Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 00:54:04.869 00:06:00.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 00:54:04.874 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-02 00:58:57.998 00:00:10.720 TCP 23.104.0.1:49230 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:59:35.815 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37476 10 6452 1 2025-08-02 00:59:58.758 00:00:10.372 TCP 23.104.0.1:40756 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:00:36.039 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49346 10 6452 1 2025-08-02 01:00:59.170 00:00:10.363 TCP 23.104.0.1:59394 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:01:36.256 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46902 10 6452 1 2025-08-02 01:01:58.552 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:01:58.629 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 01:01:59.575 00:00:10.363 TCP 23.104.0.1:53680 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:02:36.466 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47452 10 6452 1 2025-08-02 01:02:59.979 00:00:10.364 TCP 23.104.0.1:53138 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:03:36.682 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48678 10 6452 1 2025-08-02 01:04:00.384 00:00:10.329 TCP 23.104.0.1:42468 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:04:36.898 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54164 10 6452 1 2025-08-02 01:05:00.754 00:00:10.341 TCP 23.104.0.1:35074 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:05:37.113 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56478 10 6452 1 2025-08-02 01:01:04.874 00:06:00.007 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 01:01:04.876 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 01:06:01.138 00:00:10.368 TCP 23.104.0.1:54242 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:06:37.327 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49508 10 6452 1 2025-08-02 01:06:59.078 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 01:06:59.028 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:07:01.545 00:00:10.364 TCP 23.104.0.1:36430 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:07:37.541 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51194 10 6452 1 2025-08-02 01:08:01.944 00:00:10.372 TCP 23.104.0.1:57046 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:08:37.757 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43810 10 6452 1 2025-08-02 01:09:02.356 00:00:10.360 TCP 23.104.0.1:42936 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:09:37.969 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:48032 10 6452 1 2025-08-02 01:10:02.756 00:00:10.383 TCP 23.104.0.1:50716 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:10:38.212 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:38326 10 6452 1 2025-08-02 01:11:03.186 00:00:10.368 TCP 23.104.0.1:39304 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:11:38.416 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48082 10 6452 1 2025-08-02 01:11:59.239 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:11:59.048 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 01:12:03.596 00:00:10.370 TCP 23.104.0.1:54098 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:12:38.639 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47214 10 6452 1 2025-08-02 01:08:04.875 00:06:00.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 01:08:04.877 00:06:00.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 01:13:04.019 00:00:10.376 TCP 23.104.0.1:56136 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:13:38.851 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54428 10 6452 1 2025-08-02 01:14:04.435 00:00:10.364 TCP 23.104.0.1:44990 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:14:39.080 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57966 10 6452 1 2025-08-02 01:15:04.843 00:00:10.382 TCP 23.104.0.1:47966 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:15:39.295 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57160 10 6452 1 2025-08-02 01:16:05.262 00:00:10.326 TCP 23.104.0.1:48714 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:16:39.527 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42648 10 6452 1 2025-08-02 01:16:58.802 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:16:58.520 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 01:17:05.622 00:00:10.367 TCP 23.104.0.1:36638 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:17:39.740 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46520 10 6452 1 2025-08-02 01:18:06.027 00:00:10.367 TCP 23.104.0.1:33780 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:18:39.951 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53758 10 6452 1 2025-08-02 01:19:06.427 00:00:10.362 TCP 23.104.0.1:33612 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:19:40.175 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-08-02 01:15:04.883 00:06:00.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 9 601 1 2025-08-02 01:15:04.882 00:06:00.012 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 01:20:06.826 00:00:10.396 TCP 23.104.0.1:51682 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:20:40.341 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:46514 10 6452 1 2025-08-02 01:21:07.259 00:00:10.364 TCP 23.104.0.1:57424 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:21:40.543 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47636 10 6452 1 2025-08-02 01:21:58.666 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 01:21:58.690 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:22:07.660 00:00:10.364 TCP 23.104.0.1:39424 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:22:40.716 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59232 10 6452 1 2025-08-02 01:23:08.079 00:00:10.374 TCP 23.104.0.1:39668 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:23:40.924 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:60570 10 6452 1 2025-08-02 01:24:08.490 00:00:10.363 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:24:41.170 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49166 10 6452 1 2025-08-02 01:25:08.893 00:00:10.339 TCP 23.104.0.1:42700 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:25:41.381 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33480 10 6452 1 2025-08-02 01:26:09.271 00:00:10.366 TCP 23.104.0.1:33094 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:26:41.589 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51482 10 6452 1 2025-08-02 01:26:58.888 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:26:58.845 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 01:22:04.892 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 01:22:04.884 00:06:00.011 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 01:27:09.678 00:00:10.368 TCP 23.104.0.1:60262 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:27:41.802 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54388 10 6452 1 2025-08-02 01:28:10.101 00:00:10.363 TCP 23.104.0.1:54968 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:28:42.029 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37612 10 6452 1 2025-08-02 01:29:10.505 00:00:10.375 TCP 23.104.0.1:59570 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:29:42.242 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46208 10 6452 1 2025-08-02 01:30:10.922 00:00:10.387 TCP 23.104.0.1:44314 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:30:42.449 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38508 10 6452 1 2025-08-02 01:31:11.348 00:00:10.362 TCP 23.104.0.1:58786 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:31:58.790 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 01:31:42.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60782 10 6452 1 2025-08-02 01:31:58.939 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:32:11.749 00:00:10.392 TCP 23.104.0.1:37860 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:32:42.889 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56434 10 6452 1 2025-08-02 01:33:12.175 00:00:10.367 TCP 23.104.0.1:40256 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:33:43.099 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43452 10 6452 1 2025-08-02 01:29:04.893 00:06:00.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 01:29:04.887 00:06:00.017 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 01:34:12.581 00:00:10.368 TCP 23.104.0.1:53126 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:34:43.313 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54162 10 6452 1 2025-08-02 01:35:12.986 00:00:10.363 TCP 23.104.0.1:54644 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:35:43.529 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35266 10 6452 1 2025-08-02 01:36:13.389 00:00:10.323 TCP 23.104.0.1:47966 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:36:43.741 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48466 10 6452 1 2025-08-02 01:36:59.011 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 01:36:59.051 00:00:00.049 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:37:13.751 00:00:10.388 TCP 23.104.0.1:51474 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:37:43.954 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41228 10 6452 1 2025-08-02 01:38:14.176 00:00:10.364 TCP 23.104.0.1:56416 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:38:44.167 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:39652 12 10365 1 2025-08-02 01:39:14.575 00:00:10.446 TCP 23.104.0.1:49988 -> 1.101.0.1:3000 15 1926 1 2025-08-02 01:39:44.420 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47336 10 6452 1 2025-08-02 01:40:15.062 00:00:10.365 TCP 23.104.0.1:51186 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:40:44.645 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53280 10 6452 1 2025-08-02 01:36:04.900 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 01:36:04.888 00:06:00.021 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 01:41:15.473 00:00:10.379 TCP 23.104.0.1:59552 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:41:44.883 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41812 10 6452 1 2025-08-02 01:41:59.495 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:41:59.541 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 01:42:15.895 00:00:10.370 TCP 23.104.0.1:47142 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:42:45.123 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53352 10 6452 1 2025-08-02 01:43:16.318 00:00:10.370 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:43:45.338 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37494 10 6452 1 2025-08-02 01:44:16.729 00:00:10.418 TCP 23.104.0.1:38602 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:44:45.512 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42978 10 6452 1 2025-08-02 01:45:17.187 00:00:10.383 TCP 23.104.0.1:36846 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:45:45.722 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54382 10 6452 1 2025-08-02 01:46:17.610 00:00:10.328 TCP 23.104.0.1:46332 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:46:59.425 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 01:46:45.938 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:43246 10 6452 1 2025-08-02 01:46:59.078 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:47:17.974 00:00:10.365 TCP 23.104.0.1:58828 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:47:46.172 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51902 10 6452 1 2025-08-02 01:43:04.906 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 01:43:04.889 00:06:00.023 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 01:48:18.377 00:00:10.362 TCP 23.104.0.1:59506 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:48:46.385 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52898 10 6452 1 2025-08-02 01:49:18.776 00:00:10.328 TCP 23.104.0.1:46682 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:49:46.596 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41862 10 6452 1 2025-08-02 01:50:19.143 00:00:10.323 TCP 23.104.0.1:56474 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:50:46.818 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49986 10 6452 1 2025-08-02 01:51:19.504 00:00:10.362 TCP 23.104.0.1:46586 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:51:59.357 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 01:51:59.394 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:51:47.040 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60406 10 6452 1 2025-08-02 01:52:19.900 00:00:10.371 TCP 23.104.0.1:48108 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:52:47.253 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46614 10 6452 1 2025-08-02 01:53:20.312 00:00:10.360 TCP 23.104.0.1:47990 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:53:47.463 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38092 10 6452 1 2025-08-02 01:54:20.720 00:00:10.368 TCP 23.104.0.1:33226 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:54:47.685 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35554 10 6452 1 2025-08-02 01:50:04.908 00:06:00.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 01:50:04.898 00:06:00.021 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 01:55:21.135 00:00:10.365 TCP 23.104.0.1:40262 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:55:47.897 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42892 10 6452 1 2025-08-02 01:56:21.537 00:00:10.360 TCP 23.104.0.1:52114 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:56:59.595 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 01:56:48.116 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51280 10 6452 1 2025-08-02 01:56:59.525 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:57:21.938 00:00:10.336 TCP 23.104.0.1:42270 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:57:48.326 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40712 10 6452 1 2025-08-02 01:58:22.316 00:00:10.364 TCP 23.104.0.1:47964 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 494834, total packets: 1539, avg bps: 1023, avg pps: 0, avg bpp: 321 Time window: 2025-08-02 00:54:04 - 2025-08-02 01:58:32 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0021s User: 0.0021s Wall: 0.0024s flows/second: 66556.6 Runtime: 0.0024s