Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 16:54:05.817 00:06:00.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 16:54:05.819 00:06:00.169 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 16:59:06.859 00:00:10.377 TCP 23.104.0.1:41788 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:59:31.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44532 10 6452 1 2025-08-03 17:00:07.279 00:00:10.375 TCP 23.104.0.1:44532 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:00:31.304 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49384 10 6452 1 2025-08-03 17:01:07.696 00:00:10.325 TCP 23.104.0.1:49592 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:01:31.520 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59908 10 6452 1 2025-08-03 17:02:08.101 00:00:10.367 TCP 23.104.0.1:41522 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:02:31.731 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51298 10 6452 1 2025-08-03 17:02:46.670 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 17:02:46.789 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 17:03:08.502 00:00:10.367 TCP 23.104.0.1:49954 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:03:31.954 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48442 10 6452 1 2025-08-03 17:04:08.906 00:00:10.373 TCP 23.104.0.1:54116 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:04:32.179 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41268 10 6452 1 2025-08-03 17:05:09.315 00:00:10.363 TCP 23.104.0.1:49440 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:05:32.395 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42730 10 6452 1 2025-08-03 17:01:05.818 00:06:00.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 17:01:05.820 00:06:00.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 17:06:09.714 00:00:10.345 TCP 23.104.0.1:35162 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:06:32.605 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54766 10 6452 1 2025-08-03 17:07:10.105 00:00:10.320 TCP 23.104.0.1:40250 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:07:46.389 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 17:07:32.818 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60766 10 6452 1 2025-08-03 17:07:46.874 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 17:08:10.462 00:00:10.369 TCP 23.104.0.1:60642 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:08:32.994 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58592 10 6452 1 2025-08-03 17:09:10.869 00:00:10.367 TCP 23.104.0.1:55520 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:09:33.213 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47246 10 6452 1 2025-08-03 17:10:11.279 00:00:10.371 TCP 23.104.0.1:41156 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:10:33.422 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34966 10 6452 1 2025-08-03 17:11:11.692 00:00:10.512 TCP 23.104.0.1:42854 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:11:33.638 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56454 10 6452 1 2025-08-03 17:12:12.240 00:00:10.363 TCP 23.104.0.1:44102 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:12:33.845 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45162 10 6452 1 2025-08-03 17:12:46.620 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 17:12:46.934 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 17:08:05.819 00:06:00.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 17:08:05.822 00:06:00.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 17:13:12.644 00:00:10.366 TCP 23.104.0.1:41466 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:13:34.075 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:60338 12 10367 1 2025-08-03 17:14:13.062 00:00:10.440 TCP 23.104.0.1:47088 -> 1.101.0.1:3000 15 1926 1 2025-08-03 17:14:34.315 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41340 10 6452 1 2025-08-03 17:15:13.539 00:00:10.367 TCP 23.104.0.1:57186 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:15:34.531 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60136 10 6452 1 2025-08-03 17:16:13.942 00:00:10.374 TCP 23.104.0.1:51976 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:16:34.739 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51866 10 6452 1 2025-08-03 17:17:14.355 00:00:10.366 TCP 23.104.0.1:56314 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:17:34.949 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:60362 10 6452 1 2025-08-03 17:17:46.933 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 17:17:46.981 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 17:18:14.757 00:00:10.328 TCP 23.104.0.1:56994 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:18:35.198 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:33418 12 10365 1 2025-08-03 17:19:15.127 00:00:10.446 TCP 23.104.0.1:36920 -> 1.101.0.1:3000 15 1926 1 2025-08-03 17:19:35.451 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36154 10 6452 1 2025-08-03 17:15:05.823 00:06:00.172 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 17:15:05.820 00:06:00.177 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 17:20:15.612 00:00:10.363 TCP 23.104.0.1:46600 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:20:35.677 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49536 10 6452 1 2025-08-03 17:21:16.019 00:00:10.362 TCP 23.104.0.1:37886 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:21:35.898 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43042 10 6452 1 2025-08-03 17:22:16.419 00:00:10.372 TCP 23.104.0.1:44592 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:22:46.923 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 17:22:36.122 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42948 10 6452 1 2025-08-03 17:22:46.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 17:23:16.827 00:00:10.389 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:23:36.335 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33796 10 6452 1 2025-08-03 17:24:17.253 00:00:10.370 TCP 23.104.0.1:60528 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:24:36.561 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33558 10 6452 1 2025-08-03 17:25:17.664 00:00:10.368 TCP 23.104.0.1:51382 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:25:36.781 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44024 10 6452 1 2025-08-03 17:22:05.824 00:05:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 17:26:18.094 00:00:10.372 TCP 23.104.0.1:42552 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:26:36.992 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53464 10 6452 1 2025-08-03 17:22:05.827 00:06:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 17:27:18.502 00:00:10.372 TCP 23.104.0.1:49622 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:27:47.292 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 17:27:47.405 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 17:27:37.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58230 10 6452 1 2025-08-03 17:28:18.912 00:00:10.374 TCP 23.104.0.1:43900 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:28:37.425 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55180 10 6452 1 2025-08-03 17:29:19.326 00:00:10.370 TCP 23.104.0.1:56558 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:29:37.643 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55828 10 6452 1 2025-08-03 17:30:19.743 00:00:10.365 TCP 23.104.0.1:54912 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:30:37.815 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38760 10 6452 1 2025-08-03 17:31:20.147 00:00:10.372 TCP 23.104.0.1:49946 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:31:38.035 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36028 10 6452 1 2025-08-03 17:28:05.826 00:05:00.196 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 17:32:20.553 00:00:10.363 TCP 23.104.0.1:53780 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:32:47.209 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 17:32:47.254 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 17:32:38.205 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41778 10 6452 1 2025-08-03 17:29:05.828 00:05:00.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 17:33:20.953 00:00:10.322 TCP 23.104.0.1:50484 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:33:38.417 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57836 10 6452 1 2025-08-03 17:34:21.317 00:00:10.367 TCP 23.104.0.1:54212 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:34:38.628 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36314 10 6452 1 2025-08-03 17:35:21.725 00:00:10.366 TCP 23.104.0.1:42322 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:35:38.803 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33248 10 6452 1 2025-08-03 17:36:22.130 00:00:10.361 TCP 23.104.0.1:44366 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:36:39.013 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42060 10 6452 1 2025-08-03 17:37:22.531 00:00:10.378 TCP 23.104.0.1:43678 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:37:39.186 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46358 10 6452 1 2025-08-03 17:37:47.239 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 17:37:47.339 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 17:34:05.826 00:05:00.207 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 17:38:22.967 00:00:10.330 TCP 23.104.0.1:39004 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:38:39.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35160 10 6452 1 2025-08-03 17:35:05.830 00:05:00.204 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 17:39:23.329 00:00:10.327 TCP 23.104.0.1:53682 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:39:39.608 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47256 10 6452 1 2025-08-03 17:40:23.693 00:00:10.373 TCP 23.104.0.1:37718 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:40:39.783 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35118 10 6452 1 2025-08-03 17:41:24.108 00:00:10.370 TCP 23.104.0.1:44948 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:41:39.997 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33424 10 6452 1 2025-08-03 17:42:24.527 00:00:10.364 TCP 23.104.0.1:60876 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:42:40.219 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6452 1 2025-08-03 17:42:47.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 17:42:47.557 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 17:43:24.933 00:00:10.458 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 15 1926 1 2025-08-03 17:43:40.386 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:44236 12 10365 1 2025-08-03 17:40:05.827 00:05:00.211 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 17:44:25.435 00:00:10.365 TCP 23.104.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:44:40.645 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:48594 10 6452 1 2025-08-03 17:41:05.830 00:05:00.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 17:45:25.845 00:00:10.344 TCP 23.104.0.1:51534 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:45:40.835 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39038 10 6452 1 2025-08-03 17:46:26.228 00:00:10.367 TCP 23.104.0.1:40714 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:46:41.071 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46718 10 6452 1 2025-08-03 17:47:26.626 00:00:10.366 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:47:47.396 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 17:47:41.293 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36664 10 6452 1 2025-08-03 17:47:47.667 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 17:48:27.028 00:00:10.367 TCP 23.104.0.1:44316 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:48:41.470 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60362 10 6452 1 2025-08-03 17:49:27.430 00:00:10.363 TCP 23.104.0.1:51562 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:49:41.687 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 10 6452 1 2025-08-03 17:46:05.828 00:05:00.211 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 17:50:27.836 00:00:10.380 TCP 23.104.0.1:48640 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:50:41.858 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49388 10 6452 1 2025-08-03 17:47:05.831 00:05:00.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 17:51:28.257 00:00:10.369 TCP 23.104.0.1:58726 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:51:42.029 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56484 10 6452 1 2025-08-03 17:52:28.673 00:00:10.372 TCP 23.104.0.1:35324 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:52:47.659 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 17:52:47.613 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 17:52:42.200 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49888 10 6452 1 2025-08-03 17:53:29.107 00:00:10.361 TCP 23.104.0.1:47022 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:53:42.419 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60474 10 6452 1 2025-08-03 17:54:29.503 00:00:10.364 TCP 23.104.0.1:37264 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:54:42.630 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45548 10 6452 1 2025-08-03 17:55:29.904 00:00:10.361 TCP 23.104.0.1:49796 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:55:42.813 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43910 10 6452 1 2025-08-03 17:52:05.828 00:05:00.212 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 17:56:30.307 00:00:10.363 TCP 23.104.0.1:43488 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:56:42.992 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60510 10 6452 1 2025-08-03 17:53:05.832 00:05:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 17:57:30.710 00:00:10.373 TCP 23.104.0.1:49522 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:57:47.634 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 17:57:47.900 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 17:57:43.174 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48046 10 6452 1 2025-08-03 17:58:31.128 00:00:10.365 TCP 23.104.0.1:57526 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 506001, total packets: 1598, avg bps: 1044, avg pps: 0, avg bpp: 316 Time window: 2025-08-03 16:54:05 - 2025-08-03 17:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0015s Wall: 0.0028s flows/second: 57620.9 Runtime: 0.0028s