Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-05 04:55:06.566 00:05:00.495 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 04:59:14.147 00:00:10.364 TCP 23.104.0.1:55364 -> 1.101.0.1:3000 11 1507 1 2025-08-05 04:59:21.660 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47458 10 6452 1 2025-08-05 05:00:14.553 00:00:10.319 TCP 23.104.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:00:21.832 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54456 10 6452 1 2025-08-05 04:57:06.569 00:05:00.490 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 05:01:14.916 00:00:10.372 TCP 23.104.0.1:46724 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:01:22.080 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35914 10 6452 1 2025-08-05 05:02:15.325 00:00:10.322 TCP 23.104.0.1:51594 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:02:22.255 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42732 10 6452 1 2025-08-05 05:03:15.686 00:00:10.367 TCP 23.104.0.1:44146 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:03:29.917 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 05:03:29.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 05:03:22.466 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6452 1 2025-08-05 05:04:16.114 00:00:10.327 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:04:22.677 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46688 10 6452 1 2025-08-05 05:01:06.569 00:05:00.495 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 05:05:16.485 00:00:10.719 TCP 23.104.0.1:42494 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:05:22.848 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35030 10 6452 1 2025-08-05 05:06:17.245 00:00:10.364 TCP 23.104.0.1:47446 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:06:23.081 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55852 10 6452 1 2025-08-05 05:03:06.574 00:05:00.487 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 05:07:17.660 00:00:10.362 TCP 23.104.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:07:23.293 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37762 10 6452 1 2025-08-05 05:08:30.044 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 05:08:18.080 00:00:10.320 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:08:30.118 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 05:08:23.508 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39738 10 6452 1 2025-08-05 05:09:18.443 00:00:10.326 TCP 23.104.0.1:49108 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:09:23.731 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51176 10 6452 1 2025-08-05 05:10:18.811 00:00:10.367 TCP 23.104.0.1:43286 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:10:23.956 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57916 10 6452 1 2025-08-05 05:07:06.573 00:05:00.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 05:11:19.229 00:00:10.361 TCP 23.104.0.1:36914 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:11:24.187 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60724 10 6452 1 2025-08-05 05:12:19.633 00:00:10.371 TCP 23.104.0.1:45560 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:12:24.402 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33584 10 6452 1 2025-08-05 05:09:06.576 00:05:00.486 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 05:13:29.975 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 05:13:20.055 00:00:10.359 TCP 23.104.0.1:42730 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:13:30.551 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 05:13:24.577 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38784 10 6452 1 2025-08-05 05:14:20.455 00:00:10.356 TCP 23.104.0.1:44450 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:14:24.792 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53674 10 6452 1 2025-08-05 05:15:20.853 00:00:10.384 TCP 23.104.0.1:56776 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:15:25.003 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44402 10 6452 1 2025-08-05 05:16:21.273 00:00:10.363 TCP 23.104.0.1:36264 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:16:25.227 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53404 10 6452 1 2025-08-05 05:13:06.577 00:05:00.490 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 05:17:21.681 00:00:10.368 TCP 23.104.0.1:46932 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:17:25.454 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49898 10 6452 1 2025-08-05 05:18:30.324 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 05:18:30.393 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 05:18:22.109 00:00:10.359 TCP 23.104.0.1:39814 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:18:25.666 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 12 10367 1 2025-08-05 05:15:06.577 00:05:00.486 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 05:19:22.513 00:00:10.394 TCP 23.104.0.1:51292 -> 1.101.0.1:3000 15 1926 1 2025-08-05 05:19:25.910 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46028 10 6452 1 2025-08-05 05:20:26.126 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50670 10 6452 1 2025-08-05 05:20:22.947 00:00:10.370 TCP 23.104.0.1:40870 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:21:26.299 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54780 10 6452 1 2025-08-05 05:21:23.356 00:00:10.368 TCP 23.104.0.1:54744 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:22:26.472 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56398 10 6452 1 2025-08-05 05:22:23.769 00:00:10.372 TCP 23.104.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:19:06.576 00:05:00.490 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 05:23:30.334 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 05:23:30.414 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 05:23:26.686 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34178 10 6452 1 2025-08-05 05:23:24.181 00:00:10.364 TCP 23.104.0.1:38472 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:24:24.586 00:00:10.324 TCP 23.104.0.1:48684 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:24:26.856 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56914 10 6452 1 2025-08-05 05:21:06.579 00:05:00.486 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 05:25:24.950 00:00:10.326 TCP 23.104.0.1:49792 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:25:27.089 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35712 10 6452 1 2025-08-05 05:26:25.313 00:00:10.368 TCP 23.104.0.1:49992 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:26:27.297 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53600 10 6452 1 2025-08-05 05:27:25.721 00:00:10.371 TCP 23.104.0.1:58790 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:27:27.475 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52702 10 6452 1 2025-08-05 05:28:30.478 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 05:28:30.492 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 05:28:26.131 00:00:10.437 TCP 23.104.0.1:36234 -> 1.101.0.1:3000 15 1926 1 2025-08-05 05:28:27.690 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:38022 12 10367 1 2025-08-05 05:25:06.578 00:05:00.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 05:29:26.610 00:00:10.363 TCP 23.104.0.1:57782 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:29:27.890 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39052 10 6452 1 2025-08-05 05:30:27.010 00:00:10.369 TCP 23.104.0.1:45410 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:30:28.114 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50594 10 6452 1 2025-08-05 05:27:06.582 00:05:00.490 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 05:31:28.334 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35700 10 6452 1 2025-08-05 05:31:27.415 00:00:10.325 TCP 23.104.0.1:55362 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:32:28.549 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43172 10 6452 1 2025-08-05 05:32:27.776 00:00:10.367 TCP 23.104.0.1:42222 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:33:30.506 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 05:33:30.290 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 05:33:28.177 00:00:10.375 TCP 23.104.0.1:56100 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:33:28.766 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47824 10 6452 1 2025-08-05 05:34:28.987 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55380 10 6452 1 2025-08-05 05:34:28.586 00:00:10.365 TCP 23.104.0.1:49892 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:31:06.580 00:05:00.495 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 05:35:29.219 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60954 10 6452 1 2025-08-05 05:35:28.994 00:00:10.360 TCP 23.104.0.1:56562 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:36:29.429 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39466 10 6452 1 2025-08-05 05:36:29.394 00:00:10.375 TCP 23.104.0.1:34482 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:33:06.584 00:05:00.490 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 05:37:29.800 00:00:10.386 TCP 23.104.0.1:55636 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:37:29.642 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:38752 10 6452 1 2025-08-05 05:38:30.709 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 05:38:30.612 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 05:38:29.876 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57468 10 6452 1 2025-08-05 05:38:30.225 00:00:10.364 TCP 23.104.0.1:50630 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:39:30.624 00:00:10.363 TCP 23.104.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:39:30.098 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54770 10 6452 1 2025-08-05 05:40:31.023 00:00:10.363 TCP 23.104.0.1:60292 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:40:30.307 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60600 10 6452 1 2025-08-05 05:37:06.584 00:05:00.492 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 05:41:30.514 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55760 10 6452 1 2025-08-05 05:41:31.422 00:00:10.366 TCP 23.104.0.1:52606 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:42:30.726 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53810 10 6452 1 2025-08-05 05:42:31.826 00:00:10.373 TCP 23.104.0.1:52278 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:39:06.588 00:05:00.485 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 05:43:30.780 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 05:43:30.808 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 05:43:30.945 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37188 10 6452 1 2025-08-05 05:43:32.236 00:00:10.370 TCP 23.104.0.1:50714 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:44:31.175 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38896 10 6452 1 2025-08-05 05:44:32.647 00:00:10.366 TCP 23.104.0.1:39080 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:45:31.388 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:48692 11 6504 1 2025-08-05 05:45:33.054 00:00:10.369 TCP 23.104.0.1:42128 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:46:31.668 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48838 10 6452 1 2025-08-05 05:46:33.454 00:00:10.373 TCP 23.104.0.1:34344 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:43:06.588 00:05:00.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 05:47:33.861 00:00:10.338 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:47:31.890 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40142 10 6452 1 2025-08-05 05:48:30.512 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 05:48:30.867 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 05:48:32.103 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57232 10 6452 1 2025-08-05 05:48:34.240 00:00:10.363 TCP 23.104.0.1:50128 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:45:06.591 00:05:00.487 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 05:49:34.641 00:00:10.366 TCP 23.104.0.1:42428 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:49:32.311 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48930 10 6452 1 2025-08-05 05:50:32.525 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39276 10 6452 1 2025-08-05 05:50:35.053 00:00:10.374 TCP 23.104.0.1:51374 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:51:32.747 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47426 10 6452 1 2025-08-05 05:51:35.461 00:00:10.321 TCP 23.104.0.1:58994 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:52:32.958 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:35630 10 6452 1 2025-08-05 05:52:35.818 00:00:10.361 TCP 23.104.0.1:50006 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:49:06.588 00:05:00.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 05:53:30.685 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 05:53:31.116 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 05:53:36.216 00:00:10.327 TCP 23.104.0.1:36582 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:53:33.149 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51948 10 6452 1 2025-08-05 05:54:36.586 00:00:10.370 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:54:33.364 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43348 10 6452 1 2025-08-05 05:51:06.592 00:05:00.485 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 05:55:33.542 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60750 10 6452 1 2025-08-05 05:55:36.995 00:00:10.361 TCP 23.104.0.1:47812 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:56:33.750 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43196 10 6452 1 2025-08-05 05:56:37.390 00:00:10.373 TCP 23.104.0.1:53242 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:57:33.963 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56858 10 6452 1 2025-08-05 05:57:37.797 00:00:10.373 TCP 23.104.0.1:38574 -> 1.101.0.1:3000 11 1507 1 2025-08-05 05:58:31.249 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 05:58:30.998 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 05:58:34.148 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41742 10 6452 1 2025-08-05 05:58:38.205 00:00:10.324 TCP 23.104.0.1:53228 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507068, total packets: 1585, avg bps: 1061, avg pps: 0, avg bpp: 319 Time window: 2025-08-05 04:55:06 - 2025-08-05 05:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0008s User: 0.0034s Wall: 0.0024s flows/second: 68621.9 Runtime: 0.0024s