Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 03:54:04.367 00:06:00.014 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 03:54:04.377 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 03:59:02.812 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 12 10367 1 2025-08-01 03:59:27.697 00:00:10.327 TCP 23.104.0.1:33846 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:00:03.077 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45988 10 6452 1 2025-08-01 04:00:28.123 00:00:10.366 TCP 23.104.0.1:37250 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:01:03.292 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52664 10 6452 1 2025-08-01 04:01:33.137 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 04:01:33.191 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 04:01:28.527 00:00:10.364 TCP 23.104.0.1:43024 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:02:03.463 00:00:10.426 TCP 1.101.0.1:3000 -> 22.102.0.1:33246 10 6452 1 2025-08-01 04:02:28.947 00:00:10.385 TCP 23.104.0.1:44224 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:03:03.928 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:39612 10 6452 1 2025-08-01 04:03:29.367 00:00:10.363 TCP 23.104.0.1:47734 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:04:04.173 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43628 10 6452 1 2025-08-01 04:04:29.773 00:00:10.374 TCP 23.104.0.1:47310 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:05:04.388 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47912 10 6452 1 2025-08-01 04:05:30.190 00:00:10.363 TCP 23.104.0.1:34232 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:01:04.368 00:06:00.014 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 04:01:04.380 00:06:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 04:06:04.620 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34670 10 6452 1 2025-08-01 04:06:33.314 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 04:06:33.248 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 04:06:30.597 00:00:10.371 TCP 23.104.0.1:49784 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:07:04.793 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51320 10 6452 1 2025-08-01 04:07:31.027 00:00:10.360 TCP 23.104.0.1:52380 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:08:05.011 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48846 10 6452 1 2025-08-01 04:08:31.429 00:00:10.366 TCP 23.104.0.1:53342 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:09:05.190 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48344 10 6452 1 2025-08-01 04:09:31.832 00:00:10.390 TCP 23.104.0.1:41134 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:10:05.411 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:38364 10 6452 1 2025-08-01 04:10:32.259 00:00:10.366 TCP 23.104.0.1:52114 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:11:05.613 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38284 10 6452 1 2025-08-01 04:11:33.123 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 04:11:33.355 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 04:11:32.686 00:00:10.371 TCP 23.104.0.1:51900 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:12:05.829 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55884 10 6452 1 2025-08-01 04:12:33.109 00:00:10.323 TCP 23.104.0.1:44372 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:08:04.381 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 04:08:04.376 00:06:00.008 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 04:13:06.010 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:50662 10 6452 1 2025-08-01 04:13:33.469 00:00:10.364 TCP 23.104.0.1:39462 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:14:06.237 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43440 10 6452 1 2025-08-01 04:14:33.871 00:00:10.363 TCP 23.104.0.1:57068 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:15:06.455 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57946 10 6452 1 2025-08-01 04:15:34.276 00:00:10.362 TCP 23.104.0.1:58202 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:16:06.669 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42500 10 6452 1 2025-08-01 04:16:33.430 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 04:16:33.520 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 04:16:34.677 00:00:10.330 TCP 23.104.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:17:06.882 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46998 10 6452 1 2025-08-01 04:17:35.046 00:00:10.368 TCP 23.104.0.1:34256 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:18:07.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40438 10 6452 1 2025-08-01 04:18:35.448 00:00:10.362 TCP 23.104.0.1:33086 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:19:07.318 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50892 10 6452 1 2025-08-01 04:19:35.851 00:00:10.379 TCP 23.104.0.1:56464 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:15:04.378 00:06:00.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 04:15:04.382 00:06:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 04:20:07.532 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54290 10 6452 1 2025-08-01 04:20:36.272 00:00:10.370 TCP 23.104.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:21:07.744 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54208 10 6452 1 2025-08-01 04:21:33.680 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 04:21:33.609 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 04:21:36.673 00:00:10.379 TCP 23.104.0.1:60418 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:22:07.967 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40058 10 6452 1 2025-08-01 04:22:37.105 00:00:10.363 TCP 23.104.0.1:48530 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:23:08.187 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49822 10 6452 1 2025-08-01 04:23:37.510 00:00:10.364 TCP 23.104.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:24:08.406 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35606 10 6452 1 2025-08-01 04:24:37.910 00:00:10.368 TCP 23.104.0.1:51442 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:25:08.632 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38486 10 6452 1 2025-08-01 04:25:38.319 00:00:10.374 TCP 23.104.0.1:36920 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:26:08.855 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38498 10 6452 1 2025-08-01 04:26:33.840 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 04:26:33.991 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 04:26:38.733 00:00:10.372 TCP 23.104.0.1:36546 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:22:04.379 00:06:00.008 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 04:22:04.382 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 9 601 1 2025-08-01 04:27:09.075 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60012 10 6452 1 2025-08-01 04:27:39.139 00:00:10.368 TCP 23.104.0.1:54158 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:28:09.286 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33624 10 6452 1 2025-08-01 04:28:39.548 00:00:10.325 TCP 23.104.0.1:56884 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:29:09.496 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43034 10 6452 1 2025-08-01 04:29:39.909 00:00:10.369 TCP 23.104.0.1:42320 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:30:09.716 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57306 10 6452 1 2025-08-01 04:30:40.315 00:00:10.367 TCP 23.104.0.1:39684 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:31:09.930 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:41730 10 6452 1 2025-08-01 04:31:33.718 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 04:31:33.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 04:31:40.720 00:00:10.337 TCP 23.104.0.1:59976 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:32:10.179 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53496 10 6452 1 2025-08-01 04:32:41.103 00:00:10.326 TCP 23.104.0.1:43594 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:33:10.391 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42434 10 6452 1 2025-08-01 04:33:41.466 00:00:10.327 TCP 23.104.0.1:46706 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:29:04.385 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 705 1 2025-08-01 04:29:04.383 00:06:00.008 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 04:34:10.604 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33566 10 6452 1 2025-08-01 04:34:41.830 00:00:10.393 TCP 23.104.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:35:10.821 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32878 10 6452 1 2025-08-01 04:35:42.255 00:00:10.367 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:36:11.040 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49372 10 6452 1 2025-08-01 04:36:33.863 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 04:36:33.990 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 04:36:42.664 00:00:10.366 TCP 23.104.0.1:43716 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:37:11.248 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57052 10 6452 1 2025-08-01 04:37:43.098 00:00:10.319 TCP 23.104.0.1:53894 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:38:11.464 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57818 10 6452 1 2025-08-01 04:38:43.463 00:00:10.364 TCP 23.104.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:39:11.673 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51060 10 6452 1 2025-08-01 04:39:43.870 00:00:10.365 TCP 23.104.0.1:37740 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:40:11.893 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42168 10 6452 1 2025-08-01 04:40:44.274 00:00:10.362 TCP 23.104.0.1:39350 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:36:04.385 00:06:00.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 04:36:04.388 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 653 1 2025-08-01 04:41:12.108 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41406 10 6452 1 2025-08-01 04:41:33.925 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 04:41:33.876 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 04:41:44.676 00:00:10.374 TCP 23.104.0.1:35152 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:42:12.322 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34366 10 6452 1 2025-08-01 04:42:45.106 00:00:10.362 TCP 23.104.0.1:56224 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:43:12.535 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52842 10 6452 1 2025-08-01 04:43:45.508 00:00:10.365 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:44:12.750 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42474 10 6452 1 2025-08-01 04:44:45.908 00:00:10.367 TCP 23.104.0.1:39514 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:45:12.962 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52328 10 6452 1 2025-08-01 04:45:46.315 00:00:10.365 TCP 23.104.0.1:57620 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:46:13.187 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44128 10 6452 1 2025-08-01 04:46:33.972 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 04:46:34.166 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 04:46:46.719 00:00:10.374 TCP 23.104.0.1:40652 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:47:13.417 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47326 10 6452 1 2025-08-01 04:47:47.136 00:00:10.364 TCP 23.104.0.1:60946 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:43:04.386 00:06:00.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 04:43:04.388 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 653 1 2025-08-01 04:48:13.625 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54060 10 6452 1 2025-08-01 04:48:47.538 00:00:10.370 TCP 23.104.0.1:34554 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:49:13.836 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49380 10 6452 1 2025-08-01 04:49:47.978 00:00:10.377 TCP 23.104.0.1:35822 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:50:14.057 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33074 10 6452 1 2025-08-01 04:50:48.391 00:00:10.321 TCP 23.104.0.1:38048 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:51:14.226 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37232 10 6452 1 2025-08-01 04:51:34.772 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 04:51:34.157 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 04:51:48.753 00:00:10.360 TCP 23.104.0.1:42806 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:52:14.396 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42776 10 6452 1 2025-08-01 04:52:49.151 00:00:10.367 TCP 23.104.0.1:55372 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:53:14.620 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:38426 10 6452 1 2025-08-01 04:53:49.557 00:00:10.321 TCP 23.104.0.1:40500 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:54:14.855 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54436 10 6452 1 2025-08-01 04:54:49.918 00:00:10.371 TCP 23.104.0.1:48640 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:50:04.388 00:06:00.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 04:50:04.390 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 04:55:15.089 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43098 10 6452 1 2025-08-01 04:55:50.317 00:00:10.330 TCP 23.104.0.1:47118 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:56:15.301 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52146 10 6452 1 2025-08-01 04:56:34.283 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 04:56:34.066 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 04:56:50.688 00:00:10.362 TCP 23.104.0.1:40434 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:57:15.521 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53914 10 6452 1 2025-08-01 04:57:51.106 00:00:10.362 TCP 23.104.0.1:57902 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:58:15.756 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47360 10 6452 1 Summary: total flows: 161, total bytes: 499206, total packets: 1531, avg bps: 1034, avg pps: 0, avg bpp: 326 Time window: 2025-08-01 03:54:04 - 2025-08-01 04:58:25 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0023s User: 0.0023s Wall: 0.0029s flows/second: 55364.7 Runtime: 0.0029s