Linux Analysis Report
na.elf

Overview

General Information

Sample name: na.elf
Analysis ID: 1532162
MD5: 3dd1547833ab234ad501937fb9f336b9
SHA1: 595cc000bba4bda8b3336d888a4043c7b5275438
SHA256: 9853807a689e4955d373c2af1b86772d04fbbf6a09e9cc871547139348ce0bb9
Tags: elfuser-abuse_ch
Infos:

Detection

Mirai
Score: 64
Range: 0 - 100
Whitelisted: false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Sample has stripped symbol table
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

Name Description Attribution Blogpost URLs Link
Mirai Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world. No Attribution https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: na.elf Avira: detected
Multi AV Scanner detection for submitted file
Source: na.elf Virustotal: Detection: 58% Perma Link
Source: na.elf ReversingLabs: Detection: 63%
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.7.13.65:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.161.234.51:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.76.103.252:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.65.150.246:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.137.88.18:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.247.18.215:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.68.4.77:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.90.122.174:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.228.22.30:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.162.242.190:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.101.52.235:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.5.60.71:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.25.60.56:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.207.127.203:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.87.91.242:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.119.136.111:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.17.187.91:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.27.226.231:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.194.184.244:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.55.184.225:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.141.149.215:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.142.147.82:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.235.190.242:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.175.84.131:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.39.200.239:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.184.195.118:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.228.154.78:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.205.220.83:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.178.129.0:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.60.109.148:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.105.231.146:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.133.164.98:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.186.153.252:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.208.163.57:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.19.170.52:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.201.70.21:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.197.139.253:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.115.18.233:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.253.194.10:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.136.243.164:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.152.9.119:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.175.85.227:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.212.20.193:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.84.115.181:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.163.181.224:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.254.52.22:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.232.70.208:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.109.232.181:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.180.193.248:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.160.98.106:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.239.177.72:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.132.128.158:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.55.120.4:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.212.124.234:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.113.179.251:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.27.86.156:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.223.250.234:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.242.208.2:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.69.154.236:2323
Source: global traffic TCP traffic: 192.168.2.15:39390 -> 194.120.116.148:5555
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.160.109.11:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.246.72.169:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.132.3.202:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.4.28.203:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.181.134.227:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.140.247.93:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.214.48.61:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.0.103.249:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.179.134.81:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.8.153.117:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.245.32.43:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.2.115.45:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.212.221.38:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.35.55.189:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.6.240.222:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.239.251.48:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.216.9.122:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.3.132.105:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.51.12.164:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.55.252.218:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.86.236.176:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.30.122.214:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.121.114.105:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.92.168.84:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.26.29.96:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.29.68.231:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.208.104.237:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.170.47.132:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.229.138.4:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.218.211.4:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.4.228.65:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.15.94.160:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.249.24.169:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.26.225.127:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.233.108.41:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.61.158.219:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.100.110.187:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.135.181.83:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.118.144.168:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.138.54.66:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.77.231.110:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.203.69.130:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.18.186.62:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.168.154.99:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.146.223.144:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.193.248.213:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.33.240.27:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.89.67.122:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.219.245.225:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.137.177.92:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.67.171.108:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.26.57.233:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.44.26.90:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.221.153.104:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.129.146.128:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.100.22.80:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.8.11.219:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.72.10.225:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.75.196.233:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.131.7.1:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.248.53.152:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.170.123.168:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.241.26.6:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.26.220.240:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.247.110.225:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.122.207.162:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.48.115.188:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.21.205.107:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.208.25.23:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.16.213.248:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.238.243.92:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.82.74.225:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.198.247.179:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.203.53.238:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.78.159.134:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.218.110.215:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.146.187.52:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.68.48.91:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.29.113.223:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.55.93.53:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.33.160.238:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.195.245.242:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.195.153.89:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.240.71.209:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.171.160.74:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.132.247.71:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.3.167.198:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.85.187.113:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.82.246.238:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.238.88.1:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.117.32.151:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.218.54.122:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.38.151.132:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.94.17.173:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.138.30.254:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.244.109.244:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.186.234.237:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.52.119.1:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.92.100.219:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.157.36.75:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.139.174.63:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.254.27.197:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.27.53.20:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.13.4.171:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.158.61.250:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.118.146.48:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.89.25.246:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.118.176.110:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.32.158.164:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.177.155.135:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.22.174.180:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.201.155.242:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.120.246.16:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.253.47.92:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.33.183.241:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.218.177.246:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.52.174.203:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.94.177.202:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.100.171.15:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.173.186.30:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.240.220.151:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.164.173.33:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.163.197.224:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.138.6.73:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.35.227.192:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.28.173.180:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.220.3.55:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.29.114.248:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.116.19.240:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.18.178.182:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.214.77.233:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.90.253.88:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.28.151.203:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.103.190.146:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.161.204.120:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.246.214.77:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.45.215.182:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.159.51.131:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.57.207.46:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.95.201.126:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.27.31.32:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.107.147.65:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.152.89.123:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.113.233.164:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.177.6.175:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.2.136.41:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.149.9.155:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.126.137.210:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.223.90.178:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.36.99.167:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.229.238.216:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.54.72.234:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.165.205.29:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.210.212.209:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.106.223.205:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.188.190.100:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.182.141.143:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.14.225.78:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.185.37.248:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.220.148.45:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.216.144.121:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.196.244.221:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.243.57.61:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.108.215.165:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.247.123.246:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.159.105.21:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.130.195.196:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.34.56.219:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.244.191.32:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.195.167.157:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.240.33.64:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.0.200.238:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.5.53.106:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.181.10.37:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.15.245.181:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.250.151.188:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.13.130.8:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.47.132.152:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.0.123.210:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.15.157.25:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.117.56.247:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.123.83.183:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.194.22.247:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.80.10.87:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.170.234.168:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.223.25.0:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.224.62.209:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.58.46.24:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.236.176.160:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.102.112.36:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.155.145.152:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.238.16.228:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.123.232.62:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.91.20.241:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.239.136.92:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.71.82.177:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.231.0.46:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.6.251.145:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.222.253.48:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.76.58.176:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.84.242.12:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.100.32.145:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.106.234.126:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.146.182.64:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.47.58.185:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.129.109.125:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.150.161.169:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.238.114.121:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.59.191.104:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.107.170.163:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.149.43.87:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.24.141.250:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.254.244.177:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.174.214.220:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.95.88.81:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.250.229.70:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.56.60.81:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.174.31.38:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.44.168.107:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.168.80.179:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.62.82.80:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.113.79.38:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.163.166.114:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.171.156.171:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.146.149.174:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.150.103.109:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.216.123.58:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.191.82.201:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.22.202.72:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.131.83.217:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.172.163.158:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.242.254.35:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.90.154.187:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.14.68.186:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.189.186.26:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.15.157.160:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.88.124.177:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.226.217.182:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.165.7.202:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.80.5.229:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.191.86.212:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.157.108.62:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.236.176.152:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.244.222.165:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.184.154.6:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.23.215.129:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.133.172.80:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.144.5.47:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.93.177.234:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.94.229.251:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.12.19.39:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.123.202.12:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.32.169.103:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.191.137.6:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.154.77.8:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.229.15.255:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.171.99.149:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.105.155.193:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.161.24.83:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.184.67.156:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.124.114.126:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.21.114.145:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.192.231.244:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.121.107.47:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.152.118.45:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.33.226.197:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.75.206.47:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.42.232.82:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.85.86.175:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.6.49.169:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.35.32.175:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.220.108.62:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.192.127.237:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.34.91.197:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.187.182.82:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.225.128.33:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.192.105.126:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.230.245.4:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.7.88.22:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.28.178.139:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.14.124.82:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.69.172.104:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.253.108.191:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.109.205.149:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.176.3.0:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.61.105.115:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.174.115.155:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.137.189.250:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.71.89.160:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.58.255.185:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.57.105.203:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.152.29.245:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.100.104.180:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.65.192.102:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.128.228.201:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.14.192.199:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.54.3.184:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.108.237.111:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.64.62.191:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.143.195.66:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.141.22.6:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.135.230.180:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.235.249.3:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.97.150.25:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.227.95.37:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.64.217.50:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.179.119.138:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.123.87.148:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.199.234.224:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.57.137.180:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.46.197.82:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.110.127.246:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.91.224.252:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.116.98.206:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.28.107.210:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.212.173.78:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.248.25.50:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.168.102.11:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.7.238.201:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.153.189.233:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.95.26.255:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.96.52.164:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.86.154.238:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.192.248.50:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.99.59.110:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.151.82.69:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.248.15.53:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.26.181.85:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.131.164.246:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.30.233.103:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.140.70.67:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.163.210.140:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.131.94.202:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.147.211.197:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.182.65.40:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.56.168.167:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.125.112.172:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.52.232.223:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.95.223.90:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.55.98.54:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.97.115.131:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.68.228.183:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.134.48.191:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.186.78.157:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.120.27.140:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.4.198.68:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.26.245.2:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.122.106.86:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.29.230.226:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.78.31.122:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.146.106.57:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.23.145.149:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.51.161.54:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.59.82.26:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.221.190.156:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.147.187.172:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.91.53.83:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.133.107.152:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.250.218.245:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.232.171.62:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.251.155.81:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.9.81.122:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.47.115.23:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.5.158.170:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.109.194.208:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.123.146.65:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.12.213.83:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.122.197.87:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.247.90.139:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.229.232.10:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 13.83.253.154:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.247.73.186:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.52.8.255:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.179.94.91:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.99.169.185:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.214.119.99:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.78.2.131:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.242.211.75:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.48.119.106:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.179.252.165:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.63.51.56:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.21.241.104:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.103.140.62:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.246.180.67:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.147.197.221:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.200.110.78:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.50.207.222:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.186.213.115:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.114.44.103:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.105.153.90:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.191.105.57:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.174.226.139:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.181.92.66:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.7.96.18:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.191.124.221:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.134.176.247:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.144.232.108:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.116.242.45:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.9.185.81:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.200.88.236:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.128.80.72:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.72.72.49:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.2.86.236:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.42.156.171:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.16.56.11:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.112.222.225:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.55.139.97:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.72.3.55:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.136.239.179:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 18.18.212.217:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.27.193.107:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.69.215.88:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 22.242.216.222:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.192.221.179:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.93.246.8:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.155.114.250:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.169.19.60:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.139.94.47:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.254.61.150:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.244.134.60:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.167.35.168:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 5.12.99.70:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.86.181.24:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.248.109.7:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 14.87.204.32:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.77.143.135:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 4.240.152.239:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 1.71.28.84:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 23.32.95.223:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.252.224.56:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.160.174.226:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.145.57.60:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 12.246.106.117:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.224.220.148:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.105.51.65:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 17.213.65.234:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 19.236.197.47:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 9.55.0.148:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 8.4.173.226:2323
Source: global traffic TCP traffic: 192.168.2.15:10638 -> 20.229.206.4:2323
Sample listens on a socket
Source: /tmp/na.elf (PID: 5833) Socket: 127.0.0.1:20905 Jump to behavior
Source: unknown TCP traffic detected without corresponding DNS query: 22.7.13.65
Source: unknown TCP traffic detected without corresponding DNS query: 9.168.57.190
Source: unknown TCP traffic detected without corresponding DNS query: 14.99.93.112
Source: unknown TCP traffic detected without corresponding DNS query: 23.205.118.52
Source: unknown TCP traffic detected without corresponding DNS query: 12.58.228.27
Source: unknown TCP traffic detected without corresponding DNS query: 23.4.169.126
Source: unknown TCP traffic detected without corresponding DNS query: 5.15.173.17
Source: unknown TCP traffic detected without corresponding DNS query: 4.228.191.143
Source: unknown TCP traffic detected without corresponding DNS query: 12.29.28.66
Source: unknown TCP traffic detected without corresponding DNS query: 12.0.98.59
Source: unknown TCP traffic detected without corresponding DNS query: 8.214.186.125
Source: unknown TCP traffic detected without corresponding DNS query: 19.135.20.149
Source: unknown TCP traffic detected without corresponding DNS query: 13.227.43.85
Source: unknown TCP traffic detected without corresponding DNS query: 1.86.96.134
Source: unknown TCP traffic detected without corresponding DNS query: 17.161.234.51
Source: unknown TCP traffic detected without corresponding DNS query: 18.122.151.37
Source: unknown TCP traffic detected without corresponding DNS query: 8.142.207.46
Source: unknown TCP traffic detected without corresponding DNS query: 13.144.205.192
Source: unknown TCP traffic detected without corresponding DNS query: 17.246.15.129
Source: unknown TCP traffic detected without corresponding DNS query: 14.43.200.69
Source: unknown TCP traffic detected without corresponding DNS query: 4.76.103.252
Source: unknown TCP traffic detected without corresponding DNS query: 5.104.101.207
Source: unknown TCP traffic detected without corresponding DNS query: 18.103.107.64
Source: unknown TCP traffic detected without corresponding DNS query: 17.178.125.150
Source: unknown TCP traffic detected without corresponding DNS query: 22.29.34.145
Source: unknown TCP traffic detected without corresponding DNS query: 13.128.208.209
Source: unknown TCP traffic detected without corresponding DNS query: 4.204.190.18
Source: unknown TCP traffic detected without corresponding DNS query: 9.176.38.2
Source: unknown TCP traffic detected without corresponding DNS query: 5.133.44.160
Source: unknown TCP traffic detected without corresponding DNS query: 14.245.221.78
Source: unknown TCP traffic detected without corresponding DNS query: 4.176.73.26
Source: unknown TCP traffic detected without corresponding DNS query: 8.252.7.6
Source: unknown TCP traffic detected without corresponding DNS query: 23.67.186.143
Source: unknown TCP traffic detected without corresponding DNS query: 5.184.47.159
Source: unknown TCP traffic detected without corresponding DNS query: 23.61.231.248
Source: unknown TCP traffic detected without corresponding DNS query: 13.31.212.118
Source: unknown TCP traffic detected without corresponding DNS query: 9.65.150.246
Source: unknown TCP traffic detected without corresponding DNS query: 17.247.60.52
Source: unknown TCP traffic detected without corresponding DNS query: 14.137.88.18
Source: unknown TCP traffic detected without corresponding DNS query: 8.65.167.139
Source: unknown TCP traffic detected without corresponding DNS query: 23.131.105.35
Source: unknown TCP traffic detected without corresponding DNS query: 19.124.29.110
Source: unknown TCP traffic detected without corresponding DNS query: 8.206.194.254
Source: unknown TCP traffic detected without corresponding DNS query: 12.166.145.218
Source: unknown TCP traffic detected without corresponding DNS query: 14.30.155.216
Source: unknown TCP traffic detected without corresponding DNS query: 17.213.243.189
Source: unknown TCP traffic detected without corresponding DNS query: 9.217.64.196
Source: unknown TCP traffic detected without corresponding DNS query: 8.230.12.89
Source: unknown TCP traffic detected without corresponding DNS query: 19.37.206.53
Source: unknown TCP traffic detected without corresponding DNS query: 19.247.18.215
Sample has stripped symbol table
Source: ELF static info symbol of initial sample .symtab present: no
Sample tries to kill a process (SIGKILL)
Source: /tmp/na.elf (PID: 5844) SIGKILL sent: pid: 850, result: successful Jump to behavior
Source: /tmp/na.elf (PID: 5844) SIGKILL sent: pid: 5677, result: successful Jump to behavior
Source: classification engine Classification label: mal64.troj.linELF@0/1@0/0
Enumerates processes within the "proc" file system
Source: /tmp/na.elf (PID: 5844) File opened: /proc/5782/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1185/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3241/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3483/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/5817/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1732/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/5818/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1730/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1333/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1695/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3235/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3234/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/911/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/515/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/914/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1617/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1615/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/917/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3255/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3253/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1591/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3252/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3251/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3250/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1623/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1588/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3249/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/764/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3368/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1585/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3246/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3488/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/766/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/800/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/888/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/802/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1509/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/803/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/804/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3800/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3801/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1867/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3407/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/5840/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1484/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/490/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1514/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1634/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1479/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1875/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/654/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3379/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/655/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/656/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/777/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/931/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1595/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/657/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/812/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/779/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/658/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/933/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/5677/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/418/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/419/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/5835/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3419/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3310/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3275/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3274/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3273/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3394/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3272/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3704/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/782/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3303/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1762/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3027/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1486/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/789/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1806/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/5843/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1660/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3044/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3440/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/793/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/794/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3316/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/674/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/796/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/675/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/676/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1498/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1497/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1496/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3157/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3278/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3399/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3798/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3799/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/1659/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3332/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3210/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3298/maps Jump to behavior
Source: /tmp/na.elf (PID: 5844) File opened: /proc/3055/maps Jump to behavior
Uses the "uname" system call to query kernel version information (possible evasion)
Source: /tmp/na.elf (PID: 5833) Queries kernel information via 'uname': Jump to behavior
Source: na.elf, 5833.1.000055d655e60000.000055d655ee5000.rw-.sdmp, na.elf, 5840.1.000055d655e60000.000055d655ee5000.rw-.sdmp Binary or memory string: /etc/qemu-binfmt/sparc
Source: na.elf, 5833.1.000055d655e60000.000055d655ee5000.rw-.sdmp, na.elf, 5840.1.000055d655e60000.000055d655ee5000.rw-.sdmp Binary or memory string: U!/etc/qemu-binfmt/sparc
Source: na.elf, 5833.1.00007ffe69d64000.00007ffe69d85000.rw-.sdmp, na.elf, 5840.1.00007ffe69d64000.00007ffe69d85000.rw-.sdmp Binary or memory string: Px86_64/usr/bin/qemu-sparc/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf
Source: na.elf, 5833.1.00007ffe69d64000.00007ffe69d85000.rw-.sdmp, na.elf, 5840.1.00007ffe69d64000.00007ffe69d85000.rw-.sdmp Binary or memory string: /usr/bin/qemu-sparc

Stealing of Sensitive Information
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 5840.1.00007f3c44011000.00007f3c44023000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5833.1.00007f3c44011000.00007f3c44023000.r-x.sdmp, type: MEMORY

Remote Access Functionality
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 5840.1.00007f3c44011000.00007f3c44023000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5833.1.00007f3c44011000.00007f3c44023000.r-x.sdmp, type: MEMORY

No Screenshots

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
14.48.15.228
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
4.108.122.160
 unknown United States
3356 LEVEL3US false
17.246.15.28
 unknown United States
714 APPLE-ENGINEERINGUS false
12.92.144.40
 unknown United States
7018 ATT-INTERNET4US false
17.66.80.69
 unknown United States
714 APPLE-ENGINEERINGUS false
14.131.74.88
 unknown China
4808 CHINA169-BJChinaUnicomBeijingProvinceNetworkCN false
5.110.201.160
 unknown Saudi Arabia
35819 MOBILY-ASEtihadEtisalatCompanyMobilySA false
14.34.26.253
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
12.234.229.175
 unknown United States
7018 ATT-INTERNET4US false
23.203.40.40
 unknown United States
16625 AKAMAI-ASUS false
1.77.255.124
 unknown Japan 9605 DOCOMONTTDOCOMOINCJP false
9.85.146.62
 unknown United States
3356 LEVEL3US false
22.247.206.122
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
8.118.146.78
 unknown United States
3356 LEVEL3US false
13.254.105.191
 unknown United States
16509 AMAZON-02US false
23.163.160.184
 unknown United States
54721 AS-NGENUS false
23.151.125.75
 unknown Reserved
20119 ARROWCA false
5.72.180.9
 unknown Iran (ISLAMIC Republic Of)
57218 RIGHTELIR false
14.228.128.138
 unknown Viet Nam
45899 VNPT-AS-VNVNPTCorpVN false
18.144.218.130
 unknown United States
16509 AMAZON-02US false
17.99.94.108
 unknown United States
714 APPLE-ENGINEERINGUS false
1.22.116.173
 unknown India
45528 TIKONAIN-ASTikonaInfinetLtdIN false
12.224.246.63
 unknown United States
7018 ATT-INTERNET4US false
8.72.107.114
 unknown United States
3356 LEVEL3US false
13.135.119.26
 unknown United States
7018 ATT-INTERNET4US false
8.90.239.34
 unknown United States
3356 LEVEL3US false
9.147.16.187
 unknown United States
3356 LEVEL3US false
9.75.67.12
 unknown United States
3356 LEVEL3US false
17.88.89.193
 unknown United States
714 APPLE-ENGINEERINGUS false
17.57.239.123
 unknown United States
714 APPLE-ENGINEERINGUS false
9.75.18.51
 unknown United States
3356 LEVEL3US false
20.233.119.198
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
14.242.154.138
 unknown Viet Nam
45899 VNPT-AS-VNVNPTCorpVN false
9.37.30.243
 unknown United States
3356 LEVEL3US false
1.66.52.1
 unknown Japan 9605 DOCOMONTTDOCOMOINCJP false
17.36.102.216
 unknown United States
714 APPLE-ENGINEERINGUS false
1.140.112.34
 unknown Australia
1221 ASN-TELSTRATelstraCorporationLtdAU false
20.79.93.117
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
13.49.131.140
 unknown United States
16509 AMAZON-02US false
12.45.10.226
 unknown United States
7018 ATT-INTERNET4US false
1.147.212.171
 unknown Australia
1221 ASN-TELSTRATelstraCorporationLtdAU false
5.251.149.231
 unknown Kazakhstan
9198 KAZTELECOM-ASKZ false
4.225.37.81
 unknown United States
3356 LEVEL3US false
9.213.236.15
 unknown United States
3356 LEVEL3US false
9.37.6.88
 unknown United States
3356 LEVEL3US false
12.81.6.41
 unknown United States
7018 ATT-INTERNET4US false
8.125.111.98
 unknown United States
3356 LEVEL3US false
17.236.73.227
 unknown United States
714 APPLE-ENGINEERINGUS false
13.14.140.28
 unknown United States
22390 XEROX-WBUS false
14.135.254.244
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
18.189.238.68
 unknown United States
16509 AMAZON-02US false
4.165.15.180
 unknown United States
3356 LEVEL3US false
18.11.110.23
 unknown United States
3 MIT-GATEWAYSUS false
1.64.180.222
 unknown Hong Kong
4760 HKTIMS-APHKTLimitedHK false
19.152.33.116
 unknown United States
3 MIT-GATEWAYSUS false
17.11.239.91
 unknown United States
714 APPLE-ENGINEERINGUS false
9.197.122.116
 unknown United States
3356 LEVEL3US false
20.100.221.238
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
20.32.43.140
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
19.181.248.123
 unknown United States
3 MIT-GATEWAYSUS false
20.104.11.51
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
18.165.26.232
 unknown United States
3 MIT-GATEWAYSUS false
12.15.64.238
 unknown United States
32328 ALASCOM-IP-MANAGED-NETWORKUS false
5.85.86.175
 unknown Italy
24608 WINDTRE-ASIT false
23.109.86.240
 unknown Netherlands
7979 SERVERS-COMUS false
20.216.247.84
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
19.212.190.192
 unknown United States
3 MIT-GATEWAYSUS false
17.254.82.77
 unknown United States
714 APPLE-ENGINEERINGUS false
9.63.23.60
 unknown United States
3356 LEVEL3US false
5.110.196.218
 unknown Saudi Arabia
35819 MOBILY-ASEtihadEtisalatCompanyMobilySA false
23.82.106.111
 unknown United States
15003 NOBIS-TECHUS false
20.253.71.243
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
12.94.212.227
 unknown United States
7018 ATT-INTERNET4US false
23.164.201.62
 unknown Reserved
25815 USITEK-ASUS false
22.92.218.68
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
17.70.42.210
 unknown United States
714 APPLE-ENGINEERINGUS false
5.194.156.21
 unknown United Arab Emirates
5384 EMIRATES-INTERNETEmiratesInternetAE false
22.44.164.112
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
8.125.111.70
 unknown United States
3356 LEVEL3US false
23.231.52.166
 unknown United States
62904 EONIX-COMMUNICATIONS-ASBLOCK-62904US false
14.85.6.142
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
13.223.33.171
 unknown United States
16509 AMAZON-02US false
17.139.169.81
 unknown United States
714 APPLE-ENGINEERINGUS false
20.64.77.252
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
13.40.198.210
 unknown United States
7018 ATT-INTERNET4US false
5.242.109.199
 unknown Sweden
1257 TELE2EU false
1.174.125.216
 unknown Taiwan; Republic of China (ROC)
3462 HINETDataCommunicationBusinessGroupTW false
19.88.233.176
 unknown United States
3 MIT-GATEWAYSUS false
12.108.167.255
 unknown United States
7018 ATT-INTERNET4US false
9.239.97.67
 unknown United States
3356 LEVEL3US false
19.189.10.137
 unknown United States
3 MIT-GATEWAYSUS false
12.215.220.13
 unknown United States
7018 ATT-INTERNET4US false
12.208.118.155
 unknown United States
393707 ABM-INDUS false
1.58.46.34
 unknown China
4837 CHINA169-BACKBONECHINAUNICOMChina169BackboneCN false
18.169.186.23
 unknown United States
3 MIT-GATEWAYSUS false
4.230.201.167
 unknown United States
3356 LEVEL3US false
12.107.189.60
 unknown United States
7018 ATT-INTERNET4US false
19.11.150.205
 unknown United States
3 MIT-GATEWAYSUS false
14.211.0.215
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
13.185.138.54
 unknown United States
7018 ATT-INTERNET4US false