Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 02:53:59.241 00:06:00.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 02:53:59.245 00:06:00.173 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 02:59:41.525 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56964 10 6438 1 2025-07-22 02:59:37.991 00:00:10.375 TCP 23.104.0.1:52554 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:00:38.407 00:00:10.363 TCP 23.104.0.1:49746 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:00:41.738 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40936 10 6438 1 2025-07-22 03:01:43.103 00:00:00.050 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:01:43.033 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 03:01:38.808 00:00:10.368 TCP 23.104.0.1:58222 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:01:41.909 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38392 10 6438 1 2025-07-22 03:02:39.213 00:00:10.365 TCP 23.104.0.1:51568 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:02:42.126 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51188 10 6438 1 2025-07-22 03:03:39.616 00:00:10.323 TCP 23.104.0.1:47616 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:03:42.358 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:44460 10 6438 1 2025-07-22 03:04:39.980 00:00:10.332 TCP 23.104.0.1:34440 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:04:42.540 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33286 10 6438 1 2025-07-22 03:05:40.362 00:00:10.367 TCP 23.104.0.1:35446 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:05:42.713 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59122 10 6438 1 2025-07-22 03:00:59.245 00:06:00.182 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 03:00:59.243 00:06:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 03:06:43.057 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 03:06:43.294 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:06:40.758 00:00:10.336 TCP 23.104.0.1:60112 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:06:42.925 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:50686 10 6438 1 2025-07-22 03:07:41.133 00:00:10.365 TCP 23.104.0.1:46546 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:07:43.108 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52532 10 6438 1 2025-07-22 03:08:41.547 00:00:10.328 TCP 23.104.0.1:40896 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:08:43.282 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34258 10 6438 1 2025-07-22 03:09:41.915 00:00:10.391 TCP 23.104.0.1:58782 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:09:43.491 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44462 10 6438 1 2025-07-22 03:10:42.349 00:00:10.367 TCP 23.104.0.1:51788 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:10:43.707 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45664 10 6438 1 2025-07-22 03:11:43.355 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 03:11:43.314 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:11:43.917 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53226 10 6438 1 2025-07-22 03:11:42.759 00:00:10.371 TCP 23.104.0.1:37074 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:12:44.131 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35076 10 6438 1 2025-07-22 03:12:43.165 00:00:10.360 TCP 23.104.0.1:55084 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:07:59.245 00:06:00.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 03:07:59.246 00:06:00.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 03:13:44.346 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57370 10 6438 1 2025-07-22 03:13:43.561 00:00:10.369 TCP 23.104.0.1:51834 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:14:43.976 00:00:10.378 TCP 23.104.0.1:60726 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:14:44.561 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49676 10 6438 1 2025-07-22 03:15:44.389 00:00:10.363 TCP 23.104.0.1:33516 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:15:44.775 00:00:10.287 TCP 1.101.0.1:3000 -> 22.102.0.1:57378 10 6438 1 2025-07-22 03:16:43.272 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 03:16:43.087 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:16:44.796 00:00:10.369 TCP 23.104.0.1:49620 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:16:45.117 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57964 10 6438 1 2025-07-22 03:17:45.330 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45016 10 6438 1 2025-07-22 03:17:45.198 00:00:10.360 TCP 23.104.0.1:53560 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:18:45.597 00:00:10.374 TCP 23.104.0.1:50654 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:18:45.546 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57228 10 6438 1 2025-07-22 03:19:45.756 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49646 10 6438 1 2025-07-22 03:14:59.249 00:06:00.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 03:19:46.013 00:00:10.363 TCP 23.104.0.1:42826 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:14:59.247 00:06:00.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 03:20:46.412 00:00:10.363 TCP 23.104.0.1:40062 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:20:45.974 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45134 10 6438 1 2025-07-22 03:21:43.866 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:21:43.825 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 03:21:46.209 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45992 10 6438 1 2025-07-22 03:21:46.817 00:00:10.326 TCP 23.104.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:22:46.421 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42956 10 6438 1 2025-07-22 03:22:47.181 00:00:10.371 TCP 23.104.0.1:34574 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:23:46.638 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43118 10 6438 1 2025-07-22 03:23:47.590 00:00:10.370 TCP 23.104.0.1:42788 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:24:46.850 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34304 10 6438 1 2025-07-22 03:24:47.997 00:00:10.363 TCP 23.104.0.1:39760 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:25:47.082 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59524 10 6438 1 2025-07-22 03:25:48.399 00:00:10.375 TCP 23.104.0.1:56490 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:26:43.498 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 03:26:43.481 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:26:48.816 00:00:10.367 TCP 23.104.0.1:50848 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:21:59.247 00:06:00.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 03:26:47.292 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46878 10 6438 1 2025-07-22 03:21:59.249 00:06:00.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 03:27:47.503 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43862 10 6438 1 2025-07-22 03:27:49.223 00:00:10.364 TCP 23.104.0.1:38350 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:28:49.625 00:00:10.376 TCP 23.104.0.1:52756 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:28:47.718 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43444 10 6438 1 2025-07-22 03:29:47.937 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:50334 10 6438 1 2025-07-22 03:29:50.032 00:00:10.370 TCP 23.104.0.1:58214 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:30:48.178 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43266 10 6438 1 2025-07-22 03:30:50.453 00:00:10.373 TCP 23.104.0.1:34790 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:31:43.375 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:31:43.682 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 03:31:50.871 00:00:10.421 TCP 23.104.0.1:54140 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:31:48.385 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53628 10 6438 1 2025-07-22 03:32:51.327 00:00:10.363 TCP 23.104.0.1:52652 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:32:48.603 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36354 10 6438 1 2025-07-22 03:28:59.248 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 03:33:48.779 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34714 10 6438 1 2025-07-22 03:28:59.251 00:06:00.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 03:33:51.732 00:00:10.371 TCP 23.104.0.1:39310 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:34:48.989 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50036 10 6438 1 2025-07-22 03:34:52.139 00:00:10.322 TCP 23.104.0.1:33974 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:35:49.214 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35020 10 6438 1 2025-07-22 03:35:52.504 00:00:10.370 TCP 23.104.0.1:54120 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:36:43.570 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:36:43.756 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 03:36:49.422 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58282 10 6438 1 2025-07-22 03:36:52.910 00:00:10.330 TCP 23.104.0.1:38150 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:37:49.634 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59298 10 6438 1 2025-07-22 03:37:53.276 00:00:10.365 TCP 23.104.0.1:58170 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:38:49.856 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41838 10 6438 1 2025-07-22 03:38:53.683 00:00:10.324 TCP 23.104.0.1:58420 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:39:50.041 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34270 10 6438 1 2025-07-22 03:39:54.050 00:00:10.374 TCP 23.104.0.1:33174 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:35:59.252 00:06:00.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 03:40:50.249 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40020 10 6438 1 2025-07-22 03:35:59.255 00:06:00.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 03:40:54.466 00:00:10.323 TCP 23.104.0.1:45502 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:41:43.715 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:41:43.923 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 03:41:50.461 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42828 10 6438 1 2025-07-22 03:41:54.829 00:00:10.388 TCP 23.104.0.1:58926 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:42:50.678 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46764 10 6438 1 2025-07-22 03:42:55.253 00:00:10.365 TCP 23.104.0.1:34022 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:43:50.901 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32894 10 6438 1 2025-07-22 03:43:55.658 00:00:10.392 TCP 23.104.0.1:48176 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:44:51.118 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41822 10 6438 1 2025-07-22 03:44:56.100 00:00:10.364 TCP 23.104.0.1:40648 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:45:51.329 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47568 10 6438 1 2025-07-22 03:45:56.506 00:00:10.374 TCP 23.104.0.1:49212 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:46:44.094 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:46:43.887 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 03:46:51.542 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36452 10 6438 1 2025-07-22 03:46:56.917 00:00:10.367 TCP 23.104.0.1:49744 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:42:59.257 00:06:00.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 03:47:51.710 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54052 12 10350 1 2025-07-22 03:42:59.256 00:06:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 03:47:57.322 00:00:10.398 TCP 23.104.0.1:54142 -> 1.101.0.1:3000 15 1925 1 2025-07-22 03:48:51.956 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:55094 10 6438 1 2025-07-22 03:48:57.774 00:00:10.400 TCP 23.104.0.1:40830 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:49:52.144 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42746 10 6438 1 2025-07-22 03:49:58.190 00:00:10.367 TCP 23.104.0.1:50808 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:50:52.309 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56088 10 6438 1 2025-07-22 03:50:58.592 00:00:10.379 TCP 23.104.0.1:58078 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:51:44.311 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:51:43.996 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 03:51:52.488 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48466 10 6438 1 2025-07-22 03:51:59.015 00:00:10.363 TCP 23.104.0.1:42640 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:52:52.699 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53478 10 6438 1 2025-07-22 03:52:59.413 00:00:10.377 TCP 23.104.0.1:55248 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:53:52.912 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:40206 10 6438 1 2025-07-22 03:53:59.841 00:00:10.393 TCP 23.104.0.1:50510 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:49:59.258 00:06:00.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 03:49:59.256 00:06:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 03:54:53.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43244 10 6438 1 2025-07-22 03:55:00.276 00:00:10.323 TCP 23.104.0.1:41198 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:55:53.297 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60280 10 6438 1 2025-07-22 03:56:00.640 00:00:10.363 TCP 23.104.0.1:41272 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:56:45.193 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:56:45.369 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 03:56:53.509 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53144 10 6438 1 2025-07-22 03:57:01.049 00:00:10.366 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:57:53.719 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55346 10 6438 1 2025-07-22 03:58:01.456 00:00:10.365 TCP 23.104.0.1:49866 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 494631, total packets: 1569, avg bps: 1027, avg pps: 0, avg bpp: 315 Time window: 2025-07-22 02:53:59 - 2025-07-22 03:58:11 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0031s User: 0.0010s Wall: 0.0026s flows/second: 61533.9 Runtime: 0.0026s