Linux Analysis Report
na.elf

Overview

General Information

Sample name: na.elf
Analysis ID: 1532164
MD5: 9e9f6a4ff9c1782a822df602dd5e364b
SHA1: 5617f45e06d5757c9e745afedbd85e77d83681fd
SHA256: 842ef514a2b5f05b415b85d02e5f62cdda1da839a0c7d9016d475926de36c4cb
Tags: elfuser-abuse_ch
Infos:

Detection

Mirai
Score: 68
Range: 0 - 100
Whitelisted: false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Contains symbols with names commonly found in malware
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Executes the "rm" command used to delete files or directories
Sample and/or dropped files contains symbols with suspicious names
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

Name Description Attribution Blogpost URLs Link
Mirai Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world. No Attribution https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: na.elf Avira: detected
Multi AV Scanner detection for submitted file
Source: na.elf Virustotal: Detection: 64% Perma Link
Source: na.elf ReversingLabs: Detection: 73%
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.23:34400 -> 194.120.116.148:5555
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.167.30.98:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.117.159.211:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.238.146.87:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.226.234.153:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.26.161.114:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.74.147.200:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.34.53.19:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.226.173.46:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.164.175.45:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.140.168.204:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.88.31.179:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.50.174.44:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.198.26.69:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.81.63.218:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.188.214.245:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.143.235.37:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.75.82.51:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.14.164.241:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.165.149.137:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.110.178.28:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.118.80.156:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.161.207.233:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.93.158.197:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.233.52.52:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.4.19.168:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.243.67.29:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.164.0.159:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.31.71.55:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.16.137.173:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.201.171.203:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.229.132.125:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.215.147.38:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.224.70.40:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.252.233.97:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.25.215.40:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.76.158.179:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.172.16.64:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.14.65.152:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.64.183.244:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.83.27.53:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.37.237.142:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.202.248.76:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.165.223.144:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.189.72.97:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.128.208.82:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.35.73.215:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.149.90.189:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.38.56.241:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.160.71.175:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.81.133.46:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.59.103.94:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.46.192.229:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.168.29.63:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.105.39.213:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.5.201.96:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.254.197.197:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.240.204.50:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.128.117.19:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.180.178.243:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.143.202.147:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.4.71.121:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.208.107.210:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.132.231.179:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.67.1.244:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.93.198.121:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.208.72.200:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.253.213.33:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.107.94.14:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.242.43.30:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.199.142.33:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.67.20.247:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.150.242.139:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.76.9.28:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.0.196.180:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.57.55.134:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.194.190.221:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.121.251.175:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.168.181.43:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.175.134.157:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.15.27.61:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.146.118.219:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.128.151.213:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.139.52.41:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.180.69.207:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.222.147.137:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.100.141.13:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.34.212.133:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.13.234.211:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.92.38.235:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.224.225.196:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.215.234.90:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.177.242.247:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.150.211.128:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.144.237.105:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.201.204.46:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.255.172.211:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.87.238.140:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.187.195.130:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.202.165.215:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.216.79.24:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.77.238.116:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.111.194.16:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.211.197.191:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.136.193.116:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.23.33.134:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.37.207.108:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.83.47.29:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.125.246.226:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.29.201.237:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.147.243.57:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.8.142.166:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.115.238.99:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.49.204.248:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.223.26.14:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.110.58.107:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.121.174.66:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.107.183.158:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.19.79.99:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.159.239.28:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.234.55.14:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.126.223.154:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.52.148.30:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.166.94.101:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.63.83.9:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.151.175.55:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.101.60.171:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.15.203.66:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.82.139.77:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.227.16.142:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.21.220.42:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.225.32.236:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.127.76.81:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.187.116.1:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.157.158.50:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.181.103.174:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.241.81.181:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.36.154.172:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.140.159.135:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.16.231.133:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.70.174.54:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.124.156.249:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.146.173.124:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.183.63.186:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.11.106.246:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.91.87.218:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.83.185.56:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.192.67.19:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.63.208.55:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.191.186.45:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.245.228.20:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.236.221.40:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.95.23.139:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.181.14.200:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.144.211.231:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.43.81.234:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.4.131.94:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.96.117.110:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.225.110.45:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.172.113.199:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.50.130.133:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.46.239.91:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.231.160.52:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.144.56.138:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.182.132.50:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.85.80.132:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.21.48.93:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.54.222.191:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.82.244.143:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.46.89.7:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.165.251.12:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.116.138.156:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.108.212.190:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.118.56.47:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.3.40.128:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.246.8.0:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.110.77.37:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.159.89.110:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.246.79.79:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.131.78.249:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.144.210.201:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.35.185.156:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.90.4.139:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.98.125.250:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.169.32.104:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.254.43.166:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.66.47.36:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.20.111.159:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.242.182.186:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.113.147.47:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.247.11.57:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.95.84.246:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.13.105.155:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.171.213.250:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.76.168.13:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.166.210.135:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.102.133.155:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.107.0.7:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.92.236.91:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.242.69.239:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.9.245.176:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.111.207.88:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.34.235.243:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.121.240.170:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.71.106.107:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.238.132.59:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.182.132.79:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.14.42.81:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.136.13.161:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.12.124.218:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.164.235.162:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.9.189.145:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.12.108.130:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.206.27.63:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.209.181.229:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.163.174.253:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.164.33.237:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.106.230.78:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.32.47.164:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.113.99.146:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.148.6.116:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.170.241.167:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.66.198.83:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.243.74.97:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.134.95.167:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.146.112.196:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.127.93.123:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.199.163.101:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.224.45.21:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.116.4.152:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.125.140.19:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.243.251.130:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.126.229.152:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.6.36.241:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.80.111.74:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.180.221.204:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.131.20.57:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.203.248.12:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.232.209.98:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.6.94.157:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.62.151.86:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.9.69.143:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.178.33.21:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.137.43.192:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.138.45.58:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.158.134.64:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.130.28.24:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.147.248.166:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.35.8.212:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.59.23.172:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.243.4.95:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.172.90.142:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.182.163.13:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.192.93.99:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.126.198.43:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.52.248.211:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.192.0.185:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.59.19.82:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.30.150.79:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.50.170.27:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.201.209.113:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.174.176.178:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.14.116.45:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.10.15.131:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.68.148.43:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.76.153.97:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.43.85.156:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.190.129.100:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.117.248.239:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.143.229.118:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.38.77.70:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.69.156.172:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.201.8.174:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.21.213.165:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.27.208.233:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.204.188.151:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.70.55.113:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.163.229.45:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.193.125.32:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.40.214.86:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.161.171.123:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.155.19.88:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.195.78.62:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.86.132.47:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.131.148.238:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.141.134.127:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.82.224.120:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.210.173.19:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.246.95.195:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.202.82.134:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.224.32.14:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.206.32.4:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.81.44.209:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.76.26.249:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.131.221.54:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.72.74.254:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.0.28.125:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.140.23.68:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.59.245.78:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.231.165.241:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.49.115.41:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.50.188.46:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.23.168.118:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.203.16.49:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.248.143.65:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.38.91.195:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.120.146.1:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.205.38.120:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.123.115.130:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.133.68.52:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.71.94.172:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.182.163.8:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.116.67.59:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.166.118.165:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.82.197.113:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.50.87.37:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.207.12.20:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.170.172.191:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.122.119.47:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.38.221.200:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.211.213.113:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.74.45.186:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.232.22.111:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.251.87.173:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.11.84.234:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.200.124.56:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.49.146.203:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.239.101.137:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.82.60.49:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.181.134.41:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.78.3.41:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.209.184.234:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.198.216.92:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.100.82.205:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.205.144.218:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.177.164.175:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.179.146.121:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.183.16.221:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.250.185.220:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.102.78.32:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.29.104.36:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.174.122.98:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.65.8.234:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.166.159.155:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.20.96.189:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.236.225.105:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.224.106.32:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.194.50.188:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.225.162.228:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.192.31.14:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.144.175.159:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.248.188.215:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.182.61.97:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.174.164.51:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.246.134.208:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.136.118.196:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.254.199.138:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.45.103.20:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.58.69.222:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.5.102.36:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.97.96.136:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.104.191.9:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.27.96.50:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.91.48.204:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.101.151.69:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.67.37.119:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.245.85.238:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.178.30.94:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.82.152.84:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.23.121.12:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.192.210.105:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.159.242.240:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.63.110.19:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.139.146.96:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.181.42.187:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.65.236.2:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.13.2.107:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.167.121.29:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.131.24.114:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.190.32.233:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.167.192.169:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.0.171.177:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.73.154.209:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.194.113.164:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.79.134.186:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.107.30.200:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.181.0.217:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.222.123.128:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.222.9.192:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.33.130.157:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.63.199.53:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.71.22.206:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.19.166.172:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.64.226.217:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.230.48.21:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.119.238.40:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.98.247.179:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.249.158.232:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.125.246.111:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.10.64.111:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.112.205.17:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.44.34.145:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.67.65.175:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.220.64.98:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.56.171.15:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.0.234.200:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.192.5.154:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.143.129.101:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.2.8.79:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.25.121.190:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.175.201.120:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.170.173.251:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.136.146.147:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.53.196.106:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.231.209.64:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.168.50.238:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.207.82.121:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.40.18.42:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.66.244.6:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.115.165.76:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.177.133.60:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.159.153.60:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.47.219.18:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.219.129.226:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.121.40.148:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.207.207.77:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.88.83.153:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.168.190.188:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.82.51.227:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.69.214.182:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.101.47.74:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.83.32.66:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.76.87.116:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.27.188.211:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.71.120.86:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.55.231.159:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.215.193.69:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.145.13.52:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.125.30.188:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.113.64.52:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.132.176.178:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.80.202.191:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.195.177.159:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.97.19.198:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.220.145.2:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.213.70.163:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.124.218.208:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.252.70.232:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.45.107.177:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.12.50.60:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.190.147.72:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.138.134.62:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.68.213.85:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.210.250.106:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.125.183.124:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.59.64.251:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.254.217.135:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.109.169.162:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.216.188.197:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.144.72.239:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.16.46.217:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.89.230.160:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.201.225.7:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.239.223.35:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.220.145.214:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.82.198.92:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.184.140.188:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.185.149.59:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.123.134.96:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.12.85.14:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 23.45.95.195:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.177.186.242:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.103.5.49:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 5.246.169.238:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.44.202.223:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.116.50.80:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.234.191.6:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.227.187.211:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.24.170.74:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.241.40.133:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.42.15.119:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 8.191.166.76:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.101.140.65:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 18.173.10.32:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.240.59.120:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 22.185.54.239:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.139.0.72:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.157.193.117:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.137.198.37:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.217.113.97:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.139.141.137:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 17.241.118.158:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 13.92.120.240:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 12.232.134.34:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 20.16.152.87:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 9.142.242.147:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 1.218.220.110:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 14.227.3.43:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 19.252.233.246:2323
Source: global traffic TCP traffic: 192.168.2.23:29425 -> 4.90.50.253:2323
Sample listens on a socket
Source: /tmp/na.elf (PID: 6276) Socket: 127.0.0.1:20905 Jump to behavior
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Source: global traffic TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: unknown TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown TCP traffic detected without corresponding DNS query: 194.120.116.148
Source: unknown TCP traffic detected without corresponding DNS query: 17.238.8.149
Source: unknown TCP traffic detected without corresponding DNS query: 22.167.30.98
Source: unknown TCP traffic detected without corresponding DNS query: 5.173.239.246
Source: unknown TCP traffic detected without corresponding DNS query: 9.135.14.165
Source: unknown TCP traffic detected without corresponding DNS query: 17.158.150.75
Source: unknown TCP traffic detected without corresponding DNS query: 17.32.159.22
Source: unknown TCP traffic detected without corresponding DNS query: 9.48.154.127
Source: unknown TCP traffic detected without corresponding DNS query: 18.4.177.32
Source: unknown TCP traffic detected without corresponding DNS query: 20.52.22.177
Source: unknown TCP traffic detected without corresponding DNS query: 8.117.159.211
Source: unknown TCP traffic detected without corresponding DNS query: 17.76.215.245
Source: unknown TCP traffic detected without corresponding DNS query: 20.41.207.115
Source: unknown TCP traffic detected without corresponding DNS query: 19.18.19.77
Source: unknown TCP traffic detected without corresponding DNS query: 12.221.68.69
Source: unknown TCP traffic detected without corresponding DNS query: 14.160.206.54
Source: unknown TCP traffic detected without corresponding DNS query: 8.145.164.87
Source: unknown TCP traffic detected without corresponding DNS query: 4.157.112.244
Source: unknown TCP traffic detected without corresponding DNS query: 13.5.212.26
Source: unknown TCP traffic detected without corresponding DNS query: 13.92.164.85
Source: unknown TCP traffic detected without corresponding DNS query: 1.255.34.65
Source: unknown TCP traffic detected without corresponding DNS query: 5.237.32.88
Source: unknown TCP traffic detected without corresponding DNS query: 23.213.166.197
Source: unknown TCP traffic detected without corresponding DNS query: 22.194.153.204
Source: unknown TCP traffic detected without corresponding DNS query: 4.177.42.212
Source: unknown TCP traffic detected without corresponding DNS query: 9.86.36.214
Source: unknown TCP traffic detected without corresponding DNS query: 1.62.225.167
Source: unknown TCP traffic detected without corresponding DNS query: 8.67.249.93
Source: unknown TCP traffic detected without corresponding DNS query: 5.238.146.87
Source: unknown TCP traffic detected without corresponding DNS query: 4.226.234.153
Source: unknown TCP traffic detected without corresponding DNS query: 12.201.38.21
Source: unknown TCP traffic detected without corresponding DNS query: 1.90.89.222
Source: unknown TCP traffic detected without corresponding DNS query: 18.55.108.205
Source: unknown TCP traffic detected without corresponding DNS query: 20.26.116.243
Source: unknown TCP traffic detected without corresponding DNS query: 17.116.161.141
Source: unknown TCP traffic detected without corresponding DNS query: 4.42.174.85
Source: unknown TCP traffic detected without corresponding DNS query: 23.162.193.98
Source: unknown TCP traffic detected without corresponding DNS query: 13.240.69.141
Source: unknown TCP traffic detected without corresponding DNS query: 1.253.240.55
Source: unknown TCP traffic detected without corresponding DNS query: 1.18.218.117
Source: unknown TCP traffic detected without corresponding DNS query: 22.87.146.107
Source: unknown TCP traffic detected without corresponding DNS query: 14.26.161.114
Source: unknown TCP traffic detected without corresponding DNS query: 17.8.139.177
Source: unknown TCP traffic detected without corresponding DNS query: 9.44.100.169
Source: unknown TCP traffic detected without corresponding DNS query: 5.226.154.215
Source: unknown TCP traffic detected without corresponding DNS query: 9.86.57.146
Source: unknown TCP traffic detected without corresponding DNS query: 17.111.185.235
Source: unknown TCP traffic detected without corresponding DNS query: 20.60.190.247
Source: unknown TCP traffic detected without corresponding DNS query: 4.133.142.34
Source: unknown Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary
barindex
Contains symbols with names commonly found in malware
Source: ELF static info symbol of initial sample Name: attack.c
Source: ELF static info symbol of initial sample Name: attack_get_opt_int
Source: ELF static info symbol of initial sample Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample Name: attack_get_opt_str
Source: ELF static info symbol of initial sample Name: attack_init
Source: ELF static info symbol of initial sample Name: attack_method.c
Source: ELF static info symbol of initial sample Name: attack_method_greip
Source: ELF static info symbol of initial sample Name: attack_method_httpnull
Source: ELF static info symbol of initial sample Name: attack_method_std
Source: ELF static info symbol of initial sample Name: attack_method_tcpack
Sample and/or dropped files contains symbols with suspicious names
Source: na.elf ELF static info symbol of initial sample: __gnu_unwind_execute
Sample tries to kill a process (SIGKILL)
Source: /tmp/na.elf (PID: 6283) SIGKILL sent: pid: 847, result: successful Jump to behavior
Source: /tmp/na.elf (PID: 6283) SIGKILL sent: pid: 6088, result: successful Jump to behavior
Source: classification engine Classification label: mal68.troj.linELF@0/1@0/0
Enumerates processes within the "proc" file system
Source: /tmp/na.elf (PID: 6283) File opened: /proc/6236/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1582/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2033/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2275/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/3088/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1612/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1579/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1699/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1335/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1698/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2028/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1334/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1576/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2302/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/3236/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2025/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2146/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/910/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/4444/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/4445/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/912/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/4446/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/517/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/759/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2307/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/918/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/6088/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1594/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2285/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2281/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1349/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1623/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/761/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1622/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/884/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1983/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2038/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1344/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1465/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1586/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1860/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1463/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2156/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/800/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/801/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/6237/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/5821/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1629/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1627/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1900/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/3021/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/491/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2294/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2050/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1877/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/772/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1633/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1599/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1632/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/774/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1477/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/654/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/896/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1476/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1872/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2048/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/655/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1475/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2289/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/656/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/777/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/657/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/658/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/419/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/936/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1639/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1638/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2208/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2180/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1809/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1494/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1890/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2063/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2062/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1888/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/4519/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1886/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/420/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1489/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/785/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1642/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/788/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/667/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/789/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/4512/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/4514/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/1648/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/6278/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2078/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2077/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2074/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2195/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/670/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/2746/maps Jump to behavior
Source: /tmp/na.elf (PID: 6283) File opened: /proc/793/maps Jump to behavior
Executes the "rm" command used to delete files or directories
Source: /usr/bin/dash (PID: 6246) Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.mNGEz3jgIU /tmp/tmp.RhdMjEHKnf /tmp/tmp.jOJSzn0jat Jump to behavior
Source: /usr/bin/dash (PID: 6247) Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.mNGEz3jgIU /tmp/tmp.RhdMjEHKnf /tmp/tmp.jOJSzn0jat Jump to behavior
Uses the "uname" system call to query kernel version information (possible evasion)
Source: /tmp/na.elf (PID: 6276) Queries kernel information via 'uname': Jump to behavior
Source: na.elf, 6276.1.00007ffe6f633000.00007ffe6f654000.rw-.sdmp, na.elf, 6280.1.00007ffe6f633000.00007ffe6f654000.rw-.sdmp Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf
Source: na.elf, 6276.1.0000555ff0c3b000.0000555ff0d8c000.rw-.sdmp, na.elf, 6280.1.0000555ff0c3b000.0000555ff0d69000.rw-.sdmp Binary or memory string: _U!/etc/qemu-binfmt/arm
Source: na.elf, 6276.1.0000555ff0c3b000.0000555ff0d8c000.rw-.sdmp, na.elf, 6280.1.0000555ff0c3b000.0000555ff0d69000.rw-.sdmp Binary or memory string: /etc/qemu-binfmt/arm
Source: na.elf, 6276.1.00007ffe6f633000.00007ffe6f654000.rw-.sdmp, na.elf, 6280.1.00007ffe6f633000.00007ffe6f654000.rw-.sdmp Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 6276.1.00007f765c017000.00007f765c02e000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 6280.1.00007f765c017000.00007f765c02e000.r-x.sdmp, type: MEMORY

Remote Access Functionality
barindex
Yara detected Mirai
Source: Yara match File source: na.elf, type: SAMPLE
Source: Yara match File source: 6276.1.00007f765c017000.00007f765c02e000.r-x.sdmp, type: MEMORY
Source: Yara match File source: 6280.1.00007f765c017000.00007f765c02e000.r-x.sdmp, type: MEMORY

No Screenshots

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
12.21.246.88
 unknown United States
7018 ATT-INTERNET4US false
4.31.146.172
 unknown United States
3356 LEVEL3US false
8.9.12.255
 unknown United States
20473 AS-CHOOPAUS false
17.12.254.167
 unknown United States
714 APPLE-ENGINEERINGUS false
23.4.16.80
 unknown United States
16625 AKAMAI-ASUS false
1.253.35.1
 unknown Korea Republic of
9318 SKB-ASSKBroadbandCoLtdKR false
18.179.15.236
 unknown United States
16509 AMAZON-02US false
4.211.125.81
 unknown United States
3356 LEVEL3US false
18.99.183.87
 unknown United States
3 MIT-GATEWAYSUS false
17.187.31.188
 unknown United States
714 APPLE-ENGINEERINGUS false
12.42.101.95
 unknown United States
7018 ATT-INTERNET4US false
20.144.176.232
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
18.126.122.155
 unknown United States
3 MIT-GATEWAYSUS false
1.134.99.89
 unknown Australia
1221 ASN-TELSTRATelstraCorporationLtdAU false
1.144.131.176
 unknown Australia
1221 ASN-TELSTRATelstraCorporationLtdAU false
9.135.21.213
 unknown United States
3356 LEVEL3US false
23.173.82.253
 unknown Reserved
395568 COMFEDCUUS false
4.19.212.162
 unknown United States
3356 LEVEL3US false
19.132.179.101
 unknown United States
3 MIT-GATEWAYSUS false
12.157.160.72
 unknown United States
7018 ATT-INTERNET4US false
4.45.235.182
 unknown United States
3356 LEVEL3US false
23.51.169.26
 unknown United States
16625 AKAMAI-ASUS false
19.232.47.203
 unknown United States
3 MIT-GATEWAYSUS false
19.117.204.19
 unknown United States
3 MIT-GATEWAYSUS false
18.69.142.225
 unknown United States
3 MIT-GATEWAYSUS false
17.48.100.147
 unknown United States
714 APPLE-ENGINEERINGUS false
19.156.197.84
 unknown United States
3 MIT-GATEWAYSUS false
17.87.63.174
 unknown United States
714 APPLE-ENGINEERINGUS false
17.196.177.14
 unknown United States
714 APPLE-ENGINEERINGUS false
14.81.218.0
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
12.125.87.137
 unknown United States
7018 ATT-INTERNET4US false
14.200.202.239
 unknown Australia
7545 TPG-INTERNET-APTPGTelecomLimitedAU false
12.85.120.214
 unknown United States
7018 ATT-INTERNET4US false
19.108.159.234
 unknown United States
3 MIT-GATEWAYSUS false
9.40.149.222
 unknown United States
3356 LEVEL3US false
12.113.19.95
 unknown United States
7018 ATT-INTERNET4US false
4.86.31.180
 unknown United States
3356 LEVEL3US false
20.148.200.122
 unknown United States
4237 CSC-IGN-FTWUS false
1.18.16.249
 unknown Korea Republic of
45996 GNJ-AS-KRDAOUTECHNOLOGYKR false
9.132.247.16
 unknown United States
3356 LEVEL3US false
9.215.69.94
 unknown United States
3356 LEVEL3US false
8.138.12.44
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
20.216.247.74
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
13.96.108.167
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
9.198.169.99
 unknown United States
3356 LEVEL3US false
1.105.243.33
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
12.239.82.67
 unknown United States
7018 ATT-INTERNET4US false
20.203.160.91
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
8.138.223.20
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
17.121.8.241
 unknown United States
714 APPLE-ENGINEERINGUS false
20.171.142.160
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
14.248.199.29
 unknown Viet Nam
45899 VNPT-AS-VNVNPTCorpVN false
18.116.3.138
 unknown United States
3 MIT-GATEWAYSUS false
4.184.40.186
 unknown United States
3356 LEVEL3US false
22.78.228.93
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
22.237.52.151
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
9.1.148.29
 unknown United States
3356 LEVEL3US false
4.21.18.233
 unknown United States
3356 LEVEL3US false
23.240.15.47
 unknown United States
20001 TWC-20001-PACWESTUS false
19.239.166.233
 unknown United States
3 MIT-GATEWAYSUS false
1.243.227.25
 unknown Korea Republic of
38415 GOEGN-AS-KRGuriNamyangjuOfficeOfEducationKR false
4.225.13.65
 unknown United States
3356 LEVEL3US false
20.99.115.8
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
23.43.32.17
 unknown United States
16625 AKAMAI-ASUS false
18.85.147.113
 unknown United States
3 MIT-GATEWAYSUS false
23.42.205.249
 unknown United States
16625 AKAMAI-ASUS false
1.247.158.141
 unknown Korea Republic of
38415 GOEGN-AS-KRGuriNamyangjuOfficeOfEducationKR false
12.100.82.249
 unknown United States
7018 ATT-INTERNET4US false
22.103.172.113
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
17.34.181.66
 unknown United States
714 APPLE-ENGINEERINGUS false
14.109.191.178
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
13.137.183.130
 unknown United States
7018 ATT-INTERNET4US false
12.201.0.230
 unknown United States
7018 ATT-INTERNET4US false
13.129.168.118
 unknown United States
7018 ATT-INTERNET4US false
9.138.246.135
 unknown United States
3356 LEVEL3US false
22.112.76.112
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
14.143.23.142
 unknown India
4755 TATACOMM-ASTATACommunicationsformerlyVSNLisLeadingISP false
5.26.217.166
 unknown Turkey
16135 TURKCELL-ASTurkcellASTR false
13.249.167.133
 unknown United States
16509 AMAZON-02US false
17.68.112.152
 unknown United States
714 APPLE-ENGINEERINGUS false
1.24.4.138
 unknown China
4837 CHINA169-BACKBONECHINAUNICOMChina169BackboneCN false
8.187.18.239
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
20.62.103.38
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
14.61.83.149
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
18.169.162.61
 unknown United States
3 MIT-GATEWAYSUS false
9.194.40.22
 unknown United States
3356 LEVEL3US false
19.111.105.21
 unknown United States
3 MIT-GATEWAYSUS false
4.172.254.7
 unknown United States
3356 LEVEL3US false
5.70.237.237
 unknown United Kingdom
5607 BSKYB-BROADBAND-ASGB false
9.48.140.162
 unknown United States
3356 LEVEL3US false
9.182.68.98
 unknown United States
3356 LEVEL3US false
22.94.123.234
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
17.153.159.81
 unknown United States
714 APPLE-ENGINEERINGUS false
23.237.211.213
 unknown United States
174 COGENT-174US false
8.144.211.181
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
22.35.235.86
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
18.175.16.196
 unknown United States
16509 AMAZON-02US false
20.141.100.192
 unknown United States
8070 MICROSOFT-CORP-MSN-AS-BLOCKUS false
14.59.217.120
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
12.93.182.212
 unknown United States
7018 ATT-INTERNET4US false