Linux Analysis Report
SecuriteInfo.com.Linux.Siggen.9999.28522.3483.elf

Overview

General Information

Sample name: SecuriteInfo.com.Linux.Siggen.9999.28522.3483.elf
Analysis ID: 1522416
MD5: 02f393605a93ebc399024903ef9c784a
SHA1: 2bebbba3ff1f62675ed95d01601414fe9133cdc6
SHA256: ba80eb010115d1e7fdbe476fb0caaf14ff6ca3c77c5bc86e573aaa606e89db4e
Tags: elf
Infos:

Detection

Mirai
Score: 72
Range: 0 - 100
Whitelisted: false

Signatures

Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected Mirai
Machine Learning detection for sample
Sample is packed with UPX
Detected TCP or UDP traffic on non-standard ports
ELF contains segments with high entropy indicating compressed/encrypted content
Sample contains only a LOAD segment without any section mappings
Yara signature match

Classification

Name Description Attribution Blogpost URLs Link
Mirai Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world. No Attribution https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

AV Detection
barindex
Multi AV Scanner detection for submitted file
Source: SecuriteInfo.com.Linux.Siggen.9999.28522.3483.elf ReversingLabs: Detection: 44%
Machine Learning detection for sample
Source: SecuriteInfo.com.Linux.Siggen.9999.28522.3483.elf Joe Sandbox ML: detected
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.13:38374 -> 91.92.242.153:3778
Source: unknown TCP traffic detected without corresponding DNS query: 91.92.242.153
Source: unknown TCP traffic detected without corresponding DNS query: 46.45.14.208
Source: unknown TCP traffic detected without corresponding DNS query: 167.229.167.208
Source: unknown TCP traffic detected without corresponding DNS query: 103.55.188.8
Source: unknown TCP traffic detected without corresponding DNS query: 148.84.159.107
Source: unknown TCP traffic detected without corresponding DNS query: 40.207.199.207
Source: unknown TCP traffic detected without corresponding DNS query: 196.226.39.1
Source: unknown TCP traffic detected without corresponding DNS query: 194.241.248.146
Source: unknown TCP traffic detected without corresponding DNS query: 221.251.124.181
Source: unknown TCP traffic detected without corresponding DNS query: 14.164.105.114
Source: unknown TCP traffic detected without corresponding DNS query: 104.104.192.122
Source: unknown TCP traffic detected without corresponding DNS query: 126.228.164.95
Source: unknown TCP traffic detected without corresponding DNS query: 177.24.52.51
Source: unknown TCP traffic detected without corresponding DNS query: 175.201.253.72
Source: unknown TCP traffic detected without corresponding DNS query: 42.104.136.40
Source: unknown TCP traffic detected without corresponding DNS query: 79.157.116.222
Source: unknown TCP traffic detected without corresponding DNS query: 19.105.184.103
Source: unknown TCP traffic detected without corresponding DNS query: 149.122.69.207
Source: unknown TCP traffic detected without corresponding DNS query: 39.91.202.240
Source: unknown TCP traffic detected without corresponding DNS query: 77.206.149.237
Source: unknown TCP traffic detected without corresponding DNS query: 97.184.83.203
Source: unknown TCP traffic detected without corresponding DNS query: 37.174.22.232
Source: unknown TCP traffic detected without corresponding DNS query: 246.221.133.151
Source: unknown TCP traffic detected without corresponding DNS query: 165.139.207.145
Source: unknown TCP traffic detected without corresponding DNS query: 42.22.5.165
Source: unknown TCP traffic detected without corresponding DNS query: 196.172.14.144
Source: unknown TCP traffic detected without corresponding DNS query: 194.190.12.126
Source: unknown TCP traffic detected without corresponding DNS query: 207.3.184.87
Source: unknown TCP traffic detected without corresponding DNS query: 78.69.44.90
Source: unknown TCP traffic detected without corresponding DNS query: 184.204.218.170
Source: unknown TCP traffic detected without corresponding DNS query: 150.16.116.60
Source: unknown TCP traffic detected without corresponding DNS query: 82.151.216.141
Source: unknown TCP traffic detected without corresponding DNS query: 213.146.59.229
Source: unknown TCP traffic detected without corresponding DNS query: 207.94.50.25
Source: unknown TCP traffic detected without corresponding DNS query: 181.62.141.11
Source: unknown TCP traffic detected without corresponding DNS query: 18.247.215.106
Source: unknown TCP traffic detected without corresponding DNS query: 188.0.83.247
Source: unknown TCP traffic detected without corresponding DNS query: 118.147.30.3
Source: unknown TCP traffic detected without corresponding DNS query: 58.95.13.68
Source: unknown TCP traffic detected without corresponding DNS query: 115.232.85.63
Source: unknown TCP traffic detected without corresponding DNS query: 93.74.156.235
Source: unknown TCP traffic detected without corresponding DNS query: 65.141.136.86
Source: unknown TCP traffic detected without corresponding DNS query: 45.8.119.22
Source: unknown TCP traffic detected without corresponding DNS query: 27.167.185.177
Source: unknown TCP traffic detected without corresponding DNS query: 12.252.2.131
Source: unknown TCP traffic detected without corresponding DNS query: 73.131.211.226
Source: unknown TCP traffic detected without corresponding DNS query: 240.54.187.214
Source: unknown TCP traffic detected without corresponding DNS query: 170.108.20.71
Source: unknown TCP traffic detected without corresponding DNS query: 189.154.200.155
Source: unknown TCP traffic detected without corresponding DNS query: 241.169.136.213
Source: SecuriteInfo.com.Linux.Siggen.9999.28522.3483.elf String found in binary or memory: http://upx.sf.net

System Summary
barindex
Malicious sample detected (through community Yara rule)
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Sample contains only a LOAD segment without any section mappings
Source: LOAD without section mappings Program segment: 0xc01000
Yara signature match
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: classification engine Classification label: mal72.troj.evad.linELF@0/0@0/0

Data Obfuscation
barindex
Sample is packed with UPX
Source: initial sample String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $
ELF contains segments with high entropy indicating compressed/encrypted content
Source: SecuriteInfo.com.Linux.Siggen.9999.28522.3483.elf Submission file: segment LOAD with 7.8708 entropy (max. 8.0)

Stealing of Sensitive Information
barindex
Yara detected Mirai
Source: Yara match File source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY

Remote Access Functionality
barindex
Yara detected Mirai
Source: Yara match File source: 5439.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5437.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY

No Screenshots

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
77.243.117.255
 unknown Russian Federation
44267 IESVRU false
126.95.70.31
 unknown Japan 17676 GIGAINFRASoftbankBBCorpJP false
34.17.28.156
 unknown United States
2686 ATGS-MMD-ASUS false
196.138.199.76
 unknown Egypt
36935 Vodafone-EG false
32.124.109.113
 unknown United States
7018 ATT-INTERNET4US false
37.140.221.172
 unknown Russian Federation
8947 ANADOLUBANK-ASTR false
66.118.198.229
 unknown United States
6653 FORETHOUGHTNETUS false
64.59.200.202
 unknown United States
13438 VIVIO-TECHNOLOGIESUS false
174.161.40.21
 unknown United States
7922 COMCAST-7922US false
105.197.161.235
 unknown Egypt
24835 RAYA-ASEG false
115.222.69.93
 unknown China
58461 CT-HANGZHOU-IDCNo288Fu-chunRoadCN false
61.201.195.82
 unknown Japan 4725 ODNSoftBankMobileCorpJP false
42.132.107.109
 unknown China
4249 LILLY-ASUS false
120.183.90.17
 unknown Indonesia
4761 INDOSAT-INP-APINDOSATInternetNetworkProviderID false
196.121.22.149
 unknown Morocco
36925 ASMediMA false
175.164.180.89
 unknown China
4837 CHINA169-BACKBONECHINAUNICOMChina169BackboneCN false
88.172.129.178
 unknown France
12322 PROXADFR false
251.92.214.222
 unknown Reserved
unknown unknown false
193.200.194.228
 unknown unknown
30962 COMTRANCE-ASDE false
196.132.218.191
 unknown Egypt
36935 Vodafone-EG false
157.206.190.129
 unknown United States
36291 SANOFIUS false
89.145.49.101
 unknown Germany
21032 TELTA-ASDE false
205.191.249.110
 unknown United States
1239 SPRINTLINKUS false
12.161.30.134
 unknown United States
7018 ATT-INTERNET4US false
79.82.80.255
 unknown France
15557 LDCOMNETFR false
244.25.109.32
 unknown Reserved
unknown unknown false
200.81.85.181
 unknown Argentina
19037 AMXArgentinaSAAR false
160.192.141.196
 unknown Japan 7670 CTNETEnergiaCommunicationsIncJP false
180.182.113.227
 unknown Korea Republic of
38669 CNBTV-AS-KRLGHelloVisionCorpKR false
173.129.74.136
 unknown United States
10507 SPCSUS false
1.39.76.168
 unknown India
38266 VODAFONE-INVodafoneIndiaLtdIN false
5.117.231.181
 unknown Iran (ISLAMIC Republic Of)
44244 IRANCELL-ASIR false
119.229.61.18
 unknown Japan 17511 OPTAGEOPTAGEIncJP false
106.146.245.140
 unknown Japan 2516 KDDIKDDICORPORATIONJP false
205.231.188.78
 unknown United States
16804 UNASSIGNED false
244.251.253.239
 unknown Reserved
unknown unknown false
75.223.213.35
 unknown United States
22394 CELLCOUS false
253.226.182.20
 unknown Reserved
unknown unknown false
223.28.242.234
 unknown Korea Republic of
17597 SAEROMNET-AS-KRTBROADSaeromNamdongSeohaebroadcastingKR false
65.40.21.151
 unknown United States
209 CENTURYLINK-US-LEGACY-QWESTUS false
44.33.186.50
 unknown United States
7377 UCSDUS false
222.178.70.63
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
121.201.196.175
 unknown China
17623 CNCGROUP-SZChinaUnicomShenzennetworkCN false
173.224.127.7
 unknown United States
30083 AS-30083-GO-DADDY-COM-LLCUS false
184.233.250.131
 unknown United States
10507 SPCSUS false
160.186.228.94
 unknown Japan 4713 OCNNTTCommunicationsCorporationJP false
57.173.55.218
 unknown Belgium
2686 ATGS-MMD-ASUS false
190.100.60.119
 unknown Chile
22047 VTRBANDAANCHASACL false
47.2.169.93
 unknown United States
34533 ESAMARA-ASRU false
36.125.100.54
 unknown China
4847 CNIX-APChinaNetworksInter-ExchangeCN false
121.177.161.33
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
178.229.3.200
 unknown Netherlands
31615 TMO-NL-ASNL false
177.134.178.115
 unknown Brazil
18881 TELEFONICABRASILSABR false
142.182.34.243
 unknown Canada
577 BACOMCA false
85.157.92.217
 unknown Finland
15527 ANVIASilmukkatie6VaasaFinlandFI false
142.129.65.99
 unknown United States
20001 TWC-20001-PACWESTUS false
35.183.153.123
 unknown United States
16509 AMAZON-02US false
88.93.172.175
 unknown Norway
2119 TELENOR-NEXTELTelenorNorgeASNO false
37.160.30.197
 unknown France
51207 FREEMFR false
74.81.9.87
 unknown United States
395846 DIRECTCOMIDUS false
174.225.80.139
 unknown United States
22394 CELLCOUS false
1.31.208.101
 unknown China
139007 UNICOM-NM-WULANCHABU-IDCUNICOMInnerMongoliaprovincenetwo false
80.232.228.0
 unknown Latvia
12578 APOLLO-ASLatviaLV false
57.77.37.5
 unknown Belgium
51964 ORANGE-BUSINESS-SERVICES-IPSN-ASNFR false
190.61.167.27
 unknown Colombia
18747 IFX18747US false
89.13.227.183
 unknown Germany
6805 TDDE-ASN1DE false
159.180.202.174
 unknown United Kingdom
39905 EMAILVISIONFR false
108.11.229.29
 unknown United States
701 UUNETUS false
241.60.164.78
 unknown Reserved
unknown unknown false
91.94.234.249
 unknown Poland
5617 TPNETPL false
120.204.213.100
 unknown China
9808 CMNET-GDGuangdongMobileCommunicationCoLtdCN false
37.62.95.85
 unknown Belgium
5432 PROXIMUS-ISP-ASBE false
122.134.27.158
 unknown Japan 2518 BIGLOBEBIGLOBEIncJP false
155.137.99.162
 unknown Denmark
51964 ORANGE-BUSINESS-SERVICES-IPSN-ASNFR false
117.192.215.171
 unknown India
9829 BSNL-NIBNationalInternetBackboneIN false
20.31.86.98
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
97.30.224.15
 unknown United States
22394 CELLCOUS false
65.157.179.86
 unknown United States
393658 ATYPONUS false
175.55.134.151
 unknown China
134810 CMNET-JILIN-AS-APChinaMobileGroupJiLincommunicationsco false
193.0.164.69
 unknown Spain
3348 WIFINITYES false
102.13.71.201
 unknown unknown
37069 MOBINILEG false
153.244.77.99
 unknown Japan 4713 OCNNTTCommunicationsCorporationJP false
111.228.242.47
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
193.170.161.67
 unknown Austria
1853 ACONETACOnetBackboneAT false
133.206.91.174
 unknown Japan 2518 BIGLOBEBIGLOBEIncJP false
157.40.17.31
 unknown India
55836 RELIANCEJIO-INRelianceJioInfocommLimitedIN false
32.157.103.69
 unknown United States
2686 ATGS-MMD-ASUS false
221.3.192.42
 unknown China
4837 CHINA169-BACKBONECHINAUNICOMChina169BackboneCN false
14.3.16.126
 unknown Japan 4685 ASAHI-NETAsahiNetJP false
181.121.5.27
 unknown Paraguay
23201 TelecelSAPY false
243.96.37.137
 unknown Reserved
unknown unknown false
198.144.138.39
 unknown Japan 55900 GLBB-JPGLBBJapanKKJP false
181.146.136.183
 unknown Colombia
26611 COMCELSACO false
187.241.225.173
 unknown Mexico
13999 MegaCableSAdeCVMX false
202.238.46.64
 unknown Japan 10001 MICSNETMicsNetworkCorporationJP false
184.101.52.241
 unknown United States
209 CENTURYLINK-US-LEGACY-QWESTUS false
122.150.229.238
 unknown Australia
38285 VOCUS-RETAIL-AUVocusRetailAU false
245.197.211.129
 unknown Reserved
unknown unknown false
83.218.91.58
 unknown Sweden
29468 INFRACOMSE false
109.195.98.211
 unknown Russian Federation
51604 EKAT-ASRU false