Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 05:53:58.345 00:06:00.203 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 05:59:06.971 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33836 10 6438 1 2025-07-20 05:59:35.510 00:00:10.366 TCP 23.104.0.1:37634 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:00:07.203 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37638 10 6438 1 2025-07-20 06:00:35.915 00:00:10.422 TCP 23.104.0.1:43876 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:00:49.299 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 06:00:49.508 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 06:01:07.410 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45328 10 6438 1 2025-07-20 06:01:36.381 00:00:10.366 TCP 23.104.0.1:43020 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:02:07.628 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35398 10 6438 1 2025-07-20 06:02:36.798 00:00:10.363 TCP 23.104.0.1:49576 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:03:07.799 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41422 10 6438 1 2025-07-20 06:03:37.194 00:00:10.359 TCP 23.104.0.1:36596 -> 1.101.0.1:3000 11 1507 1 2025-07-20 05:58:58.349 00:06:00.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 06:04:08.016 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45026 10 6438 1 2025-07-20 06:04:37.594 00:00:10.369 TCP 23.104.0.1:48666 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:05:08.228 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37918 10 6438 1 2025-07-20 06:05:49.135 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 06:05:38.007 00:00:10.362 TCP 23.104.0.1:38508 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:05:48.990 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 06:00:58.347 00:06:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 06:06:08.438 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45310 10 6438 1 2025-07-20 06:06:38.408 00:00:10.368 TCP 23.104.0.1:53448 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:07:08.651 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33340 10 6438 1 2025-07-20 06:07:38.813 00:00:10.332 TCP 23.104.0.1:55042 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:08:08.862 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60338 10 6438 1 2025-07-20 06:08:39.179 00:00:10.377 TCP 23.104.0.1:40530 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:09:09.093 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46214 10 6438 1 2025-07-20 06:09:39.594 00:00:10.369 TCP 23.104.0.1:40112 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:10:09.301 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6438 1 2025-07-20 06:10:49.137 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 06:10:48.961 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 06:10:40.000 00:00:10.363 TCP 23.104.0.1:32966 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:05:58.350 00:06:00.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 06:11:09.479 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55880 10 6438 1 2025-07-20 06:11:40.401 00:00:10.365 TCP 23.104.0.1:34242 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:12:09.694 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52754 10 6438 1 2025-07-20 06:12:40.804 00:00:10.373 TCP 23.104.0.1:60616 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:07:58.355 00:06:00.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 06:13:09.912 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54628 10 6438 1 2025-07-20 06:13:41.217 00:00:10.368 TCP 23.104.0.1:39612 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:14:10.126 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41552 10 6438 1 2025-07-20 06:14:41.617 00:00:10.367 TCP 23.104.0.1:43480 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:15:10.341 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52722 10 6438 1 2025-07-20 06:15:49.153 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 06:15:49.146 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 06:15:42.024 00:00:10.364 TCP 23.104.0.1:41474 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:16:10.512 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51016 10 6438 1 2025-07-20 06:16:42.425 00:00:10.366 TCP 23.104.0.1:48976 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:17:10.731 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55790 10 6438 1 2025-07-20 06:17:42.831 00:00:10.387 TCP 23.104.0.1:36980 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:12:58.359 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 06:18:10.947 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40858 10 6438 1 2025-07-20 06:18:43.255 00:00:10.371 TCP 23.104.0.1:41000 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:19:11.181 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50852 10 6438 1 2025-07-20 06:19:43.670 00:00:10.366 TCP 23.104.0.1:34396 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:14:58.357 00:06:00.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 06:20:11.419 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47968 10 6438 1 2025-07-20 06:20:49.201 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 06:20:49.275 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 06:20:44.100 00:00:10.367 TCP 23.104.0.1:39336 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:21:11.640 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47324 10 6438 1 2025-07-20 06:21:44.506 00:00:10.365 TCP 23.104.0.1:39952 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:22:11.856 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43446 10 6438 1 2025-07-20 06:22:44.915 00:00:10.367 TCP 23.104.0.1:58120 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:23:12.089 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50730 10 6438 1 2025-07-20 06:23:45.322 00:00:10.363 TCP 23.104.0.1:47836 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:24:12.305 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40090 10 6438 1 2025-07-20 06:24:45.724 00:00:10.373 TCP 23.104.0.1:55206 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:19:58.361 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 06:25:12.527 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47390 10 6438 1 2025-07-20 06:25:49.768 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 06:25:49.446 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 06:25:46.134 00:00:10.363 TCP 23.104.0.1:42560 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:26:12.748 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40442 10 6438 1 2025-07-20 06:26:46.533 00:00:10.320 TCP 23.104.0.1:56052 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:21:58.359 00:06:00.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 06:27:12.962 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:52386 10 6438 1 2025-07-20 06:27:46.892 00:00:10.366 TCP 23.104.0.1:35810 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:28:13.151 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:37172 12 10352 1 2025-07-20 06:28:47.296 00:00:10.448 TCP 23.104.0.1:48412 -> 1.101.0.1:3000 15 1925 1 2025-07-20 06:29:13.395 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33976 10 6438 1 2025-07-20 06:29:47.782 00:00:10.364 TCP 23.104.0.1:44420 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:30:13.605 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53804 10 6438 1 2025-07-20 06:30:49.462 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 06:30:49.509 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 06:30:48.186 00:00:10.327 TCP 23.104.0.1:56924 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:31:13.820 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39268 10 6438 1 2025-07-20 06:26:58.362 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 06:31:48.557 00:00:10.362 TCP 23.104.0.1:36932 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:32:14.038 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46836 10 6438 1 2025-07-20 06:32:48.962 00:00:10.371 TCP 23.104.0.1:45462 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:33:14.253 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45950 10 6438 1 2025-07-20 06:33:49.369 00:00:10.332 TCP 23.104.0.1:49830 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:28:58.363 00:06:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 06:34:14.431 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49332 10 6438 1 2025-07-20 06:34:49.736 00:00:10.371 TCP 23.104.0.1:52304 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:35:14.640 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45116 10 6438 1 2025-07-20 06:35:49.484 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 06:35:49.467 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 06:35:50.141 00:00:10.368 TCP 23.104.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:36:14.858 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56048 10 6438 1 2025-07-20 06:36:50.545 00:00:10.358 TCP 23.104.0.1:35558 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:37:15.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38846 10 6438 1 2025-07-20 06:37:50.945 00:00:10.371 TCP 23.104.0.1:49394 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:38:15.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32864 10 6438 1 2025-07-20 06:38:51.356 00:00:10.359 TCP 23.104.0.1:55816 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:33:58.371 00:06:00.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 06:39:15.514 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59726 10 6438 1 2025-07-20 06:39:51.752 00:00:10.379 TCP 23.104.0.1:38422 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:40:15.727 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34676 10 6438 1 2025-07-20 06:40:49.470 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 06:40:49.694 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 06:35:58.367 00:06:00.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 06:40:52.171 00:00:10.367 TCP 23.104.0.1:42916 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:41:15.948 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:37010 10 6438 1 2025-07-20 06:41:52.580 00:00:10.373 TCP 23.104.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:42:16.133 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48174 10 6438 1 2025-07-20 06:42:52.992 00:00:10.370 TCP 23.104.0.1:43722 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:43:16.343 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55568 10 6438 1 2025-07-20 06:43:53.403 00:00:10.365 TCP 23.104.0.1:38776 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:44:16.563 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59722 10 6438 1 2025-07-20 06:44:53.807 00:00:10.365 TCP 23.104.0.1:58644 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:45:16.778 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42938 10 6438 1 2025-07-20 06:45:50.116 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 06:45:49.925 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 06:40:58.369 00:06:00.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 06:45:54.211 00:00:10.370 TCP 23.104.0.1:45530 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:46:16.955 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48674 10 6438 1 2025-07-20 06:46:54.616 00:00:10.365 TCP 23.104.0.1:59320 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:47:17.179 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51506 10 6438 1 2025-07-20 06:42:58.367 00:06:00.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 06:47:55.021 00:00:10.366 TCP 23.104.0.1:60578 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:48:17.404 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49512 10 6438 1 2025-07-20 06:48:55.428 00:00:10.365 TCP 23.104.0.1:36080 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:49:17.613 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37224 10 6438 1 2025-07-20 06:49:55.831 00:00:10.385 TCP 23.104.0.1:50254 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:50:17.824 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:58032 10 6438 1 2025-07-20 06:50:49.771 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 06:50:49.804 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 06:50:56.252 00:00:10.369 TCP 23.104.0.1:58164 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:51:17.987 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41076 10 6438 1 2025-07-20 06:51:56.656 00:00:10.365 TCP 23.104.0.1:45594 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:52:18.206 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45944 10 6438 1 2025-07-20 06:47:58.372 00:06:00.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 06:52:57.082 00:00:10.360 TCP 23.104.0.1:51448 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:53:18.422 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40868 10 6438 1 2025-07-20 06:53:57.480 00:00:10.363 TCP 23.104.0.1:56484 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:54:18.639 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40392 10 6438 1 2025-07-20 06:49:58.370 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 06:54:57.883 00:00:10.375 TCP 23.104.0.1:60356 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:55:18.855 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58266 10 6438 1 2025-07-20 06:55:50.143 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 06:55:49.981 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 06:55:58.307 00:00:10.370 TCP 23.104.0.1:43914 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:56:19.088 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46094 10 6438 1 2025-07-20 06:56:58.720 00:00:10.535 TCP 23.104.0.1:58220 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:57:19.301 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40604 10 6438 1 2025-07-20 06:57:59.294 00:00:10.364 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-07-20 06:58:19.515 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40082 10 6438 1 Summary: total flows: 160, total bytes: 500210, total packets: 1565, avg bps: 1033, avg pps: 0, avg bpp: 319 Time window: 2025-07-20 05:53:58 - 2025-07-20 06:58:29 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0020s User: 0.0020s Wall: 0.0038s flows/second: 41775.9 Runtime: 0.0039s