Linux Analysis Report
na.elf

Overview

General Information

Sample name: na.elf
Analysis ID: 1530536
MD5: e783ff46509df4c84e2169ec2e9f3987
SHA1: 577efdb8a85dbe12642dd1fc2eed427ec277c61c
SHA256: f40edbfbc7779d3273d951ec6c254c5d57df0cecea0884f6317665bc8fdbf858
Tags: elfuser-abuse_ch
Infos:

Detection

Mirai
Score: 64
Range: 0 - 100
Whitelisted: false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Sample has stripped symbol table
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: na.elf Avira: detected
Multi AV Scanner detection for submitted file
Source: na.elf ReversingLabs: Detection: 65%
Source: na.elf Virustotal: Detection: 63% Perma Link
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.15:45212 -> 45.139.104.161:1312
Source: unknown TCP traffic detected without corresponding DNS query: 45.139.104.161
Source: unknown TCP traffic detected without corresponding DNS query: 45.139.104.161
Source: unknown TCP traffic detected without corresponding DNS query: 88.194.161.255
Source: unknown TCP traffic detected without corresponding DNS query: 53.81.61.170
Source: unknown TCP traffic detected without corresponding DNS query: 12.254.250.255
Source: unknown TCP traffic detected without corresponding DNS query: 148.24.51.195
Source: unknown TCP traffic detected without corresponding DNS query: 103.147.216.61
Source: unknown TCP traffic detected without corresponding DNS query: 178.115.22.33
Source: unknown TCP traffic detected without corresponding DNS query: 31.0.125.29
Source: unknown TCP traffic detected without corresponding DNS query: 5.28.248.140
Source: unknown TCP traffic detected without corresponding DNS query: 155.201.85.213
Source: unknown TCP traffic detected without corresponding DNS query: 18.31.144.194
Source: unknown TCP traffic detected without corresponding DNS query: 97.241.79.70
Source: unknown TCP traffic detected without corresponding DNS query: 13.41.28.68
Source: unknown TCP traffic detected without corresponding DNS query: 61.12.232.47
Source: unknown TCP traffic detected without corresponding DNS query: 27.200.74.83
Source: unknown TCP traffic detected without corresponding DNS query: 95.109.183.15
Source: unknown TCP traffic detected without corresponding DNS query: 104.206.169.70
Source: unknown TCP traffic detected without corresponding DNS query: 83.113.230.161
Source: unknown TCP traffic detected without corresponding DNS query: 157.183.88.21
Source: unknown TCP traffic detected without corresponding DNS query: 24.81.151.135
Source: unknown TCP traffic detected without corresponding DNS query: 20.5.77.0
Source: unknown TCP traffic detected without corresponding DNS query: 32.106.17.103
Source: unknown TCP traffic detected without corresponding DNS query: 161.20.44.148
Source: unknown TCP traffic detected without corresponding DNS query: 45.139.104.161
Source: unknown TCP traffic detected without corresponding DNS query: 116.255.99.63
Source: unknown TCP traffic detected without corresponding DNS query: 67.136.137.1
Source: unknown TCP traffic detected without corresponding DNS query: 105.40.231.32
Source: unknown TCP traffic detected without corresponding DNS query: 83.67.94.39
Source: unknown TCP traffic detected without corresponding DNS query: 88.228.199.69
Source: unknown TCP traffic detected without corresponding DNS query: 80.21.123.7
Source: unknown TCP traffic detected without corresponding DNS query: 208.206.41.56
Source: unknown TCP traffic detected without corresponding DNS query: 43.57.48.48
Source: unknown TCP traffic detected without corresponding DNS query: 211.169.42.48
Source: unknown TCP traffic detected without corresponding DNS query: 130.192.19.67
Source: unknown TCP traffic detected without corresponding DNS query: 95.188.73.124
Source: unknown TCP traffic detected without corresponding DNS query: 161.102.42.247
Source: unknown TCP traffic detected without corresponding DNS query: 172.212.242.152
Source: unknown TCP traffic detected without corresponding DNS query: 68.188.78.229
Source: unknown TCP traffic detected without corresponding DNS query: 48.12.213.170
Source: unknown TCP traffic detected without corresponding DNS query: 39.8.59.105
Source: unknown TCP traffic detected without corresponding DNS query: 84.90.167.197
Source: unknown TCP traffic detected without corresponding DNS query: 189.3.253.229
Source: unknown TCP traffic detected without corresponding DNS query: 181.184.232.39
Source: unknown TCP traffic detected without corresponding DNS query: 155.144.135.169
Source: unknown TCP traffic detected without corresponding DNS query: 156.213.154.68
Source: unknown TCP traffic detected without corresponding DNS query: 97.70.86.86
Source: unknown TCP traffic detected without corresponding DNS query: 111.214.45.237
Source: unknown TCP traffic detected without corresponding DNS query: 88.105.232.95
Source: unknown TCP traffic detected without corresponding DNS query: 38.66.97.251
Source: global traffic DNS traffic detected: DNS query: daisy.ubuntu.com
Sample has stripped symbol table
Source: ELF static info symbol of initial sample .symtab present: no
Source: classification engine Classification label: mal64.troj.linELF@0/0@2/0
Enumerates processes within the "proc" file system
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1185/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3241/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3483/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1732/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1730/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1333/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1695/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3235/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3234/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/911/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/515/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/914/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1617/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1615/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/917/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/5553/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3255/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3253/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1591/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3252/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3251/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3250/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3803/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1623/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1588/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3249/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/764/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3368/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3808/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1585/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3246/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3488/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/766/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/800/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/888/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/5544/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/802/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1509/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/803/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/804/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3800/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3801/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1867/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3407/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3802/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1484/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/490/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1514/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1634/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1479/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1875/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/654/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3379/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/655/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/656/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/777/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/931/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1595/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/657/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/812/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/779/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/658/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/933/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/418/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/419/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3419/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3779/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/5693/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3310/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3275/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3274/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3273/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3394/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3272/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/782/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3303/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1762/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3027/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1486/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/789/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1806/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3703/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1660/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3044/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3440/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/793/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/794/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3316/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/674/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/796/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/675/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/676/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1498/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1497/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1496/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3157/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3278/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3399/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/1659/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3332/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3210/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3298/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/3052/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/680/exe Jump to behavior
Source: /tmp/na.elf (PID: 5550) File opened: /proc/681/exe Jump to behavior
Uses the "uname" system call to query kernel version information (possible evasion)
Source: /tmp/na.elf (PID: 5542) Queries kernel information via 'uname': Jump to behavior
Source: na.elf, 5542.1.00007fff3de00000.00007fff3de21000.rw-.sdmp, na.elf, 5545.1.00007fff3de00000.00007fff3de21000.rw-.sdmp, na.elf, 5551.1.00007fff3de00000.00007fff3de21000.rw-.sdmp Binary or memory string: x86_64/usr/bin/qemu-m68k/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf
Source: na.elf, 5542.1.0000558bea668000.0000558bea6ed000.rw-.sdmp, na.elf, 5545.1.0000558bea668000.0000558bea6ed000.rw-.sdmp, na.elf, 5551.1.0000558bea668000.0000558bea6ed000.rw-.sdmp Binary or memory string: U!/etc/qemu-binfmt/m68k
Source: na.elf, 5542.1.00007fff3de00000.00007fff3de21000.rw-.sdmp, na.elf, 5545.1.00007fff3de00000.00007fff3de21000.rw-.sdmp, na.elf, 5551.1.00007fff3de00000.00007fff3de21000.rw-.sdmp Binary or memory string: /usr/bin/qemu-m68k
Source: na.elf, 5542.1.0000558bea668000.0000558bea6ed000.rw-.sdmp, na.elf, 5545.1.0000558bea668000.0000558bea6ed000.rw-.sdmp, na.elf, 5551.1.0000558bea668000.0000558bea6ed000.rw-.sdmp Binary or memory string: /etc/qemu-binfmt/m68k

Stealing of Sensitive Information
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 5551.1.00007fc470012000.00007fc470014000.rw-.sdmp, type: MEMORY
Source: Yara match File source: 5542.1.00007fc470012000.00007fc470014000.rw-.sdmp, type: MEMORY
Source: Yara match File source: 5545.1.00007fc470012000.00007fc470014000.rw-.sdmp, type: MEMORY
Source: Yara match File source: 5551.1.00007fc470001000.00007fc470011000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5545.1.00007fc470001000.00007fc470011000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5542.1.00007fc470001000.00007fc470011000.r-x.sdmp, type: MEMORY
Source: Yara match File source: Process Memory Space: na.elf PID: 5542, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: na.elf PID: 5551, type: MEMORYSTR

Remote Access Functionality
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 5551.1.00007fc470012000.00007fc470014000.rw-.sdmp, type: MEMORY
Source: Yara match File source: 5542.1.00007fc470012000.00007fc470014000.rw-.sdmp, type: MEMORY
Source: Yara match File source: 5545.1.00007fc470012000.00007fc470014000.rw-.sdmp, type: MEMORY
Source: Yara match File source: 5551.1.00007fc470001000.00007fc470011000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5545.1.00007fc470001000.00007fc470011000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5542.1.00007fc470001000.00007fc470011000.r-x.sdmp, type: MEMORY
Source: Yara match File source: Process Memory Space: na.elf PID: 5542, type: MEMORYSTR
Source: Yara match File source: Process Memory Space: na.elf PID: 5551, type: MEMORYSTR

No Screenshots

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
20.113.107.94
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
191.45.41.154
 unknown Brazil
7738 TelemarNorteLesteSABR false
17.222.12.68
 unknown United States
714 APPLE-ENGINEERINGUS false
176.6.219.219
 unknown Germany
12638 AS12638DuesseldorfDE false
248.164.132.162
 unknown Reserved
unknown unknown false
185.41.20.112
 unknown Ukraine
6768 EUROTEL-ASUA false
179.205.145.74
 unknown Brazil
26615 TIMSABR false
110.149.39.88
 unknown Australia
1221 ASN-TELSTRATelstraCorporationLtdAU false
120.185.205.245
 unknown Indonesia
4761 INDOSAT-INP-APINDOSATInternetNetworkProviderID false
159.147.8.30
 unknown Spain
12430 VODAFONE_ESES false
195.203.113.71
 unknown Germany
15854 HP_WEBSERVICESDE false
251.173.233.192
 unknown Reserved
unknown unknown false
164.204.98.132
 unknown United States
3303 SWISSCOMSwisscomSwitzerlandLtdCH false
199.55.91.247
 unknown United States
398192 ARDOT-NET-01US false
203.247.80.86
 unknown Korea Republic of
10063 KMA-ASKoreaMeteorologicalAdministrationKR false
62.58.31.142
 unknown Belgium
13127 VERSATELASfortheTrans-EuropeanTele2IPTransportbackbo false
252.152.190.146
 unknown Reserved
unknown unknown false
148.75.73.124
 unknown United States
6128 CABLE-NET-1US false
82.197.245.10
 unknown Sweden
35706 NAOSE false
175.106.165.48
 unknown China
4837 CHINA169-BACKBONECHINAUNICOMChina169BackboneCN false
203.212.74.191
 unknown India
17810 CELLNEXT-SOLUTIONS-APCellnextSolutionsLimited-IN false
83.122.8.99
 unknown Iran (ISLAMIC Republic Of)
197207 MCCI-ASIR false
213.28.88.196
 unknown Finland
1759 TSF-IP-CORETeliaFinlandOyjEU false
133.203.23.161
 unknown Japan 2518 BIGLOBEBIGLOBEIncJP false
54.134.19.170
 unknown United States
14618 AMAZON-AESUS false
96.30.37.175
 unknown United States
32244 LIQUIDWEBUS false
70.225.89.140
 unknown United States
7018 ATT-INTERNET4US false
115.206.169.172
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
152.9.157.127
 unknown United States
81 NCRENUS false
194.249.100.8
 unknown Slovenia
2107 ARNES-NETAcademicandResearchNetworkofSloveniaSI false
34.66.203.60
 unknown United States
139070 GOOGLE-AS-APGoogleAsiaPacificPteLtdSG false
213.132.8.110
 unknown Denmark
20618 DK-INFO-CONNECTDK false
173.71.172.189
 unknown United States
701 UUNETUS false
105.72.218.54
 unknown Morocco
36884 MAROCCONNECTMA false
241.253.166.118
 unknown Reserved
unknown unknown false
62.96.91.53
 unknown United Kingdom
8220 COLTCOLTTechnologyServicesGroupLimitedGB false
27.12.116.74
 unknown China
4837 CHINA169-BACKBONECHINAUNICOMChina169BackboneCN false
53.6.122.230
 unknown Germany
31399 DAIMLER-ASITIGNGlobalNetworkDE false
12.4.173.253
 unknown United States
7018 ATT-INTERNET4US false
174.231.175.123
 unknown United States
22394 CELLCOUS false
166.171.250.102
 unknown United States
20057 ATT-MOBILITY-LLC-AS20057US false
171.93.11.17
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
176.101.56.212
 unknown Russian Federation
51011 P-T-K-ASRU false
141.1.252.101
 unknown Germany
1273 CWVodafoneGroupPLCEU false
98.181.69.154
 unknown United States
22773 ASN-CXA-ALL-CCI-22773-RDCUS false
45.115.168.119
 unknown India
59162 UPCSPL-AS-INUPCOMMUNICATIONSERVICESPVTLTDIN false
102.192.149.254
 unknown unknown
36926 CKL1-ASNKE false
36.41.62.201
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
216.202.137.23
 unknown United States
3356 LEVEL3US false
115.31.9.156
 unknown Japan 7522 STCNSTNetIncorporatedJP false
157.163.6.222
 unknown Germany
22192 SSHENETUS false
53.98.67.233
 unknown Germany
31399 DAIMLER-ASITIGNGlobalNetworkDE false
151.123.215.153
 unknown United States
32480 LLUMCUS false
209.146.99.38
 unknown United States
395753 KKRUS false
243.211.18.56
 unknown Reserved
unknown unknown false
193.169.228.126
 unknown Russian Federation
34995 SYSTEM-LTD-ASRU false
116.109.174.76
 unknown Viet Nam
24086 VIETTEL-AS-VNViettelCorporationVN false
149.116.116.237
 unknown United States
188 SAIC-ASUS false
121.74.82.47
 unknown New Zealand
9500 VODAFONE-TRANSIT-ASVodafoneNZLtdNZ false
31.162.185.141
 unknown Russian Federation
12389 ROSTELECOM-ASRU false
250.179.4.174
 unknown Reserved
unknown unknown false
43.107.144.211
 unknown Japan 4249 LILLY-ASUS false
177.135.192.200
 unknown Brazil
18881 TELEFONICABRASILSABR false
76.137.94.253
 unknown United States
7922 COMCAST-7922US false
118.65.218.252
 unknown China
4713 OCNNTTCommunicationsCorporationJP false
84.3.176.55
 unknown Hungary
5483 MAGYAR-TELEKOM-MAIN-ASMagyarTelekomNyrtHU false
48.157.37.54
 unknown United States
2686 ATGS-MMD-ASUS false
216.73.18.46
 unknown United States
7029 WINDSTREAMUS false
70.139.113.219
 unknown United States
7018 ATT-INTERNET4US false
124.198.224.124
 unknown New Zealand
9889 MAXNET-NZ-APAucklandNZ false
252.223.160.207
 unknown Reserved
unknown unknown false
186.210.211.58
 unknown Brazil
53006 ALGARTELECOMSABR false
223.86.122.144
 unknown China
9808 CMNET-GDGuangdongMobileCommunicationCoLtdCN false
171.111.191.95
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
57.13.227.222
 unknown Belgium
2686 ATGS-MMD-ASUS false
250.10.157.65
 unknown Reserved
unknown unknown false
249.142.238.242
 unknown Reserved
unknown unknown false
72.93.76.146
 unknown United States
701 UUNETUS false
61.154.136.84
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
153.139.152.74
 unknown Japan 4713 OCNNTTCommunicationsCorporationJP false
72.18.223.139
 unknown United States
22658 EARTHNETUS false
87.210.132.4
 unknown Netherlands
13127 VERSATELASfortheTrans-EuropeanTele2IPTransportbackbo false
150.44.158.15
 unknown Japan 9991 SHUDO-UHiroshimaShudoUniversityJP false
200.212.101.220
 unknown Brazil
4230 CLAROSABR false
173.41.116.78
 unknown United States
812 ROGERS-COMMUNICATIONSCA false
73.190.131.145
 unknown United States
7922 COMCAST-7922US false
20.230.237.16
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
115.33.38.82
 unknown China
4808 CHINA169-BJChinaUnicomBeijingProvinceNetworkCN false
116.238.166.238
 unknown China
4812 CHINANET-SH-APChinaTelecomGroupCN false
75.169.214.27
 unknown United States
209 CENTURYLINK-US-LEGACY-QWESTUS false
188.180.228.87
 unknown Denmark
3292 TDCTDCASDK false
5.248.220.163
 unknown Ukraine
15895 KSNET-ASUA false
72.174.160.4
 unknown United States
33588 BRESNAN-33588US false
241.163.150.232
 unknown Reserved
unknown unknown false
173.187.171.234
 unknown United States
7029 WINDSTREAMUS false
91.186.26.59
 unknown United Kingdom
29550 SIMPLYTRANSITGB false
162.175.137.233
 unknown United States
21928 T-MOBILE-AS21928US false
9.51.180.83
 unknown United States
3356 LEVEL3US false
167.37.240.79
 unknown Canada
2665 CDAGOVNCA false
170.199.90.22
 unknown Canada
7122 MTS-ASNCA false

Contacted Domains

Name IP Active
daisy.ubuntu.com 162.213.35.25 true