scythe-10306f07 Kind ID Labels Position asn asn:138915 asn=138,915, org=Kaopu Cloud HK Limited asn asn:8068 asn=8,068, org=Microsoft Corporation asn asn:41231 asn=41,231, org=Canonical Group Limited asn asn:6167 asn=6,167, org=Verizon Business asn asn:398722 asn=398,722, org=Censys, Inc. asn asn:680 asn=680, org=Verein zur Foerderung eines Deutschen Forschungsnetzes e.V. asn asn:206264 asn=206,264, org=Amarutu Technology Ltd asn asn:53667 asn=53,667, org=FranTech Solutions asn asn:14618 asn=14,618, org=Amazon.com, Inc. asn asn:47890 asn=47,890, org=Unmanaged Ltd asn asn:14061 asn=14,061, org=DigitalOcean, LLC asn asn:209366 asn=209,366, org=SEMrush CY LTD asn asn:4766 asn=4,766, org=Korea Telecom asn asn:55720 asn=55,720, org=Gigabit Hosting Sdn Bhd asn asn:63949 asn=63,949, org=Akamai Connected Cloud asn asn:12488 asn=12,488, org=Krystal Hosting Ltd asn asn:58898 asn=58,898, org=Rainbow communications India Pvt Ltd asn asn:45102 asn=45,102, org=Alibaba US Technology Co., Ltd. asn asn:37963 asn=37,963, org=Hangzhou Alibaba Advertising Co.,Ltd. asn asn:29465 asn=29,465, org=MTN NIGERIA Communication limited asn asn:200729 asn=200,729, org=AzInTelecom LLC asn asn:212913 asn=212,913, org=FOP Hornostay Mykhaylo Ivanovych asn asn:16509 asn=16,509, org=Amazon.com, Inc. asn asn:48090 asn=48,090, org=Techoff Srv Limited asn asn:200593 asn=200,593, org=Prospero Ooo asn asn:8075 asn=8,075, org=Microsoft Corporation asn asn:8560 asn=8,560, org=IONOS SE asn asn:396982 asn=396,982, org=Google LLC asn asn:27699 asn=27,699, org=TELEFONICA BRASIL S.A behavior_group BSG-DATA_EXFIL-3f60551009d0 behavior=DATA_EXFIL, confidence=0.65, detection_rationale=total_bytes=34272; high_rate (107100 B/s), dst_ip=, member_count=1, src_ip=85.208.96.207, summary=Exfil suspect: 85.208.96.207 → 1 destinations, 34,272B total, max 34,272B/session, total_bytes=34,272, total_packets=46, unique_hosts=1, unique_ports=0 behavior_group BSG-BEACON-1db0b2011329 behavior=BEACON, confidence=0.9, detection_rationale=timing_cv=0.00 (≤0.5); byte_cv=0.55 (≤0.6), dst_ip=172.234.197.23, dst_port=80, interval_cv=0, mean_interval=0, member_count=3, src_ip=8.211.36.238, summary=Beacon: 8.211.36.238 → 172.234.197.23:80, 3 sessions, interval CV=0.00, mean 787B, total_bytes=2,362, total_packets=21, unique_hosts=0, unique_ports=0 behavior_group BSG-DATA_EXFIL-683341e405bc behavior=DATA_EXFIL, confidence=0.6, detection_rationale=total_bytes=42328; repeated (3 sessions), dst_ip=, member_count=3, src_ip=172.234.197.23, summary=Exfil suspect: 172.234.197.23 → 3 destinations, 42,328B total, max 17,207B/session, total_bytes=42,328, total_packets=126, unique_hosts=3, unique_ports=0 behavior_group BSG-BEACON-0ab20e8498f9 behavior=BEACON, confidence=0.65, detection_rationale=byte_cv=0.27 (≤0.6), dst_ip=172.234.197.23, dst_port=23, interval_cv=0.822, mean_interval=4,050, member_count=9, src_ip=223.25.245.241, summary=Beacon: 223.25.245.241 → 172.234.197.23:23, 9 sessions, interval CV=0.82, mean 138B, total_bytes=1,242, total_packets=23, unique_hosts=0, unique_ports=0 behavior_group BSG-BEACON-181593639c29 behavior=BEACON, confidence=0.65, detection_rationale=byte_cv=0.20 (≤0.6), dst_ip=172.234.197.23, dst_port=23, interval_cv=0.827, mean_interval=2,166, member_count=6, src_ip=185.96.124.49, summary=Beacon: 185.96.124.49 → 172.234.197.23:23, 6 sessions, interval CV=0.83, mean 135B, total_bytes=810, total_packets=15, unique_hosts=0, unique_ports=0 behavior_group BSG-FAILED_HANDSHAKE-6a8a78f0ab9e behavior=FAILED_HANDSHAKE, confidence=0.6, detection_rationale=failed_sessions=6, dst_ip=172.234.197.23, member_count=6, src_ip=185.96.124.49, summary=Failed handshakes: 185.96.124.49 → 172.234.197.23, 6 attempts on 1 ports, total_bytes=810, total_packets=15, unique_hosts=0, unique_ports=1 behavior_group BSG-FAILED_HANDSHAKE-de4a8c24b2b9 behavior=FAILED_HANDSHAKE, confidence=0.6, detection_rationale=failed_sessions=9, dst_ip=172.234.197.23, member_count=9, src_ip=223.25.245.241, summary=Failed handshakes: 223.25.245.241 → 172.234.197.23, 9 attempts on 1 ports, total_bytes=1,242, total_packets=23, unique_hosts=0, unique_ports=1 behavior_group BSG-DATA_EXFIL-b9afc3abb59f behavior=DATA_EXFIL, confidence=0.5, detection_rationale=total_bytes=33149, dst_ip=, member_count=1, src_ip=20.215.220.200, summary=Exfil suspect: 20.215.220.200 → 1 destinations, 33,149B total, max 33,149B/session, total_bytes=33,149, total_packets=47, unique_hosts=1, unique_ports=0 behavior_group BSG-BEACON-f41ff5a8bac4 behavior=BEACON, confidence=0.9, detection_rationale=timing_cv=0.00 (≤0.5); byte_cv=0.40 (≤0.6), dst_ip=185.191.171.18, dst_port=15,056, interval_cv=0, mean_interval=30, member_count=3, src_ip=172.234.197.23, summary=Beacon: 172.234.197.23 → 185.191.171.18:15056, 3 sessions, interval CV=0.00, mean 280B, total_bytes=840, total_packets=14, unique_hosts=0, unique_ports=0 behavior_group BSG-BEACON-87a581835a8b behavior=BEACON, confidence=0.9, detection_rationale=timing_cv=0.00 (≤0.5); byte_cv=0.00 (≤0.6), dst_ip=169.254.169.254, dst_port=80, interval_cv=0, mean_interval=0, member_count=3, src_ip=172.234.197.23, summary=Beacon: 172.234.197.23 → 169.254.169.254:80, 3 sessions, interval CV=0.00, mean 945B, total_bytes=2,835, total_packets=30, unique_hosts=0, unique_ports=0 behavior_group BSG-DATA_EXFIL-374479d8c943 behavior=DATA_EXFIL, confidence=0.6, detection_rationale=total_bytes=64305, dst_ip=, member_count=1, src_ip=40.81.230.77, summary=Exfil suspect: 40.81.230.77 → 1 destinations, 64,305B total, max 64,305B/session, total_bytes=64,305, total_packets=73, unique_hosts=1, unique_ports=0 behavior_group BSG-DATA_EXFIL-0f3a74c4838d behavior=DATA_EXFIL, confidence=0.85, detection_rationale=total_bytes=126000; large_volume (≥100KB); high_rate (160500 B/s), dst_ip=, member_count=2, src_ip=64.225.46.86, summary=Exfil suspect: 64.225.46.86 → 1 destinations, 126,000B total, max 91,485B/session, total_bytes=126,000, total_packets=134, unique_hosts=1, unique_ports=0 behavior_group BSG-BEACON-a8a8c3c8a37f behavior=BEACON, confidence=0.9, detection_rationale=timing_cv=0.00 (≤0.5); byte_cv=0.00 (≤0.6), dst_ip=172.234.197.23, dst_port=0, interval_cv=0, mean_interval=7,200, member_count=5, src_ip=103.155.16.117, summary=Beacon: 103.155.16.117 → 172.234.197.23:0, 5 sessions, interval CV=0.00, mean 84B, total_bytes=420, total_packets=10, unique_hosts=0, unique_ports=0 behavior_group BSG-DATA_EXFIL-6280972c4c09 behavior=DATA_EXFIL, confidence=0.5, detection_rationale=total_bytes=30845, dst_ip=, member_count=1, src_ip=8.211.36.238, summary=Exfil suspect: 8.211.36.238 → 1 destinations, 30,845B total, max 30,845B/session, total_bytes=30,845, total_packets=48, unique_hosts=1, unique_ports=0 behavior_group BSG-DATA_EXFIL-69300a2c39d3 behavior=DATA_EXFIL, confidence=0.65, detection_rationale=total_bytes=25849; high_rate (57442 B/s), dst_ip=, member_count=1, src_ip=85.208.96.206, summary=Exfil suspect: 85.208.96.206 → 1 destinations, 25,849B total, max 25,849B/session, total_bytes=25,849, total_packets=35, unique_hosts=1, unique_ports=0 behavior_group BSG-DATA_EXFIL-9c74089cdbc6 behavior=DATA_EXFIL, confidence=0.6, detection_rationale=total_bytes=95223, dst_ip=, member_count=1, src_ip=47.128.35.181, summary=Exfil suspect: 47.128.35.181 → 1 destinations, 95,223B total, max 95,223B/session, total_bytes=95,223, total_packets=111, unique_hosts=1, unique_ports=0 behavior_group BSG-DATA_EXFIL-683c61f0cacb behavior=DATA_EXFIL, confidence=0.65, detection_rationale=total_bytes=29001; high_rate (116004 B/s), dst_ip=, member_count=1, src_ip=185.191.171.17, summary=Exfil suspect: 185.191.171.17 → 1 destinations, 29,001B total, max 29,001B/session, total_bytes=29,001, total_packets=38, unique_hosts=1, unique_ports=0 behavior_group BSG-BEACON-f6c2b3d0e42d behavior=BEACON, confidence=0.75, detection_rationale=byte_cv=0.08 (≤0.6); count=36, dst_ip=172.232.0.17, dst_port=53, interval_cv=1.701, mean_interval=926.6, member_count=36, src_ip=172.234.197.23, summary=Beacon: 172.234.197.23 → 172.232.0.17:53, 36 sessions, interval CV=1.70, mean 286B, total_bytes=10,304, total_packets=72, unique_hosts=0, unique_ports=0 dns_name dns:172-234-197-23.ip.linodeusercontent.com.members.linode.com answer_count=0, qname=172-234-197-23.ip.linodeusercontent.com.members.linode.com dns_name dns:chatgpt.com answer_count=2, qname=chatgpt.com dns_name dns:api.snapcraft.io answer_count=4, qname=api.snapcraft.io dns_name dns:172-234-197-23.ip.linodeusercontent.com answer_count=0, qname=172-234-197-23.ip.linodeusercontent.com dns_name dns:default.exp-tas.com answer_count=2, qname=default.exp-tas.com dns_name dns:e-0014.e-msedge.net answer_count=0, qname=e-0014.e-msedge.net flow flow:ac4a3607c72b bytes=29,001, dst_ip=172.234.197.23, dst_port=443, pkts=38, proto=tcp, src_ip=185.191.171.17 flow flow:91b730f2000e bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.103.36.26 flow flow:12b224138435 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.208.11.119 flow flow:eb4579960899 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=15.160.128.24 flow flow:e88545d4f130 bytes=34,272, dst_ip=172.234.197.23, dst_port=443, pkts=46, proto=tcp, src_ip=85.208.96.207 flow flow:7b39e0e78879 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:869988c7dede bytes=1,026, dst_ip=172.234.197.23, dst_port=23, pkts=19, proto=tcp, src_ip=62.100.207.220 flow flow:547c83565978 bytes=3,644, dst_ip=52.237.80.79, dst_port=57,658, pkts=3, proto=tcp, src_ip=172.234.197.23 flow flow:71f504a9a9a4 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=54.70.166.151 flow flow:9d1a13e65224 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:42fc8bfc2b80 bytes=270, dst_ip=172.234.197.23, dst_port=23, pkts=5, proto=tcp, src_ip=62.100.207.220 flow flow:01a580aba211 bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=15.237.218.82 flow flow:051ef2652048 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.210.22.132 flow flow:5303c57e0e85 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:2c2d5acce84a bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=223.25.245.241 flow flow:3c1c4f241fa5 bytes=5,791, dst_ip=172.234.197.23, dst_port=22, pkts=24, proto=tcp, src_ip=139.19.117.197 flow flow:bad4f585769f bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=16.78.84.221 flow flow:97d012615128 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=108.136.195.128 flow flow:873f1989c7db bytes=186, dst_ip=172.234.197.23, dst_port=80, pkts=3, proto=tcp, src_ip=64.225.46.86 flow flow:ae1eb9bd9750 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=15.152.155.159 flow flow:00d8076d760d bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=223.25.245.241 flow flow:ae4ad8d25ff9 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.133.135.150 flow flow:93890a2b4490 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:497f2d0d8986 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.170.47.8 flow flow:cb82a529cffc bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:7b870c94e987 bytes=222, dst_ip=172.234.197.23, dst_port=22, pkts=3, proto=tcp, src_ip=102.88.137.80 flow flow:36729a812e4d bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:b5916c0adbb7 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.135.166.186 flow flow:adcf8ada793e bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.84.223.242 flow flow:157c333398c0 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.208.219.179 flow flow:020be2fd4246 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.38.121.155 flow flow:641c22189308 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=15.168.20.100 flow flow:77d8f07030c7 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:008d3dce4638 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.130.231.216 flow flow:1125c3898109 bytes=198, dst_ip=172.234.197.23, dst_port=22, pkts=3, proto=tcp, src_ip=183.109.124.136 flow flow:e8e579c8063e bytes=314, dst_ip=172.234.197.23, dst_port=22, pkts=3, proto=tcp, src_ip=103.25.47.94 flow flow:4b046d3f00b7 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.112.93.79 flow flow:ccb904b1405d bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:ff753d65cb5d bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=16.112.8.242 flow flow:27a0aa09f89e bytes=17,207, dst_ip=13.107.5.93, dst_port=443, pkts=36, proto=tcp, src_ip=172.234.197.23 flow flow:3ef949f92e58 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=223.25.245.241 flow flow:5fac8b02810e bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.218.80.145 flow flow:facb1e0d993b bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=13.208.226.125 flow flow:91d88dfd7428 bytes=6,378, dst_ip=185.125.188.57, dst_port=443, pkts=23, proto=tcp, src_ip=172.234.197.23 flow flow:6f7b7b08c693 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:806c8c02ad14 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.99.21.189 flow flow:45803b1dfe12 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.102.71.52 flow flow:6743152d2808 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.36.167.41 flow flow:0a65eb9e99de bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=223.25.245.241 flow flow:600daa89662f bytes=327, dst_ip=8.134.90.83, dst_port=43,722, pkts=3, proto=tcp, src_ip=172.234.197.23 flow flow:201f002f11bb bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.217.114.99 flow flow:0908b82e7dc8 bytes=34,515, dst_ip=172.234.197.23, dst_port=443, pkts=42, proto=tcp, src_ip=64.225.46.86 flow flow:63446d65a515 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=15.236.41.199 flow flow:87e904f347f1 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:d0e9a0ea9981 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=35.94.23.128 flow flow:9ef61f10ac1a bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=15.168.166.198 flow flow:da05a675862b bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.177.121.83 flow flow:a5ab869ee57f bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:02ecb3391fbb bytes=166, dst_ip=172.234.197.23, dst_port=80, pkts=3, proto=tcp, src_ip=5.61.209.107 flow flow:538f1a69c08c bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.171.55.171 flow flow:e44639cfcc5d bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.10.150.61 flow flow:d573ca4aac50 bytes=284, dst_ip=8.134.90.83, dst_port=43,722, pkts=3, proto=tcp, src_ip=172.234.197.23 flow flow:079515dc3f11 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.192.25.146 flow flow:9b638d5b567e bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.208.226.125 flow flow:156d45bce989 bytes=5,554, dst_ip=172.234.197.23, dst_port=22, pkts=28, proto=tcp, src_ip=2.57.122.193 flow flow:7ebbc0b68c1c bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=185.96.124.49 flow flow:0447c3106b87 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=51.44.185.64 flow flow:5b5393003946 bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=15.168.16.236 flow flow:fbbf72d83d67 bytes=5,643, dst_ip=172.234.197.23, dst_port=22, pkts=22, proto=tcp, src_ip=139.19.117.197 flow flow:fe7513cd0829 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:4d2046218da9 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.140.242.116 flow flow:e62a3eaf0def bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=15.168.166.198 flow flow:fc55ace373bf bytes=1,321, dst_ip=172.234.197.23, dst_port=80, pkts=7, proto=tcp, src_ip=5.61.209.107 flow flow:24cae796764c bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:67fdc4e863d4 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.85.52.86 flow flow:7e2bf2ddf4b1 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:2773b50abdb5 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=185.96.124.49 flow flow:e1c54bad61d1 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.222.166.187 flow flow:20f0bca1691b bytes=238, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:0c3e2acf89d8 bytes=220, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:10a62aea9232 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=185.96.124.49 flow flow:726c9b1768d7 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=56.155.133.220 flow flow:05778de08c15 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:23d88551fa20 bytes=3,798, dst_ip=172.234.197.23, dst_port=443, pkts=14, proto=tcp, src_ip=100.51.6.16 flow flow:797228b2d9e1 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:db9fc439bb7c bytes=14,144, dst_ip=97.139.12.85, dst_port=51,011, pkts=74, proto=tcp, src_ip=172.234.197.23 flow flow:ec52c6b8a676 bytes=558, dst_ip=102.88.137.80, dst_port=0, pkts=5, proto=icmp, src_ip=172.234.197.23 flow flow:83c4446ee85d bytes=1,010, dst_ip=172.234.197.23, dst_port=80, pkts=8, proto=tcp, src_ip=8.211.36.238 flow flow:419f8987f90d bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=54.64.168.38 flow flow:69cde2ffe7a1 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.210.163.168 flow flow:aefb79d2b46d bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.103.179.97 flow flow:ec1c5e76fe73 bytes=4,931, dst_ip=172.234.197.23, dst_port=22, pkts=18, proto=tcp, src_ip=139.19.117.197 flow flow:13f0c305e73d bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=15.161.134.83 flow flow:9b5d6d786418 bytes=6,728, dst_ip=172.234.197.23, dst_port=22, pkts=62, proto=tcp, src_ip=97.139.12.85 flow flow:983c7b4d775f bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=56.155.133.220 flow flow:62d6dc06cadf bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=63.179.136.145 flow flow:b8a0fa24b3b8 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=15.237.94.206 flow flow:d1ab83494d27 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.132.3.23 flow flow:cb9617906d4b bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=54.46.114.210 flow flow:15c1611a7e5b bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.223.21.222 flow flow:fb97d0c04a04 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.222.208.125 flow flow:9a9dfabf1b06 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=56.68.96.189 flow flow:940e6192b7c3 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:7f37589f9b6f bytes=228, dst_ip=172.234.197.23, dst_port=443, pkts=4, proto=tcp, src_ip=20.193.146.159 flow flow:2f5e64c85184 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=54.183.231.18 flow flow:24a37890193e bytes=10,977, dst_ip=104.18.32.47, dst_port=443, pkts=16, proto=tcp, src_ip=172.234.197.23 flow flow:7c6b01d96f70 bytes=132, dst_ip=91.215.85.104, dst_port=56,728, pkts=2, proto=tcp, src_ip=172.234.197.23 flow flow:1c30d16ca504 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.14.13.131 flow flow:135b06d548d9 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.208.239.191 flow flow:cc3b8655b62b bytes=945, dst_ip=169.254.169.254, dst_port=80, pkts=10, proto=tcp, src_ip=172.234.197.23 flow flow:f4b3ade709fa bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.210.34.0 flow flow:397134a2ee18 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:2e639684b492 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=35.181.63.250 flow flow:dc85ad687a60 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=223.25.245.241 flow flow:1cfd882b0d4b bytes=5,131, dst_ip=172.234.197.23, dst_port=443, pkts=14, proto=tcp, src_ip=64.225.46.86 flow flow:c2ba76ccc090 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.208.219.179 flow flow:f4e3e590bfe0 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=15.168.142.10 flow flow:8f3c37c353fb bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=185.96.124.49 flow flow:8dde425bc277 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=15.237.218.82 flow flow:f8019a17210d bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.102.169.199 flow flow:528a7b3a6c73 bytes=1,986, dst_ip=172.234.197.23, dst_port=22, pkts=15, proto=tcp, src_ip=183.109.124.136 flow flow:19100b8564d4 bytes=314, dst_ip=172.234.197.23, dst_port=22, pkts=3, proto=tcp, src_ip=103.25.47.94 flow flow:2910237752fc bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:5e9cb67d4b92 bytes=296, dst_ip=172.234.197.23, dst_port=587, pkts=4, proto=tcp, src_ip=199.45.154.150 flow flow:ddb813bb0705 bytes=360, dst_ip=185.191.171.18, dst_port=15,056, pkts=6, proto=tcp, src_ip=172.234.197.23 flow flow:fc65986790db bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.208.210.98 flow flow:af49762e35de bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=108.136.165.89 flow flow:26f00a24fb4f bytes=1,519, dst_ip=172.234.197.23, dst_port=80, pkts=10, proto=tcp, src_ip=5.61.209.107 flow flow:eb40268ede5d bytes=286, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:b3081fcdb9d0 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.16.33.58 flow flow:4f0a53176e95 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=51.44.185.64 flow flow:37cdcb8637f0 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.103.179.97 flow flow:944620da8b06 bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=51.44.163.117 flow flow:55aa0bc36637 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:9ac72b2dbf79 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.221.59.48 flow flow:70cd14315da6 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=54.215.156.188 flow flow:eb0961199d24 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=16.28.18.156 flow flow:7bcd042fc83f bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:7feb88d2fd57 bytes=1,148, dst_ip=172.234.197.23, dst_port=0, pkts=14, proto=icmp, src_ip=15.237.94.206 flow flow:371c956d4ffb bytes=4,638, dst_ip=172.234.197.23, dst_port=22, pkts=21, proto=tcp, src_ip=183.109.124.136 flow flow:64710fa2bc71 bytes=2,836, dst_ip=172.234.197.23, dst_port=22, pkts=9, proto=tcp, src_ip=209.141.47.217 flow flow:03982403701e bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.102.202.71 flow flow:c487cf9467c9 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:2b8f539d85de bytes=25,849, dst_ip=172.234.197.23, dst_port=443, pkts=35, proto=tcp, src_ip=85.208.96.206 flow flow:b39473830474 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=108.136.231.22 flow flow:516e8e32a6ca bytes=1,403, dst_ip=80.94.92.186, dst_port=57,278, pkts=4, proto=tcp, src_ip=172.234.197.23 flow flow:b1ad62f8cabe bytes=166, dst_ip=172.234.197.23, dst_port=443, pkts=3, proto=tcp, src_ip=31.148.99.199 flow flow:afb7338205d0 bytes=1,456, dst_ip=172.234.197.23, dst_port=22, pkts=8, proto=tcp, src_ip=139.19.117.197 flow flow:3c58da15f948 bytes=360, dst_ip=185.191.171.18, dst_port=15,056, pkts=6, proto=tcp, src_ip=172.234.197.23 flow flow:def289e7bfb9 bytes=6,406, dst_ip=172.234.197.23, dst_port=22, pkts=36, proto=tcp, src_ip=45.148.10.141 flow flow:813031f466a6 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.222.208.125 flow flow:006578dfc737 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.60.59.138 flow flow:463fec7ac738 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.102.9.236 flow flow:0f1a2ea18e95 bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:03116e5f8ed0 bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:7eabf62e1a84 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.163.183.211 flow flow:b26bc6616fb0 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=185.96.124.49 flow flow:0e48442c9c5d bytes=262, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:1ac0844af3eb bytes=295, dst_ip=172.234.197.23, dst_port=443, pkts=4, proto=tcp, src_ip=20.215.220.200 flow flow:1a827067e6b8 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.223.156.100 flow flow:a4b2eb453c00 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:50fee79d3a5c bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=15.236.19.37 flow flow:5e4cbaaa7dea bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=13.36.167.41 flow flow:41ef674ea762 bytes=5,237, dst_ip=172.234.197.23, dst_port=22, pkts=29, proto=tcp, src_ip=80.94.92.186 flow flow:35544ada2df0 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:7e9661ec719e bytes=148, dst_ip=172.234.197.23, dst_port=22, pkts=2, proto=tcp, src_ip=139.19.117.197 flow flow:84643be552d2 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=52.47.117.18 flow flow:6444dcb2a905 bytes=120, dst_ip=2.57.122.195, dst_port=51,974, pkts=2, proto=tcp, src_ip=172.234.197.23 flow flow:122a0554a01c bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=35.152.212.28 flow flow:9de10a05cc3b bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.183.88.164 flow flow:c48da7c02f2c bytes=1,166, dst_ip=172.234.197.23, dst_port=80, pkts=10, proto=tcp, src_ip=8.211.36.238 flow flow:cde7acf2927a bytes=3,678, dst_ip=172.234.197.23, dst_port=22, pkts=9, proto=tcp, src_ip=2.57.122.195 flow flow:a53aabbf6e6e bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=223.25.245.241 flow flow:768d32ebc69f bytes=860, dst_ip=172.234.197.23, dst_port=22, pkts=6, proto=tcp, src_ip=139.19.117.197 flow flow:e08e3d5158b4 bytes=354, dst_ip=103.25.47.94, dst_port=0, pkts=3, proto=icmp, src_ip=172.234.197.23 flow flow:76d44e46b907 bytes=95,223, dst_ip=172.234.197.23, dst_port=443, pkts=111, proto=tcp, src_ip=47.128.35.181 flow flow:ad91ec2eea0c bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.145.238.45 flow flow:26947aa33254 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=35.152.95.253 flow flow:b5a0ea00c0ee bytes=5,225, dst_ip=172.234.197.23, dst_port=443, pkts=14, proto=tcp, src_ip=64.225.46.86 flow flow:88a253f88dfb bytes=7,217, dst_ip=185.125.188.59, dst_port=443, pkts=22, proto=tcp, src_ip=172.234.197.23 flow flow:6da0cf704e69 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=16.112.121.172 flow flow:7bd51764a934 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.199.73.142 flow flow:228200c923fa bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=51.44.163.117 flow flow:4b9f851d6fb1 bytes=120, dst_ip=185.191.171.18, dst_port=15,056, pkts=2, proto=tcp, src_ip=172.234.197.23 flow flow:2b0e28c62bb0 bytes=586, dst_ip=2.57.122.193, dst_port=0, pkts=7, proto=icmp, src_ip=172.234.197.23 flow flow:c09dfe6df538 bytes=166, dst_ip=172.234.197.23, dst_port=80, pkts=3, proto=tcp, src_ip=5.61.209.107 flow flow:4925f1088bea bytes=656, dst_ip=172.234.197.23, dst_port=0, pkts=8, proto=icmp, src_ip=15.168.142.10 flow flow:09096d756223 bytes=656, dst_ip=172.234.197.23, dst_port=0, pkts=8, proto=icmp, src_ip=35.181.63.250 flow flow:71d8b260c2a0 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=54.250.227.157 flow flow:13f42740bb03 bytes=4,440, dst_ip=172.234.197.23, dst_port=22, pkts=18, proto=tcp, src_ip=183.109.124.136 flow flow:8e2b5e7429e7 bytes=240, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:93d75399c9f1 bytes=186, dst_ip=172.234.197.23, dst_port=80, pkts=3, proto=tcp, src_ip=64.225.46.86 flow flow:73a8e63abbcf bytes=236, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:9597eecc4907 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:2639c115b7e4 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=185.96.124.49 flow flow:7415d4447887 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=15.236.19.37 flow flow:a799a5ed09f0 bytes=5,215, dst_ip=172.234.197.23, dst_port=443, pkts=15, proto=tcp, src_ip=64.225.46.86 flow flow:38540b082af0 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=16.112.8.242 flow flow:efa8e8258d9d bytes=1,294, dst_ip=80.94.92.186, dst_port=54,710, pkts=3, proto=tcp, src_ip=172.234.197.23 flow flow:2ff7aaa15b3e bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:2731994521b7 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=35.152.142.16 flow flow:74ea6acf13c0 bytes=148, dst_ip=172.234.197.23, dst_port=22, pkts=2, proto=tcp, src_ip=139.19.117.197 flow flow:f84631677f9b bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.210.22.132 flow flow:86a12a60195b bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.61.208.16 flow flow:6f5aff2f3eed bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=54.178.43.113 flow flow:14e505ea24af bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.208.182.135 flow flow:f9ad7db3a5d9 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.210.169.237 flow flow:850295a163ba bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=15.168.16.236 flow flow:d6807db60e63 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=108.136.52.55 flow flow:598668564218 bytes=945, dst_ip=169.254.169.254, dst_port=80, pkts=10, proto=tcp, src_ip=172.234.197.23 flow flow:b110644f3fe6 bytes=5,643, dst_ip=172.234.197.23, dst_port=22, pkts=22, proto=tcp, src_ip=139.19.117.197 flow flow:f51baf1373db bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.245.10.130 flow flow:3688597c4310 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=15.222.11.193 flow flow:32b1c1ba3a44 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:d43e9b6f53b9 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.102.169.199 flow flow:8a7c79f5c127 bytes=470, dst_ip=172.234.197.23, dst_port=22, pkts=6, proto=tcp, src_ip=2.57.122.195 flow flow:da232e2d47ef bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=223.25.245.241 flow flow:a3f5b0eb5a66 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.36.167.91 flow flow:602cf84a65e4 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:06c45c823509 bytes=33,149, dst_ip=172.234.197.23, dst_port=443, pkts=47, proto=tcp, src_ip=20.215.220.200 flow flow:a6c0e0053f97 bytes=5,791, dst_ip=172.234.197.23, dst_port=22, pkts=24, proto=tcp, src_ip=139.19.117.197 flow flow:2eee423e08ea bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.210.163.168 flow flow:188c002d2357 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=54.46.85.64 flow flow:5dac3c23837a bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.220.104.12 flow flow:641997e505ee bytes=30,845, dst_ip=172.234.197.23, dst_port=443, pkts=48, proto=tcp, src_ip=8.211.36.238 flow flow:fee963280ac4 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.208.182.135 flow flow:5107772e6165 bytes=64,305, dst_ip=172.234.197.23, dst_port=443, pkts=73, proto=tcp, src_ip=40.81.230.77 flow flow:4cb1e7b2954f bytes=186, dst_ip=172.234.197.23, dst_port=80, pkts=3, proto=tcp, src_ip=8.211.36.238 flow flow:02c212e9b4fb bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=15.237.114.239 flow flow:ccf5683fd60a bytes=2,968, dst_ip=172.234.197.23, dst_port=22, pkts=11, proto=tcp, src_ip=152.250.243.47 flow flow:ed11158c17c6 bytes=91,485, dst_ip=172.234.197.23, dst_port=443, pkts=92, proto=tcp, src_ip=64.225.46.86 flow flow:d5cde6f64d93 bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:f8a347c04bfd bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=35.183.94.19 flow flow:02cd4764092d bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.225.145.88 flow flow:614397d682e1 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=15.168.20.100 flow flow:e6a326f84316 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.245.17.120 flow flow:a14292c209df bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:7660324cfcea bytes=3,244, dst_ip=172.234.197.23, dst_port=22, pkts=8, proto=tcp, src_ip=217.154.42.110 flow flow:0bea32393421 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=40.192.26.238 flow flow:e3c29dc0a12d bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.198.110.242 flow flow:18623e120894 bytes=216, dst_ip=172.234.197.23, dst_port=23, pkts=4, proto=tcp, src_ip=223.25.245.241 flow flow:15e3ef7605ce bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.163.208.132 flow flow:ab11fbd57cc2 bytes=4,819, dst_ip=172.234.197.23, dst_port=443, pkts=19, proto=tcp, src_ip=85.208.96.199 flow flow:f7958fa04f3b bytes=945, dst_ip=169.254.169.254, dst_port=80, pkts=10, proto=tcp, src_ip=172.234.197.23 flow flow:9daadbf0714d bytes=314, dst_ip=172.234.197.23, dst_port=22, pkts=3, proto=tcp, src_ip=102.88.137.80 flow flow:6dd318554b06 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=184.32.189.148 flow flow:91f249333925 bytes=5,821, dst_ip=172.234.197.23, dst_port=22, pkts=25, proto=tcp, src_ip=45.148.10.121 flow flow:8400ae0da1a8 bytes=5,791, dst_ip=172.234.197.23, dst_port=22, pkts=24, proto=tcp, src_ip=139.19.117.197 flow flow:04d41363d756 bytes=252, dst_ip=103.25.47.94, dst_port=0, pkts=2, proto=icmp, src_ip=172.234.197.23 flow flow:c57af1c9dbf4 bytes=3,687, dst_ip=52.237.80.79, dst_port=57,658, pkts=3, proto=tcp, src_ip=172.234.197.23 flow flow:4c4d3f129df9 bytes=1,479, dst_ip=172.234.197.23, dst_port=80, pkts=13, proto=tcp, src_ip=85.208.98.23 flow flow:06103f290c20 bytes=252, dst_ip=102.88.137.80, dst_port=0, pkts=2, proto=icmp, src_ip=172.234.197.23 flow flow:a98a6d65560a bytes=1,884, dst_ip=2.57.122.193, dst_port=51,006, pkts=20, proto=tcp, src_ip=172.234.197.23 flow flow:b5f6833eccbf bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:decfa8579b4a bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=223.25.245.241 flow flow:3eb32ffcff96 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.217.144.41 flow flow:c847de1674c5 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.108.51.95 flow flow:3e1ca32eb65f bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.237.60.88 flow flow:919ffb42fa65 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.208.161.134 flow flow:a40736ecc967 bytes=314, dst_ip=172.234.197.23, dst_port=22, pkts=3, proto=tcp, src_ip=102.88.137.80 flow flow:fbc9eb0bef30 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:ca1d607d241f bytes=4,851, dst_ip=172.234.197.23, dst_port=443, pkts=20, proto=tcp, src_ip=85.208.98.23 flow flow:95bf11771c42 bytes=4,335, dst_ip=172.234.197.23, dst_port=22, pkts=16, proto=tcp, src_ip=139.19.117.197 flow flow:4ef7c6a454eb bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=43.208.239.191 flow flow:21087134d47a bytes=303, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 geo_point geo_1.29390_103.84610 city=Singapore, country=SG [1.2939, 103.8461, 0.0000] 🌐 geo_point geo_13.75510_100.50570 city=Bangkok, country=TH [13.7551, 100.5057, 0.0000] 🌐 geo_point geo_55.73860_37.60680 city=, country=RU [55.7386, 37.6068, 0.0000] 🌐 geo_point geo_17.38430_78.45830 city=Hyderabad, country=IN [17.3843, 78.4583, 0.0000] 🌐 geo_point geo_39.96250_-83.00610 city=Columbus, country=US [39.9625, -83.0061, 0.0000] 🌐 geo_point geo_18.52110_73.85020 city=Pune, country=IN [18.5211, 73.8502, 0.0000] 🌐 geo_point geo_-33.92580_18.42590 city=Cape Town, country=ZA [-33.9258, 18.4259, 0.0000] 🌐 geo_point geo_22.28420_114.17590 city=Hong Kong, country=HK [22.2842, 114.1759, 0.0000] 🌐 geo_point geo_3.14080_101.68520 city=Kuala Lumpur, country=MY [3.1408, 101.6852, 0.0000] 🌐 geo_point geo_37.33880_-121.89160 city=San Jose, country=US [37.3388, -121.8916, 0.0000] 🌐 geo_point geo_51.50810_-0.12780 city=London, country=GB [51.5081, -0.1278, 0.0000] 🌐 geo_point geo_37.75100_-97.82200 city=, country=US [37.7510, -97.8220, 0.0000] 🌐 geo_point geo_34.69300_135.50050 city=Osaka, country=JP [34.6930, 135.5005, 0.0000] 🌐 geo_point geo_11.66020_78.15320 city=Salem, country=IN [11.6602, 78.1532, 0.0000] 🌐 geo_point geo_40.50400_47.49970 city=, country=AZ [40.5040, 47.4997, 0.0000] 🌐 geo_point geo_51.49640_-0.12240 city=, country=GB [51.4964, -0.1224, 0.0000] 🌐 geo_point geo_45.99680_24.99700 city=, country=RO [45.9968, 24.9970, 0.0000] 🌐 geo_point geo_23.11810_113.25390 city=Guangzhou, country=CN [23.1181, 113.2539, 0.0000] 🌐 geo_point geo_-23.62930_-46.63510 city=São Paulo, country=BR [-23.6293, -46.6351, 0.0000] 🌐 geo_point geo_39.04690_-77.49030 city=Ashburn, country=US [39.0469, -77.4903, 0.0000] 🌐 geo_point geo_52.22990_21.00930 city=Warsaw, country=PL [52.2299, 21.0093, 0.0000] 🌐 geo_point geo_37.34860_-121.97320 city=Santa Clara, country=US [37.3486, -121.9732, 0.0000] 🌐 geo_point geo_52.37590_4.89750 city=Amsterdam, country=NL [52.3759, 4.8975, 0.0000] 🌐 geo_point geo_52.51960_13.40690 city=Berlin, country=DE [52.5196, 13.4069, 0.0000] 🌐 geo_point geo_37.56580_126.97800 city=Seoul, country=KR [37.5658, 126.9780, 0.0000] 🌐 geo_point geo_41.88350_-87.63050 city=Chicago, country=US [41.8835, -87.6305, 0.0000] 🌐 geo_point geo_-36.85040_174.76750 city=Auckland, country=NZ [-36.8504, 174.7675, 0.0000] 🌐 geo_point geo_3.13990_101.70090 city=Kuala Lumpur, country=MY [3.1399, 101.7009, 0.0000] 🌐 geo_point geo_39.01800_-77.53900 city=Ashburn, country=US [39.0180, -77.5390, 0.0000] 🌐 geo_point geo_49.83900_24.01910 city=Lviv, country=UA [49.8390, 24.0191, 0.0000] 🌐 geo_point geo_19.07480_72.88560 city=Mumbai, country=IN [19.0748, 72.8856, 0.0000] 🌐 geo_point geo_50.11690_8.68370 city=Frankfurt am Main, country=DE [50.1169, 8.6837, 0.0000] 🌐 geo_point geo_-6.21140_106.84460 city=Jakarta, country=ID [-6.2114, 106.8446, 0.0000] 🌐 geo_point geo_51.51640_-0.09300 city=City of London, country=GB [51.5164, -0.0930, 0.0000] 🌐 geo_point geo_32.08040_34.78070 city=Tel Aviv, country=IL [32.0804, 34.7807, 0.0000] 🌐 geo_point geo_-4.58330_55.66670 city=, country=SC [-4.5833, 55.6667, 0.0000] 🌐 geo_point geo_35.68930_139.68990 city=Tokyo, country=JP [35.6893, 139.6899, 0.0000] 🌐 geo_point geo_45.49950_-73.58480 city=Montreal, country=CA [45.4995, -73.5848, 0.0000] 🌐 geo_point geo_45.84010_-119.70500 city=Boardman, country=US [45.8401, -119.7050, 0.0000] 🌐 geo_point geo_29.81190_-95.52070 city=Houston, country=US [29.8119, -95.5207, 0.0000] 🌐 geo_point geo_45.47220_9.19220 city=Milan, country=IT [45.4722, 9.1922, 0.0000] 🌐 geo_point geo_49.21340_6.96240 city=Saarbrücken, country=DE [49.2134, 6.9624, 0.0000] 🌐 geo_point geo_36.10200_-115.14470 city=Las Vegas, country=US [36.1020, -115.1447, 0.0000] 🌐 geo_point geo_48.85580_2.34940 city=Paris, country=FR [48.8558, 2.3494, 0.0000] 🌐 geo_point geo_6.44740_3.39030 city=Lagos, country=NG [6.4474, 3.3903, 0.0000] 🌐 host host:35.94.23.128 bytes=164, city=Boardman, country=US, ip=35.94.23.128, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:15.152.155.159 bytes=164, city=Osaka, country=JP, ip=15.152.155.159, org=Amazon.com, Inc. [34.6930, 135.5005, 0.0000] 🌐 host host:43.218.80.145 bytes=164, city=Jakarta, country=ID, ip=43.218.80.145, org=Amazon.com, Inc. [-6.2114, 106.8446, 0.0000] 🌐 host host:15.236.19.37 bytes=328, city=Paris, country=FR, ip=15.236.19.37, org=Amazon.com, Inc. [48.8558, 2.3494, 0.0000] 🌐 host host:18.60.59.138 bytes=164, city=Hyderabad, country=IN, ip=18.60.59.138, org=Amazon.com, Inc. [17.3843, 78.4583, 0.0000] 🌐 host host:20.193.146.159 bytes=228, city=Pune, country=IN, ip=20.193.146.159, org=Microsoft Corporation [18.5211, 73.8502, 0.0000] 🌐 host host:18.183.88.164 bytes=164, city=Tokyo, country=JP, ip=18.183.88.164, org=Amazon.com, Inc. [35.6893, 139.6899, 0.0000] 🌐 host host:3.102.169.199 bytes=164, city=Auckland, country=NZ, ip=3.102.169.199, org=Amazon.com, Inc. [-36.8504, 174.7675, 0.0000] 🌐 host host:43.210.34.0 bytes=164, city=Bangkok, country=TH, ip=43.210.34.0, org=Amazon.com, Inc. [13.7551, 100.5057, 0.0000] 🌐 host host:185.96.124.49 bytes=108, city=, country=AZ, ip=185.96.124.49, org=AzInTelecom LLC [40.5040, 47.4997, 0.0000] 🌐 host host:18.177.121.83 bytes=164, city=Tokyo, country=JP, ip=18.177.121.83, org=Amazon.com, Inc. [35.6893, 139.6899, 0.0000] 🌐 host host:56.68.96.189 bytes=164, city=Kuala Lumpur, country=MY, ip=56.68.96.189, org=Amazon.com, Inc. [3.1408, 101.6852, 0.0000] 🌐 host host:51.225.145.88 bytes=164, city=Berlin, country=DE, ip=51.225.145.88, org=Amazon.com, Inc. [52.5196, 13.4069, 0.0000] 🌐 host host:3.133.135.150 bytes=164, city=Columbus, country=US, ip=3.133.135.150, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:64.225.46.86 bytes=186, city=Santa Clara, country=US, ip=64.225.46.86, org=DigitalOcean, LLC [37.3486, -121.9732, 0.0000] 🌐 host host:91.215.85.104 bytes=132, city=, country=RU, ip=91.215.85.104, org=Prospero Ooo [55.7386, 37.6068, 0.0000] 🌐 host host:3.99.21.189 bytes=164, city=Montreal, country=CA, ip=3.99.21.189, org=Amazon.com, Inc. [45.4995, -73.5848, 0.0000] 🌐 host host:13.208.226.125 bytes=164, city=Osaka, country=JP, ip=13.208.226.125, org=Amazon.com, Inc. [34.6930, 135.5005, 0.0000] 🌐 host host:199.45.154.150 bytes=296, city=, country=US, ip=199.45.154.150, org=Censys, Inc. [37.7510, -97.8220, 0.0000] 🌐 host host:13.245.17.120 bytes=164, city=Cape Town, country=ZA, ip=13.245.17.120, org=Amazon.com, Inc. [-33.9258, 18.4259, 0.0000] 🌐 host host:103.155.16.117 bytes=84, city=Singapore, country=SG, ip=103.155.16.117, org=Kaopu Cloud HK Limited [1.2939, 103.8461, 0.0000] 🌐 host host:85.208.98.23 bytes=1,479, city=Ashburn, country=US, ip=85.208.98.23, org=Google LLC [39.0180, -77.5390, 0.0000] 🌐 host host:3.103.179.97 bytes=164, city=Auckland, country=NZ, ip=3.103.179.97, org=Amazon.com, Inc. [-36.8504, 174.7675, 0.0000] 🌐 host host:54.64.168.38 bytes=164, city=Tokyo, country=JP, ip=54.64.168.38, org=Amazon.com, Inc. [35.6893, 139.6899, 0.0000] 🌐 host host:3.140.242.116 bytes=164, city=Columbus, country=US, ip=3.140.242.116, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:18.171.55.171 bytes=164, city=City of London, country=GB, ip=18.171.55.171, org=Amazon.com, Inc. [51.5164, -0.0930, 0.0000] 🌐 host host:43.208.11.119 bytes=164, city=Bangkok, country=TH, ip=43.208.11.119, org=Amazon.com, Inc. [13.7551, 100.5057, 0.0000] 🌐 host host:102.88.137.80 bytes=558, city=Lagos, country=NG, ip=102.88.137.80, org=MTN NIGERIA Communication limited [6.4474, 3.3903, 0.0000] 🌐 host host:183.109.124.136 bytes=4,638, city=Seoul, country=KR, ip=183.109.124.136, org=Korea Telecom [37.5658, 126.9780, 0.0000] 🌐 host host:3.103.36.26 bytes=164, city=Auckland, country=NZ, ip=3.103.36.26, org=Amazon.com, Inc. [-36.8504, 174.7675, 0.0000] 🌐 host host:108.136.195.128 bytes=164, city=Jakarta, country=ID, ip=108.136.195.128, org=Amazon.com, Inc. [-6.2114, 106.8446, 0.0000] 🌐 host host:169.254.169.254 bytes=945, ip=169.254.169.254 host host:35.152.95.253 bytes=164, city=Milan, country=IT, ip=35.152.95.253, org=Amazon.com, Inc. [45.4722, 9.1922, 0.0000] 🌐 host host:40.81.230.77 bytes=64,305, city=Pune, country=IN, ip=40.81.230.77, org=Microsoft Corporation [18.5211, 73.8502, 0.0000] 🌐 host host:15.237.114.239 bytes=164, city=Paris, country=FR, ip=15.237.114.239, org=Amazon.com, Inc. [48.8558, 2.3494, 0.0000] 🌐 host host:51.84.223.242 bytes=164, city=Tel Aviv, country=IL, ip=51.84.223.242, org=Amazon.com, Inc. [32.0804, 34.7807, 0.0000] 🌐 host host:56.155.133.220 bytes=164, city=Osaka, country=JP, ip=56.155.133.220, org=Amazon.com, Inc. [34.6930, 135.5005, 0.0000] 🌐 host host:97.139.12.85 bytes=6,728, city=Houston, country=US, ip=97.139.12.85, org=Verizon Business [29.8119, -95.5207, 0.0000] 🌐 host host:13.135.166.186 bytes=164, city=City of London, country=GB, ip=13.135.166.186, org=Amazon.com, Inc. [51.5164, -0.0930, 0.0000] 🌐 host host:13.208.210.98 bytes=164, city=Osaka, country=JP, ip=13.208.210.98, org=Amazon.com, Inc. [34.6930, 135.5005, 0.0000] 🌐 host host:18.220.104.12 bytes=164, city=Columbus, country=US, ip=18.220.104.12, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:54.250.227.157 bytes=164, city=Tokyo, country=JP, ip=54.250.227.157, org=Amazon.com, Inc. [35.6893, 139.6899, 0.0000] 🌐 host host:18.132.3.23 bytes=164, city=City of London, country=GB, ip=18.132.3.23, org=Amazon.com, Inc. [51.5164, -0.0930, 0.0000] 🌐 host host:43.217.144.41 bytes=164, city=Kuala Lumpur, country=MY, ip=43.217.144.41, org=Amazon.com, Inc. [3.1408, 101.6852, 0.0000] 🌐 host host:54.183.231.18 bytes=164, city=San Jose, country=US, ip=54.183.231.18, org=Amazon.com, Inc. [37.3388, -121.8916, 0.0000] 🌐 host host:2.57.122.193 bytes=5,554, city=, country=RO, ip=2.57.122.193, org=Unmanaged Ltd [45.9968, 24.9970, 0.0000] 🌐 host host:16.78.84.221 bytes=164, city=Jakarta, country=ID, ip=16.78.84.221, org=Amazon.com, Inc. [-6.2114, 106.8446, 0.0000] 🌐 host host:172.234.197.23 bytes=4,819, city=Chicago, country=US, ip=172.234.197.23, org=Akamai Connected Cloud [41.8835, -87.6305, 0.0000] 🌐 host host:15.161.134.83 bytes=164, city=Milan, country=IT, ip=15.161.134.83, org=Amazon.com, Inc. [45.4722, 9.1922, 0.0000] 🌐 host host:18.163.208.132 bytes=164, city=Hong Kong, country=HK, ip=18.163.208.132, org=Amazon.com, Inc. [22.2842, 114.1759, 0.0000] 🌐 host host:13.107.5.93 bytes=17,207, city=, country=US, ip=13.107.5.93, org=Microsoft Corporation [37.7510, -97.8220, 0.0000] 🌐 host host:35.181.63.250 bytes=164, city=Paris, country=FR, ip=35.181.63.250, org=Amazon.com, Inc. [48.8558, 2.3494, 0.0000] 🌐 host host:54.178.43.113 bytes=164, city=Tokyo, country=JP, ip=54.178.43.113, org=Amazon.com, Inc. [35.6893, 139.6899, 0.0000] 🌐 host host:15.236.41.199 bytes=164, city=Paris, country=FR, ip=15.236.41.199, org=Amazon.com, Inc. [48.8558, 2.3494, 0.0000] 🌐 host host:217.154.42.110 bytes=3,244, city=, country=GB, ip=217.154.42.110, org=IONOS SE [51.4964, -0.1224, 0.0000] 🌐 host host:13.38.121.155 bytes=164, city=Paris, country=FR, ip=13.38.121.155, org=Amazon.com, Inc. [48.8558, 2.3494, 0.0000] 🌐 host host:13.36.167.41 bytes=164, city=Paris, country=FR, ip=13.36.167.41, org=Amazon.com, Inc. [48.8558, 2.3494, 0.0000] 🌐 host host:108.136.52.55 bytes=164, city=Jakarta, country=ID, ip=108.136.52.55, org=Amazon.com, Inc. [-6.2114, 106.8446, 0.0000] 🌐 host host:8.211.36.238 bytes=1,010, city=Frankfurt am Main, country=DE, ip=8.211.36.238, org=Alibaba US Technology Co., Ltd. [50.1169, 8.6837, 0.0000] 🌐 host host:16.112.121.172 bytes=164, city=Hyderabad, country=IN, ip=16.112.121.172, org=Amazon.com, Inc. [17.3843, 78.4583, 0.0000] 🌐 host host:18.221.59.48 bytes=164, city=Columbus, country=US, ip=18.221.59.48, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:108.136.165.89 bytes=164, city=Jakarta, country=ID, ip=108.136.165.89, org=Amazon.com, Inc. [-6.2114, 106.8446, 0.0000] 🌐 host host:40.192.26.238 bytes=164, city=Hyderabad, country=IN, ip=40.192.26.238, org=Amazon.com, Inc. [17.3843, 78.4583, 0.0000] 🌐 host host:223.25.245.241 bytes=108, city=Kuala Lumpur, country=MY, ip=223.25.245.241, org=Gigabit Hosting Sdn Bhd [3.1399, 101.7009, 0.0000] 🌐 host host:18.223.156.100 bytes=164, city=Columbus, country=US, ip=18.223.156.100, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:62.100.207.220 bytes=1,026, city=London, country=GB, ip=62.100.207.220, org=Krystal Hosting Ltd [51.5081, -0.1278, 0.0000] 🌐 host host:85.208.96.199 bytes=4,819, city=Ashburn, country=US, ip=85.208.96.199, org=SEMrush CY LTD [39.0180, -77.5390, 0.0000] 🌐 host host:15.168.142.10 bytes=164, city=Osaka, country=JP, ip=15.168.142.10, org=Amazon.com, Inc. [34.6930, 135.5005, 0.0000] 🌐 host host:15.222.11.193 bytes=164, city=Montreal, country=CA, ip=15.222.11.193, org=Amazon.com, Inc. [45.4995, -73.5848, 0.0000] 🌐 host host:8.134.90.83 bytes=284, city=Guangzhou, country=CN, ip=8.134.90.83, org=Hangzhou Alibaba Advertising Co.,Ltd. [23.1181, 113.2539, 0.0000] 🌐 host host:43.210.22.132 bytes=164, city=Bangkok, country=TH, ip=43.210.22.132, org=Amazon.com, Inc. [13.7551, 100.5057, 0.0000] 🌐 host host:54.70.166.151 bytes=164, city=Boardman, country=US, ip=54.70.166.151, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:184.32.189.148 bytes=164, city=Boardman, country=US, ip=184.32.189.148, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:5.61.209.107 bytes=1,321, city=, country=SC, ip=5.61.209.107, org=Amarutu Technology Ltd [-4.5833, 55.6667, 0.0000] 🌐 host host:51.16.33.58 bytes=164, city=Tel Aviv, country=IL, ip=51.16.33.58, org=Amazon.com, Inc. [32.0804, 34.7807, 0.0000] 🌐 host host:45.148.10.141 bytes=6,406, city=Amsterdam, country=NL, ip=45.148.10.141, org=Techoff Srv Limited [52.3759, 4.8975, 0.0000] 🌐 host host:16.28.18.156 bytes=164, city=Cape Town, country=ZA, ip=16.28.18.156, org=Amazon.com, Inc. [-33.9258, 18.4259, 0.0000] 🌐 host host:47.128.35.181 bytes=95,223, city=Singapore, country=SG, ip=47.128.35.181, org=Amazon.com, Inc. [1.2939, 103.8461, 0.0000] 🌐 host host:2.57.122.195 bytes=470, city=, country=RO, ip=2.57.122.195, org=Unmanaged Ltd [45.9968, 24.9970, 0.0000] 🌐 host host:45.148.10.121 bytes=5,821, city=Amsterdam, country=NL, ip=45.148.10.121, org=Techoff Srv Limited [52.3759, 4.8975, 0.0000] 🌐 host host:18.223.21.222 bytes=164, city=Columbus, country=US, ip=18.223.21.222, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:16.112.8.242 bytes=164, city=Hyderabad, country=IN, ip=16.112.8.242, org=Amazon.com, Inc. [17.3843, 78.4583, 0.0000] 🌐 host host:3.14.13.131 bytes=164, city=Columbus, country=US, ip=3.14.13.131, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:18.222.166.187 bytes=164, city=Columbus, country=US, ip=18.222.166.187, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:18.102.71.52 bytes=164, city=Milan, country=IT, ip=18.102.71.52, org=Amazon.com, Inc. [45.4722, 9.1922, 0.0000] 🌐 host host:54.46.85.64 bytes=164, city=Hong Kong, country=HK, ip=54.46.85.64, org=Amazon.com, Inc. [22.2842, 114.1759, 0.0000] 🌐 host host:43.210.163.168 bytes=164, city=Bangkok, country=TH, ip=43.210.163.168, org=Amazon.com, Inc. [13.7551, 100.5057, 0.0000] 🌐 host host:35.183.94.19 bytes=164, city=Montreal, country=CA, ip=35.183.94.19, org=Amazon.com, Inc. [45.4995, -73.5848, 0.0000] 🌐 host host:13.208.182.135 bytes=164, city=Osaka, country=JP, ip=13.208.182.135, org=Amazon.com, Inc. [34.6930, 135.5005, 0.0000] 🌐 host host:13.36.167.91 bytes=164, city=Paris, country=FR, ip=13.36.167.91, org=Amazon.com, Inc. [48.8558, 2.3494, 0.0000] 🌐 host host:52.237.80.79 bytes=3,644, city=Singapore, country=SG, ip=52.237.80.79, org=Microsoft Corporation [1.2939, 103.8461, 0.0000] 🌐 host host:54.215.156.188 bytes=164, city=San Jose, country=US, ip=54.215.156.188, org=Amazon.com, Inc. [37.3388, -121.8916, 0.0000] 🌐 host host:103.25.47.94 bytes=314, city=Salem, country=IN, ip=103.25.47.94, org=Rainbow communications India Pvt Ltd [11.6602, 78.1532, 0.0000] 🌐 host host:15.168.166.198 bytes=164, city=Osaka, country=JP, ip=15.168.166.198, org=Amazon.com, Inc. [34.6930, 135.5005, 0.0000] 🌐 host host:15.168.20.100 bytes=328, city=Osaka, country=JP, ip=15.168.20.100, org=Amazon.com, Inc. [34.6930, 135.5005, 0.0000] 🌐 host host:52.47.117.18 bytes=164, city=Paris, country=FR, ip=52.47.117.18, org=Amazon.com, Inc. [48.8558, 2.3494, 0.0000] 🌐 host host:51.44.185.64 bytes=328, city=Paris, country=FR, ip=51.44.185.64, org=Amazon.com, Inc. [48.8558, 2.3494, 0.0000] 🌐 host host:13.245.10.130 bytes=164, city=Cape Town, country=ZA, ip=13.245.10.130, org=Amazon.com, Inc. [-33.9258, 18.4259, 0.0000] 🌐 host host:20.215.220.200 bytes=33,149, city=Warsaw, country=PL, ip=20.215.220.200, org=Microsoft Corporation [52.2299, 21.0093, 0.0000] 🌐 host host:43.217.114.99 bytes=164, city=Kuala Lumpur, country=MY, ip=43.217.114.99, org=Amazon.com, Inc. [3.1408, 101.6852, 0.0000] 🌐 host host:31.148.99.199 bytes=166, city=Lviv, country=UA, ip=31.148.99.199, org=FOP Hornostay Mykhaylo Ivanovych [49.8390, 24.0191, 0.0000] 🌐 host host:209.141.47.217 bytes=2,836, city=Las Vegas, country=US, ip=209.141.47.217, org=FranTech Solutions [36.1020, -115.1447, 0.0000] 🌐 host host:15.168.16.236 bytes=492, city=Osaka, country=JP, ip=15.168.16.236, org=Amazon.com, Inc. [34.6930, 135.5005, 0.0000] 🌐 host host:35.152.212.28 bytes=164, city=Milan, country=IT, ip=35.152.212.28, org=Amazon.com, Inc. [45.4722, 9.1922, 0.0000] 🌐 host host:100.51.6.16 bytes=3,798, city=Ashburn, country=US, ip=100.51.6.16, org=Amazon.com, Inc. [39.0469, -77.4903, 0.0000] 🌐 host host:13.208.161.134 bytes=164, city=Osaka, country=JP, ip=13.208.161.134, org=Amazon.com, Inc. [34.6930, 135.5005, 0.0000] 🌐 host host:139.19.117.197 bytes=5,791, city=Saarbrücken, country=DE, ip=139.19.117.197, org=Verein zur Foerderung eines Deutschen Forschungsnetzes e.V. [49.2134, 6.9624, 0.0000] 🌐 host host:51.44.163.117 bytes=492, city=Paris, country=FR, ip=51.44.163.117, org=Amazon.com, Inc. [48.8558, 2.3494, 0.0000] 🌐 host host:51.102.202.71 bytes=164, city=, country=US, ip=51.102.202.71, org=Amazon.com, Inc. [37.7510, -97.8220, 0.0000] 🌐 host host:172.232.0.17 bytes=220, city=Chicago, country=US, ip=172.232.0.17, org=Akamai Connected Cloud [41.8835, -87.6305, 0.0000] 🌐 host host:3.112.93.79 bytes=164, city=Tokyo, country=JP, ip=3.112.93.79, org=Amazon.com, Inc. [35.6893, 139.6899, 0.0000] 🌐 host host:3.108.51.95 bytes=164, city=Mumbai, country=IN, ip=3.108.51.95, org=Amazon.com, Inc. [19.0748, 72.8856, 0.0000] 🌐 host host:85.208.96.206 bytes=25,849, city=Ashburn, country=US, ip=85.208.96.206, org=SEMrush CY LTD [39.0180, -77.5390, 0.0000] 🌐 host host:85.208.96.207 bytes=34,272, city=Ashburn, country=US, ip=85.208.96.207, org=SEMrush CY LTD [39.0180, -77.5390, 0.0000] 🌐 host host:185.191.171.18 bytes=360, city=, country=GB, ip=185.191.171.18, org=SEMrush CY LTD [51.4964, -0.1224, 0.0000] 🌐 host host:3.10.150.61 bytes=164, city=City of London, country=GB, ip=3.10.150.61, org=Amazon.com, Inc. [51.5164, -0.0930, 0.0000] 🌐 host host:3.102.9.236 bytes=164, city=Auckland, country=NZ, ip=3.102.9.236, org=Amazon.com, Inc. [-36.8504, 174.7675, 0.0000] 🌐 host host:35.152.142.16 bytes=164, city=Milan, country=IT, ip=35.152.142.16, org=Amazon.com, Inc. [45.4722, 9.1922, 0.0000] 🌐 host host:54.46.114.210 bytes=164, city=Hong Kong, country=HK, ip=54.46.114.210, org=Amazon.com, Inc. [22.2842, 114.1759, 0.0000] 🌐 host host:18.192.25.146 bytes=164, city=Frankfurt am Main, country=DE, ip=18.192.25.146, org=Amazon.com, Inc. [50.1169, 8.6837, 0.0000] 🌐 host host:15.237.218.82 bytes=164, city=Paris, country=FR, ip=15.237.218.82, org=Amazon.com, Inc. [48.8558, 2.3494, 0.0000] 🌐 host host:152.250.243.47 bytes=2,968, city=São Paulo, country=BR, ip=152.250.243.47, org=TELEFONICA BRASIL S.A [-23.6293, -46.6351, 0.0000] 🌐 host host:185.125.188.59 bytes=7,217, city=, country=GB, ip=185.125.188.59, org=Canonical Group Limited [51.4964, -0.1224, 0.0000] 🌐 host host:43.199.73.142 bytes=164, city=Hong Kong, country=HK, ip=43.199.73.142, org=Amazon.com, Inc. [22.2842, 114.1759, 0.0000] 🌐 host host:43.210.169.237 bytes=164, city=Bangkok, country=TH, ip=43.210.169.237, org=Amazon.com, Inc. [13.7551, 100.5057, 0.0000] 🌐 host host:18.237.60.88 bytes=164, city=Boardman, country=US, ip=18.237.60.88, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:43.208.239.191 bytes=164, city=Bangkok, country=TH, ip=43.208.239.191, org=Amazon.com, Inc. [13.7551, 100.5057, 0.0000] 🌐 host host:18.61.208.16 bytes=164, city=Hyderabad, country=IN, ip=18.61.208.16, org=Amazon.com, Inc. [17.3843, 78.4583, 0.0000] 🌐 host host:18.145.238.45 bytes=164, city=San Jose, country=US, ip=18.145.238.45, org=Amazon.com, Inc. [37.3388, -121.8916, 0.0000] 🌐 host host:13.208.219.179 bytes=164, city=Osaka, country=JP, ip=13.208.219.179, org=Amazon.com, Inc. [34.6930, 135.5005, 0.0000] 🌐 host host:185.125.188.57 bytes=6,378, city=, country=GB, ip=185.125.188.57, org=Canonical Group Limited [51.4964, -0.1224, 0.0000] 🌐 host host:108.136.231.22 bytes=164, city=Jakarta, country=ID, ip=108.136.231.22, org=Amazon.com, Inc. [-6.2114, 106.8446, 0.0000] 🌐 host host:18.163.183.211 bytes=164, city=Hong Kong, country=HK, ip=18.163.183.211, org=Amazon.com, Inc. [22.2842, 114.1759, 0.0000] 🌐 host host:18.130.231.216 bytes=164, city=City of London, country=GB, ip=18.130.231.216, org=Amazon.com, Inc. [51.5164, -0.0930, 0.0000] 🌐 host host:15.237.94.206 bytes=328, city=Paris, country=FR, ip=15.237.94.206, org=Amazon.com, Inc. [48.8558, 2.3494, 0.0000] 🌐 host host:80.94.92.186 bytes=1,294, city=, country=RO, ip=80.94.92.186, org=Unmanaged Ltd [45.9968, 24.9970, 0.0000] 🌐 host host:63.179.136.145 bytes=164, city=Frankfurt am Main, country=DE, ip=63.179.136.145, org=Amazon.com, Inc. [50.1169, 8.6837, 0.0000] 🌐 host host:104.18.32.47 bytes=10,977, ip=104.18.32.47 host host:51.85.52.86 bytes=164, city=Tel Aviv, country=IL, ip=51.85.52.86, org=Amazon.com, Inc. [32.0804, 34.7807, 0.0000] 🌐 host host:43.198.110.242 bytes=164, city=Hong Kong, country=HK, ip=43.198.110.242, org=Amazon.com, Inc. [22.2842, 114.1759, 0.0000] 🌐 host host:15.160.128.24 bytes=164, city=Milan, country=IT, ip=15.160.128.24, org=Amazon.com, Inc. [45.4722, 9.1922, 0.0000] 🌐 host host:18.222.208.125 bytes=164, city=Columbus, country=US, ip=18.222.208.125, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:18.170.47.8 bytes=164, city=City of London, country=GB, ip=18.170.47.8, org=Amazon.com, Inc. [51.5164, -0.0930, 0.0000] 🌐 host host:185.191.171.17 bytes=29,001, city=, country=GB, ip=185.191.171.17, org=SEMrush CY LTD [51.4964, -0.1224, 0.0000] 🌐 http_host http_host:172.234.197.23:80 host=172.234.197.23:80 http_host http_host:172-234-197-23.ip.linodeusercontent.com host=172-234-197-23.ip.linodeusercontent.com http_host http_host:169.254.169.254 host=169.254.169.254 org org:IONOS SE name=IONOS SE org org:FranTech Solutions name=FranTech Solutions org org:Gigabit Hosting Sdn Bhd name=Gigabit Hosting Sdn Bhd org org:Krystal Hosting Ltd name=Krystal Hosting Ltd org org:Akamai Connected Cloud name=Akamai Connected Cloud org org:Canonical Group Limited name=Canonical Group Limited org org:Korea Telecom name=Korea Telecom org org:Prospero Ooo name=Prospero Ooo org org:SEMrush CY LTD name=SEMrush CY LTD org org:Kaopu Cloud HK Limited name=Kaopu Cloud HK Limited org org:AzInTelecom LLC name=AzInTelecom LLC org org:Amarutu Technology Ltd name=Amarutu Technology Ltd org org:Censys, Inc. name=Censys, Inc. org org:FOP Hornostay Mykhaylo Ivanovych name=FOP Hornostay Mykhaylo Ivanovych org org:Verein zur Foerderung eines Deutschen Forschungsnetzes e.V. name=Verein zur Foerderung eines Deutschen Forschungsnetzes e.V. org org:Hangzhou Alibaba Advertising Co.,Ltd. name=Hangzhou Alibaba Advertising Co.,Ltd. org org:Unmanaged Ltd name=Unmanaged Ltd org org:Verizon Business name=Verizon Business org org:TELEFONICA BRASIL S.A name=TELEFONICA BRASIL S.A org org:Techoff Srv Limited name=Techoff Srv Limited org org:DigitalOcean, LLC name=DigitalOcean, LLC org org:Rainbow communications India Pvt Ltd name=Rainbow communications India Pvt Ltd org org:Alibaba US Technology Co., Ltd. name=Alibaba US Technology Co., Ltd. org org:Google LLC name=Google LLC org org:Microsoft Corporation name=Microsoft Corporation org org:Amazon.com, Inc. name=Amazon.com, Inc. org org:MTN NIGERIA Communication limited name=MTN NIGERIA Communication limited pcap_artifact PCAP:capture_20260504220001:bb1eac77a819 file_size=11,164, filename=capture_20260504220001.pcap, ingested_at=2026-05-05T01:39:33.862207+00:00 pcap_artifact PCAP:capture_20260504200001:e54f3ef7397c file_size=57,792, filename=capture_20260504200001.pcap, ingested_at=2026-05-05T01:39:23.885731+00:00 pcap_artifact PCAP:capture_20260504190001:0e9d71c62cf7 file_size=111,341, filename=capture_20260504190001.pcap, ingested_at=2026-05-05T01:39:19.322679+00:00 pcap_artifact PCAP:capture_20260504230001:f32f07345b52 file_size=8,754, filename=capture_20260504230001.pcap, ingested_at=2026-05-05T01:39:37.519922+00:00 pcap_artifact PCAP:capture_20260504180001:9ce10f154d81 file_size=121,154, filename=capture_20260504180001.pcap, ingested_at=2026-05-05T01:39:13.756326+00:00 pcap_artifact PCAP:capture_20260504171026:14cade61ab8d file_size=51,617, filename=capture_20260504171026.pcap, ingested_at=2026-05-05T01:39:07.071480+00:00 pcap_artifact PCAP:capture_20260504210001:f76a22d8e4e7 file_size=50,620, filename=capture_20260504210001.pcap, ingested_at=2026-05-05T01:39:31.501030+00:00 pcap_artifact PCAP:capture_20260504160001:c752ba2814fa file_size=138,011, filename=capture_20260504160001.pcap, ingested_at=2026-05-05T01:38:58.302221+00:00 pcap_artifact PCAP:capture_20260505010001:b778a67ed9e1 file_size=163,258, filename=capture_20260505010001.pcap, ingested_at=2026-05-05T01:39:43.028234+00:00 pcap_artifact PCAP:capture_20260505000001:983cbaa34da4 file_size=13,932, filename=capture_20260505000001.pcap, ingested_at=2026-05-05T01:39:39.565337+00:00 port_hub port:tcp:587 port=587, proto=tcp port_hub port:tcp:54710 port=54,710, proto=tcp port_hub port:tcp:23 port=23, proto=tcp port_hub port:tcp:22 port=22, proto=tcp port_hub port:tcp:51011 port=51,011, proto=tcp port_hub port:tcp:43722 port=43,722, proto=tcp port_hub port:tcp:57278 port=57,278, proto=tcp port_hub port:tcp:15056 port=15,056, proto=tcp port_hub port:tcp:56728 port=56,728, proto=tcp port_hub port:tcp:51006 port=51,006, proto=tcp port_hub port:tcp:51974 port=51,974, proto=tcp port_hub port:tcp:80 port=80, proto=tcp port_hub port:tcp:443 port=443, proto=tcp port_hub port:udp:53 port=53, proto=udp port_hub port:tcp:57658 port=57,658, proto=tcp protocol_event pe:dns:SESSION-0bb0a36a47f50469 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-0bb0a36a47f50469 protocol_event pe:rst:SESSION-b2d8d88a625ca8f2 count=2, event_type=TCP_RST, session=SESSION-b2d8d88a625ca8f2 protocol_event pe:rst:SESSION-6ffc1e626d10e6a9 count=1, event_type=TCP_RST, session=SESSION-6ffc1e626d10e6a9 protocol_event pe:dns:SESSION-64a68821f711d60c event_type=DNS_EXCHANGE, query_count=2, session=SESSION-64a68821f711d60c protocol_event pe:rst:SESSION-b1e5a02cc52442d6 count=2, event_type=TCP_RST, session=SESSION-b1e5a02cc52442d6 protocol_event pe:syn:SESSION-ed88b7658fc49373 count=2, event_type=TCP_SYN, session=SESSION-ed88b7658fc49373 protocol_event pe:tls:SESSION-9ca7ee33eecf1003 event_type=TLS_SESSION, packet_count=2, session=SESSION-9ca7ee33eecf1003 protocol_event pe:dns:SESSION-01e63b43f84adb78 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-01e63b43f84adb78 protocol_event pe:syn:SESSION-34c94543e0f1fd4e count=2, event_type=TCP_SYN, session=SESSION-34c94543e0f1fd4e protocol_event pe:tls:SESSION-10d85d85b0231c7a event_type=TLS_SESSION, packet_count=111, session=SESSION-10d85d85b0231c7a protocol_event pe:dns:SESSION-cc00fec5952f101a event_type=DNS_EXCHANGE, query_count=2, session=SESSION-cc00fec5952f101a protocol_event pe:tls:SESSION-5fec4fd1b3b69505 event_type=TLS_SESSION, packet_count=6, session=SESSION-5fec4fd1b3b69505 protocol_event pe:dns:SESSION-628de6abfaa40aff event_type=DNS_EXCHANGE, query_count=2, session=SESSION-628de6abfaa40aff protocol_event pe:syn:SESSION-e3e13ed2a3a4225a count=3, event_type=TCP_SYN, session=SESSION-e3e13ed2a3a4225a protocol_event pe:rst:SESSION-773f081d524eb4e1 count=2, event_type=TCP_RST, session=SESSION-773f081d524eb4e1 protocol_event pe:tls:SESSION-4565f4d936f50ce3 event_type=TLS_SESSION, packet_count=23, session=SESSION-4565f4d936f50ce3 protocol_event pe:syn:SESSION-cc253029453bba30 count=2, event_type=TCP_SYN, session=SESSION-cc253029453bba30 protocol_event pe:syn:SESSION-7abd0ef698f14ccf count=2, event_type=TCP_SYN, session=SESSION-7abd0ef698f14ccf protocol_event pe:dns:SESSION-92522dfae2b7355e event_type=DNS_EXCHANGE, query_count=2, session=SESSION-92522dfae2b7355e protocol_event pe:syn:SESSION-33d82031f7b4c910 count=2, event_type=TCP_SYN, session=SESSION-33d82031f7b4c910 protocol_event pe:tls:SESSION-d61c211cfec87108 event_type=TLS_SESSION, packet_count=92, session=SESSION-d61c211cfec87108 protocol_event pe:syn:SESSION-2c91ccb1d746a834 count=4, event_type=TCP_SYN, session=SESSION-2c91ccb1d746a834 protocol_event pe:syn:SESSION-7fb00af1067fe4cb count=2, event_type=TCP_SYN, session=SESSION-7fb00af1067fe4cb protocol_event pe:syn:SESSION-1071c91ecf034a90 count=2, event_type=TCP_SYN, session=SESSION-1071c91ecf034a90 protocol_event pe:syn:SESSION-6c6c255a1bf42f17 count=2, event_type=TCP_SYN, session=SESSION-6c6c255a1bf42f17 protocol_event pe:tls:SESSION-773f081d524eb4e1 event_type=TLS_SESSION, packet_count=4, session=SESSION-773f081d524eb4e1 protocol_event pe:tls:SESSION-15ee3084143b6055 event_type=TLS_SESSION, packet_count=20, session=SESSION-15ee3084143b6055 protocol_event pe:syn:SESSION-7bf1fe0b55fae423 count=2, event_type=TCP_SYN, session=SESSION-7bf1fe0b55fae423 protocol_event pe:syn:SESSION-c3bfbdfff334e676 count=2, event_type=TCP_SYN, session=SESSION-c3bfbdfff334e676 protocol_event pe:syn:SESSION-7559f03ab90b10fe count=2, event_type=TCP_SYN, session=SESSION-7559f03ab90b10fe protocol_event pe:rst:SESSION-33d82031f7b4c910 count=1, event_type=TCP_RST, session=SESSION-33d82031f7b4c910 protocol_event pe:rst:SESSION-e713a621956c87b3 count=2, event_type=TCP_RST, session=SESSION-e713a621956c87b3 protocol_event pe:syn:SESSION-01de71928ca60067 count=2, event_type=TCP_SYN, session=SESSION-01de71928ca60067 protocol_event pe:tls:SESSION-aee286c4abe27d97 event_type=TLS_SESSION, packet_count=35, session=SESSION-aee286c4abe27d97 protocol_event pe:syn:SESSION-28b12c7b20ab3edc count=2, event_type=TCP_SYN, session=SESSION-28b12c7b20ab3edc protocol_event pe:tls:SESSION-7fb00af1067fe4cb event_type=TLS_SESSION, packet_count=16, session=SESSION-7fb00af1067fe4cb protocol_event pe:tls:SESSION-caf0d08503de9bad event_type=TLS_SESSION, packet_count=14, session=SESSION-caf0d08503de9bad protocol_event pe:dns:SESSION-e616c2a864857b4d event_type=DNS_EXCHANGE, query_count=2, session=SESSION-e616c2a864857b4d protocol_event pe:rst:SESSION-18d640a884a5cef8 count=1, event_type=TCP_RST, session=SESSION-18d640a884a5cef8 protocol_event pe:syn:SESSION-d3870761405347e3 count=2, event_type=TCP_SYN, session=SESSION-d3870761405347e3 protocol_event pe:syn:SESSION-4565f4d936f50ce3 count=2, event_type=TCP_SYN, session=SESSION-4565f4d936f50ce3 protocol_event pe:dns:SESSION-1468bb4b6cddeb0e event_type=DNS_EXCHANGE, query_count=2, session=SESSION-1468bb4b6cddeb0e protocol_event pe:syn:SESSION-6ffc1e626d10e6a9 count=2, event_type=TCP_SYN, session=SESSION-6ffc1e626d10e6a9 protocol_event pe:dns:SESSION-fb7eadd4080c12a8 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-fb7eadd4080c12a8 protocol_event pe:dns:SESSION-0c168070664edcd5 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-0c168070664edcd5 protocol_event pe:dns:SESSION-771fc6fcffc7e47d event_type=DNS_EXCHANGE, query_count=2, session=SESSION-771fc6fcffc7e47d protocol_event pe:rst:SESSION-9ca7ee33eecf1003 count=1, event_type=TCP_RST, session=SESSION-9ca7ee33eecf1003 protocol_event pe:dns:SESSION-2f060de07214c3f8 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-2f060de07214c3f8 protocol_event pe:dns:SESSION-57bdfa61702e8119 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-57bdfa61702e8119 protocol_event pe:dns:SESSION-9ddf9426d4603846 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-9ddf9426d4603846 protocol_event pe:dns:SESSION-c28ba232342304c2 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-c28ba232342304c2 protocol_event pe:rst:SESSION-b1bef9df75f4a508 count=2, event_type=TCP_RST, session=SESSION-b1bef9df75f4a508 protocol_event pe:tls:SESSION-6b584ca1da1802fc event_type=TLS_SESSION, packet_count=48, session=SESSION-6b584ca1da1802fc protocol_event pe:tls:SESSION-351ac162df2cbedf event_type=TLS_SESSION, packet_count=38, session=SESSION-351ac162df2cbedf protocol_event pe:rst:SESSION-38b0e1b2c33b51ee count=2, event_type=TCP_RST, session=SESSION-38b0e1b2c33b51ee protocol_event pe:rst:SESSION-0bafb0678abe748e count=1, event_type=TCP_RST, session=SESSION-0bafb0678abe748e protocol_event pe:syn:SESSION-10d85d85b0231c7a count=2, event_type=TCP_SYN, session=SESSION-10d85d85b0231c7a protocol_event pe:syn:SESSION-b1bef9df75f4a508 count=2, event_type=TCP_SYN, session=SESSION-b1bef9df75f4a508 protocol_event pe:syn:SESSION-8e9fb348d30e997e count=2, event_type=TCP_SYN, session=SESSION-8e9fb348d30e997e protocol_event pe:dns:SESSION-6049846f95ecde6f event_type=DNS_EXCHANGE, query_count=2, session=SESSION-6049846f95ecde6f protocol_event pe:dns:SESSION-5536851242b79090 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-5536851242b79090 protocol_event pe:syn:SESSION-e964a70d1e891ea7 count=3, event_type=TCP_SYN, session=SESSION-e964a70d1e891ea7 protocol_event pe:rst:SESSION-caf0d08503de9bad count=2, event_type=TCP_RST, session=SESSION-caf0d08503de9bad protocol_event pe:syn:SESSION-b2d8d88a625ca8f2 count=2, event_type=TCP_SYN, session=SESSION-b2d8d88a625ca8f2 protocol_event pe:syn:SESSION-6b584ca1da1802fc count=2, event_type=TCP_SYN, session=SESSION-6b584ca1da1802fc protocol_event pe:tls:SESSION-b2d8d88a625ca8f2 event_type=TLS_SESSION, packet_count=15, session=SESSION-b2d8d88a625ca8f2 protocol_event pe:syn:SESSION-0f368e0b1edaf08f count=2, event_type=TCP_SYN, session=SESSION-0f368e0b1edaf08f protocol_event pe:rst:SESSION-aee286c4abe27d97 count=2, event_type=TCP_RST, session=SESSION-aee286c4abe27d97 protocol_event pe:rst:SESSION-6c6c255a1bf42f17 count=1, event_type=TCP_RST, session=SESSION-6c6c255a1bf42f17 protocol_event pe:syn:SESSION-d61c211cfec87108 count=2, event_type=TCP_SYN, session=SESSION-d61c211cfec87108 protocol_event pe:dns:SESSION-d14f77b030f90610 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-d14f77b030f90610 protocol_event pe:dns:SESSION-651c0a387feb2b36 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-651c0a387feb2b36 protocol_event pe:syn:SESSION-f1f59f32071a0d91 count=2, event_type=TCP_SYN, session=SESSION-f1f59f32071a0d91 protocol_event pe:tls:SESSION-e713a621956c87b3 event_type=TLS_SESSION, packet_count=14, session=SESSION-e713a621956c87b3 protocol_event pe:rst:SESSION-fc6dafbd712e2a43 count=1, event_type=TCP_RST, session=SESSION-fc6dafbd712e2a43 protocol_event pe:dns:SESSION-6434df2bd35d6890 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-6434df2bd35d6890 protocol_event pe:syn:SESSION-bb92ae5c6db7c604 count=2, event_type=TCP_SYN, session=SESSION-bb92ae5c6db7c604 protocol_event pe:rst:SESSION-803b12d6470b09b1 count=7, event_type=TCP_RST, session=SESSION-803b12d6470b09b1 protocol_event pe:tls:SESSION-043dbe5cfae65cc7 event_type=TLS_SESSION, packet_count=19, session=SESSION-043dbe5cfae65cc7 protocol_event pe:tls:SESSION-cfe575362883fc43 event_type=TLS_SESSION, packet_count=42, session=SESSION-cfe575362883fc43 protocol_event pe:dns:SESSION-8ce2c27f116fd06f event_type=DNS_EXCHANGE, query_count=2, session=SESSION-8ce2c27f116fd06f protocol_event pe:rst:SESSION-b5a91dfd62a43c09 count=3, event_type=TCP_RST, session=SESSION-b5a91dfd62a43c09 protocol_event pe:syn:SESSION-cd03b72e5f8393ed count=4, event_type=TCP_SYN, session=SESSION-cd03b72e5f8393ed protocol_event pe:rst:SESSION-5fec4fd1b3b69505 count=3, event_type=TCP_RST, session=SESSION-5fec4fd1b3b69505 protocol_event pe:syn:SESSION-f0752f4c1a946e92 count=3, event_type=TCP_SYN, session=SESSION-f0752f4c1a946e92 protocol_event pe:syn:SESSION-d1502acdce8f0356 count=2, event_type=TCP_SYN, session=SESSION-d1502acdce8f0356 protocol_event pe:tls:SESSION-7abd0ef698f14ccf event_type=TLS_SESSION, packet_count=46, session=SESSION-7abd0ef698f14ccf protocol_event pe:syn:SESSION-bef343be1058d672 count=2, event_type=TCP_SYN, session=SESSION-bef343be1058d672 protocol_event pe:dns:SESSION-47b5805af14336b0 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-47b5805af14336b0 protocol_event pe:syn:SESSION-8251ca1362d5dfa6 count=2, event_type=TCP_SYN, session=SESSION-8251ca1362d5dfa6 protocol_event pe:syn:SESSION-18d640a884a5cef8 count=2, event_type=TCP_SYN, session=SESSION-18d640a884a5cef8 protocol_event pe:syn:SESSION-5b4f0e504e85ae0b count=2, event_type=TCP_SYN, session=SESSION-5b4f0e504e85ae0b protocol_event pe:syn:SESSION-231366a57d03985d count=2, event_type=TCP_SYN, session=SESSION-231366a57d03985d protocol_event pe:syn:SESSION-aee286c4abe27d97 count=2, event_type=TCP_SYN, session=SESSION-aee286c4abe27d97 protocol_event pe:syn:SESSION-fa7b49ba9242e638 count=5, event_type=TCP_SYN, session=SESSION-fa7b49ba9242e638 protocol_event pe:syn:SESSION-e1d54cd1a928410c count=3, event_type=TCP_SYN, session=SESSION-e1d54cd1a928410c protocol_event pe:syn:SESSION-a34b9143b6c34465 count=2, event_type=TCP_SYN, session=SESSION-a34b9143b6c34465 protocol_event pe:tls:SESSION-b5a91dfd62a43c09 event_type=TLS_SESSION, packet_count=6, session=SESSION-b5a91dfd62a43c09 protocol_event pe:syn:SESSION-2c000f2196b59234 count=2, event_type=TCP_SYN, session=SESSION-2c000f2196b59234 protocol_event pe:dns:SESSION-0397e3c5cc9b8801 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-0397e3c5cc9b8801 protocol_event pe:syn:SESSION-caf0d08503de9bad count=2, event_type=TCP_SYN, session=SESSION-caf0d08503de9bad protocol_event pe:syn:SESSION-746ebad1abc2bed9 count=3, event_type=TCP_SYN, session=SESSION-746ebad1abc2bed9 protocol_event pe:syn:SESSION-76504a1c99c6b525 count=2, event_type=TCP_SYN, session=SESSION-76504a1c99c6b525 protocol_event pe:syn:SESSION-65f1969ce661c9f6 count=2, event_type=TCP_SYN, session=SESSION-65f1969ce661c9f6 protocol_event pe:tls:SESSION-cc253029453bba30 event_type=TLS_SESSION, packet_count=14, session=SESSION-cc253029453bba30 protocol_event pe:dns:SESSION-a733c55e68828e41 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-a733c55e68828e41 protocol_event pe:tls:SESSION-8251ca1362d5dfa6 event_type=TLS_SESSION, packet_count=36, session=SESSION-8251ca1362d5dfa6 protocol_event pe:dns:SESSION-07b9c45d89e56580 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-07b9c45d89e56580 protocol_event pe:syn:SESSION-2e78c1b357b65aa8 count=2, event_type=TCP_SYN, session=SESSION-2e78c1b357b65aa8 protocol_event pe:syn:SESSION-15ee3084143b6055 count=2, event_type=TCP_SYN, session=SESSION-15ee3084143b6055 protocol_event pe:dns:SESSION-f903bc35e29fa576 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-f903bc35e29fa576 protocol_event pe:syn:SESSION-5275df68f7129eee count=2, event_type=TCP_SYN, session=SESSION-5275df68f7129eee protocol_event pe:syn:SESSION-8b53f3e71f0db9cf count=2, event_type=TCP_SYN, session=SESSION-8b53f3e71f0db9cf protocol_event pe:syn:SESSION-043dbe5cfae65cc7 count=2, event_type=TCP_SYN, session=SESSION-043dbe5cfae65cc7 protocol_event pe:rst:SESSION-351ac162df2cbedf count=2, event_type=TCP_RST, session=SESSION-351ac162df2cbedf protocol_event pe:dns:SESSION-db11a112d1fa8c6c event_type=DNS_EXCHANGE, query_count=2, session=SESSION-db11a112d1fa8c6c protocol_event pe:dns:SESSION-80666f91952cf334 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-80666f91952cf334 protocol_event pe:dns:SESSION-9c58507172c9287c event_type=DNS_EXCHANGE, query_count=2, session=SESSION-9c58507172c9287c protocol_event pe:tls:SESSION-231366a57d03985d event_type=TLS_SESSION, packet_count=47, session=SESSION-231366a57d03985d protocol_event pe:dns:SESSION-6e1aaea64ff48cc6 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-6e1aaea64ff48cc6 protocol_event pe:syn:SESSION-a645dcfb0955e108 count=2, event_type=TCP_SYN, session=SESSION-a645dcfb0955e108 protocol_event pe:syn:SESSION-4c01e287087035ed count=2, event_type=TCP_SYN, session=SESSION-4c01e287087035ed protocol_event pe:syn:SESSION-351ac162df2cbedf count=2, event_type=TCP_SYN, session=SESSION-351ac162df2cbedf protocol_event pe:syn:SESSION-e713a621956c87b3 count=2, event_type=TCP_SYN, session=SESSION-e713a621956c87b3 protocol_event pe:tls:SESSION-6c6c255a1bf42f17 event_type=TLS_SESSION, packet_count=3, session=SESSION-6c6c255a1bf42f17 protocol_event pe:syn:SESSION-34ddfe5e51c2900e count=3, event_type=TCP_SYN, session=SESSION-34ddfe5e51c2900e protocol_event pe:syn:SESSION-1fb640f96227ae19 count=2, event_type=TCP_SYN, session=SESSION-1fb640f96227ae19 protocol_event pe:dns:SESSION-01024a97964a08ba event_type=DNS_EXCHANGE, query_count=2, session=SESSION-01024a97964a08ba protocol_event pe:syn:SESSION-73db460233491ee2 count=2, event_type=TCP_SYN, session=SESSION-73db460233491ee2 protocol_event pe:dns:SESSION-c2271f175dee6912 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-c2271f175dee6912 protocol_event pe:rst:SESSION-043dbe5cfae65cc7 count=3, event_type=TCP_RST, session=SESSION-043dbe5cfae65cc7 protocol_event pe:syn:SESSION-cfe575362883fc43 count=2, event_type=TCP_SYN, session=SESSION-cfe575362883fc43 protocol_event pe:syn:SESSION-5b75b43b378de918 count=2, event_type=TCP_SYN, session=SESSION-5b75b43b378de918 protocol_event pe:rst:SESSION-4565f4d936f50ce3 count=2, event_type=TCP_RST, session=SESSION-4565f4d936f50ce3 protocol_event pe:rst:SESSION-6b584ca1da1802fc count=4, event_type=TCP_RST, session=SESSION-6b584ca1da1802fc protocol_event pe:dns:SESSION-5e3cdb0dcfbba513 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-5e3cdb0dcfbba513 protocol_event pe:tls:SESSION-0ca8f56b7b77268b event_type=TLS_SESSION, packet_count=2, session=SESSION-0ca8f56b7b77268b protocol_event pe:dns:SESSION-915796ddc8fa899f event_type=DNS_EXCHANGE, query_count=2, session=SESSION-915796ddc8fa899f protocol_event pe:rst:SESSION-7abd0ef698f14ccf count=2, event_type=TCP_RST, session=SESSION-7abd0ef698f14ccf protocol_event pe:rst:SESSION-6fc0d2c6a178cd6f count=2, event_type=TCP_RST, session=SESSION-6fc0d2c6a178cd6f protocol_event pe:syn:SESSION-19d5178dea40ae85 count=3, event_type=TCP_SYN, session=SESSION-19d5178dea40ae85 protocol_event pe:syn:SESSION-fc6dafbd712e2a43 count=2, event_type=TCP_SYN, session=SESSION-fc6dafbd712e2a43 protocol_event pe:syn:SESSION-471923202e781468 count=2, event_type=TCP_SYN, session=SESSION-471923202e781468 protocol_event pe:dns:SESSION-9d8a706dad13986e event_type=DNS_EXCHANGE, query_count=2, session=SESSION-9d8a706dad13986e protocol_event pe:rst:SESSION-76504a1c99c6b525 count=1, event_type=TCP_RST, session=SESSION-76504a1c99c6b525 protocol_event pe:syn:SESSION-627ac9b8834edd4e count=2, event_type=TCP_SYN, session=SESSION-627ac9b8834edd4e protocol_event pe:syn:SESSION-7c80451afb37a00b count=2, event_type=TCP_SYN, session=SESSION-7c80451afb37a00b protocol_event pe:syn:SESSION-773f081d524eb4e1 count=2, event_type=TCP_SYN, session=SESSION-773f081d524eb4e1 protocol_event pe:syn:SESSION-1a3e464b64d7858c count=2, event_type=TCP_SYN, session=SESSION-1a3e464b64d7858c protocol_event pe:tls:SESSION-bf6e012f03c77c70 event_type=TLS_SESSION, packet_count=4, session=SESSION-bf6e012f03c77c70 protocol_event pe:tls:SESSION-b1bef9df75f4a508 event_type=TLS_SESSION, packet_count=22, session=SESSION-b1bef9df75f4a508 protocol_event pe:tls:SESSION-a34b9143b6c34465 event_type=TLS_SESSION, packet_count=73, session=SESSION-a34b9143b6c34465 protocol_event pe:syn:SESSION-0aa4b51c4983f613 count=19, event_type=TCP_SYN, session=SESSION-0aa4b51c4983f613 protocol_event pe:dns:SESSION-9850fe0538c0f605 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-9850fe0538c0f605 service svc:http name=http service svc:ssh name=ssh service svc:dns name=dns service svc:https name=https session SESSION-351ac162df2cbedf dst_ip=172.234.197.23, dst_port=443, duration_sec=0.25, end_time=1,777,910,429.816, expected_protocol=https, packet_count=38, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=185.191.171.17, src_port=15,324, start_time=1,777,910,429.569, tcp_flags=A,S,F,P,R, time_bucket=1,777,910,400, total_bytes=29,001, window_sec=30 session SESSION-57bdfa61702e8119 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,910,449.38, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=36,355, start_time=1,777,910,449.38, tcp_flags=, time_bucket=1,777,910,430, total_bytes=240, window_sec=30 session SESSION-cd03b72e5f8393ed dst_ip=172.234.197.23, dst_port=587, duration_sec=14.4, end_time=1,777,942,845.336, expected_protocol=submission, packet_count=4, proto=TCP, protocol_anomaly_score=0.65, protocol_violations=missing_tls,tcp_syn_only, protocols=TCP, src_ip=199.45.154.150, src_port=58,914, start_time=1,777,942,830.935, tcp_flags=S, time_bucket=1,777,942,830, total_bytes=296, window_sec=30 session SESSION-9d8a706dad13986e dst_ip=172.232.0.17, dst_port=53, duration_sec=0.01, end_time=1,777,935,601.614, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=57,661, start_time=1,777,935,601.609, tcp_flags=, time_bucket=1,777,935,600, total_bytes=313, window_sec=30 session SESSION-b1bef9df75f4a508 dst_ip=185.125.188.59, dst_port=443, duration_sec=6.28, end_time=1,777,914,637.992, expected_protocol=https, packet_count=22, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=54,246, start_time=1,777,914,631.707, tcp_flags=A,S,F,P,R, time_bucket=1,777,914,630, total_bytes=7,217, window_sec=30 session SESSION-6e1aaea64ff48cc6 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,914,633.008, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=52,238, start_time=1,777,914,633.007, tcp_flags=, time_bucket=1,777,914,630, total_bytes=282, window_sec=30 session SESSION-b7e41180394c28fa dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,942,803.888, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.10.150.61, start_time=1,777,942,803.888, tcp_flags=, time_bucket=1,777,942,800, total_bytes=164, window_sec=30 session SESSION-76504a1c99c6b525 dst_ip=172.234.197.23, dst_port=80, duration_sec=0.11, end_time=1,777,924,835.156, expected_protocol=http, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=8.211.36.238, src_port=54,093, start_time=1,777,924,835.048, tcp_flags=S,R,A, time_bucket=1,777,924,830, total_bytes=186, window_sec=30 session SESSION-516efb6b19418eff dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,004.23, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.171.55.171, start_time=1,777,932,004.23, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-b1e5a02cc52442d6 dst_ip=172.234.197.23, dst_port=22, duration_sec=0.11, end_time=1,777,942,801.398, expected_protocol=ssh, packet_count=8, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=217.154.42.110, src_port=50,172, start_time=1,777,942,801.288, tcp_flags=F,P,R,A, time_bucket=1,777,942,800, total_bytes=3,244, window_sec=30 session SESSION-340b4866c73bb623 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,917,623.655, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.168.166.198, start_time=1,777,917,623.655, tcp_flags=, time_bucket=1,777,917,600, total_bytes=164, window_sec=30 session SESSION-e10296e3fb5d5929 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,823.419, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=108.136.165.89, start_time=1,777,924,823.419, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-6e9556caba79e063 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,024.73, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.14.13.131, start_time=1,777,932,024.73, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-c7c84cd7996f6002 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,425.155, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.140.242.116, start_time=1,777,910,425.155, tcp_flags=, time_bucket=1,777,910,400, total_bytes=164, window_sec=30 session SESSION-01de71928ca60067 dst_ip=172.234.197.23, dst_port=23, duration_sec=21.54, end_time=1,777,939,227.835, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,939,206.299, tcp_flags=S, time_bucket=1,777,939,200, total_bytes=108, window_sec=30 session SESSION-7559f03ab90b10fe dst_ip=172.234.197.23, dst_port=22, duration_sec=0.14, end_time=1,777,924,859.947, expected_protocol=ssh, packet_count=6, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=2.57.122.195, src_port=29,750, start_time=1,777,924,859.807, tcp_flags=S,P,A, time_bucket=1,777,924,830, total_bytes=470, window_sec=30 session SESSION-47b5805af14336b0 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,914,631.405, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=51,804, start_time=1,777,914,631.404, tcp_flags=, time_bucket=1,777,914,630, total_bytes=286, window_sec=30 session SESSION-7be20dd218f19b64 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,434.435, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.208.182.135, start_time=1,777,910,434.435, tcp_flags=, time_bucket=1,777,910,430, total_bytes=164, window_sec=30 session SESSION-915796ddc8fa899f dst_ip=172.232.0.17, dst_port=53, duration_sec=0.01, end_time=1,777,917,601.676, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=60,530, start_time=1,777,917,601.67, tcp_flags=, time_bucket=1,777,917,600, total_bytes=313, window_sec=30 session SESSION-5ab446aa45b8ed85 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,917,624.343, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.61.208.16, start_time=1,777,917,624.343, tcp_flags=, time_bucket=1,777,917,600, total_bytes=164, window_sec=30 session SESSION-53586a790ad2ff81 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,928,424.226, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.46.114.210, start_time=1,777,928,424.226, tcp_flags=, time_bucket=1,777,928,400, total_bytes=164, window_sec=30 session SESSION-db11a112d1fa8c6c dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,921,201.406, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=55,684, start_time=1,777,921,201.405, tcp_flags=, time_bucket=1,777,921,200, total_bytes=313, window_sec=30 session SESSION-0aa4b51c4983f613 dst_ip=172.234.197.23, dst_port=23, duration_sec=26.54, end_time=1,777,917,629.497, expected_protocol=telnet, packet_count=19, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=62.100.207.220, src_port=17,769, start_time=1,777,917,602.953, tcp_flags=S, time_bucket=1,777,917,600, total_bytes=1,026, window_sec=30 session SESSION-bef343be1058d672 dst_ip=172.234.197.23, dst_port=23, duration_sec=22.1, end_time=1,777,910,458.064, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,910,435.959, tcp_flags=S, time_bucket=1,777,910,430, total_bytes=108, window_sec=30 session SESSION-c3bfbdfff334e676 dst_ip=172.234.197.23, dst_port=80, duration_sec=0.05, end_time=1,777,942,847.134, expected_protocol=http, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=64.225.46.86, src_port=44,600, start_time=1,777,942,847.088, tcp_flags=S,A, time_bucket=1,777,942,830, total_bytes=186, window_sec=30 session SESSION-2d5957381cc7285a dst_ip=172.234.197.23, dst_port=22, duration_sec=10.12, end_time=1,777,921,240.228, expected_protocol=ssh, packet_count=22, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=139.19.117.197, src_port=57,636, start_time=1,777,921,230.109, tcp_flags=F,P,A, time_bucket=1,777,921,230, total_bytes=5,643, window_sec=30 session SESSION-4379df5d472083b0 dst_ip=172.234.197.23, dst_port=22, duration_sec=2.98, end_time=1,777,914,629.84, expected_protocol=ssh, packet_count=15, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=183.109.124.136, src_port=54,090, start_time=1,777,914,626.857, tcp_flags=F,P,A, time_bucket=1,777,914,600, total_bytes=1,986, window_sec=30 session SESSION-d53f6739b2fb16ba dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,804.806, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.178.43.113, start_time=1,777,924,804.806, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-651c0a387feb2b36 dst_ip=172.232.0.17, dst_port=53, duration_sec=0.01, end_time=1,777,939,201.505, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=56,384, start_time=1,777,939,201.494, tcp_flags=, time_bucket=1,777,939,200, total_bytes=282, window_sec=30 session SESSION-19bc3032174bd58f dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,921,204.14, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.99.21.189, start_time=1,777,921,204.14, tcp_flags=, time_bucket=1,777,921,200, total_bytes=164, window_sec=30 session SESSION-7e761f390c2c6a45 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,014.368, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.163.208.132, start_time=1,777,932,014.368, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-7f58bbd1e5e9833a dst_ip=8.134.90.83, dst_port=43,722, duration_sec=15.23, end_time=1,777,914,646.472, expected_protocol=unregistered:43722, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,914,631.24, tcp_flags=F,P,A, time_bucket=1,777,914,630, total_bytes=327, window_sec=30 session SESSION-31e0a9f7f2c6c98c dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,939,214.708, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.16.33.58, start_time=1,777,939,214.708, tcp_flags=, time_bucket=1,777,939,200, total_bytes=164, window_sec=30 session SESSION-38b45dac24fe83c7 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,939,209.38, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.183.88.164, start_time=1,777,939,209.38, tcp_flags=, time_bucket=1,777,939,200, total_bytes=164, window_sec=30 session SESSION-d4cc373295c48084 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,917,618.32, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.208.226.125, start_time=1,777,917,618.32, tcp_flags=, time_bucket=1,777,917,600, total_bytes=164, window_sec=30 session SESSION-deb9fefe3c184c6b dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,939,204.087, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.84.223.242, start_time=1,777,939,204.087, tcp_flags=, time_bucket=1,777,939,200, total_bytes=164, window_sec=30 session SESSION-0397e3c5cc9b8801 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,914,634.551, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=60,878, start_time=1,777,914,634.551, tcp_flags=, time_bucket=1,777,914,630, total_bytes=313, window_sec=30 session SESSION-caf0d08503de9bad dst_ip=172.234.197.23, dst_port=443, duration_sec=0.16, end_time=1,777,942,847.667, expected_protocol=https, packet_count=14, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=64.225.46.86, src_port=60,942, start_time=1,777,942,847.512, tcp_flags=A,S,F,P,R, time_bucket=1,777,942,830, total_bytes=5,225, window_sec=30 session SESSION-6fc0d2c6a178cd6f dst_ip=80.94.92.186, dst_port=57,278, duration_sec=0.28, end_time=1,777,914,627.021, expected_protocol=unregistered:57278, packet_count=4, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,914,626.745, tcp_flags=F,P,R,A, time_bucket=1,777,914,600, total_bytes=1,403, window_sec=30 session SESSION-9936918067aaa31d dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,452.423, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.168.20.100, start_time=1,777,910,452.423, tcp_flags=, time_bucket=1,777,910,430, total_bytes=164, window_sec=30 session SESSION-7343c14de74715b1 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,914,679.826, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.222.208.125, start_time=1,777,914,679.826, tcp_flags=, time_bucket=1,777,914,660, total_bytes=164, window_sec=30 session SESSION-4ae85587df5979e5 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,939,208.265, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,939,208.265, tcp_flags=, time_bucket=1,777,939,200, total_bytes=84, window_sec=30 session SESSION-d1502acdce8f0356 dst_ip=172.234.197.23, dst_port=22, duration_sec=0.48, end_time=1,777,939,249.476, expected_protocol=ssh, packet_count=11, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=152.250.243.47, src_port=55,956, start_time=1,777,939,249.001, tcp_flags=S,P,A, time_bucket=1,777,939,230, total_bytes=2,968, window_sec=30 session SESSION-62bf54cb2530d46d dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,815.551, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.102.202.71, start_time=1,777,924,815.551, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-4ab56ae1e403b19c dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,005.934, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.217.114.99, start_time=1,777,932,005.934, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-07b9c45d89e56580 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,910,402.808, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=53,479, start_time=1,777,910,402.808, tcp_flags=, time_bucket=1,777,910,400, total_bytes=220, window_sec=30 session SESSION-e1d54cd1a928410c dst_ip=172.234.197.23, dst_port=22, duration_sec=3.06, end_time=1,777,924,820.928, expected_protocol=ssh, packet_count=3, proto=TCP, protocol_anomaly_score=0.3, protocol_violations=tcp_syn_only, protocols=TCP, src_ip=102.88.137.80, src_port=49,482, start_time=1,777,924,817.865, tcp_flags=S, time_bucket=1,777,924,800, total_bytes=222, window_sec=30 session SESSION-0c168070664edcd5 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,924,839.197, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=42,552, start_time=1,777,924,839.196, tcp_flags=, time_bucket=1,777,924,830, total_bytes=282, window_sec=30 session SESSION-9ca7ee33eecf1003 dst_ip=185.191.171.18, dst_port=15,056, duration_sec=0.02, end_time=1,777,914,682.84, expected_protocol=unregistered:15056, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=443, start_time=1,777,914,682.824, tcp_flags=F,R,A, time_bucket=1,777,914,660, total_bytes=120, window_sec=30 session SESSION-d36598d470d10a57 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,814.25, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=16.112.8.242, start_time=1,777,924,814.25, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-0bb0a36a47f50469 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,910,401.476, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=34,412, start_time=1,777,910,401.475, tcp_flags=, time_bucket=1,777,910,400, total_bytes=282, window_sec=30 session SESSION-2c000f2196b59234 dst_ip=172.234.197.23, dst_port=23, duration_sec=10.64, end_time=1,777,932,018.762, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,932,008.121, tcp_flags=S, time_bucket=1,777,932,000, total_bytes=108, window_sec=30 session SESSION-5d41550047689d95 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,942,814.839, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=35.152.95.253, start_time=1,777,942,814.839, tcp_flags=, time_bucket=1,777,942,800, total_bytes=164, window_sec=30 session SESSION-07ea0bedeeff88aa dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,003.997, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.46.85.64, start_time=1,777,932,003.997, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-ed88b7658fc49373 dst_ip=169.254.169.254, dst_port=80, duration_sec=0, end_time=1,777,910,448.459, expected_protocol=http, packet_count=10, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=37,088, start_time=1,777,910,448.455, tcp_flags=S,P,F,A, time_bucket=1,777,910,430, total_bytes=945, window_sec=30 session SESSION-a98a0d529f084042 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,928,414.603, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.198.110.242, start_time=1,777,928,414.602, tcp_flags=, time_bucket=1,777,928,400, total_bytes=164, window_sec=30 session SESSION-1638ea8c349fe3ca dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,935,614.426, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=16.28.18.156, start_time=1,777,935,614.426, tcp_flags=, time_bucket=1,777,935,600, total_bytes=164, window_sec=30 session SESSION-2876eb404febe85b dst_ip=172.234.197.23, dst_port=22, duration_sec=10.12, end_time=1,777,932,040.149, expected_protocol=ssh, packet_count=22, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=139.19.117.197, src_port=53,766, start_time=1,777,932,030.029, tcp_flags=F,P,A, time_bucket=1,777,932,030, total_bytes=5,643, window_sec=30 session SESSION-74aedfdbe8c2f457 dst_ip=172.234.197.23, duration_sec=12.82, end_time=1,777,910,428.58, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=51.44.163.117, start_time=1,777,910,415.765, tcp_flags=, time_bucket=1,777,910,400, total_bytes=492, window_sec=30 session SESSION-6aa4190c5b414a60 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,942,814.619, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=35.152.142.16, start_time=1,777,942,814.619, tcp_flags=, time_bucket=1,777,942,800, total_bytes=164, window_sec=30 session SESSION-a34b9143b6c34465 dst_ip=172.234.197.23, dst_port=443, duration_sec=1.54, end_time=1,777,921,249.563, expected_protocol=https, packet_count=73, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=40.81.230.77, src_port=52,074, start_time=1,777,921,248.022, tcp_flags=S,P,A, time_bucket=1,777,921,230, total_bytes=64,305, window_sec=30 session SESSION-0bafb0678abe748e dst_ip=2.57.122.195, dst_port=51,974, duration_sec=0.13, end_time=1,777,928,403.359, expected_protocol=unregistered:51974, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,928,403.234, tcp_flags=F,R,A, time_bucket=1,777,928,400, total_bytes=120, window_sec=30 session SESSION-50851bc306864e32 dst_ip=172.234.197.23, duration_sec=3.42, end_time=1,777,910,423.568, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.44.185.64, start_time=1,777,910,420.151, tcp_flags=, time_bucket=1,777,910,400, total_bytes=328, window_sec=30 session SESSION-ab295a07da40a445 dst_ip=172.234.197.23, duration_sec=15.91, end_time=1,777,910,451.349, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.44.163.117, start_time=1,777,910,435.442, tcp_flags=, time_bucket=1,777,910,430, total_bytes=328, window_sec=30 session SESSION-34ddfe5e51c2900e dst_ip=172.234.197.23, dst_port=23, duration_sec=8.63, end_time=1,777,932,052.374, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,932,043.742, tcp_flags=S, time_bucket=1,777,932,030, total_bytes=162, window_sec=30 session SESSION-59203d0c59133557 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,803.912, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.60.59.138, start_time=1,777,924,803.912, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-5e27061e2a401a54 dst_ip=172.234.197.23, dst_port=22, duration_sec=0.18, end_time=1,777,914,630.232, expected_protocol=ssh, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=183.109.124.136, src_port=56,418, start_time=1,777,914,630.053, tcp_flags=F,A, time_bucket=1,777,914,630, total_bytes=198, window_sec=30 session SESSION-5e3cdb0dcfbba513 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,939,201.508, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=47,979, start_time=1,777,939,201.506, tcp_flags=, time_bucket=1,777,939,200, total_bytes=313, window_sec=30 session SESSION-8251ca1362d5dfa6 dst_ip=13.107.5.93, dst_port=443, duration_sec=4.16, end_time=1,777,910,453.543, expected_protocol=https, packet_count=36, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=50,924, start_time=1,777,910,449.381, tcp_flags=S,P,F,A, time_bucket=1,777,910,430, total_bytes=17,207, window_sec=30 session SESSION-7bf1fe0b55fae423 dst_ip=172.234.197.23, dst_port=80, duration_sec=0.21, end_time=1,777,924,838.718, expected_protocol=http, packet_count=10, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=8.211.36.238, src_port=57,486, start_time=1,777,924,838.51, tcp_flags=A,C,S,F,E,P, time_bucket=1,777,924,830, total_bytes=1,166, window_sec=30 session SESSION-122bcf8305165688 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,942,804.297, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.132.3.23, start_time=1,777,942,804.297, tcp_flags=, time_bucket=1,777,942,800, total_bytes=164, window_sec=30 session SESSION-6434df2bd35d6890 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,928,401.964, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=35,059, start_time=1,777,928,401.963, tcp_flags=, time_bucket=1,777,928,400, total_bytes=313, window_sec=30 session SESSION-659e5ed568a80b02 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,448.228, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.208.161.134, start_time=1,777,910,448.228, tcp_flags=, time_bucket=1,777,910,430, total_bytes=164, window_sec=30 session SESSION-a073fac54d8bd373 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,935,615.081, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.208.239.191, start_time=1,777,935,615.081, tcp_flags=, time_bucket=1,777,935,600, total_bytes=164, window_sec=30 session SESSION-c665d673ff868205 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,928,415.051, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.163.183.211, start_time=1,777,928,415.051, tcp_flags=, time_bucket=1,777,928,400, total_bytes=164, window_sec=30 session SESSION-15ee3084143b6055 dst_ip=172.234.197.23, dst_port=443, duration_sec=15.28, end_time=1,777,942,857.648, expected_protocol=https, packet_count=20, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=85.208.98.23, src_port=63,036, start_time=1,777,942,842.367, tcp_flags=S,P,A, time_bucket=1,777,942,830, total_bytes=4,851, window_sec=30 session SESSION-f889fd617b5ce880 dst_ip=52.237.80.79, dst_port=57,658, duration_sec=15.62, end_time=1,777,914,646.984, expected_protocol=unregistered:57658, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,914,631.368, tcp_flags=F,P,A, time_bucket=1,777,914,630, total_bytes=3,687, window_sec=30 session SESSION-bb92ae5c6db7c604 dst_ip=172.234.197.23, dst_port=23, duration_sec=5.06, end_time=1,777,921,220.517, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,921,215.461, tcp_flags=S, time_bucket=1,777,921,200, total_bytes=108, window_sec=30 session SESSION-54a5347756f10dd1 dst_ip=172.234.197.23, duration_sec=13.13, end_time=1,777,917,648.053, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=13.208.226.125, start_time=1,777,917,634.922, tcp_flags=, time_bucket=1,777,917,630, total_bytes=492, window_sec=30 session SESSION-3bf7f20c4843e639 dst_ip=172.234.197.23, duration_sec=0.94, end_time=1,777,910,415.692, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.237.94.206, start_time=1,777,910,414.752, tcp_flags=, time_bucket=1,777,910,400, total_bytes=328, window_sec=30 session SESSION-1a3e464b64d7858c dst_ip=172.234.197.23, dst_port=23, duration_sec=6.76, end_time=1,777,921,212.172, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=185.96.124.49, src_port=28,405, start_time=1,777,921,205.409, tcp_flags=S, time_bucket=1,777,921,200, total_bytes=108, window_sec=30 session SESSION-65f1969ce661c9f6 dst_ip=172.234.197.23, dst_port=22, duration_sec=10.24, end_time=1,777,917,641.293, expected_protocol=ssh, packet_count=24, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=139.19.117.197, src_port=38,554, start_time=1,777,917,631.056, tcp_flags=S,P,F,A, time_bucket=1,777,917,630, total_bytes=5,791, window_sec=30 session SESSION-746ebad1abc2bed9 dst_ip=172.234.197.23, dst_port=23, duration_sec=13.87, end_time=1,777,914,681.871, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=185.96.124.49, src_port=28,405, start_time=1,777,914,668.006, tcp_flags=S, time_bucket=1,777,914,660, total_bytes=162, window_sec=30 session SESSION-389bb222e14d3e64 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,803.629, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=108.136.52.55, start_time=1,777,924,803.629, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-8059eb566bb9cebd dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,939,223.815, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.112.93.79, start_time=1,777,939,223.815, tcp_flags=, time_bucket=1,777,939,200, total_bytes=164, window_sec=30 session SESSION-5284d4ad0bf90dcc dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,921,215.027, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.222.11.193, start_time=1,777,921,215.027, tcp_flags=, time_bucket=1,777,921,200, total_bytes=164, window_sec=30 session SESSION-1ad9887b5fd0ca09 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,917,603.426, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.152.155.159, start_time=1,777,917,603.426, tcp_flags=, time_bucket=1,777,917,600, total_bytes=164, window_sec=30 session SESSION-92522dfae2b7355e dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,928,427.332, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=49,143, start_time=1,777,928,427.332, tcp_flags=, time_bucket=1,777,928,400, total_bytes=282, window_sec=30 session SESSION-037cabea38e6b578 dst_ip=172.234.197.23, dst_port=22, duration_sec=2.98, end_time=1,777,939,205.853, expected_protocol=ssh, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=103.25.47.94, src_port=41,740, start_time=1,777,939,202.871, tcp_flags=F,P,A, time_bucket=1,777,939,200, total_bytes=314, window_sec=30 session SESSION-1071c91ecf034a90 dst_ip=169.254.169.254, dst_port=80, duration_sec=0, end_time=1,777,910,448.459, expected_protocol=http, packet_count=10, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=37,094, start_time=1,777,910,448.458, tcp_flags=S,P,F,A, time_bucket=1,777,910,430, total_bytes=945, window_sec=30 session SESSION-471923202e781468 dst_ip=172.234.197.23, dst_port=80, duration_sec=10.2, end_time=1,777,921,220.129, expected_protocol=http, packet_count=10, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=5.61.209.107, src_port=46,830, start_time=1,777,921,209.933, tcp_flags=S,P,F,A, time_bucket=1,777,921,200, total_bytes=1,519, window_sec=30 session SESSION-edaf57a7bb3c4bfc dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,434.698, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.221.59.48, start_time=1,777,910,434.697, tcp_flags=, time_bucket=1,777,910,430, total_bytes=164, window_sec=30 session SESSION-66d214a140589b50 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,935,615.25, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.210.34.0, start_time=1,777,935,615.25, tcp_flags=, time_bucket=1,777,935,600, total_bytes=164, window_sec=30 session SESSION-18d640a884a5cef8 dst_ip=172.234.197.23, dst_port=22, duration_sec=17.74, end_time=1,777,928,423.639, expected_protocol=ssh, packet_count=36, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=45.148.10.141, src_port=1,754, start_time=1,777,928,405.895, tcp_flags=S,P,R,A, time_bucket=1,777,928,400, total_bytes=6,406, window_sec=30 session SESSION-e964a70d1e891ea7 dst_ip=172.234.197.23, dst_port=23, duration_sec=14.37, end_time=1,777,914,657.689, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=185.96.124.49, src_port=28,405, start_time=1,777,914,643.317, tcp_flags=S, time_bucket=1,777,914,630, total_bytes=162, window_sec=30 session SESSION-64a68821f711d60c dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,910,449.379, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=34,913, start_time=1,777,910,449.379, tcp_flags=, time_bucket=1,777,910,430, total_bytes=303, window_sec=30 session SESSION-80666f91952cf334 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,942,801.272, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=59,494, start_time=1,777,942,801.272, tcp_flags=, time_bucket=1,777,942,800, total_bytes=282, window_sec=30 session SESSION-1fb640f96227ae19 dst_ip=172.234.197.23, dst_port=22, duration_sec=4.05, end_time=1,777,914,681.944, expected_protocol=ssh, packet_count=29, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=80.94.92.186, src_port=59,866, start_time=1,777,914,677.89, tcp_flags=S,P,F,A, time_bucket=1,777,914,660, total_bytes=5,237, window_sec=30 session SESSION-adca9165dab68ffe dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,408.705, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,910,408.704, tcp_flags=, time_bucket=1,777,910,400, total_bytes=84, window_sec=30 session SESSION-ef8c55b9d51d9575 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,914,665.044, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=184.32.189.148, start_time=1,777,914,665.044, tcp_flags=, time_bucket=1,777,914,660, total_bytes=164, window_sec=30 session SESSION-95a10a201e1ff2a1 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,914,664.426, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.223.21.222, start_time=1,777,914,664.426, tcp_flags=, time_bucket=1,777,914,660, total_bytes=164, window_sec=30 session SESSION-2a11f09c3d3baf09 dst_ip=172.234.197.23, duration_sec=2.46, end_time=1,777,910,439.418, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.44.185.64, start_time=1,777,910,436.959, tcp_flags=, time_bucket=1,777,910,430, total_bytes=328, window_sec=30 session SESSION-86a0871ead7cb6c9 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,914,634.88, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.223.156.100, start_time=1,777,914,634.88, tcp_flags=, time_bucket=1,777,914,630, total_bytes=164, window_sec=30 session SESSION-7df8c8c74d765a85 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,803.888, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=16.78.84.221, start_time=1,777,924,803.888, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-f0752f4c1a946e92 dst_ip=172.234.197.23, dst_port=23, duration_sec=23.47, end_time=1,777,917,655.191, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,917,631.721, tcp_flags=S, time_bucket=1,777,917,630, total_bytes=162, window_sec=30 session SESSION-9ddf9426d4603846 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,942,801.274, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=33,812, start_time=1,777,942,801.273, tcp_flags=, time_bucket=1,777,942,800, total_bytes=313, window_sec=30 session SESSION-8ce2c27f116fd06f dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,924,801.21, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=55,249, start_time=1,777,924,801.209, tcp_flags=, time_bucket=1,777,924,800, total_bytes=282, window_sec=30 session SESSION-7738b9697df76a2a dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,025.45, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.170.47.8, start_time=1,777,932,025.45, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-6ffc1e626d10e6a9 dst_ip=172.234.197.23, dst_port=80, duration_sec=0.09, end_time=1,777,917,653.491, expected_protocol=http, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=5.61.209.107, src_port=57,606, start_time=1,777,917,653.399, tcp_flags=S,R,A, time_bucket=1,777,917,630, total_bytes=166, window_sec=30 session SESSION-2e78c1b357b65aa8 dst_ip=172.234.197.23, dst_port=22, duration_sec=10.23, end_time=1,777,924,840.333, expected_protocol=ssh, packet_count=24, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=139.19.117.197, src_port=53,658, start_time=1,777,924,830.1, tcp_flags=S,P,F,A, time_bucket=1,777,924,830, total_bytes=5,791, window_sec=30 session SESSION-92cb5a4699819d23 dst_ip=172.234.197.23, duration_sec=6.18, end_time=1,777,910,448.332, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.236.19.37, start_time=1,777,910,442.155, tcp_flags=, time_bucket=1,777,910,430, total_bytes=328, window_sec=30 session SESSION-132e302a1d559b2e dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,813.839, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.237.114.239, start_time=1,777,924,813.839, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-ba4b522eff5397c5 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,809.055, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=63.179.136.145, start_time=1,777,924,809.055, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-ce0c1d47d6f8695d dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,803.544, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.236.41.199, start_time=1,777,924,803.544, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-5b75b43b378de918 dst_ip=172.234.197.23, dst_port=22, duration_sec=0.48, end_time=1,777,928,429.943, expected_protocol=ssh, packet_count=16, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=139.19.117.197, src_port=33,114, start_time=1,777,928,429.463, tcp_flags=S,P,A, time_bucket=1,777,928,400, total_bytes=4,335, window_sec=30 session SESSION-fa7b49ba9242e638 dst_ip=172.234.197.23, dst_port=23, duration_sec=12.63, end_time=1,777,917,648.326, expected_protocol=telnet, packet_count=5, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=62.100.207.220, src_port=17,769, start_time=1,777,917,635.697, tcp_flags=S, time_bucket=1,777,917,630, total_bytes=270, window_sec=30 session SESSION-6049846f95ecde6f dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,932,001.827, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=43,098, start_time=1,777,932,001.827, tcp_flags=, time_bucket=1,777,932,000, total_bytes=282, window_sec=30 session SESSION-b2d8d88a625ca8f2 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.16, end_time=1,777,942,847.663, expected_protocol=https, packet_count=15, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=64.225.46.86, src_port=60,918, start_time=1,777,942,847.508, tcp_flags=A,S,F,P,R, time_bucket=1,777,942,830, total_bytes=5,215, window_sec=30 session SESSION-38b0e1b2c33b51ee dst_ip=80.94.92.186, dst_port=54,710, duration_sec=0.14, end_time=1,777,914,626.901, expected_protocol=unregistered:54710, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,914,626.759, tcp_flags=F,P,R,A, time_bucket=1,777,914,600, total_bytes=1,294, window_sec=30 session SESSION-190d3220fbbd2d53 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,414.237, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.208.182.135, start_time=1,777,910,414.237, tcp_flags=, time_bucket=1,777,910,400, total_bytes=164, window_sec=30 session SESSION-d1ecee8bb3658224 dst_ip=172.234.197.23, dst_port=22, duration_sec=9.51, end_time=1,777,939,239.625, expected_protocol=ssh, packet_count=6, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=139.19.117.197, src_port=52,824, start_time=1,777,939,230.113, tcp_flags=F,P,A, time_bucket=1,777,939,230, total_bytes=860, window_sec=30 session SESSION-5fec4fd1b3b69505 dst_ip=185.191.171.18, dst_port=15,056, duration_sec=2.73, end_time=1,777,914,629.592, expected_protocol=unregistered:15056, packet_count=6, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=443, start_time=1,777,914,626.864, tcp_flags=F,R,A, time_bucket=1,777,914,600, total_bytes=360, window_sec=30 session SESSION-6cbf1f2ba6ca2522 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,914,664.932, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.220.104.12, start_time=1,777,914,664.932, tcp_flags=, time_bucket=1,777,914,660, total_bytes=164, window_sec=30 session SESSION-f06b69f9d7d8ecf1 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,823.816, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=108.136.195.128, start_time=1,777,924,823.815, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-56b2373b0a8a7f63 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,921,202.639, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.103.36.26, start_time=1,777,921,202.638, tcp_flags=, time_bucket=1,777,921,200, total_bytes=164, window_sec=30 session SESSION-204d99c2e6db17b4 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,814.538, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.208.239.191, start_time=1,777,924,814.538, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-6e9053ed90c585a2 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,818.949, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.183.231.18, start_time=1,777,924,818.949, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-6fb9d242837d9f59 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,917,613.908, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=40.192.26.238, start_time=1,777,917,613.908, tcp_flags=, time_bucket=1,777,917,600, total_bytes=164, window_sec=30 session SESSION-7c80451afb37a00b dst_ip=172.234.197.23, dst_port=80, duration_sec=0.05, end_time=1,777,942,847.129, expected_protocol=http, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=64.225.46.86, src_port=44,586, start_time=1,777,942,847.082, tcp_flags=S,A, time_bucket=1,777,942,830, total_bytes=186, window_sec=30 session SESSION-10d85d85b0231c7a dst_ip=172.234.197.23, dst_port=443, duration_sec=1.95, end_time=1,777,917,626.519, expected_protocol=https, packet_count=111, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=47.128.35.181, src_port=12,112, start_time=1,777,917,624.569, tcp_flags=S,P,A, time_bucket=1,777,917,600, total_bytes=95,223, window_sec=30 session SESSION-1d51b20ceafde2e2 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,814.81, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.250.227.157, start_time=1,777,924,814.81, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-bf6e012f03c77c70 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.12, end_time=1,777,910,432.989, expected_protocol=https, packet_count=4, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=20.215.220.200, src_port=49,264, start_time=1,777,910,432.867, tcp_flags=F,P,A, time_bucket=1,777,910,430, total_bytes=295, window_sec=30 session SESSION-5536851242b79090 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,942,847.355, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=49,577, start_time=1,777,942,847.354, tcp_flags=, time_bucket=1,777,942,830, total_bytes=282, window_sec=30 session SESSION-6ca22d64e073814a dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,024.357, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.222.166.187, start_time=1,777,932,024.357, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-0ca8f56b7b77268b dst_ip=91.215.85.104, dst_port=56,728, duration_sec=28.16, end_time=1,777,921,229.768, expected_protocol=unregistered:56728, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=443, start_time=1,777,921,201.608, tcp_flags=F,A, time_bucket=1,777,921,200, total_bytes=132, window_sec=30 session SESSION-bb093d787353698f dst_ip=172.234.197.23, dst_port=22, duration_sec=10.14, end_time=1,777,939,249.871, expected_protocol=ssh, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=103.25.47.94, src_port=41,740, start_time=1,777,939,239.727, tcp_flags=F,P,A, time_bucket=1,777,939,230, total_bytes=314, window_sec=30 session SESSION-7a37a2194d3d1d78 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,814.529, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.192.25.146, start_time=1,777,924,814.529, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-e06061dea5ffdc2f dst_ip=172.234.197.23, dst_port=22, duration_sec=3.1, end_time=1,777,914,629.884, expected_protocol=ssh, packet_count=18, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=183.109.124.136, src_port=56,418, start_time=1,777,914,626.788, tcp_flags=P,A, time_bucket=1,777,914,600, total_bytes=4,440, window_sec=30 session SESSION-ae9924d78be268a1 dst_ip=172.234.197.23, dst_port=22, duration_sec=27.2, end_time=1,777,910,429.958, expected_protocol=ssh, packet_count=62, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=97.139.12.85, src_port=51,011, start_time=1,777,910,402.758, tcp_flags=P,A, time_bucket=1,777,910,400, total_bytes=6,728, window_sec=30 session SESSION-773f081d524eb4e1 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.36, end_time=1,777,917,635.763, expected_protocol=https, packet_count=4, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=20.193.146.159, src_port=57,585, start_time=1,777,917,635.406, tcp_flags=S,R,A, time_bucket=1,777,917,630, total_bytes=228, window_sec=30 session SESSION-ceef83fa436ac79d dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,432.56, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=52.47.117.18, start_time=1,777,910,432.56, tcp_flags=, time_bucket=1,777,910,430, total_bytes=164, window_sec=30 session SESSION-f903bc35e29fa576 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,917,601.669, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=46,303, start_time=1,777,917,601.667, tcp_flags=, time_bucket=1,777,917,600, total_bytes=282, window_sec=30 session SESSION-d085fa31dcf4cad3 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,824.558, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.215.156.188, start_time=1,777,924,824.557, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-2c91ccb1d746a834 dst_ip=172.234.197.23, dst_port=23, duration_sec=8.31, end_time=1,777,942,827.224, expected_protocol=telnet, packet_count=4, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,942,818.916, tcp_flags=S, time_bucket=1,777,942,800, total_bytes=216, window_sec=30 session SESSION-a645dcfb0955e108 dst_ip=172.234.197.23, dst_port=22, duration_sec=0.61, end_time=1,777,939,229.997, expected_protocol=ssh, packet_count=18, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=139.19.117.197, src_port=52,824, start_time=1,777,939,229.388, tcp_flags=S,P,A, time_bucket=1,777,939,200, total_bytes=4,931, window_sec=30 session SESSION-27d207768d887028 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,014.139, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.222.208.125, start_time=1,777,932,014.139, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-295d50a5f8c76868 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,024.744, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.130.231.216, start_time=1,777,932,024.744, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-ae83be0c19c176b9 dst_ip=103.25.47.94, duration_sec=10.14, end_time=1,777,939,249.872, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,939,239.727, tcp_flags=, time_bucket=1,777,939,230, total_bytes=252, window_sec=30 session SESSION-043dbe5cfae65cc7 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.12, end_time=1,777,910,429.563, expected_protocol=https, packet_count=19, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=85.208.96.199, src_port=11,458, start_time=1,777,910,429.446, tcp_flags=A,S,F,P,R, time_bucket=1,777,910,400, total_bytes=4,819, window_sec=30 session SESSION-139c48979ca4f059 dst_ip=172.234.197.23, dst_port=22, duration_sec=9.64, end_time=1,777,928,439.697, expected_protocol=ssh, packet_count=8, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=139.19.117.197, src_port=33,114, start_time=1,777,928,430.058, tcp_flags=F,P,A, time_bucket=1,777,928,430, total_bytes=1,456, window_sec=30 session SESSION-5b4f0e504e85ae0b dst_ip=172.234.197.23, dst_port=22, duration_sec=0, end_time=1,777,921,229.993, expected_protocol=ssh, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=139.19.117.197, src_port=57,636, start_time=1,777,921,229.993, tcp_flags=S,A, time_bucket=1,777,921,200, total_bytes=148, window_sec=30 session SESSION-e85c18eb8b3b6af4 dst_ip=172.234.197.23, dst_port=22, duration_sec=1.99, end_time=1,777,924,804.236, expected_protocol=ssh, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=102.88.137.80, src_port=1,193, start_time=1,777,924,802.247, tcp_flags=F,P,A, time_bucket=1,777,924,800, total_bytes=314, window_sec=30 session SESSION-3bb7751e0dd965f9 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,917,617.54, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.208.219.179, start_time=1,777,917,617.54, tcp_flags=, time_bucket=1,777,917,600, total_bytes=164, window_sec=30 session SESSION-e75425f1c874688e dst_ip=97.139.12.85, dst_port=51,011, duration_sec=26.73, end_time=1,777,910,459.958, expected_protocol=unregistered:51011, packet_count=74, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,910,433.228, tcp_flags=P,A, time_bucket=1,777,910,430, total_bytes=14,144, window_sec=30 session SESSION-8e9fb348d30e997e dst_ip=172.234.197.23, dst_port=22, duration_sec=10.23, end_time=1,777,935,617.557, expected_protocol=ssh, packet_count=24, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=139.19.117.197, src_port=53,416, start_time=1,777,935,607.326, tcp_flags=S,P,F,A, time_bucket=1,777,935,600, total_bytes=5,791, window_sec=30 session SESSION-2b0d31f55d829220 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,813.292, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.218.80.145, start_time=1,777,924,813.292, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-fc6dafbd712e2a43 dst_ip=172.234.197.23, dst_port=80, duration_sec=0.09, end_time=1,777,921,209.911, expected_protocol=http, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=5.61.209.107, src_port=51,681, start_time=1,777,921,209.817, tcp_flags=S,R,A, time_bucket=1,777,921,200, total_bytes=166, window_sec=30 session SESSION-73db460233491ee2 dst_ip=172.234.197.23, dst_port=23, duration_sec=0.11, end_time=1,777,942,851.219, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,942,851.113, tcp_flags=S, time_bucket=1,777,942,830, total_bytes=108, window_sec=30 session SESSION-2f2c92dc5d84b4ae dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,917,640.943, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.208.219.179, start_time=1,777,917,640.943, tcp_flags=, time_bucket=1,777,917,630, total_bytes=164, window_sec=30 session SESSION-d868c959e15f32b0 dst_ip=172.234.197.23, duration_sec=20, end_time=1,777,910,451.286, expected_protocol=unregistered:0, packet_count=8, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=15.168.142.10, start_time=1,777,910,431.289, tcp_flags=, time_bucket=1,777,910,430, total_bytes=656, window_sec=30 session SESSION-5275df68f7129eee dst_ip=172.234.197.23, dst_port=22, duration_sec=0, end_time=1,777,932,029.908, expected_protocol=ssh, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=139.19.117.197, src_port=53,766, start_time=1,777,932,029.908, tcp_flags=S,A, time_bucket=1,777,932,000, total_bytes=148, window_sec=30 session SESSION-792f7e3a256e26b1 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,814.697, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.210.163.168, start_time=1,777,924,814.697, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-b05a1c0aaefd9105 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,814.447, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.210.22.132, start_time=1,777,924,814.447, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-628de6abfaa40aff dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,914,631.406, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=47,425, start_time=1,777,914,631.406, tcp_flags=, time_bucket=1,777,914,630, total_bytes=238, window_sec=30 session SESSION-7fb00af1067fe4cb dst_ip=104.18.32.47, dst_port=443, duration_sec=4.14, end_time=1,777,910,406.952, expected_protocol=https, packet_count=16, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=40,752, start_time=1,777,910,402.809, tcp_flags=S,P,F,A, time_bucket=1,777,910,400, total_bytes=10,977, window_sec=30 session SESSION-a733c55e68828e41 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,924,801.212, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=54,872, start_time=1,777,924,801.211, tcp_flags=, time_bucket=1,777,924,800, total_bytes=313, window_sec=30 session SESSION-627ac9b8834edd4e dst_ip=169.254.169.254, dst_port=80, duration_sec=0, end_time=1,777,910,444.772, expected_protocol=http, packet_count=10, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=37,076, start_time=1,777,910,444.768, tcp_flags=S,P,F,A, time_bucket=1,777,910,430, total_bytes=945, window_sec=30 session SESSION-01e63b43f84adb78 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,914,633.011, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=60,479, start_time=1,777,914,633.01, tcp_flags=, time_bucket=1,777,914,630, total_bytes=236, window_sec=30 session SESSION-a3aeccbcef2251cc dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,834.065, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.38.121.155, start_time=1,777,924,834.065, tcp_flags=, time_bucket=1,777,924,830, total_bytes=164, window_sec=30 session SESSION-0a16d08d6b4bcdf8 dst_ip=8.134.90.83, dst_port=43,722, duration_sec=1.94, end_time=1,777,914,628.744, expected_protocol=unregistered:43722, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,914,626.808, tcp_flags=F,P,A, time_bucket=1,777,914,600, total_bytes=284, window_sec=30 session SESSION-cc253029453bba30 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.15, end_time=1,777,942,843.006, expected_protocol=https, packet_count=14, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=100.51.6.16, src_port=42,368, start_time=1,777,942,842.859, tcp_flags=S,P,F,A, time_bucket=1,777,942,830, total_bytes=3,798, window_sec=30 session SESSION-b5a91dfd62a43c09 dst_ip=185.191.171.18, dst_port=15,056, duration_sec=21.58, end_time=1,777,914,654.68, expected_protocol=unregistered:15056, packet_count=6, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=443, start_time=1,777,914,633.096, tcp_flags=F,R,A, time_bucket=1,777,914,630, total_bytes=360, window_sec=30 session SESSION-e713a621956c87b3 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.15, end_time=1,777,942,847.665, expected_protocol=https, packet_count=14, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=64.225.46.86, src_port=60,928, start_time=1,777,942,847.511, tcp_flags=A,S,F,P,R, time_bucket=1,777,942,830, total_bytes=5,131, window_sec=30 session SESSION-07e9ad7529e10475 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,813.378, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=108.136.231.22, start_time=1,777,924,813.378, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-e22aaefc09f4bf7a dst_ip=172.234.197.23, duration_sec=19.95, end_time=1,777,910,451.863, expected_protocol=unregistered:0, packet_count=14, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=15.237.94.206, start_time=1,777,910,431.914, tcp_flags=, time_bucket=1,777,910,430, total_bytes=1,148, window_sec=30 session SESSION-e3e13ed2a3a4225a dst_ip=172.234.197.23, dst_port=23, duration_sec=8.12, end_time=1,777,935,610.119, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,935,602.002, tcp_flags=S, time_bucket=1,777,935,600, total_bytes=162, window_sec=30 session SESSION-cd38d1c7365d52a5 dst_ip=172.234.197.23, duration_sec=3.28, end_time=1,777,910,424.605, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.168.20.100, start_time=1,777,910,421.326, tcp_flags=, time_bucket=1,777,910,400, total_bytes=328, window_sec=30 session SESSION-19d5178dea40ae85 dst_ip=172.234.197.23, dst_port=23, duration_sec=16.78, end_time=1,777,921,258.955, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=185.96.124.49, src_port=28,405, start_time=1,777,921,242.178, tcp_flags=S, time_bucket=1,777,921,230, total_bytes=162, window_sec=30 session SESSION-c35894b14f78ac03 dst_ip=172.234.197.23, duration_sec=16.1, end_time=1,777,910,458.437, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=15.237.218.82, start_time=1,777,910,442.334, tcp_flags=, time_bucket=1,777,910,430, total_bytes=492, window_sec=30 session SESSION-dfd28964aefccaf0 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,917,623.798, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=56.155.133.220, start_time=1,777,917,623.798, tcp_flags=, time_bucket=1,777,917,600, total_bytes=164, window_sec=30 session SESSION-803b12d6470b09b1 dst_ip=2.57.122.193, dst_port=51,006, duration_sec=17.53, end_time=1,777,917,650.505, expected_protocol=unregistered:51006, packet_count=20, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,917,632.973, tcp_flags=P,R,A, time_bucket=1,777,917,630, total_bytes=1,884, window_sec=30 session SESSION-2f060de07214c3f8 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,932,001.829, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=52,092, start_time=1,777,932,001.828, tcp_flags=, time_bucket=1,777,932,000, total_bytes=313, window_sec=30 session SESSION-9bfdba8837124530 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,814.648, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.177.121.83, start_time=1,777,924,814.648, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-cc00fec5952f101a dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,910,401.478, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=37,008, start_time=1,777,910,401.477, tcp_flags=, time_bucket=1,777,910,400, total_bytes=313, window_sec=30 session SESSION-3a28c2098ca1a813 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,935,615.23, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.210.169.237, start_time=1,777,935,615.229, tcp_flags=, time_bucket=1,777,935,600, total_bytes=164, window_sec=30 session SESSION-d287f223a3a0afb8 dst_ip=2.57.122.193, duration_sec=10.99, end_time=1,777,917,650.505, expected_protocol=unregistered:0, packet_count=7, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,917,639.513, tcp_flags=, time_bucket=1,777,917,630, total_bytes=586, window_sec=30 session SESSION-2e0197d1075c89f8 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,917,607.891, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,917,607.891, tcp_flags=, time_bucket=1,777,917,600, total_bytes=84, window_sec=30 session SESSION-91835f5b5054d860 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,005.176, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=35.152.212.28, start_time=1,777,932,005.176, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-8e08d59d6cf8db90 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,921,202.747, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.102.169.199, start_time=1,777,921,202.747, tcp_flags=, time_bucket=1,777,921,200, total_bytes=164, window_sec=30 session SESSION-33d82031f7b4c910 dst_ip=172.234.197.23, dst_port=80, duration_sec=3.36, end_time=1,777,924,838.513, expected_protocol=http, packet_count=8, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=8.211.36.238, src_port=57,478, start_time=1,777,924,835.155, tcp_flags=A,C,S,E,P,R, time_bucket=1,777,924,830, total_bytes=1,010, window_sec=30 session SESSION-2f0ecd9647db8c93 dst_ip=52.237.80.79, dst_port=57,658, duration_sec=1.93, end_time=1,777,914,628.872, expected_protocol=unregistered:57658, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,914,626.944, tcp_flags=F,P,A, time_bucket=1,777,914,600, total_bytes=3,644, window_sec=30 session SESSION-5f8815d81efcb1e8 dst_ip=172.234.197.23, duration_sec=13.43, end_time=1,777,917,651.385, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.168.16.236, start_time=1,777,917,637.956, tcp_flags=, time_bucket=1,777,917,630, total_bytes=328, window_sec=30 session SESSION-a0270d1bba4febec dst_ip=172.234.197.23, duration_sec=7.26, end_time=1,777,910,426.136, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.236.19.37, start_time=1,777,910,418.881, tcp_flags=, time_bucket=1,777,910,400, total_bytes=328, window_sec=30 session SESSION-3b0e0abc14b77a98 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,405.686, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.133.135.150, start_time=1,777,910,405.686, tcp_flags=, time_bucket=1,777,910,400, total_bytes=164, window_sec=30 session SESSION-66c5a57dd48f31eb dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,921,234.496, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=35.183.94.19, start_time=1,777,921,234.496, tcp_flags=, time_bucket=1,777,921,230, total_bytes=164, window_sec=30 session SESSION-8b53f3e71f0db9cf dst_ip=172.234.197.23, dst_port=22, duration_sec=0.2, end_time=1,777,924,860.542, expected_protocol=ssh, packet_count=9, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=209.141.47.217, src_port=49,194, start_time=1,777,924,860.341, tcp_flags=S,P,A, time_bucket=1,777,924,860, total_bytes=2,836, window_sec=30 session SESSION-fb7eadd4080c12a8 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,910,429.755, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=49,519, start_time=1,777,910,429.755, tcp_flags=, time_bucket=1,777,910,400, total_bytes=282, window_sec=30 session SESSION-9d8fb4aab3f10f88 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,921,203.295, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=56.155.133.220, start_time=1,777,921,203.295, tcp_flags=, time_bucket=1,777,921,200, total_bytes=164, window_sec=30 session SESSION-4d02b985a2572458 dst_ip=103.25.47.94, duration_sec=10.82, end_time=1,777,939,213.687, expected_protocol=unregistered:0, packet_count=3, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,939,202.872, tcp_flags=, time_bucket=1,777,939,200, total_bytes=354, window_sec=30 session SESSION-a52308fa9fbed509 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,015.035, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.160.128.24, start_time=1,777,932,015.035, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-1468bb4b6cddeb0e dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,917,625.577, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=51,740, start_time=1,777,917,625.577, tcp_flags=, time_bucket=1,777,917,600, total_bytes=282, window_sec=30 session SESSION-c0361ff9af32b902 dst_ip=172.234.197.23, dst_port=22, duration_sec=4.04, end_time=1,777,924,835.98, expected_protocol=ssh, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=102.88.137.80, src_port=1,193, start_time=1,777,924,831.942, tcp_flags=F,P,A, time_bucket=1,777,924,830, total_bytes=314, window_sec=30 session SESSION-db71adbc759cc1b4 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,008.13, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,932,008.129, tcp_flags=, time_bucket=1,777,932,000, total_bytes=84, window_sec=30 session SESSION-4565f4d936f50ce3 dst_ip=185.125.188.57, dst_port=443, duration_sec=0.39, end_time=1,777,914,633.359, expected_protocol=https, packet_count=23, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=46,864, start_time=1,777,914,632.969, tcp_flags=A,S,F,P,R, time_bucket=1,777,914,630, total_bytes=6,378, window_sec=30 session SESSION-542556b6f19945d0 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,005.79, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.217.144.41, start_time=1,777,932,005.79, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-9e7c673a5d99540e dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,914,674.691, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.70.166.151, start_time=1,777,914,674.691, tcp_flags=, time_bucket=1,777,914,660, total_bytes=164, window_sec=30 session SESSION-425e52c0748731be dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,803.635, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.103.179.97, start_time=1,777,924,803.635, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-a81bf56efaddffd4 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,939,203.815, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.85.52.86, start_time=1,777,939,203.815, tcp_flags=, time_bucket=1,777,939,200, total_bytes=164, window_sec=30 session SESSION-01024a97964a08ba dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,914,634.55, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=38,441, start_time=1,777,914,634.549, tcp_flags=, time_bucket=1,777,914,630, total_bytes=282, window_sec=30 session SESSION-9b8c8a2cfec35f35 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,935,604.273, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.245.17.120, start_time=1,777,935,604.273, tcp_flags=, time_bucket=1,777,935,600, total_bytes=164, window_sec=30 session SESSION-9c58507172c9287c dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,914,633.009, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=39,613, start_time=1,777,914,633.008, tcp_flags=, time_bucket=1,777,914,630, total_bytes=313, window_sec=30 session SESSION-2da93fdc52934209 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,921,228.085, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.225.145.88, start_time=1,777,921,228.085, tcp_flags=, time_bucket=1,777,921,200, total_bytes=164, window_sec=30 session SESSION-6ea6a6a76c5ba38f dst_ip=172.234.197.23, duration_sec=3.9, end_time=1,777,917,627.979, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=15.168.16.236, start_time=1,777,917,624.082, tcp_flags=, time_bucket=1,777,917,600, total_bytes=492, window_sec=30 session SESSION-be20938690a39323 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,939,215.203, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.64.168.38, start_time=1,777,939,215.203, tcp_flags=, time_bucket=1,777,939,200, total_bytes=164, window_sec=30 session SESSION-92bb819760b539b6 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,917,614.813, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=16.112.8.242, start_time=1,777,917,614.813, tcp_flags=, time_bucket=1,777,917,600, total_bytes=164, window_sec=30 session SESSION-28b12c7b20ab3edc dst_ip=172.234.197.23, dst_port=23, duration_sec=2.22, end_time=1,777,910,424.221, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=185.96.124.49, src_port=28,405, start_time=1,777,910,422, tcp_flags=S, time_bucket=1,777,910,400, total_bytes=108, window_sec=30 session SESSION-85ef880b066fbd42 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,014.917, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.161.134.83, start_time=1,777,932,014.917, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-05775ef3764088dc dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,453.017, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.36.167.91, start_time=1,777,910,453.017, tcp_flags=, time_bucket=1,777,910,430, total_bytes=164, window_sec=30 session SESSION-7e709c43a527ecb2 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,914,665.133, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.237.60.88, start_time=1,777,914,665.133, tcp_flags=, time_bucket=1,777,914,660, total_bytes=164, window_sec=30 session SESSION-4566e15929157d57 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,942,819.691, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.135.166.186, start_time=1,777,942,819.691, tcp_flags=, time_bucket=1,777,942,800, total_bytes=164, window_sec=30 session SESSION-036de3c73747dc4f dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,824.249, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.145.238.45, start_time=1,777,924,824.249, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-209607f0441ac60e dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,921,214.563, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.168.166.198, start_time=1,777,921,214.563, tcp_flags=, time_bucket=1,777,921,200, total_bytes=164, window_sec=30 session SESSION-12baecf6a5d87386 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,914,679.401, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=35.94.23.128, start_time=1,777,914,679.401, tcp_flags=, time_bucket=1,777,914,660, total_bytes=164, window_sec=30 session SESSION-956aebc9b9dc570f dst_ip=172.234.197.23, duration_sec=13.21, end_time=1,777,910,458.713, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=13.36.167.41, start_time=1,777,910,445.504, tcp_flags=, time_bucket=1,777,910,430, total_bytes=492, window_sec=30 session SESSION-aee286c4abe27d97 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.45, end_time=1,777,921,224.023, expected_protocol=https, packet_count=35, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=85.208.96.206, src_port=63,194, start_time=1,777,921,223.574, tcp_flags=A,S,F,P,R, time_bucket=1,777,921,200, total_bytes=25,849, window_sec=30 session SESSION-c28ba232342304c2 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,921,223.888, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=59,435, start_time=1,777,921,223.887, tcp_flags=, time_bucket=1,777,921,200, total_bytes=282, window_sec=30 session SESSION-d14f77b030f90610 dst_ip=172.232.0.17, dst_port=53, duration_sec=0.01, end_time=1,777,935,601.608, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=44,815, start_time=1,777,935,601.601, tcp_flags=, time_bucket=1,777,935,600, total_bytes=282, window_sec=30 session SESSION-ae8972082bababd0 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,921,204.457, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.208.210.98, start_time=1,777,921,204.457, tcp_flags=, time_bucket=1,777,921,200, total_bytes=164, window_sec=30 session SESSION-329deb18f002b538 dst_ip=172.234.197.23, duration_sec=25.81, end_time=1,777,910,458.876, expected_protocol=unregistered:0, packet_count=8, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=35.181.63.250, start_time=1,777,910,433.071, tcp_flags=, time_bucket=1,777,910,430, total_bytes=656, window_sec=30 session SESSION-771fc6fcffc7e47d dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,921,201.404, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=43,753, start_time=1,777,921,201.403, tcp_flags=, time_bucket=1,777,921,200, total_bytes=282, window_sec=30 session SESSION-f1f59f32071a0d91 dst_ip=172.234.197.23, dst_port=22, duration_sec=4.95, end_time=1,777,921,208.541, expected_protocol=ssh, packet_count=25, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=45.148.10.121, src_port=34,720, start_time=1,777,921,203.586, tcp_flags=S,P,F,A, time_bucket=1,777,921,200, total_bytes=5,821, window_sec=30 session SESSION-a6007f214ae15042 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,804.017, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.102.169.199, start_time=1,777,924,804.017, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-0734ed1cc466fb4b dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,921,202.439, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.103.179.97, start_time=1,777,921,202.439, tcp_flags=, time_bucket=1,777,921,200, total_bytes=164, window_sec=30 session SESSION-7abd0ef698f14ccf dst_ip=172.234.197.23, dst_port=443, duration_sec=0.32, end_time=1,777,928,427.408, expected_protocol=https, packet_count=46, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=85.208.96.207, src_port=60,806, start_time=1,777,928,427.086, tcp_flags=A,S,F,P,R, time_bucket=1,777,928,400, total_bytes=34,272, window_sec=30 session SESSION-c5efbab00a540c31 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,429.07, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.36.167.41, start_time=1,777,910,429.07, tcp_flags=, time_bucket=1,777,910,400, total_bytes=164, window_sec=30 session SESSION-2f02b26b180e1182 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,820.799, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.108.51.95, start_time=1,777,924,820.799, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-bc2dedd024136a50 dst_ip=102.88.137.80, duration_sec=4.04, end_time=1,777,924,835.98, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,924,831.942, tcp_flags=, time_bucket=1,777,924,830, total_bytes=252, window_sec=30 session SESSION-422d046c4fc2e241 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,942,804.806, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.210.163.168, start_time=1,777,942,804.806, tcp_flags=, time_bucket=1,777,942,800, total_bytes=164, window_sec=30 session SESSION-d61c211cfec87108 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.57, end_time=1,777,942,848.073, expected_protocol=https, packet_count=92, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=64.225.46.86, src_port=60,910, start_time=1,777,942,847.504, tcp_flags=S,P,A, time_bucket=1,777,942,830, total_bytes=91,485, window_sec=30 session SESSION-4c01e287087035ed dst_ip=172.234.197.23, dst_port=22, duration_sec=5.37, end_time=1,777,917,628.872, expected_protocol=ssh, packet_count=28, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=2.57.122.193, src_port=51,006, start_time=1,777,917,623.499, tcp_flags=S,P,A, time_bucket=1,777,917,600, total_bytes=5,554, window_sec=30 session SESSION-cfe575362883fc43 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.37, end_time=1,777,942,847.461, expected_protocol=https, packet_count=42, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=64.225.46.86, src_port=60,900, start_time=1,777,942,847.089, tcp_flags=S,P,A, time_bucket=1,777,942,830, total_bytes=34,515, window_sec=30 session SESSION-27f5dcafc2dc6f73 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,803.808, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.102.9.236, start_time=1,777,924,803.808, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-c2271f175dee6912 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,928,401.962, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=32,779, start_time=1,777,928,401.961, tcp_flags=, time_bucket=1,777,928,400, total_bytes=282, window_sec=30 session SESSION-7c26eb712e4bf36e dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,808.723, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,924,808.723, tcp_flags=, time_bucket=1,777,924,800, total_bytes=84, window_sec=30 session SESSION-6b584ca1da1802fc dst_ip=172.234.197.23, dst_port=443, duration_sec=0.91, end_time=1,777,924,839.634, expected_protocol=https, packet_count=48, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=8.211.36.238, src_port=21,454, start_time=1,777,924,838.72, tcp_flags=A,C,S,F,E,P,R, time_bucket=1,777,924,830, total_bytes=30,845, window_sec=30 session SESSION-da59cc1f02792f56 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,421.897, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.237.218.82, start_time=1,777,910,421.897, tcp_flags=, time_bucket=1,777,910,400, total_bytes=164, window_sec=30 session SESSION-6afe3811a8b79539 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,942,805.084, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.210.22.132, start_time=1,777,942,805.084, tcp_flags=, time_bucket=1,777,942,800, total_bytes=164, window_sec=30 session SESSION-d3870761405347e3 dst_ip=172.234.197.23, dst_port=23, duration_sec=1.66, end_time=1,777,917,606.877, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=185.96.124.49, src_port=28,405, start_time=1,777,917,605.221, tcp_flags=S, time_bucket=1,777,917,600, total_bytes=108, window_sec=30 session SESSION-bead7fd6f40d983e dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,924,804.896, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=16.112.121.172, start_time=1,777,924,804.896, tcp_flags=, time_bucket=1,777,924,800, total_bytes=164, window_sec=30 session SESSION-e616c2a864857b4d dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,914,634.551, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=45,128, start_time=1,777,914,634.55, tcp_flags=, time_bucket=1,777,914,630, total_bytes=282, window_sec=30 session SESSION-3ad974da70c969ac dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,935,604.024, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.245.10.130, start_time=1,777,935,604.024, tcp_flags=, time_bucket=1,777,935,600, total_bytes=164, window_sec=30 session SESSION-9ce01715d57f4094 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,426.521, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=35.181.63.250, start_time=1,777,910,426.521, tcp_flags=, time_bucket=1,777,910,400, total_bytes=164, window_sec=30 session SESSION-1675a535184b3dfd dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,910,424.549, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=15.168.142.10, start_time=1,777,910,424.549, tcp_flags=, time_bucket=1,777,910,400, total_bytes=164, window_sec=30 session SESSION-b4fe1fbd17fa3172 dst_ip=102.88.137.80, duration_sec=18.68, end_time=1,777,924,820.928, expected_protocol=unregistered:0, packet_count=5, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,924,802.247, tcp_flags=, time_bucket=1,777,924,800, total_bytes=558, window_sec=30 session SESSION-34c94543e0f1fd4e dst_ip=172.234.197.23, dst_port=80, duration_sec=0.2, end_time=1,777,917,653.821, expected_protocol=http, packet_count=7, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=5.61.209.107, src_port=58,202, start_time=1,777,917,653.622, tcp_flags=S,P,A, time_bucket=1,777,917,630, total_bytes=1,321, window_sec=30 session SESSION-6c6c255a1bf42f17 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.14, end_time=1,777,914,653.512, expected_protocol=https, packet_count=3, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=31.148.99.199, src_port=51,003, start_time=1,777,914,653.37, tcp_flags=S,R,A, time_bucket=1,777,914,630, total_bytes=166, window_sec=30 session SESSION-8eead4d9a0b2014a dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,942,804.994, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.208.11.119, start_time=1,777,942,804.994, tcp_flags=, time_bucket=1,777,942,800, total_bytes=164, window_sec=30 session SESSION-150ad8f85b999fca dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,942,803.791, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.102.71.52, start_time=1,777,942,803.791, tcp_flags=, time_bucket=1,777,942,800, total_bytes=164, window_sec=30 session SESSION-0f368e0b1edaf08f dst_ip=172.234.197.23, dst_port=80, duration_sec=15.32, end_time=1,777,942,857.648, expected_protocol=http, packet_count=13, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=85.208.98.23, src_port=63,474, start_time=1,777,942,842.326, tcp_flags=S,P,A, time_bucket=1,777,942,830, total_bytes=1,479, window_sec=30 session SESSION-ea0a0418d64852f0 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,003.732, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=43.199.73.142, start_time=1,777,932,003.732, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-231366a57d03985d dst_ip=172.234.197.23, dst_port=443, duration_sec=0.77, end_time=1,777,910,403.641, expected_protocol=https, packet_count=47, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=20.215.220.200, src_port=49,264, start_time=1,777,910,402.868, tcp_flags=S,P,A, time_bucket=1,777,910,400, total_bytes=33,149, window_sec=30 session SESSION-e704d395f9439301 dst_ip=172.234.197.23, dst_port=22, duration_sec=0.35, end_time=1,777,924,860.428, expected_protocol=ssh, packet_count=9, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=2.57.122.195, src_port=29,750, start_time=1,777,924,860.075, tcp_flags=P,A, time_bucket=1,777,924,860, total_bytes=3,678, window_sec=30 session SESSION-7b6d9b1ca17c8253 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,932,005.933, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=56.68.96.189, start_time=1,777,932,005.933, tcp_flags=, time_bucket=1,777,932,000, total_bytes=164, window_sec=30 session SESSION-1d5de1c65f881ace dst_ip=172.234.197.23, dst_port=22, duration_sec=3.16, end_time=1,777,914,629.95, expected_protocol=ssh, packet_count=21, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=183.109.124.136, src_port=55,236, start_time=1,777,914,626.788, tcp_flags=F,P,A, time_bucket=1,777,914,600, total_bytes=4,638, window_sec=30 session SESSION-9850fe0538c0f605 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,910,449.379, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=44,783, start_time=1,777,910,449.379, tcp_flags=, time_bucket=1,777,910,430, total_bytes=262, window_sec=30 tls_sni tls_sni:api.snapcraft.io sni=api.snapcraft.io tls_sni tls_sni:chatgpt.com sni=chatgpt.com tls_sni tls_sni:default.exp-tas.com sni=default.exp-tas.com tls_sni tls_sni:172-234-197-23.ip.linodeusercontent.com sni=172-234-197-23.ip.linodeusercontent.com