Linux Analysis Report
sora.arm

Overview

General Information

Sample Name: sora.arm
Analysis ID: 626479
MD5: 7799db04192fa39c4d8d2986fbc472a8
SHA1: 15dbc1cc83b869cd3eab35cd02c994507d4d0604
SHA256: 600656d40c15432fe35987fec3d346cf9f34ee9b1ae1d23706925d6c8b6e57b8
Infos:

Detection

Mirai
Score: 60
Range: 0 - 100
Whitelisted: false

Signatures

Yara detected Mirai
Multi AV Scanner detection for submitted file
Sample is packed with UPX
Sample contains only a LOAD segment without any section mappings
Uses the "uname" system call to query kernel version information (possible evasion)
Enumerates processes within the "proc" file system
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Detected TCP or UDP traffic on non-standard ports
Sample listens on a socket
Sample tries to kill a process (SIGKILL)

Classification

AV Detection
barindex
Multi AV Scanner detection for submitted file
Source: sora.arm Virustotal: Detection: 42% Perma Link
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Source: global traffic TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.23:45728 -> 104.131.58.204:1312
Sample listens on a socket
Source: /tmp/sora.arm (PID: 6228) Socket: 0.0.0.0::0 Jump to behavior
Source: /tmp/sora.arm (PID: 6228) Socket: 0.0.0.0::53413 Jump to behavior
Source: /tmp/sora.arm (PID: 6228) Socket: 0.0.0.0::80 Jump to behavior
Source: /tmp/sora.arm (PID: 6228) Socket: 0.0.0.0::37215 Jump to behavior
Source: /tmp/sora.arm (PID: 6234) Socket: 0.0.0.0::0 Jump to behavior
Source: unknown Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 42836 -> 443
Source: unknown TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown TCP traffic detected without corresponding DNS query: 104.131.58.204
Source: unknown TCP traffic detected without corresponding DNS query: 90.142.129.13
Source: unknown TCP traffic detected without corresponding DNS query: 112.220.25.155
Source: unknown TCP traffic detected without corresponding DNS query: 218.116.26.13
Source: unknown TCP traffic detected without corresponding DNS query: 41.49.140.15
Source: unknown TCP traffic detected without corresponding DNS query: 211.14.213.103
Source: unknown TCP traffic detected without corresponding DNS query: 221.214.104.243
Source: unknown TCP traffic detected without corresponding DNS query: 14.27.145.200
Source: unknown TCP traffic detected without corresponding DNS query: 89.175.35.111
Source: unknown TCP traffic detected without corresponding DNS query: 171.15.147.154
Source: unknown TCP traffic detected without corresponding DNS query: 221.201.182.216
Source: unknown TCP traffic detected without corresponding DNS query: 190.174.174.34
Source: unknown TCP traffic detected without corresponding DNS query: 78.239.7.93
Source: unknown TCP traffic detected without corresponding DNS query: 45.15.75.43
Source: unknown TCP traffic detected without corresponding DNS query: 194.50.244.199
Source: unknown TCP traffic detected without corresponding DNS query: 108.77.125.24
Source: unknown TCP traffic detected without corresponding DNS query: 253.173.219.103
Source: unknown TCP traffic detected without corresponding DNS query: 181.156.71.179
Source: unknown TCP traffic detected without corresponding DNS query: 181.119.86.241
Source: unknown TCP traffic detected without corresponding DNS query: 57.103.122.74
Source: unknown TCP traffic detected without corresponding DNS query: 86.26.239.206
Source: unknown TCP traffic detected without corresponding DNS query: 202.102.229.41
Source: unknown TCP traffic detected without corresponding DNS query: 146.35.195.126
Source: unknown TCP traffic detected without corresponding DNS query: 197.108.214.179
Source: unknown TCP traffic detected without corresponding DNS query: 243.16.11.26
Source: unknown TCP traffic detected without corresponding DNS query: 165.168.142.144
Source: unknown TCP traffic detected without corresponding DNS query: 162.169.120.3
Source: unknown TCP traffic detected without corresponding DNS query: 244.165.245.90
Source: unknown TCP traffic detected without corresponding DNS query: 62.50.50.73
Source: unknown TCP traffic detected without corresponding DNS query: 24.56.245.123
Source: unknown TCP traffic detected without corresponding DNS query: 169.120.116.184
Source: unknown TCP traffic detected without corresponding DNS query: 57.177.179.33
Source: unknown TCP traffic detected without corresponding DNS query: 219.180.250.187
Source: unknown TCP traffic detected without corresponding DNS query: 251.71.75.190
Source: unknown TCP traffic detected without corresponding DNS query: 156.225.109.220
Source: unknown TCP traffic detected without corresponding DNS query: 91.65.68.150
Source: unknown TCP traffic detected without corresponding DNS query: 188.144.215.180
Source: unknown TCP traffic detected without corresponding DNS query: 16.130.211.183
Source: unknown TCP traffic detected without corresponding DNS query: 14.231.82.209
Source: unknown TCP traffic detected without corresponding DNS query: 165.114.156.179
Source: unknown TCP traffic detected without corresponding DNS query: 146.104.86.150
Source: unknown TCP traffic detected without corresponding DNS query: 156.67.159.142
Source: unknown TCP traffic detected without corresponding DNS query: 162.58.175.53
Source: unknown TCP traffic detected without corresponding DNS query: 91.209.199.175
Source: unknown TCP traffic detected without corresponding DNS query: 128.1.51.63
Source: unknown TCP traffic detected without corresponding DNS query: 62.128.207.203
Source: unknown TCP traffic detected without corresponding DNS query: 207.21.144.165
Source: unknown TCP traffic detected without corresponding DNS query: 13.193.175.91
Source: sora.arm String found in binary or memory: http://upx.sf.net
Sample contains only a LOAD segment without any section mappings
Source: LOAD without section mappings Program segment: 0x8000
Sample tries to kill a process (SIGKILL)
Source: /tmp/sora.arm (PID: 6228) SIGKILL sent: pid: 936, result: successful Jump to behavior
Source: /tmp/sora.arm (PID: 6234) SIGKILL sent: pid: 936, result: successful Jump to behavior
Source: classification engine Classification label: mal60.troj.evad.linARM@0/0@0/0

Data Obfuscation
barindex
Sample is packed with UPX
Source: initial sample String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $
Enumerates processes within the "proc" file system
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/491/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/793/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/772/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/796/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/774/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/797/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/777/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/799/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/658/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/912/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/759/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/936/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/918/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/1/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/761/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/785/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/884/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/720/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/721/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/788/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/789/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/800/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/801/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/847/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6234) File opened: /proc/904/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/491/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/793/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/772/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/796/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/774/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/797/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/777/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/799/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/658/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/912/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/759/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/936/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/918/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/1/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/761/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/785/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/884/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/720/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/721/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/788/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/789/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/800/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/801/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/847/fd Jump to behavior
Source: /tmp/sora.arm (PID: 6228) File opened: /proc/904/fd Jump to behavior
Uses the "uname" system call to query kernel version information (possible evasion)
Source: /tmp/sora.arm (PID: 6226) Queries kernel information via 'uname': Jump to behavior
Source: sora.arm, 6226.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6228.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6326.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6344.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6335.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6230.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6325.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6235.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp Binary or memory string: U!/etc/qemu-binfmt/arm
Source: sora.arm, 6226.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6228.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6326.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6344.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6335.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6230.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6325.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6235.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/sora.armSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/sora.arm
Source: sora.arm, 6226.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6228.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6326.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6344.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6335.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6230.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6325.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp, sora.arm, 6235.1.00000000a25b81b1.00000000ff87532e.rw-.sdmp Binary or memory string: /etc/qemu-binfmt/arm
Source: sora.arm, 6226.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6228.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6326.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6344.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6335.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6230.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6325.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp, sora.arm, 6235.1.00000000d4f1622b.00000000bf8ca384.rw-.sdmp Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information
barindex
Yara detected Mirai
Source: Yara match File source: dump.pcap, type: PCAP

Remote Access Functionality
barindex
Yara detected Mirai
Source: Yara match File source: dump.pcap, type: PCAP

No Screenshots

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
192.132.79.178
 unknown United States
367 DNIC-ASBLK-00306-00371US false
17.88.248.1
 unknown United States
714 APPLE-ENGINEERINGUS false
108.34.195.20
 unknown United States
701 UUNETUS false
85.158.231.141
 unknown Austria
8692 BRZAT false
197.166.142.74
 unknown Egypt
24863 LINKdotNET-ASEG false
243.142.109.8
 unknown Reserved
unknown unknown false
154.28.148.110
 unknown United States
174 COGENT-174US false
223.110.109.215
 unknown China
56046 CMNET-JIANGSU-APChinaMobilecommunicationscorporationCN false
242.105.215.220
 unknown Reserved
unknown unknown false
89.3.43.196
 unknown France
21502 ASN-NUMERICABLEFR false
248.65.0.12
 unknown Reserved
unknown unknown false
16.46.151.36
 unknown United States
unknown unknown false
45.140.216.1
 unknown Switzerland
62075 LANNERTDE false
147.24.192.227
 unknown United States
10796 TWC-10796-MIDWESTUS false
135.148.11.249
 unknown United States
18676 AVAYAUS false
253.179.7.5
 unknown Reserved
unknown unknown false
187.247.165.44
 unknown Mexico
13999 MegaCableSAdeCVMX false
37.90.202.181
 unknown Germany
3320 DTAGInternetserviceprovideroperationsDE false
161.53.142.82
 unknown Croatia (LOCAL Name: Hrvatska)
2108 CARNET-ASJMarohnica510000ZagrebHR false
201.173.227.169
 unknown Mexico
11888 TelevisionInternacionalSAdeCVMX false
126.89.187.159
 unknown Japan 17676 GIGAINFRASoftbankBBCorpJP false
133.124.154.5
 unknown Japan 2522 PPP-EXPJapanNetworkInformationCenterJP false
13.165.162.234
 unknown United States
7018 ATT-INTERNET4US false
218.235.146.189
 unknown Korea Republic of
9318 SKB-ASSKBroadbandCoLtdKR false
250.183.216.13
 unknown Reserved
unknown unknown false
48.6.146.179
 unknown United States
2686 ATGS-MMD-ASUS false
105.179.193.81
 unknown unknown
37228 Olleh-Rwanda-NetworksRW false
243.114.158.2
 unknown Reserved
unknown unknown false
223.184.95.212
 unknown India
45609 BHARTI-MOBILITY-AS-APBhartiAirtelLtdASforGPRSService false
108.103.78.32
 unknown United States
10507 SPCSUS false
75.43.169.89
 unknown United States
7018 ATT-INTERNET4US false
99.2.51.118
 unknown United States
7018 ATT-INTERNET4US false
99.188.69.140
 unknown United States
7018 ATT-INTERNET4US false
160.224.24.100
 unknown Angola
11259 ANGOLATELECOMAO false
124.54.163.211
 unknown Korea Republic of
17858 POWERVIS-AS-KRLGPOWERCOMMKR false
198.217.52.158
 unknown United States
3354 THENET-AS-3354US false
46.109.74.153
 unknown Latvia
12578 APOLLO-ASLatviaLV false
23.254.189.224
 unknown United States
54290 HOSTWINDSUS false
197.13.57.208
 unknown Tunisia
37504 MeninxTN false
83.191.157.210
 unknown Sweden
39651 COMHEM-SWEDENSE false
156.191.147.95
 unknown Egypt
36992 ETISALAT-MISREG false
95.120.78.125
 unknown Spain
3352 TELEFONICA_DE_ESPANAES false
141.231.140.12
 unknown United Kingdom
12701 BARCAPLondonGB false
66.74.196.104
 unknown United States
20001 TWC-20001-PACWESTUS false
242.47.204.113
 unknown Reserved
unknown unknown false
88.0.190.253
 unknown Spain
3352 TELEFONICA_DE_ESPANAES false
222.4.209.248
 unknown Japan 2516 KDDIKDDICORPORATIONJP false
101.98.223.235
 unknown New Zealand
9790 VOCUSGROUPNZVocusGroupNZ false
246.182.65.69
 unknown Reserved
unknown unknown false
197.32.129.167
 unknown Egypt
8452 TE-ASTE-ASEG false
45.48.194.60
 unknown United States
20001 TWC-20001-PACWESTUS false
43.145.165.142
 unknown Japan 4249 LILLY-ASUS false
246.118.168.83
 unknown Reserved
unknown unknown false
24.115.243.251
 unknown United States
3737 AS-PTDUS false
35.63.96.23
 unknown United States
397797 CITYOFMARSHALL-01US false
195.199.39.146
 unknown Hungary
1955 HBONE-ASHUNGARNETHU false
36.107.69.251
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
194.14.131.55
 unknown Sweden
35041 NET-BINERO-STHLM1SE false
70.96.75.254
 unknown United States
7385 ALLSTREAMUS false
247.246.7.44
 unknown Reserved
unknown unknown false
246.104.145.143
 unknown Reserved
unknown unknown false
68.179.33.30
 unknown Canada
20161 TRGOCA false
109.219.227.142
 unknown France
3215 FranceTelecom-OrangeFR false
104.208.173.193
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
187.204.147.54
 unknown Mexico
8151 UninetSAdeCVMX false
48.16.103.121
 unknown United States
2686 ATGS-MMD-ASUS false
251.189.114.109
 unknown Reserved
unknown unknown false
40.61.159.230
 unknown United States
4249 LILLY-ASUS false
140.207.43.149
 unknown China
17621 CNCGROUP-SHChinaUnicomShanghainetworkCN false
219.29.178.11
 unknown Japan 17676 GIGAINFRASoftbankBBCorpJP false
39.115.115.171
 unknown Korea Republic of
9318 SKB-ASSKBroadbandCoLtdKR false
78.79.205.44
 unknown Sweden
3301 TELIANET-SWEDENTeliaCompanySE false
101.13.247.74
 unknown Taiwan; Republic of China (ROC)
24158 TAIWANMOBILE-ASTaiwanMobileCoLtdTW false
8.173.77.185
 unknown Singapore
37963 CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd false
180.15.127.156
 unknown Japan 4713 OCNNTTCommunicationsCorporationJP false
108.143.162.126
 unknown United States
16509 AMAZON-02US false
178.188.243.188
 unknown Austria
8447 TELEKOM-ATA1TelekomAustriaAGAT false
86.82.71.136
 unknown Netherlands
1136 KPNKPNNationalEU false
19.76.79.165
 unknown United States
3 MIT-GATEWAYSUS false
106.250.8.227
 unknown Korea Republic of
3786 LGDACOMLGDACOMCorporationKR false
180.114.49.216
 unknown China
137702 CHINATELECOM-JIANGSU-NANJING-IDCNanjingJiangsuProvince false
159.247.172.170
 unknown United States
3481 STOFCT-DOITUS false
149.9.143.181
 unknown United States
14987 RETHEMHOSTINGUS false
220.24.38.227
 unknown Japan 17676 GIGAINFRASoftbankBBCorpJP false
95.177.81.60
 unknown United Kingdom
8190 MDNXGB false
82.184.182.41
 unknown Italy
3269 ASN-IBSNAZIT false
85.71.236.132
 unknown Czech Republic
5610 O2-CZECH-REPUBLICCZ false
240.117.204.14
 unknown Reserved
unknown unknown false
24.31.202.210
 unknown United States
11426 TWC-11426-CAROLINASUS false
37.186.50.105
 unknown Qatar
48728 VODAFONEQATARQA false
210.212.47.194
 unknown India
9829 BSNL-NIBNationalInternetBackboneIN false
145.225.247.175
 unknown Germany
25039 ASN-LINDEKlosterhofstrasse1DE false
195.122.185.77
 unknown United Kingdom
3356 LEVEL3US false
220.219.163.179
 unknown Japan 2510 INFOWEBFUJITSULIMITEDJP false
16.85.23.211
 unknown United States
unknown unknown false
183.19.172.132
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
158.26.60.160
 unknown United States
1766 ASN-EXXONMOBIL-US false
59.3.178.43
 unknown Korea Republic of
4766 KIXS-AS-KRKoreaTelecomKR false
221.213.227.182
 unknown China
4837 CHINA169-BACKBONECHINAUNICOMChina169BackboneCN false
94.38.206.221
 unknown Italy
8612 TISCALI-IT false