Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-17 14:53:57.093 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 14:59:09.436 00:00:10.365 TCP 23.104.0.1:34392 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:59:32.882 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 14:59:33.171 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 14:59:39.299 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57292 10 6438 1 2025-07-17 15:00:09.843 00:00:10.385 TCP 23.104.0.1:54110 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:00:39.512 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6438 1 2025-07-17 15:01:10.261 00:00:10.370 TCP 23.104.0.1:54014 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:01:39.688 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60160 10 6438 1 2025-07-17 15:02:10.670 00:00:10.323 TCP 23.104.0.1:57758 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:02:39.907 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60796 10 6438 1 2025-07-17 14:57:57.065 00:06:00.039 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 15:03:11.044 00:00:10.366 TCP 23.104.0.1:35384 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:03:40.090 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52648 10 6438 1 2025-07-17 15:04:11.448 00:00:10.361 TCP 23.104.0.1:55486 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:04:33.147 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 15:04:32.956 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 15:04:40.303 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6438 1 2025-07-17 15:05:11.849 00:00:10.381 TCP 23.104.0.1:41348 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:05:40.514 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48882 10 6438 1 2025-07-17 15:00:57.092 00:06:00.010 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 15:06:12.267 00:00:10.359 TCP 23.104.0.1:54604 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:06:40.724 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33872 10 6438 1 2025-07-17 15:07:12.668 00:00:10.361 TCP 23.104.0.1:41102 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:07:40.935 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54188 10 6438 1 2025-07-17 15:08:13.101 00:00:10.372 TCP 23.104.0.1:39134 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:08:41.164 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38420 10 6438 1 2025-07-17 15:09:13.507 00:00:10.363 TCP 23.104.0.1:34070 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:09:33.219 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 15:09:33.346 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 15:09:41.380 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49690 10 6438 1 2025-07-17 15:04:57.068 00:06:00.039 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 15:10:13.917 00:00:10.391 TCP 23.104.0.1:38312 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:10:41.589 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36860 10 6438 1 2025-07-17 15:11:14.351 00:00:10.333 TCP 23.104.0.1:54018 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:11:41.802 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37978 10 6438 1 2025-07-17 15:12:14.725 00:00:10.374 TCP 23.104.0.1:53642 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:12:42.031 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45692 10 6438 1 2025-07-17 15:07:57.104 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 15:13:15.139 00:00:10.441 TCP 23.104.0.1:38024 -> 1.101.0.1:3000 15 1925 1 2025-07-17 15:13:42.250 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39068 12 10350 1 2025-07-17 15:14:15.620 00:00:10.369 TCP 23.104.0.1:52526 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:14:33.372 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 15:14:33.431 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 15:14:42.488 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57868 10 6438 1 2025-07-17 15:15:16.023 00:00:10.370 TCP 23.104.0.1:36254 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:15:42.703 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60836 10 6438 1 2025-07-17 15:16:16.436 00:00:10.360 TCP 23.104.0.1:43064 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:16:42.914 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34292 10 6438 1 2025-07-17 15:11:57.069 00:06:00.038 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 15:17:16.834 00:00:10.350 TCP 23.104.0.1:59708 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:17:43.129 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6438 1 2025-07-17 15:18:17.221 00:00:10.369 TCP 23.104.0.1:53752 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:18:43.345 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55682 10 6438 1 2025-07-17 15:19:17.630 00:00:10.324 TCP 23.104.0.1:41260 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:19:33.675 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 15:19:33.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 15:19:43.561 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41980 10 6438 1 2025-07-17 15:14:57.104 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 15:20:17.989 00:00:10.370 TCP 23.104.0.1:37836 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:20:43.772 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44582 10 6438 1 2025-07-17 15:21:18.390 00:00:10.361 TCP 23.104.0.1:48532 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:21:43.984 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48596 10 6438 1 2025-07-17 15:22:18.792 00:00:10.364 TCP 23.104.0.1:33402 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:22:44.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36516 10 6438 1 2025-07-17 15:23:19.198 00:00:10.370 TCP 23.104.0.1:47096 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:23:44.431 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38120 10 6438 1 2025-07-17 15:18:57.071 00:06:00.038 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 15:24:19.601 00:00:10.361 TCP 23.104.0.1:48444 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:24:33.515 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 15:24:33.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 15:24:44.639 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53824 10 6438 1 2025-07-17 15:25:20.001 00:00:10.368 TCP 23.104.0.1:46864 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:25:44.852 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46406 10 6438 1 2025-07-17 15:26:20.406 00:00:10.362 TCP 23.104.0.1:50310 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:26:45.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57926 10 6438 1 2025-07-17 15:21:57.106 00:06:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 15:27:20.811 00:00:10.366 TCP 23.104.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:27:45.303 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50700 10 6438 1 2025-07-17 15:28:21.214 00:00:10.373 TCP 23.104.0.1:60330 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:28:45.515 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 10 6438 1 2025-07-17 15:29:21.626 00:00:10.365 TCP 23.104.0.1:43218 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:29:33.779 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 15:29:33.656 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 15:29:45.732 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54874 10 6438 1 2025-07-17 15:30:22.030 00:00:10.363 TCP 23.104.0.1:49456 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:30:45.946 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:60662 10 6438 1 2025-07-17 15:25:57.072 00:06:00.038 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 15:31:22.427 00:00:10.377 TCP 23.104.0.1:44858 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:31:46.175 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55906 10 6438 1 2025-07-17 15:32:22.845 00:00:10.386 TCP 23.104.0.1:53016 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:32:46.388 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36186 10 6438 1 2025-07-17 15:33:23.268 00:00:10.366 TCP 23.104.0.1:55230 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:33:46.597 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59058 10 6438 1 2025-07-17 15:28:57.108 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 15:34:33.820 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 15:34:33.801 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 15:34:23.672 00:00:10.320 TCP 23.104.0.1:49888 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:34:46.811 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52834 10 6438 1 2025-07-17 15:35:24.034 00:00:10.380 TCP 23.104.0.1:42376 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:35:47.078 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39376 10 6438 1 2025-07-17 15:36:24.448 00:00:10.370 TCP 23.104.0.1:37196 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:36:47.287 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43318 10 6438 1 2025-07-17 15:37:24.850 00:00:10.385 TCP 23.104.0.1:44736 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:37:47.497 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42266 10 6438 1 2025-07-17 15:32:57.075 00:06:00.038 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 15:38:25.287 00:00:10.365 TCP 23.104.0.1:38068 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:38:47.734 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37124 10 6438 1 2025-07-17 15:39:33.875 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 15:39:25.693 00:00:10.370 TCP 23.104.0.1:42006 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:39:33.756 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 15:39:47.948 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41076 10 6438 1 2025-07-17 15:40:26.103 00:00:10.367 TCP 23.104.0.1:41740 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:40:48.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37206 10 6438 1 2025-07-17 15:35:57.110 00:06:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 15:41:26.505 00:00:10.367 TCP 23.104.0.1:58920 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:41:48.402 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35872 10 6438 1 2025-07-17 15:42:26.905 00:00:10.382 TCP 23.104.0.1:35054 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:42:48.612 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44430 10 6438 1 2025-07-17 15:43:27.326 00:00:10.329 TCP 23.104.0.1:43340 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:43:48.787 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50094 10 6438 1 2025-07-17 15:44:33.974 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 15:44:33.961 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 15:44:27.697 00:00:10.417 TCP 23.104.0.1:55192 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:39:57.075 00:06:00.037 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 15:44:49.000 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44362 10 6438 1 2025-07-17 15:45:28.152 00:00:10.368 TCP 23.104.0.1:41214 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:45:49.214 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48590 10 6438 1 2025-07-17 15:46:28.562 00:00:10.361 TCP 23.104.0.1:39510 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:46:49.427 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57322 10 6438 1 2025-07-17 15:47:28.965 00:00:10.370 TCP 23.104.0.1:46808 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:47:49.601 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59208 10 6438 1 2025-07-17 15:42:57.110 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 15:48:29.381 00:00:10.366 TCP 23.104.0.1:54450 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:48:49.775 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:48570 10 6438 1 2025-07-17 15:49:33.896 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 15:49:33.874 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 15:49:29.795 00:00:10.366 TCP 23.104.0.1:41158 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:49:49.964 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45310 10 6438 1 2025-07-17 15:50:30.199 00:00:10.364 TCP 23.104.0.1:60450 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:50:50.194 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55842 10 6438 1 2025-07-17 15:51:30.599 00:00:10.363 TCP 23.104.0.1:54020 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:46:57.077 00:06:00.037 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 15:51:50.369 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35110 10 6438 1 2025-07-17 15:52:31.002 00:00:10.355 TCP 23.104.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:52:50.590 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33612 10 6438 1 2025-07-17 15:53:31.400 00:00:10.364 TCP 23.104.0.1:48144 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:53:50.801 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55542 10 6438 1 2025-07-17 15:54:33.966 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 15:54:34.185 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 15:54:31.804 00:00:10.362 TCP 23.104.0.1:33538 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:54:51.025 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40906 10 6438 1 2025-07-17 15:49:57.112 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 15:55:32.206 00:00:10.362 TCP 23.104.0.1:54514 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:55:51.235 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53304 10 6438 1 2025-07-17 15:56:32.607 00:00:10.370 TCP 23.104.0.1:40376 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:56:51.451 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:38466 10 6438 1 2025-07-17 15:57:33.014 00:00:10.365 TCP 23.104.0.1:47990 -> 1.101.0.1:3000 11 1507 1 2025-07-17 15:57:51.630 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42010 10 6438 1 2025-07-17 15:58:33.413 00:00:10.378 TCP 23.104.0.1:34158 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 492001, total packets: 1503, avg bps: 1012, avg pps: 0, avg bpp: 327 Time window: 2025-07-17 14:53:57 - 2025-07-17 15:58:43 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0035s User: 0.0009s Wall: 0.0027s flows/second: 59215.4 Runtime: 0.0027s