Linux Analysis Report
na.elf

Overview

General Information

Sample name: na.elf
Analysis ID: 1532159
MD5: 379f0bb84c8e1c26ba3f93fdca46496c
SHA1: d43b6ab19bef29317f47cbea2d494815eea554c3
SHA256: c1154d9e825c3b94cd74ac5be78a594353712e5eb2576c243b5ebf2db7cadffd
Tags: elfuser-abuse_ch
Infos:

Detection

Mirai
Score: 64
Range: 0 - 100
Whitelisted: false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Executes the "rm" command used to delete files or directories
Sample has stripped symbol table
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

Name Description Attribution Blogpost URLs Link
Mirai Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world. No Attribution https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: na.elf Avira: detected
Multi AV Scanner detection for submitted file
Source: na.elf ReversingLabs: Detection: 63%
Source: na.elf Virustotal: Detection: 60% Perma Link
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.23:34408 -> 194.120.116.148:5555
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.74.118.48:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.167.115.57:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.72.228.196:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.29.40.125:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.237.8.180:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.6.169.68:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.118.122.117:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.32.130.228:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.94.172.138:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.15.247.183:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.179.13.68:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.246.89.79:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.132.249.174:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.84.114.54:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.174.196.109:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.175.83.163:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.32.62.20:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.20.76.125:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.98.214.56:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.90.207.147:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.178.68.152:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.128.164.33:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.216.176.127:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.125.239.73:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.151.79.141:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.59.103.216:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.107.111.41:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.50.241.226:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.44.15.67:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.32.186.205:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.120.4.86:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.165.0.253:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.146.246.10:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.61.6.14:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.187.238.215:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.194.64.98:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.96.35.173:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.151.28.30:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.9.136.242:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.213.99.168:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.11.17.91:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.95.247.21:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.235.178.150:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.126.0.93:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.240.109.168:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.114.79.62:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.33.75.176:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.56.244.126:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.87.216.156:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.120.175.126:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.35.14.217:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.13.110.10:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.60.81.113:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.230.151.237:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.80.121.218:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.5.55.212:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.63.162.18:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.25.37.138:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.8.166.12:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.103.85.92:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.41.165.224:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.230.37.243:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.113.96.9:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.122.77.181:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.119.208.60:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.85.235.243:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.164.129.207:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.72.211.189:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.83.39.169:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.52.117.105:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.149.148.154:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.111.68.76:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.149.165.163:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.88.211.161:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.50.140.133:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.216.184.35:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.168.110.202:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.45.234.126:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.193.203.117:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.24.189.248:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.245.123.25:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.246.81.151:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.206.138.37:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.110.4.113:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.103.127.2:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.119.51.187:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.122.201.21:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.49.154.112:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.29.2.201:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.91.62.163:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.219.44.29:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.227.32.206:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.67.110.145:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.198.234.12:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.93.180.13:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.46.51.95:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.178.90.67:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.42.85.254:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.114.176.168:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.181.226.195:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.215.92.173:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.214.44.218:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.251.16.202:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.47.225.211:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.121.180.59:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.151.184.44:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.26.13.36:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.61.132.10:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.238.136.180:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.202.245.231:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.152.223.143:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.199.115.217:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.240.183.57:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.30.93.236:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.23.14.252:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.128.234.132:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.39.225.182:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.77.30.194:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.212.232.145:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.69.237.57:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.92.229.198:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.10.200.121:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.138.169.146:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.32.125.131:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.3.20.74:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.13.40.155:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.157.99.240:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.126.245.127:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.214.57.30:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.180.114.75:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.112.188.172:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.120.14.10:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.247.48.98:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.170.218.96:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.37.6.249:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.43.235.196:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.195.137.11:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.31.187.93:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.33.151.14:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.21.81.74:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.184.24.122:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.146.209.184:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.113.142.161:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.222.235.138:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.235.247.16:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.203.89.248:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.90.86.164:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.153.137.87:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.153.165.245:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.144.89.117:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.114.118.129:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.236.3.49:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.83.145.53:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.93.9.6:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.152.248.211:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.225.7.238:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.36.114.252:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.131.55.221:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.51.250.150:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.137.106.204:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.220.92.207:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.228.72.192:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.239.232.251:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.36.108.73:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.57.91.190:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.34.60.249:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.225.254.79:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.96.118.228:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.237.230.182:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.236.108.224:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.18.211.254:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.169.101.133:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.111.43.64:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.179.208.97:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.90.240.178:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.228.206.214:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.179.216.246:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.34.182.196:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.56.72.21:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.91.32.238:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.195.117.251:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.150.115.50:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.168.109.179:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.125.27.76:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.180.70.160:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.65.206.246:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.132.158.108:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.6.80.67:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.20.234.177:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.84.219.242:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.97.19.193:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.85.194.238:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.14.18.209:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.4.53.190:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.72.17.86:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.56.80.218:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.112.144.216:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.223.154.0:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.89.212.44:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.130.56.33:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.70.254.212:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.92.231.55:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.148.222.162:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.11.183.232:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.190.192.72:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.16.43.123:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.251.125.56:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.143.93.246:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.83.152.199:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.230.90.3:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.64.147.255:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.35.171.127:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.249.12.152:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.166.101.106:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.242.13.227:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.114.16.125:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.35.71.144:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.233.242.248:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.230.20.10:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.106.169.61:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.187.66.212:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.8.3.148:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.252.225.107:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.194.240.175:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.80.124.16:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.148.127.29:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.220.157.15:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.16.63.12:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.223.236.45:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.94.28.84:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.156.189.238:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.176.145.145:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.253.168.225:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.162.182.36:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.108.195.57:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.80.217.226:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.107.59.42:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.117.163.96:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.176.70.245:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.227.166.21:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.15.202.199:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.210.208.125:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.79.158.119:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.215.28.26:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.65.139.102:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.89.245.130:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.87.205.25:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.125.204.46:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.100.30.159:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.106.113.53:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.129.11.204:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.186.212.3:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.18.241.39:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.77.143.51:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.206.109.26:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.60.47.73:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.97.191.224:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.177.177.58:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.153.19.137:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.141.178.247:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.116.104.248:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.82.168.91:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.71.14.211:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.27.196.99:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.242.160.57:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.6.49.176:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.0.48.203:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.154.54.249:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.105.244.164:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.95.116.8:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.226.183.74:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.202.189.221:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.40.205.86:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.151.248.238:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.91.197.252:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.63.166.123:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.37.196.57:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.82.243.79:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.237.64.26:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.246.175.136:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.137.253.15:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.167.11.2:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.103.253.223:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.207.116.117:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.207.36.230:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.66.61.73:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.94.86.196:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.31.242.224:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.117.83.186:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.139.25.65:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.167.107.154:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.90.56.222:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.198.120.20:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.90.200.245:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.88.22.234:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.98.130.237:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.125.220.23:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.145.24.145:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.58.23.212:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.15.200.248:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.172.37.112:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.144.228.84:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.85.112.107:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.24.187.228:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.201.58.11:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.105.41.4:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.158.189.113:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.67.122.145:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.210.34.175:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.242.134.103:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.110.125.163:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.31.170.201:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.245.9.36:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.102.245.175:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.237.25.87:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.170.70.19:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.201.138.189:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.127.56.81:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.53.229.162:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.20.61.155:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.185.104.126:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.145.179.159:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.192.14.182:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.190.244.29:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.202.204.46:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.231.128.104:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.64.59.187:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.152.53.25:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.85.190.85:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.227.41.64:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.220.85.3:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.220.62.230:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.190.231.113:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.135.155.0:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.231.125.222:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.204.231.116:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.218.221.223:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.197.124.11:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.110.127.240:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.144.172.40:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.228.172.69:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.151.163.40:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.171.155.17:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.149.114.204:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.126.151.60:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.243.239.142:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.187.84.14:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.58.164.82:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.182.195.238:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.109.102.111:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.140.63.240:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.118.170.111:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.63.149.206:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.60.236.58:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.138.237.37:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.114.140.230:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.231.178.38:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.140.186.35:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.62.239.236:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.215.253.228:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.39.113.46:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.94.65.186:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.169.115.127:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.3.98.187:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.7.184.113:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.77.16.193:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.126.17.42:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.103.86.96:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.243.43.124:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.128.68.161:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.227.80.34:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.34.141.193:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.165.83.51:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.20.5.131:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.205.50.184:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.69.101.194:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.137.24.217:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.240.174.152:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.103.110.229:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.34.241.201:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.24.80.217:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.65.17.84:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.151.197.51:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.131.211.84:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.30.209.166:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.190.159.153:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.235.213.108:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.255.181.226:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.111.9.29:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.217.74.42:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.228.80.213:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.155.51.168:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.108.99.127:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.143.18.222:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.54.235.169:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.52.51.89:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.231.3.150:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.16.239.29:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.51.180.38:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.73.171.249:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.174.20.80:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.2.97.196:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.172.150.148:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.149.92.72:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.242.240.165:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.151.214.145:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.143.19.181:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.50.57.64:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.46.167.182:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.163.145.153:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.166.194.194:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.68.218.31:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.235.44.192:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.2.108.74:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.36.39.238:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.173.148.69:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.227.128.45:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.195.113.216:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.159.221.202:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.62.168.248:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.142.51.172:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.93.53.154:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.111.243.155:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.142.43.87:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.146.242.77:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.123.165.104:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.225.18.3:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.64.165.117:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.166.235.122:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.61.103.128:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.193.139.170:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.222.239.195:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.85.160.210:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.120.0.120:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.226.173.77:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.17.241.245:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.135.90.185:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.200.48.255:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.234.227.127:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.144.214.160:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.140.60.23:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.90.58.102:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.177.134.1:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.228.227.111:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.183.186.187:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.3.23.187:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.9.29.115:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.229.113.249:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.3.54.222:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.221.11.78:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.170.161.125:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.107.136.197:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.1.176.3:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.65.80.159:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.192.25.183:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.203.129.254:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.164.113.134:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.69.127.167:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.118.55.14:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.40.39.235:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.61.164.53:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.158.226.65:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.188.219.115:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.192.144.94:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.155.80.32:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.159.163.84:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.219.167.129:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 1.68.33.63:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.106.195.104:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.60.218.52:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.148.200.16:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.200.138.45:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.71.44.61:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.127.209.113:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.163.85.63:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.134.230.20:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 8.189.45.205:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.228.169.174:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.162.133.91:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 13.225.4.178:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.240.137.240:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 5.168.82.186:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.192.81.116:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.202.180.164:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 22.81.199.217:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.125.227.92:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 18.26.182.123:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.0.81.81:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.5.132.48:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.28.179.10:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 4.187.195.107:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 19.173.16.7:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.42.210.137:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 14.1.165.194:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 12.20.31.239:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 20.68.206.202:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 9.193.156.103:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 17.45.22.126:2323
Source: global traffic TCP traffic: 192.168.2.23:2493 -> 23.143.48.192:2323
Sample listens on a socket
Source: /tmp/na.elf (PID: 6260) Socket: 127.0.0.1:20905 Jump to behavior
Source: unknown TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown TCP traffic detected without corresponding DNS query: 194.120.116.148
Source: unknown TCP traffic detected without corresponding DNS query: 12.74.118.48
Source: unknown TCP traffic detected without corresponding DNS query: 17.182.11.216
Source: unknown TCP traffic detected without corresponding DNS query: 9.15.98.93
Source: unknown TCP traffic detected without corresponding DNS query: 9.246.218.130
Source: unknown TCP traffic detected without corresponding DNS query: 12.167.172.8
Source: unknown TCP traffic detected without corresponding DNS query: 20.112.175.34
Source: unknown TCP traffic detected without corresponding DNS query: 19.223.43.42
Source: unknown TCP traffic detected without corresponding DNS query: 4.128.11.122
Source: unknown TCP traffic detected without corresponding DNS query: 17.102.220.231
Source: unknown TCP traffic detected without corresponding DNS query: 14.167.115.57
Source: unknown TCP traffic detected without corresponding DNS query: 22.125.244.218
Source: unknown TCP traffic detected without corresponding DNS query: 9.55.245.144
Source: unknown TCP traffic detected without corresponding DNS query: 8.154.12.216
Source: unknown TCP traffic detected without corresponding DNS query: 8.59.224.120
Source: unknown TCP traffic detected without corresponding DNS query: 4.29.115.142
Source: unknown TCP traffic detected without corresponding DNS query: 12.142.180.172
Source: unknown TCP traffic detected without corresponding DNS query: 4.107.112.119
Source: unknown TCP traffic detected without corresponding DNS query: 23.203.128.217
Source: unknown TCP traffic detected without corresponding DNS query: 23.65.94.149
Source: unknown TCP traffic detected without corresponding DNS query: 8.72.228.196
Source: unknown TCP traffic detected without corresponding DNS query: 17.163.219.227
Source: unknown TCP traffic detected without corresponding DNS query: 19.72.168.44
Source: unknown TCP traffic detected without corresponding DNS query: 1.21.33.182
Source: unknown TCP traffic detected without corresponding DNS query: 12.121.53.198
Source: unknown TCP traffic detected without corresponding DNS query: 8.238.94.39
Source: unknown TCP traffic detected without corresponding DNS query: 13.146.31.209
Source: unknown TCP traffic detected without corresponding DNS query: 12.22.235.8
Source: unknown TCP traffic detected without corresponding DNS query: 18.72.34.15
Source: unknown TCP traffic detected without corresponding DNS query: 13.224.202.135
Source: unknown TCP traffic detected without corresponding DNS query: 23.29.40.125
Source: unknown TCP traffic detected without corresponding DNS query: 1.134.82.128
Source: unknown TCP traffic detected without corresponding DNS query: 17.241.199.240
Source: unknown TCP traffic detected without corresponding DNS query: 8.117.28.5
Source: unknown TCP traffic detected without corresponding DNS query: 22.222.143.134
Source: unknown TCP traffic detected without corresponding DNS query: 5.90.167.221
Source: unknown TCP traffic detected without corresponding DNS query: 20.255.36.119
Source: unknown TCP traffic detected without corresponding DNS query: 13.3.165.241
Source: unknown TCP traffic detected without corresponding DNS query: 22.69.113.78
Source: unknown TCP traffic detected without corresponding DNS query: 17.164.118.77
Source: unknown TCP traffic detected without corresponding DNS query: 12.237.8.180
Source: unknown TCP traffic detected without corresponding DNS query: 8.94.245.19
Source: unknown TCP traffic detected without corresponding DNS query: 13.7.235.73
Source: unknown TCP traffic detected without corresponding DNS query: 5.206.57.183
Source: unknown TCP traffic detected without corresponding DNS query: 17.112.208.50
Source: unknown TCP traffic detected without corresponding DNS query: 14.62.51.121
Source: unknown TCP traffic detected without corresponding DNS query: 17.227.166.30
Source: unknown TCP traffic detected without corresponding DNS query: 23.237.207.97
Source: unknown TCP traffic detected without corresponding DNS query: 19.250.25.163
Source: unknown Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 39256
Source: unknown Network traffic detected: HTTP traffic on port 39256 -> 443
Sample has stripped symbol table
Source: ELF static info symbol of initial sample .symtab present: no
Sample tries to kill a process (SIGKILL)
Source: /tmp/na.elf (PID: 6266) SIGKILL sent: pid: 847, result: successful Jump to behavior
Source: /tmp/na.elf (PID: 6266) SIGKILL sent: pid: 6096, result: successful Jump to behavior
Source: classification engine Classification label: mal64.troj.linELF@0/1@0/0
Enumerates processes within the "proc" file system
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1582/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2033/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2275/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/3088/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1612/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1579/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1699/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1335/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1698/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2028/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1334/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1576/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2302/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/3236/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2025/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2146/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/910/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/4444/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/4445/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/912/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/4446/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/517/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/759/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/4447/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2307/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/918/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/6245/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/6246/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1594/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2285/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2281/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1349/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1623/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/761/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1622/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/884/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1983/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2038/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1344/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1465/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1586/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1860/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1463/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2156/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/800/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/4730/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/801/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1629/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1627/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1900/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/3021/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/491/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2294/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2050/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/6096/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1877/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/772/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1633/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1599/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1632/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/774/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1477/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/654/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/896/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1476/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1872/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2048/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/655/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1475/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2289/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/656/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/777/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/657/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/658/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/419/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/936/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1639/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1638/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2208/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2180/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/6262/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/6265/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1809/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1494/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1890/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2063/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2062/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1888/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1886/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/420/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1489/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/785/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1642/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/788/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/667/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/789/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/1648/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2078/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2077/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2074/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2195/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/670/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/2746/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/4529/maps Jump to behavior
Source: /tmp/na.elf (PID: 6266) File opened: /proc/793/maps Jump to behavior
Executes the "rm" command used to delete files or directories
Source: /usr/bin/dash (PID: 6278) Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.A6AyV5HON9 /tmp/tmp.cVw9IblZMW /tmp/tmp.uOqyFwcRRv Jump to behavior
Source: /usr/bin/dash (PID: 6279) Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.A6AyV5HON9 /tmp/tmp.cVw9IblZMW /tmp/tmp.uOqyFwcRRv Jump to behavior
Uses the "uname" system call to query kernel version information (possible evasion)
Source: /tmp/na.elf (PID: 6260) Queries kernel information via 'uname': Jump to behavior
Source: na.elf, 6260.1.00007ffdfdd68000.00007ffdfdd89000.rw-.sdmp, na.elf, 6264.1.00007ffdfdd68000.00007ffdfdd89000.rw-.sdmp Binary or memory string: x86_64/usr/bin/qemu-m68k/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf
Source: na.elf, 6260.1.00007ffdfdd68000.00007ffdfdd89000.rw-.sdmp, na.elf, 6264.1.00007ffdfdd68000.00007ffdfdd89000.rw-.sdmp Binary or memory string: /usr/bin/qemu-m68k
Source: na.elf, 6260.1.0000563da9400000.0000563da9485000.rw-.sdmp, na.elf, 6264.1.0000563da9400000.0000563da9485000.rw-.sdmp Binary or memory string: /etc/qemu-binfmt/m68k
Source: na.elf, 6260.1.0000563da9400000.0000563da9485000.rw-.sdmp, na.elf, 6264.1.0000563da9400000.0000563da9485000.rw-.sdmp Binary or memory string: =V!/etc/qemu-binfmt/m68k

Stealing of Sensitive Information
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 6264.1.00007f25cc001000.00007f25cc013000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 6260.1.00007f25cc001000.00007f25cc013000.r-x.sdmp, type: MEMORY

Remote Access Functionality
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 6264.1.00007f25cc001000.00007f25cc013000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 6260.1.00007f25cc001000.00007f25cc013000.r-x.sdmp, type: MEMORY

No Screenshots

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
12.70.84.50
 unknown United States
7018 ATT-INTERNET4US false
23.109.110.105
 unknown Netherlands
7979 SERVERS-COMUS false
18.110.204.79
 unknown United States
3 MIT-GATEWAYSUS false
14.26.29.58
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
4.250.17.37
 unknown United States
3356 LEVEL3US false
8.168.189.30
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
9.193.50.118
 unknown United States
3356 LEVEL3US false
19.117.204.29
 unknown United States
3 MIT-GATEWAYSUS false
17.222.174.239
 unknown United States
714 APPLE-ENGINEERINGUS false
19.88.233.132
 unknown United States
3 MIT-GATEWAYSUS false
1.228.79.64
 unknown Korea Republic of
9277 SKB-T-AS-KRSKBroadbandCoLtdKR false
12.164.173.34
 unknown United States
7018 ATT-INTERNET4US false
1.186.123.112
 unknown India
45769 DVOIS-IND-VoisBroadbandPvtLtdIN false
9.254.39.237
 unknown United States
3356 LEVEL3US false
8.133.115.152
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
8.186.115.126
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
14.228.128.135
 unknown Viet Nam
45899 VNPT-AS-VNVNPTCorpVN false
18.119.192.57
 unknown United States
3 MIT-GATEWAYSUS false
12.116.234.192
 unknown United States
7018 ATT-INTERNET4US false
5.174.175.5
 unknown Poland
8374 PLUSNETPlusnetworkoperatorinPolandPL false
17.160.124.68
 unknown United States
714 APPLE-ENGINEERINGUS false
17.141.43.226
 unknown United States
714 APPLE-ENGINEERINGUS false
9.66.236.186
 unknown United States
3356 LEVEL3US false
12.91.178.228
 unknown United States
7018 ATT-INTERNET4US false
13.203.29.125
 unknown United States
7018 ATT-INTERNET4US false
1.109.151.172
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
9.249.241.119
 unknown United States
3356 LEVEL3US false
14.253.249.224
 unknown Viet Nam
45899 VNPT-AS-VNVNPTCorpVN false
17.122.18.223
 unknown United States
714 APPLE-ENGINEERINGUS false
9.147.16.181
 unknown United States
3356 LEVEL3US false
14.0.175.253
 unknown Hong Kong
38819 HKCSL-AS-APHKCSLGPRSNETWORKHK false
18.237.116.228
 unknown United States
16509 AMAZON-02US false
17.118.37.6
 unknown United States
714 APPLE-ENGINEERINGUS false
17.88.89.197
 unknown United States
714 APPLE-ENGINEERINGUS false
13.223.33.114
 unknown United States
16509 AMAZON-02US false
12.245.113.85
 unknown United States
7018 ATT-INTERNET4US false
22.78.228.97
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
19.122.87.100
 unknown United States
3 MIT-GATEWAYSUS false
9.221.26.166
 unknown United States
3356 LEVEL3US false
14.108.128.90
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
20.10.177.101
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
23.85.79.157
 unknown United States
395954 LEASEWEB-USA-LAX-11US false
17.196.177.45
 unknown United States
714 APPLE-ENGINEERINGUS false
18.171.75.91
 unknown United States
3 MIT-GATEWAYSUS false
12.244.58.122
 unknown United States
7018 ATT-INTERNET4US false
8.246.201.230
 unknown United States
3356 LEVEL3US false
1.95.22.255
 unknown China
4808 CHINA169-BJChinaUnicomBeijingProvinceNetworkCN false
1.95.46.26
 unknown China
4808 CHINA169-BJChinaUnicomBeijingProvinceNetworkCN false
5.154.156.156
 unknown United Kingdom
23764 CTGI-CLOUDChinaTelecomGlobalLimitedHK false
5.236.23.49
 unknown Iran (ISLAMIC Republic Of)
58224 TCIIR false
19.11.67.22
 unknown United States
3 MIT-GATEWAYSUS false
5.194.181.35
 unknown United Arab Emirates
5384 EMIRATES-INTERNETEmiratesInternetAE false
19.8.111.174
 unknown United States
3 MIT-GATEWAYSUS false
17.142.240.232
 unknown United States
714 APPLE-ENGINEERINGUS false
20.8.104.126
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
17.165.122.115
 unknown United States
714 APPLE-ENGINEERINGUS false
9.25.134.252
 unknown United States
3356 LEVEL3US false
12.94.51.43
 unknown United States
7018 ATT-INTERNET4US false
22.51.205.115
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
20.5.221.80
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
12.28.184.10
 unknown United States
7018 ATT-INTERNET4US false
12.159.24.5
 unknown United States
7018 ATT-INTERNET4US false
13.12.78.122
 unknown United States
26662 XEROX-WVUS false
18.2.225.235
 unknown United States
10578 GIGAPOP-NEUS false
8.19.45.164
 unknown United States
40393 CROSSLINKNETWORKSUS false
18.223.161.99
 unknown United States
16509 AMAZON-02US false
17.32.131.196
 unknown United States
714 APPLE-ENGINEERINGUS false
19.78.137.75
 unknown United States
3 MIT-GATEWAYSUS false
19.180.21.107
 unknown United States
3 MIT-GATEWAYSUS false
8.173.30.152
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
17.180.225.58
 unknown United States
714 APPLE-ENGINEERINGUS false
22.153.26.207
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
22.134.192.149
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
17.188.215.171
 unknown United States
714 APPLE-ENGINEERINGUS false
23.118.97.115
 unknown United States
7018 ATT-INTERNET4US false
5.17.100.63
 unknown Russian Federation
41733 ZTELECOM-ASRU false
1.238.242.166
 unknown Korea Republic of
38396 GOEPJ-AS-KRPajuofficeofEducationGyeonggiProvinceKR false
13.214.81.27
 unknown United States
16509 AMAZON-02US false
1.248.72.126
 unknown Korea Republic of
9318 SKB-ASSKBroadbandCoLtdKR false
17.34.234.108
 unknown United States
714 APPLE-ENGINEERINGUS false
18.223.80.138
 unknown United States
16509 AMAZON-02US false
19.8.158.187
 unknown United States
3 MIT-GATEWAYSUS false
20.246.77.238
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
20.166.5.0
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
14.13.242.241
 unknown Japan 2516 KDDIKDDICORPORATIONJP false
23.1.146.23
 unknown United States
6762 SEABONE-NETTELECOMITALIASPARKLESpAIT false
23.37.155.83
 unknown United States
16625 AKAMAI-ASUS false
5.3.110.208
 unknown Russian Federation
39028 ULSK-ASRU false
19.201.169.93
 unknown United States
3 MIT-GATEWAYSUS false
17.160.77.95
 unknown United States
714 APPLE-ENGINEERINGUS false
4.66.185.176
 unknown United States
3356 LEVEL3US false
22.255.111.6
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
19.190.117.149
 unknown United States
3 MIT-GATEWAYSUS false
1.160.213.10
 unknown Taiwan; Republic of China (ROC)
3462 HINETDataCommunicationBusinessGroupTW false
18.8.223.16
 unknown United States
3 MIT-GATEWAYSUS false
17.78.52.242
 unknown United States
714 APPLE-ENGINEERINGUS false
18.20.136.44
 unknown United States
3 MIT-GATEWAYSUS false
14.174.217.165
 unknown Viet Nam
45899 VNPT-AS-VNVNPTCorpVN false
9.64.253.3
 unknown United States
3356 LEVEL3US false
1.49.127.51
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false