Linux Analysis Report
M5VGS77ZYY

Overview

General Information

Sample Name: M5VGS77ZYY
Analysis ID: 626496
MD5: d415fdebf7bd931bee44ead0bd610670
SHA1: d86d4995ba2709a3a99087c2ddae368d9ffc4a09
SHA256: a24e8198dde3955f7b2007a8b9e25eefa1f1dc30ffaac3f0b31d650930c63c1c
Tags: 32elfmiraimotorola
Infos:

Detection

Mirai
Score: 60
Range: 0 - 100
Whitelisted: false

Signatures

Yara detected Mirai
Multi AV Scanner detection for submitted file
Uses known network protocols on non-standard ports
Sample has stripped symbol table
Uses the "uname" system call to query kernel version information (possible evasion)
Enumerates processes within the "proc" file system
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Detected TCP or UDP traffic on non-standard ports
Sample listens on a socket
Sample tries to kill a process (SIGKILL)

Classification

AV Detection
barindex
Multi AV Scanner detection for submitted file
Source: M5VGS77ZYY Virustotal: Detection: 50% Perma Link

Networking
barindex
Uses known network protocols on non-standard ports
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52222
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52224
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52226
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52228
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52230
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52232
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52236
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52238
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52242
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52246
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51856
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51862
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51866
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51874
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51888
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51898
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51908
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51918
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51928
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51932
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Source: global traffic TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.23:39634 -> 198.98.54.25:1312
Sample listens on a socket
Source: /tmp/M5VGS77ZYY (PID: 6252) Socket: 0.0.0.0::0 Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) Socket: 0.0.0.0::0 Jump to behavior
Source: unknown Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 42836 -> 443
Source: unknown TCP traffic detected without corresponding DNS query: 62.141.119.126
Source: unknown TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown TCP traffic detected without corresponding DNS query: 198.98.54.25
Source: unknown TCP traffic detected without corresponding DNS query: 203.227.76.157
Source: unknown TCP traffic detected without corresponding DNS query: 60.57.87.155
Source: unknown TCP traffic detected without corresponding DNS query: 169.220.25.105
Source: unknown TCP traffic detected without corresponding DNS query: 12.108.125.203
Source: unknown TCP traffic detected without corresponding DNS query: 18.72.69.103
Source: unknown TCP traffic detected without corresponding DNS query: 41.68.123.209
Source: unknown TCP traffic detected without corresponding DNS query: 73.35.152.69
Source: unknown TCP traffic detected without corresponding DNS query: 48.57.127.196
Source: unknown TCP traffic detected without corresponding DNS query: 158.251.86.76
Source: unknown TCP traffic detected without corresponding DNS query: 150.122.244.200
Source: unknown TCP traffic detected without corresponding DNS query: 37.130.236.117
Source: unknown TCP traffic detected without corresponding DNS query: 104.133.180.16
Source: unknown TCP traffic detected without corresponding DNS query: 63.192.94.233
Source: unknown TCP traffic detected without corresponding DNS query: 169.243.20.154
Source: unknown TCP traffic detected without corresponding DNS query: 166.73.193.120
Source: unknown TCP traffic detected without corresponding DNS query: 221.29.107.237
Source: unknown TCP traffic detected without corresponding DNS query: 92.135.68.163
Source: unknown TCP traffic detected without corresponding DNS query: 183.235.148.197
Source: unknown TCP traffic detected without corresponding DNS query: 216.101.65.207
Source: unknown TCP traffic detected without corresponding DNS query: 38.116.78.199
Source: unknown TCP traffic detected without corresponding DNS query: 126.40.190.88
Source: unknown TCP traffic detected without corresponding DNS query: 187.34.248.129
Source: unknown TCP traffic detected without corresponding DNS query: 200.206.232.208
Source: unknown TCP traffic detected without corresponding DNS query: 253.11.162.193
Source: unknown TCP traffic detected without corresponding DNS query: 155.201.217.73
Source: unknown TCP traffic detected without corresponding DNS query: 112.14.195.21
Source: unknown TCP traffic detected without corresponding DNS query: 122.58.177.6
Source: unknown TCP traffic detected without corresponding DNS query: 151.165.107.248
Source: unknown TCP traffic detected without corresponding DNS query: 93.85.229.156
Source: unknown TCP traffic detected without corresponding DNS query: 96.5.216.127
Source: unknown TCP traffic detected without corresponding DNS query: 105.80.231.155
Source: unknown TCP traffic detected without corresponding DNS query: 197.65.67.244
Source: unknown TCP traffic detected without corresponding DNS query: 200.141.226.69
Source: unknown TCP traffic detected without corresponding DNS query: 112.44.19.72
Source: unknown TCP traffic detected without corresponding DNS query: 68.239.246.86
Source: unknown TCP traffic detected without corresponding DNS query: 103.172.116.137
Source: unknown TCP traffic detected without corresponding DNS query: 192.69.62.239
Source: unknown TCP traffic detected without corresponding DNS query: 111.190.53.39
Source: unknown TCP traffic detected without corresponding DNS query: 105.171.30.92
Source: unknown TCP traffic detected without corresponding DNS query: 187.153.193.172
Source: unknown TCP traffic detected without corresponding DNS query: 143.2.121.43
Source: unknown TCP traffic detected without corresponding DNS query: 126.227.239.106
Source: unknown TCP traffic detected without corresponding DNS query: 149.140.8.224
Source: unknown TCP traffic detected without corresponding DNS query: 253.163.89.73
Source: unknown TCP traffic detected without corresponding DNS query: 79.195.253.175
Source: unknown TCP traffic detected without corresponding DNS query: 66.106.97.181
Sample has stripped symbol table
Source: ELF static info symbol of initial sample .symtab present: no
Sample tries to kill a process (SIGKILL)
Source: /tmp/M5VGS77ZYY (PID: 6252) SIGKILL sent: pid: 936, result: successful Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) SIGKILL sent: pid: 936, result: successful Jump to behavior
Source: classification engine Classification label: mal60.troj.lin@0/0@0/0
Enumerates processes within the "proc" file system
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/491/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/793/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/772/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/796/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/774/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/797/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/777/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/799/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/658/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/912/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/759/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/936/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/918/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/1/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/761/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/785/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/884/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/720/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/721/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/788/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/789/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/800/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/801/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/847/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6252) File opened: /proc/904/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/491/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/793/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/772/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/796/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/774/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/797/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/777/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/799/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/658/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/912/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/759/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/936/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/918/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/1/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/761/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/785/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/884/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/720/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/721/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/788/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/789/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/800/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/801/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/847/fd Jump to behavior
Source: /tmp/M5VGS77ZYY (PID: 6258) File opened: /proc/904/fd Jump to behavior

Hooking and other Techniques for Hiding and Protection
barindex
Uses known network protocols on non-standard ports
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52222
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52224
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52226
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52228
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52230
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52232
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52236
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52238
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52242
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 52246
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51856
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51862
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51866
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51874
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51888
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51898
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51908
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51918
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51928
Source: unknown Network traffic detected: HTTP traffic on port 23 -> 51932
Uses the "uname" system call to query kernel version information (possible evasion)
Source: /tmp/M5VGS77ZYY (PID: 6250) Queries kernel information via 'uname': Jump to behavior
Source: M5VGS77ZYY, 6250.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6252.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6352.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6365.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6358.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6253.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6348.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6259.1.000000003cb3f590.00000000099936e7.rw-.sdmp Binary or memory string: SWEtAx86_64/usr/bin/qemu-m68k/tmp/M5VGS77ZYYSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/M5VGS77ZYY
Source: M5VGS77ZYY, 6250.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6252.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6352.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6365.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6358.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6253.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6348.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6259.1.00000000f99d94f6.000000002c545420.rw-.sdmp Binary or memory string: U!/etc/qemu-binfmt/m68k
Source: M5VGS77ZYY, 6250.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6252.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6352.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6365.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6358.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6253.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6348.1.000000003cb3f590.00000000099936e7.rw-.sdmp, M5VGS77ZYY, 6259.1.000000003cb3f590.00000000099936e7.rw-.sdmp Binary or memory string: /usr/bin/qemu-m68k
Source: M5VGS77ZYY, 6250.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6252.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6352.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6365.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6358.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6253.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6348.1.00000000f99d94f6.000000002c545420.rw-.sdmp, M5VGS77ZYY, 6259.1.00000000f99d94f6.000000002c545420.rw-.sdmp Binary or memory string: /etc/qemu-binfmt/m68k

Stealing of Sensitive Information
barindex
Yara detected Mirai
Source: Yara match File source: dump.pcap, type: PCAP

Remote Access Functionality
barindex
Yara detected Mirai
Source: Yara match File source: dump.pcap, type: PCAP

No Screenshots

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
151.237.40.148
 unknown Bulgaria
39024 NASTECHBG false
53.60.28.134
 unknown Germany
31399 DAIMLER-ASITIGNGlobalNetworkDE false
151.13.95.197
 unknown Italy
1267 ASN-WINDTREIUNETEU false
83.41.29.137
 unknown Spain
3352 TELEFONICA_DE_ESPANAES false
162.234.46.48
 unknown United States
7018 ATT-INTERNET4US false
246.230.10.226
 unknown Reserved
unknown unknown false
85.204.5.0
 unknown Romania
6830 LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding false
92.123.156.114
 unknown European Union
16625 AKAMAI-ASUS false
58.210.144.249
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
45.30.40.126
 unknown United States
7018 ATT-INTERNET4US false
58.170.69.165
 unknown Australia
1221 ASN-TELSTRATelstraCorporationLtdAU false
211.3.200.9
 unknown Japan 4725 ODNSoftBankMobileCorpJP false
42.254.110.115
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
65.3.230.49
 unknown United States
16509 AMAZON-02US false
155.174.218.52
 unknown United States
797 AMERITECH-ASUS false
12.157.160.70
 unknown United States
7018 ATT-INTERNET4US false
123.216.155.190
 unknown Japan 4713 OCNNTTCommunicationsCorporationJP false
135.140.7.135
 unknown United States
10455 LUCENT-CIOUS false
191.186.71.159
 unknown Brazil
28573 CLAROSABR false
75.41.107.11
 unknown United States
7018 ATT-INTERNET4US false
173.139.22.47
 unknown United States
10507 SPCSUS false
58.181.254.137
 unknown Thailand
7693 COMNET-THKSCCommercialInternetCoLtdTH false
247.234.69.3
 unknown Reserved
unknown unknown false
220.44.187.236
 unknown Japan 17676 GIGAINFRASoftbankBBCorpJP false
221.133.37.91
 unknown Malaysia
38199 MACROLYNX-ASMacroLynxSdnBhdInternetServiceProvider false
111.161.26.53
 unknown China
4837 CHINA169-BACKBONECHINAUNICOMChina169BackboneCN false
248.88.181.80
 unknown Reserved
unknown unknown false
158.86.240.54
 unknown United States
20379 NET-BAKERUS false
252.181.246.233
 unknown Reserved
unknown unknown false
212.213.69.86
 unknown Finland
1759 TSF-IP-CORETeliaFinlandOyjEU false
207.161.43.85
 unknown Canada
7122 MTS-ASNCA false
41.54.12.214
 unknown South Africa
37168 CELL-CZA false
19.50.113.160
 unknown United States
3 MIT-GATEWAYSUS false
179.100.198.207
 unknown Brazil
27699 TELEFONICABRASILSABR false
169.153.114.127
 unknown United States
7867 TECHDATAUS false
68.43.78.181
 unknown United States
7922 COMCAST-7922US false
198.46.22.165
 unknown United States
39970 ASN-CELLU-4US false
218.127.26.8
 unknown Japan 17676 GIGAINFRASoftbankBBCorpJP false
249.40.124.233
 unknown Reserved
unknown unknown false
53.188.22.90
 unknown Germany
31399 DAIMLER-ASITIGNGlobalNetworkDE false
20.26.222.244
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
187.130.196.250
 unknown Mexico
8151 UninetSAdeCVMX false
44.152.241.159
 unknown United States
62383 LDS-ASBE false
249.252.219.179
 unknown Reserved
unknown unknown false
93.218.249.7
 unknown Germany
3320 DTAGInternetserviceprovideroperationsDE false
203.181.239.233
 unknown Japan 2907 SINET-ASResearchOrganizationofInformationandSystemsN false
179.232.195.123
 unknown Brazil
28573 CLAROSABR false
149.119.245.20
 unknown United States
11872 SYRACUSE-UNIVERSITYUS false
165.156.182.82
 unknown United States
203 CENTURYLINK-LEGACY-LVLT-203US false
145.81.44.110
 unknown Netherlands
1103 SURFNET-NLSURFnetTheNetherlandsNL false
75.172.178.48
 unknown United States
209 CENTURYLINK-US-LEGACY-QWESTUS false
249.154.124.25
 unknown Reserved
unknown unknown false
18.134.54.218
 unknown United States
16509 AMAZON-02US false
186.54.121.8
 unknown Uruguay
6057 AdministracionNacionaldeTelecomunicacionesUY false
243.163.195.206
 unknown Reserved
unknown unknown false
165.112.68.52
 unknown United States
3527 NIH-NETUS false
139.16.152.241
 unknown Germany
9905 LINKNET-ID-APLinknetASNID false
174.145.65.106
 unknown United States
10507 SPCSUS false
110.133.106.186
 unknown Japan 9824 JTCL-JP-ASJupiterTelecommunicationCoLtdJP false
23.164.102.127
 unknown Reserved
19382 ONCORECA false
245.148.189.114
 unknown Reserved
unknown unknown false
133.132.203.243
 unknown Japan 9595 XEPHIONNTT-MECorporationJP false
195.187.223.187
 unknown Poland
8308 NASK-COMMERCIALPL false
8.81.11.14
 unknown United States
3356 LEVEL3US false
79.81.250.63
 unknown France
15557 LDCOMNETFR false
181.129.70.175
 unknown Colombia
13489 EPMTelecomunicacionesSAESPCO false
155.211.62.186
 unknown Brazil
766 REDIRISRedIRISAutonomousSystemES false
146.117.145.247
 unknown unknown
17477 MCT-SYDNEYMacquarieTelecomAU false
170.73.136.4
 unknown United States
16761 FEDMOG-ASN-01US false
209.171.31.17
 unknown Canada
852 ASN852CA false
83.171.56.79
 unknown Lithuania
2847 LITNETLT false
165.206.25.107
 unknown United States
6122 ICN-ASUS false
83.54.133.28
 unknown Spain
3352 TELEFONICA_DE_ESPANAES false
240.192.40.248
 unknown Reserved
unknown unknown false
103.154.227.153
 unknown unknown
134687 TWIDC-AS-APTWIDCLimitedHK false
106.113.12.165
 unknown China
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
188.236.68.4
 unknown Kuwait
42961 GPRS-ASZAINKW false
103.61.202.112
 unknown India
134363 EZIT-AS-APEZITSolutionsPteLtdSG false
4.98.147.173
 unknown United States
3356 LEVEL3US false
208.230.47.139
 unknown United States
4208 THE-ISERV-COMPANYUS false
124.168.11.209
 unknown Australia
7545 TPG-INTERNET-APTPGTelecomLimitedAU false
176.82.83.147
 unknown Spain
3352 TELEFONICA_DE_ESPANAES false
156.55.39.71
 unknown United States
22146 LANDAMUS false
220.8.36.218
 unknown Japan 17676 GIGAINFRASoftbankBBCorpJP false
81.169.217.79
 unknown Germany
6724 STRATOSTRATOAGDE false
157.21.237.97
 unknown United States
53446 EVMSUS false
81.198.124.253
 unknown Latvia
12578 APOLLO-ASLatviaLV false
240.251.61.26
 unknown Reserved
unknown unknown false
94.85.243.88
 unknown Italy
3269 ASN-IBSNAZIT false
83.46.55.114
 unknown Spain
3352 TELEFONICA_DE_ESPANAES false
44.171.139.253
 unknown United States
198785 SEDMIODJEL-ASHR false
154.110.211.72
 unknown Tunisia
37693 TUNISIANATN false
124.60.248.52
 unknown Korea Republic of
17858 POWERVIS-AS-KRLGPOWERCOMMKR false
124.40.196.71
 unknown China
58466 CT-GUANGZHOU-IDCCHINANETGuangdongprovincenetworkCN false
222.162.181.46
 unknown China
4837 CHINA169-BACKBONECHINAUNICOMChina169BackboneCN false
193.220.12.22
 unknown Norway
5377 MARLINK-EMEANO false
189.61.156.222
 unknown Brazil
28573 CLAROSABR false
245.87.95.189
 unknown Reserved
unknown unknown false
24.85.187.207
 unknown Canada
6327 SHAWCA false
108.113.255.120
 unknown United States
10507 SPCSUS false