Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-18 04:53:57.316 00:06:00.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 04:58:46.939 00:00:10.328 TCP 23.104.0.1:54616 -> 1.101.0.1:3000 11 1507 1 2025-07-18 04:59:35.876 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50408 10 6438 1 2025-07-18 04:59:49.749 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 04:59:49.930 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 04:59:47.307 00:00:10.380 TCP 23.104.0.1:56138 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:00:36.101 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55094 10 6438 1 2025-07-18 05:00:47.728 00:00:10.379 TCP 23.104.0.1:33800 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:01:36.330 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36480 10 6438 1 2025-07-18 05:01:48.143 00:00:10.375 TCP 23.104.0.1:33644 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:02:36.545 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38608 10 6438 1 2025-07-18 04:57:57.313 00:06:00.063 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 05:02:48.546 00:00:10.435 TCP 23.104.0.1:41102 -> 1.101.0.1:3000 15 1925 1 2025-07-18 05:03:36.757 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:59362 12 10350 1 2025-07-18 05:03:49.020 00:00:10.359 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:04:49.870 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 05:04:37.003 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48810 10 6438 1 2025-07-18 05:04:50.078 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 05:04:49.417 00:00:10.367 TCP 23.104.0.1:39940 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:05:37.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53004 10 6438 1 2025-07-18 05:00:57.317 00:06:00.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 05:05:49.820 00:00:10.366 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:06:37.431 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56806 10 6438 1 2025-07-18 05:06:50.223 00:00:10.371 TCP 23.104.0.1:53252 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:07:37.653 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43190 10 6438 1 2025-07-18 05:07:50.630 00:00:10.374 TCP 23.104.0.1:59062 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:08:37.868 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55786 10 6438 1 2025-07-18 05:08:51.035 00:00:10.364 TCP 23.104.0.1:41380 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:09:38.089 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40632 10 6438 1 2025-07-18 05:09:50.092 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 05:09:49.995 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 05:04:57.314 00:06:00.068 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 05:09:51.431 00:00:10.370 TCP 23.104.0.1:58562 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:10:38.299 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44390 10 6438 1 2025-07-18 05:10:51.842 00:00:10.383 TCP 23.104.0.1:35158 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:11:38.521 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58710 10 6438 1 2025-07-18 05:11:52.262 00:00:10.329 TCP 23.104.0.1:34136 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:12:38.740 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39536 10 6438 1 2025-07-18 05:07:57.320 00:06:00.062 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 05:12:52.623 00:00:10.361 TCP 23.104.0.1:58266 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:13:38.957 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58680 10 6438 1 2025-07-18 05:13:53.028 00:00:10.365 TCP 23.104.0.1:38394 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:14:50.264 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 05:14:39.189 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38552 10 6438 1 2025-07-18 05:14:50.305 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 05:14:53.426 00:00:10.326 TCP 23.104.0.1:50056 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:15:39.402 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60686 10 6438 1 2025-07-18 05:15:53.793 00:00:10.328 TCP 23.104.0.1:47236 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:16:39.633 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44872 10 6438 1 2025-07-18 05:11:57.318 00:06:00.068 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 05:16:54.160 00:00:10.363 TCP 23.104.0.1:42904 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:17:39.850 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51442 10 6438 1 2025-07-18 05:17:54.557 00:00:10.365 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:18:40.077 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43930 10 6438 1 2025-07-18 05:18:54.961 00:00:10.367 TCP 23.104.0.1:50000 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:19:40.290 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47370 10 6438 1 2025-07-18 05:19:50.592 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 05:19:50.271 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 05:14:57.325 00:06:00.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 05:19:55.363 00:00:10.365 TCP 23.104.0.1:35186 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:20:40.508 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42002 10 6438 1 2025-07-18 05:20:55.776 00:00:10.371 TCP 23.104.0.1:43778 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:21:40.721 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37116 10 6438 1 2025-07-18 05:21:56.184 00:00:10.366 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:22:40.930 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:46010 10 6438 1 2025-07-18 05:22:56.585 00:00:10.365 TCP 23.104.0.1:37606 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:23:41.128 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46088 10 6438 1 2025-07-18 05:18:57.322 00:06:00.064 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 05:23:56.983 00:00:10.364 TCP 23.104.0.1:37620 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:24:41.341 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50616 10 6438 1 2025-07-18 05:24:50.447 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 05:24:50.455 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 05:24:57.387 00:00:10.368 TCP 23.104.0.1:51144 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:25:41.551 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45678 10 6438 1 2025-07-18 05:25:57.793 00:00:10.366 TCP 23.104.0.1:56348 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:26:41.780 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49264 10 6438 1 2025-07-18 05:21:57.325 00:06:00.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 05:26:58.199 00:00:10.358 TCP 23.104.0.1:39076 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:27:41.991 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43858 10 6438 1 2025-07-18 05:27:58.596 00:00:10.363 TCP 23.104.0.1:34504 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:28:42.174 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50034 10 6438 1 2025-07-18 05:28:59.000 00:00:10.318 TCP 23.104.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:29:50.569 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 05:29:50.587 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 05:29:42.383 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42406 10 6438 1 2025-07-18 05:29:59.353 00:00:10.376 TCP 23.104.0.1:32892 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:30:42.593 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34536 10 6438 1 2025-07-18 05:25:57.323 00:06:00.065 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 05:30:59.770 00:00:10.370 TCP 23.104.0.1:55882 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:31:42.764 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34420 10 6438 1 2025-07-18 05:32:00.178 00:00:10.372 TCP 23.104.0.1:56142 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:32:42.974 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49538 10 6438 1 2025-07-18 05:33:00.582 00:00:10.370 TCP 23.104.0.1:34416 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:33:43.219 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48934 10 6438 1 2025-07-18 05:28:57.326 00:06:00.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 05:34:00.984 00:00:10.372 TCP 23.104.0.1:50938 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:34:50.669 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 05:34:50.637 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 05:34:43.433 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43530 10 6438 1 2025-07-18 05:35:01.390 00:00:10.368 TCP 23.104.0.1:36768 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:35:43.642 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46358 10 6438 1 2025-07-18 05:36:01.797 00:00:10.366 TCP 23.104.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:36:43.855 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33968 10 6438 1 2025-07-18 05:37:02.199 00:00:10.360 TCP 23.104.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:37:44.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39946 10 6438 1 2025-07-18 05:32:57.323 00:06:00.067 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 05:38:02.594 00:00:10.376 TCP 23.104.0.1:45734 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:38:44.298 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34860 10 6438 1 2025-07-18 05:39:03.010 00:00:10.329 TCP 23.104.0.1:37142 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:39:50.763 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 05:39:50.765 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 05:39:44.515 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52230 10 6438 1 2025-07-18 05:40:03.377 00:00:10.367 TCP 23.104.0.1:36950 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:40:44.727 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51604 10 6438 1 2025-07-18 05:35:57.330 00:06:00.058 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 05:41:03.785 00:00:10.367 TCP 23.104.0.1:55938 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:41:44.955 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:51422 10 6438 1 2025-07-18 05:42:04.181 00:00:10.369 TCP 23.104.0.1:50344 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:42:45.158 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53682 10 6438 1 2025-07-18 05:43:04.586 00:00:10.367 TCP 23.104.0.1:56344 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:43:45.363 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37064 10 6438 1 2025-07-18 05:44:04.989 00:00:10.329 TCP 23.104.0.1:43820 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:44:51.036 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 05:44:50.875 00:00:00.011 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 05:44:45.577 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39372 10 6438 1 2025-07-18 05:39:57.328 00:06:00.066 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 05:45:05.352 00:00:10.363 TCP 23.104.0.1:50810 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:45:45.796 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47176 10 6438 1 2025-07-18 05:46:05.754 00:00:10.379 TCP 23.104.0.1:51264 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:46:46.012 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44602 10 6438 1 2025-07-18 05:47:06.173 00:00:10.363 TCP 23.104.0.1:53770 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:47:46.222 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57842 10 6438 1 2025-07-18 05:42:57.331 00:06:00.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 05:48:06.574 00:00:10.374 TCP 23.104.0.1:47370 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:48:46.436 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55956 10 6438 1 2025-07-18 05:49:06.985 00:00:10.366 TCP 23.104.0.1:44830 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:49:51.004 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 05:49:51.007 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 05:49:46.651 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44266 10 6438 1 2025-07-18 05:50:07.388 00:00:10.322 TCP 23.104.0.1:56082 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:50:46.867 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53044 10 6438 1 2025-07-18 05:51:07.747 00:00:10.368 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:46:57.329 00:06:00.066 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 05:51:47.122 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48458 10 6438 1 2025-07-18 05:52:08.151 00:00:10.362 TCP 23.104.0.1:37602 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:52:47.336 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58292 10 6438 1 2025-07-18 05:53:08.586 00:00:10.322 TCP 23.104.0.1:44138 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:53:47.551 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36970 10 6438 1 2025-07-18 05:54:08.944 00:00:10.370 TCP 23.104.0.1:41540 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:54:50.886 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 05:54:50.909 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 05:49:57.332 00:06:00.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 05:54:47.774 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45236 10 6438 1 2025-07-18 05:55:09.362 00:00:10.366 TCP 23.104.0.1:35178 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:55:47.984 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56520 10 6438 1 2025-07-18 05:56:09.767 00:00:10.369 TCP 23.104.0.1:42814 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:56:48.205 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38340 10 6438 1 2025-07-18 05:57:10.175 00:00:10.360 TCP 23.104.0.1:59836 -> 1.101.0.1:3000 11 1507 1 2025-07-18 05:57:48.417 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40712 10 6438 1 2025-07-18 05:58:10.573 00:00:10.366 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 495277, total packets: 1566, avg bps: 1025, avg pps: 0, avg bpp: 316 Time window: 2025-07-18 04:53:57 - 2025-07-18 05:58:20 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0024s User: 0.0016s Wall: 0.0020s flows/second: 81423.0 Runtime: 0.0020s