Mirai C2

Description

This page displays an overview of the mirai C2s related information, and qualified security researchers may also apply for full data access by sending an email to netlab@360.cn

Note:Those C2 servers we tracked but have never received attack commands from are not counted in our datasets.

We also provide a mirai bot scan activity data feed here and a collection of mirai analysis blogs on our blog.

Download Feeds

For full data access, Send an email to netlab@360.cn to apply.


Recent Target

Time C2 Attack Type Target Target Port Duration
2017-08-20 05:21:59 d***.com:23 vse 85.190.159.130/32 27019 200
2017-08-20 05:13:40 185.***.***.250:23 vse 85.190.159.130/32 27019 200
2017-08-20 05:13:40 d***.com:23 vse 85.190.159.130/32 27019 200
2017-08-20 05:06:44 185.***.***.250:23 vse 85.190.159.130/32 27019 200
2017-08-20 05:06:44 d***.com:23 vse 85.190.159.130/32 27019 200
2017-08-20 04:59:26 j***.space:23 tcp_ack_flood 161.22.49.235/32 22 2400
2017-08-20 04:59:26 185.***.***.224:23 tcp_ack_flood 161.22.49.235/32 22 2400
2017-08-20 04:58:43 j***.space:23 http_flood 95.141.37.195/32 80 29
2017-08-20 04:58:43 185.***.***.224:23 http_flood 95.141.37.195/32 80 29
2017-08-20 04:16:34 185.***.***.224:23 tcp_ack_flood 161.22.49.235/32 22 2400

Charts and Numbers in Last 3 Month

C2 server

Attack Command

Target