Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 19:54:05.388 00:06:00.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 19:58:54.393 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50090 10 6452 1 2025-08-02 19:54:05.387 00:06:00.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 19:59:38.478 00:00:10.365 TCP 23.104.0.1:43054 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:59:54.561 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38484 10 6452 1 2025-08-02 20:00:38.878 00:00:10.325 TCP 23.104.0.1:60418 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:00:54.776 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45130 10 6452 1 2025-08-02 20:01:39.244 00:00:10.368 TCP 23.104.0.1:54588 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:01:54.988 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59158 10 6452 1 2025-08-02 20:02:22.243 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 20:02:21.994 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 20:02:39.648 00:00:10.364 TCP 23.104.0.1:38310 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:02:55.225 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44502 10 6452 1 2025-08-02 20:03:40.056 00:00:10.439 TCP 23.104.0.1:46590 -> 1.101.0.1:3000 15 1926 1 2025-08-02 20:03:55.443 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48582 12 10367 1 2025-08-02 20:04:40.535 00:00:10.378 TCP 23.104.0.1:42570 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:04:55.680 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37056 10 6452 1 2025-08-02 20:05:40.955 00:00:10.327 TCP 23.104.0.1:36678 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:05:55.901 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:56216 10 6452 1 2025-08-02 20:01:05.387 00:06:00.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 20:01:05.390 00:06:00.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 20:06:41.320 00:00:10.371 TCP 23.104.0.1:41906 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:06:56.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36766 10 6452 1 2025-08-02 20:07:21.336 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 20:07:21.258 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 20:07:41.726 00:00:10.373 TCP 23.104.0.1:39352 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:07:56.297 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33776 10 6452 1 2025-08-02 20:08:42.145 00:00:10.384 TCP 23.104.0.1:51178 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:08:56.506 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55052 10 6452 1 2025-08-02 20:09:42.577 00:00:10.366 TCP 23.104.0.1:59814 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:09:56.678 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49714 10 6452 1 2025-08-02 20:10:42.981 00:00:10.376 TCP 23.104.0.1:60366 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:10:56.848 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39858 10 6452 1 2025-08-02 20:11:43.397 00:00:10.362 TCP 23.104.0.1:49300 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:11:57.089 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46620 10 6452 1 2025-08-02 20:12:21.539 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 20:12:21.465 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 20:12:43.799 00:00:10.364 TCP 23.104.0.1:39878 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:08:05.391 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 20:08:05.388 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 20:12:57.260 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54140 10 6452 1 2025-08-02 20:13:44.205 00:00:10.363 TCP 23.104.0.1:60250 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:13:57.479 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6452 1 2025-08-02 20:14:44.608 00:00:10.375 TCP 23.104.0.1:49980 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:14:57.692 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59104 10 6452 1 2025-08-02 20:15:45.012 00:00:10.329 TCP 23.104.0.1:49800 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:15:57.903 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60898 10 6452 1 2025-08-02 20:16:45.376 00:00:10.325 TCP 23.104.0.1:44782 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:16:58.121 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44476 10 6452 1 2025-08-02 20:17:21.367 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 20:17:21.674 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 20:17:45.745 00:00:10.366 TCP 23.104.0.1:47870 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:17:58.329 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59618 10 6452 1 2025-08-02 20:18:46.146 00:00:10.321 TCP 23.104.0.1:42748 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:18:58.546 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40202 10 6452 1 2025-08-02 20:19:46.506 00:00:10.364 TCP 23.104.0.1:36046 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:15:05.392 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 20:15:05.389 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 20:19:58.757 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42238 10 6452 1 2025-08-02 20:20:46.907 00:00:10.321 TCP 23.104.0.1:38014 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:20:58.930 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47642 10 6452 1 2025-08-02 20:21:47.270 00:00:10.363 TCP 23.104.0.1:37098 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:21:59.163 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:42846 10 6452 1 2025-08-02 20:22:21.590 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 20:22:21.681 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 20:22:47.673 00:00:10.368 TCP 23.104.0.1:48418 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:22:59.349 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46332 10 6452 1 2025-08-02 20:23:48.104 00:00:10.371 TCP 23.104.0.1:42690 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:23:59.566 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49790 10 6452 1 2025-08-02 20:24:48.513 00:00:10.367 TCP 23.104.0.1:49112 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:24:59.776 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47412 10 6452 1 2025-08-02 20:25:48.916 00:00:10.372 TCP 23.104.0.1:56166 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:25:59.989 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52960 10 6452 1 2025-08-02 20:26:49.324 00:00:10.364 TCP 23.104.0.1:57738 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:22:05.394 00:06:00.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 20:22:05.397 00:06:00.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 20:27:00.222 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42808 10 6452 1 2025-08-02 20:27:21.921 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 20:27:21.776 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 20:27:49.732 00:00:10.383 TCP 23.104.0.1:35858 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:28:00.442 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47960 10 6452 1 2025-08-02 20:28:50.145 00:00:10.326 TCP 23.104.0.1:38230 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:29:00.659 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43646 10 6452 1 2025-08-02 20:29:50.505 00:00:10.360 TCP 23.104.0.1:44316 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:30:00.874 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:32882 10 6452 1 2025-08-02 20:30:50.906 00:00:10.369 TCP 23.104.0.1:35200 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:31:01.102 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39460 10 6452 1 2025-08-02 20:31:51.313 00:00:10.367 TCP 23.104.0.1:34786 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:32:01.318 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55824 10 6452 1 2025-08-02 20:32:21.778 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 20:32:22.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 20:32:51.717 00:00:10.382 TCP 23.104.0.1:48188 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:33:01.528 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45378 10 6452 1 2025-08-02 20:29:05.398 00:06:00.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 20:33:52.138 00:00:10.455 TCP 23.104.0.1:50076 -> 1.101.0.1:3000 15 1926 1 2025-08-02 20:29:05.400 00:06:00.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 20:34:01.747 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:46282 12 10367 1 2025-08-02 20:34:52.628 00:00:10.369 TCP 23.104.0.1:49042 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:35:01.983 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48762 10 6452 1 2025-08-02 20:35:53.032 00:00:10.366 TCP 23.104.0.1:36304 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:36:02.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43144 10 6452 1 2025-08-02 20:36:53.432 00:00:10.324 TCP 23.104.0.1:46168 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:37:02.422 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45490 10 6452 1 2025-08-02 20:37:22.646 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 20:37:22.643 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 20:37:53.794 00:00:10.342 TCP 23.104.0.1:53604 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:38:02.640 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:33062 10 6452 1 2025-08-02 20:38:54.175 00:00:10.365 TCP 23.104.0.1:53088 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:39:02.846 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60814 10 6452 1 2025-08-02 20:39:54.585 00:00:10.366 TCP 23.104.0.1:60686 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:40:03.083 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40478 10 6452 1 2025-08-02 20:36:05.398 00:06:00.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 20:40:54.989 00:00:10.364 TCP 23.104.0.1:56090 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:36:05.400 00:06:00.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 20:41:03.298 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49830 10 6452 1 2025-08-02 20:41:55.391 00:00:10.364 TCP 23.104.0.1:51446 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:42:03.517 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42896 10 6452 1 2025-08-02 20:42:21.996 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 20:42:22.135 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 20:42:55.818 00:00:10.366 TCP 23.104.0.1:60702 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:43:03.729 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54452 10 6452 1 2025-08-02 20:43:56.224 00:00:10.360 TCP 23.104.0.1:56538 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:44:03.933 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:39018 10 6452 1 2025-08-02 20:44:56.631 00:00:10.322 TCP 23.104.0.1:41558 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:45:04.121 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56100 10 6452 1 2025-08-02 20:45:56.990 00:00:10.367 TCP 23.104.0.1:34846 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:46:04.296 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33260 10 6452 1 2025-08-02 20:46:57.392 00:00:10.360 TCP 23.104.0.1:48230 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:47:04.523 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52794 10 6452 1 2025-08-02 20:47:22.374 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 20:47:22.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 20:43:05.398 00:06:00.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 20:43:05.402 00:06:00.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 20:47:57.794 00:00:10.364 TCP 23.104.0.1:59430 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:48:04.747 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60718 12 6556 1 2025-08-02 20:48:58.200 00:00:10.375 TCP 23.104.0.1:36712 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:49:04.989 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:38890 10 6452 1 2025-08-02 20:49:58.608 00:00:10.363 TCP 23.104.0.1:47532 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:50:05.222 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54540 10 6452 1 2025-08-02 20:50:59.011 00:00:10.373 TCP 23.104.0.1:53004 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:51:05.448 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44984 10 6452 1 2025-08-02 20:51:59.417 00:00:10.371 TCP 23.104.0.1:58740 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:52:05.666 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6452 1 2025-08-02 20:52:22.394 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 20:52:22.714 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 20:52:59.824 00:00:10.376 TCP 23.104.0.1:41990 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:53:05.876 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49192 10 6452 1 2025-08-02 20:54:00.239 00:00:10.321 TCP 23.104.0.1:45260 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:54:06.073 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55862 10 6452 1 2025-08-02 20:50:05.404 00:06:00.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 20:50:05.402 00:06:00.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 20:55:00.600 00:00:10.365 TCP 23.104.0.1:51520 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:55:06.285 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37150 10 6452 1 2025-08-02 20:56:01.005 00:00:10.364 TCP 23.104.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:56:06.502 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44610 10 6452 1 2025-08-02 20:57:01.408 00:00:10.369 TCP 23.104.0.1:36732 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:57:06.713 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53246 10 6452 1 2025-08-02 20:57:22.528 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 20:57:22.190 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 20:58:01.815 00:00:10.364 TCP 23.104.0.1:59106 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:58:06.942 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37406 10 6452 1 Summary: total flows: 161, total bytes: 506351, total packets: 1587, avg bps: 1051, avg pps: 0, avg bpp: 319 Time window: 2025-08-02 19:54:05 - 2025-08-02 20:58:17 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0030s User: 0.0020s Wall: 0.0022s flows/second: 72783.2 Runtime: 0.0022s