Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-06 01:58:55.183 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 01:58:54.961 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 01:58:51.103 00:00:10.362 TCP 23.104.0.1:59270 -> 1.101.0.1:3000 11 1507 1 2025-08-06 01:58:57.328 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47828 10 6452 1 2025-08-06 01:55:06.954 00:05:00.637 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 01:59:51.497 00:00:10.326 TCP 23.104.0.1:43750 -> 1.101.0.1:3000 11 1507 1 2025-08-06 01:59:57.536 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39820 10 6452 1 2025-08-06 02:00:51.866 00:00:10.367 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:00:57.745 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33722 10 6452 1 2025-08-06 01:57:06.957 00:05:00.633 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 02:01:52.270 00:00:10.365 TCP 23.104.0.1:46048 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:01:57.971 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:42448 10 6452 1 2025-08-06 02:02:52.674 00:00:10.372 TCP 23.104.0.1:43452 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:02:58.208 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40632 10 6452 1 2025-08-06 02:03:55.446 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 02:03:55.380 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 02:03:53.104 00:00:10.385 TCP 23.104.0.1:57652 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:03:58.423 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39290 10 6452 1 2025-08-06 02:04:53.529 00:00:10.322 TCP 23.104.0.1:59534 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:01:06.954 00:05:00.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 02:04:58.635 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42380 10 6452 1 2025-08-06 02:05:53.893 00:00:10.377 TCP 23.104.0.1:58280 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:05:58.804 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40034 10 6452 1 2025-08-06 02:06:54.324 00:00:10.365 TCP 23.104.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:06:59.035 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38190 10 6452 1 2025-08-06 02:03:06.957 00:05:00.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 02:07:54.729 00:00:10.380 TCP 23.104.0.1:50172 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:07:59.250 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54882 10 6452 1 2025-08-06 02:08:55.584 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 02:08:55.373 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 02:08:55.158 00:00:10.366 TCP 23.104.0.1:39368 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:08:59.467 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58966 10 6452 1 2025-08-06 02:09:55.561 00:00:10.382 TCP 23.104.0.1:36060 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:09:59.680 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:55618 10 6452 1 2025-08-06 02:10:55.985 00:00:10.330 TCP 23.104.0.1:43860 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:10:59.863 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42448 10 6452 1 2025-08-06 02:07:06.955 00:05:00.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 02:11:56.357 00:00:10.322 TCP 23.104.0.1:52714 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:12:00.092 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42204 10 6452 1 2025-08-06 02:13:00.314 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:48942 10 6452 1 2025-08-06 02:12:56.715 00:00:10.373 TCP 23.104.0.1:50856 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:09:06.960 00:05:00.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 02:13:55.405 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 02:13:55.744 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 02:13:57.129 00:00:10.381 TCP 23.104.0.1:39552 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:14:00.505 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57764 10 6452 1 2025-08-06 02:15:00.723 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56574 10 6452 1 2025-08-06 02:14:57.537 00:00:10.327 TCP 23.104.0.1:46414 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:15:57.909 00:00:10.379 TCP 23.104.0.1:38874 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:16:00.959 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49472 12 6556 1 2025-08-06 02:16:58.326 00:00:10.433 TCP 23.104.0.1:48258 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:17:01.198 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54196 10 6452 1 2025-08-06 02:13:06.956 00:05:00.637 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 02:17:58.799 00:00:10.364 TCP 23.104.0.1:48790 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:18:01.371 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42992 10 6452 1 2025-08-06 02:18:55.544 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 02:18:55.661 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 02:15:06.960 00:05:00.632 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 02:18:59.204 00:00:10.358 TCP 23.104.0.1:36004 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:19:01.587 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33834 10 6452 1 2025-08-06 02:20:01.810 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49892 10 6452 1 2025-08-06 02:19:59.600 00:00:10.366 TCP 23.104.0.1:56266 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:21:00.006 00:00:10.359 TCP 23.104.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:21:02.038 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37688 10 6452 1 2025-08-06 02:22:00.410 00:00:10.363 TCP 23.104.0.1:51542 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:22:02.250 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39550 10 6452 1 2025-08-06 02:19:06.959 00:05:00.636 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 02:23:00.816 00:00:10.370 TCP 23.104.0.1:43700 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:23:02.469 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53480 10 6452 1 2025-08-06 02:23:55.633 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 02:23:55.622 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 02:24:01.216 00:00:10.360 TCP 23.104.0.1:37788 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:24:02.644 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46748 10 6452 1 2025-08-06 02:25:01.618 00:00:10.374 TCP 23.104.0.1:56648 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:21:06.963 00:05:00.631 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 02:25:02.855 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56648 10 6452 1 2025-08-06 02:26:03.089 00:00:10.476 TCP 1.101.0.1:3000 -> 22.102.0.1:49324 10 6452 1 2025-08-06 02:26:02.031 00:00:10.364 TCP 23.104.0.1:58714 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:27:03.604 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34258 10 6452 1 2025-08-06 02:27:02.435 00:00:10.360 TCP 23.104.0.1:34020 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:28:02.834 00:00:10.389 TCP 23.104.0.1:40808 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:28:03.818 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36404 10 6452 1 2025-08-06 02:28:55.581 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 02:28:55.715 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 02:25:06.960 00:05:00.637 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 02:29:03.265 00:00:10.362 TCP 23.104.0.1:53582 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:29:04.049 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34260 10 6452 1 2025-08-06 02:30:04.258 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48736 10 6452 1 2025-08-06 02:30:03.665 00:00:10.359 TCP 23.104.0.1:44342 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:27:06.964 00:05:00.631 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 02:31:04.094 00:00:10.363 TCP 23.104.0.1:60952 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:31:04.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41976 10 6452 1 2025-08-06 02:32:04.497 00:00:10.373 TCP 23.104.0.1:44960 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:32:04.653 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46794 10 6452 1 2025-08-06 02:33:04.861 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51908 10 6452 1 2025-08-06 02:33:04.904 00:00:10.364 TCP 23.104.0.1:46106 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:33:55.775 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 02:33:55.571 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 02:34:05.305 00:00:10.439 TCP 23.104.0.1:43200 -> 1.101.0.1:3000 15 1926 1 2025-08-06 02:34:05.085 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36550 12 10365 1 2025-08-06 02:31:06.962 00:05:00.636 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 02:35:05.324 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39680 10 6452 1 2025-08-06 02:35:05.783 00:00:10.368 TCP 23.104.0.1:53510 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:36:06.186 00:00:10.364 TCP 23.104.0.1:59450 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:36:05.538 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40194 10 6452 1 2025-08-06 02:33:06.965 00:05:00.631 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 02:37:06.585 00:00:10.372 TCP 23.104.0.1:58036 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:37:05.716 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41528 10 6452 1 2025-08-06 02:38:05.927 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59230 10 6452 1 2025-08-06 02:38:06.993 00:00:10.370 TCP 23.104.0.1:52142 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:38:55.717 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 02:38:55.805 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 02:39:06.138 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36528 10 6452 1 2025-08-06 02:39:07.403 00:00:10.374 TCP 23.104.0.1:34380 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:40:06.321 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42258 10 6452 1 2025-08-06 02:40:07.835 00:00:10.391 TCP 23.104.0.1:47458 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:37:06.962 00:05:00.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 02:41:06.541 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48214 10 6452 1 2025-08-06 02:41:08.271 00:00:10.369 TCP 23.104.0.1:41084 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:42:06.717 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34632 10 6452 1 2025-08-06 02:42:08.682 00:00:10.365 TCP 23.104.0.1:37660 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:39:06.965 00:05:00.632 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 02:43:09.119 00:00:10.459 TCP 23.104.0.1:56228 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:43:06.930 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:59066 10 6452 1 2025-08-06 02:43:56.028 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 02:43:55.840 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 02:44:09.614 00:00:10.371 TCP 23.104.0.1:38384 -> 1.101.0.1:3000 12 1559 1 2025-08-06 02:44:07.115 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51548 10 6452 1 2025-08-06 02:45:10.025 00:00:12.406 TCP 23.104.0.1:39092 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:45:07.336 00:00:14.937 TCP 1.101.0.1:3000 -> 22.102.0.1:43038 10 6452 1 2025-08-06 02:46:12.319 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59986 10 6452 1 2025-08-06 02:46:12.475 00:00:10.362 TCP 23.104.0.1:43490 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:43:06.963 00:05:00.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 02:47:12.533 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47728 10 6452 1 2025-08-06 02:47:12.879 00:00:10.604 TCP 23.104.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:48:12.748 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36294 10 6452 1 2025-08-06 02:48:13.530 00:00:10.366 TCP 23.104.0.1:49154 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:48:55.871 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 02:48:56.015 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 02:45:06.965 00:05:00.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 02:49:12.964 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:56834 10 6452 1 2025-08-06 02:49:13.937 00:00:10.339 TCP 23.104.0.1:46150 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:50:14.312 00:00:10.368 TCP 23.104.0.1:54528 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:50:13.147 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46548 10 6452 1 2025-08-06 02:51:14.719 00:00:10.374 TCP 23.104.0.1:38962 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:51:13.362 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43554 10 6452 1 2025-08-06 02:52:15.132 00:00:10.367 TCP 23.104.0.1:46328 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:52:13.576 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55134 10 6452 1 2025-08-06 02:49:06.963 00:05:00.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 02:53:15.534 00:00:10.362 TCP 23.104.0.1:51292 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:53:13.792 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55356 10 6452 1 2025-08-06 02:53:56.179 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 02:53:56.767 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 02:54:14.002 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57784 10 6452 1 2025-08-06 02:54:15.934 00:00:10.390 TCP 23.104.0.1:33308 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:51:06.967 00:05:00.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 02:55:16.354 00:00:10.364 TCP 23.104.0.1:37072 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:55:14.218 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-08-06 02:56:14.430 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48186 10 6452 1 2025-08-06 02:56:16.752 00:00:10.379 TCP 23.104.0.1:42676 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:57:14.642 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60580 10 6452 1 2025-08-06 02:57:17.168 00:00:10.361 TCP 23.104.0.1:43614 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:58:14.859 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42350 10 6452 1 2025-08-06 02:58:17.568 00:00:10.358 TCP 23.104.0.1:33032 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502836, total packets: 1581, avg bps: 1058, avg pps: 0, avg bpp: 318 Time window: 2025-08-06 01:55:06 - 2025-08-06 02:58:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0020s User: 0.0030s Wall: 0.0028s flows/second: 59571.0 Runtime: 0.0028s