Linux Analysis Report
na.elf

Overview

General Information

Sample name: na.elf
Analysis ID: 1532163
MD5: 449430eed37f69ffa189c60b5a204810
SHA1: b449c6d82815ccf637aed01a4a2c30201c062c20
SHA256: 325bad1ab79f5dbde58ae8eda5b38bd81ebfe8289b2dc9ba86c6c5a65bc4677e
Tags: elfuser-abuse_ch
Infos:

Detection

Mirai
Score: 64
Range: 0 - 100
Whitelisted: false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Sample has stripped symbol table
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

Name Description Attribution Blogpost URLs Link
Mirai Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world. No Attribution https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: na.elf Avira: detected
Multi AV Scanner detection for submitted file
Source: na.elf ReversingLabs: Detection: 65%
Source: na.elf Virustotal: Detection: 61% Perma Link
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.73.199.66:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.7.14.1:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.241.196.26:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.103.41.87:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.203.125.131:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.236.18.87:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.9.242.143:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.133.237.50:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.57.151.98:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.169.137.19:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.244.56.86:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.131.224.234:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.60.62.2:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.15.192.207:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.93.115.127:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.186.170.6:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.23.22.192:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.35.46.168:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.38.109.73:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.228.162.58:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.238.146.84:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.143.164.64:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.206.243.48:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.4.138.184:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.104.79.108:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.78.174.142:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.209.6.10:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.166.213.218:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.135.85.90:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.48.107.79:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.203.34.230:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.184.157.231:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.211.191.221:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.254.195.40:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.89.156.4:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.167.23.162:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.133.210.205:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.217.253.96:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.176.47.210:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.254.207.7:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.155.76.193:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.27.206.239:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.150.88.119:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.230.81.174:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.165.199.26:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.221.145.252:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.68.119.48:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.182.192.82:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.137.248.64:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.64.60.30:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.80.96.203:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.21.84.58:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.195.170.96:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.146.97.48:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.246.169.45:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.122.178.169:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.224.53.173:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.40.220.102:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.56.103.128:2323
Source: global traffic TCP traffic: 192.168.2.13:59580 -> 194.120.116.148:5555
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.56.117.140:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.34.168.54:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.252.33.191:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.207.115.138:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.149.190.221:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.123.183.171:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.92.123.204:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.81.2.99:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.100.215.161:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.138.163.24:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.44.40.115:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.229.10.150:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.47.117.102:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.175.63.47:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.193.148.39:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.205.39.143:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.160.107.64:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.178.57.85:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.208.68.0:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.80.228.5:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.205.19.223:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.116.234.130:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.255.247.131:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.239.88.96:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.2.217.216:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.253.105.103:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.199.198.208:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.152.87.113:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.116.177.186:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.172.201.34:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.245.120.21:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.249.69.134:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.72.36.254:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.61.78.110:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.213.74.231:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.251.70.192:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.106.224.221:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.108.86.156:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.206.72.197:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.63.233.172:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.216.231.139:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.63.99.35:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.4.249.150:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.148.129.154:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.158.204.54:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.232.140.248:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.145.148.56:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.29.230.29:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.133.75.148:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.40.190.234:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.106.213.181:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.236.207.158:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.215.52.30:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.186.14.231:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.130.15.249:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.196.98.67:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.149.140.162:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.31.83.196:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.121.189.155:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.196.139.2:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.107.255.204:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.36.11.37:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.24.93.12:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.204.103.19:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.70.119.21:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.131.246.195:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.63.35.74:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.68.101.26:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.230.21.154:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.232.116.40:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.40.247.225:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.174.60.124:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.9.114.157:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.113.58.9:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.190.113.14:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.252.200.76:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.154.149.246:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.19.211.178:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.162.41.131:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.192.148.153:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.16.38.53:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.59.8.108:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.148.74.213:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.105.40.242:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.9.157.169:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.67.136.243:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.155.55.20:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.100.20.230:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.151.81.216:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.170.28.177:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.124.77.22:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.248.15.228:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.77.171.235:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.67.44.74:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.105.183.6:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.148.11.245:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.206.188.44:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.245.24.189:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.112.211.80:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.86.42.223:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.140.1.234:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.170.144.223:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.112.91.55:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.253.186.176:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.124.158.206:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.191.129.68:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.1.189.149:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.200.170.170:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.204.219.78:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.21.132.247:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.101.182.173:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.109.199.138:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.207.204.245:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.36.17.143:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.100.213.64:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.117.89.103:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.156.204.190:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.227.234.160:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.142.251.50:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.198.21.149:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.163.84.8:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.184.61.18:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.5.247.186:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.183.132.71:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.159.4.173:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.157.226.0:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.25.158.7:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.201.174.212:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.44.223.56:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.222.251.108:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.197.149.197:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.101.150.63:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.128.0.97:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.146.120.91:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.144.97.208:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.74.2.107:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.75.176.49:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.33.232.49:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.229.119.19:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.233.15.120:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.122.77.34:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.140.234.176:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.75.28.189:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.165.71.35:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.255.203.190:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.78.13.25:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.202.24.11:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.136.62.178:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.10.56.255:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.228.207.251:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.58.239.186:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.61.214.65:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.140.49.177:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.9.23.16:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.199.232.140:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.200.196.236:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.62.231.123:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.225.173.194:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.127.230.71:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.75.162.115:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.57.89.230:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.107.138.175:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.23.16.82:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.73.214.67:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.51.132.40:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.196.49.250:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.111.174.253:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.176.121.157:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.149.80.139:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.137.168.215:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.213.68.135:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.175.135.226:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.115.169.103:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.162.161.143:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.86.162.198:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.170.254.158:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.127.26.200:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.75.145.32:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.52.212.220:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.235.239.33:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.140.162.115:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.97.109.70:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.159.63.220:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.60.145.116:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.255.200.37:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.139.246.255:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.108.140.78:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.149.2.35:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.110.122.171:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.225.29.44:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.222.105.32:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.131.79.140:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.237.184.241:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.235.231.84:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.6.173.72:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.122.95.132:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.227.215.7:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.141.89.156:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.251.40.11:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.178.253.102:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.151.203.199:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.239.116.31:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.6.168.134:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.152.27.62:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.50.47.216:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.218.12.27:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.43.238.40:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.112.197.62:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.146.84.3:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.105.32.115:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.95.172.94:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.46.32.96:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.233.205.232:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.116.134.105:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.100.100.41:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.143.66.197:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.239.211.59:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.165.29.71:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.102.103.64:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.214.116.229:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.48.93.17:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.121.147.218:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.216.122.186:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.182.254.101:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.228.239.124:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.149.93.126:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.151.88.6:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.68.57.68:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.164.76.76:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.131.212.27:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.30.138.153:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.128.126.104:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.60.217.230:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.129.14.81:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.241.31.203:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.112.148.151:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.59.99.75:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.38.33.16:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.198.162.81:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.69.251.218:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.60.59.167:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.65.218.49:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.165.66.164:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.119.136.70:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.174.23.10:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.241.237.175:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.72.112.41:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.129.13.86:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.26.70.16:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.30.27.83:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.251.207.23:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.227.78.231:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.63.196.3:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.114.153.209:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.154.231.157:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.40.214.32:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.228.73.87:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.231.97.0:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.222.154.23:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.214.115.224:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.46.138.98:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.217.118.133:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.36.114.107:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.209.85.68:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.120.230.104:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.44.144.111:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.143.135.67:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.28.80.73:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.118.6.187:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.207.232.116:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.167.168.52:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.58.17.23:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.123.191.222:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.161.42.30:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.85.89.150:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.62.28.131:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.53.75.19:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.14.246.235:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.20.148.160:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.238.10.40:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.47.77.131:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.126.195.225:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.36.137.168:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.89.11.175:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.154.139.145:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.152.12.14:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.225.104.114:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.141.4.9:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.113.104.236:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.32.214.161:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.174.181.253:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.80.21.151:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.15.157.58:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.68.225.118:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.179.47.35:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.33.20.162:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.234.4.250:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.133.53.18:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.162.219.230:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.147.60.182:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.55.182.213:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.231.191.168:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.114.230.101:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.39.157.127:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.10.114.171:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.218.95.174:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.78.186.234:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.186.100.215:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.184.133.70:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.40.156.193:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.142.138.155:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.125.60.176:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.164.231.219:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.61.66.5:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.62.96.177:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.156.165.110:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.18.238.61:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.118.168.121:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.96.110.9:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.243.94.115:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.185.161.85:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.87.132.142:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.235.166.99:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.218.219.84:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.244.156.222:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.125.76.209:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.62.160.111:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.155.8.155:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.82.226.150:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.120.182.170:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.226.165.3:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.111.236.0:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.220.192.88:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.191.40.73:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.90.192.151:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.147.100.126:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.28.187.137:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.0.9.103:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.180.126.233:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.75.222.200:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.163.222.172:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.16.104.93:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.124.105.123:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.179.158.54:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.146.69.187:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.243.77.20:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.124.55.226:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.30.146.84:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.75.76.209:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.23.14.233:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.11.180.181:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.210.194.158:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.129.132.101:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.62.100.217:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.23.142.129:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.92.130.41:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.30.145.205:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.37.36.23:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.47.153.119:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.50.163.53:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.139.223.190:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.132.33.35:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.57.164.22:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.57.18.211:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.147.217.36:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.181.4.17:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.175.25.147:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.246.87.48:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.237.241.162:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.207.28.47:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.46.46.43:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.76.122.190:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.132.87.127:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.185.61.106:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.92.145.84:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.144.112.231:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.192.80.17:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.226.164.42:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.213.175.163:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.79.198.25:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.72.17.214:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.235.122.117:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.130.250.154:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.254.36.72:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.27.168.240:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.162.241.29:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.151.106.119:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.29.239.6:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.42.8.108:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.228.185.237:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.191.173.141:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.119.115.98:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.37.140.97:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.173.237.211:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.40.186.183:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.147.146.40:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.162.72.59:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.165.8.248:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.106.154.15:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.60.158.189:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 1.220.44.2:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.202.59.31:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.54.141.7:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.243.210.145:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.91.144.3:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.23.74.166:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.105.76.18:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.11.32.182:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.164.46.73:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 19.237.211.24:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.236.149.156:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.242.243.26:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.7.226.140:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.192.55.0:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 22.3.61.185:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.155.187.11:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.36.232.79:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.203.143.204:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.99.160.88:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 8.190.244.204:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.119.52.146:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.221.67.56:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.230.248.74:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 4.83.245.1:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.74.172.235:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.31.71.29:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.244.23.40:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.51.212.150:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.102.85.231:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.49.252.150:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 17.53.178.23:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 5.214.130.217:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 9.109.105.61:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 12.13.185.213:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.119.63.113:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 14.42.177.144:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 20.77.13.218:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 13.51.82.201:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 18.55.170.18:2323
Source: global traffic TCP traffic: 192.168.2.13:10921 -> 23.11.213.59:2323
Sample listens on a socket
Source: /tmp/na.elf (PID: 5485) Socket: 127.0.0.1:20905 Jump to behavior
Source: unknown TCP traffic detected without corresponding DNS query: 17.73.199.66
Source: unknown TCP traffic detected without corresponding DNS query: 19.157.255.40
Source: unknown TCP traffic detected without corresponding DNS query: 23.48.25.50
Source: unknown TCP traffic detected without corresponding DNS query: 20.200.208.137
Source: unknown TCP traffic detected without corresponding DNS query: 1.239.29.32
Source: unknown TCP traffic detected without corresponding DNS query: 5.246.35.78
Source: unknown TCP traffic detected without corresponding DNS query: 1.31.147.24
Source: unknown TCP traffic detected without corresponding DNS query: 9.29.160.35
Source: unknown TCP traffic detected without corresponding DNS query: 18.125.97.81
Source: unknown TCP traffic detected without corresponding DNS query: 13.7.14.1
Source: unknown TCP traffic detected without corresponding DNS query: 20.67.145.249
Source: unknown TCP traffic detected without corresponding DNS query: 19.224.222.244
Source: unknown TCP traffic detected without corresponding DNS query: 23.169.143.3
Source: unknown TCP traffic detected without corresponding DNS query: 9.182.162.70
Source: unknown TCP traffic detected without corresponding DNS query: 1.124.251.68
Source: unknown TCP traffic detected without corresponding DNS query: 17.52.206.120
Source: unknown TCP traffic detected without corresponding DNS query: 14.73.207.216
Source: unknown TCP traffic detected without corresponding DNS query: 18.17.154.119
Source: unknown TCP traffic detected without corresponding DNS query: 14.179.128.168
Source: unknown TCP traffic detected without corresponding DNS query: 18.241.196.26
Source: unknown TCP traffic detected without corresponding DNS query: 8.2.187.61
Source: unknown TCP traffic detected without corresponding DNS query: 9.34.105.34
Source: unknown TCP traffic detected without corresponding DNS query: 12.150.147.212
Source: unknown TCP traffic detected without corresponding DNS query: 14.231.197.29
Source: unknown TCP traffic detected without corresponding DNS query: 20.2.53.177
Source: unknown TCP traffic detected without corresponding DNS query: 23.106.74.159
Source: unknown TCP traffic detected without corresponding DNS query: 5.244.67.179
Source: unknown TCP traffic detected without corresponding DNS query: 17.216.116.15
Source: unknown TCP traffic detected without corresponding DNS query: 19.114.112.25
Source: unknown TCP traffic detected without corresponding DNS query: 23.103.41.87
Source: unknown TCP traffic detected without corresponding DNS query: 1.114.106.132
Source: unknown TCP traffic detected without corresponding DNS query: 12.203.40.56
Source: unknown TCP traffic detected without corresponding DNS query: 23.209.85.179
Source: unknown TCP traffic detected without corresponding DNS query: 9.118.252.51
Source: unknown TCP traffic detected without corresponding DNS query: 17.215.60.218
Source: unknown TCP traffic detected without corresponding DNS query: 20.85.78.37
Source: unknown TCP traffic detected without corresponding DNS query: 12.177.48.26
Source: unknown TCP traffic detected without corresponding DNS query: 9.168.47.15
Source: unknown TCP traffic detected without corresponding DNS query: 18.21.50.44
Source: unknown TCP traffic detected without corresponding DNS query: 18.203.125.131
Source: unknown TCP traffic detected without corresponding DNS query: 17.75.112.251
Source: unknown TCP traffic detected without corresponding DNS query: 20.9.52.193
Source: unknown TCP traffic detected without corresponding DNS query: 19.209.79.170
Source: unknown TCP traffic detected without corresponding DNS query: 20.227.86.33
Source: unknown TCP traffic detected without corresponding DNS query: 23.29.231.253
Source: unknown TCP traffic detected without corresponding DNS query: 12.81.255.250
Source: unknown TCP traffic detected without corresponding DNS query: 9.63.88.228
Source: unknown TCP traffic detected without corresponding DNS query: 13.51.53.12
Source: unknown TCP traffic detected without corresponding DNS query: 23.129.71.173
Source: unknown TCP traffic detected without corresponding DNS query: 1.236.18.87
Sample has stripped symbol table
Source: ELF static info symbol of initial sample .symtab present: no
Sample tries to kill a process (SIGKILL)
Source: /tmp/na.elf (PID: 5497) SIGKILL sent: pid: 855, result: successful Jump to behavior
Source: /tmp/na.elf (PID: 5497) SIGKILL sent: pid: 5323, result: successful Jump to behavior
Source: classification engine Classification label: mal64.troj.linELF@0/1@0/0
Enumerates processes within the "proc" file system
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3122/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3117/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3114/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/914/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/518/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/519/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3636/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/917/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3134/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3375/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3132/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3095/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1745/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1866/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1588/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/884/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1982/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/765/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3246/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/767/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/800/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1906/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/802/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/803/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1748/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/5428/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/5323/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3420/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1482/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/490/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1480/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1755/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1238/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1875/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/2964/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3413/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1751/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1872/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/2961/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1475/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/656/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/778/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/657/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/658/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/659/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/418/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/936/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/419/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/816/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1879/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1891/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3310/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3153/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/780/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/660/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1921/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3704/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3705/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/783/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1765/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/2974/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1400/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1884/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3424/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/2972/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3147/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/2970/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1881/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3146/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3300/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1805/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1925/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1804/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1648/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3702/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1922/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3429/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3703/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/5464/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/5465/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3442/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3165/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3164/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3163/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3162/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/790/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3161/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/792/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/793/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/672/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1930/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/674/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/795/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3315/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1411/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/2984/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/1410/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/797/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/676/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3434/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3158/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/678/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/679/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/3170/maps Jump to behavior
Source: /tmp/na.elf (PID: 5497) File opened: /proc/680/maps Jump to behavior
Uses the "uname" system call to query kernel version information (possible evasion)
Source: /tmp/na.elf (PID: 5485) Queries kernel information via 'uname': Jump to behavior
Source: na.elf, 5485.1.000055ed57754000.000055ed57882000.rw-.sdmp, na.elf, 5490.1.000055ed57754000.000055ed57882000.rw-.sdmp Binary or memory string: U!/etc/qemu-binfmt/arm
Source: na.elf, 5485.1.000055ed57754000.000055ed57882000.rw-.sdmp, na.elf, 5490.1.000055ed57754000.000055ed57882000.rw-.sdmp Binary or memory string: /etc/qemu-binfmt/arm
Source: na.elf, 5485.1.00007ffe186f7000.00007ffe18718000.rw-.sdmp, na.elf, 5490.1.00007ffe186f7000.00007ffe18718000.rw-.sdmp Binary or memory string: /usr/bin/qemu-arm
Source: na.elf, 5485.1.00007ffe186f7000.00007ffe18718000.rw-.sdmp, na.elf, 5490.1.00007ffe186f7000.00007ffe18718000.rw-.sdmp Binary or memory string: 2Dx86_64/usr/bin/qemu-arm/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf

Stealing of Sensitive Information
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 5490.1.00007f279c017000.00007f279c029000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5485.1.00007f279c017000.00007f279c029000.r-x.sdmp, type: MEMORY

Remote Access Functionality
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 5490.1.00007f279c017000.00007f279c029000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 5485.1.00007f279c017000.00007f279c029000.r-x.sdmp, type: MEMORY

No Screenshots

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
20.48.137.54
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
5.15.209.172
 unknown Romania
8708 RCS-RDS73-75DrStaicoviciRO false
22.157.113.73
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
8.138.247.16
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
20.32.43.154
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
17.210.65.11
 unknown United States
714 APPLE-ENGINEERINGUS false
1.115.249.202
 unknown Japan 37903 EMOBILEYmobileCorporationJP false
13.44.29.14
 unknown United States
7018 ATT-INTERNET4US false
13.167.21.237
 unknown United States
7018 ATT-INTERNET4US false
8.11.252.253
 unknown United States
11168 SCCUS false
20.118.153.216
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
13.226.52.4
 unknown United States
16509 AMAZON-02US false
12.169.22.136
 unknown United States
7018 ATT-INTERNET4US false
22.199.14.112
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
19.204.215.228
 unknown United States
3 MIT-GATEWAYSUS false
13.100.51.26
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
22.129.211.157
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
1.236.238.18
 unknown Korea Republic of
38396 GOEPJ-AS-KRPajuofficeofEducationGyeonggiProvinceKR false
23.199.66.189
 unknown United States
16625 AKAMAI-ASUS false
17.150.54.105
 unknown United States
714 APPLE-ENGINEERINGUS false
22.47.245.140
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
20.168.212.135
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
1.235.113.234
 unknown Korea Republic of
9318 SKB-ASSKBroadbandCoLtdKR false
19.221.194.180
 unknown United States
3 MIT-GATEWAYSUS false
9.94.79.227
 unknown United States
3356 LEVEL3US false
1.79.65.232
 unknown Japan 9605 DOCOMONTTDOCOMOINCJP false
22.146.68.31
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
14.26.130.238
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
19.111.105.52
 unknown United States
3 MIT-GATEWAYSUS false
9.200.113.114
 unknown United States
3356 LEVEL3US false
22.211.136.94
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
5.229.181.250
 unknown Turkey
15897 VODAFONETURKEYTR false
4.219.252.102
 unknown United States
3356 LEVEL3US false
20.12.39.115
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
18.153.234.32
 unknown United States
16509 AMAZON-02US false
13.144.171.82
 unknown United States
7018 ATT-INTERNET4US false
14.125.148.151
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
18.132.13.186
 unknown United States
16509 AMAZON-02US false
20.23.44.25
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
19.96.200.243
 unknown United States
3 MIT-GATEWAYSUS false
23.151.149.54
 unknown Reserved
13503 THEOREMCA false
22.93.29.179
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
14.208.116.121
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
14.212.171.36
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
13.157.100.209
 unknown United States
7018 ATT-INTERNET4US false
23.4.41.68
 unknown United States
16625 AKAMAI-ASUS false
12.119.9.40
 unknown United States
7018 ATT-INTERNET4US false
19.23.38.63
 unknown United States
3 MIT-GATEWAYSUS false
4.162.17.1
 unknown United States
3356 LEVEL3US false
8.158.74.93
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
17.54.221.94
 unknown United States
714 APPLE-ENGINEERINGUS false
13.199.31.6
 unknown United States
7018 ATT-INTERNET4US false
13.206.14.28
 unknown United States
7018 ATT-INTERNET4US false
20.68.174.122
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
4.228.168.141
 unknown United States
3356 LEVEL3US false
13.96.108.153
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
5.247.253.69
 unknown Saudi Arabia
34400 ASN-ETTIHADETISALATSA false
13.71.147.32
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
12.129.210.110
 unknown United States
17233 ATT-CERFNET-BLOCKUS false
14.86.106.47
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
14.108.128.87
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
18.208.66.10
 unknown United States
14618 AMAZON-AESUS false
1.208.17.26
 unknown Korea Republic of
3786 LGDACOMLGDACOMCorporationKR false
22.36.149.115
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
5.64.226.242
 unknown United Kingdom
5607 BSKYB-BROADBAND-ASGB false
1.58.95.22
 unknown China
4837 CHINA169-BACKBONECHINAUNICOMChina169BackboneCN false
13.77.43.154
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
20.37.21.252
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
8.190.194.200
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
17.42.113.217
 unknown United States
714 APPLE-ENGINEERINGUS false
13.250.89.139
 unknown United States
16509 AMAZON-02US false
22.74.158.200
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
12.114.154.16
 unknown United States
7018 ATT-INTERNET4US false
12.58.254.171
 unknown United States
7018 ATT-INTERNET4US false
17.28.55.205
 unknown United States
714 APPLE-ENGINEERINGUS false
12.157.160.21
 unknown United States
7018 ATT-INTERNET4US false
22.9.23.97
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
18.148.149.103
 unknown United States
16509 AMAZON-02US false
13.77.110.231
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
1.215.11.131
 unknown Korea Republic of
3786 LGDACOMLGDACOMCorporationKR false
19.204.60.103
 unknown United States
3 MIT-GATEWAYSUS false
20.116.55.17
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
13.157.234.55
 unknown United States
7018 ATT-INTERNET4US false
9.0.53.187
 unknown United States
3356 LEVEL3US false
17.33.126.7
 unknown United States
714 APPLE-ENGINEERINGUS false
23.42.118.13
 unknown United States
16625 AKAMAI-ASUS false
1.242.249.121
 unknown Korea Republic of
38415 GOEGN-AS-KRGuriNamyangjuOfficeOfEducationKR false
18.207.133.93
 unknown United States
14618 AMAZON-AESUS false
20.206.82.16
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
18.254.99.189
 unknown United States
16509 AMAZON-02US false
9.48.215.16
 unknown United States
3356 LEVEL3US false
1.211.217.206
 unknown Korea Republic of
3786 LGDACOMLGDACOMCorporationKR false
1.176.116.86
 unknown Korea Republic of
9845 CJCKN-AS-KRLGHelloVisionCorpKR false
12.220.234.2
 unknown United States
7018 ATT-INTERNET4US false
8.168.77.207
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
13.45.44.230
 unknown United States
7018 ATT-INTERNET4US false
22.175.83.126
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
9.142.118.137
 unknown United States
3356 LEVEL3US false
8.127.239.185
 unknown United States
3356 LEVEL3US false
4.29.38.78
 unknown United States
3356 LEVEL3US false