Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 18:55:00.983 00:05:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 18:59:03.758 00:00:10.386 TCP 23.104.0.1:52702 -> 1.101.0.1:3000 11 1507 1 2025-07-25 18:59:18.767 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43242 10 6438 1 2025-07-25 18:56:00.980 00:05:00.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 19:00:04.183 00:00:10.369 TCP 23.104.0.1:44960 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:00:18.984 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6438 1 2025-07-25 19:01:04.590 00:00:10.369 TCP 23.104.0.1:52094 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:01:19.205 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34326 10 6438 1 2025-07-25 19:02:04.993 00:00:10.367 TCP 23.104.0.1:46518 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:02:19.416 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41422 10 6438 1 2025-07-25 19:03:05.398 00:00:10.364 TCP 23.104.0.1:42750 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:03:29.157 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 19:03:19.627 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33696 10 6438 1 2025-07-25 19:03:28.902 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 19:04:05.807 00:00:10.370 TCP 23.104.0.1:52692 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:04:19.848 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49374 10 6438 1 2025-07-25 19:01:00.984 00:05:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 19:05:06.231 00:00:10.324 TCP 23.104.0.1:53394 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:05:20.080 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41744 10 6438 1 2025-07-25 19:02:00.981 00:05:00.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 19:06:06.598 00:00:10.325 TCP 23.104.0.1:40620 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:06:20.296 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40882 10 6438 1 2025-07-25 19:07:06.963 00:00:10.374 TCP 23.104.0.1:58824 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:07:20.477 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56824 10 6438 1 2025-07-25 19:08:07.375 00:00:10.366 TCP 23.104.0.1:58248 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:08:28.935 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 19:08:20.688 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49376 10 6438 1 2025-07-25 19:08:29.277 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 19:09:07.781 00:00:10.334 TCP 23.104.0.1:49654 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:09:20.909 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56910 10 6438 1 2025-07-25 19:10:08.154 00:00:10.361 TCP 23.104.0.1:42002 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:10:21.125 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6438 1 2025-07-25 19:07:00.986 00:05:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 19:11:08.553 00:00:10.368 TCP 23.104.0.1:55346 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:11:21.336 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60070 10 6438 1 2025-07-25 19:08:00.984 00:05:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 19:12:08.954 00:00:10.365 TCP 23.104.0.1:34100 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:12:21.512 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33832 10 6438 1 2025-07-25 19:13:09.365 00:00:10.384 TCP 23.104.0.1:46710 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:13:29.428 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 19:13:21.727 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49616 10 6438 1 2025-07-25 19:13:29.207 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 19:14:09.790 00:00:10.376 TCP 23.104.0.1:44056 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:14:21.942 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45990 10 6438 1 2025-07-25 19:15:10.203 00:00:10.365 TCP 23.104.0.1:49008 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:15:22.174 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38096 10 6438 1 2025-07-25 19:16:10.608 00:00:10.406 TCP 23.104.0.1:51404 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:16:22.390 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33346 10 6438 1 2025-07-25 19:13:00.987 00:05:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 19:17:11.060 00:00:10.382 TCP 23.104.0.1:37086 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:17:22.563 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:54284 10 6438 1 2025-07-25 19:14:00.985 00:05:00.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 19:18:11.474 00:00:10.368 TCP 23.104.0.1:50280 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:18:29.337 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 19:18:29.369 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 19:18:22.731 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35358 10 6438 1 2025-07-25 19:19:11.880 00:00:10.382 TCP 23.104.0.1:48980 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:19:22.908 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38222 10 6438 1 2025-07-25 19:20:12.295 00:00:10.367 TCP 23.104.0.1:45910 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:20:23.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47352 10 6438 1 2025-07-25 19:21:12.696 00:00:10.369 TCP 23.104.0.1:36058 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:21:23.300 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41248 10 6438 1 2025-07-25 19:22:13.105 00:00:10.362 TCP 23.104.0.1:44786 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:22:23.513 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:44494 10 6438 1 2025-07-25 19:19:00.987 00:05:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 19:23:13.504 00:00:10.442 TCP 23.104.0.1:60620 -> 1.101.0.1:3000 15 1925 1 2025-07-25 19:23:29.463 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 19:23:29.347 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 19:23:23.719 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:56982 12 10350 1 2025-07-25 19:20:00.985 00:05:00.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 19:24:13.986 00:00:10.372 TCP 23.104.0.1:55058 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:24:23.962 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41304 10 6438 1 2025-07-25 19:25:14.389 00:00:10.371 TCP 23.104.0.1:38440 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:25:24.185 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55442 10 6438 1 2025-07-25 19:26:14.798 00:00:10.370 TCP 23.104.0.1:36026 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:26:24.414 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56894 10 6438 1 2025-07-25 19:27:15.213 00:00:10.366 TCP 23.104.0.1:33654 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:27:24.627 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43604 10 6438 1 2025-07-25 19:28:15.618 00:00:10.370 TCP 23.104.0.1:42018 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:28:29.459 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 19:28:29.713 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 19:28:24.838 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45090 10 6438 1 2025-07-25 19:25:00.990 00:05:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 19:29:16.032 00:00:10.366 TCP 23.104.0.1:58668 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:29:25.026 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58264 10 6438 1 2025-07-25 19:26:00.991 00:05:00.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 19:30:16.437 00:00:10.360 TCP 23.104.0.1:35896 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:30:25.235 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46600 10 6438 1 2025-07-25 19:31:16.837 00:00:10.384 TCP 23.104.0.1:41704 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:31:25.416 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57502 10 6438 1 2025-07-25 19:32:17.262 00:00:10.339 TCP 23.104.0.1:55668 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:32:25.632 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57196 10 6438 1 2025-07-25 19:33:29.720 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 19:33:17.638 00:00:10.325 TCP 23.104.0.1:40172 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:33:29.703 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 19:33:25.845 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:46986 10 6438 1 2025-07-25 19:34:18.000 00:00:10.362 TCP 23.104.0.1:38010 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:34:26.042 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51950 10 6438 1 2025-07-25 19:31:00.994 00:05:00.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 667 1 2025-07-25 19:35:18.401 00:00:10.367 TCP 23.104.0.1:60164 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:35:26.214 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38574 10 6438 1 2025-07-25 19:32:00.993 00:05:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 19:36:18.802 00:00:10.332 TCP 23.104.0.1:49596 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:36:26.422 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56796 10 6438 1 2025-07-25 19:37:19.175 00:00:10.360 TCP 23.104.0.1:54762 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:37:26.630 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35114 10 6438 1 2025-07-25 19:38:29.760 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 19:38:19.575 00:00:10.365 TCP 23.104.0.1:48798 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:38:29.877 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 19:38:26.844 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42760 10 6438 1 2025-07-25 19:39:19.975 00:00:10.376 TCP 23.104.0.1:48742 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:39:27.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53136 10 6438 1 2025-07-25 19:40:20.389 00:00:10.324 TCP 23.104.0.1:42410 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:40:27.297 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34192 10 6438 1 2025-07-25 19:36:01.184 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-07-25 19:41:20.748 00:00:10.360 TCP 23.104.0.1:58236 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:41:27.515 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32892 10 6438 1 2025-07-25 19:38:00.996 00:05:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 19:42:21.147 00:00:10.364 TCP 23.104.0.1:50228 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:42:27.729 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60314 10 6438 1 2025-07-25 19:43:30.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 19:43:21.547 00:00:10.392 TCP 23.104.0.1:59180 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:43:30.796 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 19:43:27.944 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35790 10 6438 1 2025-07-25 19:44:21.977 00:00:10.324 TCP 23.104.0.1:49814 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:44:28.180 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54060 10 6438 1 2025-07-25 19:45:22.347 00:00:10.367 TCP 23.104.0.1:43252 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:45:28.352 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56676 10 6438 1 2025-07-25 19:46:22.758 00:00:10.371 TCP 23.104.0.1:56594 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:46:28.564 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:56628 10 6438 1 2025-07-25 19:47:23.167 00:00:10.368 TCP 23.104.0.1:51370 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:47:28.735 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51102 10 6438 1 2025-07-25 19:44:00.999 00:05:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 19:43:01.002 00:06:00.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 19:48:29.914 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 19:48:30.045 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 19:48:23.571 00:00:10.325 TCP 23.104.0.1:48380 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:48:28.939 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:58766 10 6438 1 2025-07-25 19:49:23.933 00:00:10.395 TCP 23.104.0.1:52644 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:49:29.178 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37534 10 6438 1 2025-07-25 19:50:24.355 00:00:10.326 TCP 23.104.0.1:51220 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:50:29.411 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42062 10 6438 1 2025-07-25 19:51:24.718 00:00:10.378 TCP 23.104.0.1:49096 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:51:29.586 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57720 10 6438 1 2025-07-25 19:52:25.131 00:00:10.363 TCP 23.104.0.1:41870 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:52:29.801 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40042 10 6438 1 2025-07-25 19:53:30.115 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 19:53:30.187 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 19:53:25.532 00:00:10.380 TCP 23.104.0.1:39932 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:53:30.032 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58274 10 6438 1 2025-07-25 19:54:25.949 00:00:10.370 TCP 23.104.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:54:30.244 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55980 10 6438 1 2025-07-25 19:50:01.004 00:06:00.023 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-07-25 19:50:01.002 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 19:55:26.353 00:00:10.370 TCP 23.104.0.1:36066 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:55:30.452 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40586 10 6438 1 2025-07-25 19:56:26.755 00:00:10.361 TCP 23.104.0.1:51432 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:56:30.673 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57652 10 6438 1 2025-07-25 19:57:30.881 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55980 10 6438 1 2025-07-25 19:57:27.152 00:00:10.366 TCP 23.104.0.1:34348 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:58:30.163 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 19:58:30.026 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 19:58:27.553 00:00:10.323 TCP 23.104.0.1:50094 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:58:31.105 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6438 1 Summary: total flows: 164, total bytes: 502136, total packets: 1583, avg bps: 1051, avg pps: 0, avg bpp: 317 Time window: 2025-07-25 18:55:00 - 2025-07-25 19:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0026s User: 0.0017s Wall: 0.0019s flows/second: 85598.0 Runtime: 0.0019s