23
12#.##5.175.163:23
80.##9.7.113:23
19#.##6.205.57:23
17#.##9.132.66:23
11#.##.58.200:23
1.###.204.58:23
92.##.206.29:23
10#.##.203.50:23
18#.##.223.61:23
21#.##9.126.99:23
59.##0.43.40:23
17#.##0.172.199:23
9.##.97.233:23
14#.#4.8.124:23
19#.##3.212.113:23
39.###.113.10:23
11#.##6.214.17:23
38.##.76.41:23
19#.##0.69.70:23
14#.##9.215.40:23
10#.##2.31.27:23
20#.##.239.228:23
96.###.199.79:23
14#.##5.198.165:23
84.###.195.148:23
17.##.209.50:23
18#.##8.221.23:23
18#.##5.37.88:23
10#.##6.148.114:23
17#.##.37.184:23
38.###.179.149:23
20#.##9.55.243:23
21#.##.149.180:23
20#.##.158.43:23
61.##.125.124:23
11#.##3.186.80:23
1.###.195.13:23
98.###.182.21:23
12#.##6.226.61:23
60.###.168.56:23
54.###.186.207:23
19#.##9.16.110:23
91.###.196.199:23
10#.##7.76.147:23
14#.##5.114.19:23
91.###.16.149:23
16#.#1.3.153:23
10#.#1.81.41:23
72.##7.11.90:23
4.###.195.211:23
84.###.16.103:23
17#.##1.220.37:23
12#.##.18.171:23
18#.##1.205.228:23
73.##8.136.1:23
91.##.213.131:23
9.##.212.79:23
10#.##9.248.49:23
21#.##.28.188:23
17.###.37.195:23
13#.##2.255.92:23
18#.##.136.238:23
90.##.134.110:23
14#.##0.208.197:23
66.###.204.192:23
64.##.230.168:23
11#.##6.27.192:23
65.###.124.209:23
15#.##5.53.166:23
13#.##3.27.30:23
15#.##0.30.66:23
34.###.82.214:23
15#.#9.0.163:23
14#.#8.194.4:23
93.###.218.59:23
99.###.169.106:23
90.##2.43.94:23
12#.##9.165.206:23
11#.##.245.217:23
15#.##3.2.161:23
19#.##4.234.61:23
64.###.165.190:23
15#.##.199.219:23
35.##3.76.82:23
14#.##8.240.110:23
12#.##9.236.204:23
9.##.64.120:23
13#.##7.212.66:23
19#.##8.197.215:23
19#.##4.203.103:23
21#.##.224.205:23
22#.##2.121.159:23
15#.##.240.228:23
57.###.159.25:23
64.###.120.177:23
8.##.145.131:23
20#.#.145.128:23
20#.##8.45.147:23
20.##.62.146:23
54.##.177.228:23
18#.##3.133.105:23
71.##.200.178:23
79.###.247.172:23
14#.##6.109.50:23
11#.##1.103.19:23
51.###.55.233:23
10#.##3.98.186:23
24.##4.206.0:23
20.##.126.77:23
13#.##4.20.138:23
10#.##.137.217:23
36.##.251.171:23
11#.##5.113.21:23
17#.##.231.92:23
58.##.13.16:23
14#.##2.234.148:23
10#.#7.40.16:23
16#.##.159.206:23

Receives data from the following servers:

68.###.118.143:536

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations