Linux Analysis Report
na.elf

Overview

General Information

Sample name: na.elf
Analysis ID: 1532158
MD5: 85e801b47b9c83f96f766ea284649f09
SHA1: 6934cdb5b59c2dffaf8b2996e0760d7529d42da2
SHA256: 58daf898b126300ba6477ebd285e0a264c94ca852c311a404dffe3331b34ddfb
Tags: elfuser-abuse_ch
Infos:

Detection

Mirai
Score: 64
Range: 0 - 100
Whitelisted: false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Sample has stripped symbol table
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

Name Description Attribution Blogpost URLs Link
Mirai Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world. No Attribution https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: na.elf Avira: detected
Multi AV Scanner detection for submitted file
Source: na.elf Virustotal: Detection: 61% Perma Link
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.15:39384 -> 194.120.116.148:5555
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.123.72.35:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.71.12.204:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.46.139.252:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.136.45.30:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.43.120.102:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.40.249.26:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.77.4.103:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.175.63.140:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.180.111.43:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.188.222.117:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.204.88.147:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.70.26.42:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.160.142.99:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.229.147.109:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.221.112.219:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.164.54.93:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.154.216.123:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.225.195.125:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.141.76.65:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.194.120.93:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.82.23.159:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.135.35.222:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.253.182.31:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.85.123.144:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.188.202.52:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.149.98.49:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.15.140.56:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.27.132.115:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.237.142.60:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.81.155.104:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.110.3.63:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.55.64.99:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.44.14.190:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.23.244.95:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.45.76.101:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.30.79.128:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.42.217.0:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.254.34.243:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.39.255.100:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.214.103.140:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.54.245.188:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.69.105.152:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.7.250.209:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.2.147.92:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.65.203.180:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.6.115.56:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.140.180.52:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.178.200.142:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.54.107.224:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.40.37.246:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.96.214.92:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.174.20.221:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.76.192.189:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.197.65.26:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.7.77.181:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.253.127.253:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.100.84.155:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.183.235.254:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.38.197.217:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.227.139.36:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.255.249.95:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.226.215.66:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.245.13.218:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.90.164.172:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.22.45.70:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.207.139.253:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.48.31.64:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.68.143.32:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.0.254.210:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.15.181.244:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.156.44.51:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.43.20.161:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.213.195.112:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.141.8.43:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.26.40.110:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.107.220.238:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.96.160.76:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.181.251.144:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.249.222.29:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.175.43.16:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.117.102.190:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.199.114.144:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.176.177.37:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.11.69.101:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.17.37.92:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.244.235.42:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.80.148.13:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.162.33.115:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.67.108.126:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.50.7.190:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.219.241.232:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.87.77.151:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.12.176.196:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.74.65.166:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.225.122.115:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.20.70.21:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.19.252.68:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.34.55.34:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.44.227.127:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.17.242.248:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.215.142.172:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.219.49.231:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.91.47.204:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.147.103.61:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.86.5.128:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.165.132.99:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.59.160.105:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.225.190.184:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.147.158.9:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.151.13.206:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.35.9.33:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.194.73.79:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.16.245.225:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.150.223.251:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.236.242.2:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.140.172.99:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.131.42.124:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.225.203.26:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.159.208.176:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.119.245.82:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.196.4.29:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.171.1.60:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.206.174.75:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.87.233.184:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.148.64.217:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.217.25.252:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.33.194.106:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.40.14.92:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.187.35.255:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.24.95.21:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.136.137.89:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.129.107.86:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.19.188.171:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.29.128.72:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.251.139.140:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.81.168.186:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.25.5.146:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.142.142.151:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.58.26.161:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.15.108.72:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.25.31.168:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.95.180.126:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.106.112.25:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.2.68.229:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.96.117.115:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.88.147.4:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.234.162.248:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.159.59.34:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.118.153.22:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.120.226.184:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.135.199.181:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.152.198.171:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.94.252.172:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.65.229.10:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.50.72.62:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.184.169.219:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.218.127.135:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.22.200.242:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.24.30.58:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.115.139.146:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.57.177.206:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.226.130.155:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.167.135.149:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.85.91.71:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.177.111.16:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.45.177.246:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.242.237.237:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.62.156.243:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.133.17.56:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.65.111.200:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.205.84.54:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.168.69.189:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.116.26.16:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.114.99.109:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.209.78.85:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.191.80.233:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.124.160.104:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.11.102.104:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.20.49.49:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.235.198.9:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.94.36.144:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.21.77.162:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.246.75.68:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.210.213.162:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.156.84.142:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.81.42.110:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.252.96.25:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.83.192.65:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.205.126.125:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.78.49.35:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.104.40.45:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.102.21.120:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.158.41.115:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.24.139.21:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.65.84.117:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.82.4.162:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.108.55.167:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.254.66.21:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.18.235.40:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.220.181.120:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.203.148.217:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.83.94.86:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.3.11.85:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.8.7.91:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.88.71.21:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.111.72.164:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.5.187.164:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.9.103.241:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.91.40.196:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.133.159.238:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.78.34.65:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.245.180.115:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.156.217.219:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.157.208.103:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.90.41.106:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.190.221.46:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.173.93.11:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.63.37.245:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.137.114.161:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.130.191.170:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.216.224.251:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.168.137.127:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.255.187.246:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.161.1.108:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.17.241.57:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.140.136.205:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.215.124.134:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.178.193.7:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.190.219.24:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.110.49.154:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.245.179.242:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.155.67.132:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.217.111.213:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.229.217.155:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.225.154.71:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.217.110.144:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.240.163.241:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.24.192.93:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.100.204.198:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.159.179.220:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.239.72.126:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.236.73.22:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.147.17.3:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.255.197.137:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.77.231.102:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.35.216.196:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.217.235.172:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.169.83.118:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.173.241.249:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.80.95.243:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.180.75.199:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.234.103.207:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.174.24.91:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.82.55.254:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.34.102.148:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.244.189.175:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.178.193.28:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.67.8.221:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.28.243.85:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.187.110.214:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.207.181.67:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.23.193.103:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.64.140.73:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.38.198.84:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.26.235.86:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.38.140.229:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.117.2.186:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.157.71.207:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.215.62.74:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.44.147.41:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.35.235.137:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.128.236.190:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.91.229.127:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.136.46.61:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.168.54.100:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.153.96.125:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.96.220.57:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.201.27.183:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.181.121.1:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.251.72.3:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.246.199.235:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.41.253.80:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.47.130.208:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.198.96.106:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.80.88.214:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.215.112.6:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.17.20.150:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.228.233.121:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.91.93.146:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.18.252.126:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.154.237.189:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.191.183.97:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.81.158.204:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.78.10.9:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.21.25.34:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.202.248.16:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.93.190.4:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.181.15.98:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.91.215.180:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.246.208.83:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.53.87.217:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.84.237.16:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.224.232.17:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.187.224.106:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.173.231.211:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.239.114.96:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.170.219.9:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.161.122.164:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.83.230.90:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.78.47.168:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.30.59.86:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.39.153.254:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.10.195.126:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.181.8.214:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.82.246.213:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.75.250.170:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.107.52.57:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.149.233.47:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.123.30.41:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.200.231.128:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.171.21.36:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.240.219.133:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.132.219.136:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.198.85.176:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.125.103.50:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.92.200.143:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.91.216.58:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.214.223.64:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.93.75.215:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.236.43.55:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.240.136.153:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.215.209.169:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.150.195.248:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.17.234.86:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.252.198.95:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.223.14.206:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.63.220.148:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.14.82.44:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.225.242.59:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.125.142.142:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.174.166.248:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.224.143.219:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.84.4.231:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.187.47.72:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.152.173.230:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.83.154.3:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.232.204.104:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.32.76.32:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.26.133.95:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.157.215.138:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.16.9.169:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.249.161.151:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.243.10.134:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.134.194.76:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.123.119.123:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.72.78.45:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.227.146.15:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.235.229.193:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.46.125.153:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.53.4.46:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.202.101.1:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.105.5.62:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.176.149.113:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.44.187.89:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.83.152.181:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.223.172.60:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.151.88.27:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.76.147.81:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.161.151.223:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.155.92.31:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.69.240.0:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.10.116.245:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.190.229.10:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.50.53.207:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.239.156.145:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.131.122.48:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.233.21.156:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.36.77.179:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.203.141.233:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.26.214.76:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.100.134.122:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.215.2.113:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.158.199.252:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.25.191.100:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.197.201.40:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.144.117.57:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.217.79.81:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.171.116.122:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.114.53.107:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.2.239.25:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.138.153.97:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.66.163.26:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.185.68.135:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.208.221.175:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.57.219.8:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.78.217.238:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.14.108.220:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.176.145.133:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.251.104.198:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.130.240.67:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.207.136.199:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.196.159.20:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.198.90.238:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.135.70.154:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.38.55.250:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.111.163.80:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.22.109.162:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.85.29.245:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.129.196.219:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.76.176.166:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.62.101.186:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.148.244.184:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.109.212.87:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.80.97.40:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.247.116.38:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.23.237.114:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.61.204.87:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.52.218.141:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.147.232.99:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.80.15.35:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.139.96.237:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.71.185.66:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.40.244.254:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.108.212.169:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.82.222.191:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.119.196.191:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.166.230.137:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.97.217.218:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.11.204.131:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.221.50.43:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.61.95.0:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.95.92.179:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.1.94.101:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.28.108.223:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.80.205.217:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.39.33.135:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.185.106.96:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.170.42.42:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.93.4.114:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.228.228.195:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.165.29.246:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.237.10.233:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.6.14.134:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.218.233.174:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.96.16.161:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.15.148.166:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.209.195.45:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.168.108.176:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.211.32.114:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.243.250.83:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.68.135.63:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.129.48.211:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.225.112.95:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.121.210.172:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.185.70.10:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.238.163.130:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.220.9.14:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.188.143.6:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.118.208.123:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.179.82.222:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.173.110.57:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.230.185.209:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.70.117.167:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 1.64.231.138:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.3.6.170:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.151.94.94:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.197.223.83:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.61.188.43:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.10.13.192:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.49.185.48:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.13.19.17:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.10.230.150:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 22.15.79.77:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.213.220.183:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 5.28.72.139:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 4.163.250.104:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.217.18.38:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.255.243.65:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.160.48.225:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 23.85.73.10:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 14.45.211.102:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 9.19.233.135:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.133.28.200:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.217.82.154:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.227.137.30:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.123.65.109:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.112.106.150:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.183.149.143:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 8.132.100.37:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.53.245.223:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 19.84.202.118:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.17.175.64:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.84.180.243:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 20.166.45.155:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 12.160.115.47:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.230.150.167:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 17.247.29.59:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 18.183.46.220:2323
Source: global traffic TCP traffic: 192.168.2.15:43778 -> 13.116.18.134:2323
Sample listens on a socket
Source: /tmp/na.elf (PID: 5531) Socket: 127.0.0.1:20905 Jump to behavior
Source: unknown TCP traffic detected without corresponding DNS query: 194.120.116.148
Source: unknown TCP traffic detected without corresponding DNS query: 17.171.111.77
Source: unknown TCP traffic detected without corresponding DNS query: 23.101.18.116
Source: unknown TCP traffic detected without corresponding DNS query: 13.123.72.35
Source: unknown TCP traffic detected without corresponding DNS query: 19.181.108.242
Source: unknown TCP traffic detected without corresponding DNS query: 22.177.190.236
Source: unknown TCP traffic detected without corresponding DNS query: 12.107.84.190
Source: unknown TCP traffic detected without corresponding DNS query: 12.245.51.18
Source: unknown TCP traffic detected without corresponding DNS query: 23.224.146.255
Source: unknown TCP traffic detected without corresponding DNS query: 19.44.117.228
Source: unknown TCP traffic detected without corresponding DNS query: 8.77.22.170
Source: unknown TCP traffic detected without corresponding DNS query: 9.71.12.204
Source: unknown TCP traffic detected without corresponding DNS query: 4.227.22.130
Source: unknown TCP traffic detected without corresponding DNS query: 17.11.179.61
Source: unknown TCP traffic detected without corresponding DNS query: 18.86.194.235
Source: unknown TCP traffic detected without corresponding DNS query: 23.219.48.207
Source: unknown TCP traffic detected without corresponding DNS query: 9.234.96.104
Source: unknown TCP traffic detected without corresponding DNS query: 12.243.80.222
Source: unknown TCP traffic detected without corresponding DNS query: 1.124.254.199
Source: unknown TCP traffic detected without corresponding DNS query: 13.5.14.175
Source: unknown TCP traffic detected without corresponding DNS query: 22.76.206.100
Source: unknown TCP traffic detected without corresponding DNS query: 19.46.139.252
Source: unknown TCP traffic detected without corresponding DNS query: 9.239.246.108
Source: unknown TCP traffic detected without corresponding DNS query: 14.82.18.185
Source: unknown TCP traffic detected without corresponding DNS query: 19.218.199.164
Source: unknown TCP traffic detected without corresponding DNS query: 9.190.31.183
Source: unknown TCP traffic detected without corresponding DNS query: 23.27.130.233
Source: unknown TCP traffic detected without corresponding DNS query: 13.68.191.171
Source: unknown TCP traffic detected without corresponding DNS query: 20.132.34.162
Source: unknown TCP traffic detected without corresponding DNS query: 5.136.45.30
Source: unknown TCP traffic detected without corresponding DNS query: 8.66.70.159
Source: unknown TCP traffic detected without corresponding DNS query: 17.102.205.239
Source: unknown TCP traffic detected without corresponding DNS query: 8.219.125.215
Source: unknown TCP traffic detected without corresponding DNS query: 12.41.79.17
Source: unknown TCP traffic detected without corresponding DNS query: 8.189.71.127
Source: unknown TCP traffic detected without corresponding DNS query: 1.0.84.253
Source: unknown TCP traffic detected without corresponding DNS query: 17.245.1.121
Source: unknown TCP traffic detected without corresponding DNS query: 5.207.84.82
Source: unknown TCP traffic detected without corresponding DNS query: 23.50.208.91
Source: unknown TCP traffic detected without corresponding DNS query: 23.199.29.115
Source: unknown TCP traffic detected without corresponding DNS query: 5.8.225.128
Source: unknown TCP traffic detected without corresponding DNS query: 9.43.120.102
Source: unknown TCP traffic detected without corresponding DNS query: 23.223.108.225
Source: unknown TCP traffic detected without corresponding DNS query: 9.106.41.166
Source: unknown TCP traffic detected without corresponding DNS query: 17.107.8.125
Source: unknown TCP traffic detected without corresponding DNS query: 19.77.124.250
Source: unknown TCP traffic detected without corresponding DNS query: 14.31.56.54
Source: unknown TCP traffic detected without corresponding DNS query: 17.3.189.162
Source: unknown TCP traffic detected without corresponding DNS query: 8.91.23.40
Source: unknown TCP traffic detected without corresponding DNS query: 14.31.36.211
Sample has stripped symbol table
Source: ELF static info symbol of initial sample .symtab present: no
Sample tries to kill a process (SIGKILL)
Source: /tmp/na.elf (PID: 5539) SIGKILL sent: pid: 850, result: successful Jump to behavior
Source: /tmp/na.elf (PID: 5539) SIGKILL sent: pid: 5369, result: successful Jump to behavior
Source: classification engine Classification label: mal64.troj.linELF@0/1@0/0
Enumerates processes within the "proc" file system
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1185/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3241/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3483/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1732/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1730/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1333/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1695/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3235/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3234/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/5533/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/911/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/515/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/914/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1617/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/5537/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1615/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/917/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3255/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3253/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1591/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3252/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3251/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3250/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1623/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1588/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3249/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/764/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3368/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1585/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3246/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3488/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/766/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/800/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/888/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/802/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1509/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/803/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/804/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3800/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1867/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3407/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1484/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/490/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1514/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1634/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1479/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1875/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/654/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3379/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/655/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/656/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/777/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/931/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1595/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/657/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/812/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/779/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/658/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/933/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/418/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/419/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3419/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3310/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3275/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3274/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3273/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3394/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3272/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/782/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3303/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1762/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3027/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1486/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/789/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1806/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1660/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3044/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3440/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/793/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/794/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3316/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/674/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/796/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/675/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/676/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1498/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1497/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1496/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3157/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3278/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3399/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3797/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3710/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3798/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3799/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/1659/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/5473/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3332/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3210/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3298/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3055/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3052/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/680/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/681/maps Jump to behavior
Source: /tmp/na.elf (PID: 5539) File opened: /proc/3292/maps Jump to behavior
Uses the "uname" system call to query kernel version information (possible evasion)
Source: /tmp/na.elf (PID: 5531) Queries kernel information via 'uname': Jump to behavior
Source: na.elf, 5531.1.00005643198cf000.000056431997f000.rw-.sdmp Binary or memory string: !/etc/qemu-binfmt/ppc11!hotpluggableq
Source: na.elf, 5535.1.00005643198cf000.000056431997f000.rw-.sdmp Binary or memory string: !/etc/qemu-binfmt/ppc1
Source: na.elf, 5531.1.00005643198cf000.000056431997f000.rw-.sdmp, na.elf, 5535.1.00005643198cf000.000056431997f000.rw-.sdmp Binary or memory string: /etc/qemu-binfmt/ppc
Source: na.elf, 5531.1.00007ffc4b0a5000.00007ffc4b0c6000.rw-.sdmp, na.elf, 5535.1.00007ffc4b0a5000.00007ffc4b0c6000.rw-.sdmp Binary or memory string: /usr/bin/qemu-ppc
Source: na.elf, 5531.1.00007ffc4b0a5000.00007ffc4b0c6000.rw-.sdmp, na.elf, 5535.1.00007ffc4b0a5000.00007ffc4b0c6000.rw-.sdmp Binary or memory string: :x86_64/usr/bin/qemu-ppc/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf

Stealing of Sensitive Information
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 5531.1.00007f9dbc001000.00007f9dbc012000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5535.1.00007f9dbc001000.00007f9dbc012000.r-x.sdmp, type: MEMORY

Remote Access Functionality
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 5531.1.00007f9dbc001000.00007f9dbc012000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5535.1.00007f9dbc001000.00007f9dbc012000.r-x.sdmp, type: MEMORY
windows-stand
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
9.103.2.130
 unknown United States
3356 LEVEL3US false
14.33.178.110
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
1.94.186.186
 unknown China
4808 CHINA169-BJChinaUnicomBeijingProvinceNetworkCN false
17.193.101.240
 unknown United States
714 APPLE-ENGINEERINGUS false
8.132.213.209
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
13.86.202.233
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
12.121.179.15
 unknown United States
7018 ATT-INTERNET4US false
12.70.84.53
 unknown United States
7018 ATT-INTERNET4US false
13.144.67.95
 unknown United States
7018 ATT-INTERNET4US false
12.27.12.153
 unknown United States
22024 SPLUNK-WESTUS false
23.51.121.84
 unknown United States
16625 AKAMAI-ASUS false
17.127.80.36
 unknown United States
714 APPLE-ENGINEERINGUS false
20.67.97.39
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
12.79.97.246
 unknown United States
7018 ATT-INTERNET4US false
19.19.116.13
 unknown United States
3 MIT-GATEWAYSUS false
22.85.230.46
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
5.157.213.43
 unknown Romania
201909 INTEL-TECH-DEVELOPMENT-SRLRO false
9.29.117.152
 unknown United States
3356 LEVEL3US false
20.199.180.228
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
14.201.76.114
 unknown Australia
7545 TPG-INTERNET-APTPGTelecomLimitedAU false
20.203.184.46
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
4.65.195.237
 unknown United States
3356 LEVEL3US false
9.101.52.59
 unknown United States
3356 LEVEL3US false
9.153.114.46
 unknown United States
3356 LEVEL3US false
4.134.233.126
 unknown United States
3356 LEVEL3US false
18.207.39.157
 unknown United States
14618 AMAZON-AESUS false
18.22.153.235
 unknown United States
3 MIT-GATEWAYSUS false
19.117.54.7
 unknown United States
3 MIT-GATEWAYSUS false
9.243.166.39
 unknown United States
3356 LEVEL3US false
13.44.1.62
 unknown United States
7018 ATT-INTERNET4US false
8.228.63.97
 unknown United States
3356 LEVEL3US false
8.243.120.230
 unknown United States
3356 LEVEL3US false
20.119.218.53
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
22.22.196.23
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
13.100.15.172
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
12.139.28.230
 unknown United States
7018 ATT-INTERNET4US false
9.253.113.115
 unknown United States
3356 LEVEL3US false
5.8.154.201
 unknown Lebanon
31126 SODETEL-ASLB false
22.49.101.24
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
5.108.208.209
 unknown Saudi Arabia
35819 MOBILY-ASEtihadEtisalatCompanyMobilySA false
13.52.148.218
 unknown United States
16509 AMAZON-02US false
9.55.216.15
 unknown United States
3356 LEVEL3US false
4.123.137.124
 unknown United States
3356 LEVEL3US false
13.81.52.242
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
23.90.168.113
 unknown United States
21859 ZNETUS false
5.66.14.115
 unknown United Kingdom
5607 BSKYB-BROADBAND-ASGB false
8.118.195.24
 unknown United States
3356 LEVEL3US false
18.2.173.41
 unknown United States
10578 GIGAPOP-NEUS false
5.190.23.210
 unknown Iran (ISLAMIC Republic Of)
58224 TCIIR false
1.24.207.239
 unknown China
139007 UNICOM-NM-WULANCHABU-IDCUNICOMInnerMongoliaprovincenetwo false
14.1.165.112
 unknown Malaysia
45960 YTLCOMMS-AS-APYTLCOMMUNICATIONSSDNBHDMY false
20.128.14.32
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
22.201.47.9
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
8.249.142.24
 unknown United States
3356 LEVEL3US false
13.202.97.93
 unknown United States
7018 ATT-INTERNET4US false
18.126.156.66
 unknown United States
3 MIT-GATEWAYSUS false
19.171.57.240
 unknown United States
3 MIT-GATEWAYSUS false
23.170.113.139
 unknown Reserved
394969 LOLAWIRELESSUS false
13.133.28.200
 unknown United States
7018 ATT-INTERNET4US false
14.55.85.2
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
14.145.113.165
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
4.165.129.112
 unknown United States
3356 LEVEL3US false
1.64.180.238
 unknown Hong Kong
4760 HKTIMS-APHKTLimitedHK false
4.93.115.37
 unknown United States
3356 LEVEL3US false
22.24.199.144
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
18.134.54.215
 unknown United States
16509 AMAZON-02US false
13.9.19.88
 unknown United States
26662 XEROX-WVUS false
8.151.21.100
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
23.171.202.30
 unknown Reserved
30399 DTGNETUS false
4.219.252.128
 unknown United States
3356 LEVEL3US false
17.177.119.159
 unknown United States
714 APPLE-ENGINEERINGUS false
23.63.94.44
 unknown United States
20940 AKAMAI-ASN1EU false
20.254.50.242
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
5.166.34.78
 unknown Russian Federation
51604 EKAT-ASRU false
1.42.164.213
 unknown Australia
4804 MPX-ASMicroplexPTYLTDAU false
23.247.81.47
 unknown United States
46573 LAYER-HOSTUS false
17.123.242.21
 unknown United States
714 APPLE-ENGINEERINGUS false
14.83.67.17
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
23.204.246.14
 unknown United States
16625 AKAMAI-ASUS false
17.194.138.198
 unknown United States
714 APPLE-ENGINEERINGUS false
4.249.28.77
 unknown United States
3356 LEVEL3US false
23.155.145.133
 unknown Reserved
398299 FRAXIONCA false
22.210.235.229
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
4.165.129.123
 unknown United States
3356 LEVEL3US false
19.85.199.128
 unknown United States
3 MIT-GATEWAYSUS false
4.77.44.5
 unknown United States
3356 LEVEL3US false
8.87.170.182
 unknown United States
3356 LEVEL3US false
23.74.163.250
 unknown United States
16625 AKAMAI-ASUS false
8.195.50.35
 unknown United States
3356 LEVEL3US false
19.240.54.53
 unknown United States
3 MIT-GATEWAYSUS false
9.193.49.255
 unknown United States
3356 LEVEL3US false
8.170.93.153
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
17.159.246.69
 unknown United States
714 APPLE-ENGINEERINGUS false
22.148.110.108
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
8.24.22.11
 unknown United States
23089 HOTWIRE-COMMUNICATIONSUS false
18.48.67.92
 unknown United States
3 MIT-GATEWAYSUS false
19.4.20.180
 unknown United States
3 MIT-GATEWAYSUS false
12.169.234.137
 unknown United States
7018 ATT-INTERNET4US false
13.145.197.245
 unknown United States
7018 ATT-INTERNET4US false
9.245.76.239
 unknown United States
3356 LEVEL3US false