Kind ID Labels Position asn asn:138950 asn=138,950, org=Jiangsu Wuxi International IDC network asn asn:45552 asn=45,552, org=METASERV COMPANY LIMITED asn asn:5089 asn=5,089, org=Virgin Media asn asn:62240 asn=62,240, org=Clouvider Limited asn asn:62068 asn=62,068, org=SpectraIP B.V. asn asn:20473 asn=20,473, org=The Constant Company, LLC asn asn:215292 asn=215,292, org=Gravhosting LLC asn asn:16509 asn=16,509, org=Amazon.com, Inc. asn asn:12479 asn=12,479, org=Orange Espagne SA asn asn:36007 asn=36,007, org=Kamatera, Inc. asn asn:49532 asn=49,532, org=Eonix Corporation asn asn:13335 asn=13,335, org=Cloudflare, Inc. asn asn:396982 asn=396,982, org=Google LLC asn asn:6939 asn=6,939, org=Hurricane Electric LLC asn asn:12876 asn=12,876, org=Scaleway S.a.s. asn asn:15557 asn=15,557, org=Societe Francaise Du Radiotelephone - SFR SA asn asn:40676 asn=40,676, org=Psychz Networks asn asn:138915 asn=138,915, org=Kaopu Cloud HK Limited asn asn:209588 asn=209,588, org=Flyservers S.A. asn asn:45102 asn=45,102, org=Alibaba US Technology Co., Ltd. asn asn:14061 asn=14,061, org=DigitalOcean, LLC asn asn:18229 asn=18,229, org=CtrlS asn asn:135905 asn=135,905, org=VIETNAM POSTS AND TELECOMMUNICATIONS GROUP asn asn:208137 asn=208,137, org=Feo Prest SRL asn asn:24086 asn=24,086, org=Viettel Corporation asn asn:398324 asn=398,324, org=Censys, Inc. asn asn:47890 asn=47,890, org=Unmanaged Ltd asn asn:55720 asn=55,720, org=Gigabit Hosting Sdn Bhd asn asn:48090 asn=48,090, org=Techoff Srv Limited asn asn:12741 asn=12,741, org=Netia SA asn asn:11042 asn=11,042, org=NETWORK TRANSIT HOLDINGS LLC asn asn:136557 asn=136,557, org=Host Universal Pty Ltd asn asn:60068 asn=60,068, org=Datacamp Limited asn asn:14670 asn=14,670, org=WHG Hosting Services Ltd asn asn:51784 asn=51,784, org=X-City Ltd. asn asn:4134 asn=4,134, org=Chinanet asn asn:32475 asn=32,475, org=Internap Holding LLC asn asn:8075 asn=8,075, org=Microsoft Corporation asn asn:35612 asn=35,612, org=EOLO S.p.A. asn asn:14618 asn=14,618, org=Amazon.com, Inc. asn asn:140443 asn=140,443, org=PT Herza Digital Indonesia asn asn:48721 asn=48,721, org=Flyservers S.A. asn asn:25211 asn=25,211, org=Euro Crypt EOOD asn asn:57695 asn=57,695, org=Misaka Network, Inc. asn asn:16276 asn=16,276, org=OVH SAS asn asn:45753 asn=45,753, org=Netsec Limited asn asn:17816 asn=17,816, org=China Unicom IP network China169 Guangdong province asn asn:63949 asn=63,949, org=Akamai Connected Cloud asn asn:4766 asn=4,766, org=Korea Telecom asn asn:1103 asn=1,103, org=SURF B.V. asn asn:215607 asn=215,607, org=dataforest GmbH asn asn:10297 asn=10,297, org=eNET Inc. asn asn:35819 asn=35,819, org=Etihad Etisalat, a joint stock company asn asn:51396 asn=51,396, org=Pfcloud UG (haftungsbeschrankt) behavior_group BSG-BEACON-f6c2b3d0e42d behavior=BEACON, confidence=0.75, detection_rationale=byte_cv=0.06 (≤0.6); count=64, dst_ip=172.232.0.17, dst_port=53, interval_cv=1.153, mean_interval=1,543.3, member_count=64, src_ip=172.234.197.23, summary=Beacon: 172.234.197.23 → 172.232.0.17:53, 64 sessions, interval CV=1.15, mean 295B, total_bytes=18,855, total_packets=128, unique_hosts=0, unique_ports=0 behavior_group BSG-BEACON-4cc991105c7b behavior=BEACON, confidence=0.9, detection_rationale=timing_cv=0.00 (≤0.5); byte_cv=0.00 (≤0.6), dst_ip=172.234.197.23, dst_port=22, interval_cv=0, mean_interval=0, member_count=3, src_ip=92.103.134.183, summary=Beacon: 92.103.134.183 → 172.234.197.23:22, 3 sessions, interval CV=0.00, mean 4973B, total_bytes=14,919, total_packets=75, unique_hosts=0, unique_ports=0 behavior_group BSG-BEACON-c3ca410e3f87 behavior=BEACON, confidence=0.9, detection_rationale=timing_cv=0.00 (≤0.5); byte_cv=0.10 (≤0.6), dst_ip=172.234.197.23, dst_port=22, interval_cv=0, mean_interval=0, member_count=3, src_ip=207.182.128.157, summary=Beacon: 207.182.128.157 → 172.234.197.23:22, 3 sessions, interval CV=0.00, mean 691B, total_bytes=2,072, total_packets=28, unique_hosts=0, unique_ports=0 behavior_group BSG-BEACON-a8a8c3c8a37f behavior=BEACON, confidence=0.95, detection_rationale=timing_cv=0.00 (≤0.5); byte_cv=0.00 (≤0.6); count=14, dst_ip=172.234.197.23, dst_port=0, interval_cv=0, mean_interval=7,200, member_count=14, src_ip=103.155.16.117, summary=Beacon: 103.155.16.117 → 172.234.197.23:0, 14 sessions, interval CV=0.00, mean 84B, total_bytes=1,176, total_packets=28, unique_hosts=0, unique_ports=0 behavior_group BSG-BEACON-d1bebcf19377 behavior=BEACON, confidence=0.65, detection_rationale=byte_cv=0.35 (≤0.6), dst_ip=172.234.197.23, dst_port=23, interval_cv=0.909, mean_interval=4,200, member_count=7, src_ip=104.131.68.134, summary=Beacon: 104.131.68.134 → 172.234.197.23:23, 7 sessions, interval CV=0.91, mean 154B, total_bytes=1,080, total_packets=20, unique_hosts=0, unique_ports=0 behavior_group BSG-FAILED_HANDSHAKE-2d36e4ad4c31 behavior=FAILED_HANDSHAKE, confidence=0.6, detection_rationale=failed_sessions=6, dst_ip=172.234.197.23, member_count=6, src_ip=103.231.8.51, summary=Failed handshakes: 103.231.8.51 → 172.234.197.23, 6 attempts on 1 ports, total_bytes=2,700, total_packets=50, unique_hosts=0, unique_ports=1 behavior_group BSG-BEACON-235a80007b00 behavior=BEACON, confidence=0.9, detection_rationale=timing_cv=0.00 (≤0.5); byte_cv=0.04 (≤0.6), dst_ip=172.234.197.23, dst_port=22, interval_cv=0, mean_interval=0, member_count=3, src_ip=183.109.124.136, summary=Beacon: 183.109.124.136 → 172.234.197.23:22, 3 sessions, interval CV=0.00, mean 5105B, total_bytes=15,315, total_packets=81, unique_hosts=0, unique_ports=0 behavior_group BSG-FAILED_HANDSHAKE-de4a8c24b2b9 behavior=FAILED_HANDSHAKE, confidence=0.6, detection_rationale=failed_sessions=7, dst_ip=172.234.197.23, member_count=7, src_ip=223.25.245.241, summary=Failed handshakes: 223.25.245.241 → 172.234.197.23, 7 attempts on 1 ports, total_bytes=1,566, total_packets=29, unique_hosts=0, unique_ports=1 behavior_group BSG-FAILED_HANDSHAKE-6ef7b5f21905 behavior=FAILED_HANDSHAKE, confidence=0.6, detection_rationale=failed_sessions=4, dst_ip=172.234.197.23, member_count=4, src_ip=45.148.120.187, summary=Failed handshakes: 45.148.120.187 → 172.234.197.23, 4 attempts on 1 ports, total_bytes=1,836, total_packets=34, unique_hosts=0, unique_ports=1 behavior_group BSG-FAILED_HANDSHAKE-0375d47e092c behavior=FAILED_HANDSHAKE, confidence=0.6, detection_rationale=failed_sessions=3, dst_ip=172.234.197.23, member_count=3, src_ip=202.182.97.77, summary=Failed handshakes: 202.182.97.77 → 172.234.197.23, 3 attempts on 1 ports, total_bytes=1,080, total_packets=20, unique_hosts=0, unique_ports=1 behavior_group BSG-FAILED_HANDSHAKE-dc6c80aba36d behavior=FAILED_HANDSHAKE, confidence=0.6, detection_rationale=failed_sessions=7, dst_ip=172.234.197.23, member_count=7, src_ip=104.131.68.134, summary=Failed handshakes: 104.131.68.134 → 172.234.197.23, 7 attempts on 1 ports, total_bytes=1,080, total_packets=20, unique_hosts=0, unique_ports=1 behavior_group BSG-BEACON-85a7448270f3 behavior=BEACON, confidence=0.9, detection_rationale=timing_cv=0.00 (≤0.5); byte_cv=0.11 (≤0.6), dst_ip=172.234.197.23, dst_port=22, interval_cv=0, mean_interval=0, member_count=3, src_ip=59.6.77.80, summary=Beacon: 59.6.77.80 → 172.234.197.23:22, 3 sessions, interval CV=0.00, mean 5695B, total_bytes=17,085, total_packets=102, unique_hosts=0, unique_ports=0 behavior_group BSG-BEACON-d6966615aa9d behavior=BEACON, confidence=0.9, detection_rationale=timing_cv=0.00 (≤0.5); byte_cv=0.00 (≤0.6), dst_ip=172.234.197.23, dst_port=3,128, interval_cv=0, mean_interval=0, member_count=3, src_ip=66.132.172.133, summary=Beacon: 66.132.172.133 → 172.234.197.23:3128, 3 sessions, interval CV=0.00, mean 148B, total_bytes=444, total_packets=6, unique_hosts=0, unique_ports=0 behavior_group BSG-BEACON-55399ea83184 behavior=BEACON, confidence=0.75, detection_rationale=byte_cv=0.37 (≤0.6); count=14, dst_ip=172.234.197.23, dst_port=23, interval_cv=0.898, mean_interval=2,771.5, member_count=14, src_ip=199.19.73.10, summary=Beacon: 199.19.73.10 → 172.234.197.23:23, 14 sessions, interval CV=0.90, mean 143B, total_bytes=1,998, total_packets=37, unique_hosts=0, unique_ports=0 behavior_group BSG-FAILED_HANDSHAKE-55a0c77c1470 behavior=FAILED_HANDSHAKE, confidence=0.8, detection_rationale=failed_sessions=14; many_failures (≥10), dst_ip=172.234.197.23, member_count=14, src_ip=199.19.73.10, summary=Failed handshakes: 199.19.73.10 → 172.234.197.23, 14 attempts on 1 ports, total_bytes=1,998, total_packets=37, unique_hosts=0, unique_ports=1 behavior_group BSG-DATA_EXFIL-a6f94a201ef9 behavior=DATA_EXFIL, confidence=0.85, detection_rationale=total_bytes=132068; large_volume (≥100KB); high_rate (240124 B/s), dst_ip=, member_count=1, src_ip=216.73.217.0, summary=Exfil suspect: 216.73.217.0 → 1 destinations, 132,068B total, max 132,068B/session, total_bytes=132,068, total_packets=118, unique_hosts=1, unique_ports=0 behavior_group BSG-FAILED_HANDSHAKE-88519f6d9a5c behavior=FAILED_HANDSHAKE, confidence=0.6, detection_rationale=failed_sessions=3, dst_ip=172.234.197.23, member_count=3, src_ip=66.132.172.133, summary=Failed handshakes: 66.132.172.133 → 172.234.197.23, 3 attempts on 1 ports, total_bytes=444, total_packets=6, unique_hosts=0, unique_ports=1 behavior_group BSG-BEACON-0ab20e8498f9 behavior=BEACON, confidence=0.65, detection_rationale=byte_cv=0.55 (≤0.6), dst_ip=172.234.197.23, dst_port=23, interval_cv=0.983, mean_interval=1,805, member_count=7, src_ip=223.25.245.241, summary=Beacon: 223.25.245.241 → 172.234.197.23:23, 7 sessions, interval CV=0.98, mean 224B, total_bytes=1,566, total_packets=29, unique_hosts=0, unique_ports=0 behavior_group BSG-FAILED_HANDSHAKE-6f0b8ce6b9d1 behavior=FAILED_HANDSHAKE, confidence=0.6, detection_rationale=failed_sessions=3, dst_ip=172.234.197.23, member_count=3, src_ip=205.251.153.87, summary=Failed handshakes: 205.251.153.87 → 172.234.197.23, 3 attempts on 1 ports, total_bytes=540, total_packets=10, unique_hosts=0, unique_ports=1 behavior_group BSG-BEACON-c1f7024c9c78 behavior=BEACON, confidence=0.65, detection_rationale=byte_cv=0.53 (≤0.6), dst_ip=172.234.197.23, dst_port=23, interval_cv=1.199, mean_interval=1,446, member_count=6, src_ip=103.231.8.51, summary=Beacon: 103.231.8.51 → 172.234.197.23:23, 6 sessions, interval CV=1.20, mean 450B, total_bytes=2,700, total_packets=50, unique_hosts=0, unique_ports=0 dns_name dns:172-234-197-23.ip.linodeusercontent.com.members.linode.com answer_count=0, qname=172-234-197-23.ip.linodeusercontent.com.members.linode.com dns_name dns:172-234-197-23.ip.linodeusercontent.com answer_count=0, qname=172-234-197-23.ip.linodeusercontent.com flow flow:25d8c6d02380 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=155.138.157.163 flow flow:5772c3824a52 bytes=3,535, dst_ip=172.234.197.23, dst_port=443, pkts=10, proto=tcp, src_ip=212.102.40.218 flow flow:be65c34d6aac bytes=3,502, dst_ip=172.234.197.23, dst_port=443, pkts=10, proto=tcp, src_ip=45.148.10.67 flow flow:06e98b9f0f09 bytes=330, dst_ip=172.234.197.23, dst_port=80, pkts=5, proto=tcp, src_ip=176.224.10.34 flow flow:23d23bb11c86 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:3f44fc234c1e bytes=198, dst_ip=172.234.197.23, dst_port=80, pkts=3, proto=tcp, src_ip=90.160.103.93 flow flow:3d5d949b7f7a bytes=396, dst_ip=14.225.7.70, dst_port=40,662, pkts=6, proto=tcp, src_ip=172.234.197.23 flow flow:7c0c6daa6f5f bytes=600, dst_ip=154.210.208.214, dst_port=0, pkts=6, proto=icmp, src_ip=172.234.197.23 flow flow:4ea7f9382c85 bytes=6,374, dst_ip=172.234.197.23, dst_port=22, pkts=36, proto=tcp, src_ip=2.57.122.197 flow flow:2d3ad9f5d2ea bytes=2,730, dst_ip=213.209.159.56, dst_port=18,817, pkts=21, proto=tcp, src_ip=172.234.197.23 flow flow:6f1673db240d bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:b812d14fad43 bytes=540, dst_ip=172.234.197.23, dst_port=23, pkts=10, proto=tcp, src_ip=103.178.152.76 flow flow:b06b1c585621 bytes=4,148, dst_ip=172.234.197.23, dst_port=22, pkts=15, proto=tcp, src_ip=45.148.10.157 flow flow:e9825d392316 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=142.93.57.83 flow flow:60e05b996d3f bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:620df8f25ecc bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=3.12.165.38 flow flow:8354ce040afb bytes=1,057, dst_ip=172.234.197.23, dst_port=443, pkts=6, proto=tcp, src_ip=34.201.143.237 flow flow:96459a512e4e bytes=148, dst_ip=172.234.197.23, dst_port=3,128, pkts=2, proto=tcp, src_ip=66.132.172.133 flow flow:473968a77d9e bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=44.255.175.112 flow flow:83ef080667af bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:7f8541140dd5 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.129.45.206 flow flow:b210aec4290f bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.144.250.137 flow flow:c88a35538059 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:73036f7bf502 bytes=338, dst_ip=2.57.121.112, dst_port=0, pkts=3, proto=icmp, src_ip=172.234.197.23 flow flow:1d43e6997263 bytes=656, dst_ip=172.234.197.23, dst_port=0, pkts=8, proto=icmp, src_ip=18.118.14.61 flow flow:bf2380bb412d bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=199.19.73.10 flow flow:592cc2235918 bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:2b6ff41e4d31 bytes=3,515, dst_ip=172.234.197.23, dst_port=443, pkts=10, proto=tcp, src_ip=212.102.40.218 flow flow:cc2b092c7161 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:0519982c6f95 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=44.248.141.231 flow flow:b91a9a4bb02e bytes=164, dst_ip=2.57.122.192, dst_port=0, pkts=2, proto=icmp, src_ip=172.234.197.23 flow flow:bb48d63b9ea6 bytes=1,928, dst_ip=213.209.159.56, dst_port=0, pkts=12, proto=icmp, src_ip=172.234.197.23 flow flow:59292e04c5ff bytes=143, dst_ip=172.234.197.23, dst_port=80, pkts=2, proto=tcp, src_ip=141.98.83.48 flow flow:d752fd809f35 bytes=852, dst_ip=45.148.10.157, dst_port=51,610, pkts=8, proto=tcp, src_ip=172.234.197.23 flow flow:dabc910861b2 bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:e7cfdb7891f0 bytes=216, dst_ip=172.234.197.23, dst_port=23, pkts=4, proto=tcp, src_ip=184.154.95.157 flow flow:b4c04bde9407 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=37.59.254.152 flow flow:4e3cc4246aad bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=54.201.244.199 flow flow:343aa3b91983 bytes=198, dst_ip=104.29.137.154, dst_port=26,835, pkts=3, proto=tcp, src_ip=172.234.197.23 flow flow:1dd4366e97c1 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:5b9b8f9bdcd3 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=18.188.178.178 flow flow:e2e0d975e868 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=35.95.113.227 flow flow:e2ebb38fcff9 bytes=132, dst_ip=112.121.177.138, dst_port=36,722, pkts=2, proto=tcp, src_ip=172.234.197.23 flow flow:79890e6731f5 bytes=2,258, dst_ip=172.234.197.23, dst_port=22, pkts=21, proto=tcp, src_ip=45.148.10.157 flow flow:d9dbbc94e71d bytes=4,701, dst_ip=172.234.197.23, dst_port=22, pkts=23, proto=tcp, src_ip=45.153.34.112 flow flow:b14a9254298d bytes=540, dst_ip=172.234.197.23, dst_port=23, pkts=10, proto=tcp, src_ip=45.148.120.187 flow flow:4a3c2882eba2 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=223.25.245.241 flow flow:2fe1afa0cba4 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=199.19.73.10 flow flow:d2c8fbf63a2d bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.12.102.186 flow flow:29b5f241e3c7 bytes=984, dst_ip=172.234.197.23, dst_port=0, pkts=12, proto=icmp, src_ip=18.118.158.197 flow flow:cb975fcc09e8 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:b86ecd15fdb6 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:0bff4148c1af bytes=4,973, dst_ip=172.234.197.23, dst_port=22, pkts=25, proto=tcp, src_ip=183.109.124.136 flow flow:b57f457e4637 bytes=222, dst_ip=172.234.197.23, dst_port=12,443, pkts=3, proto=tcp, src_ip=13.218.167.231 flow flow:9b63ba65fb29 bytes=1,416, dst_ip=172.234.197.23, dst_port=80, pkts=11, proto=tcp, src_ip=45.148.10.67 flow flow:dc9ddd9eec45 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.21.249.220 flow flow:382a306de69d bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=223.25.245.241 flow flow:96faeceb338c bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:328ea222ca5f bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=199.19.73.10 flow flow:fcb299489e59 bytes=5,369, dst_ip=172.234.197.23, dst_port=22, pkts=31, proto=tcp, src_ip=183.109.124.136 flow flow:242a8c294ffc bytes=7,498, dst_ip=172.234.197.23, dst_port=22, pkts=44, proto=tcp, src_ip=2.57.121.112 flow flow:93bd94ca66f7 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.225.29.67 flow flow:3d355f6d1f2b bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.138.137.33 flow flow:bf0ef23cd03b bytes=3,703, dst_ip=172.234.197.23, dst_port=22, pkts=16, proto=tcp, src_ip=81.161.239.14 flow flow:995ddea619ca bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.15.37.246 flow flow:6a0f72a933ec bytes=5,896, dst_ip=172.234.197.23, dst_port=22, pkts=31, proto=tcp, src_ip=2.57.122.190 flow flow:e34782900b68 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:42f58bdbe8b4 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.225.147.241 flow flow:f7ad7d3c8295 bytes=170, dst_ip=172.234.197.23, dst_port=443, pkts=3, proto=tcp, src_ip=104.140.188.2 flow flow:cab1773a9a8f bytes=4,973, dst_ip=172.234.197.23, dst_port=22, pkts=25, proto=tcp, src_ip=183.109.124.136 flow flow:c9ced4a27bdf bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=34.216.30.208 flow flow:4504041555eb bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:f767166a0bf2 bytes=5,470, dst_ip=172.234.197.23, dst_port=22, pkts=26, proto=tcp, src_ip=213.209.159.56 flow flow:9dcd37d56f71 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:c4d8160f4388 bytes=370, dst_ip=172.234.197.23, dst_port=55,008, pkts=5, proto=tcp, src_ip=176.65.132.218 flow flow:29af9e84984e bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:35b7376e0285 bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=3.129.45.206 flow flow:775bf393415e bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.224.50.212 flow flow:80cf78917ad8 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=3.150.124.201 flow flow:e6fc0c2e83bc bytes=184, dst_ip=172.234.197.23, dst_port=22, pkts=2, proto=tcp, src_ip=47.83.153.56 flow flow:5c3c62fbab80 bytes=972, dst_ip=172.234.197.23, dst_port=23, pkts=18, proto=tcp, src_ip=78.159.156.37 flow flow:5c840102f6fa bytes=594, dst_ip=172.234.197.23, dst_port=23, pkts=11, proto=tcp, src_ip=103.178.152.76 flow flow:1fd6896d90e9 bytes=236, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:f1485b544271 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:1e6a92fb0840 bytes=264, dst_ip=90.160.103.93, dst_port=39,517, pkts=4, proto=tcp, src_ip=172.234.197.23 flow flow:87337de23f71 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:51218b5d9d02 bytes=984, dst_ip=172.234.197.23, dst_port=0, pkts=12, proto=icmp, src_ip=3.22.95.139 flow flow:19be9ff9ae6c bytes=671, dst_ip=172.234.197.23, dst_port=443, pkts=9, proto=tcp, src_ip=104.28.234.78 flow flow:5489c677823b bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:319e4d0eda79 bytes=4,957, dst_ip=172.234.197.23, dst_port=22, pkts=25, proto=tcp, src_ip=213.209.159.228 flow flow:5e6a541b292b bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:5e47ddf24cf7 bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:df2c1c3c0f4e bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=199.19.73.10 flow flow:d3e3175b0e76 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:7e33fbe8a1db bytes=120, dst_ip=92.118.39.23, dst_port=18,010, pkts=2, proto=tcp, src_ip=172.234.197.23 flow flow:12d3ab998fdd bytes=172, dst_ip=2.57.122.192, dst_port=9,108, pkts=2, proto=tcp, src_ip=172.234.197.23 flow flow:401f66635d49 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:33fc38582029 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=104.131.68.134 flow flow:ecd8cbcac6de bytes=148, dst_ip=172.234.197.23, dst_port=3,128, pkts=2, proto=tcp, src_ip=66.132.172.133 flow flow:e25cd8442937 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=18.220.79.216 flow flow:d8509f250b48 bytes=594, dst_ip=172.234.197.23, dst_port=23, pkts=11, proto=tcp, src_ip=103.231.8.51 flow flow:0089bf9ddbeb bytes=4,686, dst_ip=172.234.197.23, dst_port=443, pkts=8, proto=tcp, src_ip=104.28.234.80 flow flow:026ed6c0d60b bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=142.93.57.83 flow flow:fff2f3b2b28d bytes=166, dst_ip=172.234.197.23, dst_port=80, pkts=3, proto=tcp, src_ip=176.65.139.165 flow flow:87718e2ab8a7 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.53.169.88 flow flow:3285b0a15995 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.224.71.230 flow flow:de36b21f4ec4 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:cbc0ab74b492 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.148.165.81 flow flow:757995b89e2a bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=54.154.234.114 flow flow:35b7d9973002 bytes=756, dst_ip=172.234.197.23, dst_port=23, pkts=14, proto=tcp, src_ip=103.231.8.51 flow flow:19dad4f1a706 bytes=6,422, dst_ip=172.234.197.23, dst_port=443, pkts=17, proto=tcp, src_ip=40.77.178.164 flow flow:912323ddf24a bytes=984, dst_ip=172.234.197.23, dst_port=0, pkts=12, proto=icmp, src_ip=3.12.165.38 flow flow:ace84646c3da bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:dbd69d1e42d9 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=104.131.68.134 flow flow:ccb04cdb4688 bytes=5,554, dst_ip=172.234.197.23, dst_port=22, pkts=28, proto=tcp, src_ip=45.148.10.157 flow flow:704112814fc8 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:4f58f26c12b8 bytes=262, dst_ip=154.210.208.214, dst_port=45,950, pkts=3, proto=tcp, src_ip=172.234.197.23 flow flow:43c8378c8444 bytes=236, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:4172ae117b00 bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:f9f22534b212 bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:1ad190798b90 bytes=656, dst_ip=172.234.197.23, dst_port=0, pkts=8, proto=icmp, src_ip=3.144.250.137 flow flow:8b8bf8a83a4f bytes=4,973, dst_ip=172.234.197.23, dst_port=22, pkts=25, proto=tcp, src_ip=92.103.134.183 flow flow:48207407ac76 bytes=2,218, dst_ip=2.57.122.190, dst_port=43,874, pkts=23, proto=tcp, src_ip=172.234.197.23 flow flow:2ff7835d289e bytes=216, dst_ip=172.234.197.23, dst_port=23, pkts=4, proto=tcp, src_ip=51.159.210.196 flow flow:26e480e412a2 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=202.182.97.77 flow flow:ea5fac46d330 bytes=270, dst_ip=172.234.197.23, dst_port=23, pkts=5, proto=tcp, src_ip=223.25.245.241 flow flow:feb9a7c2fbeb bytes=6,545, dst_ip=172.234.197.23, dst_port=22, pkts=43, proto=tcp, src_ip=59.6.77.80 flow flow:f18417d5149e bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:29abee78e5fb bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:fe59e7b4dabf bytes=740, dst_ip=172.234.197.23, dst_port=22, pkts=10, proto=tcp, src_ip=207.182.128.157 flow flow:7e2eb72fbc4e bytes=216, dst_ip=172.234.197.23, dst_port=23, pkts=4, proto=tcp, src_ip=199.19.73.10 flow flow:760e134d6aca bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=104.131.68.134 flow flow:973aae90a5c8 bytes=270, dst_ip=172.234.197.23, dst_port=23, pkts=5, proto=tcp, src_ip=223.25.245.241 flow flow:2aa03834118a bytes=2,202, dst_ip=2.57.122.192, dst_port=52,432, pkts=23, proto=tcp, src_ip=172.234.197.23 flow flow:ceccc9643d99 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=44.248.141.231 flow flow:8a7a8aa9ad60 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:9769e43628ea bytes=132,068, dst_ip=172.234.197.23, dst_port=443, pkts=118, proto=tcp, src_ip=216.73.217.0 flow flow:65069bd3acb5 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:25e0a297dd71 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=13.61.23.29 flow flow:c9e4efad3449 bytes=984, dst_ip=172.234.197.23, dst_port=0, pkts=12, proto=icmp, src_ip=18.118.14.61 flow flow:520eb4218b96 bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=18.188.178.178 flow flow:9c266c273f4b bytes=5,519, dst_ip=172.234.197.23, dst_port=443, pkts=15, proto=tcp, src_ip=104.28.234.80 flow flow:a91a0b478637 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:af2238fb4931 bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=44.250.172.176 flow flow:014c6ddf2807 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:c919955dbe41 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=34.19.119.64 flow flow:f84f1ca7f897 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.224.158.97 flow flow:d2e2add28400 bytes=172, dst_ip=2.57.122.192, dst_port=9,108, pkts=2, proto=tcp, src_ip=172.234.197.23 flow flow:b73a177e34d5 bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:65d31a254a69 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.12.102.186 flow flow:cd659acbf2ad bytes=376, dst_ip=183.109.124.136, dst_port=0, pkts=4, proto=icmp, src_ip=172.234.197.23 flow flow:5a9e4c74e70d bytes=100, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=45.248.78.121 flow flow:d17b33e16c31 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=54.186.85.102 flow flow:87ac21ab5491 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.133.149.132 flow flow:c3d1c3271b99 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.224.252.115 flow flow:8ba8a02d9d2b bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:5ee5b38e2b97 bytes=330, dst_ip=172.234.197.23, dst_port=80, pkts=5, proto=tcp, src_ip=15.129.5.215 flow flow:d91d4a8c7d89 bytes=222, dst_ip=172.234.197.23, dst_port=1,245, pkts=3, proto=tcp, src_ip=34.238.176.206 flow flow:70264bddad69 bytes=270, dst_ip=172.234.197.23, dst_port=23, pkts=5, proto=tcp, src_ip=51.159.210.196 flow flow:a36e65cc1db1 bytes=222, dst_ip=58.209.82.184, dst_port=36,972, pkts=3, proto=tcp, src_ip=172.234.197.23 flow flow:e90c1efcc82d bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=35.95.113.227 flow flow:8d75126eaea8 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=103.231.8.51 flow flow:51e87cf8baf5 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=104.41.134.16 flow flow:52d01547caaa bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.224.26.131 flow flow:04a297b80b9c bytes=648, dst_ip=172.234.197.23, dst_port=23, pkts=12, proto=tcp, src_ip=104.41.134.16 flow flow:fbc934576b9d bytes=92, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=195.169.125.251 flow flow:ed766281aa30 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:dd367985327d bytes=264, dst_ip=172.234.197.23, dst_port=443, pkts=4, proto=tcp, src_ip=82.29.47.56 flow flow:5247c06ac331 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:4035fdb2fcee bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:0f9e25f8fdd4 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:6aef1e4a3311 bytes=3,442, dst_ip=172.234.197.23, dst_port=443, pkts=10, proto=tcp, src_ip=212.102.40.218 flow flow:ff7ec6c78978 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:c2fd361b6271 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=54.218.65.249 flow flow:4faf6eb835e3 bytes=1,174, dst_ip=2.57.121.112, dst_port=0, pkts=9, proto=icmp, src_ip=172.234.197.23 flow flow:8e5107392609 bytes=656, dst_ip=172.234.197.23, dst_port=0, pkts=8, proto=icmp, src_ip=3.15.37.246 flow flow:ed031f3b565b bytes=143, dst_ip=172.234.197.23, dst_port=80, pkts=2, proto=tcp, src_ip=141.98.83.48 flow flow:53fee8372167 bytes=400, dst_ip=47.83.153.56, dst_port=0, pkts=4, proto=icmp, src_ip=172.234.197.23 flow flow:e69ad5ffd296 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:a7775c4a8a94 bytes=166, dst_ip=172.234.197.23, dst_port=443, pkts=3, proto=tcp, src_ip=45.148.10.67 flow flow:5f1954e7824c bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:1f949d24da15 bytes=5,896, dst_ip=172.234.197.23, dst_port=22, pkts=31, proto=tcp, src_ip=2.57.122.191 flow flow:92a29973374a bytes=216, dst_ip=172.234.197.23, dst_port=23, pkts=4, proto=tcp, src_ip=199.19.73.10 flow flow:2246e876ebb7 bytes=984, dst_ip=172.234.197.23, dst_port=0, pkts=12, proto=icmp, src_ip=3.148.165.81 flow flow:d23f0a74242e bytes=148, dst_ip=172.234.197.23, dst_port=3,128, pkts=2, proto=tcp, src_ip=66.132.172.133 flow flow:f3f857fe6fdf bytes=132, dst_ip=172.234.197.23, dst_port=443, pkts=2, proto=tcp, src_ip=104.28.202.79 flow flow:a94000d55058 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=104.131.68.134 flow flow:e596c2d1fb14 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.218.72.180 flow flow:e12db0fc99c8 bytes=586, dst_ip=2.57.122.192, dst_port=0, pkts=7, proto=icmp, src_ip=172.234.197.23 flow flow:c0399c1eefc5 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=54.218.65.249 flow flow:bf5213c4133f bytes=121, dst_ip=172.234.197.23, dst_port=443, pkts=2, proto=tcp, src_ip=40.77.178.164 flow flow:064e321e1f7e bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.224.12.143 flow flow:365b70b191e4 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=199.19.73.10 flow flow:129143f2de3c bytes=264, dst_ip=172.234.197.23, dst_port=443, pkts=4, proto=tcp, src_ip=82.29.47.56 flow flow:cd304d51169b bytes=432, dst_ip=172.234.197.23, dst_port=23, pkts=8, proto=tcp, src_ip=45.148.120.187 flow flow:ce3e1a9ecbdd bytes=166, dst_ip=172.234.197.23, dst_port=80, pkts=3, proto=tcp, src_ip=45.148.10.67 flow flow:c5b345732844 bytes=166, dst_ip=172.234.197.23, dst_port=443, pkts=3, proto=tcp, src_ip=45.148.10.67 flow flow:1bbe1d7edcdd bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=199.19.73.10 flow flow:5e8f2f05af24 bytes=656, dst_ip=172.234.197.23, dst_port=22, pkts=6, proto=tcp, src_ip=2.57.121.112 flow flow:1b46b9e2540f bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:58a1bb73f482 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=3.22.95.139 flow flow:ea5524f89485 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=199.19.73.10 flow flow:cc4feba38882 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.147.7.219 flow flow:221719c8c265 bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:e9b647789338 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=3.144.196.3 flow flow:c28e1e6093f8 bytes=270, dst_ip=172.234.197.23, dst_port=23, pkts=5, proto=tcp, src_ip=202.182.97.77 flow flow:4b6caf372926 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:09403554dae0 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:c3a39506658f bytes=222, dst_ip=172.234.197.23, dst_port=3,232, pkts=3, proto=tcp, src_ip=54.89.155.82 flow flow:30ad7c343c32 bytes=270, dst_ip=172.234.197.23, dst_port=23, pkts=5, proto=tcp, src_ip=205.251.153.87 flow flow:e16553c872bf bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:0045a8b6c42e bytes=270, dst_ip=172.234.197.23, dst_port=23, pkts=5, proto=tcp, src_ip=199.19.73.10 flow flow:f9829bce8568 bytes=324, dst_ip=172.234.197.23, dst_port=23, pkts=6, proto=tcp, src_ip=64.225.71.61 flow flow:f6a3ae3e5dde bytes=334, dst_ip=2.57.122.191, dst_port=8,546, pkts=3, proto=tcp, src_ip=172.234.197.23 flow flow:ca429a54590b bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:cca8780a207e bytes=786, dst_ip=154.210.208.214, dst_port=45,950, pkts=9, proto=tcp, src_ip=172.234.197.23 flow flow:696c59840869 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:310eaf453f15 bytes=4,360, dst_ip=172.234.197.23, dst_port=22, pkts=17, proto=tcp, src_ip=2.57.121.112 flow flow:bf43367680fc bytes=518, dst_ip=2.57.122.190, dst_port=32,382, pkts=5, proto=tcp, src_ip=172.234.197.23 flow flow:3f2702139961 bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=35.94.26.156 flow flow:63e2a6edd040 bytes=132, dst_ip=172.234.197.23, dst_port=3,389, pkts=2, proto=tcp, src_ip=46.63.101.233 flow flow:3ed3f043150f bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:20aa3d617a89 bytes=96, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=45.11.106.181 flow flow:cd63e6f54f45 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:d7c54c2f1ca3 bytes=344, dst_ip=2.57.122.190, dst_port=43,874, pkts=4, proto=tcp, src_ip=172.234.197.23 flow flow:c9cef745ca98 bytes=698, dst_ip=193.46.255.86, dst_port=31,609, pkts=5, proto=tcp, src_ip=172.234.197.23 flow flow:b7e11213873f bytes=120, dst_ip=86.27.153.77, dst_port=49,113, pkts=2, proto=tcp, src_ip=172.234.197.23 flow flow:eb186d7721bb bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=35.95.128.58 flow flow:42bdd1e2fdd6 bytes=656, dst_ip=172.234.197.23, dst_port=0, pkts=8, proto=icmp, src_ip=3.148.226.224 flow flow:da1e8e80c9c6 bytes=148, dst_ip=172.234.197.23, dst_port=43,553, pkts=2, proto=tcp, src_ip=94.26.106.199 flow flow:f0100a3c82d9 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=104.131.68.134 flow flow:4a3bb7e7fcd1 bytes=306, dst_ip=116.110.209.252, dst_port=0, pkts=3, proto=icmp, src_ip=172.234.197.23 flow flow:0cd60d6315c8 bytes=132, dst_ip=172.234.197.23, dst_port=443, pkts=2, proto=tcp, src_ip=176.224.10.34 flow flow:28a5e1a14b5c bytes=296, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=121.15.177.4 flow flow:0d8f9188034a bytes=296, dst_ip=172.234.197.23, dst_port=23, pkts=4, proto=tcp, src_ip=27.43.207.231 flow flow:7387df895567 bytes=222, dst_ip=172.234.197.23, dst_port=13,443, pkts=3, proto=tcp, src_ip=54.242.39.252 flow flow:9882bba1fd87 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=108.131.102.25 flow flow:271f437cfd42 bytes=8,941, dst_ip=172.234.197.23, dst_port=443, pkts=26, proto=tcp, src_ip=44.209.89.189 flow flow:7b42c884a96c bytes=382, dst_ip=172.234.197.23, dst_port=22, pkts=5, proto=tcp, src_ip=221.228.203.3 flow flow:29cca42bd8cb bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=199.19.73.10 flow flow:d67e07adecd9 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.224.142.58 flow flow:f9ead6934a24 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:7bb111d4bfa5 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:a9d55811a960 bytes=1,400, dst_ip=47.83.153.56, dst_port=0, pkts=14, proto=icmp, src_ip=172.234.197.23 flow flow:0eb41ce31450 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.147.7.219 flow flow:03af1b640f8a bytes=972, dst_ip=172.234.197.23, dst_port=23, pkts=18, proto=tcp, src_ip=78.159.156.37 flow flow:51bd94e8e1b4 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:d6a9386d49be bytes=1,084, dst_ip=172.234.197.23, dst_port=443, pkts=11, proto=tcp, src_ip=212.102.40.218 flow flow:46bf1d9e247d bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=18.118.158.197 flow flow:606d83eb8bd4 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=16.147.218.115 flow flow:bbf1ec684c3b bytes=702, dst_ip=172.234.197.23, dst_port=23, pkts=13, proto=tcp, src_ip=202.182.97.77 flow flow:a6d0b35b12b2 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:1fec5a4ce3e8 bytes=500, dst_ip=172.234.197.23, dst_port=22, pkts=6, proto=tcp, src_ip=221.228.203.3 flow flow:26230a715976 bytes=9,209, dst_ip=172.234.197.23, dst_port=22, pkts=35, proto=tcp, src_ip=108.181.2.243 flow flow:321dbf023302 bytes=270, dst_ip=172.234.197.23, dst_port=23, pkts=5, proto=tcp, src_ip=64.225.71.61 flow flow:4bb7500f8444 bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=3.14.67.79 flow flow:9dd9b46882e8 bytes=4,891, dst_ip=172.234.197.23, dst_port=22, pkts=24, proto=tcp, src_ip=35.240.174.82 flow flow:d7eadfd16c59 bytes=4,957, dst_ip=172.234.197.23, dst_port=22, pkts=25, proto=tcp, src_ip=45.148.10.118 flow flow:45e03b101a43 bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:a112650beb9e bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:6a8936d485d0 bytes=270, dst_ip=172.234.197.23, dst_port=23, pkts=5, proto=tcp, src_ip=104.131.68.134 flow flow:49399f5f11dd bytes=594, dst_ip=172.234.197.23, dst_port=23, pkts=11, proto=tcp, src_ip=103.231.8.51 flow flow:112cf7538008 bytes=2,579, dst_ip=172.234.197.23, dst_port=22, pkts=6, proto=tcp, src_ip=78.134.49.171 flow flow:549630c50be4 bytes=1,469, dst_ip=172.234.197.23, dst_port=80, pkts=10, proto=tcp, src_ip=176.65.139.9 flow flow:8afe4ea0bd46 bytes=324, dst_ip=172.234.197.23, dst_port=23, pkts=6, proto=tcp, src_ip=45.148.120.187 flow flow:2c68e3fde7df bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=16.144.80.146 flow flow:978ec8b9e161 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=205.251.153.87 flow flow:6ea7f45b524d bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=3.14.67.79 flow flow:45cbfa794b3c bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=223.25.245.241 flow flow:3260641d0859 bytes=96, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=207.211.214.162 flow flow:15c19755d82c bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=18.218.72.180 flow flow:21605faa1468 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=34.220.7.91 flow flow:3c43d2163ba9 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:416668918045 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=223.25.245.241 flow flow:bd8bc0b1d3de bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:27d5e00cc328 bytes=166, dst_ip=172.234.197.23, dst_port=80, pkts=3, proto=tcp, src_ip=176.65.139.9 flow flow:e547182022fd bytes=3,456, dst_ip=172.234.197.23, dst_port=443, pkts=9, proto=tcp, src_ip=212.102.40.218 flow flow:2ddce973fcb7 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=199.19.73.10 flow flow:8b720787df06 bytes=592, dst_ip=172.234.197.23, dst_port=22, pkts=8, proto=tcp, src_ip=207.182.128.157 flow flow:11bfd421f903 bytes=3,520, dst_ip=172.234.197.23, dst_port=443, pkts=10, proto=tcp, src_ip=212.102.40.218 flow flow:6577c9d73a2b bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:e6c26f45eeda bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:73daf67fa7cc bytes=216, dst_ip=172.234.197.23, dst_port=23, pkts=4, proto=tcp, src_ip=37.59.254.152 flow flow:95595903e437 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=199.19.73.10 flow flow:75b6af2f270e bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=51.224.222.20 flow flow:99f9e5301b7a bytes=200, dst_ip=154.210.208.214, dst_port=0, pkts=2, proto=icmp, src_ip=172.234.197.23 flow flow:9a10e1c3e0eb bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:b9ff80b22977 bytes=486, dst_ip=172.234.197.23, dst_port=23, pkts=9, proto=tcp, src_ip=103.231.8.51 flow flow:e07dc80d678d bytes=396, dst_ip=172.234.197.23, dst_port=443, pkts=6, proto=tcp, src_ip=90.160.103.93 flow flow:84b18c6765e1 bytes=198, dst_ip=66.70.138.49, dst_port=54,583, pkts=3, proto=tcp, src_ip=172.234.197.23 flow flow:f990882a2994 bytes=656, dst_ip=172.234.197.23, dst_port=0, pkts=8, proto=icmp, src_ip=44.250.172.176 flow flow:7d6408f0d8ea bytes=564, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=14.225.7.70 flow flow:2325f8458469 bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=18.220.79.216 flow flow:80eb28e4a59b bytes=396, dst_ip=172.234.197.23, dst_port=80, pkts=6, proto=tcp, src_ip=104.29.137.154 flow flow:4b5e447916a0 bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=3.133.149.132 flow flow:8f35793a9f18 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=44.244.28.93 flow flow:3a557831e19e bytes=132, dst_ip=15.129.5.215, dst_port=4,448, pkts=2, proto=tcp, src_ip=172.234.197.23 flow flow:e78e9a543814 bytes=361, dst_ip=209.87.169.53, dst_port=29,051, pkts=5, proto=tcp, src_ip=172.234.197.23 flow flow:91503276de18 bytes=740, dst_ip=172.234.197.23, dst_port=22, pkts=10, proto=tcp, src_ip=207.182.128.157 flow flow:8d4fb5e4c395 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:2be3b895dfec bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=34.248.64.250 flow flow:3f819f99b0a1 bytes=724, dst_ip=172.234.197.23, dst_port=443, pkts=11, proto=tcp, src_ip=64.62.156.182 flow flow:bdb0ef105ec5 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=103.231.8.51 flow flow:5781ebb2f5de bytes=5,303, dst_ip=172.234.197.23, dst_port=22, pkts=30, proto=tcp, src_ip=59.6.77.80 flow flow:e76f9f1cf77d bytes=5,470, dst_ip=172.234.197.23, dst_port=22, pkts=26, proto=tcp, src_ip=193.46.255.86 flow flow:a64f992ea176 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=34.19.119.64 flow flow:c8e44ef5fb6f bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:5907b65d847e bytes=671, dst_ip=172.234.197.23, dst_port=443, pkts=9, proto=tcp, src_ip=104.28.234.80 flow flow:5aa6ace1439b bytes=3,455, dst_ip=172.234.197.23, dst_port=443, pkts=9, proto=tcp, src_ip=212.102.40.218 flow flow:2a5d3afb68a0 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:d0d8bf5060a2 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:e96996323669 bytes=656, dst_ip=172.234.197.23, dst_port=0, pkts=8, proto=icmp, src_ip=3.150.124.201 flow flow:d5b1251c36e0 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=54.201.244.199 flow flow:62bc56f50a1e bytes=164, dst_ip=2.57.122.190, dst_port=0, pkts=2, proto=icmp, src_ip=172.234.197.23 flow flow:44da4e311869 bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:f9e292929c93 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:ffffc8ebbc73 bytes=120, dst_ip=172.234.197.23, dst_port=10,002, pkts=2, proto=tcp, src_ip=18.190.15.50 flow flow:af8678849e7d bytes=586, dst_ip=2.57.122.190, dst_port=0, pkts=7, proto=icmp, src_ip=172.234.197.23 flow flow:e8b93563fb50 bytes=378, dst_ip=172.234.197.23, dst_port=23, pkts=7, proto=tcp, src_ip=184.154.95.157 flow flow:8b3a8c2f1ecc bytes=258, dst_ip=172.234.197.23, dst_port=80, pkts=4, proto=tcp, src_ip=141.98.83.48 flow flow:add207126086 bytes=4,973, dst_ip=172.234.197.23, dst_port=22, pkts=25, proto=tcp, src_ip=92.103.134.183 flow flow:3b77c8ccba80 bytes=8,309, dst_ip=172.234.197.23, dst_port=22, pkts=33, proto=tcp, src_ip=154.16.115.163 flow flow:c34b11e8d779 bytes=1,796, dst_ip=47.83.153.56, dst_port=49,812, pkts=20, proto=tcp, src_ip=172.234.197.23 flow flow:79521f80525c bytes=282, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:f5dfac51085b bytes=222, dst_ip=172.234.197.23, dst_port=1,244, pkts=3, proto=tcp, src_ip=32.192.75.154 flow flow:b23881d066bd bytes=5,888, dst_ip=172.234.197.23, dst_port=22, pkts=31, proto=tcp, src_ip=45.148.10.157 flow flow:b7e96c7783b8 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=44.247.223.188 flow flow:308ae44fc4d5 bytes=3,456, dst_ip=172.234.197.23, dst_port=443, pkts=9, proto=tcp, src_ip=212.102.40.218 flow flow:6266bdb4506a bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=54.186.85.102 flow flow:a2e26a50de40 bytes=344, dst_ip=2.57.122.192, dst_port=52,432, pkts=4, proto=tcp, src_ip=172.234.197.23 flow flow:d2a0535ff768 bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:6b045aaa1ded bytes=166, dst_ip=172.234.197.23, dst_port=80, pkts=3, proto=tcp, src_ip=45.148.10.67 flow flow:393b0a5f447b bytes=4,973, dst_ip=172.234.197.23, dst_port=22, pkts=25, proto=tcp, src_ip=92.103.134.183 flow flow:d2ce0d5146a5 bytes=148, dst_ip=172.234.197.23, dst_port=8,088, pkts=2, proto=tcp, src_ip=103.20.144.42 flow flow:9ead24721cbd bytes=186, dst_ip=172.234.197.23, dst_port=443, pkts=3, proto=tcp, src_ip=37.127.107.29 flow flow:4fbb22926fb3 bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=205.251.153.87 flow flow:bbb764459733 bytes=396, dst_ip=172.234.197.23, dst_port=80, pkts=6, proto=tcp, src_ip=15.129.5.215 flow flow:713f51881952 bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=34.216.30.208 flow flow:3656a8a67ee9 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=3.251.223.71 flow flow:47b652450f53 bytes=5,237, dst_ip=172.234.197.23, dst_port=22, pkts=29, proto=tcp, src_ip=59.6.77.80 flow flow:4eae0b7b4ef5 bytes=162, dst_ip=172.234.197.23, dst_port=23, pkts=3, proto=tcp, src_ip=104.131.68.134 flow flow:ddc993927045 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:3cd1c26647aa bytes=540, dst_ip=172.234.197.23, dst_port=23, pkts=10, proto=tcp, src_ip=45.148.120.187 flow flow:f52dc24d320c bytes=196, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=216.73.217.0 flow flow:14027410c529 bytes=1,148, dst_ip=172.234.197.23, dst_port=0, pkts=14, proto=icmp, src_ip=3.144.196.3 flow flow:9bd84b2fa35a bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:e0b4c80f35b5 bytes=561, dst_ip=172.234.197.23, dst_port=21, pkts=8, proto=tcp, src_ip=194.165.16.163 flow flow:bb38d60c9350 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=35.94.26.156 flow flow:3364fa3f3954 bytes=6,406, dst_ip=172.234.197.23, dst_port=22, pkts=36, proto=tcp, src_ip=2.57.122.197 flow flow:7e43df5a0ed0 bytes=492, dst_ip=172.234.197.23, dst_port=0, pkts=6, proto=icmp, src_ip=44.249.238.112 flow flow:84f1700cbcb0 bytes=1,294, dst_ip=59.6.77.80, dst_port=0, pkts=13, proto=icmp, src_ip=172.234.197.23 flow flow:ac552841894d bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=34.216.76.26 flow flow:903fe0422803 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:3421657ba82c bytes=108, dst_ip=172.234.197.23, dst_port=23, pkts=2, proto=tcp, src_ip=199.19.73.10 flow flow:b2d113ddd635 bytes=313, dst_ip=172.232.0.17, dst_port=53, pkts=2, proto=udp, src_ip=172.234.197.23 flow flow:4414797fec28 bytes=486, dst_ip=172.234.197.23, dst_port=23, pkts=9, proto=tcp, src_ip=223.25.245.241 flow flow:87d880865afc bytes=84, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=103.155.16.117 flow flow:bc6dc1e2c180 bytes=1,166, dst_ip=172.234.197.23, dst_port=443, pkts=11, proto=tcp, src_ip=212.102.40.218 flow flow:a972a1992035 bytes=514, dst_ip=193.46.255.86, dst_port=0, pkts=3, proto=icmp, src_ip=172.234.197.23 flow flow:dd65728bea09 bytes=239, dst_ip=172.234.197.23, dst_port=80, pkts=4, proto=tcp, src_ip=141.98.83.48 flow flow:1eb5b39ff2b9 bytes=450, dst_ip=172.234.197.23, dst_port=443, pkts=7, proto=tcp, src_ip=37.127.107.29 flow flow:09eb8a49df45 bytes=164, dst_ip=172.234.197.23, dst_port=0, pkts=2, proto=icmp, src_ip=44.255.175.112 flow flow:001b0d75c5a5 bytes=3,448, dst_ip=172.234.197.23, dst_port=443, pkts=9, proto=tcp, src_ip=212.102.40.218 flow flow:9ed053a60dc6 bytes=328, dst_ip=172.234.197.23, dst_port=0, pkts=4, proto=icmp, src_ip=16.144.80.146 flow flow:f24e71deffe5 bytes=222, dst_ip=172.234.197.23, dst_port=22, pkts=3, proto=tcp, src_ip=116.110.209.252 geo_point geo_44.97640_-93.22400 city=Minneapolis, country=US [44.9764, -93.2240, 0.0000] 🌐 geo_point geo_49.41950_26.99590 city=Khmelnytskyi, country=UA [49.4195, 26.9959, 0.0000] 🌐 geo_point geo_34.77320_113.72200 city=, country=CN [34.7732, 113.7220, 0.0000] 🌐 geo_point geo_21.49130_39.18410 city=Jeddah, country=SA [21.4913, 39.1841, 0.0000] 🌐 geo_point geo_32.77970_-96.80220 city=Dallas, country=US [32.7797, -96.8022, 0.0000] 🌐 geo_point geo_40.73080_-74.07890 city=Jersey City, country=US [40.7308, -74.0789, 0.0000] 🌐 geo_point geo_3.13990_101.70090 city=Kuala Lumpur, country=MY [3.1399, 101.7009, 0.0000] 🌐 geo_point geo_43.14790_12.10970 city=, country=IT [43.1479, 12.1097, 0.0000] 🌐 geo_point geo_52.94530_-1.49530 city=Derby, country=GB [52.9453, -1.4953, 0.0000] 🌐 geo_point geo_59.32870_18.07170 city=Stockholm, country=SE [59.3287, 18.0717, 0.0000] 🌐 geo_point geo_45.59990_-121.18710 city=The Dalles, country=US [45.5999, -121.1871, 0.0000] 🌐 geo_point geo_1.29390_103.84610 city=Singapore, country=SG [1.2939, 103.8461, 0.0000] 🌐 geo_point geo_41.88350_-87.63050 city=Chicago, country=US [41.8835, -87.6305, 0.0000] 🌐 geo_point geo_38.70950_-78.15390 city=Washington, country=US [38.7095, -78.1539, 0.0000] 🌐 geo_point geo_43.63190_-79.37160 city=, country=CA [43.6319, -79.3716, 0.0000] 🌐 geo_point geo_52.38240_4.89950 city=, country=NL [52.3824, 4.8995, 0.0000] 🌐 geo_point geo_22.25780_114.16570 city=, country=HK [22.2578, 114.1657, 0.0000] 🌐 geo_point geo_45.84010_-119.70500 city=Boardman, country=US [45.8401, -119.7050, 0.0000] 🌐 geo_point geo_38.87940_-94.51740 city=Kansas City, country=US [38.8794, -94.5174, 0.0000] 🌐 geo_point geo_41.65260_-4.73430 city=Valladolid, country=ES [41.6526, -4.7343, 0.0000] 🌐 geo_point geo_22.28420_114.17590 city=Hong Kong, country=HK [22.2842, 114.1759, 0.0000] 🌐 geo_point geo_50.88970_6.05630 city=Eygelshoven, country=NL [50.8897, 6.0563, 0.0000] 🌐 geo_point geo_24.00000_121.00000 city=, country=TW [24.0000, 121.0000, 0.0000] 🌐 geo_point geo_48.85580_2.34940 city=Paris, country=FR [48.8558, 2.3494, 0.0000] 🌐 geo_point geo_37.33880_-121.89160 city=San Jose, country=US [37.3388, -121.8916, 0.0000] 🌐 geo_point geo_34.05440_-118.24400 city=Los Angeles, country=US [34.0544, -118.2440, 0.0000] 🌐 geo_point geo_23.11810_113.25390 city=Guangzhou, country=CN [23.1181, 113.2539, 0.0000] 🌐 geo_point geo_43.70900_-79.40570 city=Toronto, country=CA [43.7090, -79.4057, 0.0000] 🌐 geo_point geo_37.56580_126.97800 city=Seoul, country=KR [37.5658, 126.9780, 0.0000] 🌐 geo_point geo_37.54150_127.02520 city=Seongdong-gu, country=KR [37.5415, 127.0252, 0.0000] 🌐 geo_point geo_35.61640_139.74250 city=Minamishinagawa, country=JP [35.6164, 139.7425, 0.0000] 🌐 geo_point geo_52.37590_4.89750 city=Amsterdam, country=NL [52.3759, 4.8975, 0.0000] 🌐 geo_point geo_48.85820_2.33870 city=, country=FR [48.8582, 2.3387, 0.0000] 🌐 geo_point geo_37.75100_-97.82200 city=, country=US [37.7510, -97.8220, 0.0000] 🌐 geo_point geo_40.79640_-74.02030 city=North Bergen, country=US [40.7964, -74.0203, 0.0000] 🌐 geo_point geo_51.29930_9.49100 city=, country=DE [51.2993, 9.4910, 0.0000] 🌐 geo_point geo_16.16670_107.83330 city=, country=VN [16.1667, 107.8333, 0.0000] 🌐 geo_point geo_52.22990_21.00930 city=Warsaw, country=PL [52.2299, 21.0093, 0.0000] 🌐 geo_point geo_53.33820_-6.25910 city=Dublin, country=IE [53.3382, -6.2591, 0.0000] 🌐 geo_point geo_45.99680_24.99700 city=, country=RO [45.9968, 24.9970, 0.0000] 🌐 geo_point geo_52.35200_4.93920 city=Amsterdam, country=NL [52.3520, 4.9392, 0.0000] 🌐 geo_point geo_-31.94740_115.86480 city=Perth, country=AU [-31.9474, 115.8648, 0.0000] 🌐 geo_point geo_50.85340_4.34700 city=Brussels, country=BE [50.8534, 4.3470, 0.0000] 🌐 geo_point geo_37.91720_-75.61730 city=Atlantic, country=US [37.9172, -75.6173, 0.0000] 🌐 geo_point geo_22.54550_114.06830 city=Shenzhen, country=CN [22.5455, 114.0683, 0.0000] 🌐 geo_point geo_52.52130_6.11140 city=Zwolle, country=NL [52.5213, 6.1114, 0.0000] 🌐 geo_point geo_52.51960_13.40690 city=Berlin, country=DE [52.5196, 13.4069, 0.0000] 🌐 geo_point geo_28.57590_77.33450 city=Noida, country=IN [28.5759, 77.3345, 0.0000] 🌐 geo_point geo_43.73040_7.41910 city=Monaco, country=MC [43.7304, 7.4191, 0.0000] 🌐 geo_point geo_40.78760_-74.06000 city=New York, country=US [40.7876, -74.0600, 0.0000] 🌐 geo_point geo_47.61090_-122.33030 city=, country=US [47.6109, -122.3303, 0.0000] 🌐 geo_point geo_18.21810_42.50550 city=Abha, country=SA [18.2181, 42.5055, 0.0000] 🌐 geo_point geo_40.83640_-74.14030 city=Clifton, country=US [40.8364, -74.1403, 0.0000] 🌐 geo_point geo_21.99740_79.00110 city=, country=IN [21.9974, 79.0011, 0.0000] 🌐 geo_point geo_39.04690_-77.49030 city=Ashburn, country=US [39.0469, -77.4903, 0.0000] 🌐 geo_point geo_50.08450_8.47190 city=Kriftel, country=DE [50.0845, 8.4719, 0.0000] 🌐 geo_point geo_29.75390_-95.35900 city=Houston, country=US [29.7539, -95.3590, 0.0000] 🌐 geo_point geo_9.00000_-80.00000 city=, country=PA [9.0000, -80.0000, 0.0000] 🌐 geo_point geo_42.88640_-78.87840 city=Buffalo, country=US [42.8864, -78.8784, 0.0000] 🌐 geo_point geo_39.96250_-83.00610 city=Columbus, country=US [39.9625, -83.0061, 0.0000] 🌐 geo_point geo_-6.24950_106.86400 city=Cawang, country=ID [-6.2495, 106.8640, 0.0000] 🌐 host host:3.150.124.201 bytes=328, city=Columbus, country=US, ip=3.150.124.201, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:154.16.115.163 bytes=8,309, city=Buffalo, country=US, ip=154.16.115.163, org=WHG Hosting Services Ltd [42.8864, -78.8784, 0.0000] 🌐 host host:44.249.238.112 bytes=492, city=Boardman, country=US, ip=44.249.238.112, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:15.129.5.215 bytes=330, city=San Jose, country=US, ip=15.129.5.215, org=Amazon.com, Inc. [37.3388, -121.8916, 0.0000] 🌐 host host:78.134.49.171 bytes=2,579, city=, country=IT, ip=78.134.49.171, org=EOLO S.p.A. [43.1479, 12.1097, 0.0000] 🌐 host host:18.218.72.180 bytes=164, city=Columbus, country=US, ip=18.218.72.180, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:51.225.147.241 bytes=164, city=Berlin, country=DE, ip=51.225.147.241, org=Amazon.com, Inc. [52.5196, 13.4069, 0.0000] 🌐 host host:3.22.95.139 bytes=328, city=Columbus, country=US, ip=3.22.95.139, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:121.15.177.4 bytes=296, city=Shenzhen, country=CN, ip=121.15.177.4, org=Chinanet [22.5455, 114.0683, 0.0000] 🌐 host host:51.21.249.220 bytes=164, city=Stockholm, country=SE, ip=51.21.249.220, org=Amazon.com, Inc. [59.3287, 18.0717, 0.0000] 🌐 host host:183.109.124.136 bytes=5,369, city=Seoul, country=KR, ip=183.109.124.136, org=Korea Telecom [37.5658, 126.9780, 0.0000] 🌐 host host:66.70.138.49 bytes=198, city=, country=CA, ip=66.70.138.49, org=OVH SAS [43.6319, -79.3716, 0.0000] 🌐 host host:18.118.158.197 bytes=328, city=Columbus, country=US, ip=18.118.158.197, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:176.224.10.34 bytes=132, city=Jeddah, country=SA, ip=176.224.10.34, org=Etihad Etisalat, a joint stock company [21.4913, 39.1841, 0.0000] 🌐 host host:108.131.102.25 bytes=164, city=Dublin, country=IE, ip=108.131.102.25, org=Amazon.com, Inc. [53.3382, -6.2591, 0.0000] 🌐 host host:45.148.10.67 bytes=166, city=Amsterdam, country=NL, ip=45.148.10.67, org=Techoff Srv Limited [52.3759, 4.8975, 0.0000] 🌐 host host:54.186.85.102 bytes=164, city=Boardman, country=US, ip=54.186.85.102, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:90.160.103.93 bytes=198, city=Valladolid, country=ES, ip=90.160.103.93, org=Orange Espagne SA [41.6526, -4.7343, 0.0000] 🌐 host host:155.138.157.163 bytes=108, city=Toronto, country=CA, ip=155.138.157.163, org=The Constant Company, LLC [43.7090, -79.4057, 0.0000] 🌐 host host:2.57.122.191 bytes=5,896, city=, country=RO, ip=2.57.122.191, org=Unmanaged Ltd [45.9968, 24.9970, 0.0000] 🌐 host host:104.140.188.2 bytes=170, city=, country=US, ip=104.140.188.2, org=Eonix Corporation [37.7510, -97.8220, 0.0000] 🌐 host host:54.242.39.252 bytes=222, city=Ashburn, country=US, ip=54.242.39.252, org=Amazon.com, Inc. [39.0469, -77.4903, 0.0000] 🌐 host host:18.118.14.61 bytes=984, city=Columbus, country=US, ip=18.118.14.61, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:193.46.255.86 bytes=5,470, city=, country=RO, ip=193.46.255.86, org=Unmanaged Ltd [45.9968, 24.9970, 0.0000] 🌐 host host:34.216.76.26 bytes=164, city=Boardman, country=US, ip=34.216.76.26, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:51.224.50.212 bytes=164, city=Berlin, country=DE, ip=51.224.50.212, org=Amazon.com, Inc. [52.5196, 13.4069, 0.0000] 🌐 host host:3.12.165.38 bytes=328, city=Columbus, country=US, ip=3.12.165.38, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:44.248.141.231 bytes=328, city=Boardman, country=US, ip=44.248.141.231, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:51.224.222.20 bytes=164, city=Berlin, country=DE, ip=51.224.222.20, org=Amazon.com, Inc. [52.5196, 13.4069, 0.0000] 🌐 host host:213.209.159.56 bytes=5,470, city=, country=TW, ip=213.209.159.56, org=Feo Prest SRL [24.0000, 121.0000, 0.0000] 🌐 host host:54.154.234.114 bytes=164, city=Dublin, country=IE, ip=54.154.234.114, org=Amazon.com, Inc. [53.3382, -6.2591, 0.0000] 🌐 host host:40.77.178.164 bytes=6,422, city=, country=US, ip=40.77.178.164, org=Microsoft Corporation [47.6109, -122.3303, 0.0000] 🌐 host host:104.28.234.80 bytes=5,519, city=Houston, country=US, ip=104.28.234.80, org=Cloudflare, Inc. [29.7539, -95.3590, 0.0000] 🌐 host host:34.19.119.64 bytes=108, city=The Dalles, country=US, ip=34.19.119.64, org=Google LLC [45.5999, -121.1871, 0.0000] 🌐 host host:64.62.156.182 bytes=724, city=Minneapolis, country=US, ip=64.62.156.182, org=Hurricane Electric LLC [44.9764, -93.2240, 0.0000] 🌐 host host:44.244.28.93 bytes=328, city=Boardman, country=US, ip=44.244.28.93, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:44.255.175.112 bytes=164, city=Boardman, country=US, ip=44.255.175.112, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:104.41.134.16 bytes=648, city=Washington, country=US, ip=104.41.134.16, org=Microsoft Corporation [38.7095, -78.1539, 0.0000] 🌐 host host:213.209.159.228 bytes=4,957, city=, country=TW, ip=213.209.159.228, org=Feo Prest SRL [24.0000, 121.0000, 0.0000] 🌐 host host:3.138.137.33 bytes=164, city=Columbus, country=US, ip=3.138.137.33, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:46.63.101.233 bytes=132, city=Khmelnytskyi, country=UA, ip=46.63.101.233, org=X-City Ltd. [49.4195, 26.9959, 0.0000] 🌐 host host:44.209.89.189 bytes=8,941, city=Ashburn, country=US, ip=44.209.89.189, org=Amazon.com, Inc. [39.0469, -77.4903, 0.0000] 🌐 host host:37.59.254.152 bytes=216, city=, country=FR, ip=37.59.254.152, org=OVH SAS [48.8582, 2.3387, 0.0000] 🌐 host host:34.201.143.237 bytes=1,057, city=Ashburn, country=US, ip=34.201.143.237, org=Amazon.com, Inc. [39.0469, -77.4903, 0.0000] 🌐 host host:27.43.207.231 bytes=296, city=Guangzhou, country=CN, ip=27.43.207.231, org=China Unicom IP network China169 Guangdong province [23.1181, 113.2539, 0.0000] 🌐 host host:35.94.26.156 bytes=164, city=Boardman, country=US, ip=35.94.26.156, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:92.118.39.23 bytes=120, city=Dallas, country=US, ip=92.118.39.23, org=Unmanaged Ltd [32.7797, -96.8022, 0.0000] 🌐 host host:103.20.144.42 bytes=148, city=, country=VN, ip=103.20.144.42, org=METASERV COMPANY LIMITED [16.1667, 107.8333, 0.0000] 🌐 host host:3.148.226.224 bytes=656, city=Columbus, country=US, ip=3.148.226.224, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:103.178.152.76 bytes=540, city=Cawang, country=ID, ip=103.178.152.76, org=PT Herza Digital Indonesia [-6.2495, 106.8640, 0.0000] 🌐 host host:45.153.34.112 bytes=4,701, city=Eygelshoven, country=NL, ip=45.153.34.112, org=Pfcloud UG (haftungsbeschrankt) [50.8897, 6.0563, 0.0000] 🌐 host host:35.240.174.82 bytes=4,891, city=Singapore, country=SG, ip=35.240.174.82, org=Google LLC [1.2939, 103.8461, 0.0000] 🌐 host host:59.6.77.80 bytes=5,303, city=Seongdong-gu, country=KR, ip=59.6.77.80, org=Korea Telecom [37.5415, 127.0252, 0.0000] 🌐 host host:54.201.244.199 bytes=328, city=Boardman, country=US, ip=54.201.244.199, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:45.148.10.118 bytes=4,957, city=Amsterdam, country=NL, ip=45.148.10.118, org=Techoff Srv Limited [52.3759, 4.8975, 0.0000] 🌐 host host:172.232.0.17 bytes=313, city=Chicago, country=US, ip=172.232.0.17, org=Akamai Connected Cloud [41.8835, -87.6305, 0.0000] 🌐 host host:194.165.16.163 bytes=561, city=Monaco, country=MC, ip=194.165.16.163, org=Flyservers S.A. [43.7304, 7.4191, 0.0000] 🌐 host host:212.102.40.218 bytes=3,448, city=Dallas, country=US, ip=212.102.40.218, org=Datacamp Limited [32.7797, -96.8022, 0.0000] 🌐 host host:142.93.57.83 bytes=162, city=North Bergen, country=US, ip=142.93.57.83, org=DigitalOcean, LLC [40.7964, -74.0203, 0.0000] 🌐 host host:37.127.107.29 bytes=186, city=Abha, country=SA, ip=37.127.107.29, org=Etihad Etisalat, a joint stock company [18.2181, 42.5055, 0.0000] 🌐 host host:209.87.169.53 bytes=361, city=Jersey City, country=US, ip=209.87.169.53, org=Clouvider Limited [40.7308, -74.0789, 0.0000] 🌐 host host:51.225.29.67 bytes=164, city=Berlin, country=DE, ip=51.225.29.67, org=Amazon.com, Inc. [52.5196, 13.4069, 0.0000] 🌐 host host:54.89.155.82 bytes=222, city=Ashburn, country=US, ip=54.89.155.82, org=Amazon.com, Inc. [39.0469, -77.4903, 0.0000] 🌐 host host:92.103.134.183 bytes=4,973, city=, country=FR, ip=92.103.134.183, org=Societe Francaise Du Radiotelephone - SFR SA [48.8582, 2.3387, 0.0000] 🌐 host host:45.11.106.181 bytes=96, city=Amsterdam, country=NL, ip=45.11.106.181, org=Misaka Network, Inc. [52.3759, 4.8975, 0.0000] 🌐 host host:13.218.167.231 bytes=222, city=Ashburn, country=US, ip=13.218.167.231, org=Amazon.com, Inc. [39.0469, -77.4903, 0.0000] 🌐 host host:13.53.169.88 bytes=164, city=Stockholm, country=SE, ip=13.53.169.88, org=Amazon.com, Inc. [59.3287, 18.0717, 0.0000] 🌐 host host:3.148.165.81 bytes=164, city=Columbus, country=US, ip=3.148.165.81, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:51.224.252.115 bytes=164, city=Berlin, country=DE, ip=51.224.252.115, org=Amazon.com, Inc. [52.5196, 13.4069, 0.0000] 🌐 host host:35.95.128.58 bytes=164, city=Boardman, country=US, ip=35.95.128.58, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:51.224.71.230 bytes=164, city=Berlin, country=DE, ip=51.224.71.230, org=Amazon.com, Inc. [52.5196, 13.4069, 0.0000] 🌐 host host:2.57.122.197 bytes=6,406, city=, country=RO, ip=2.57.122.197, org=Unmanaged Ltd [45.9968, 24.9970, 0.0000] 🌐 host host:3.144.196.3 bytes=328, city=Columbus, country=US, ip=3.144.196.3, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:82.29.47.56 bytes=264, city=Warsaw, country=PL, ip=82.29.47.56, org=Netia SA [52.2299, 21.0093, 0.0000] 🌐 host host:34.220.7.91 bytes=328, city=Boardman, country=US, ip=34.220.7.91, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:78.159.156.37 bytes=972, city=Eygelshoven, country=NL, ip=78.159.156.37, org=Euro Crypt EOOD [50.8897, 6.0563, 0.0000] 🌐 host host:176.65.139.165 bytes=166, city=, country=DE, ip=176.65.139.165, org=Pfcloud UG (haftungsbeschrankt) [51.2993, 9.4910, 0.0000] 🌐 host host:18.190.15.50 bytes=120, city=Columbus, country=US, ip=18.190.15.50, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:3.14.67.79 bytes=492, city=Columbus, country=US, ip=3.14.67.79, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:51.224.12.143 bytes=164, city=Berlin, country=DE, ip=51.224.12.143, org=Amazon.com, Inc. [52.5196, 13.4069, 0.0000] 🌐 host host:223.25.245.241 bytes=108, city=Kuala Lumpur, country=MY, ip=223.25.245.241, org=Gigabit Hosting Sdn Bhd [3.1399, 101.7009, 0.0000] 🌐 host host:51.224.158.97 bytes=164, city=Berlin, country=DE, ip=51.224.158.97, org=Amazon.com, Inc. [52.5196, 13.4069, 0.0000] 🌐 host host:51.159.210.196 bytes=216, city=Paris, country=FR, ip=51.159.210.196, org=Scaleway S.a.s. [48.8558, 2.3494, 0.0000] 🌐 host host:184.154.95.157 bytes=216, city=Atlantic, country=US, ip=184.154.95.157, org=Internap Holding LLC [37.9172, -75.6173, 0.0000] 🌐 host host:51.224.26.131 bytes=164, city=Berlin, country=DE, ip=51.224.26.131, org=Amazon.com, Inc. [52.5196, 13.4069, 0.0000] 🌐 host host:34.238.176.206 bytes=222, city=Ashburn, country=US, ip=34.238.176.206, org=Amazon.com, Inc. [39.0469, -77.4903, 0.0000] 🌐 host host:207.211.214.162 bytes=96, city=Brussels, country=BE, ip=207.211.214.162, org=Datacamp Limited [50.8534, 4.3470, 0.0000] 🌐 host host:45.148.120.187 bytes=432, city=, country=NL, ip=45.148.120.187, org=SpectraIP B.V. [52.3824, 4.8995, 0.0000] 🌐 host host:221.228.203.3 bytes=500, city=, country=CN, ip=221.228.203.3, org=Jiangsu Wuxi International IDC network [34.7732, 113.7220, 0.0000] 🌐 host host:51.224.142.58 bytes=164, city=Berlin, country=DE, ip=51.224.142.58, org=Amazon.com, Inc. [52.5196, 13.4069, 0.0000] 🌐 host host:103.231.8.51 bytes=756, city=, country=IN, ip=103.231.8.51, org=CtrlS [21.9974, 79.0011, 0.0000] 🌐 host host:116.110.209.252 bytes=306, city=, country=VN, ip=116.110.209.252, org=Viettel Corporation [16.1667, 107.8333, 0.0000] 🌐 host host:35.95.113.227 bytes=328, city=Boardman, country=US, ip=35.95.113.227, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:44.247.223.188 bytes=164, city=Boardman, country=US, ip=44.247.223.188, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:16.144.80.146 bytes=328, city=Boardman, country=US, ip=16.144.80.146, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:112.121.177.138 bytes=132, city=, country=HK, ip=112.121.177.138, org=Netsec Limited [22.2578, 114.1657, 0.0000] 🌐 host host:3.15.37.246 bytes=164, city=Columbus, country=US, ip=3.15.37.246, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:14.225.7.70 bytes=564, city=, country=VN, ip=14.225.7.70, org=VIETNAM POSTS AND TELECOMMUNICATIONS GROUP [16.1667, 107.8333, 0.0000] 🌐 host host:44.250.172.176 bytes=492, city=Boardman, country=US, ip=44.250.172.176, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:45.248.78.121 bytes=100, city=Perth, country=AU, ip=45.248.78.121, org=Host Universal Pty Ltd [-31.9474, 115.8648, 0.0000] 🌐 host host:3.251.223.71 bytes=164, city=Dublin, country=IE, ip=3.251.223.71, org=Amazon.com, Inc. [53.3382, -6.2591, 0.0000] 🌐 host host:207.182.128.157 bytes=740, city=, country=US, ip=207.182.128.157, org=eNET Inc. [37.7510, -97.8220, 0.0000] 🌐 host host:104.28.202.79 bytes=132, city=Houston, country=US, ip=104.28.202.79, org=Cloudflare, Inc. [29.7539, -95.3590, 0.0000] 🌐 host host:66.132.172.133 bytes=148, city=, country=US, ip=66.132.172.133, org=Censys, Inc. [37.7510, -97.8220, 0.0000] 🌐 host host:2.57.122.192 bytes=172, city=, country=RO, ip=2.57.122.192, org=Unmanaged Ltd [45.9968, 24.9970, 0.0000] 🌐 host host:3.133.149.132 bytes=164, city=Columbus, country=US, ip=3.133.149.132, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:199.19.73.10 bytes=108, city=New York, country=US, ip=199.19.73.10, org=Kamatera, Inc. [40.7876, -74.0600, 0.0000] 🌐 host host:16.147.218.115 bytes=328, city=Boardman, country=US, ip=16.147.218.115, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:13.61.23.29 bytes=164, city=Stockholm, country=SE, ip=13.61.23.29, org=Amazon.com, Inc. [59.3287, 18.0717, 0.0000] 🌐 host host:47.83.153.56 bytes=1,400, city=Hong Kong, country=HK, ip=47.83.153.56, org=Alibaba US Technology Co., Ltd. [22.2842, 114.1759, 0.0000] 🌐 host host:3.12.102.186 bytes=164, city=Columbus, country=US, ip=3.12.102.186, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:104.131.68.134 bytes=162, city=Clifton, country=US, ip=104.131.68.134, org=DigitalOcean, LLC [40.8364, -74.1403, 0.0000] 🌐 host host:202.182.97.77 bytes=702, city=Minamishinagawa, country=JP, ip=202.182.97.77, org=The Constant Company, LLC [35.6164, 139.7425, 0.0000] 🌐 host host:94.26.106.199 bytes=148, city=Kriftel, country=DE, ip=94.26.106.199, org=dataforest GmbH [50.0845, 8.4719, 0.0000] 🌐 host host:64.225.71.61 bytes=270, city=Amsterdam, country=NL, ip=64.225.71.61, org=DigitalOcean, LLC [52.3520, 4.9392, 0.0000] 🌐 host host:216.73.217.0 bytes=132,068, city=Columbus, country=US, ip=216.73.217.0, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:3.147.7.219 bytes=164, city=Columbus, country=US, ip=3.147.7.219, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:86.27.153.77 bytes=120, city=Derby, country=GB, ip=86.27.153.77, org=Virgin Media [52.9453, -1.4953, 0.0000] 🌐 host host:141.98.83.48 bytes=239, city=, country=PA, ip=141.98.83.48, org=Flyservers S.A. [9.0000, -80.0000, 0.0000] 🌐 host host:18.220.79.216 bytes=328, city=Columbus, country=US, ip=18.220.79.216, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:104.28.234.78 bytes=671, city=Houston, country=US, ip=104.28.234.78, org=Cloudflare, Inc. [29.7539, -95.3590, 0.0000] 🌐 host host:195.169.125.251 bytes=92, city=Zwolle, country=NL, ip=195.169.125.251, org=SURF B.V. [52.5213, 6.1114, 0.0000] 🌐 host host:103.155.16.117 bytes=84, city=Singapore, country=SG, ip=103.155.16.117, org=Kaopu Cloud HK Limited [1.2939, 103.8461, 0.0000] 🌐 host host:2.57.122.190 bytes=5,896, city=, country=RO, ip=2.57.122.190, org=Unmanaged Ltd [45.9968, 24.9970, 0.0000] 🌐 host host:108.181.2.243 bytes=9,209, city=Los Angeles, country=US, ip=108.181.2.243, org=Psychz Networks [34.0544, -118.2440, 0.0000] 🌐 host host:34.248.64.250 bytes=164, city=Dublin, country=IE, ip=34.248.64.250, org=Amazon.com, Inc. [53.3382, -6.2591, 0.0000] 🌐 host host:34.216.30.208 bytes=164, city=Boardman, country=US, ip=34.216.30.208, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 host host:205.251.153.87 bytes=162, city=, country=US, ip=205.251.153.87, org=NETWORK TRANSIT HOLDINGS LLC [37.7510, -97.8220, 0.0000] 🌐 host host:45.148.10.157 bytes=4,148, city=Amsterdam, country=NL, ip=45.148.10.157, org=Techoff Srv Limited [52.3759, 4.8975, 0.0000] 🌐 host host:3.144.250.137 bytes=164, city=Columbus, country=US, ip=3.144.250.137, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:104.29.137.154 bytes=198, ip=104.29.137.154 host host:18.188.178.178 bytes=492, city=Columbus, country=US, ip=18.188.178.178, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:2.57.121.112 bytes=1,174, city=, country=RO, ip=2.57.121.112, org=Unmanaged Ltd [45.9968, 24.9970, 0.0000] 🌐 host host:176.65.139.9 bytes=1,469, city=, country=DE, ip=176.65.139.9, org=Pfcloud UG (haftungsbeschrankt) [51.2993, 9.4910, 0.0000] 🌐 host host:172.234.197.23 bytes=8,309, city=Chicago, country=US, ip=172.234.197.23, org=Akamai Connected Cloud [41.8835, -87.6305, 0.0000] 🌐 host host:58.209.82.184 bytes=222, city=, country=CN, ip=58.209.82.184, org=Chinanet [34.7732, 113.7220, 0.0000] 🌐 host host:81.161.239.14 bytes=3,703, city=Kansas City, country=US, ip=81.161.239.14, org=Gravhosting LLC [38.8794, -94.5174, 0.0000] 🌐 host host:154.210.208.214 bytes=786, city=Noida, country=IN, ip=154.210.208.214, org=CtrlS [28.5759, 77.3345, 0.0000] 🌐 host host:32.192.75.154 bytes=222, city=, country=US, ip=32.192.75.154, org= [37.7510, -97.8220, 0.0000] 🌐 host host:176.65.132.218 bytes=370, city=, country=DE, ip=176.65.132.218, org=Pfcloud UG (haftungsbeschrankt) [51.2993, 9.4910, 0.0000] 🌐 host host:3.129.45.206 bytes=164, city=Columbus, country=US, ip=3.129.45.206, org=Amazon.com, Inc. [39.9625, -83.0061, 0.0000] 🌐 host host:54.218.65.249 bytes=328, city=Boardman, country=US, ip=54.218.65.249, org=Amazon.com, Inc. [45.8401, -119.7050, 0.0000] 🌐 http_host http_host:bcgame.li host=bcgame.li http_host http_host:facebook.com host=facebook.com http_host http_host:172.234.197.23:80 host=172.234.197.23:80 http_host http_host:empire.io host=empire.io org org:DigitalOcean, LLC name=DigitalOcean, LLC org org:METASERV COMPANY LIMITED name=METASERV COMPANY LIMITED org org:Akamai Connected Cloud name=Akamai Connected Cloud org org:Google LLC name=Google LLC org org:Scaleway S.a.s. name=Scaleway S.a.s. org org:Clouvider Limited name=Clouvider Limited org org:Kaopu Cloud HK Limited name=Kaopu Cloud HK Limited org org:Hurricane Electric LLC name=Hurricane Electric LLC org org:Cloudflare, Inc. name=Cloudflare, Inc. org org:The Constant Company, LLC name=The Constant Company, LLC org org:Jiangsu Wuxi International IDC network name=Jiangsu Wuxi International IDC network org org:Amazon.com, Inc. name=Amazon.com, Inc. org org:Societe Francaise Du Radiotelephone - SFR SA name=Societe Francaise Du Radiotelephone - SFR SA org org:Euro Crypt EOOD name=Euro Crypt EOOD org org:Virgin Media name=Virgin Media org org:X-City Ltd. name=X-City Ltd. org org:Flyservers S.A. name=Flyservers S.A. org org:Internap Holding LLC name=Internap Holding LLC org org:CtrlS name=CtrlS org org:Viettel Corporation name=Viettel Corporation org org:WHG Hosting Services Ltd name=WHG Hosting Services Ltd org org:China Unicom IP network China169 Guangdong province name=China Unicom IP network China169 Guangdong province org org:OVH SAS name=OVH SAS org org:Pfcloud UG (haftungsbeschrankt) name=Pfcloud UG (haftungsbeschrankt) org org:Korea Telecom name=Korea Telecom org org:Eonix Corporation name=Eonix Corporation org org:Etihad Etisalat, a joint stock company name=Etihad Etisalat, a joint stock company org org:eNET Inc. name=eNET Inc. org org:Netsec Limited name=Netsec Limited org org:Alibaba US Technology Co., Ltd. name=Alibaba US Technology Co., Ltd. org org:Feo Prest SRL name=Feo Prest SRL org org:Microsoft Corporation name=Microsoft Corporation org org:Gravhosting LLC name=Gravhosting LLC org org:Host Universal Pty Ltd name=Host Universal Pty Ltd org org:Psychz Networks name=Psychz Networks org org:Techoff Srv Limited name=Techoff Srv Limited org org:Unmanaged Ltd name=Unmanaged Ltd org org:Chinanet name=Chinanet org org:SURF B.V. name=SURF B.V. org org:Datacamp Limited name=Datacamp Limited org org:dataforest GmbH name=dataforest GmbH org org:Orange Espagne SA name=Orange Espagne SA org org:Kamatera, Inc. name=Kamatera, Inc. org org:VIETNAM POSTS AND TELECOMMUNICATIONS GROUP name=VIETNAM POSTS AND TELECOMMUNICATIONS GROUP org org:Gigabit Hosting Sdn Bhd name=Gigabit Hosting Sdn Bhd org org:SpectraIP B.V. name=SpectraIP B.V. org org:NETWORK TRANSIT HOLDINGS LLC name=NETWORK TRANSIT HOLDINGS LLC org org:Netia SA name=Netia SA org org:Misaka Network, Inc. name=Misaka Network, Inc. org org:EOLO S.p.A. name=EOLO S.p.A. org org:Censys, Inc. name=Censys, Inc. org org:PT Herza Digital Indonesia name=PT Herza Digital Indonesia pcap_artifact PCAP:capture_20260503090001:9fa0a5b77f1a file_size=33,508, filename=capture_20260503090001.pcap, ingested_at=2026-05-03T17:04:25.061648+00:00 pcap_artifact PCAP:capture_20260502220001:5814c2f47613 file_size=10,195, filename=capture_20260502220001.pcap, ingested_at=2026-05-03T17:03:57.179043+00:00 pcap_artifact PCAP:capture_20260502180001:2d19fc77de62 file_size=22,444, filename=capture_20260502180001.pcap, ingested_at=2026-05-03T17:03:39.984500+00:00 pcap_artifact PCAP:capture_20260503180001:d2d75d855cad file_size=9,891, filename=capture_20260503180001.pcap, ingested_at=2026-05-03T18:52:55.601663+00:00 pcap_artifact PCAP:capture_20260503010002:a6238713d3f8 file_size=21,891, filename=capture_20260503010002.pcap, ingested_at=2026-05-03T17:04:07.277256+00:00 pcap_artifact PCAP:capture_20260503120001:00007c720922 file_size=12,662, filename=capture_20260503120001.pcap, ingested_at=2026-05-03T17:04:32.216109+00:00 pcap_artifact PCAP:capture_20260502200001:b2a32551bf2a file_size=15,606, filename=capture_20260502200001.pcap, ingested_at=2026-05-03T17:03:47.607459+00:00 pcap_artifact PCAP:capture_20260503130001:b1e0e16f46fb file_size=6,492, filename=capture_20260503130001.pcap, ingested_at=2026-05-03T17:04:34.591190+00:00 pcap_artifact PCAP:capture_20260503110001:565084ae00ec file_size=1,613, filename=capture_20260503110001.pcap, ingested_at=2026-05-03T17:04:31.108246+00:00 pcap_artifact PCAP:capture_20260503160001:4ab85905f00a file_size=2,619, filename=capture_20260503160001.pcap, ingested_at=2026-05-03T17:04:40.730531+00:00 pcap_artifact PCAP:capture_20260502190001:8193f6995e16 file_size=34,934, filename=capture_20260502190001.pcap, ingested_at=2026-05-03T17:03:43.601302+00:00 pcap_artifact PCAP:capture_20260502210001:658deeed2512 file_size=23,136, filename=capture_20260502210001.pcap, ingested_at=2026-05-03T17:03:50.306299+00:00 pcap_artifact PCAP:capture_20260503080001:1eecdee8be43 file_size=3,497, filename=capture_20260503080001.pcap, ingested_at=2026-05-03T17:04:22.641813+00:00 pcap_artifact PCAP:capture_20260503000001:946f6c122dc8 file_size=22,009, filename=capture_20260503000001.pcap, ingested_at=2026-05-03T17:04:00.826342+00:00 pcap_artifact PCAP:capture_20260502170001:30d4fe416229 file_size=3,186, filename=capture_20260502170001.pcap, ingested_at=2026-05-03T17:03:38.340361+00:00 pcap_artifact PCAP:capture_20260503060001:4b41348fc9cf file_size=2,796, filename=capture_20260503060001.pcap, ingested_at=2026-05-03T17:04:17.891903+00:00 pcap_artifact PCAP:capture_20260503040001:7f9aaa114e1a file_size=14,657, filename=capture_20260503040001.pcap, ingested_at=2026-05-03T17:04:14.463347+00:00 pcap_artifact PCAP:capture_20260502230001:3b5feaf576a3 file_size=2,935, filename=capture_20260502230001.pcap, ingested_at=2026-05-03T17:03:59.120454+00:00 pcap_artifact PCAP:capture_20260503030001:12019f695583 file_size=6,585, filename=capture_20260503030001.pcap, ingested_at=2026-05-03T17:04:12.765772+00:00 pcap_artifact PCAP:capture_20260503050001:5ba38b4c8427 file_size=2,599, filename=capture_20260503050001.pcap, ingested_at=2026-05-03T17:04:16.654305+00:00 pcap_artifact PCAP:capture_20260503150001:387246c7c61a file_size=11,884, filename=capture_20260503150001.pcap, ingested_at=2026-05-03T17:04:39.374367+00:00 pcap_artifact PCAP:capture_20260503100001:1489b5a2a2c1 file_size=21,181, filename=capture_20260503100001.pcap, ingested_at=2026-05-03T17:04:27.918811+00:00 pcap_artifact PCAP:capture_20260503020001:67090b633b55 file_size=143,813, filename=capture_20260503020001.pcap, ingested_at=2026-05-03T17:04:10.989346+00:00 pcap_artifact PCAP:capture_20260503070001:da1406ada301 file_size=10,706, filename=capture_20260503070001.pcap, ingested_at=2026-05-03T17:04:19.773928+00:00 pcap_artifact PCAP:capture_20260502160001:389bc179e798 file_size=28,702, filename=capture_20260502160001.pcap, ingested_at=2026-05-03T17:03:34.648744+00:00 pcap_artifact PCAP:capture_20260503170001:a8ce63a9c27b file_size=10,465, filename=capture_20260503170001.pcap, ingested_at=2026-05-03T18:52:54.057460+00:00 pcap_artifact PCAP:capture_20260503140001:149e55631858 file_size=7,990, filename=capture_20260503140001.pcap, ingested_at=2026-05-03T17:04:36.570269+00:00 pcap_artifact PCAP:capture_20260502150001:ec6441ca9200 file_size=34,916, filename=capture_20260502150001.pcap, ingested_at=2026-05-03T17:03:31.526979+00:00 port_hub port:tcp:43874 port=43,874, proto=tcp port_hub port:tcp:26835 port=26,835, proto=tcp port_hub port:tcp:10002 port=10,002, proto=tcp port_hub port:tcp:4448 port=4,448, proto=tcp port_hub port:udp:53 port=53, proto=udp port_hub port:tcp:40662 port=40,662, proto=tcp port_hub port:tcp:52432 port=52,432, proto=tcp port_hub port:tcp:54583 port=54,583, proto=tcp port_hub port:tcp:18817 port=18,817, proto=tcp port_hub port:tcp:22 port=22, proto=tcp port_hub port:tcp:3128 port=3,128, proto=tcp port_hub port:tcp:31609 port=31,609, proto=tcp port_hub port:tcp:3389 port=3,389, proto=tcp port_hub port:tcp:1244 port=1,244, proto=tcp port_hub port:tcp:51610 port=51,610, proto=tcp port_hub port:tcp:36722 port=36,722, proto=tcp port_hub port:tcp:80 port=80, proto=tcp port_hub port:tcp:9108 port=9,108, proto=tcp port_hub port:tcp:1245 port=1,245, proto=tcp port_hub port:tcp:43553 port=43,553, proto=tcp port_hub port:tcp:8546 port=8,546, proto=tcp port_hub port:tcp:45950 port=45,950, proto=tcp port_hub port:tcp:49812 port=49,812, proto=tcp port_hub port:tcp:18010 port=18,010, proto=tcp port_hub port:tcp:49113 port=49,113, proto=tcp port_hub port:tcp:3232 port=3,232, proto=tcp port_hub port:tcp:39517 port=39,517, proto=tcp port_hub port:tcp:23 port=23, proto=tcp port_hub port:tcp:29051 port=29,051, proto=tcp port_hub port:tcp:8088 port=8,088, proto=tcp port_hub port:tcp:443 port=443, proto=tcp port_hub port:tcp:12443 port=12,443, proto=tcp port_hub port:tcp:13443 port=13,443, proto=tcp port_hub port:tcp:55008 port=55,008, proto=tcp port_hub port:tcp:21 port=21, proto=tcp port_hub port:tcp:32382 port=32,382, proto=tcp port_hub port:tcp:36972 port=36,972, proto=tcp protocol_event pe:syn:SESSION-658db75ca0ec2984 count=2, event_type=TCP_SYN, session=SESSION-658db75ca0ec2984 protocol_event pe:syn:SESSION-dbf43d09bfb097ff count=2, event_type=TCP_SYN, session=SESSION-dbf43d09bfb097ff protocol_event pe:dns:SESSION-dda2d54e6fafdb3d event_type=DNS_EXCHANGE, query_count=2, session=SESSION-dda2d54e6fafdb3d protocol_event pe:dns:SESSION-ef5c4cec5282c6f2 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-ef5c4cec5282c6f2 protocol_event pe:syn:SESSION-25ec67cf3423e490 count=2, event_type=TCP_SYN, session=SESSION-25ec67cf3423e490 protocol_event pe:syn:SESSION-28341bf5148fcec3 count=2, event_type=TCP_SYN, session=SESSION-28341bf5148fcec3 protocol_event pe:syn:SESSION-dc2c44c6c9211160 count=2, event_type=TCP_SYN, session=SESSION-dc2c44c6c9211160 protocol_event pe:tls:SESSION-c9d94954cad7c428 event_type=TLS_SESSION, packet_count=11, session=SESSION-c9d94954cad7c428 protocol_event pe:tls:SESSION-60b2feb615904c06 event_type=TLS_SESSION, packet_count=26, session=SESSION-60b2feb615904c06 protocol_event pe:tls:SESSION-4efc69c2e635aa8f event_type=TLS_SESSION, packet_count=2, session=SESSION-4efc69c2e635aa8f protocol_event pe:syn:SESSION-f9994bb19da4eaf6 count=2, event_type=TCP_SYN, session=SESSION-f9994bb19da4eaf6 protocol_event pe:syn:SESSION-04dbdc289681452c count=5, event_type=TCP_SYN, session=SESSION-04dbdc289681452c protocol_event pe:rst:SESSION-3f693bd427e6185e count=1, event_type=TCP_RST, session=SESSION-3f693bd427e6185e protocol_event pe:dns:SESSION-a137cee14521a7d3 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-a137cee14521a7d3 protocol_event pe:dns:SESSION-22e694a2b8cefc12 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-22e694a2b8cefc12 protocol_event pe:syn:SESSION-909f4f35ce48fc0a count=4, event_type=TCP_SYN, session=SESSION-909f4f35ce48fc0a protocol_event pe:rst:SESSION-686ed406e0728e12 count=1, event_type=TCP_RST, session=SESSION-686ed406e0728e12 protocol_event pe:syn:SESSION-337bfba9efd8958a count=2, event_type=TCP_SYN, session=SESSION-337bfba9efd8958a protocol_event pe:syn:SESSION-1f9e68ab259bdd9b count=1, event_type=TCP_SYN, session=SESSION-1f9e68ab259bdd9b protocol_event pe:syn:SESSION-1d07fddfa500f08a count=2, event_type=TCP_SYN, session=SESSION-1d07fddfa500f08a protocol_event pe:syn:SESSION-4972b4045f230a0c count=2, event_type=TCP_SYN, session=SESSION-4972b4045f230a0c protocol_event pe:dns:SESSION-05e058daf8b3aae8 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-05e058daf8b3aae8 protocol_event pe:tls:SESSION-14ca161ddbd2d096 event_type=TLS_SESSION, packet_count=3, session=SESSION-14ca161ddbd2d096 protocol_event pe:dns:SESSION-970edfdb90462f9d event_type=DNS_EXCHANGE, query_count=2, session=SESSION-970edfdb90462f9d protocol_event pe:dns:SESSION-83d46eabf5079ddf event_type=DNS_EXCHANGE, query_count=2, session=SESSION-83d46eabf5079ddf protocol_event pe:dns:SESSION-cddd43e43d0ba744 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-cddd43e43d0ba744 protocol_event pe:rst:SESSION-b0c64059bafa518b count=1, event_type=TCP_RST, session=SESSION-b0c64059bafa518b protocol_event pe:syn:SESSION-c9d94954cad7c428 count=2, event_type=TCP_SYN, session=SESSION-c9d94954cad7c428 protocol_event pe:syn:SESSION-c25de7a226bf69aa count=3, event_type=TCP_SYN, session=SESSION-c25de7a226bf69aa protocol_event pe:syn:SESSION-18c57ecac8e86250 count=2, event_type=TCP_SYN, session=SESSION-18c57ecac8e86250 protocol_event pe:syn:SESSION-44e6b4fe70bbd520 count=2, event_type=TCP_SYN, session=SESSION-44e6b4fe70bbd520 protocol_event pe:tls:SESSION-afc680ab6deeec94 event_type=TLS_SESSION, packet_count=9, session=SESSION-afc680ab6deeec94 protocol_event pe:rst:SESSION-683f67a830d4ed44 count=1, event_type=TCP_RST, session=SESSION-683f67a830d4ed44 protocol_event pe:syn:SESSION-872d165f2cc555ea count=2, event_type=TCP_SYN, session=SESSION-872d165f2cc555ea protocol_event pe:syn:SESSION-f0541c454655557f count=6, event_type=TCP_SYN, session=SESSION-f0541c454655557f protocol_event pe:syn:SESSION-cb61c5202def1d6e count=2, event_type=TCP_SYN, session=SESSION-cb61c5202def1d6e protocol_event pe:tls:SESSION-148e1d12cdbb9dc4 event_type=TLS_SESSION, packet_count=10, session=SESSION-148e1d12cdbb9dc4 protocol_event pe:tls:SESSION-8bbf420c23568168 event_type=TLS_SESSION, packet_count=3, session=SESSION-8bbf420c23568168 protocol_event pe:syn:SESSION-0d693287fef174f5 count=3, event_type=TCP_SYN, session=SESSION-0d693287fef174f5 protocol_event pe:dns:SESSION-65de6a2010ab1cdf event_type=DNS_EXCHANGE, query_count=2, session=SESSION-65de6a2010ab1cdf protocol_event pe:dns:SESSION-f0fe288b7e680824 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-f0fe288b7e680824 protocol_event pe:syn:SESSION-a4239b95c94f383a count=2, event_type=TCP_SYN, session=SESSION-a4239b95c94f383a protocol_event pe:syn:SESSION-fd39b9170ce5c798 count=11, event_type=TCP_SYN, session=SESSION-fd39b9170ce5c798 protocol_event pe:syn:SESSION-16d0bbfb24e58220 count=2, event_type=TCP_SYN, session=SESSION-16d0bbfb24e58220 protocol_event pe:dns:SESSION-595b1d3c3e74e180 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-595b1d3c3e74e180 protocol_event pe:rst:SESSION-21c6d2482361c113 count=1, event_type=TCP_RST, session=SESSION-21c6d2482361c113 protocol_event pe:syn:SESSION-e3254e55c7d1a541 count=2, event_type=TCP_SYN, session=SESSION-e3254e55c7d1a541 protocol_event pe:tls:SESSION-b0c64059bafa518b event_type=TLS_SESSION, packet_count=3, session=SESSION-b0c64059bafa518b protocol_event pe:tls:SESSION-8bd4acd5bebd8982 event_type=TLS_SESSION, packet_count=4, session=SESSION-8bd4acd5bebd8982 protocol_event pe:rst:SESSION-8bbf420c23568168 count=1, event_type=TCP_RST, session=SESSION-8bbf420c23568168 protocol_event pe:syn:SESSION-c113a7ff13526ddc count=2, event_type=TCP_SYN, session=SESSION-c113a7ff13526ddc protocol_event pe:syn:SESSION-702cdfdb2f7eba8f count=5, event_type=TCP_SYN, session=SESSION-702cdfdb2f7eba8f protocol_event pe:syn:SESSION-4cfb05f27fc6062c count=2, event_type=TCP_SYN, session=SESSION-4cfb05f27fc6062c protocol_event pe:dns:SESSION-a31d483fa9b13ebe event_type=DNS_EXCHANGE, query_count=2, session=SESSION-a31d483fa9b13ebe protocol_event pe:dns:SESSION-96c417766288dee6 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-96c417766288dee6 protocol_event pe:syn:SESSION-bcdfed2f432cdce2 count=2, event_type=TCP_SYN, session=SESSION-bcdfed2f432cdce2 protocol_event pe:rst:SESSION-1f9e68ab259bdd9b count=1, event_type=TCP_RST, session=SESSION-1f9e68ab259bdd9b protocol_event pe:syn:SESSION-d8013ec5d9ad07e8 count=2, event_type=TCP_SYN, session=SESSION-d8013ec5d9ad07e8 protocol_event pe:dns:SESSION-894df0df7bb599ff event_type=DNS_EXCHANGE, query_count=2, session=SESSION-894df0df7bb599ff protocol_event pe:dns:SESSION-88e69e6de2de50d9 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-88e69e6de2de50d9 protocol_event pe:rst:SESSION-872d165f2cc555ea count=1, event_type=TCP_RST, session=SESSION-872d165f2cc555ea protocol_event pe:syn:SESSION-02171245967fef66 count=18, event_type=TCP_SYN, session=SESSION-02171245967fef66 protocol_event pe:rst:SESSION-14ca161ddbd2d096 count=1, event_type=TCP_RST, session=SESSION-14ca161ddbd2d096 protocol_event pe:syn:SESSION-0af1c864ba46036c count=3, event_type=TCP_SYN, session=SESSION-0af1c864ba46036c protocol_event pe:rst:SESSION-9a46e2ee818e118d count=2, event_type=TCP_RST, session=SESSION-9a46e2ee818e118d protocol_event pe:syn:SESSION-7b74e9d4f101aa92 count=3, event_type=TCP_SYN, session=SESSION-7b74e9d4f101aa92 protocol_event pe:syn:SESSION-2e3045d942cba8d7 count=2, event_type=TCP_SYN, session=SESSION-2e3045d942cba8d7 protocol_event pe:tls:SESSION-e640c385d331720f event_type=TLS_SESSION, packet_count=6, session=SESSION-e640c385d331720f protocol_event pe:dns:SESSION-cf1c64d21cbd403b event_type=DNS_EXCHANGE, query_count=2, session=SESSION-cf1c64d21cbd403b protocol_event pe:dns:SESSION-5fe2f02c8aa64a3f event_type=DNS_EXCHANGE, query_count=2, session=SESSION-5fe2f02c8aa64a3f protocol_event pe:syn:SESSION-14ca161ddbd2d096 count=2, event_type=TCP_SYN, session=SESSION-14ca161ddbd2d096 protocol_event pe:syn:SESSION-2665bb5d63c7467b count=2, event_type=TCP_SYN, session=SESSION-2665bb5d63c7467b protocol_event pe:dns:SESSION-c5dea464271b8027 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-c5dea464271b8027 protocol_event pe:syn:SESSION-f0dcff5f0ed2ff24 count=3, event_type=TCP_SYN, session=SESSION-f0dcff5f0ed2ff24 protocol_event pe:syn:SESSION-26f031e3ecf63c33 count=5, event_type=TCP_SYN, session=SESSION-26f031e3ecf63c33 protocol_event pe:syn:SESSION-ccdd44eef3fb099a count=2, event_type=TCP_SYN, session=SESSION-ccdd44eef3fb099a protocol_event pe:tls:SESSION-44b87706a35e5c96 event_type=TLS_SESSION, packet_count=11, session=SESSION-44b87706a35e5c96 protocol_event pe:rst:SESSION-558bd56a190fc21c count=1, event_type=TCP_RST, session=SESSION-558bd56a190fc21c protocol_event pe:dns:SESSION-ec0150286017152a event_type=DNS_EXCHANGE, query_count=2, session=SESSION-ec0150286017152a protocol_event pe:tls:SESSION-48256ceebced597a event_type=TLS_SESSION, packet_count=9, session=SESSION-48256ceebced597a protocol_event pe:tls:SESSION-2fa296378e24c275 event_type=TLS_SESSION, packet_count=2, session=SESSION-2fa296378e24c275 protocol_event pe:dns:SESSION-2730016d44118554 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-2730016d44118554 protocol_event pe:rst:SESSION-4d8242602fb7b521 count=1, event_type=TCP_RST, session=SESSION-4d8242602fb7b521 protocol_event pe:syn:SESSION-b47e459b6486a574 count=2, event_type=TCP_SYN, session=SESSION-b47e459b6486a574 protocol_event pe:syn:SESSION-b5032444a002778e count=5, event_type=TCP_SYN, session=SESSION-b5032444a002778e protocol_event pe:dns:SESSION-bd0b88a5dd781a63 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-bd0b88a5dd781a63 protocol_event pe:dns:SESSION-b41b9f1e86982cfe event_type=DNS_EXCHANGE, query_count=2, session=SESSION-b41b9f1e86982cfe protocol_event pe:syn:SESSION-ac5edcb721e7f640 count=2, event_type=TCP_SYN, session=SESSION-ac5edcb721e7f640 protocol_event pe:tls:SESSION-b15dc6b4dfae9229 event_type=TLS_SESSION, packet_count=11, session=SESSION-b15dc6b4dfae9229 protocol_event pe:tls:SESSION-d8013ec5d9ad07e8 event_type=TLS_SESSION, packet_count=9, session=SESSION-d8013ec5d9ad07e8 protocol_event pe:rst:SESSION-5a25711039a017ab count=1, event_type=TCP_RST, session=SESSION-5a25711039a017ab protocol_event pe:dns:SESSION-40afa79ed404ca8a event_type=DNS_EXCHANGE, query_count=2, session=SESSION-40afa79ed404ca8a protocol_event pe:syn:SESSION-8721cc405ecaceba count=2, event_type=TCP_SYN, session=SESSION-8721cc405ecaceba protocol_event pe:syn:SESSION-652a421469ff7035 count=9, event_type=TCP_SYN, session=SESSION-652a421469ff7035 protocol_event pe:syn:SESSION-d7ab3a601d9e6abb count=3, event_type=TCP_SYN, session=SESSION-d7ab3a601d9e6abb protocol_event pe:syn:SESSION-61ff88c731dbe214 count=3, event_type=TCP_SYN, session=SESSION-61ff88c731dbe214 protocol_event pe:syn:SESSION-3d70c41de90aff89 count=3, event_type=TCP_SYN, session=SESSION-3d70c41de90aff89 protocol_event pe:syn:SESSION-6b53817930d995e0 count=18, event_type=TCP_SYN, session=SESSION-6b53817930d995e0 protocol_event pe:syn:SESSION-c3d05866398c6298 count=3, event_type=TCP_SYN, session=SESSION-c3d05866398c6298 protocol_event pe:dns:SESSION-d9e816a75fcafe96 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-d9e816a75fcafe96 protocol_event pe:syn:SESSION-cda1e0e1de4f16b9 count=3, event_type=TCP_SYN, session=SESSION-cda1e0e1de4f16b9 protocol_event pe:syn:SESSION-873f44314e990705 count=3, event_type=TCP_SYN, session=SESSION-873f44314e990705 protocol_event pe:tls:SESSION-8b78af97984eddc1 event_type=TLS_SESSION, packet_count=10, session=SESSION-8b78af97984eddc1 protocol_event pe:syn:SESSION-96b8b9b88d3cc23a count=2, event_type=TCP_SYN, session=SESSION-96b8b9b88d3cc23a protocol_event pe:syn:SESSION-53ea425ae4499ecf count=3, event_type=TCP_SYN, session=SESSION-53ea425ae4499ecf protocol_event pe:rst:SESSION-ad4b30d05cba7392 count=1, event_type=TCP_RST, session=SESSION-ad4b30d05cba7392 protocol_event pe:rst:SESSION-1f47a197362d5c79 count=2, event_type=TCP_RST, session=SESSION-1f47a197362d5c79 protocol_event pe:syn:SESSION-e2fad32ef23f02e5 count=2, event_type=TCP_SYN, session=SESSION-e2fad32ef23f02e5 protocol_event pe:syn:SESSION-7002429ae8930c54 count=2, event_type=TCP_SYN, session=SESSION-7002429ae8930c54 protocol_event pe:syn:SESSION-0fd98b6e77acc752 count=2, event_type=TCP_SYN, session=SESSION-0fd98b6e77acc752 protocol_event pe:dns:SESSION-64300cff8b10944a event_type=DNS_EXCHANGE, query_count=2, session=SESSION-64300cff8b10944a protocol_event pe:dns:SESSION-c8eccdf5e7c2b60a event_type=DNS_EXCHANGE, query_count=2, session=SESSION-c8eccdf5e7c2b60a protocol_event pe:syn:SESSION-640436da0ba80f21 count=3, event_type=TCP_SYN, session=SESSION-640436da0ba80f21 protocol_event pe:dns:SESSION-8adfa3b782de8dd2 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-8adfa3b782de8dd2 protocol_event pe:syn:SESSION-b05096a295fb4f00 count=8, event_type=TCP_SYN, session=SESSION-b05096a295fb4f00 protocol_event pe:dns:SESSION-3b9603efcdefb149 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-3b9603efcdefb149 protocol_event pe:syn:SESSION-8bbf420c23568168 count=2, event_type=TCP_SYN, session=SESSION-8bbf420c23568168 protocol_event pe:tls:SESSION-4c8d9751ec753a85 event_type=TLS_SESSION, packet_count=10, session=SESSION-4c8d9751ec753a85 protocol_event pe:syn:SESSION-bbc7da9b87b7c5c2 count=5, event_type=TCP_SYN, session=SESSION-bbc7da9b87b7c5c2 protocol_event pe:dns:SESSION-fdba08350381849a event_type=DNS_EXCHANGE, query_count=2, session=SESSION-fdba08350381849a protocol_event pe:syn:SESSION-2fa296378e24c275 count=2, event_type=TCP_SYN, session=SESSION-2fa296378e24c275 protocol_event pe:tls:SESSION-5d7eff286e68f3b8 event_type=TLS_SESSION, packet_count=10, session=SESSION-5d7eff286e68f3b8 protocol_event pe:syn:SESSION-86557125cfa86be8 count=2, event_type=TCP_SYN, session=SESSION-86557125cfa86be8 protocol_event pe:syn:SESSION-d73c0e5f44ef582f count=4, event_type=TCP_SYN, session=SESSION-d73c0e5f44ef582f protocol_event pe:syn:SESSION-ad4b30d05cba7392 count=2, event_type=TCP_SYN, session=SESSION-ad4b30d05cba7392 protocol_event pe:dns:SESSION-c556c63e044bb511 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-c556c63e044bb511 protocol_event pe:syn:SESSION-2abfe1caa18a8bcf count=2, event_type=TCP_SYN, session=SESSION-2abfe1caa18a8bcf protocol_event pe:syn:SESSION-1c2d6e01952e458c count=2, event_type=TCP_SYN, session=SESSION-1c2d6e01952e458c protocol_event pe:rst:SESSION-35e5ea7d7f63cffc count=1, event_type=TCP_RST, session=SESSION-35e5ea7d7f63cffc protocol_event pe:syn:SESSION-c8a8a97a8b12b7c5 count=2, event_type=TCP_SYN, session=SESSION-c8a8a97a8b12b7c5 protocol_event pe:dns:SESSION-688bae89af40fbef event_type=DNS_EXCHANGE, query_count=2, session=SESSION-688bae89af40fbef protocol_event pe:syn:SESSION-4ad1173016185d80 count=10, event_type=TCP_SYN, session=SESSION-4ad1173016185d80 protocol_event pe:dns:SESSION-4abd89290ac61671 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-4abd89290ac61671 protocol_event pe:rst:SESSION-8b78af97984eddc1 count=1, event_type=TCP_RST, session=SESSION-8b78af97984eddc1 protocol_event pe:syn:SESSION-afc680ab6deeec94 count=2, event_type=TCP_SYN, session=SESSION-afc680ab6deeec94 protocol_event pe:rst:SESSION-4c8d9751ec753a85 count=1, event_type=TCP_RST, session=SESSION-4c8d9751ec753a85 protocol_event pe:syn:SESSION-5fe3338390c20be7 count=2, event_type=TCP_SYN, session=SESSION-5fe3338390c20be7 protocol_event pe:rst:SESSION-dd95f5044be03589 count=1, event_type=TCP_RST, session=SESSION-dd95f5044be03589 protocol_event pe:syn:SESSION-16449cddcfec8d51 count=2, event_type=TCP_SYN, session=SESSION-16449cddcfec8d51 protocol_event pe:syn:SESSION-88cb9e97f032387d count=3, event_type=TCP_SYN, session=SESSION-88cb9e97f032387d protocol_event pe:dns:SESSION-bb33ba7686c10169 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-bb33ba7686c10169 protocol_event pe:syn:SESSION-b830488fd91fb768 count=2, event_type=TCP_SYN, session=SESSION-b830488fd91fb768 protocol_event pe:syn:SESSION-8b78af97984eddc1 count=2, event_type=TCP_SYN, session=SESSION-8b78af97984eddc1 protocol_event pe:tls:SESSION-1e867b4eace2e33f event_type=TLS_SESSION, packet_count=4, session=SESSION-1e867b4eace2e33f protocol_event pe:syn:SESSION-592582a8a961c17d count=2, event_type=TCP_SYN, session=SESSION-592582a8a961c17d protocol_event pe:syn:SESSION-1fc5b3afe77a6cc7 count=2, event_type=TCP_SYN, session=SESSION-1fc5b3afe77a6cc7 protocol_event pe:syn:SESSION-4b3a171b7dcc8f4c count=2, event_type=TCP_SYN, session=SESSION-4b3a171b7dcc8f4c protocol_event pe:syn:SESSION-597401b5992e9f85 count=4, event_type=TCP_SYN, session=SESSION-597401b5992e9f85 protocol_event pe:rst:SESSION-f5c5a737067e8c61 count=1, event_type=TCP_RST, session=SESSION-f5c5a737067e8c61 protocol_event pe:syn:SESSION-b15dc6b4dfae9229 count=2, event_type=TCP_SYN, session=SESSION-b15dc6b4dfae9229 protocol_event pe:syn:SESSION-c0526b365adbd2f2 count=2, event_type=TCP_SYN, session=SESSION-c0526b365adbd2f2 protocol_event pe:dns:SESSION-2cbd650cdb32c014 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-2cbd650cdb32c014 protocol_event pe:tls:SESSION-14af178f584bdbff event_type=TLS_SESSION, packet_count=9, session=SESSION-14af178f584bdbff protocol_event pe:syn:SESSION-b85a199cddccd6e8 count=2, event_type=TCP_SYN, session=SESSION-b85a199cddccd6e8 protocol_event pe:dns:SESSION-cd7893c5c4c3eabb event_type=DNS_EXCHANGE, query_count=2, session=SESSION-cd7893c5c4c3eabb protocol_event pe:rst:SESSION-b47e459b6486a574 count=1, event_type=TCP_RST, session=SESSION-b47e459b6486a574 protocol_event pe:syn:SESSION-215854dc61c3fcb3 count=11, event_type=TCP_SYN, session=SESSION-215854dc61c3fcb3 protocol_event pe:syn:SESSION-8590ea47f1dd24f8 count=2, event_type=TCP_SYN, session=SESSION-8590ea47f1dd24f8 protocol_event pe:syn:SESSION-2395c025353fb0ee count=10, event_type=TCP_SYN, session=SESSION-2395c025353fb0ee protocol_event pe:syn:SESSION-683f67a830d4ed44 count=2, event_type=TCP_SYN, session=SESSION-683f67a830d4ed44 protocol_event pe:syn:SESSION-a7379d6bc5725ae0 count=3, event_type=TCP_SYN, session=SESSION-a7379d6bc5725ae0 protocol_event pe:rst:SESSION-455fd26670b68d6e count=1, event_type=TCP_RST, session=SESSION-455fd26670b68d6e protocol_event pe:rst:SESSION-d42832a4689537d9 count=1, event_type=TCP_RST, session=SESSION-d42832a4689537d9 protocol_event pe:dns:SESSION-692cacc9b77ac18d event_type=DNS_EXCHANGE, query_count=2, session=SESSION-692cacc9b77ac18d protocol_event pe:dns:SESSION-15b4ba444c69e69a event_type=DNS_EXCHANGE, query_count=2, session=SESSION-15b4ba444c69e69a protocol_event pe:syn:SESSION-5a133675a20b429b count=2, event_type=TCP_SYN, session=SESSION-5a133675a20b429b protocol_event pe:syn:SESSION-44b87706a35e5c96 count=2, event_type=TCP_SYN, session=SESSION-44b87706a35e5c96 protocol_event pe:dns:SESSION-c0800a82f6115206 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-c0800a82f6115206 protocol_event pe:syn:SESSION-6693b3d7e1f76209 count=8, event_type=TCP_SYN, session=SESSION-6693b3d7e1f76209 protocol_event pe:syn:SESSION-34a76226cb8c7c48 count=2, event_type=TCP_SYN, session=SESSION-34a76226cb8c7c48 protocol_event pe:syn:SESSION-3506fc55bf426b55 count=2, event_type=TCP_SYN, session=SESSION-3506fc55bf426b55 protocol_event pe:syn:SESSION-12a40fcbcb5b6007 count=3, event_type=TCP_SYN, session=SESSION-12a40fcbcb5b6007 protocol_event pe:syn:SESSION-b4f4b8661714482f count=10, event_type=TCP_SYN, session=SESSION-b4f4b8661714482f protocol_event pe:syn:SESSION-bd9ed37b33e7c0e0 count=5, event_type=TCP_SYN, session=SESSION-bd9ed37b33e7c0e0 protocol_event pe:rst:SESSION-60b2feb615904c06 count=3, event_type=TCP_RST, session=SESSION-60b2feb615904c06 protocol_event pe:syn:SESSION-4c8d9751ec753a85 count=2, event_type=TCP_SYN, session=SESSION-4c8d9751ec753a85 protocol_event pe:rst:SESSION-a237fdf2d60fb6b5 count=1, event_type=TCP_RST, session=SESSION-a237fdf2d60fb6b5 protocol_event pe:syn:SESSION-9aeeb653fccaa86a count=2, event_type=TCP_SYN, session=SESSION-9aeeb653fccaa86a protocol_event pe:syn:SESSION-148e1d12cdbb9dc4 count=2, event_type=TCP_SYN, session=SESSION-148e1d12cdbb9dc4 protocol_event pe:syn:SESSION-6632f9ffe51b0d3e count=7, event_type=TCP_SYN, session=SESSION-6632f9ffe51b0d3e protocol_event pe:syn:SESSION-02a78e53263fc2c8 count=11, event_type=TCP_SYN, session=SESSION-02a78e53263fc2c8 protocol_event pe:tls:SESSION-872d165f2cc555ea event_type=TLS_SESSION, packet_count=3, session=SESSION-872d165f2cc555ea protocol_event pe:syn:SESSION-526c3dbed8fd9966 count=2, event_type=TCP_SYN, session=SESSION-526c3dbed8fd9966 protocol_event pe:syn:SESSION-c91cd420795fae3a count=3, event_type=TCP_SYN, session=SESSION-c91cd420795fae3a protocol_event pe:syn:SESSION-4446f7cf3be9b726 count=2, event_type=TCP_SYN, session=SESSION-4446f7cf3be9b726 protocol_event pe:rst:SESSION-af096e40b0f2a79b count=1, event_type=TCP_RST, session=SESSION-af096e40b0f2a79b protocol_event pe:syn:SESSION-71e850bd6757f250 count=2, event_type=TCP_SYN, session=SESSION-71e850bd6757f250 protocol_event pe:syn:SESSION-2a1d9a124dc3d2c6 count=5, event_type=TCP_SYN, session=SESSION-2a1d9a124dc3d2c6 protocol_event pe:dns:SESSION-de0ada7999211706 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-de0ada7999211706 protocol_event pe:syn:SESSION-8274c3b5546f6672 count=2, event_type=TCP_SYN, session=SESSION-8274c3b5546f6672 protocol_event pe:rst:SESSION-bcdfed2f432cdce2 count=1, event_type=TCP_RST, session=SESSION-bcdfed2f432cdce2 protocol_event pe:syn:SESSION-a550345245388a36 count=13, event_type=TCP_SYN, session=SESSION-a550345245388a36 protocol_event pe:syn:SESSION-3b14e2fd30cc79b4 count=2, event_type=TCP_SYN, session=SESSION-3b14e2fd30cc79b4 protocol_event pe:syn:SESSION-6070733f089cc42c count=3, event_type=TCP_SYN, session=SESSION-6070733f089cc42c protocol_event pe:dns:SESSION-0251ad969f4972d4 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-0251ad969f4972d4 protocol_event pe:dns:SESSION-aae15a99bb68abe1 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-aae15a99bb68abe1 protocol_event pe:syn:SESSION-e640c385d331720f count=6, event_type=TCP_SYN, session=SESSION-e640c385d331720f protocol_event pe:rst:SESSION-0466b87e339301b8 count=7, event_type=TCP_RST, session=SESSION-0466b87e339301b8 protocol_event pe:syn:SESSION-add64aabd7448acb count=2, event_type=TCP_SYN, session=SESSION-add64aabd7448acb protocol_event pe:rst:SESSION-6a718cbe38970d6a count=7, event_type=TCP_RST, session=SESSION-6a718cbe38970d6a protocol_event pe:syn:SESSION-d42832a4689537d9 count=6, event_type=TCP_SYN, session=SESSION-d42832a4689537d9 protocol_event pe:syn:SESSION-841611015d842126 count=4, event_type=TCP_SYN, session=SESSION-841611015d842126 protocol_event pe:syn:SESSION-7d93da3667ee9555 count=2, event_type=TCP_SYN, session=SESSION-7d93da3667ee9555 protocol_event pe:dns:SESSION-4014e60213030bad event_type=DNS_EXCHANGE, query_count=2, session=SESSION-4014e60213030bad protocol_event pe:syn:SESSION-98b19b33d49913d9 count=2, event_type=TCP_SYN, session=SESSION-98b19b33d49913d9 protocol_event pe:rst:SESSION-0085d3f82b5b864b count=1, event_type=TCP_RST, session=SESSION-0085d3f82b5b864b protocol_event pe:dns:SESSION-c558b06da108125e event_type=DNS_EXCHANGE, query_count=2, session=SESSION-c558b06da108125e protocol_event pe:rst:SESSION-1d07fddfa500f08a count=1, event_type=TCP_RST, session=SESSION-1d07fddfa500f08a protocol_event pe:syn:SESSION-ce3e447e587cd057 count=3, event_type=TCP_SYN, session=SESSION-ce3e447e587cd057 protocol_event pe:tls:SESSION-683f67a830d4ed44 event_type=TLS_SESSION, packet_count=9, session=SESSION-683f67a830d4ed44 protocol_event pe:syn:SESSION-1f1338ca0d03a7da count=2, event_type=TCP_SYN, session=SESSION-1f1338ca0d03a7da protocol_event pe:dns:SESSION-45eff35d4fe337f9 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-45eff35d4fe337f9 protocol_event pe:dns:SESSION-9801d768ef8fb2c1 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-9801d768ef8fb2c1 protocol_event pe:dns:SESSION-853baec971d23dab event_type=DNS_EXCHANGE, query_count=2, session=SESSION-853baec971d23dab protocol_event pe:syn:SESSION-cf565ff82a8eab39 count=12, event_type=TCP_SYN, session=SESSION-cf565ff82a8eab39 protocol_event pe:syn:SESSION-32784f20416ea6ae count=2, event_type=TCP_SYN, session=SESSION-32784f20416ea6ae protocol_event pe:syn:SESSION-e8b4bb8948c85d2c count=3, event_type=TCP_SYN, session=SESSION-e8b4bb8948c85d2c protocol_event pe:dns:SESSION-6dd23998cd29d6e4 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-6dd23998cd29d6e4 protocol_event pe:tls:SESSION-e3254e55c7d1a541 event_type=TLS_SESSION, packet_count=8, session=SESSION-e3254e55c7d1a541 protocol_event pe:syn:SESSION-85f774c309efd9a7 count=2, event_type=TCP_SYN, session=SESSION-85f774c309efd9a7 protocol_event pe:syn:SESSION-feb22a7780366a4b count=2, event_type=TCP_SYN, session=SESSION-feb22a7780366a4b protocol_event pe:dns:SESSION-84779c50b74571dd event_type=DNS_EXCHANGE, query_count=2, session=SESSION-84779c50b74571dd protocol_event pe:dns:SESSION-a5382deda9720a36 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-a5382deda9720a36 protocol_event pe:syn:SESSION-b0c64059bafa518b count=2, event_type=TCP_SYN, session=SESSION-b0c64059bafa518b protocol_event pe:tls:SESSION-5fe3338390c20be7 event_type=TLS_SESSION, packet_count=15, session=SESSION-5fe3338390c20be7 protocol_event pe:dns:SESSION-fe966c55dad0b920 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-fe966c55dad0b920 protocol_event pe:syn:SESSION-5b6b54b340b8c0a3 count=3, event_type=TCP_SYN, session=SESSION-5b6b54b340b8c0a3 protocol_event pe:tls:SESSION-337bfba9efd8958a event_type=TLS_SESSION, packet_count=10, session=SESSION-337bfba9efd8958a protocol_event pe:dns:SESSION-c74f94b63fe35958 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-c74f94b63fe35958 protocol_event pe:syn:SESSION-d38cad975692856e count=2, event_type=TCP_SYN, session=SESSION-d38cad975692856e protocol_event pe:syn:SESSION-ef0107178de9529d count=6, event_type=TCP_SYN, session=SESSION-ef0107178de9529d protocol_event pe:syn:SESSION-39e5989f707701c7 count=9, event_type=TCP_SYN, session=SESSION-39e5989f707701c7 protocol_event pe:syn:SESSION-e98afd9333a033aa count=2, event_type=TCP_SYN, session=SESSION-e98afd9333a033aa protocol_event pe:rst:SESSION-5d7eff286e68f3b8 count=1, event_type=TCP_RST, session=SESSION-5d7eff286e68f3b8 protocol_event pe:syn:SESSION-809f256a37c40e2c count=2, event_type=TCP_SYN, session=SESSION-809f256a37c40e2c protocol_event pe:syn:SESSION-f5c5a737067e8c61 count=1, event_type=TCP_SYN, session=SESSION-f5c5a737067e8c61 protocol_event pe:syn:SESSION-ac9a18d268999ff7 count=2, event_type=TCP_SYN, session=SESSION-ac9a18d268999ff7 protocol_event pe:syn:SESSION-6c80028223b8b397 count=5, event_type=TCP_SYN, session=SESSION-6c80028223b8b397 protocol_event pe:syn:SESSION-af096e40b0f2a79b count=2, event_type=TCP_SYN, session=SESSION-af096e40b0f2a79b protocol_event pe:rst:SESSION-afc680ab6deeec94 count=1, event_type=TCP_RST, session=SESSION-afc680ab6deeec94 protocol_event pe:syn:SESSION-96032001dfbdc54b count=2, event_type=TCP_SYN, session=SESSION-96032001dfbdc54b protocol_event pe:syn:SESSION-21c6d2482361c113 count=2, event_type=TCP_SYN, session=SESSION-21c6d2482361c113 protocol_event pe:syn:SESSION-4d07006f517b10c4 count=2, event_type=TCP_SYN, session=SESSION-4d07006f517b10c4 protocol_event pe:dns:SESSION-d8df1102a6281b07 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-d8df1102a6281b07 protocol_event pe:syn:SESSION-08323e218a4350af count=2, event_type=TCP_SYN, session=SESSION-08323e218a4350af protocol_event pe:dns:SESSION-e0a78a9988baac91 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-e0a78a9988baac91 protocol_event pe:tls:SESSION-0af1c864ba46036c event_type=TLS_SESSION, packet_count=3, session=SESSION-0af1c864ba46036c protocol_event pe:syn:SESSION-00106177541c7093 count=10, event_type=TCP_SYN, session=SESSION-00106177541c7093 protocol_event pe:dns:SESSION-8c9dfae5358d66d5 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-8c9dfae5358d66d5 protocol_event pe:tls:SESSION-86557125cfa86be8 event_type=TLS_SESSION, packet_count=17, session=SESSION-86557125cfa86be8 protocol_event pe:syn:SESSION-60b2feb615904c06 count=2, event_type=TCP_SYN, session=SESSION-60b2feb615904c06 protocol_event pe:syn:SESSION-b394a72653437608 count=2, event_type=TCP_SYN, session=SESSION-b394a72653437608 protocol_event pe:dns:SESSION-1df64b2f5f544574 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-1df64b2f5f544574 protocol_event pe:syn:SESSION-4eef9f33f5b08aa9 count=5, event_type=TCP_SYN, session=SESSION-4eef9f33f5b08aa9 protocol_event pe:rst:SESSION-96b8b9b88d3cc23a count=1, event_type=TCP_RST, session=SESSION-96b8b9b88d3cc23a protocol_event pe:rst:SESSION-1c2d6e01952e458c count=1, event_type=TCP_RST, session=SESSION-1c2d6e01952e458c protocol_event pe:tls:SESSION-b394a72653437608 event_type=TLS_SESSION, packet_count=118, session=SESSION-b394a72653437608 protocol_event pe:dns:SESSION-4bc678f8fabc8ce7 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-4bc678f8fabc8ce7 protocol_event pe:dns:SESSION-aecba017b86b156f event_type=DNS_EXCHANGE, query_count=2, session=SESSION-aecba017b86b156f protocol_event pe:rst:SESSION-d8013ec5d9ad07e8 count=1, event_type=TCP_RST, session=SESSION-d8013ec5d9ad07e8 protocol_event pe:syn:SESSION-b9b2ecc2c099d7a1 count=14, event_type=TCP_SYN, session=SESSION-b9b2ecc2c099d7a1 protocol_event pe:dns:SESSION-84d8a687ceedca22 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-84d8a687ceedca22 protocol_event pe:syn:SESSION-9fc57a440065571a count=2, event_type=TCP_SYN, session=SESSION-9fc57a440065571a protocol_event pe:syn:SESSION-421954ed9b87b265 count=5, event_type=TCP_SYN, session=SESSION-421954ed9b87b265 protocol_event pe:rst:SESSION-feb22a7780366a4b count=1, event_type=TCP_RST, session=SESSION-feb22a7780366a4b protocol_event pe:syn:SESSION-5d7eff286e68f3b8 count=2, event_type=TCP_SYN, session=SESSION-5d7eff286e68f3b8 protocol_event pe:rst:SESSION-337bfba9efd8958a count=1, event_type=TCP_RST, session=SESSION-337bfba9efd8958a protocol_event pe:syn:SESSION-84e1435c60469258 count=4, event_type=TCP_SYN, session=SESSION-84e1435c60469258 protocol_event pe:tls:SESSION-e5e357bebe1cd334 event_type=TLS_SESSION, packet_count=6, session=SESSION-e5e357bebe1cd334 protocol_event pe:syn:SESSION-7bdb50108637614b count=5, event_type=TCP_SYN, session=SESSION-7bdb50108637614b protocol_event pe:tls:SESSION-1d07fddfa500f08a event_type=TLS_SESSION, packet_count=9, session=SESSION-1d07fddfa500f08a protocol_event pe:syn:SESSION-73bf871d83b7a425 count=4, event_type=TCP_SYN, session=SESSION-73bf871d83b7a425 protocol_event pe:dns:SESSION-baa313c3fcfe03b0 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-baa313c3fcfe03b0 protocol_event pe:syn:SESSION-2f1113cea5c54bac count=6, event_type=TCP_SYN, session=SESSION-2f1113cea5c54bac protocol_event pe:dns:SESSION-495e8264621ebfab event_type=DNS_EXCHANGE, query_count=2, session=SESSION-495e8264621ebfab protocol_event pe:rst:SESSION-4d07006f517b10c4 count=1, event_type=TCP_RST, session=SESSION-4d07006f517b10c4 protocol_event pe:tls:SESSION-c1c7778b1c98e657 event_type=TLS_SESSION, packet_count=2, session=SESSION-c1c7778b1c98e657 protocol_event pe:dns:SESSION-d0a3e3bab88edbfd event_type=DNS_EXCHANGE, query_count=2, session=SESSION-d0a3e3bab88edbfd protocol_event pe:dns:SESSION-098924ba15a02a63 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-098924ba15a02a63 protocol_event pe:syn:SESSION-4b1cf7553a0f129a count=6, event_type=TCP_SYN, session=SESSION-4b1cf7553a0f129a protocol_event pe:tls:SESSION-b4916b2f97abb9eb event_type=TLS_SESSION, packet_count=5, session=SESSION-b4916b2f97abb9eb protocol_event pe:dns:SESSION-821155945853dadb event_type=DNS_EXCHANGE, query_count=2, session=SESSION-821155945853dadb protocol_event pe:syn:SESSION-85484585f5ab0526 count=2, event_type=TCP_SYN, session=SESSION-85484585f5ab0526 protocol_event pe:dns:SESSION-b76b0110d6158f44 event_type=DNS_EXCHANGE, query_count=2, session=SESSION-b76b0110d6158f44 protocol_event pe:syn:SESSION-3720d0d258814f62 count=10, event_type=TCP_SYN, session=SESSION-3720d0d258814f62 protocol_event pe:tls:SESSION-d42832a4689537d9 event_type=TLS_SESSION, packet_count=7, session=SESSION-d42832a4689537d9 protocol_event pe:syn:SESSION-2413d3cfa1948153 count=3, event_type=TCP_SYN, session=SESSION-2413d3cfa1948153 protocol_event pe:syn:SESSION-a54ca9f478485937 count=4, event_type=TCP_SYN, session=SESSION-a54ca9f478485937 service svc:ssh name=ssh service svc:https name=https service svc:rdp name=rdp service svc:dns name=dns service svc:http name=http session SESSION-dc2c44c6c9211160 dst_ip=172.234.197.23, dst_port=23, duration_sec=8.77, end_time=1,777,798,826.707, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=34.19.119.64, src_port=21,724, start_time=1,777,798,817.936, tcp_flags=S, time_bucket=1,777,798,800, total_bytes=108, window_sec=30 session SESSION-841611015d842126 dst_ip=172.234.197.23, dst_port=23, duration_sec=19.27, end_time=1,777,766,429.673, expected_protocol=telnet, packet_count=4, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=184.154.95.157, src_port=46,176, start_time=1,777,766,410.403, tcp_flags=S, time_bucket=1,777,766,400, total_bytes=216, window_sec=30 session SESSION-d633ec05ba41ae95 dst_ip=172.234.197.23, duration_sec=13.98, end_time=1,777,755,646.617, expected_protocol=unregistered:0, packet_count=12, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=3.148.165.81, start_time=1,777,755,632.636, tcp_flags=, time_bucket=1,777,755,630, total_bytes=984, window_sec=30 session SESSION-6bf827f1cb46c058 dst_ip=172.234.197.23, duration_sec=15.96, end_time=1,777,766,449.476, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=16.144.80.146, start_time=1,777,766,433.514, tcp_flags=, time_bucket=1,777,766,430, total_bytes=492, window_sec=30 session SESSION-aecba017b86b156f dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,773,654.084, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=48,091, start_time=1,777,773,654.083, tcp_flags=, time_bucket=1,777,773,630, total_bytes=282, window_sec=30 session SESSION-0251ad969f4972d4 dst_ip=172.232.0.17, dst_port=53, duration_sec=0.02, end_time=1,777,798,801.228, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=50,875, start_time=1,777,798,801.208, tcp_flags=, time_bucket=1,777,798,800, total_bytes=282, window_sec=30 session SESSION-8274c3b5546f6672 dst_ip=172.234.197.23, dst_port=22, duration_sec=10.95, end_time=1,777,766,456.917, expected_protocol=ssh, packet_count=26, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=193.46.255.86, src_port=31,609, start_time=1,777,766,445.964, tcp_flags=P,A,E,S,C, time_bucket=1,777,766,430, total_bytes=5,470, window_sec=30 session SESSION-d0a3e3bab88edbfd dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,759,201.492, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=60,827, start_time=1,777,759,201.491, tcp_flags=, time_bucket=1,777,759,200, total_bytes=313, window_sec=30 session SESSION-62d042b674801336 dst_ip=14.225.7.70, dst_port=40,662, duration_sec=8.53, end_time=1,777,813,257.258, expected_protocol=unregistered:40662, packet_count=6, proto=TCP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,813,248.724, tcp_flags=F,A, time_bucket=1,777,813,230, total_bytes=396, window_sec=30 session SESSION-8b78af97984eddc1 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.05, end_time=1,777,748,413.52, expected_protocol=https, packet_count=10, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=212.102.40.218, src_port=64,040, start_time=1,777,748,413.473, tcp_flags=R,A,S,P, time_bucket=1,777,748,400, total_bytes=3,520, window_sec=30 session SESSION-658db75ca0ec2984 dst_ip=172.234.197.23, dst_port=80, duration_sec=0.21, end_time=1,777,780,860.35, expected_protocol=http, packet_count=11, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=45.148.10.67, src_port=43,142, start_time=1,777,780,860.136, tcp_flags=A,F,S,P, time_bucket=1,777,780,860, total_bytes=1,416, window_sec=30 session SESSION-c74f94b63fe35958 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,791,601.586, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=53,873, start_time=1,777,791,601.584, tcp_flags=, time_bucket=1,777,791,600, total_bytes=282, window_sec=30 session SESSION-894df0df7bb599ff dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,816,801.221, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=34,701, start_time=1,777,816,801.22, tcp_flags=, time_bucket=1,777,816,800, total_bytes=313, window_sec=30 session SESSION-e640c385d331720f dst_ip=172.234.197.23, dst_port=443, duration_sec=15.45, end_time=1,777,762,828.842, expected_protocol=https, packet_count=6, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=missing_tls,constant_size_c2, protocols=TCP, src_ip=90.160.103.93, src_port=36,571, start_time=1,777,762,813.394, tcp_flags=A,S, time_bucket=1,777,762,800, total_bytes=396, window_sec=30 session SESSION-04dbdc289681452c dst_ip=172.234.197.23, dst_port=23, duration_sec=15.09, end_time=1,777,748,446.672, expected_protocol=telnet, packet_count=5, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,748,431.581, tcp_flags=S, time_bucket=1,777,748,430, total_bytes=270, window_sec=30 session SESSION-9557363efb8f9693 dst_ip=172.234.197.23, duration_sec=2.52, end_time=1,777,766,422.283, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.218.65.249, start_time=1,777,766,419.762, tcp_flags=, time_bucket=1,777,766,400, total_bytes=328, window_sec=30 session SESSION-26f031e3ecf63c33 dst_ip=172.234.197.23, dst_port=23, duration_sec=22.39, end_time=1,777,791,629.528, expected_protocol=telnet, packet_count=5, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=104.131.68.134, src_port=34,101, start_time=1,777,791,607.141, tcp_flags=S, time_bucket=1,777,791,600, total_bytes=270, window_sec=30 session SESSION-d8df1102a6281b07 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,752,001.977, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=38,389, start_time=1,777,752,001.977, tcp_flags=, time_bucket=1,777,752,000, total_bytes=282, window_sec=30 session SESSION-b0c64059bafa518b dst_ip=172.234.197.23, dst_port=443, duration_sec=0.11, end_time=1,777,770,040.169, expected_protocol=https, packet_count=3, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=45.148.10.67, src_port=40,001, start_time=1,777,770,040.064, tcp_flags=R,A,S, time_bucket=1,777,770,030, total_bytes=166, window_sec=30 session SESSION-8590ea47f1dd24f8 dst_ip=172.234.197.23, dst_port=22, duration_sec=3.77, end_time=1,777,734,035.232, expected_protocol=ssh, packet_count=29, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=59.6.77.80, src_port=35,582, start_time=1,777,734,031.459, tcp_flags=A,F,S,P, time_bucket=1,777,734,030, total_bytes=5,237, window_sec=30 session SESSION-873f44314e990705 dst_ip=172.234.197.23, dst_port=23, duration_sec=3.22, end_time=1,777,820,436.575, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,820,433.35, tcp_flags=S, time_bucket=1,777,820,430, total_bytes=162, window_sec=30 session SESSION-0bbe3a6fb3713934 dst_ip=172.234.197.23, duration_sec=26, end_time=1,777,755,659.731, expected_protocol=unregistered:0, packet_count=12, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=18.118.158.197, start_time=1,777,755,633.736, tcp_flags=, time_bucket=1,777,755,630, total_bytes=984, window_sec=30 session SESSION-35d783560350b7fd dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,658.814, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.224.252.115, start_time=1,777,755,658.814, tcp_flags=, time_bucket=1,777,755,630, total_bytes=164, window_sec=30 session SESSION-7d93da3667ee9555 dst_ip=15.129.5.215, dst_port=4,448, duration_sec=16.38, end_time=1,777,802,450.474, expected_protocol=unregistered:4448, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=80, start_time=1,777,802,434.09, tcp_flags=A,S, time_bucket=1,777,802,430, total_bytes=132, window_sec=30 session SESSION-d32fa6f93d05564f dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,802,408.508, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,802,408.508, tcp_flags=, time_bucket=1,777,802,400, total_bytes=84, window_sec=30 session SESSION-2665bb5d63c7467b dst_ip=172.234.197.23, dst_port=23, duration_sec=15.93, end_time=1,777,741,218.602, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,741,202.676, tcp_flags=S, time_bucket=1,777,741,200, total_bytes=108, window_sec=30 session SESSION-d7ab3a601d9e6abb dst_ip=172.234.197.23, dst_port=23, duration_sec=13.97, end_time=1,777,744,818.82, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=205.251.153.87, src_port=34,101, start_time=1,777,744,804.848, tcp_flags=S, time_bucket=1,777,744,800, total_bytes=162, window_sec=30 session SESSION-ec0150286017152a dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,766,401.431, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=46,809, start_time=1,777,766,401.43, tcp_flags=, time_bucket=1,777,766,400, total_bytes=313, window_sec=30 session SESSION-14af178f584bdbff dst_ip=172.234.197.23, dst_port=443, duration_sec=3.37, end_time=1,777,755,612.084, expected_protocol=https, packet_count=9, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=104.28.234.78, src_port=39,606, start_time=1,777,755,608.712, tcp_flags=P,F,A, time_bucket=1,777,755,600, total_bytes=671, window_sec=30 session SESSION-7002429ae8930c54 dst_ip=172.234.197.23, dst_port=23, duration_sec=13.04, end_time=1,777,831,250.246, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=142.93.57.83, src_port=27,115, start_time=1,777,831,237.207, tcp_flags=S, time_bucket=1,777,831,230, total_bytes=108, window_sec=30 session SESSION-a9b7a3310d6ee246 dst_ip=172.234.197.23, duration_sec=23.17, end_time=1,777,755,656.898, expected_protocol=unregistered:0, packet_count=12, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=3.22.95.139, start_time=1,777,755,633.73, tcp_flags=, time_bucket=1,777,755,630, total_bytes=984, window_sec=30 session SESSION-4abd89290ac61671 dst_ip=172.232.0.17, dst_port=53, duration_sec=0.01, end_time=1,777,802,401.928, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=35,973, start_time=1,777,802,401.923, tcp_flags=, time_bucket=1,777,802,400, total_bytes=313, window_sec=30 session SESSION-a64388ee96b09831 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,780,808.37, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,780,808.37, tcp_flags=, time_bucket=1,777,780,800, total_bytes=84, window_sec=30 session SESSION-1497e24edbf27a7f dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,809,613.694, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.154.234.114, start_time=1,777,809,613.694, tcp_flags=, time_bucket=1,777,809,600, total_bytes=164, window_sec=30 session SESSION-c0800a82f6115206 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,827,601.716, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=50,101, start_time=1,777,827,601.714, tcp_flags=, time_bucket=1,777,827,600, total_bytes=282, window_sec=30 session SESSION-2cbd650cdb32c014 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,741,201.669, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=39,842, start_time=1,777,741,201.668, tcp_flags=, time_bucket=1,777,741,200, total_bytes=313, window_sec=30 session SESSION-2413d3cfa1948153 dst_ip=172.234.197.23, dst_port=1,244, duration_sec=3.09, end_time=1,777,770,006.372, expected_protocol=unregistered:1244, packet_count=3, proto=TCP, protocol_anomaly_score=0.3, protocol_violations=tcp_syn_only, protocols=TCP, src_ip=32.192.75.154, src_port=22,862, start_time=1,777,770,003.285, tcp_flags=S, time_bucket=1,777,770,000, total_bytes=222, window_sec=30 session SESSION-4d07006f517b10c4 dst_ip=172.234.197.23, dst_port=80, duration_sec=0.13, end_time=1,777,784,456.043, expected_protocol=http, packet_count=4, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=141.98.83.48, src_port=29,236, start_time=1,777,784,455.914, tcp_flags=A,R,P,S, time_bucket=1,777,784,430, total_bytes=258, window_sec=30 session SESSION-e8cd49371ebc4b98 dst_ip=172.234.197.23, duration_sec=10.87, end_time=1,777,755,643.636, expected_protocol=unregistered:0, packet_count=8, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=3.148.226.224, start_time=1,777,755,632.766, tcp_flags=, time_bucket=1,777,755,630, total_bytes=656, window_sec=30 session SESSION-421954ed9b87b265 dst_ip=172.234.197.23, dst_port=23, duration_sec=22.51, end_time=1,777,816,824.406, expected_protocol=telnet, packet_count=5, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,816,801.894, tcp_flags=S, time_bucket=1,777,816,800, total_bytes=270, window_sec=30 session SESSION-96c417766288dee6 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,752,001.979, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=37,081, start_time=1,777,752,001.978, tcp_flags=, time_bucket=1,777,752,000, total_bytes=313, window_sec=30 session SESSION-ac9a18d268999ff7 dst_ip=172.234.197.23, dst_port=22, duration_sec=8.94, end_time=1,777,770,029.26, expected_protocol=ssh, packet_count=26, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=213.209.159.56, src_port=18,817, start_time=1,777,770,020.32, tcp_flags=P,A,E,S,C, time_bucket=1,777,770,000, total_bytes=5,470, window_sec=30 session SESSION-5d7eff286e68f3b8 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.05, end_time=1,777,748,413.709, expected_protocol=https, packet_count=10, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=212.102.40.218, src_port=11,578, start_time=1,777,748,413.658, tcp_flags=R,A,S,P, time_bucket=1,777,748,400, total_bytes=3,515, window_sec=30 session SESSION-f5c5a737067e8c61 dst_ip=86.27.153.77, dst_port=49,113, duration_sec=0.11, end_time=1,777,777,203.866, expected_protocol=unregistered:49113, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=80, start_time=1,777,777,203.754, tcp_flags=R,A,S, time_bucket=1,777,777,200, total_bytes=120, window_sec=30 session SESSION-2de923f4c49e95b9 dst_ip=154.210.208.214, dst_port=45,950, duration_sec=14.39, end_time=1,777,737,616.412, expected_protocol=unregistered:45950, packet_count=9, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,737,602.026, tcp_flags=P,F,A, time_bucket=1,777,737,600, total_bytes=786, window_sec=30 session SESSION-dda2d54e6fafdb3d dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,798,801.241, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=45,770, start_time=1,777,798,801.239, tcp_flags=, time_bucket=1,777,798,800, total_bytes=236, window_sec=30 session SESSION-8884adfdce84717b dst_ip=172.234.197.23, duration_sec=24.14, end_time=1,777,755,659.797, expected_protocol=unregistered:0, packet_count=8, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=18.118.14.61, start_time=1,777,755,635.659, tcp_flags=, time_bucket=1,777,755,630, total_bytes=656, window_sec=30 session SESSION-2122e7222e4605f8 dst_ip=172.234.197.23, duration_sec=16.06, end_time=1,777,755,652.71, expected_protocol=unregistered:0, packet_count=8, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=3.144.250.137, start_time=1,777,755,636.647, tcp_flags=, time_bucket=1,777,755,630, total_bytes=656, window_sec=30 session SESSION-6c80028223b8b397 dst_ip=172.234.197.23, dst_port=80, duration_sec=7.08, end_time=1,777,802,425.77, expected_protocol=http, packet_count=5, proto=TCP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=TCP, src_ip=15.129.5.215, src_port=4,448, start_time=1,777,802,418.686, tcp_flags=A,S, time_bucket=1,777,802,400, total_bytes=330, window_sec=30 session SESSION-4b1cf7553a0f129a dst_ip=172.234.197.23, dst_port=23, duration_sec=20.9, end_time=1,777,752,059.832, expected_protocol=telnet, packet_count=6, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=45.148.120.187, src_port=8,528, start_time=1,777,752,038.937, tcp_flags=S, time_bucket=1,777,752,030, total_bytes=324, window_sec=30 session SESSION-0466b87e339301b8 dst_ip=2.57.122.192, dst_port=52,432, duration_sec=22.17, end_time=1,777,813,225.131, expected_protocol=unregistered:52432, packet_count=23, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,813,202.957, tcp_flags=R,P,A, time_bucket=1,777,813,200, total_bytes=2,202, window_sec=30 session SESSION-6a718cbe38970d6a dst_ip=2.57.122.190, dst_port=43,874, duration_sec=21.77, end_time=1,777,777,224.872, expected_protocol=unregistered:43874, packet_count=23, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,777,203.097, tcp_flags=R,P,A, time_bucket=1,777,777,200, total_bytes=2,218, window_sec=30 session SESSION-30e14fa75d773a24 dst_ip=172.234.197.23, duration_sec=12.6, end_time=1,777,766,443.006, expected_protocol=unregistered:0, packet_count=8, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=44.250.172.176, start_time=1,777,766,430.41, tcp_flags=, time_bucket=1,777,766,430, total_bytes=656, window_sec=30 session SESSION-5b6b54b340b8c0a3 dst_ip=172.234.197.23, dst_port=80, duration_sec=1.06, end_time=1,777,762,828.394, expected_protocol=http, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=90.160.103.93, src_port=39,517, start_time=1,777,762,827.338, tcp_flags=A,S, time_bucket=1,777,762,800, total_bytes=198, window_sec=30 session SESSION-692cacc9b77ac18d dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,734,001.148, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=46,785, start_time=1,777,734,001.146, tcp_flags=, time_bucket=1,777,734,000, total_bytes=282, window_sec=30 session SESSION-ef0107178de9529d dst_ip=172.234.197.23, dst_port=23, duration_sec=11.58, end_time=1,777,744,858.758, expected_protocol=telnet, packet_count=6, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=64.225.71.61, src_port=44,537, start_time=1,777,744,847.179, tcp_flags=S, time_bucket=1,777,744,830, total_bytes=324, window_sec=30 session SESSION-53ea425ae4499ecf dst_ip=172.234.197.23, dst_port=23, duration_sec=4.19, end_time=1,777,813,222.247, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=104.131.68.134, src_port=34,101, start_time=1,777,813,218.056, tcp_flags=S, time_bucket=1,777,813,200, total_bytes=162, window_sec=30 session SESSION-b515a0922d8cea8d dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,773,653.915, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=216.73.217.0, start_time=1,777,773,653.915, tcp_flags=, time_bucket=1,777,773,630, total_bytes=196, window_sec=30 session SESSION-c7deda95269629ef dst_ip=172.234.197.23, duration_sec=3.44, end_time=1,777,766,459.13, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.218.65.249, start_time=1,777,766,455.686, tcp_flags=, time_bucket=1,777,766,430, total_bytes=328, window_sec=30 session SESSION-2730016d44118554 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,780,801.325, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=47,909, start_time=1,777,780,801.325, tcp_flags=, time_bucket=1,777,780,800, total_bytes=282, window_sec=30 session SESSION-0ee3f8d242bb6f0c dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,623.329, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.15.37.246, start_time=1,777,755,623.329, tcp_flags=, time_bucket=1,777,755,600, total_bytes=164, window_sec=30 session SESSION-a31d22c6757ce308 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,795,236.602, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.224.222.20, start_time=1,777,795,236.602, tcp_flags=, time_bucket=1,777,795,230, total_bytes=164, window_sec=30 session SESSION-40afa79ed404ca8a dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,748,401.157, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=52,048, start_time=1,777,748,401.156, tcp_flags=, time_bucket=1,777,748,400, total_bytes=313, window_sec=30 session SESSION-76474e97318d2e11 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,791,624.434, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.21.249.220, start_time=1,777,791,624.434, tcp_flags=, time_bucket=1,777,791,600, total_bytes=164, window_sec=30 session SESSION-7a58477c736c6c00 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,766,446.075, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.201.244.199, start_time=1,777,766,446.075, tcp_flags=, time_bucket=1,777,766,430, total_bytes=164, window_sec=30 session SESSION-a4239b95c94f383a dst_ip=172.234.197.23, dst_port=3,128, duration_sec=1.01, end_time=1,777,755,650.003, expected_protocol=unregistered:3128, packet_count=2, proto=TCP, protocol_anomaly_score=0.3, protocol_violations=tcp_syn_only, protocols=TCP, src_ip=66.132.172.133, src_port=5,400, start_time=1,777,755,648.992, tcp_flags=S, time_bucket=1,777,755,630, total_bytes=148, window_sec=30 session SESSION-1fc5b3afe77a6cc7 dst_ip=172.234.197.23, dst_port=22, duration_sec=11.4, end_time=1,777,809,659.819, expected_protocol=ssh, packet_count=31, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=45.148.10.157, src_port=62,986, start_time=1,777,809,648.415, tcp_flags=A,S,P, time_bucket=1,777,809,630, total_bytes=5,888, window_sec=30 session SESSION-e5e357bebe1cd334 dst_ip=172.234.197.23, dst_port=443, duration_sec=3.38, end_time=1,777,770,006.041, expected_protocol=https, packet_count=6, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=34.201.143.237, src_port=16,498, start_time=1,777,770,002.66, tcp_flags=P,F,A, time_bucket=1,777,770,000, total_bytes=1,057, window_sec=30 session SESSION-5bf6462b745d2f16 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,626.749, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.12.102.186, start_time=1,777,755,626.749, tcp_flags=, time_bucket=1,777,755,600, total_bytes=164, window_sec=30 session SESSION-f84a6a537f9a1a1d dst_ip=172.234.197.23, duration_sec=4.26, end_time=1,777,777,259.311, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=121.15.177.4, start_time=1,777,777,255.054, tcp_flags=, time_bucket=1,777,777,230, total_bytes=296, window_sec=30 session SESSION-2a1d9a124dc3d2c6 dst_ip=172.234.197.23, dst_port=23, duration_sec=18.02, end_time=1,777,748,425.277, expected_protocol=telnet, packet_count=5, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=205.251.153.87, src_port=34,101, start_time=1,777,748,407.258, tcp_flags=S, time_bucket=1,777,748,400, total_bytes=270, window_sec=30 session SESSION-652a421469ff7035 dst_ip=172.234.197.23, dst_port=23, duration_sec=23.98, end_time=1,777,737,629.724, expected_protocol=telnet, packet_count=9, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=103.231.8.51, src_port=57,154, start_time=1,777,737,605.741, tcp_flags=S, time_bucket=1,777,737,600, total_bytes=486, window_sec=30 session SESSION-e8e4d91e7bb287b0 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,744,808.106, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,744,808.106, tcp_flags=, time_bucket=1,777,744,800, total_bytes=84, window_sec=30 session SESSION-76780157d6e7a94f dst_ip=172.234.197.23, duration_sec=5.58, end_time=1,777,755,622.757, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.118.158.197, start_time=1,777,755,617.177, tcp_flags=, time_bucket=1,777,755,600, total_bytes=328, window_sec=30 session SESSION-83d46eabf5079ddf dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,791,601.589, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=34,825, start_time=1,777,791,601.587, tcp_flags=, time_bucket=1,777,791,600, total_bytes=313, window_sec=30 session SESSION-ef5c4cec5282c6f2 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,755,601.743, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=40,179, start_time=1,777,755,601.742, tcp_flags=, time_bucket=1,777,755,600, total_bytes=282, window_sec=30 session SESSION-3f693bd427e6185e dst_ip=213.209.159.56, dst_port=18,817, duration_sec=20.45, end_time=1,777,770,053.674, expected_protocol=unregistered:18817, packet_count=21, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,770,033.224, tcp_flags=R,P,A, time_bucket=1,777,770,030, total_bytes=2,730, window_sec=30 session SESSION-c8a8a97a8b12b7c5 dst_ip=172.234.197.23, dst_port=22, duration_sec=0.51, end_time=1,777,831,229.919, expected_protocol=ssh, packet_count=15, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=45.148.10.157, src_port=24,118, start_time=1,777,831,229.407, tcp_flags=A,S,P, time_bucket=1,777,831,200, total_bytes=4,148, window_sec=30 session SESSION-00106177541c7093 dst_ip=172.234.197.23, dst_port=23, duration_sec=21.17, end_time=1,777,737,627.847, expected_protocol=telnet, packet_count=10, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=103.178.152.76, src_port=64,513, start_time=1,777,737,606.676, tcp_flags=S, time_bucket=1,777,737,600, total_bytes=540, window_sec=30 session SESSION-44e6b4fe70bbd520 dst_ip=172.234.197.23, dst_port=22, duration_sec=0.28, end_time=1,777,827,610.789, expected_protocol=ssh, packet_count=33, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=154.16.115.163, src_port=41,840, start_time=1,777,827,610.508, tcp_flags=A,F,S,P, time_bucket=1,777,827,600, total_bytes=8,309, window_sec=30 session SESSION-28341bf5148fcec3 dst_ip=172.234.197.23, dst_port=23, duration_sec=2.67, end_time=1,777,766,427.883, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,766,425.212, tcp_flags=S, time_bucket=1,777,766,400, total_bytes=108, window_sec=30 session SESSION-37f5b61d9fb3b60d dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,809,617.475, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=207.211.214.162, start_time=1,777,809,617.475, tcp_flags=, time_bucket=1,777,809,600, total_bytes=96, window_sec=30 session SESSION-62844038c9fe4e33 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,737,607.728, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,737,607.727, tcp_flags=, time_bucket=1,777,737,600, total_bytes=84, window_sec=30 session SESSION-490749d484d206d2 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,795,208.859, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,795,208.859, tcp_flags=, time_bucket=1,777,795,200, total_bytes=84, window_sec=30 session SESSION-96204ba724bae19f dst_ip=172.234.197.23, duration_sec=13.77, end_time=1,777,755,657.344, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.188.178.178, start_time=1,777,755,643.574, tcp_flags=, time_bucket=1,777,755,630, total_bytes=328, window_sec=30 session SESSION-337bfba9efd8958a dst_ip=172.234.197.23, dst_port=443, duration_sec=0.05, end_time=1,777,748,413.941, expected_protocol=https, packet_count=10, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=212.102.40.218, src_port=23,822, start_time=1,777,748,413.895, tcp_flags=R,A,S,P, time_bucket=1,777,748,400, total_bytes=3,535, window_sec=30 session SESSION-1a5881f9e6540996 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,653.599, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.12.102.186, start_time=1,777,755,653.599, tcp_flags=, time_bucket=1,777,755,630, total_bytes=164, window_sec=30 session SESSION-6b53817930d995e0 dst_ip=172.234.197.23, dst_port=23, duration_sec=25.68, end_time=1,777,770,057.894, expected_protocol=telnet, packet_count=18, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=78.159.156.37, src_port=23,920, start_time=1,777,770,032.217, tcp_flags=S, time_bucket=1,777,770,030, total_bytes=972, window_sec=30 session SESSION-4d2720041046f659 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,623.353, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.138.137.33, start_time=1,777,755,623.352, tcp_flags=, time_bucket=1,777,755,600, total_bytes=164, window_sec=30 session SESSION-4014e60213030bad dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,809,601.594, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=46,970, start_time=1,777,809,601.592, tcp_flags=, time_bucket=1,777,809,600, total_bytes=313, window_sec=30 session SESSION-39e87309610b4798 dst_ip=193.46.255.86, dst_port=31,609, duration_sec=0.55, end_time=1,777,766,460.613, expected_protocol=unregistered:31609, packet_count=5, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,766,460.06, tcp_flags=P,A, time_bucket=1,777,766,460, total_bytes=698, window_sec=30 session SESSION-08323e218a4350af dst_ip=172.234.197.23, dst_port=23, duration_sec=0.28, end_time=1,777,802,422.161, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=104.131.68.134, src_port=34,101, start_time=1,777,802,421.883, tcp_flags=S, time_bucket=1,777,802,400, total_bytes=108, window_sec=30 session SESSION-169e629fcb6f3864 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,791,613.653, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.53.169.88, start_time=1,777,791,613.653, tcp_flags=, time_bucket=1,777,791,600, total_bytes=164, window_sec=30 session SESSION-526c3dbed8fd9966 dst_ip=172.234.197.23, dst_port=23, duration_sec=26.5, end_time=1,777,734,028.225, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,734,001.727, tcp_flags=S, time_bucket=1,777,734,000, total_bytes=108, window_sec=30 session SESSION-50ef70d778af8bf1 dst_ip=172.234.197.23, duration_sec=19.1, end_time=1,777,766,449.753, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=35.94.26.156, start_time=1,777,766,430.656, tcp_flags=, time_bucket=1,777,766,430, total_bytes=492, window_sec=30 session SESSION-c2f7e8f4f3a43968 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,752,018.406, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.224.26.131, start_time=1,777,752,018.406, tcp_flags=, time_bucket=1,777,752,000, total_bytes=164, window_sec=30 session SESSION-32784f20416ea6ae dst_ip=172.234.197.23, dst_port=23, duration_sec=3.68, end_time=1,777,827,637.511, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,827,633.83, tcp_flags=S, time_bucket=1,777,827,630, total_bytes=108, window_sec=30 session SESSION-081a1b07955e0b47 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,744,830.308, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.224.142.58, start_time=1,777,744,830.308, tcp_flags=, time_bucket=1,777,744,830, total_bytes=164, window_sec=30 session SESSION-98b19b33d49913d9 dst_ip=172.234.197.23, dst_port=22, duration_sec=0.92, end_time=1,777,820,437.671, expected_protocol=ssh, packet_count=35, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=108.181.2.243, src_port=55,946, start_time=1,777,820,436.755, tcp_flags=A,F,S,P, time_bucket=1,777,820,430, total_bytes=9,209, window_sec=30 session SESSION-e29d8dc712e924f1 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,766,407.717, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,766,407.717, tcp_flags=, time_bucket=1,777,766,400, total_bytes=84, window_sec=30 session SESSION-cd7893c5c4c3eabb dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,820,401.984, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=58,544, start_time=1,777,820,401.983, tcp_flags=, time_bucket=1,777,820,400, total_bytes=313, window_sec=30 session SESSION-e3254e55c7d1a541 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.2, end_time=1,777,744,860.753, expected_protocol=https, packet_count=8, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=104.28.234.80, src_port=31,538, start_time=1,777,744,860.553, tcp_flags=A,S,P, time_bucket=1,777,744,860, total_bytes=4,686, window_sec=30 session SESSION-e98afd9333a033aa dst_ip=172.234.197.23, dst_port=23, duration_sec=6.46, end_time=1,777,744,824.227, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,744,817.77, tcp_flags=S, time_bucket=1,777,744,800, total_bytes=108, window_sec=30 session SESSION-e2fad32ef23f02e5 dst_ip=172.234.197.23, dst_port=3,128, duration_sec=1.01, end_time=1,777,755,648.723, expected_protocol=unregistered:3128, packet_count=2, proto=TCP, protocol_anomaly_score=0.3, protocol_violations=tcp_syn_only, protocols=TCP, src_ip=66.132.172.133, src_port=5,396, start_time=1,777,755,647.714, tcp_flags=S, time_bucket=1,777,755,630, total_bytes=148, window_sec=30 session SESSION-fdba08350381849a dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,831,231.838, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=42,357, start_time=1,777,831,231.837, tcp_flags=, time_bucket=1,777,831,230, total_bytes=282, window_sec=30 session SESSION-1c2d6e01952e458c dst_ip=172.234.197.23, dst_port=80, duration_sec=0.13, end_time=1,777,831,216.806, expected_protocol=http, packet_count=4, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=141.98.83.48, src_port=27,137, start_time=1,777,831,216.674, tcp_flags=A,R,P,S, time_bucket=1,777,831,200, total_bytes=239, window_sec=30 session SESSION-ef2aec7b3d5168cd dst_ip=172.234.197.23, duration_sec=16.81, end_time=1,777,755,654.382, expected_protocol=unregistered:0, packet_count=12, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=3.12.165.38, start_time=1,777,755,637.571, tcp_flags=, time_bucket=1,777,755,630, total_bytes=984, window_sec=30 session SESSION-84e3572ff6618beb dst_ip=47.83.153.56, dst_port=49,812, duration_sec=27.8, end_time=1,777,816,829.994, expected_protocol=unregistered:49812, packet_count=20, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,816,802.192, tcp_flags=P,F,A, time_bucket=1,777,816,800, total_bytes=1,796, window_sec=30 session SESSION-02a78e53263fc2c8 dst_ip=172.234.197.23, dst_port=23, duration_sec=22.11, end_time=1,777,734,055.222, expected_protocol=telnet, packet_count=11, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=103.231.8.51, src_port=57,154, start_time=1,777,734,033.111, tcp_flags=S, time_bucket=1,777,734,030, total_bytes=594, window_sec=30 session SESSION-bd9ed37b33e7c0e0 dst_ip=172.234.197.23, dst_port=23, duration_sec=16.64, end_time=1,777,820,426.026, expected_protocol=telnet, packet_count=5, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,820,409.387, tcp_flags=S, time_bucket=1,777,820,400, total_bytes=270, window_sec=30 session SESSION-b4916b2f97abb9eb dst_ip=209.87.169.53, dst_port=29,051, duration_sec=0.02, end_time=1,777,788,036.936, expected_protocol=unregistered:29051, packet_count=5, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=443, start_time=1,777,788,036.916, tcp_flags=P,F,A, time_bucket=1,777,788,030, total_bytes=361, window_sec=30 session SESSION-5cb4141847b894ad dst_ip=154.210.208.214, dst_port=45,950, duration_sec=1.53, end_time=1,777,737,634.336, expected_protocol=unregistered:45950, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,737,632.81, tcp_flags=P,F,A, time_bucket=1,777,737,630, total_bytes=262, window_sec=30 session SESSION-b796581fdc1c0980 dst_ip=154.210.208.214, duration_sec=1.29, end_time=1,777,737,634.336, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,737,633.045, tcp_flags=, time_bucket=1,777,737,630, total_bytes=200, window_sec=30 session SESSION-18c57ecac8e86250 dst_ip=172.234.197.23, dst_port=23, duration_sec=12.03, end_time=1,777,748,416.553, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,748,404.522, tcp_flags=S, time_bucket=1,777,748,400, total_bytes=108, window_sec=30 session SESSION-44b87706a35e5c96 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.05, end_time=1,777,748,413.758, expected_protocol=https, packet_count=11, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=212.102.40.218, src_port=14,158, start_time=1,777,748,413.709, tcp_flags=A,F,S,P, time_bucket=1,777,748,400, total_bytes=1,166, window_sec=30 session SESSION-add64aabd7448acb dst_ip=172.234.197.23, dst_port=22, duration_sec=2.91, end_time=1,777,744,858.533, expected_protocol=ssh, packet_count=25, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=45.148.10.118, src_port=60,472, start_time=1,777,744,855.626, tcp_flags=A,F,S,P, time_bucket=1,777,744,830, total_bytes=4,957, window_sec=30 session SESSION-9af733d1b0e0260c dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,625.916, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.218.72.180, start_time=1,777,755,625.916, tcp_flags=, time_bucket=1,777,755,600, total_bytes=164, window_sec=30 session SESSION-d73c0e5f44ef582f dst_ip=172.234.197.23, dst_port=23, duration_sec=21.55, end_time=1,777,766,427.356, expected_protocol=telnet, packet_count=4, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=37.59.254.152, src_port=53,545, start_time=1,777,766,405.806, tcp_flags=S, time_bucket=1,777,766,400, total_bytes=216, window_sec=30 session SESSION-4d540c59d7d3c547 dst_ip=172.234.197.23, dst_port=22, duration_sec=26.78, end_time=1,777,816,857.642, expected_protocol=ssh, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=47.83.153.56, src_port=49,812, start_time=1,777,816,830.858, tcp_flags=P,F,A, time_bucket=1,777,816,830, total_bytes=184, window_sec=30 session SESSION-6a87c75db5d919cb dst_ip=172.234.197.23, duration_sec=22.99, end_time=1,777,766,453.04, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=16.147.218.115, start_time=1,777,766,430.05, tcp_flags=, time_bucket=1,777,766,430, total_bytes=328, window_sec=30 session SESSION-4cfb05f27fc6062c dst_ip=172.234.197.23, dst_port=22, duration_sec=18.18, end_time=1,777,734,055.645, expected_protocol=ssh, packet_count=43, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=59.6.77.80, src_port=37,902, start_time=1,777,734,037.465, tcp_flags=A,F,S,P, time_bucket=1,777,734,030, total_bytes=6,545, window_sec=30 session SESSION-688bae89af40fbef dst_ip=172.232.0.17, dst_port=53, duration_sec=0.01, end_time=1,777,762,801.289, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=33,685, start_time=1,777,762,801.278, tcp_flags=, time_bucket=1,777,762,800, total_bytes=282, window_sec=30 session SESSION-fc59eb414cc87f9e dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,657.412, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.218.72.180, start_time=1,777,755,657.412, tcp_flags=, time_bucket=1,777,755,630, total_bytes=164, window_sec=30 session SESSION-fe966c55dad0b920 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,820,401.982, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=53,900, start_time=1,777,820,401.981, tcp_flags=, time_bucket=1,777,820,400, total_bytes=282, window_sec=30 session SESSION-c5dea464271b8027 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,755,601.745, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=47,954, start_time=1,777,755,601.744, tcp_flags=, time_bucket=1,777,755,600, total_bytes=313, window_sec=30 session SESSION-8c9dfae5358d66d5 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,762,801.293, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=44,613, start_time=1,777,762,801.29, tcp_flags=, time_bucket=1,777,762,800, total_bytes=313, window_sec=30 session SESSION-2fa296378e24c275 dst_ip=172.234.197.23, dst_port=443, duration_sec=0, end_time=1,777,795,229.388, expected_protocol=https, packet_count=2, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=176.224.10.34, src_port=21,633, start_time=1,777,795,229.388, tcp_flags=A,S, time_bucket=1,777,795,200, total_bytes=132, window_sec=30 session SESSION-0af1c864ba46036c dst_ip=104.29.137.154, dst_port=26,835, duration_sec=24.58, end_time=1,777,759,228.458, expected_protocol=unregistered:26835, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=443, start_time=1,777,759,203.882, tcp_flags=A,S, time_bucket=1,777,759,200, total_bytes=198, window_sec=30 session SESSION-aca3b3a8e09a725b dst_ip=47.83.153.56, duration_sec=12.58, end_time=1,777,816,843.435, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,816,830.858, tcp_flags=, time_bucket=1,777,816,830, total_bytes=400, window_sec=30 session SESSION-39e5989f707701c7 dst_ip=172.234.197.23, dst_port=23, duration_sec=28.29, end_time=1,777,824,059.393, expected_protocol=telnet, packet_count=9, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,824,031.102, tcp_flags=S, time_bucket=1,777,824,030, total_bytes=486, window_sec=30 session SESSION-558bd56a190fc21c dst_ip=2.57.122.192, dst_port=9,108, duration_sec=0.13, end_time=1,777,744,809.643, expected_protocol=unregistered:9108, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,744,809.514, tcp_flags=R,P,A, time_bucket=1,777,744,800, total_bytes=172, window_sec=30 session SESSION-9aeeb653fccaa86a dst_ip=172.234.197.23, dst_port=23, duration_sec=5.14, end_time=1,777,816,851.591, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,816,846.454, tcp_flags=S, time_bucket=1,777,816,830, total_bytes=108, window_sec=30 session SESSION-c48069de0754902b dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,643.018, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.147.7.219, start_time=1,777,755,643.018, tcp_flags=, time_bucket=1,777,755,630, total_bytes=164, window_sec=30 session SESSION-ae2371f31177239c dst_ip=2.57.121.112, duration_sec=2.41, end_time=1,777,734,033.317, expected_protocol=unregistered:0, packet_count=3, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,734,030.91, tcp_flags=, time_bucket=1,777,734,030, total_bytes=338, window_sec=30 session SESSION-14e3de469fbdf813 dst_ip=172.234.197.23, dst_port=22, duration_sec=0.16, end_time=1,777,809,602.972, expected_protocol=ssh, packet_count=6, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=78.134.49.171, src_port=54,888, start_time=1,777,809,602.809, tcp_flags=P,A, time_bucket=1,777,809,600, total_bytes=2,579, window_sec=30 session SESSION-b47e459b6486a574 dst_ip=172.234.197.23, dst_port=80, duration_sec=0.1, end_time=1,777,770,043.666, expected_protocol=http, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=45.148.10.67, src_port=40,000, start_time=1,777,770,043.562, tcp_flags=R,A,S, time_bucket=1,777,770,030, total_bytes=166, window_sec=30 session SESSION-a5382deda9720a36 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,737,601.93, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=35,321, start_time=1,777,737,601.928, tcp_flags=, time_bucket=1,777,737,600, total_bytes=282, window_sec=30 session SESSION-fd39b9170ce5c798 dst_ip=172.234.197.23, dst_port=23, duration_sec=24.22, end_time=1,777,737,659.479, expected_protocol=telnet, packet_count=11, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=103.178.152.76, src_port=64,513, start_time=1,777,737,635.257, tcp_flags=S, time_bucket=1,777,737,630, total_bytes=594, window_sec=30 session SESSION-6632f9ffe51b0d3e dst_ip=172.234.197.23, dst_port=23, duration_sec=22.57, end_time=1,777,766,457.086, expected_protocol=telnet, packet_count=7, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=184.154.95.157, src_port=46,176, start_time=1,777,766,434.517, tcp_flags=S, time_bucket=1,777,766,430, total_bytes=378, window_sec=30 session SESSION-3720d0d258814f62 dst_ip=172.234.197.23, dst_port=22, duration_sec=17.34, end_time=1,777,791,629.866, expected_protocol=ssh, packet_count=10, proto=TCP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=TCP, src_ip=207.182.128.157, src_port=40,198, start_time=1,777,791,612.526, tcp_flags=A,S, time_bucket=1,777,791,600, total_bytes=740, window_sec=30 session SESSION-b40e6c20079d4a73 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,791,624.198, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=13.61.23.29, start_time=1,777,791,624.198, tcp_flags=, time_bucket=1,777,791,600, total_bytes=164, window_sec=30 session SESSION-098924ba15a02a63 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,780,801.327, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=52,970, start_time=1,777,780,801.326, tcp_flags=, time_bucket=1,777,780,800, total_bytes=313, window_sec=30 session SESSION-84e1435c60469258 dst_ip=172.234.197.23, dst_port=23, duration_sec=24.45, end_time=1,777,755,656.006, expected_protocol=telnet, packet_count=4, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,755,631.559, tcp_flags=S, time_bucket=1,777,755,630, total_bytes=216, window_sec=30 session SESSION-b85a199cddccd6e8 dst_ip=172.234.197.23, dst_port=3,128, duration_sec=1.05, end_time=1,777,755,651.093, expected_protocol=unregistered:3128, packet_count=2, proto=TCP, protocol_anomaly_score=0.3, protocol_violations=tcp_syn_only, protocols=TCP, src_ip=66.132.172.133, src_port=5,414, start_time=1,777,755,650.048, tcp_flags=S, time_bucket=1,777,755,630, total_bytes=148, window_sec=30 session SESSION-bb33ba7686c10169 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,737,627.575, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=60,513, start_time=1,777,737,627.574, tcp_flags=, time_bucket=1,777,737,600, total_bytes=282, window_sec=30 session SESSION-7583082c8aca4989 dst_ip=172.234.197.23, duration_sec=12.86, end_time=1,777,766,452.957, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=35.95.113.227, start_time=1,777,766,440.094, tcp_flags=, time_bucket=1,777,766,430, total_bytes=328, window_sec=30 session SESSION-071a136c3e15bd4e dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,766,416.59, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=35.94.26.156, start_time=1,777,766,416.59, tcp_flags=, time_bucket=1,777,766,400, total_bytes=164, window_sec=30 session SESSION-8721cc405ecaceba dst_ip=172.234.197.23, dst_port=22, duration_sec=0.86, end_time=1,777,752,058.739, expected_protocol=ssh, packet_count=17, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=2.57.121.112, src_port=9,686, start_time=1,777,752,057.876, tcp_flags=P,A,E,S,C, time_bucket=1,777,752,030, total_bytes=4,360, window_sec=30 session SESSION-5f68e01b18b2bc05 dst_ip=172.234.197.23, duration_sec=4.03, end_time=1,777,766,426.857, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=44.248.141.231, start_time=1,777,766,422.825, tcp_flags=, time_bucket=1,777,766,400, total_bytes=328, window_sec=30 session SESSION-ccdd44eef3fb099a dst_ip=172.234.197.23, dst_port=22, duration_sec=7.56, end_time=1,777,759,256.512, expected_protocol=ssh, packet_count=31, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=2.57.122.191, src_port=8,546, start_time=1,777,759,248.955, tcp_flags=A,S,P, time_bucket=1,777,759,230, total_bytes=5,896, window_sec=30 session SESSION-1df64b2f5f544574 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,777,201.417, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=38,439, start_time=1,777,777,201.415, tcp_flags=, time_bucket=1,777,777,200, total_bytes=313, window_sec=30 session SESSION-94d7699ccf5f50de dst_ip=172.234.197.23, duration_sec=10.12, end_time=1,777,755,626.834, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.150.124.201, start_time=1,777,755,616.714, tcp_flags=, time_bucket=1,777,755,600, total_bytes=328, window_sec=30 session SESSION-872b72f6de02f879 dst_ip=172.234.197.23, duration_sec=2.76, end_time=1,777,766,435.296, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=44.255.175.112, start_time=1,777,766,432.537, tcp_flags=, time_bucket=1,777,766,430, total_bytes=328, window_sec=30 session SESSION-de0ada7999211706 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,831,231.835, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=44,340, start_time=1,777,831,231.835, tcp_flags=, time_bucket=1,777,831,230, total_bytes=282, window_sec=30 session SESSION-afc680ab6deeec94 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.05, end_time=1,777,748,413.849, expected_protocol=https, packet_count=9, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=212.102.40.218, src_port=18,918, start_time=1,777,748,413.804, tcp_flags=R,A,S,P, time_bucket=1,777,748,400, total_bytes=3,456, window_sec=30 session SESSION-0085d3f82b5b864b dst_ip=172.234.197.23, dst_port=22, duration_sec=16.88, end_time=1,777,734,047.786, expected_protocol=ssh, packet_count=6, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=2.57.121.112, src_port=26,423, start_time=1,777,734,030.91, tcp_flags=R,P,F,A, time_bucket=1,777,734,030, total_bytes=656, window_sec=30 session SESSION-fde2949acd705277 dst_ip=172.234.197.23, duration_sec=10.35, end_time=1,777,755,627.161, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.12.165.38, start_time=1,777,755,616.811, tcp_flags=, time_bucket=1,777,755,600, total_bytes=328, window_sec=30 session SESSION-592582a8a961c17d dst_ip=172.234.197.23, dst_port=23, duration_sec=2.57, end_time=1,777,766,436.908, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=37.59.254.152, src_port=53,545, start_time=1,777,766,434.336, tcp_flags=S, time_bucket=1,777,766,430, total_bytes=108, window_sec=30 session SESSION-4d8242602fb7b521 dst_ip=172.234.197.23, dst_port=22, duration_sec=15.08, end_time=1,777,831,245.107, expected_protocol=ssh, packet_count=21, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=45.148.10.157, src_port=24,118, start_time=1,777,831,230.022, tcp_flags=R,P,A, time_bucket=1,777,831,230, total_bytes=2,258, window_sec=30 session SESSION-7eb21d1ad50d53df dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,752,018.359, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.224.158.97, start_time=1,777,752,018.359, tcp_flags=, time_bucket=1,777,752,000, total_bytes=164, window_sec=30 session SESSION-26bef02027838262 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,809,608.054, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,809,608.054, tcp_flags=, time_bucket=1,777,809,600, total_bytes=84, window_sec=30 session SESSION-c0526b365adbd2f2 dst_ip=172.234.197.23, dst_port=22, duration_sec=4.53, end_time=1,777,798,848.331, expected_protocol=ssh, packet_count=25, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=92.103.134.183, src_port=42,224, start_time=1,777,798,843.797, tcp_flags=A,F,S,P, time_bucket=1,777,798,830, total_bytes=4,973, window_sec=30 session SESSION-41c46e28c68f14c8 dst_ip=172.234.197.23, duration_sec=8.57, end_time=1,777,813,257.529, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=14.225.7.70, start_time=1,777,813,248.959, tcp_flags=, time_bucket=1,777,813,230, total_bytes=564, window_sec=30 session SESSION-5a25711039a017ab dst_ip=2.57.122.192, dst_port=9,108, duration_sec=0.13, end_time=1,777,744,854.187, expected_protocol=unregistered:9108, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,744,854.058, tcp_flags=R,P,A, time_bucket=1,777,744,830, total_bytes=172, window_sec=30 session SESSION-5fe2f02c8aa64a3f dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,734,001.149, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=37,127, start_time=1,777,734,001.148, tcp_flags=, time_bucket=1,777,734,000, total_bytes=313, window_sec=30 session SESSION-b5032444a002778e dst_ip=172.234.197.23, dst_port=23, duration_sec=7.49, end_time=1,777,809,659.71, expected_protocol=telnet, packet_count=5, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=202.182.97.77, src_port=7,090, start_time=1,777,809,652.215, tcp_flags=S, time_bucket=1,777,809,630, total_bytes=270, window_sec=30 session SESSION-60cd8d1e30105ac3 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,766,415.752, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=44.255.175.112, start_time=1,777,766,415.752, tcp_flags=, time_bucket=1,777,766,400, total_bytes=164, window_sec=30 session SESSION-1e867b4eace2e33f dst_ip=172.234.197.23, dst_port=443, duration_sec=15.13, end_time=1,777,788,048.423, expected_protocol=https, packet_count=4, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=82.29.47.56, src_port=49,463, start_time=1,777,788,033.295, tcp_flags=A, time_bucket=1,777,788,030, total_bytes=264, window_sec=30 session SESSION-9fc57a440065571a dst_ip=172.234.197.23, dst_port=22, duration_sec=4.99, end_time=1,777,802,455.37, expected_protocol=ssh, packet_count=25, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=183.109.124.136, src_port=39,986, start_time=1,777,802,450.378, tcp_flags=A,F,S,P, time_bucket=1,777,802,430, total_bytes=4,973, window_sec=30 session SESSION-3b9603efcdefb149 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,809,601.592, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=58,986, start_time=1,777,809,601.59, tcp_flags=, time_bucket=1,777,809,600, total_bytes=282, window_sec=30 session SESSION-4eef9f33f5b08aa9 dst_ip=172.234.197.23, dst_port=80, duration_sec=7.11, end_time=1,777,795,255.146, expected_protocol=http, packet_count=5, proto=TCP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=TCP, src_ip=176.224.10.34, src_port=32,467, start_time=1,777,795,248.033, tcp_flags=A,S, time_bucket=1,777,795,230, total_bytes=330, window_sec=30 session SESSION-47040e8e35b20bc1 dst_ip=59.6.77.80, duration_sec=14.69, end_time=1,777,734,055.645, expected_protocol=unregistered:0, packet_count=13, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,734,040.958, tcp_flags=, time_bucket=1,777,734,030, total_bytes=1,294, window_sec=30 session SESSION-8ab1b22b049bf135 dst_ip=172.234.197.23, duration_sec=4.02, end_time=1,777,755,620.119, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.22.95.139, start_time=1,777,755,616.103, tcp_flags=, time_bucket=1,777,755,600, total_bytes=328, window_sec=30 session SESSION-8932a73bb7c39da2 dst_ip=172.234.197.23, duration_sec=16.69, end_time=1,777,755,656.98, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=3.129.45.206, start_time=1,777,755,640.293, tcp_flags=, time_bucket=1,777,755,630, total_bytes=492, window_sec=30 session SESSION-22e694a2b8cefc12 dst_ip=172.232.0.17, dst_port=53, duration_sec=0.03, end_time=1,777,824,001.856, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=44,682, start_time=1,777,824,001.831, tcp_flags=, time_bucket=1,777,824,000, total_bytes=282, window_sec=30 session SESSION-c3d05866398c6298 dst_ip=172.234.197.23, dst_port=23, duration_sec=19.47, end_time=1,777,737,627.767, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,737,608.298, tcp_flags=S, time_bucket=1,777,737,600, total_bytes=162, window_sec=30 session SESSION-73bf871d83b7a425 dst_ip=172.234.197.23, dst_port=23, duration_sec=7.03, end_time=1,777,762,838.187, expected_protocol=telnet, packet_count=4, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=27.43.207.231, src_port=18,854, start_time=1,777,762,831.158, tcp_flags=S, time_bucket=1,777,762,830, total_bytes=296, window_sec=30 session SESSION-13fa003b9e70df50 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,816,807.837, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,816,807.837, tcp_flags=, time_bucket=1,777,816,800, total_bytes=84, window_sec=30 session SESSION-a007bb10ad86ffe9 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,788,008.38, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,788,008.38, tcp_flags=, time_bucket=1,777,788,000, total_bytes=84, window_sec=30 session SESSION-bbc7da9b87b7c5c2 dst_ip=172.234.197.23, dst_port=23, duration_sec=25.61, end_time=1,777,744,829.916, expected_protocol=telnet, packet_count=5, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=64.225.71.61, src_port=44,537, start_time=1,777,744,804.31, tcp_flags=S, time_bucket=1,777,744,800, total_bytes=270, window_sec=30 session SESSION-65de6a2010ab1cdf dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,748,401.155, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=46,699, start_time=1,777,748,401.154, tcp_flags=, time_bucket=1,777,748,400, total_bytes=282, window_sec=30 session SESSION-21c6d2482361c113 dst_ip=172.234.197.23, dst_port=80, duration_sec=0.1, end_time=1,777,798,816.006, expected_protocol=http, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=176.65.139.9, src_port=60,017, start_time=1,777,798,815.909, tcp_flags=R,A,S, time_bucket=1,777,798,800, total_bytes=166, window_sec=30 session SESSION-3d70c41de90aff89 dst_ip=172.234.197.23, dst_port=23, duration_sec=26.64, end_time=1,777,806,056.707, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=104.131.68.134, src_port=34,101, start_time=1,777,806,030.069, tcp_flags=S, time_bucket=1,777,806,030, total_bytes=162, window_sec=30 session SESSION-4efc69c2e635aa8f dst_ip=172.234.197.23, dst_port=443, duration_sec=0, end_time=1,777,744,853.16, expected_protocol=https, packet_count=2, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=40.77.178.164, src_port=38,532, start_time=1,777,744,853.16, tcp_flags=A, time_bucket=1,777,744,830, total_bytes=121, window_sec=30 session SESSION-f0541c454655557f dst_ip=172.234.197.23, dst_port=80, duration_sec=15.6, end_time=1,777,802,446.89, expected_protocol=http, packet_count=6, proto=TCP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=TCP, src_ip=15.129.5.215, src_port=46,852, start_time=1,777,802,431.287, tcp_flags=A,S, time_bucket=1,777,802,430, total_bytes=396, window_sec=30 session SESSION-4c8d9751ec753a85 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.05, end_time=1,777,748,413.612, expected_protocol=https, packet_count=10, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=212.102.40.218, src_port=7,112, start_time=1,777,748,413.566, tcp_flags=R,A,S,P, time_bucket=1,777,748,400, total_bytes=3,442, window_sec=30 session SESSION-6dd23998cd29d6e4 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,806,001.736, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=56,882, start_time=1,777,806,001.734, tcp_flags=, time_bucket=1,777,806,000, total_bytes=282, window_sec=30 session SESSION-5303af41865df2ee dst_ip=172.234.197.23, dst_port=22, duration_sec=15.57, end_time=1,777,766,451.754, expected_protocol=ssh, packet_count=5, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=221.228.203.3, src_port=47,083, start_time=1,777,766,436.186, tcp_flags=P,A, time_bucket=1,777,766,430, total_bytes=382, window_sec=30 session SESSION-22d145524b20e082 dst_ip=2.57.122.192, duration_sec=11.4, end_time=1,777,813,225.131, expected_protocol=unregistered:0, packet_count=7, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,813,213.729, tcp_flags=, time_bucket=1,777,813,200, total_bytes=586, window_sec=30 session SESSION-19d3a5b9fe898625 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,824,007.959, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,824,007.959, tcp_flags=, time_bucket=1,777,824,000, total_bytes=84, window_sec=30 session SESSION-468ac1e4221337df dst_ip=193.46.255.86, duration_sec=0.39, end_time=1,777,766,460.613, expected_protocol=unregistered:0, packet_count=3, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,766,460.223, tcp_flags=, time_bucket=1,777,766,460, total_bytes=514, window_sec=30 session SESSION-d119713687fc995c dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,744,830.078, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.224.50.212, start_time=1,777,744,830.078, tcp_flags=, time_bucket=1,777,744,830, total_bytes=164, window_sec=30 session SESSION-16d0bbfb24e58220 dst_ip=172.234.197.23, dst_port=23, duration_sec=4.47, end_time=1,777,737,643.79, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=155.138.157.163, src_port=21,113, start_time=1,777,737,639.324, tcp_flags=S, time_bucket=1,777,737,630, total_bytes=108, window_sec=30 session SESSION-455611856f83ffb6 dst_ip=47.83.153.56, duration_sec=14.42, end_time=1,777,816,816.781, expected_protocol=unregistered:0, packet_count=14, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,816,802.364, tcp_flags=, time_bucket=1,777,816,800, total_bytes=1,400, window_sec=30 session SESSION-9a46e2ee818e118d dst_ip=2.57.122.190, dst_port=43,874, duration_sec=21.63, end_time=1,777,777,257.128, expected_protocol=unregistered:43874, packet_count=4, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,777,235.498, tcp_flags=R,P,A, time_bucket=1,777,777,230, total_bytes=344, window_sec=30 session SESSION-4bc678f8fabc8ce7 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,773,601.773, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=54,660, start_time=1,777,773,601.771, tcp_flags=, time_bucket=1,777,773,600, total_bytes=282, window_sec=30 session SESSION-215854dc61c3fcb3 dst_ip=172.234.197.23, dst_port=23, duration_sec=28.35, end_time=1,777,737,659.162, expected_protocol=telnet, packet_count=11, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=103.231.8.51, src_port=57,154, start_time=1,777,737,630.81, tcp_flags=S, time_bucket=1,777,737,630, total_bytes=594, window_sec=30 session SESSION-c556c63e044bb511 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,806,001.74, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=45,635, start_time=1,777,806,001.739, tcp_flags=, time_bucket=1,777,806,000, total_bytes=236, window_sec=30 session SESSION-99af6dd7cb9eb3b4 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,802,437.374, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=45.248.78.121, start_time=1,777,802,437.374, tcp_flags=, time_bucket=1,777,802,430, total_bytes=100, window_sec=30 session SESSION-577b7572c5f5edfd dst_ip=172.234.197.23, duration_sec=12.92, end_time=1,777,766,459.467, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=34.216.30.208, start_time=1,777,766,446.551, tcp_flags=, time_bucket=1,777,766,430, total_bytes=492, window_sec=30 session SESSION-9bce434c0e9a1957 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,626.768, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.129.45.206, start_time=1,777,755,626.768, tcp_flags=, time_bucket=1,777,755,600, total_bytes=164, window_sec=30 session SESSION-d8013ec5d9ad07e8 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.05, end_time=1,777,748,413.566, expected_protocol=https, packet_count=9, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=212.102.40.218, src_port=4,988, start_time=1,777,748,413.52, tcp_flags=R,A,S,P, time_bucket=1,777,748,400, total_bytes=3,455, window_sec=30 session SESSION-0fd98b6e77acc752 dst_ip=172.234.197.23, dst_port=80, duration_sec=0.35, end_time=1,777,798,816.429, expected_protocol=http, packet_count=10, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=176.65.139.9, src_port=36,444, start_time=1,777,798,816.075, tcp_flags=A,F,S,P, time_bucket=1,777,798,800, total_bytes=1,469, window_sec=30 session SESSION-a7379d6bc5725ae0 dst_ip=172.234.197.23, dst_port=23, duration_sec=19.9, end_time=1,777,798,857.095, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=34.19.119.64, src_port=21,724, start_time=1,777,798,837.194, tcp_flags=S, time_bucket=1,777,798,830, total_bytes=162, window_sec=30 session SESSION-148e1d12cdbb9dc4 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.22, end_time=1,777,780,860.565, expected_protocol=https, packet_count=10, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=45.148.10.67, src_port=25,118, start_time=1,777,780,860.346, tcp_flags=A,S,P, time_bucket=1,777,780,860, total_bytes=3,502, window_sec=30 session SESSION-b41b9f1e86982cfe dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,766,401.429, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=38,552, start_time=1,777,766,401.428, tcp_flags=, time_bucket=1,777,766,400, total_bytes=282, window_sec=30 session SESSION-1f1338ca0d03a7da dst_ip=172.234.197.23, dst_port=22, duration_sec=5.28, end_time=1,777,802,458.654, expected_protocol=ssh, packet_count=31, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=183.109.124.136, src_port=41,150, start_time=1,777,802,453.378, tcp_flags=A,F,S,P, time_bucket=1,777,802,430, total_bytes=5,369, window_sec=30 session SESSION-f0dcff5f0ed2ff24 dst_ip=172.234.197.23, dst_port=3,232, duration_sec=3.09, end_time=1,777,770,048.612, expected_protocol=unregistered:3232, packet_count=3, proto=TCP, protocol_anomaly_score=0.3, protocol_violations=tcp_syn_only, protocols=TCP, src_ip=54.89.155.82, src_port=64,330, start_time=1,777,770,045.525, tcp_flags=S, time_bucket=1,777,770,030, total_bytes=222, window_sec=30 session SESSION-12a40fcbcb5b6007 dst_ip=172.234.197.23, dst_port=13,443, duration_sec=3.1, end_time=1,777,770,045.054, expected_protocol=unregistered:13443, packet_count=3, proto=TCP, protocol_anomaly_score=0.3, protocol_violations=tcp_syn_only, protocols=TCP, src_ip=54.242.39.252, src_port=33,814, start_time=1,777,770,041.957, tcp_flags=S, time_bucket=1,777,770,030, total_bytes=222, window_sec=30 session SESSION-ad4b30d05cba7392 dst_ip=172.234.197.23, dst_port=22, duration_sec=15.98, end_time=1,777,773,629.547, expected_protocol=ssh, packet_count=36, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=2.57.122.197, src_port=33,136, start_time=1,777,773,613.563, tcp_flags=R,A,S,P, time_bucket=1,777,773,600, total_bytes=6,406, window_sec=30 session SESSION-1c1609727118ec44 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,809,603.885, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.251.223.71, start_time=1,777,809,603.885, tcp_flags=, time_bucket=1,777,809,600, total_bytes=164, window_sec=30 session SESSION-d9b20d676c034d76 dst_ip=172.234.197.23, duration_sec=16.07, end_time=1,777,766,456.869, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=44.249.238.112, start_time=1,777,766,440.798, tcp_flags=, time_bucket=1,777,766,430, total_bytes=492, window_sec=30 session SESSION-7ffd62094732a7c6 dst_ip=172.234.197.23, duration_sec=0.19, end_time=1,777,766,416.213, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.201.244.199, start_time=1,777,766,416.018, tcp_flags=, time_bucket=1,777,766,400, total_bytes=328, window_sec=30 session SESSION-506ea13ed22501c6 dst_ip=172.234.197.23, duration_sec=10.17, end_time=1,777,755,629.034, expected_protocol=unregistered:0, packet_count=12, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=18.118.14.61, start_time=1,777,755,618.86, tcp_flags=, time_bucket=1,777,755,600, total_bytes=984, window_sec=30 session SESSION-e8b4bb8948c85d2c dst_ip=172.234.197.23, dst_port=1,245, duration_sec=3.09, end_time=1,777,770,009.087, expected_protocol=unregistered:1245, packet_count=3, proto=TCP, protocol_anomaly_score=0.3, protocol_violations=tcp_syn_only, protocols=TCP, src_ip=34.238.176.206, src_port=50,472, start_time=1,777,770,005.996, tcp_flags=S, time_bucket=1,777,770,000, total_bytes=222, window_sec=30 session SESSION-b76b0110d6158f44 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,788,001.842, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=60,013, start_time=1,777,788,001.841, tcp_flags=, time_bucket=1,777,788,000, total_bytes=282, window_sec=30 session SESSION-821155945853dadb dst_ip=172.232.0.17, dst_port=53, duration_sec=0.03, end_time=1,777,813,201.427, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=33,798, start_time=1,777,813,201.398, tcp_flags=, time_bucket=1,777,813,200, total_bytes=282, window_sec=30 session SESSION-d42832a4689537d9 dst_ip=172.234.197.23, dst_port=443, duration_sec=15.73, end_time=1,777,795,257.547, expected_protocol=https, packet_count=7, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=37.127.107.29, src_port=40,382, start_time=1,777,795,241.814, tcp_flags=R,A,S, time_bucket=1,777,795,230, total_bytes=450, window_sec=30 session SESSION-88cb9e97f032387d dst_ip=172.234.197.23, dst_port=23, duration_sec=5, end_time=1,777,734,048.98, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,734,043.984, tcp_flags=S, time_bucket=1,777,734,030, total_bytes=162, window_sec=30 session SESSION-7bcd31e4d946ca70 dst_ip=172.234.197.23, duration_sec=20.2, end_time=1,777,755,656.518, expected_protocol=unregistered:0, packet_count=8, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=3.150.124.201, start_time=1,777,755,636.318, tcp_flags=, time_bucket=1,777,755,630, total_bytes=656, window_sec=30 session SESSION-48256ceebced597a dst_ip=172.234.197.23, dst_port=443, duration_sec=3.05, end_time=1,777,744,815.692, expected_protocol=https, packet_count=9, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=104.28.234.80, src_port=31,415, start_time=1,777,744,812.64, tcp_flags=P,F,A, time_bucket=1,777,744,800, total_bytes=671, window_sec=30 session SESSION-938618846c5c9b9a dst_ip=2.57.121.112, duration_sec=3.31, end_time=1,777,734,029.708, expected_protocol=unregistered:0, packet_count=9, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,734,026.401, tcp_flags=, time_bucket=1,777,734,000, total_bytes=1,174, window_sec=30 session SESSION-71e850bd6757f250 dst_ip=172.234.197.23, dst_port=22, duration_sec=2.87, end_time=1,777,798,808.389, expected_protocol=ssh, packet_count=25, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=213.209.159.228, src_port=42,148, start_time=1,777,798,805.519, tcp_flags=A,F,S,P, time_bucket=1,777,798,800, total_bytes=4,957, window_sec=30 session SESSION-a8c17a88c24db3fa dst_ip=172.234.197.23, duration_sec=0.1, end_time=1,777,755,616.083, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.144.196.3, start_time=1,777,755,615.985, tcp_flags=, time_bucket=1,777,755,600, total_bytes=328, window_sec=30 session SESSION-3506fc55bf426b55 dst_ip=172.234.197.23, dst_port=22, duration_sec=0.08, end_time=1,777,770,045.826, expected_protocol=ssh, packet_count=16, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=81.161.239.14, src_port=35,350, start_time=1,777,770,045.745, tcp_flags=A,F,S,P, time_bucket=1,777,770,030, total_bytes=3,703, window_sec=30 session SESSION-a54ca9f478485937 dst_ip=90.160.103.93, dst_port=39,517, duration_sec=28.61, end_time=1,777,762,859.05, expected_protocol=unregistered:39517, packet_count=4, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=80, start_time=1,777,762,830.442, tcp_flags=A,S, time_bucket=1,777,762,830, total_bytes=264, window_sec=30 session SESSION-35e5ea7d7f63cffc dst_ip=2.57.122.190, dst_port=32,382, duration_sec=2.31, end_time=1,777,752,033.884, expected_protocol=unregistered:32382, packet_count=5, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,752,031.576, tcp_flags=R,P,A, time_bucket=1,777,752,030, total_bytes=518, window_sec=30 session SESSION-853baec971d23dab dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,824,001.858, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=45,750, start_time=1,777,824,001.857, tcp_flags=, time_bucket=1,777,824,000, total_bytes=313, window_sec=30 session SESSION-85f774c309efd9a7 dst_ip=172.234.197.23, dst_port=22, duration_sec=3, end_time=1,777,798,849.803, expected_protocol=ssh, packet_count=25, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=92.103.134.183, src_port=43,470, start_time=1,777,798,846.802, tcp_flags=A,F,S,P, time_bucket=1,777,798,830, total_bytes=4,973, window_sec=30 session SESSION-ca52c834e271899e dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,615.777, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.147.7.219, start_time=1,777,755,615.777, tcp_flags=, time_bucket=1,777,755,600, total_bytes=164, window_sec=30 session SESSION-61ff88c731dbe214 dst_ip=172.234.197.23, dst_port=23, duration_sec=8.69, end_time=1,777,831,226.447, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=142.93.57.83, src_port=27,115, start_time=1,777,831,217.754, tcp_flags=S, time_bucket=1,777,831,200, total_bytes=162, window_sec=30 session SESSION-feb22a7780366a4b dst_ip=172.234.197.23, dst_port=80, duration_sec=0.1, end_time=1,777,780,846.838, expected_protocol=http, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=45.148.10.67, src_port=40,000, start_time=1,777,780,846.734, tcp_flags=R,A,S, time_bucket=1,777,780,830, total_bytes=166, window_sec=30 session SESSION-2e3045d942cba8d7 dst_ip=172.234.197.23, dst_port=22, duration_sec=5.55, end_time=1,777,734,040.023, expected_protocol=ssh, packet_count=30, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=59.6.77.80, src_port=36,740, start_time=1,777,734,034.47, tcp_flags=A,F,S,P, time_bucket=1,777,734,030, total_bytes=5,303, window_sec=30 session SESSION-a237fdf2d60fb6b5 dst_ip=172.234.197.23, dst_port=80, duration_sec=0, end_time=1,777,813,239.028, expected_protocol=http, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=141.98.83.48, src_port=21,027, start_time=1,777,813,239.028, tcp_flags=R,P,A, time_bucket=1,777,813,230, total_bytes=143, window_sec=30 session SESSION-96b8b9b88d3cc23a dst_ip=172.234.197.23, dst_port=21, duration_sec=0.24, end_time=1,777,752,018.004, expected_protocol=ftp-ctrl, packet_count=8, proto=TCP, protocol_anomaly_score=0.1, protocol_violations=risk_port, protocols=TCP, src_ip=194.165.16.163, src_port=65,312, start_time=1,777,752,017.762, tcp_flags=P,A,E,R,S,C, time_bucket=1,777,752,000, total_bytes=561, window_sec=30 session SESSION-1b649293007eb103 dst_ip=172.234.197.23, duration_sec=6.64, end_time=1,777,766,426.66, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=35.95.113.227, start_time=1,777,766,420.021, tcp_flags=, time_bucket=1,777,766,400, total_bytes=328, window_sec=30 session SESSION-4b3a171b7dcc8f4c dst_ip=172.234.197.23, dst_port=23, duration_sec=0.26, end_time=1,777,788,059.341, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=104.131.68.134, src_port=34,101, start_time=1,777,788,059.08, tcp_flags=S, time_bucket=1,777,788,030, total_bytes=108, window_sec=30 session SESSION-c9d94954cad7c428 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.05, end_time=1,777,748,413.658, expected_protocol=https, packet_count=11, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=212.102.40.218, src_port=9,222, start_time=1,777,748,413.612, tcp_flags=A,F,S,P, time_bucket=1,777,748,400, total_bytes=1,084, window_sec=30 session SESSION-ce3e447e587cd057 dst_ip=172.234.197.23, dst_port=22, duration_sec=3.04, end_time=1,777,780,853.372, expected_protocol=ssh, packet_count=3, proto=TCP, protocol_anomaly_score=0.3, protocol_violations=tcp_syn_only, protocols=TCP, src_ip=116.110.209.252, src_port=39,130, start_time=1,777,780,850.335, tcp_flags=S, time_bucket=1,777,780,830, total_bytes=222, window_sec=30 session SESSION-15b4ba444c69e69a dst_ip=172.232.0.17, dst_port=53, duration_sec=0.01, end_time=1,777,798,801.238, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=52,694, start_time=1,777,798,801.228, tcp_flags=, time_bucket=1,777,798,800, total_bytes=313, window_sec=30 session SESSION-1f47a197362d5c79 dst_ip=2.57.122.192, dst_port=52,432, duration_sec=22.14, end_time=1,777,813,258.411, expected_protocol=unregistered:52432, packet_count=4, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,813,236.266, tcp_flags=R,P,A, time_bucket=1,777,813,230, total_bytes=344, window_sec=30 session SESSION-809f256a37c40e2c dst_ip=172.234.197.23, dst_port=23, duration_sec=24.2, end_time=1,777,762,856.636, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,762,832.431, tcp_flags=S, time_bucket=1,777,762,830, total_bytes=108, window_sec=30 session SESSION-0edf8765d06f478e dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,827,645.365, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=195.169.125.251, start_time=1,777,827,645.364, tcp_flags=, time_bucket=1,777,827,630, total_bytes=92, window_sec=30 session SESSION-86557125cfa86be8 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.19, end_time=1,777,744,808.114, expected_protocol=https, packet_count=17, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=40.77.178.164, src_port=38,532, start_time=1,777,744,807.927, tcp_flags=P,A,E,S,C, time_bucket=1,777,744,800, total_bytes=6,422, window_sec=30 session SESSION-64300cff8b10944a dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,759,201.49, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=34,415, start_time=1,777,759,201.487, tcp_flags=, time_bucket=1,777,759,200, total_bytes=282, window_sec=30 session SESSION-02171245967fef66 dst_ip=172.234.197.23, dst_port=23, duration_sec=25.63, end_time=1,777,770,028.904, expected_protocol=telnet, packet_count=18, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=78.159.156.37, src_port=23,920, start_time=1,777,770,003.272, tcp_flags=S, time_bucket=1,777,770,000, total_bytes=972, window_sec=30 session SESSION-f9994bb19da4eaf6 dst_ip=172.234.197.23, dst_port=23, duration_sec=14.93, end_time=1,777,755,629.603, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,755,614.675, tcp_flags=S, time_bucket=1,777,755,600, total_bytes=108, window_sec=30 session SESSION-6dfbc5bb17c6c396 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,626.848, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.133.149.132, start_time=1,777,755,626.848, tcp_flags=, time_bucket=1,777,755,600, total_bytes=164, window_sec=30 session SESSION-bcdfed2f432cdce2 dst_ip=172.234.197.23, dst_port=80, duration_sec=0.1, end_time=1,777,795,250.303, expected_protocol=http, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=176.65.139.165, src_port=42,294, start_time=1,777,795,250.199, tcp_flags=R,A,S, time_bucket=1,777,795,230, total_bytes=166, window_sec=30 session SESSION-cf565ff82a8eab39 dst_ip=172.234.197.23, dst_port=23, duration_sec=23.37, end_time=1,777,759,228.688, expected_protocol=telnet, packet_count=12, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=104.41.134.16, src_port=65,101, start_time=1,777,759,205.316, tcp_flags=S, time_bucket=1,777,759,200, total_bytes=648, window_sec=30 session SESSION-4b23a6732706a8fd dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,766,433.592, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=34.216.76.26, start_time=1,777,766,433.592, tcp_flags=, time_bucket=1,777,766,430, total_bytes=164, window_sec=30 session SESSION-495e8264621ebfab dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,770,002.057, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=43,061, start_time=1,777,770,002.056, tcp_flags=, time_bucket=1,777,770,000, total_bytes=313, window_sec=30 session SESSION-e0a78a9988baac91 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,784,402.001, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=46,664, start_time=1,777,784,401.996, tcp_flags=, time_bucket=1,777,784,400, total_bytes=282, window_sec=30 session SESSION-2f1113cea5c54bac dst_ip=172.234.197.23, dst_port=80, duration_sec=15.32, end_time=1,777,759,251.498, expected_protocol=http, packet_count=6, proto=TCP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=TCP, src_ip=104.29.137.154, src_port=25,744, start_time=1,777,759,236.176, tcp_flags=A,S, time_bucket=1,777,759,230, total_bytes=396, window_sec=30 session SESSION-16449cddcfec8d51 dst_ip=172.234.197.23, dst_port=22, duration_sec=3.71, end_time=1,777,737,654.599, expected_protocol=ssh, packet_count=24, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=35.240.174.82, src_port=38,590, start_time=1,777,737,650.89, tcp_flags=A,F,S,P, time_bucket=1,777,737,630, total_bytes=4,891, window_sec=30 session SESSION-442dfdc4d5125f25 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,795,236.606, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.224.12.143, start_time=1,777,795,236.606, tcp_flags=, time_bucket=1,777,795,230, total_bytes=164, window_sec=30 session SESSION-1d07fddfa500f08a dst_ip=172.234.197.23, dst_port=443, duration_sec=0.05, end_time=1,777,748,413.895, expected_protocol=https, packet_count=9, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=212.102.40.218, src_port=21,352, start_time=1,777,748,413.85, tcp_flags=R,A,S,P, time_bucket=1,777,748,400, total_bytes=3,448, window_sec=30 session SESSION-a550345245388a36 dst_ip=172.234.197.23, dst_port=23, duration_sec=20.22, end_time=1,777,809,629.856, expected_protocol=telnet, packet_count=13, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=202.182.97.77, src_port=7,090, start_time=1,777,809,609.635, tcp_flags=S, time_bucket=1,777,809,600, total_bytes=702, window_sec=30 session SESSION-4972b4045f230a0c dst_ip=172.234.197.23, dst_port=3,389, duration_sec=3, end_time=1,777,816,859.108, expected_protocol=rdp, packet_count=2, proto=TCP, protocol_anomaly_score=0.85, protocol_violations=missing_tls,tcp_syn_only,risk_port, protocols=TCP, src_ip=46.63.101.233, src_port=55,579, start_time=1,777,816,856.11, tcp_flags=S,C,E, time_bucket=1,777,816,830, total_bytes=132, window_sec=30 session SESSION-af096e40b0f2a79b dst_ip=172.234.197.23, dst_port=22, duration_sec=16, end_time=1,777,780,819.352, expected_protocol=ssh, packet_count=36, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=2.57.122.197, src_port=1,752, start_time=1,777,780,803.354, tcp_flags=R,A,S,P, time_bucket=1,777,780,800, total_bytes=6,374, window_sec=30 session SESSION-6693b3d7e1f76209 dst_ip=172.234.197.23, dst_port=22, duration_sec=16.18, end_time=1,777,791,622.698, expected_protocol=ssh, packet_count=8, proto=TCP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=TCP, src_ip=207.182.128.157, src_port=38,186, start_time=1,777,791,606.515, tcp_flags=A,S, time_bucket=1,777,791,600, total_bytes=592, window_sec=30 session SESSION-bd493d17aeae016c dst_ip=172.234.197.23, duration_sec=9.68, end_time=1,777,755,629.639, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=18.220.79.216, start_time=1,777,755,619.96, tcp_flags=, time_bucket=1,777,755,600, total_bytes=328, window_sec=30 session SESSION-bbc274dc3a934ad2 dst_ip=172.234.197.23, duration_sec=6.94, end_time=1,777,766,429.814, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=16.144.80.146, start_time=1,777,766,422.874, tcp_flags=, time_bucket=1,777,766,400, total_bytes=328, window_sec=30 session SESSION-cf1c64d21cbd403b dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,741,201.667, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=60,519, start_time=1,777,741,201.666, tcp_flags=, time_bucket=1,777,741,200, total_bytes=282, window_sec=30 session SESSION-00d8e957fa89b954 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,766,427.043, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=34.216.30.208, start_time=1,777,766,427.043, tcp_flags=, time_bucket=1,777,766,400, total_bytes=164, window_sec=30 session SESSION-6998dcca11c9359e dst_ip=172.234.197.23, duration_sec=13.09, end_time=1,777,755,647.092, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=3.133.149.132, start_time=1,777,755,634.006, tcp_flags=, time_bucket=1,777,755,630, total_bytes=492, window_sec=30 session SESSION-ba00091e20623dda dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,809,603.68, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=108.131.102.25, start_time=1,777,809,603.68, tcp_flags=, time_bucket=1,777,809,600, total_bytes=164, window_sec=30 session SESSION-909f4f35ce48fc0a dst_ip=172.234.197.23, dst_port=23, duration_sec=25.63, end_time=1,777,744,856.829, expected_protocol=telnet, packet_count=4, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,744,831.195, tcp_flags=S, time_bucket=1,777,744,830, total_bytes=216, window_sec=30 session SESSION-c91cd420795fae3a dst_ip=58.209.82.184, dst_port=36,972, duration_sec=12.22, end_time=1,777,791,615.018, expected_protocol=unregistered:36972, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,791,602.794, tcp_flags=A,S, time_bucket=1,777,791,600, total_bytes=222, window_sec=30 session SESSION-05e058daf8b3aae8 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,795,201.454, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=44,714, start_time=1,777,795,201.453, tcp_flags=, time_bucket=1,777,795,200, total_bytes=282, window_sec=30 session SESSION-dd95f5044be03589 dst_ip=172.234.197.23, dst_port=80, duration_sec=0, end_time=1,777,816,848.349, expected_protocol=http, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=141.98.83.48, src_port=730, start_time=1,777,816,848.349, tcp_flags=R,P,A, time_bucket=1,777,816,830, total_bytes=143, window_sec=30 session SESSION-59ab3dbf3ff246c0 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,766,419.73, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.186.85.102, start_time=1,777,766,419.73, tcp_flags=, time_bucket=1,777,766,400, total_bytes=164, window_sec=30 session SESSION-0d693287fef174f5 dst_ip=172.234.197.23, dst_port=23, duration_sec=16.01, end_time=1,777,759,259.442, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=104.41.134.16, src_port=65,101, start_time=1,777,759,243.432, tcp_flags=S, time_bucket=1,777,759,230, total_bytes=162, window_sec=30 session SESSION-2395c025353fb0ee dst_ip=172.234.197.23, dst_port=23, duration_sec=20.38, end_time=1,777,752,029.912, expected_protocol=telnet, packet_count=10, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=45.148.120.187, src_port=8,528, start_time=1,777,752,009.535, tcp_flags=S, time_bucket=1,777,752,000, total_bytes=540, window_sec=30 session SESSION-84779c50b74571dd dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,737,628.581, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=38,883, start_time=1,777,737,628.581, tcp_flags=, time_bucket=1,777,737,600, total_bytes=282, window_sec=30 session SESSION-b34b8c932f88a387 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,744,830.322, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.224.71.230, start_time=1,777,744,830.322, tcp_flags=, time_bucket=1,777,744,830, total_bytes=164, window_sec=30 session SESSION-9801d768ef8fb2c1 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,827,601.718, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=49,898, start_time=1,777,827,601.716, tcp_flags=, time_bucket=1,777,827,600, total_bytes=313, window_sec=30 session SESSION-b9b2ecc2c099d7a1 dst_ip=172.234.197.23, dst_port=23, duration_sec=20.63, end_time=1,777,734,027.048, expected_protocol=telnet, packet_count=14, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=103.231.8.51, src_port=57,154, start_time=1,777,734,006.417, tcp_flags=S, time_bucket=1,777,734,000, total_bytes=756, window_sec=30 session SESSION-bd0b88a5dd781a63 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,831,201.618, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=54,993, start_time=1,777,831,201.618, tcp_flags=, time_bucket=1,777,831,200, total_bytes=282, window_sec=30 session SESSION-5a49effd586ee2c5 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,795,236.756, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.225.29.67, start_time=1,777,795,236.756, tcp_flags=, time_bucket=1,777,795,230, total_bytes=164, window_sec=30 session SESSION-702cdfdb2f7eba8f dst_ip=172.234.197.23, dst_port=55,008, duration_sec=4.13, end_time=1,777,741,250.831, expected_protocol=unregistered:55008, packet_count=5, proto=TCP, protocol_anomaly_score=0.7, protocol_violations=constant_size_c2,tcp_syn_only, protocols=TCP, src_ip=176.65.132.218, src_port=46,398, start_time=1,777,741,246.701, tcp_flags=S, time_bucket=1,777,741,230, total_bytes=370, window_sec=30 session SESSION-69c0cd9fffe7159f dst_ip=2.57.122.190, duration_sec=11.02, end_time=1,777,777,224.872, expected_protocol=unregistered:0, packet_count=7, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,777,213.849, tcp_flags=, time_bucket=1,777,777,200, total_bytes=586, window_sec=30 session SESSION-6e44a853b2447adb dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,759,208.242, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,759,208.242, tcp_flags=, time_bucket=1,777,759,200, total_bytes=84, window_sec=30 session SESSION-14ca161ddbd2d096 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.16, end_time=1,777,795,224.27, expected_protocol=https, packet_count=3, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=37.127.107.29, src_port=35,541, start_time=1,777,795,224.11, tcp_flags=R,A,S, time_bucket=1,777,795,200, total_bytes=186, window_sec=30 session SESSION-61b50510c9ed9452 dst_ip=172.234.197.23, duration_sec=2.61, end_time=1,777,766,459.585, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=44.248.141.231, start_time=1,777,766,456.975, tcp_flags=, time_bucket=1,777,766,430, total_bytes=328, window_sec=30 session SESSION-2abfe1caa18a8bcf dst_ip=172.234.197.23, dst_port=22, duration_sec=2.97, end_time=1,777,798,843.913, expected_protocol=ssh, packet_count=25, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=92.103.134.183, src_port=40,922, start_time=1,777,798,840.947, tcp_flags=A,F,S,P, time_bucket=1,777,798,830, total_bytes=4,973, window_sec=30 session SESSION-ae554d7f188ebf4c dst_ip=172.234.197.23, duration_sec=13.39, end_time=1,777,755,653.334, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=18.220.79.216, start_time=1,777,755,639.947, tcp_flags=, time_bucket=1,777,755,630, total_bytes=492, window_sec=30 session SESSION-6fb42537bde80e05 dst_ip=2.57.122.190, duration_sec=21.5, end_time=1,777,777,257.128, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,777,235.624, tcp_flags=, time_bucket=1,777,777,230, total_bytes=164, window_sec=30 session SESSION-84d8a687ceedca22 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,795,201.457, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=34,849, start_time=1,777,795,201.455, tcp_flags=, time_bucket=1,777,795,200, total_bytes=313, window_sec=30 session SESSION-61650be1c78bd775 dst_ip=172.234.197.23, duration_sec=10.21, end_time=1,777,755,653.59, expected_protocol=unregistered:0, packet_count=8, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=3.15.37.246, start_time=1,777,755,643.383, tcp_flags=, time_bucket=1,777,755,630, total_bytes=656, window_sec=30 session SESSION-85484585f5ab0526 dst_ip=172.234.197.23, dst_port=43,553, duration_sec=1.02, end_time=1,777,791,625.399, expected_protocol=unregistered:43553, packet_count=2, proto=TCP, protocol_anomaly_score=0.3, protocol_violations=tcp_syn_only, protocols=TCP, src_ip=94.26.106.199, src_port=52,502, start_time=1,777,791,624.377, tcp_flags=S, time_bucket=1,777,791,600, total_bytes=148, window_sec=30 session SESSION-c558b06da108125e dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,784,402.003, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=38,248, start_time=1,777,784,402.001, tcp_flags=, time_bucket=1,777,784,400, total_bytes=313, window_sec=30 session SESSION-95bff3563ca1e3fc dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,626.243, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.148.165.81, start_time=1,777,755,626.243, tcp_flags=, time_bucket=1,777,755,600, total_bytes=164, window_sec=30 session SESSION-640436da0ba80f21 dst_ip=66.70.138.49, dst_port=54,583, duration_sec=24.7, end_time=1,777,802,429.994, expected_protocol=unregistered:54583, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=80, start_time=1,777,802,405.29, tcp_flags=A,S, time_bucket=1,777,802,400, total_bytes=198, window_sec=30 session SESSION-683f67a830d4ed44 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.05, end_time=1,777,748,413.804, expected_protocol=https, packet_count=9, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=212.102.40.218, src_port=16,566, start_time=1,777,748,413.758, tcp_flags=R,A,S,P, time_bucket=1,777,748,400, total_bytes=3,456, window_sec=30 session SESSION-9cc50fad18d97884 dst_ip=172.234.197.23, duration_sec=26.45, end_time=1,777,755,657.072, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=3.14.67.79, start_time=1,777,755,630.624, tcp_flags=, time_bucket=1,777,755,630, total_bytes=492, window_sec=30 session SESSION-c25de7a226bf69aa dst_ip=172.234.197.23, dst_port=23, duration_sec=21.44, end_time=1,777,788,028.589, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=104.131.68.134, src_port=34,101, start_time=1,777,788,007.153, tcp_flags=S, time_bucket=1,777,788,000, total_bytes=162, window_sec=30 session SESSION-8bd4acd5bebd8982 dst_ip=172.234.197.23, dst_port=443, duration_sec=15.13, end_time=1,777,788,018.167, expected_protocol=https, packet_count=4, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=82.29.47.56, src_port=49,463, start_time=1,777,788,003.035, tcp_flags=A, time_bucket=1,777,788,000, total_bytes=264, window_sec=30 session SESSION-455fd26670b68d6e dst_ip=92.118.39.23, dst_port=18,010, duration_sec=0.13, end_time=1,777,773,613.79, expected_protocol=unregistered:18010, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,773,613.662, tcp_flags=R,F,A, time_bucket=1,777,773,600, total_bytes=120, window_sec=30 session SESSION-b830488fd91fb768 dst_ip=172.234.197.23, dst_port=23, duration_sec=6.88, end_time=1,777,791,658.301, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=104.131.68.134, src_port=34,101, start_time=1,777,791,651.42, tcp_flags=S, time_bucket=1,777,791,630, total_bytes=108, window_sec=30 session SESSION-b394a72653437608 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.55, end_time=1,777,773,654.451, expected_protocol=https, packet_count=118, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=216.73.217.0, src_port=52,513, start_time=1,777,773,653.905, tcp_flags=A,S,P, time_bucket=1,777,773,630, total_bytes=132,068, window_sec=30 session SESSION-88e69e6de2de50d9 dst_ip=172.232.0.17, dst_port=53, duration_sec=0.01, end_time=1,777,802,401.922, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=50,010, start_time=1,777,802,401.91, tcp_flags=, time_bucket=1,777,802,400, total_bytes=282, window_sec=30 session SESSION-686ed406e0728e12 dst_ip=45.148.10.157, dst_port=51,610, duration_sec=6.47, end_time=1,777,798,838.298, expected_protocol=unregistered:51610, packet_count=8, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,798,831.825, tcp_flags=R,P,A, time_bucket=1,777,798,830, total_bytes=852, window_sec=30 session SESSION-a9fe18f5a3c80234 dst_ip=172.234.197.23, duration_sec=10.26, end_time=1,777,766,429.991, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=44.250.172.176, start_time=1,777,766,419.729, tcp_flags=, time_bucket=1,777,766,400, total_bytes=492, window_sec=30 session SESSION-30b4fa560421fd77 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,773,608.714, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,773,608.714, tcp_flags=, time_bucket=1,777,773,600, total_bytes=84, window_sec=30 session SESSION-3f5409f36e43c401 dst_ip=116.110.209.252, duration_sec=3.04, end_time=1,777,780,853.372, expected_protocol=unregistered:0, packet_count=3, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,780,850.336, tcp_flags=, time_bucket=1,777,780,830, total_bytes=306, window_sec=30 session SESSION-c8eccdf5e7c2b60a dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,788,001.846, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=36,445, start_time=1,777,788,001.842, tcp_flags=, time_bucket=1,777,788,000, total_bytes=313, window_sec=30 session SESSION-970edfdb90462f9d dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,737,601.931, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=47,238, start_time=1,777,737,601.93, tcp_flags=, time_bucket=1,777,737,600, total_bytes=313, window_sec=30 session SESSION-25ec67cf3423e490 dst_ip=172.234.197.23, dst_port=8,088, duration_sec=1, end_time=1,777,766,427.193, expected_protocol=unregistered:8088, packet_count=2, proto=TCP, protocol_anomaly_score=0.3, protocol_violations=tcp_syn_only, protocols=TCP, src_ip=103.20.144.42, src_port=53,084, start_time=1,777,766,426.19, tcp_flags=S, time_bucket=1,777,766,400, total_bytes=148, window_sec=30 session SESSION-79ca81e956193583 dst_ip=172.234.197.23, duration_sec=19.79, end_time=1,777,755,653.287, expected_protocol=unregistered:0, packet_count=14, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=3.144.196.3, start_time=1,777,755,633.5, tcp_flags=, time_bucket=1,777,755,630, total_bytes=1,148, window_sec=30 session SESSION-4ad1173016185d80 dst_ip=172.234.197.23, dst_port=23, duration_sec=25.99, end_time=1,777,748,456.604, expected_protocol=telnet, packet_count=10, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=45.148.120.187, src_port=8,528, start_time=1,777,748,430.61, tcp_flags=S, time_bucket=1,777,748,430, total_bytes=540, window_sec=30 session SESSION-f619c7a86d06619b dst_ip=172.234.197.23, duration_sec=3.66, end_time=1,777,766,452.65, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=44.244.28.93, start_time=1,777,766,448.99, tcp_flags=, time_bucket=1,777,766,430, total_bytes=328, window_sec=30 session SESSION-a6e43d8121904257 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,831,208.814, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,831,208.814, tcp_flags=, time_bucket=1,777,831,200, total_bytes=84, window_sec=30 session SESSION-5b2b3ddf60a32fc2 dst_ip=172.234.197.23, duration_sec=10.07, end_time=1,777,755,626.666, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=18.188.178.178, start_time=1,777,755,616.594, tcp_flags=, time_bucket=1,777,755,600, total_bytes=492, window_sec=30 session SESSION-45eff35d4fe337f9 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,806,001.738, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=58,099, start_time=1,777,806,001.737, tcp_flags=, time_bucket=1,777,806,000, total_bytes=313, window_sec=30 session SESSION-82ea60d68189a64d dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,766,423.168, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=35.95.128.58, start_time=1,777,766,423.168, tcp_flags=, time_bucket=1,777,766,400, total_bytes=164, window_sec=30 session SESSION-ea23c4d779588351 dst_ip=172.234.197.23, dst_port=22, duration_sec=16.45, end_time=1,777,766,422.57, expected_protocol=ssh, packet_count=6, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=221.228.203.3, src_port=47,083, start_time=1,777,766,406.117, tcp_flags=P,A, time_bucket=1,777,766,400, total_bytes=500, window_sec=30 session SESSION-34a76226cb8c7c48 dst_ip=172.234.197.23, dst_port=22, duration_sec=9.59, end_time=1,777,752,029.525, expected_protocol=ssh, packet_count=31, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=2.57.122.190, src_port=32,382, start_time=1,777,752,019.936, tcp_flags=A,S,P, time_bucket=1,777,752,000, total_bytes=5,896, window_sec=30 session SESSION-aae15a99bb68abe1 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,744,801.434, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=40,323, start_time=1,777,744,801.432, tcp_flags=, time_bucket=1,777,744,800, total_bytes=313, window_sec=30 session SESSION-eb2834dbef9d720c dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,809,613.893, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=34.248.64.250, start_time=1,777,809,613.893, tcp_flags=, time_bucket=1,777,809,600, total_bytes=164, window_sec=30 session SESSION-d7866d51aac5d68e dst_ip=172.234.197.23, duration_sec=9.52, end_time=1,777,766,449.803, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=34.220.7.91, start_time=1,777,766,440.279, tcp_flags=, time_bucket=1,777,766,430, total_bytes=328, window_sec=30 session SESSION-b05096a295fb4f00 dst_ip=172.234.197.23, dst_port=23, duration_sec=28.12, end_time=1,777,748,429.781, expected_protocol=telnet, packet_count=8, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=45.148.120.187, src_port=8,528, start_time=1,777,748,401.66, tcp_flags=S, time_bucket=1,777,748,400, total_bytes=432, window_sec=30 session SESSION-6070733f089cc42c dst_ip=172.234.197.23, dst_port=23, duration_sec=5.41, end_time=1,777,741,222.33, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=103.231.8.51, src_port=57,154, start_time=1,777,741,216.917, tcp_flags=S, time_bucket=1,777,741,200, total_bytes=162, window_sec=30 session SESSION-cda1e0e1de4f16b9 dst_ip=172.234.197.23, dst_port=12,443, duration_sec=3.15, end_time=1,777,770,044.58, expected_protocol=unregistered:12443, packet_count=3, proto=TCP, protocol_anomaly_score=0.3, protocol_violations=tcp_syn_only, protocols=TCP, src_ip=13.218.167.231, src_port=33,186, start_time=1,777,770,041.427, tcp_flags=S, time_bucket=1,777,770,030, total_bytes=222, window_sec=30 session SESSION-3b14e2fd30cc79b4 dst_ip=172.234.197.23, dst_port=22, duration_sec=9.26, end_time=1,777,798,827.724, expected_protocol=ssh, packet_count=28, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=45.148.10.157, src_port=51,610, start_time=1,777,798,818.464, tcp_flags=A,S,P, time_bucket=1,777,798,800, total_bytes=5,554, window_sec=30 session SESSION-f0fe288b7e680824 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,770,002.055, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=47,517, start_time=1,777,770,002.055, tcp_flags=, time_bucket=1,777,770,000, total_bytes=282, window_sec=30 session SESSION-ac5edcb721e7f640 dst_ip=172.234.197.23, dst_port=22, duration_sec=3.38, end_time=1,777,802,450.755, expected_protocol=ssh, packet_count=25, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=183.109.124.136, src_port=38,842, start_time=1,777,802,447.374, tcp_flags=A,F,S,P, time_bucket=1,777,802,430, total_bytes=4,973, window_sec=30 session SESSION-d9e816a75fcafe96 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,773,601.774, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=54,173, start_time=1,777,773,601.773, tcp_flags=, time_bucket=1,777,773,600, total_bytes=313, window_sec=30 session SESSION-2b51e8ff26b51c38 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,755,625.543, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=3.144.250.137, start_time=1,777,755,625.543, tcp_flags=, time_bucket=1,777,755,600, total_bytes=164, window_sec=30 session SESSION-5fe3338390c20be7 dst_ip=172.234.197.23, dst_port=443, duration_sec=1.34, end_time=1,777,737,628.657, expected_protocol=https, packet_count=15, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=104.28.234.80, src_port=65,232, start_time=1,777,737,627.321, tcp_flags=A,S,P, time_bucket=1,777,737,600, total_bytes=5,519, window_sec=30 session SESSION-c113a7ff13526ddc dst_ip=172.234.197.23, dst_port=23, duration_sec=25.32, end_time=1,777,816,855.964, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=202.182.97.77, src_port=7,090, start_time=1,777,816,830.648, tcp_flags=S, time_bucket=1,777,816,830, total_bytes=108, window_sec=30 session SESSION-a137cee14521a7d3 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,813,201.43, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=47,830, start_time=1,777,813,201.427, tcp_flags=, time_bucket=1,777,813,200, total_bytes=313, window_sec=30 session SESSION-baa313c3fcfe03b0 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,744,801.432, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=47,512, start_time=1,777,744,801.431, tcp_flags=, time_bucket=1,777,744,800, total_bytes=282, window_sec=30 session SESSION-b4f4b8661714482f dst_ip=172.234.197.23, dst_port=22, duration_sec=17.28, end_time=1,777,791,626.794, expected_protocol=ssh, packet_count=10, proto=TCP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=TCP, src_ip=207.182.128.157, src_port=39,188, start_time=1,777,791,609.515, tcp_flags=A,S, time_bucket=1,777,791,600, total_bytes=740, window_sec=30 session SESSION-2872568a98b54c4f dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,752,018.481, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=51.225.147.241, start_time=1,777,752,018.481, tcp_flags=, time_bucket=1,777,752,000, total_bytes=164, window_sec=30 session SESSION-5b980b078b6595d0 dst_ip=183.109.124.136, duration_sec=1.74, end_time=1,777,802,458.654, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,802,456.91, tcp_flags=, time_bucket=1,777,802,430, total_bytes=376, window_sec=30 session SESSION-8adfa3b782de8dd2 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,816,801.22, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=44,843, start_time=1,777,816,801.22, tcp_flags=, time_bucket=1,777,816,800, total_bytes=282, window_sec=30 session SESSION-96032001dfbdc54b dst_ip=172.234.197.23, dst_port=23, duration_sec=6.2, end_time=1,777,770,052.857, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,770,046.653, tcp_flags=S, time_bucket=1,777,770,030, total_bytes=108, window_sec=30 session SESSION-1f865367341427b4 dst_ip=112.121.177.138, dst_port=36,722, duration_sec=0.18, end_time=1,777,752,002.268, expected_protocol=unregistered:36722, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,752,002.09, tcp_flags=F,A, time_bucket=1,777,752,000, total_bytes=132, window_sec=30 session SESSION-4446f7cf3be9b726 dst_ip=172.234.197.23, dst_port=23, duration_sec=10.77, end_time=1,777,741,242.969, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=199.19.73.10, src_port=48,232, start_time=1,777,741,232.204, tcp_flags=S, time_bucket=1,777,741,230, total_bytes=108, window_sec=30 session SESSION-597401b5992e9f85 dst_ip=172.234.197.23, dst_port=23, duration_sec=23.07, end_time=1,777,816,826.065, expected_protocol=telnet, packet_count=4, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=51.159.210.196, src_port=57,679, start_time=1,777,816,802.997, tcp_flags=S, time_bucket=1,777,816,800, total_bytes=216, window_sec=30 session SESSION-c15d59a7e3326abd dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,802,432.644, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=45.11.106.181, start_time=1,777,802,432.644, tcp_flags=, time_bucket=1,777,802,430, total_bytes=96, window_sec=30 session SESSION-872d165f2cc555ea dst_ip=172.234.197.23, dst_port=443, duration_sec=0.1, end_time=1,777,780,847.279, expected_protocol=https, packet_count=3, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=45.148.10.67, src_port=40,001, start_time=1,777,780,847.175, tcp_flags=R,A,S, time_bucket=1,777,780,830, total_bytes=166, window_sec=30 session SESSION-a31d483fa9b13ebe dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,777,201.415, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=52,418, start_time=1,777,777,201.413, tcp_flags=, time_bucket=1,777,777,200, total_bytes=282, window_sec=30 session SESSION-595b1d3c3e74e180 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,831,231.838, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=48,331, start_time=1,777,831,231.838, tcp_flags=, time_bucket=1,777,831,230, total_bytes=313, window_sec=30 session SESSION-b15dc6b4dfae9229 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.2, end_time=1,777,784,433.871, expected_protocol=https, packet_count=11, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=64.62.156.182, src_port=60,788, start_time=1,777,784,433.668, tcp_flags=A,F,S,P, time_bucket=1,777,784,430, total_bytes=724, window_sec=30 session SESSION-cb61c5202def1d6e dst_ip=172.234.197.23, dst_port=23, duration_sec=12.47, end_time=1,777,748,452.35, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=205.251.153.87, src_port=34,101, start_time=1,777,748,439.881, tcp_flags=S, time_bucket=1,777,748,430, total_bytes=108, window_sec=30 session SESSION-1f9e68ab259bdd9b dst_ip=172.234.197.23, dst_port=10,002, duration_sec=0, end_time=1,777,802,439.576, expected_protocol=unregistered:10002, packet_count=2, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=18.190.15.50, src_port=61,234, start_time=1,777,802,439.576, tcp_flags=R,A,S, time_bucket=1,777,802,430, total_bytes=120, window_sec=30 session SESSION-8bbf420c23568168 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.11, end_time=1,777,802,451.322, expected_protocol=https, packet_count=3, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=104.140.188.2, src_port=56,912, start_time=1,777,802,451.216, tcp_flags=R,A,S, time_bucket=1,777,802,430, total_bytes=170, window_sec=30 session SESSION-5a133675a20b429b dst_ip=172.234.197.23, dst_port=22, duration_sec=8.21, end_time=1,777,791,618.207, expected_protocol=ssh, packet_count=23, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=45.153.34.112, src_port=47,022, start_time=1,777,791,609.995, tcp_flags=A,F,S,P, time_bucket=1,777,791,600, total_bytes=4,701, window_sec=30 session SESSION-d0d544acabac93b9 dst_ip=172.234.197.23, duration_sec=6.83, end_time=1,777,766,450.006, expected_protocol=unregistered:0, packet_count=4, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=54.186.85.102, start_time=1,777,766,443.179, tcp_flags=, time_bucket=1,777,766,430, total_bytes=328, window_sec=30 session SESSION-bacd9ddac6ade95f dst_ip=154.210.208.214, duration_sec=14.15, end_time=1,777,737,616.412, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,737,602.261, tcp_flags=, time_bucket=1,777,737,600, total_bytes=600, window_sec=30 session SESSION-598d2b403680c88d dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,752,008.123, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=103.155.16.117, start_time=1,777,752,008.123, tcp_flags=, time_bucket=1,777,752,000, total_bytes=84, window_sec=30 session SESSION-b8b098d61f1cec06 dst_ip=172.234.197.23, duration_sec=10.41, end_time=1,777,755,629.93, expected_protocol=unregistered:0, packet_count=6, proto=ICMP, protocol_anomaly_score=0.4, protocol_violations=constant_size_c2, protocols=ICMP, src_ip=3.14.67.79, start_time=1,777,755,619.52, tcp_flags=, time_bucket=1,777,755,600, total_bytes=492, window_sec=30 session SESSION-d288c9e3bbd92a0d dst_ip=2.57.122.191, dst_port=8,546, duration_sec=0.13, end_time=1,777,759,260.743, expected_protocol=unregistered:8546, packet_count=3, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=172.234.197.23, src_port=22, start_time=1,777,759,260.613, tcp_flags=P,A, time_bucket=1,777,759,260, total_bytes=334, window_sec=30 session SESSION-c1c7778b1c98e657 dst_ip=172.234.197.23, dst_port=443, duration_sec=0, end_time=1,777,831,255.239, expected_protocol=https, packet_count=2, proto=TCP, protocol_anomaly_score=0.35, protocol_violations=missing_tls, protocols=TCP, src_ip=104.28.202.79, src_port=64,370, start_time=1,777,831,255.239, tcp_flags=A, time_bucket=1,777,831,230, total_bytes=132, window_sec=30 session SESSION-9cab9d4a76bb4965 dst_ip=213.209.159.56, duration_sec=7.32, end_time=1,777,770,040.651, expected_protocol=unregistered:0, packet_count=12, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,770,033.331, tcp_flags=, time_bucket=1,777,770,030, total_bytes=1,928, window_sec=30 session SESSION-60b2feb615904c06 dst_ip=172.234.197.23, dst_port=443, duration_sec=0.15, end_time=1,777,737,634.113, expected_protocol=https, packet_count=26, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=44.209.89.189, src_port=58,459, start_time=1,777,737,633.958, tcp_flags=P,A,R,F,S, time_bucket=1,777,737,630, total_bytes=8,941, window_sec=30 session SESSION-7b74e9d4f101aa92 dst_ip=172.234.197.23, dst_port=23, duration_sec=21.51, end_time=1,777,824,029.284, expected_protocol=telnet, packet_count=3, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=223.25.245.241, src_port=65,101, start_time=1,777,824,007.772, tcp_flags=S, time_bucket=1,777,824,000, total_bytes=162, window_sec=30 session SESSION-7bdb50108637614b dst_ip=172.234.197.23, dst_port=23, duration_sec=18.69, end_time=1,777,816,859.755, expected_protocol=telnet, packet_count=5, proto=TCP, protocol_anomaly_score=1, protocol_violations=constant_size_c2,tcp_syn_only,risk_port, protocols=TCP, src_ip=51.159.210.196, src_port=57,679, start_time=1,777,816,841.065, tcp_flags=S, time_bucket=1,777,816,830, total_bytes=270, window_sec=30 session SESSION-dbf43d09bfb097ff dst_ip=172.234.197.23, dst_port=23, duration_sec=9.14, end_time=1,777,741,253.172, expected_protocol=telnet, packet_count=2, proto=TCP, protocol_anomaly_score=0.75, protocol_violations=tcp_syn_only,risk_port, protocols=TCP, src_ip=103.231.8.51, src_port=57,154, start_time=1,777,741,244.032, tcp_flags=S, time_bucket=1,777,741,230, total_bytes=108, window_sec=30 session SESSION-cddd43e43d0ba744 dst_ip=172.232.0.17, dst_port=53, duration_sec=0, end_time=1,777,831,201.62, expected_protocol=dns, packet_count=2, proto=UDP, protocol_anomaly_score=0, protocol_violations=, protocols=UDP, src_ip=172.234.197.23, src_port=57,021, start_time=1,777,831,201.619, tcp_flags=, time_bucket=1,777,831,200, total_bytes=313, window_sec=30 session SESSION-6eec36ca0ecac82a dst_ip=2.57.122.192, duration_sec=22.02, end_time=1,777,813,258.411, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=172.234.197.23, start_time=1,777,813,236.395, tcp_flags=, time_bucket=1,777,813,230, total_bytes=164, window_sec=30 session SESSION-d38cad975692856e dst_ip=172.234.197.23, dst_port=22, duration_sec=17.87, end_time=1,777,734,029.708, expected_protocol=ssh, packet_count=44, proto=TCP, protocol_anomaly_score=0, protocol_violations=, protocols=TCP, src_ip=2.57.121.112, src_port=26,423, start_time=1,777,734,011.839, tcp_flags=P,A,E,F,S,C, time_bucket=1,777,734,000, total_bytes=7,498, window_sec=30 session SESSION-f3af737bea997416 dst_ip=172.234.197.23, duration_sec=0, end_time=1,777,766,436.395, expected_protocol=unregistered:0, packet_count=2, proto=ICMP, protocol_anomaly_score=0, protocol_violations=, protocols=ICMP, src_ip=44.247.223.188, start_time=1,777,766,436.395, tcp_flags=, time_bucket=1,777,766,430, total_bytes=164, window_sec=30 tls_sni tls_sni:172.234.197.23 sni=172.234.197.23 tls_sni tls_sni:172-234-197-23.ip.linodeusercontent.com sni=172-234-197-23.ip.linodeusercontent.com