Linux Analysis Report
na.elf

Overview

General Information

Sample name: na.elf
Analysis ID: 1532155
MD5: 803d17dbfe0962640f6ab115f2594514
SHA1: 09ad3f6560a5da29b0f9c7e83b18cac921ba24ed
SHA256: 3f1c562a2126a513e253a200ae8ed9024d21c1b1eae4155c3dcd04d4e2aa33eb
Tags: elfuser-abuse_ch
Infos:

Detection

Mirai
Score: 64
Range: 0 - 100
Whitelisted: false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Sample has stripped symbol table
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

Name Description Attribution Blogpost URLs Link
Mirai Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world. No Attribution https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: na.elf Avira: detected
Multi AV Scanner detection for submitted file
Source: na.elf Virustotal: Detection: 61% Perma Link
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.23:34394 -> 194.120.116.148:5555
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.48.237.21:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.93.203.96:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.192.3.123:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.58.92.109:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.124.242.179:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.97.194.7:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.212.118.24:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.97.162.158:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.41.133.177:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.2.62.78:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.192.105.44:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.45.163.166:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.95.29.168:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.152.146.150:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.255.115.83:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.226.164.63:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.159.112.215:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.102.226.105:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.170.28.116:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.103.207.30:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.134.242.55:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.2.172.95:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.129.227.51:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.142.62.229:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.205.64.187:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.11.202.137:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.198.238.109:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.21.2.217:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.17.95.1:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.42.253.149:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.210.160.227:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.24.75.148:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.47.207.100:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.100.131.4:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.28.197.12:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.198.111.91:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.17.131.49:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.56.174.107:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.224.245.91:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.163.5.19:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.97.197.175:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.253.92.244:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.230.51.153:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.44.250.146:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.91.212.28:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.54.3.233:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.62.220.126:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.121.250.21:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.179.143.171:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.36.206.245:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.58.163.242:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.103.118.227:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.50.59.149:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.111.157.194:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.20.70.11:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.69.232.20:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.65.121.112:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.4.45.141:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.169.93.243:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.150.28.232:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.45.37.30:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.72.23.228:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.221.218.133:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.35.124.150:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.41.45.206:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.100.116.255:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.21.171.97:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.126.74.113:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.142.46.237:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.149.95.255:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.239.153.68:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.192.244.133:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.188.175.92:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.17.29.109:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.147.223.239:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.154.92.17:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.163.186.177:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.34.94.149:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.242.236.50:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.202.102.23:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.210.90.11:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.172.192.68:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.255.68.50:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.172.116.79:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.223.243.52:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.206.251.90:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.40.255.244:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.58.24.157:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.36.205.5:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.209.190.119:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.35.31.30:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.250.70.62:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.184.240.6:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.95.100.127:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.114.232.107:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.79.45.26:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.98.173.169:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.54.162.228:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.235.80.179:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.72.94.160:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.188.230.223:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.195.228.146:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.51.216.138:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.19.81.4:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.92.1.146:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.76.77.64:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.140.2.80:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.78.34.74:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.146.82.192:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.200.86.37:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.91.16.160:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.86.3.60:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.205.144.184:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.254.96.166:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.99.241.241:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.60.58.131:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.242.42.166:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.31.235.182:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.18.180.207:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.212.28.234:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.231.198.33:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.58.54.143:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.154.95.134:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.96.206.24:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.115.144.7:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.67.228.154:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.79.200.43:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.192.191.113:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.172.10.133:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.131.226.15:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.93.80.122:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.157.9.93:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.185.123.6:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.209.222.44:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.217.182.215:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.42.225.128:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.106.222.52:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.165.38.160:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.83.236.23:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.239.227.241:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.82.205.160:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.240.112.181:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.216.5.183:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.86.75.56:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.207.75.32:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.110.212.5:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.127.70.112:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.10.185.109:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.254.225.58:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.248.132.127:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.169.11.54:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.87.167.215:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.121.25.205:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.10.60.125:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.112.230.229:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.148.35.49:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.211.201.252:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.106.180.48:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.164.203.157:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.25.33.147:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.47.219.179:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.106.123.85:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.40.220.35:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.12.231.93:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.43.194.153:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.121.250.29:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.230.143.36:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.112.41.135:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.55.195.101:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.97.224.66:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.24.149.207:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.0.157.205:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.77.165.27:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.244.175.46:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.163.101.219:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.46.170.85:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.22.96.72:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.79.132.39:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.215.28.218:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.109.25.124:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.242.81.154:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.203.209.116:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.72.229.99:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.40.69.245:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.227.184.150:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.16.120.44:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.70.158.219:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.144.137.66:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.245.44.35:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.76.161.217:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.249.112.173:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.55.151.255:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.169.252.90:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.222.99.5:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.22.225.151:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.241.162.28:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.93.171.97:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.155.229.135:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.67.176.146:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.6.130.176:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.156.91.223:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.189.255.11:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.29.162.213:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.190.89.196:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.255.216.138:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.44.123.76:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.237.88.70:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.231.35.237:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.184.56.115:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.249.104.255:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.24.77.175:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.251.32.11:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.224.233.222:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.64.211.226:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.100.97.87:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.208.186.155:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.58.217.139:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.141.93.102:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.225.153.93:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.198.190.123:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.133.107.128:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.0.254.70:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.233.167.137:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.144.203.123:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.10.35.82:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.177.106.50:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.110.215.82:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.203.84.175:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.136.215.62:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.118.97.172:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.119.84.20:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.94.119.46:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.58.133.229:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.89.143.8:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.193.156.231:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.66.190.200:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.133.218.34:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.100.238.163:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.186.17.76:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.34.246.54:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.13.156.167:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.167.117.179:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.124.12.43:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.188.192.102:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.23.80.223:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.86.224.137:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.46.107.35:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.120.89.140:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.184.123.189:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.79.198.176:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.110.184.230:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.117.210.207:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.33.208.217:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.129.50.206:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.141.221.136:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.121.62.212:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.186.30.93:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.212.161.107:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.155.154.218:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.201.48.154:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.78.82.76:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.20.160.99:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.225.108.203:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.133.140.150:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.0.19.52:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.174.21.116:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.80.12.80:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.121.146.99:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.68.156.137:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.106.55.61:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.107.217.24:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.22.47.202:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.202.214.59:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.127.194.55:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.92.60.254:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.116.240.25:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.110.237.222:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.116.115.43:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.150.211.208:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.239.101.177:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.62.139.196:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.139.10.91:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.130.11.135:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.76.47.255:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.5.144.82:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.216.164.236:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.12.133.221:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.215.0.106:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.151.233.26:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.252.141.30:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.221.176.208:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.148.206.184:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.148.43.36:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.115.196.98:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.112.44.196:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.231.70.227:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.185.57.99:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.146.42.90:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.199.209.78:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.128.2.49:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.40.41.40:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.150.94.96:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.208.169.236:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.234.240.54:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.32.249.28:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.128.32.229:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.236.138.189:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.73.202.130:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.165.20.76:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.240.174.80:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.101.145.68:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.243.175.141:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.165.104.36:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.182.35.236:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.78.99.249:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.92.233.5:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.179.138.5:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.160.236.174:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.220.247.246:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.195.69.119:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.227.244.28:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.7.168.63:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.66.181.116:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.197.103.224:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.208.14.47:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.130.151.243:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.168.186.151:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.55.139.222:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.37.37.122:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.201.71.117:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.140.51.230:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.164.89.159:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.136.52.24:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.6.102.73:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.245.178.51:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.168.47.245:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.223.194.34:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.174.223.211:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.70.132.196:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.41.203.208:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.183.233.124:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.188.32.161:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.102.116.146:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.227.12.29:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.77.206.107:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.223.156.145:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.103.204.145:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.153.244.112:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.96.66.188:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.29.120.226:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.246.79.82:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.10.153.107:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.236.183.223:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.49.255.11:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.206.132.200:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.67.47.107:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.115.120.61:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.3.61.238:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.223.162.26:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.79.80.6:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.152.24.137:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.160.110.193:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.252.164.0:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.34.42.135:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.219.28.27:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.129.214.197:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.253.18.140:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.170.150.12:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.197.205.199:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.251.210.213:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.140.231.14:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.144.147.53:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.181.61.185:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.107.62.47:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.190.219.190:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.255.103.144:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.19.241.221:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.97.153.190:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.223.15.41:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.132.201.236:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.116.169.60:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.66.121.197:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.25.131.220:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.7.220.171:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.226.147.201:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.151.145.244:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.106.104.210:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.186.72.236:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.221.84.240:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.148.74.36:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.242.160.230:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.162.145.196:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.200.47.72:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.204.38.104:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.123.195.169:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.199.97.169:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.76.51.22:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.10.59.192:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.185.34.248:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.74.108.131:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.7.209.178:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.182.157.121:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.162.154.102:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.7.135.71:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.159.250.211:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.149.117.2:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.1.221.215:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.232.110.108:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.115.164.241:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.155.240.211:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.17.168.82:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.6.142.154:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.2.64.30:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.253.39.79:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.105.220.3:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.30.149.225:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.56.151.168:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.200.12.148:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.45.155.177:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.186.3.132:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.53.225.235:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.81.237.167:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.223.147.3:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.29.41.96:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.194.255.253:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.110.123.151:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.50.5.15:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.76.123.214:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.190.139.222:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.26.104.135:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.144.131.123:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.13.196.82:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.184.119.185:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.225.165.27:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.87.104.235:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.182.174.208:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.91.64.152:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.195.130.20:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.227.107.126:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.133.231.89:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.72.106.72:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.205.90.65:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.138.209.8:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.170.86.228:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.174.234.31:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.138.48.241:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.109.75.211:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.35.72.187:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 17.202.145.1:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.92.138.17:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.227.105.78:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.244.170.208:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.41.182.108:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.9.62.199:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.196.161.119:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.206.38.141:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.238.137.162:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.215.70.34:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.86.49.189:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.33.147.220:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.170.186.164:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.118.94.47:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 23.128.64.36:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.65.117.222:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.60.106.9:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.98.81.60:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.167.122.49:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.191.7.3:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.115.238.237:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 18.167.153.65:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.216.145.13:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.242.224.154:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.49.240.39:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.248.242.242:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.181.131.97:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 12.55.196.32:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.207.29.72:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 4.100.6.48:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.223.0.249:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.36.243.154:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.124.216.41:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.71.28.198:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.182.31.191:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.241.128.3:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 1.151.61.239:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.137.122.133:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.54.224.253:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.85.107.10:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 13.48.218.212:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.134.237.106:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.188.118.14:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 8.185.82.57:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.47.220.146:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 14.66.110.191:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 20.167.72.58:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 19.39.97.89:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 9.202.97.124:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 5.177.23.20:2323
Source: global traffic TCP traffic: 192.168.2.23:7819 -> 22.230.62.188:2323
Sample listens on a socket
Source: /tmp/na.elf (PID: 6256) Socket: 127.0.0.1:20905 Jump to behavior
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Source: global traffic TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: unknown TCP traffic detected without corresponding DNS query: 194.120.116.148
Source: unknown TCP traffic detected without corresponding DNS query: 12.42.213.227
Source: unknown TCP traffic detected without corresponding DNS query: 8.0.96.226
Source: unknown TCP traffic detected without corresponding DNS query: 19.48.237.21
Source: unknown TCP traffic detected without corresponding DNS query: 1.107.174.241
Source: unknown TCP traffic detected without corresponding DNS query: 13.40.72.145
Source: unknown TCP traffic detected without corresponding DNS query: 4.184.136.85
Source: unknown TCP traffic detected without corresponding DNS query: 8.105.211.181
Source: unknown TCP traffic detected without corresponding DNS query: 20.160.66.88
Source: unknown TCP traffic detected without corresponding DNS query: 14.167.220.202
Source: unknown TCP traffic detected without corresponding DNS query: 4.116.105.183
Source: unknown TCP traffic detected without corresponding DNS query: 13.200.75.170
Source: unknown TCP traffic detected without corresponding DNS query: 4.99.82.83
Source: unknown TCP traffic detected without corresponding DNS query: 13.52.33.201
Source: unknown TCP traffic detected without corresponding DNS query: 13.93.203.96
Source: unknown TCP traffic detected without corresponding DNS query: 20.60.103.116
Source: unknown TCP traffic detected without corresponding DNS query: 17.150.211.140
Source: unknown TCP traffic detected without corresponding DNS query: 20.59.56.16
Source: unknown TCP traffic detected without corresponding DNS query: 20.194.80.10
Source: unknown TCP traffic detected without corresponding DNS query: 5.58.146.197
Source: unknown TCP traffic detected without corresponding DNS query: 20.159.240.186
Source: unknown TCP traffic detected without corresponding DNS query: 12.151.197.217
Source: unknown TCP traffic detected without corresponding DNS query: 12.22.5.251
Source: unknown TCP traffic detected without corresponding DNS query: 12.51.117.21
Source: unknown TCP traffic detected without corresponding DNS query: 13.192.3.123
Source: unknown TCP traffic detected without corresponding DNS query: 23.58.92.109
Source: unknown TCP traffic detected without corresponding DNS query: 14.60.32.89
Source: unknown TCP traffic detected without corresponding DNS query: 4.84.85.182
Source: unknown TCP traffic detected without corresponding DNS query: 5.109.211.66
Source: unknown TCP traffic detected without corresponding DNS query: 18.50.73.242
Source: unknown TCP traffic detected without corresponding DNS query: 9.20.35.17
Source: unknown TCP traffic detected without corresponding DNS query: 20.182.174.187
Source: unknown TCP traffic detected without corresponding DNS query: 17.53.71.167
Source: unknown TCP traffic detected without corresponding DNS query: 22.211.57.5
Source: unknown TCP traffic detected without corresponding DNS query: 19.102.14.4
Source: unknown TCP traffic detected without corresponding DNS query: 9.21.24.97
Source: unknown TCP traffic detected without corresponding DNS query: 20.234.132.234
Source: unknown TCP traffic detected without corresponding DNS query: 5.124.58.134
Source: unknown TCP traffic detected without corresponding DNS query: 13.72.205.12
Source: unknown TCP traffic detected without corresponding DNS query: 17.124.242.179
Source: unknown TCP traffic detected without corresponding DNS query: 20.38.116.6
Source: unknown TCP traffic detected without corresponding DNS query: 20.97.194.7
Source: unknown TCP traffic detected without corresponding DNS query: 14.205.179.226
Source: unknown TCP traffic detected without corresponding DNS query: 4.180.169.165
Source: unknown TCP traffic detected without corresponding DNS query: 5.172.164.16
Source: unknown TCP traffic detected without corresponding DNS query: 14.212.118.24
Source: unknown TCP traffic detected without corresponding DNS query: 12.32.23.254
Source: unknown TCP traffic detected without corresponding DNS query: 13.119.72.15
Source: unknown TCP traffic detected without corresponding DNS query: 19.14.105.81
Source: unknown TCP traffic detected without corresponding DNS query: 9.77.161.234
Source: unknown Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 42836 -> 443
Sample has stripped symbol table
Source: ELF static info symbol of initial sample .symtab present: no
Sample tries to kill a process (SIGKILL)
Source: /tmp/na.elf (PID: 6264) SIGKILL sent: pid: 847, result: successful Jump to behavior
Source: /tmp/na.elf (PID: 6264) SIGKILL sent: pid: 6094, result: successful Jump to behavior
Source: classification engine Classification label: mal64.troj.linELF@0/1@0/0
Enumerates processes within the "proc" file system
Source: /tmp/na.elf (PID: 6264) File opened: /proc/4450/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1582/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2033/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2275/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/3088/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1612/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1579/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1699/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1335/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1698/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2028/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1334/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1576/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2302/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/3236/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2025/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2146/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/910/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/912/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/517/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/759/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/4447/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/4448/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/4449/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2307/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/918/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/6241/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/6240/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1594/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2285/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2281/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1349/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1623/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/761/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1622/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/884/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1983/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2038/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1344/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1465/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1586/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1860/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1463/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2156/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/800/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/801/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1629/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1627/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1900/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/6258/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/3021/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/491/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2294/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/6094/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2050/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1877/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/4508/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/772/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1633/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1599/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1632/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/774/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1477/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/654/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/896/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1476/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1872/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2048/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/655/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1475/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2289/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/656/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/777/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/657/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/658/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/4501/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/419/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/936/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1639/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1638/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/4505/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2208/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2180/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/6262/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1809/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1494/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1890/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2063/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2062/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1888/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1886/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/420/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1489/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/785/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1642/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/788/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/667/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/789/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/4511/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/1648/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2078/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2077/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2074/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/2195/maps Jump to behavior
Source: /tmp/na.elf (PID: 6264) File opened: /proc/670/maps Jump to behavior
Uses the "uname" system call to query kernel version information (possible evasion)
Source: /tmp/na.elf (PID: 6256) Queries kernel information via 'uname': Jump to behavior
Source: na.elf, 6256.1.000055b5b6491000.000055b5b6518000.rw-.sdmp, na.elf, 6260.1.000055b5b6491000.000055b5b6518000.rw-.sdmp Binary or memory string: /etc/qemu-binfmt/mipsel
Source: na.elf, 6256.1.000055b5b6491000.000055b5b6518000.rw-.sdmp, na.elf, 6260.1.000055b5b6491000.000055b5b6518000.rw-.sdmp Binary or memory string: U!/etc/qemu-binfmt/mipsel
Source: na.elf, 6256.1.00007ffe88ea9000.00007ffe88eca000.rw-.sdmp, na.elf, 6260.1.00007ffe88ea9000.00007ffe88eca000.rw-.sdmp Binary or memory string: hx86_64/usr/bin/qemu-mipsel/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf
Source: na.elf, 6256.1.00007ffe88ea9000.00007ffe88eca000.rw-.sdmp, na.elf, 6260.1.00007ffe88ea9000.00007ffe88eca000.rw-.sdmp Binary or memory string: /usr/bin/qemu-mipsel

Stealing of Sensitive Information
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 6256.1.00007f702c400000.00007f702c416000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 6260.1.00007f702c400000.00007f702c416000.r-x.sdmp, type: MEMORY

Remote Access Functionality
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 6256.1.00007f702c400000.00007f702c416000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 6260.1.00007f702c400000.00007f702c416000.r-x.sdmp, type: MEMORY

No Screenshots

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
17.178.181.179
 unknown United States
714 APPLE-ENGINEERINGUS false
9.28.175.172
 unknown United States
3356 LEVEL3US false
22.121.133.10
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
5.94.208.46
 unknown Italy
30722 VODAFONE-IT-ASNIT false
17.228.161.189
 unknown United States
714 APPLE-ENGINEERINGUS false
20.203.248.211
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
22.56.90.0
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
23.230.101.1
 unknown United States
18779 EGIHOSTINGUS false
5.57.98.180
 unknown France
49902 SRR-ASFR false
22.28.222.62
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
14.185.213.37
 unknown Viet Nam
45899 VNPT-AS-VNVNPTCorpVN false
23.71.222.15
 unknown United States
7922 COMCAST-7922US false
17.123.177.183
 unknown United States
714 APPLE-ENGINEERINGUS false
14.236.143.155
 unknown Viet Nam
45899 VNPT-AS-VNVNPTCorpVN false
13.9.44.34
 unknown United States
26662 XEROX-WVUS false
8.246.98.143
 unknown United States
202818 LEVEL3COMMUNICATIONSFR false
14.255.164.83
 unknown Viet Nam
45899 VNPT-AS-VNVNPTCorpVN false
5.213.228.153
 unknown Iran (ISLAMIC Republic Of)
197207 MCCI-ASIR false
5.108.29.123
 unknown Saudi Arabia
35819 MOBILY-ASEtihadEtisalatCompanyMobilySA false
17.103.141.51
 unknown United States
714 APPLE-ENGINEERINGUS false
9.40.197.132
 unknown United States
3356 LEVEL3US false
19.115.34.255
 unknown United States
3 MIT-GATEWAYSUS false
9.135.117.239
 unknown United States
3356 LEVEL3US false
8.6.157.70
 unknown United States
13335 CLOUDFLARENETUS false
17.217.96.167
 unknown United States
714 APPLE-ENGINEERINGUS false
22.106.117.244
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
8.97.116.28
 unknown United States
3356 LEVEL3US false
8.229.189.169
 unknown United States
3356 LEVEL3US false
17.158.121.234
 unknown United States
714 APPLE-ENGINEERINGUS false
13.178.125.31
 unknown United States
7018 ATT-INTERNET4US false
23.255.179.127
 unknown United States
16591 GOOGLE-FIBERUS false
8.144.123.168
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
18.56.190.54
 unknown United States
3 MIT-GATEWAYSUS false
9.235.199.111
 unknown United States
3356 LEVEL3US false
17.103.165.134
 unknown United States
714 APPLE-ENGINEERINGUS false
8.152.237.24
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
17.68.111.97
 unknown United States
714 APPLE-ENGINEERINGUS false
23.90.168.102
 unknown United States
21859 ZNETUS false
8.9.60.141
 unknown United States
11940 DIRECTSCOMUS false
9.222.167.2
 unknown United States
3356 LEVEL3US false
22.240.142.212
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
5.69.223.250
 unknown United Kingdom
5607 BSKYB-BROADBAND-ASGB false
18.40.47.185
 unknown United States
3 MIT-GATEWAYSUS false
5.122.146.215
 unknown Iran (ISLAMIC Republic Of)
44244 IRANCELL-ASIR false
1.208.17.118
 unknown Korea Republic of
3786 LGDACOMLGDACOMCorporationKR false
5.177.98.172
 unknown Turkey
20978 TT_MOBILIstanbulTR false
19.202.212.114
 unknown United States
3 MIT-GATEWAYSUS false
19.146.221.120
 unknown United States
3 MIT-GATEWAYSUS false
23.146.46.6
 unknown Reserved
18534 FIBER-CA false
12.127.217.85
 unknown United States
7018 ATT-INTERNET4US false
5.198.240.121
 unknown Jordan
9038 BAT-AS9038JO false
17.200.39.197
 unknown United States
714 APPLE-ENGINEERINGUS false
12.89.103.172
 unknown United States
7018 ATT-INTERNET4US false
4.84.234.122
 unknown United States
3356 LEVEL3US false
13.19.74.28
 unknown United States
26662 XEROX-WVUS false
22.10.91.147
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
13.9.20.59
 unknown United States
26662 XEROX-WVUS false
9.225.122.198
 unknown United States
3356 LEVEL3US false
20.132.231.165
 unknown United States
206 CSC-IGN-AMERUS false
4.57.133.250
 unknown United States
3356 LEVEL3US false
13.23.191.75
 unknown United States
395959 XEROX-ELLUS false
17.153.184.17
 unknown United States
714 APPLE-ENGINEERINGUS false
23.128.180.173
 unknown Reserved
397411 SLW-NET-01US false
14.29.211.230
 unknown China
4816 CHINANET-IDC-GDChinaTelecomGroupCN false
14.248.199.24
 unknown Viet Nam
45899 VNPT-AS-VNVNPTCorpVN false
19.8.111.168
 unknown United States
3 MIT-GATEWAYSUS false
13.183.171.169
 unknown United States
7018 ATT-INTERNET4US false
5.26.31.234
 unknown Turkey
16135 TURKCELL-ASTurkcellASTR false
20.81.61.198
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
1.63.142.55
 unknown China
4837 CHINA169-BACKBONECHINAUNICOMChina169BackboneCN false
9.81.204.171
 unknown United States
3356 LEVEL3US false
9.46.224.142
 unknown United States
3356 LEVEL3US false
22.88.65.254
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
20.183.227.145
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
13.202.131.115
 unknown United States
7018 ATT-INTERNET4US false
19.146.54.185
 unknown United States
3 MIT-GATEWAYSUS false
23.152.152.109
 unknown Reserved
13795 SMARTWAYCOMMUS false
12.245.37.173
 unknown United States
7018 ATT-INTERNET4US false
22.36.27.147
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
19.55.221.13
 unknown United States
3 MIT-GATEWAYSUS false
17.63.115.162
 unknown United States
714 APPLE-ENGINEERINGUS false
20.169.213.73
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
13.148.44.128
 unknown United States
7018 ATT-INTERNET4US false
17.143.142.173
 unknown United States
714 APPLE-ENGINEERINGUS false
18.100.14.220
 unknown United States
3 MIT-GATEWAYSUS false
14.127.239.218
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
8.9.12.242
 unknown United States
20473 AS-CHOOPAUS false
12.139.28.246
 unknown United States
7018 ATT-INTERNET4US false
17.252.221.118
 unknown United States
714 APPLE-ENGINEERINGUS false
13.183.73.159
 unknown United States
7018 ATT-INTERNET4US false
1.147.27.132
 unknown Australia
1221 ASN-TELSTRATelstraCorporationLtdAU false
5.59.92.236
 unknown Czech Republic
201746 OLIVENET-ASES false
22.194.60.212
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
13.157.234.47
 unknown United States
7018 ATT-INTERNET4US false
20.180.146.103
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
1.142.149.67
 unknown Australia
1221 ASN-TELSTRATelstraCorporationLtdAU false
1.95.70.131
 unknown China
4808 CHINA169-BJChinaUnicomBeijingProvinceNetworkCN false
23.141.232.100
 unknown Reserved
31807 RACKALOHA1US false
23.21.203.70
 unknown United States
14618 AMAZON-AESUS false
14.71.96.73
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false