DDoS Botnets Target Zyxel Vulnerability CVE-2023-28771 | FortiGuard Labs
Tags
attack-pattern: Data Models Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Firmware - T1592.003 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID dac56fb2-c61a-46b0-8b66-0c678c4f06a5
Fingerprint a591bd53e033abed
Analysis status DONE
Considered CTI value 2
Text language
Published July 19, 2023, 3:17 p.m.
Added to db Aug. 12, 2023, 1:49 a.m.
Last updated Nov. 13, 2024, 2:26 p.m.
Headline DDoS Botnets Target Zyxel Vulnerability CVE-2023-28771
Title DDoS Botnets Target Zyxel Vulnerability CVE-2023-28771 | FortiGuard Labs
Detected Hints/Tags/Attributes 60/1/36
Source URLs
Redirection Url
Details Redirection https://feeds.fortinet.com/~/756171332/0/fortinet/blog/threat-research~DDoS-Botnets-Target-Zyxel-Vulnerability-CVE
Details Source https://www.fortinet.com/blog/threat-research/ddos-botnets-target-zyxel-vulnerability-cve-2023-28771
URL Provider
Details Provider Source level domain
Details fortinet.com www.fortinet.com
Details fortinet.com feeds.fortinet.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 117 ✔ Fortinet All Blogs https://feeds.feedburner.com/fortinet/blogs 2024-08-30 22:08
Details 122 ✔ Fortinet Threat Research Blog https://feeds.fortinet.com/fortinet/blog/threat-research 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 64 
cve-2023-28771
Details Domain 3 
raw.pastebin.com
Details Domain 3 
hoz.1337.cx
Details Domain 2 
djk38zbdhqpdlshfb.shinji.app
Details Domain 1 
shinji.app
Details Domain 1 
agent.bi
Details Domain 1 
mirai.ax
Details File 3 
raw.pas
Details sha256 2 
d618c817e6a93193a499126156a1f7e888008dacdb247a769fd69ce4c0c87b67
Details sha256 2 
a6729c047d776294fa21956157eec0b50efa7447b8e2834b05be31080767006f
Details sha256 2 
729f2fa4d037912a360cb7c4e2c37765da0c38725451600f0258109b672f615e
Details sha256 2 
2c55674e938e7618f7c9273e3da61ce7aeab3dc5626b7b8b4e3fc7cc95d0436f
Details sha256 2 
928d8ccd71edda5891068d703603ba0b70687f746c9da73afa6692b274ea757c
Details sha256 2 
6137a30d8eb932d25664ced747424b15072e676b5d4d27d5b8f3b84f48344217
Details sha256 2 
0c394849ce4f636cc79cc84389b66a0dbdaf14a61a6d87302e807f2153bc6c2b
Details sha256 2 
2fe13ee992cf00778bcc92dc3732305114dca1700dedca7c29342216df236644
Details sha256 2 
034cdcb42d1d7b921b4732230bbdcb4089107490a30b8cd7a62e67b657e33d26
Details sha256 2 
3d69c780fefa0c3a34190989d43268a272004f0623d3e596bc0c92e1744832c9
Details sha256 2 
79f69993110688372a5898d05f1141b7f44f3f5f55cd50b6a493c1d33af141c8
Details sha256 2 
c68211116bbc43c2fe0aba8b598b88b218adc0d995311a4e7030de8acd48076e
Details sha256 2 
51becb81d6bdfe79111974c05f2e4a20a8825a872a92df86cbc98517100b031a
Details sha256 2 
42b4e116c5d2d3e9d4777c7eaa3c3835a126c02673583c2dfb1ae2bf0bf0db48
Details sha256 2 
85d3d93910bfb8410a0e82810d05aa67a6702ce0cdfc38d1d01f2f9471d20150
Details sha256 2 
12c65cfd227d393fd338223eb50140571760de04ef0a21fe3c4636e1bfaf4966
Details sha256 2 
f82f5ec551f9ac3bb5a3b1ace5dd21c35239bd983fd9a36e0e7c07bfb48a3fdd
Details sha256 2 
28fa9225db6d42084123989712313489e255376134f8e77f07b77c345a026304
Details sha256 2 
312022da42ab6df882c44d984f9aceea7f08e217a5ca8ca985c533a1af399cee
Details IPv4 2 
193.32.162.190
Details IPv4 2 
109.205.213.30
Details IPv4 2 
109.207.200.42
Details IPv4 2 
109.207.200.47
Details IPv4 2 
109.207.200.44
Details IPv4 2 
92.118.39.16
Details IPv4 2 
171.22.136.15
Details IPv4 2 
171.22.136.18
Details IPv4 2 
147.182.243.49