About site:

Domain name - devnull.ae

Site title - devnull

Go to website - devnull

Site GEO location

Location Country - United States

City/Town - Walnut

Provider - AMAZON-02

Site Logo

IP address:

76.76.21.21

Domain name servers:

ns3.hostingww.com ns2.hostingww.com ns1.hostingww.com

All records:

☆ devnull.ae. 21597 IN A 76.76.21.21
☆ devnull.ae. 21597 IN NS ns2.hostingww.com.
☆ devnull.ae. 21597 IN NS ns3.hostingww.com.
☆ devnull.ae. 21597 IN NS ns1.hostingww.com.
☆ devnull.ae. 21597 IN SOA ns1.hostingww.com. root.hostingww.com. 2023051901 28800 7200 604800 86400
☆ devnull.ae. 21597 IN MX 5 mail.devnull.ae.
☆ devnull.ae. 21597 IN TXT "v=spf1 a:mail.hostingww.com mx include:mail.hostingww.com -all"

Brief facts about devnull:

Devnull is the name of a computer worm for the Linux operating system that has been named after /dev/null, Unix's null device. This worm was found on 30 September 2002. This worm, once the host has been compromised, downloads and executes a shell script from a web server. This script downloads a gzipped executable file named k.gz from the same address, and then decompresses and runs the file. This downloaded file appears to be an IRC client. It connects to different channels and waits for commands to process on the infected host. Then the worm checks for presence of the GCC compiler on the local system and, if found, creates a directory called.socket2. Next, it downloads a compressed file called devnull.tgz. After decompressing, two files are created: an ELF binary file called devnull and a source script file called sslx.c. The latter gets compiled into the ELF binary sslx.

Linux malware - Linux malware includes viruses, Trojans, worms and other types of malware that affect the Linux family of operating systems. Linux, Unix and other Unix-like computer operating systems are generally regarded as very well-protected against, but not immune to, computer viruses.

Linux malware

Computer worms