100% CPU CCR1072 due DDoS - How to improve?

jmginer · August 7, 2018, 9:33am

Hello, yestreday we received a DDoS attack that caused a 100% CPU usage (it’s a CCR 1072)
and our system was unable to do a blackhole because the router was inaccesible also via API.

We have the IP connection tracking disabled on the firewall.

There is some extra option that we can do to prevent a full CPU usage?

Not too much Mbps nor PPS, just a lot of TCP flows.

TCP flows: 93291
2018-08-06 21:06:39.000000 119.175.73.105:33808 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 90.156.90.38:34098 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 82.154.217.103:37968 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 215.209.28.140:36687 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 30.127.18.65:35167 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 153.68.162.252:36447 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 28.197.181.242:35470 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.167.200.198:36821 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 208.41.216.250:33192 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 14.254.243.53:37078 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.166.51.247:33923 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 210.128.204.140:36005 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 53.175.15.143:34193 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 128.205.59.126:34596 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 53.63.60.162:36465 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 37.189.167.218:33381 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 160.242.67.56:36361 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 60.189.140.41:22165 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 27.54.210.5:34692 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 15.75.54.29:36368 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 197.116.243.121:38286 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 142.234.57.173:36764 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 121.212.131.65:33814 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 143.54.250.132:34935 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 168.159.242.14:38862 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 131.162.209.129:35054 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 216.199.127.216:34424 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 128.81.156.69:36446 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 187.189.217.111:35815 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 210.11.215.144:34700 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 160.29.253.73:33759 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 140.107.25.67:33508 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 121.173.156.55:38493 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 41.210.250.37:38793 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 187.162.226.159:36059 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 54.60.217.170:36211 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 25.205.192.186:37438 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 100.173.181.53:37754 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 105.25.187.66:35034 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 39.57.175.67:37163 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 42.7.99.41:34044 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 199.243.250.210:35724 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 81.165.127.175:37599 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 158.140.197.219:24245 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 15.107.158.25:35769 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 208.63.122.186:36229 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 223.200.41.27:38831 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 128.227.63.37:35403 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 210.102.11.165:37026 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 54.46.106.140:36928 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 5.187.56.244:37424 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 46.131.90.200:33461 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 216.210.66.85:34041 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 128.121.86.166:35599 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 11.187.90.103:37555 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 192.217.65.67:35255 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 117.14.122.11:38391 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 37.96.131.251:34259 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 204.250.212.111:37816 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 90.57.254.145:36682 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 126.126.53.141:34184 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 132.134.217.15:36507 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 128.41.14.227:34861 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 30.140.160.50:33436 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 150.203.53.33:33712 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 33.122.210.253:33810 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 54.125.131.70:36125 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 199.225.7.64:37252 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 150.30.174.108:34102 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 132.192.60.134:37969 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 166.53.54.145:36691 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 47.197.243.75:35169 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 53.26.140.162:36449 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 140.3.54.152:36825 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 64.235.242.243:35471 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 170.105.162.173:39079 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 200.27.9.56:36015 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 70.205.132.156:33930 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 139.111.203.11:34199 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 212.125.162.212:34600 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 111.41.125.170:33382 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 73.168.51.33:36366 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 158.57.223.63:36481 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 200.200.11.18:22167 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 60.173.253.37:34694 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 179.93.216.167:38288 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 182.127.216.143:36773 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 65.181.108.121:39010 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 55.57.70.134:33815 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 105.119.191.51:36378 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 70.66.210.47:34937 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 113.47.198.14:35056 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 77.236.16.167:34425 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 47.41.216.182:36452 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 171.150.28.64:34702 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 145.72.63.5:38494 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 89.242.205.41:35818 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 68.215.171.244:33762 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 122.106.126.145:33512 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 102.150.143.173:38794 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 38.210.200.157:36234 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 53.108.9.152:37439 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 122.234.250.90:36063 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 73.75.16.80:35036 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 132.65.66.47:37755 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 210.205.121.57:35916 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 116.150.162.200:37165 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 197.227.140.86:34050 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 200.86.30.140:37600 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 90.117.86.170:35728 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 156.252.162.82:36531 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 23.93.57.160:35770 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 56.215.173.86:36232 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 141.195.127.35:24254 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 170.47.57.223:38834 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 219.41.191.212:35404 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 67.131.5.25:37028 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 132.144.159.223:37427 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 143.78.249.208:33466 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 102.253.57.216:35608 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 64.42.53.53:34042 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 47.205.85.192:37556 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 64.191.145.60:38390 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 191.90.159.226:35259 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.159.239.41:34261 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 174.54.25.25:37817 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.66.234.122:36693 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 150.136.162.27:34863 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 205.108.28.243:34187 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 89.225.145.128:39128 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 176.125.208.143:36532 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 55.210.112.90:33715 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 187.203.97.23:37255 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 171.108.90.136:36130 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 205.71.121.53:33811 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 41.225.159.69:37080 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 182.197.62.9:34101 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 35.244.6.219:36707 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 105.227.99.160:35168 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 165.217.9.62:37971 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 122.46.15.18:36450 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 81.215.140.152:35472 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 41.139.106.13:36837 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 105.69.111.29:39084 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 121.66.140.153:36036 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 51.200.68.173:33938 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 59.132.157.186:34207 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 97.29.182.42:34602 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 111.171.89.30:36380 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 106.57.204.90:39292 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 80.15.132.107:36501 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 54.217.103.41:22168 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 132.157.208.210:38289 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 200.105.252.145:34697 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 122.68.114.215:39011 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 14.62.97.46:36774 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 197.30.96.150:36451 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 182.200.111.90:33819 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 64.52.105.253:36379 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 157.103.126.69:35058 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 47.37.195.41:34939 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 168.140.175.200:34706 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 132.199.145.53:38496 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 66.66.114.23:35836 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.191.227.171:33767 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 51.210.96.18:33521 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 140.254.132.153:34428 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 66.131.47.245:37441 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 99.139.6.159:36236 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 82.167.57.77:35039 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 141.11.23.252:36075 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 26.70.182.16:35927 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 57.99.26.200:37756 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 197.166.132.126:37164 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 42.150.173.125:38867 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 122.37.11.42:34051 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 81.170.65.78:37603 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 42.28.236.23:36534 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 107.242.221.187:35788 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 81.126.56.216:36250 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 132.131.216.150:24273 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 86.166.217.114:35405 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 37.53.106.111:38837 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 171.236.53.243:36931 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 66.143.187.203:37031 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 26.253.48.69:37430 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 3.13.122.139:33468 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 54.57.126.243:35616 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 113.65.50.134:37557 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 69.51.73.5:34046 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 9.57.82.198:34262 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 150.63.15.74:37818 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 119.37.176.47:38394 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 216.187.243.74:35260 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 15.221.200.28:34865 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.127.28.125:36711 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 187.197.59.23:39135 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 116.70.175.33:34190 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 94.26.23.173:39015 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 132.210.90.205:36533 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 205.200.173.227:37254 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 7.192.236.13:34106 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 42.7.205.60:36710 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 116.93.216.15:37082 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 210.227.84.253:36460 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 191.70.16.157:35170 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 106.114.187.209:35473 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 18.122.158.81:36844 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 171.57.27.73:37973 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 105.81.99.84:34606 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 15.90.176.152:34210 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 152.187.9.188:33934 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 70.182.159.96:36051 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 166.195.182.14:39311 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 57.127.97.253:36518 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 55.112.70.53:38290 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 165.191.70.96:22169 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.62.199.100:34699 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 140.15.54.111:39012 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 38.173.96.42:39091 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 210.108.75.176:33825 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 132.234.188.94:36404 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 205.35.53.89:35057 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 126.141.26.150:34943 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 132.28.192.173:34708 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 166.97.51.217:35841 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 62.121.159.15:38495 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 187.197.113.108:39361 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 188.62.42.67:33531 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 25.143.173.100:36238 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 70.66.131.117:34427 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 106.90.105.253:37442 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 70.41.5.243:35930 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 28.102.102.66:36083 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 9.200.82.81:37757 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 160.7.187.54:37166 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 41.159.68.97:35042 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 37.105.174.157:34057 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 159.90.125.72:38870 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 157.121.252.57:35740 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 15.191.63.47:36569 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 99.136.152.251:36259 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 125.57.250.153:37607 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 131.108.132.217:24297 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 134.134.3.252:35407 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 46.122.112.65:35789 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 78.116.136.217:38840 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 68.197.53.132:37432 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 106.252.64.156:33469 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 72.242.106.66:36932 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 134.108.121.39:37559 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 154.126.215.14:34049 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 106.243.97.129:35631 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 65.126.174.171:39328 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 159.245.5.90:34263 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 82.28.215.160:38797 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 165.132.215.221:38392 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 191.249.106.41:37819 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 102.173.199.140:35261 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 176.245.27.66:34864 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 26.154.9.210:34195 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 126.234.208.152:36720 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 171.81.131.86:36156 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 102.100.50.131:39019 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 216.11.127.209:36550 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 50.145.122.63:37257 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 121.103.216.204:33823 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 210.223.153.90:34105 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 223.210.235.216:36712 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 53.25.244.39:35171 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 57.176.66.157:35474 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 121.252.42.210:37085 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 97.121.39.242:36463 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 112.57.167.140:36848 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 65.57.5.153:37974 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 54.69.132.250:34605 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 186.30.116.215:34214 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 134.28.167.51:36407 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 126.244.191.62:33939 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 39.125.37.67:38291 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 187.18.132.37:36056 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 84.217.113.140:36522 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 30.6.157.154:39013 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 9.226.234.53:39095 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.209.84.99:22170 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 37.28.106.25:34701 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 108.11.121.174:33828 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 90.128.132.5:36411 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 145.235.102.181:36474 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 71.131.78.105:36789 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 131.127.156.188:34945 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 25.89.5.103:35851 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 166.53.243.77:35062 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 11.5.73.252:39376 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 189.105.217.173:38497 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 6.14.218.3:35937 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 41.252.170.59:33539 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 90.170.82.208:36085 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 200.142.89.200:37444 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 159.212.122.54:34061 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 162.47.249.16:37758 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 73.253.105.99:35757 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 121.197.59.127:38874 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 67.57.26.217:36598 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 209.134.74.216:36293 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 60.11.37.122:35044 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 215.33.13.60:37605 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 84.131.121.118:37035 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 51.140.152.152:24298 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 167.244.152.168:35406 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 150.156.225.57:35802 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 14.112.132.15:38842 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 27.150.66.173:37434 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 197.57.70.121:39255 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 200.186.35.134:36934 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 128.9.102.37:35641 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 200.70.215.28:37561 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 69.205.41.52:34060 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 41.3.208.81:39332 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 166.54.144.69:34264 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 7.140.41.18:38393 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 51.198.70.236:38796 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 53.253.106.11:37820 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 132.167.122.77:35262 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 80.81.158.81:34196 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 171.173.90.6:34866 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 114.253.189.173:36157 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 50.72.52.173:36734 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 126.200.150.9:36571 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 48.93.78.166:33826 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 188.165.227.249:37256 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 140.251.125.69:36730 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 53.253.41.173:35477 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.217.126.90:39647 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 128.136.85.253:35172 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 153.187.152.106:36467 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 128.205.48.111:37976 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 85.126.200.96:37089 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.48.74.154:36850 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 200.189.152.145:36421 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 221.67.128.78:34212 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 216.54.42.9:34608 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 108.216.215.129:33946 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.145.25.129:38292 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 105.99.127.160:36081 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.70.50.121:39014 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 143.162.96.234:36528 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 78.198.97.57:39100 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 41.140.69.186:22172 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 86.47.162.122:34705 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 37.77.200.96:34710 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 97.81.38.111:36413 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 70.179.173.46:33829 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 125.174.168.65:36794 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 97.236.200.198:36478 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 102.181.199.41:35857 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 205.150.37.27:34947 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 157.54.16.96:34430 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 26.85.53.131:38499 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 208.63.55.42:35946 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 74.13.152.150:33550 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 71.53.142.209:37167 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 179.47.77.253:35065 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 69.118.139.170:36093 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 125.70.14.144:37447 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 215.173.52.26:36265 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 84.162.111.103:34063 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 97.82.80.27:37760 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 70.77.28.157:35772 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 51.223.127.143:38876 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 200.208.112.105:35047 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 39.67.132.62:36301 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 150.125.41.102:36631 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 216.75.166.225:37033 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 154.90.216.131:24301 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 53.51.57.96:37608 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 128.152.66.106:35408 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 181.27.96.53:35822 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 7.74.99.48:39262 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 26.247.250.15:36936 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 143.173.68.86:38845 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 94.46.126.35:37437 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 210.173.167.100:35650 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 65.72.187.111:37562 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 89.14.179.66:34062 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 122.216.54.16:39334 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 9.54.234.189:38395 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 176.62.14.108:38798 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 46.143.216.252:34266 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 39.188.14.176:37821 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 154.39.253.127:35263 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 42.74.210.162:34197 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 65.181.162.157:34868 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 78.107.97.200:36172 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 221.243.118.102:36737 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 216.74.170.35:36594 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 150.57.243.85:35479 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 105.221.210.97:37258 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 210.54.191.56:39409 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 131.140.244.216:39658 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 103.111.179.247:36743 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 218.118.249.173:39047 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 128.67.39.239:36473 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 73.200.140.131:37092 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 11.56.33.134:39020 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 51.122.9.51:36430 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 116.42.253.26:37977 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 96.242.74.5:36856 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 121.247.14.219:34216 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 203.150.57.162:34612 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 74.90.239.47:38293 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 82.35.225.106:36080 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 119.30.69.105:33954 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.226.55.55:39016 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 108.63.171.143:39105 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 212.210.59.23:36549 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 189.94.223.253:34713 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 187.94.216.28:34704 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 165.107.57.97:36435 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 111.67.6.200:39562 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 63.253.242.86:36796 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.243.105.152:36494 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 29.39.219.250:35859 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 144.132.97.86:34429 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 54.140.159.105:34950 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 52.249.239.171:38500 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 121.54.30.171:35067 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 153.102.54.41:35963 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 86.41.66.171:37168 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 37.113.227.208:39349 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 160.253.173.188:37448 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 132.176.55.41:36102 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 205.111.195.15:36264 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 122.6.150.140:34069 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 144.173.41.41:37761 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 200.227.77.131:38882 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 67.41.171.191:35776 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 145.112.167.100:35048 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 28.66.144.209:36306 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 145.188.11.73:36638 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 93.205.225.181:37042 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 122.41.94.143:24318 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 210.26.134.57:37610 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 126.42.221.252:35829 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 191.111.93.227:35409 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 65.50.26.173:36941 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 175.41.236.119:38847 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 68.235.250.216:37440 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 141.5.69.181:35652 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 80.157.141.103:37567 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 125.69.208.139:34075 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 174.162.182.140:39392 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 131.57.199.128:39341 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 41.171.216.100:39144 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 78.118.47.244:38396 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 51.143.81.212:38799 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 80.208.216.62:37822 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 192.78.57.68:34267 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 121.157.77.103:34201 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 129.216.221.253:34869 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 89.67.205.189:36745 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 62.173.197.162:36599 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 16.25.59.208:37261 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 174.158.65.154:35174 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 63.78.54.90:35481 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 176.205.250.189:36186 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 37.234.119.50:36475 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 131.189.121.251:39052 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 117.225.216.80:39420 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 82.132.118.162:39320 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 57.90.54.53:37091 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 197.81.108.216:36436 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 73.142.41.200:39023 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 90.126.165.243:37978 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 200.106.5.162:34218 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 77.105.216.216:34615 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 200.121.73.28:36862 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 62.235.188.236:35267 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 221.244.174.56:38294 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 175.62.136.14:36748 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 197.247.187.62:36088 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 6.210.142.139:33953 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 96.253.86.236:39018 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 103.111.221.253:36558 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 47.35.132.126:22171 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 122.80.93.25:34707 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 41.251.225.96:36471 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 66.30.126.35:39576 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 159.113.253.171:36806 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 57.253.249.216:36500 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 90.106.53.162:38501 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 96.227.28.218:34431 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 143.200.122.236:35860 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 3.75.210.112:35970 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 41.121.53.121:34951 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 204.62.244.46:35069 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 41.15.227.62:39366 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 70.11.77.93:37170 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 41.126.53.217:37451 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
2018-08-06 21:06:39.000000 173.54.111.97:36116 > x.x.x.x:80 protocol: tcp flags: syn frag: 0  packets: 1 size: 40 bytes ttl: 0 sample ratio: 1  
Flows have cropped due to very long list.

macgaiver · August 7, 2018, 9:41am

close port 80 from outside use.

jmginer · August 7, 2018, 10:03am

This is not a solution to CPU consumption.

Also, if it’s a web server you can’t do this, it’s a useless solution because the attacker can choose any port.

mhviper · August 7, 2018, 10:26am

8909 pps are a joke and nothing your ccr should worry about.

Do you have generic firewall rules?
What else is running on your mikrotik (protocols)

jmginer · August 7, 2018, 10:45am

The problem seems to be the flows, not the PPS.

I have a few rules to allow and deny some address-lists. It should not affect the CPU.

You should know that the volume shown in the log is not real, it only reflects the first instant when the attack is detected by fastnetmon and obviously no more information is generated when the router is collapsed due the CPU.

If you scroll down and check the detailed log, you will see:

TCP flows: 93291

And as I mentioned, this is only in the first second when the attack is detected. For each originated IP generates 1 paquet and 1 flow, that means that at least, the real PPS is 100k, but for sure there are much more…

R1CH · August 7, 2018, 11:11am

It is a solution if you have a listening service on port 80. This is a SYN flood, if you actually have an application listening then it consumes a lot more resources than simply hitting a firewall DROP rule. I doubt webfig / hotspot is designed to handle this kind of abusive traffic as it’s meant only for internal use.

A CCR1072 should definitely not die to a 2mbps SYN flood if it’s only routing.

jmginer · August 7, 2018, 11:41am

I can see from the answers that you guis don’t know how fastnetmon’s header logs work, that’s why I’ve decided to remove this information so that there’s no confusion and put the raw logs of the attack in their place. It is important to see the hour, second and milliseconds of the attack, to understand the magnitude.

mhviper · August 7, 2018, 11:58am

Check if fast-path is enabled and used on all interfaces.
Can you show output of “/interface print stats-detail” to see if you have packets that are not using fast-path?

Do you monitor PPS/RAM Usage in your cacti/mrtg/zabbix/whatever configuration? If not you should consider to add that to close your blindspot.

I am pretty sure that the attack report of fastnetmon is not 1 second (more like 30 seconds?)

jmginer · August 7, 2018, 12:27pm

Thanks, here:

Flags: D - dynamic, X - disabled, R - running, S - slave 
 0  RS name="ether1-RescuePC" last-link-down-time=aug/06/2018 22:23:37 last-link-up-time=aug/06/2018 22:23:41 link-downs=1 rx-byte=8 071 282 tx-byte=2 193 380 414 rx-packet=98 449 tx-packet=48 937 909 rx-drop=0 tx-drop=0 tx-queue-drop=9 472 rx-error=0 tx-error=0 

 1  RS name="sfp-sfpplus1-GTT" last-link-up-time=aug/06/2018 16:20:40 link-downs=0 rx-byte=140 005 809 866 tx-byte=79 221 299 428 rx-packet=361 241 484 tx-packet=142 072 741 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=140 005 809 866 fp-tx-byte=79 221 299 428 fp-rx-packet=361 241 484 fp-tx-packet=142 072 741 

 2  RS name="sfp-sfpplus2-Adamo" last-link-up-time=aug/06/2018 16:20:40 link-downs=0 rx-byte=64 809 587 180 tx-byte=155 290 672 451 rx-packet=228 673 460 tx-packet=273 084 006 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=64 809 587 180 fp-tx-byte=155 290 672 451 fp-rx-packet=228 673 460 fp-tx-packet=273 084 006 

 3  RS name="sfp-sfpplus3-DECIX" last-link-up-time=aug/06/2018 16:20:40 link-downs=0 rx-byte=385 823 393 841 tx-byte=256 094 309 440 rx-packet=401 011 379 tx-packet=453 865 625 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=385 823 393 841 fp-tx-byte=256 094 309 440 fp-rx-packet=401 011 379 fp-tx-packet=453 865 625 

 4  RS name="sfp-sfpplus4-Telxius" last-link-up-time=aug/06/2018 16:20:40 link-downs=0 rx-byte=122 584 928 523 tx-byte=254 185 060 101 rx-packet=267 052 674 tx-packet=320 261 441 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=122 584 928 523 fp-tx-byte=254 185 060 101 fp-rx-packet=267 052 674 fp-tx-packet=320 261 441 

 5  RS name="sfp-sfpplus5-Bond1" last-link-up-time=aug/06/2018 16:20:40 link-downs=0 rx-byte=286 333 800 024 tx-byte=316 362 059 686 rx-packet=473 262 640 tx-packet=528 327 407 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=286 333 800 024 fp-tx-byte=316 362 059 686 fp-rx-packet=473 262 640 fp-tx-packet=528 327 407 

 6  RS name="sfp-sfpplus6-Bond2" last-link-up-time=aug/06/2018 16:20:40 link-downs=0 rx-byte=282 027 340 119 tx-byte=320 663 869 606 rx-packet=473 262 544 tx-packet=528 228 454 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=282 027 340 119 fp-tx-byte=320 663 869 606 fp-rx-packet=473 262 544 fp-tx-packet=528 228 454 

 7     name="sfp-sfpplus7" link-downs=0 rx-byte=0 tx-byte=0 rx-packet=0 tx-packet=0 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=0 fp-tx-byte=0 fp-rx-packet=0 fp-tx-packet=0 

 8     name="sfp-sfpplus8" link-downs=0 rx-byte=0 tx-byte=0 rx-packet=0 tx-packet=0 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=0 fp-tx-byte=0 fp-rx-packet=0 fp-tx-packet=0 

 9  R  name="0-Switch" last-link-up-time=aug/06/2018 16:20:19 link-downs=0 rx-byte=564 068 335 484 tx-byte=632 838 242 828 rx-packet=946 623 444 tx-packet=1 056 555 038 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=563 930 517 935 fp-tx-byte=0 fp-rx-packet=946 202 517 fp-tx-packet=0 

10  R  name="1-GTT" last-link-up-time=aug/06/2018 16:20:19 link-downs=0 rx-byte=140 002 622 152 tx-byte=79 219 428 756 rx-packet=361 233 646 tx-packet=142 033 756 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=139 957 117 726 fp-tx-byte=0 fp-rx-packet=361 062 661 fp-tx-packet=0 

11  R  name="2-Adamo" last-link-up-time=aug/06/2018 16:20:18 link-downs=0 rx-byte=60 514 119 858 tx-byte=155 291 076 939 rx-packet=228 673 439 tx-packet=273 085 328 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=60 499 445 242 fp-tx-byte=0 fp-rx-packet=228 637 873 fp-tx-packet=0 

12  R  name="3-DECIX" last-link-up-time=aug/06/2018 16:20:19 link-downs=0 rx-byte=385 793 245 812 tx-byte=256 095 885 417 rx-packet=401 011 009 tx-packet=453 870 969 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=385 581 675 092 fp-tx-byte=0 fp-rx-packet=398 859 406 fp-tx-packet=0 

13  R  name="4-Telxius" last-link-up-time=aug/06/2018 16:20:19 link-downs=0 rx-byte=122 583 755 925 tx-byte=254 187 564 155 rx-packet=267 052 669 tx-packet=320 264 402 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=122 544 359 792 fp-tx-byte=0 fp-rx-packet=266 968 931 fp-tx-packet=0 

14  RS name="BondSwitchDistribute" last-link-up-time=aug/06/2018 16:20:40 link-downs=0 rx-byte=568 361 142 933 tx-byte=637 025 930 978 rx-packet=946 525 183 tx-packet=1 056 555 865 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=563 957 991 650 fp-tx-byte=0 fp-rx-packet=946 337 198 fp-tx-packet=0 

15  R  name="DE-Voxility" last-link-down-time=aug/06/2018 21:35:17 last-link-up-time=aug/06/2018 21:35:17 link-downs=3 rx-byte=32 838 700 551 tx-byte=266 461 rx-packet=66 371 712 tx-packet=1 335 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=29 012 390 425 fp-tx-byte=0 fp-rx-packet=61 344 200 fp-tx-packet=0 

16  R  name="bcn1-Adamo" last-link-down-time=aug/06/2018 16:40:08 last-link-up-time=aug/06/2018 16:40:09 link-downs=1 rx-byte=224 737 tx-byte=74 247 155 480 rx-packet=1 323 tx-packet=115 929 806 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=224 737 fp-tx-byte=0 fp-rx-packet=1 323 fp-tx-packet=0 

17  R  name="fr1-cloud" last-link-up-time=aug/06/2018 16:20:19 link-downs=0 rx-byte=13 923 945 tx-byte=262 520 rx-packet=276 781 tx-packet=1 326 rx-drop=0 tx-drop=0 tx-queue-drop=0 rx-error=0 tx-error=0 fp-rx-byte=13 162 317 fp-tx-byte=0 fp-rx-packet=262 038 fp-tx-packet=0

mhviper · August 7, 2018, 12:46pm

You have rebooted your router since the ddos (last up for interfaces looks like)?

From a first view these interfaces have no fastpath packets on tranceive: 0-Switch, 1-GT, 2-Adamo, 3-DECIX, 4-Telxius, DE-Voxility, bcn1-Adamo, fr1-cloud.

I am not sure how to interpret this as the hardware interfaces (sfpplus-*) are using fastpath on tx and rx.
Maybe someone from mikrotik can jump in and explain what this means…

But if it’s the case that these interfaces are not using fp on tranceive this is most likely your problem.

jmginer · August 7, 2018, 1:07pm

0-Switch: Bridge BondSwitchDistribute
1-GTT: Bridge sfp-sfpplus1-GTT
2-Adamo: Bridge sfp-sfpplus2-Adamo
3-DECIX: Bridge sfp-sfpplus3-DECIX
4-Telxius: Bridge sfp-sfpplus4-Telxius
BondSwitchDistribute: Bonding sfp-sfpplus5-Bond1 + sfp-sfpplus5-Bond2
DE-Voxility: GRE
bcn1-Adamo: GRE
fr1-cloud: GRE

/interface bridge export 
# aug/07/2018 15:06:08 by RouterOS 6.40.8
# software id = xxx
#
# model = CCR1072-1G-8S+
# serial number = xxx
/interface bridge
add fast-forward=no name=0-Switch protocol-mode=none
add name=1-GTT
add fast-forward=no name=2-Adamo protocol-mode=none
add fast-forward=no name=3-DECIX protocol-mode=none
add fast-forward=no name=4-Telxius protocol-mode=none
/interface bridge port
add bridge=2-Adamo interface=sfp-sfpplus2-Adamo
add bridge=0-Switch interface=ether1-RescuePC
add bridge=3-DECIX interface=sfp-sfpplus3-DECIX
add bridge=4-Telxius interface=sfp-sfpplus4-Telxius
add bridge=0-Switch interface=BondSwitchDistribute
add bridge=1-GTT interface=sfp-sfpplus1-GTT

.

/interface bonding export 
# aug/07/2018 15:08:34 by RouterOS 6.40.8
# software id =xxx
#
# model = CCR1072-1G-8S+
# serial number = xxx
/interface bonding
add name=BondSwitchDistribute slaves=sfp-sfpplus5-Bond1,sfp-sfpplus6-Bond2

mhviper · August 7, 2018, 1:09pm

I’ve edited my reply before you posted it so maybe reread it .

Edit:
Why do you add all your upstream ports to a bridge?
The only reason that comes to my mind is if you want to extend the uplinks in the future through a bond…

jmginer · August 7, 2018, 1:15pm

The main reason is that if I change upstream in the future, and connect it to a port that was already used, I’ll create a new bridge. This way I can monitor the new bridge and the old upstream traffic does not appear in the graph.

I mean, I monitor the port and I can see the history of that port, but if I monitor the bridge I can see the history only of that upstream.

Does a bridge consume more resources than using the port directly?

Thanks for your time!!!

mhviper · August 7, 2018, 1:20pm

I am a fan of “keep it simple, stupid” and adding a bridge for no real reason might come back and bite you.

jmginer · August 7, 2018, 1:28pm

Thanks!

According to the considerations explained in the wiki, fastpath should work, since the conditions are met https://wiki.mikrotik.com/wiki/Manual:Fast_Path#Bridge_handler , but I don’t see any option to force an activation. It would be good if a representative of Mikrotik could confirm it, and if this is the case it would be interesting to know and there would be no problem in deactivating the bridges.

@mrz

mhviper · August 7, 2018, 1:33pm

Hm. Had a look in the wiki and found these two important things for your case:

fast-forward (yes | no; Default: yes)	Special and faster case of Fast Path [b]which works only on bridges with 2 interfaces[/b] (enabled by default only for new bridges).

[https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge] So fast-forward cannot be yes in your case.

And:

bonding interfaces - rx only (since 6.30)

[https://wiki.mikrotik.com/wiki/Manual:Fast_Path#Bridge_handler]
so at least its correct and intended that you don’t have tx fastpath on your switch bond.

To be honest, I would remove the bridge interfaces, they make no real sense and it’s most likely your problem.

Jeanluck · August 7, 2018, 9:51pm

I had the same problem. Look at your layer7 rules, they can cause 100% CPU with lower pps rate.
What version of routeros you use?

The best way for a definitive solution is detect the attack with a external machine that send your attacked ip to blackhole (Fastnetmon + PorMirroing for example is an option)
CCR1072, if not detect attack inmediatly, it will go down, and bgpblackhole will not work.