Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-10 22:55:09.359 00:05:00.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 22:59:11.598 00:00:10.357 TCP 23.104.0.1:44904 -> 1.101.0.1:3000 11 1507 1 2025-08-10 22:59:25.932 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:59092 10 6452 1 2025-08-10 23:00:12.002 00:00:10.367 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:00:26.123 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57866 10 6452 1 2025-08-10 23:01:15.892 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 22:57:09.364 00:05:00.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 23:01:15.757 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 23:01:12.405 00:00:10.367 TCP 23.104.0.1:36468 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:01:26.352 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51168 10 6452 1 2025-08-10 23:02:12.812 00:00:10.361 TCP 23.104.0.1:39998 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:02:26.565 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58074 10 6452 1 2025-08-10 23:03:13.209 00:00:10.367 TCP 23.104.0.1:42674 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:03:26.778 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52136 10 6452 1 2025-08-10 23:04:13.613 00:00:10.366 TCP 23.104.0.1:57788 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:04:26.993 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59472 10 6452 1 2025-08-10 23:01:09.363 00:05:00.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 23:05:14.017 00:00:10.368 TCP 23.104.0.1:42364 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:05:27.221 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56426 10 6452 1 2025-08-10 23:06:15.920 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 23:06:15.900 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 23:06:14.422 00:00:10.331 TCP 23.104.0.1:56748 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:06:27.401 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:50690 10 6452 1 2025-08-10 23:03:09.366 00:05:00.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 23:07:14.788 00:00:10.368 TCP 23.104.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:07:27.582 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41256 10 6452 1 2025-08-10 23:08:15.196 00:00:10.362 TCP 23.104.0.1:54038 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:08:27.790 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56962 10 6452 1 2025-08-10 23:09:15.594 00:00:10.362 TCP 23.104.0.1:50806 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:09:28.011 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33986 10 6452 1 2025-08-10 23:10:15.997 00:00:10.320 TCP 23.104.0.1:36866 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:10:28.224 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54976 10 6452 1 2025-08-10 23:07:09.365 00:05:00.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 23:11:16.190 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 23:11:16.164 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 23:11:16.357 00:00:10.364 TCP 23.104.0.1:46356 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:11:28.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48672 10 6452 1 2025-08-10 23:12:16.757 00:00:10.385 TCP 23.104.0.1:43342 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:12:28.607 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37214 10 6452 1 2025-08-10 23:09:09.368 00:05:00.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 23:13:17.184 00:00:10.360 TCP 23.104.0.1:49166 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:13:28.822 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-08-10 23:14:17.586 00:00:10.350 TCP 23.104.0.1:38452 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:14:29.040 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60200 10 6452 1 2025-08-10 23:15:17.980 00:00:10.330 TCP 23.104.0.1:53450 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:15:29.253 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39884 10 6452 1 2025-08-10 23:16:16.361 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 23:16:16.256 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 23:16:18.359 00:00:10.322 TCP 23.104.0.1:37244 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:16:29.422 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58212 10 6452 1 2025-08-10 23:13:09.370 00:05:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 23:17:18.719 00:00:10.373 TCP 23.104.0.1:51702 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:17:29.593 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37710 10 6452 1 2025-08-10 23:18:19.135 00:00:10.369 TCP 23.104.0.1:41148 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:18:29.766 00:00:10.285 TCP 1.101.0.1:3000 -> 22.102.0.1:53232 10 6452 1 2025-08-10 23:15:09.374 00:05:00.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 23:19:19.550 00:00:10.333 TCP 23.104.0.1:34312 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:19:30.090 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52574 10 6452 1 2025-08-10 23:20:19.926 00:00:10.392 TCP 23.104.0.1:48066 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:20:30.303 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:40328 10 6452 1 2025-08-10 23:21:16.219 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 23:21:16.474 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 23:21:20.356 00:00:10.367 TCP 23.104.0.1:46236 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:21:30.507 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34776 10 6452 1 2025-08-10 23:22:20.756 00:00:10.377 TCP 23.104.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:22:30.682 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59184 10 6452 1 2025-08-10 23:19:09.374 00:05:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 23:23:21.180 00:00:10.364 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 12 1559 1 2025-08-10 23:23:30.897 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:40202 10 6452 1 2025-08-10 23:24:21.584 00:00:10.367 TCP 23.104.0.1:44098 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:24:31.084 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37466 10 6452 1 2025-08-10 23:21:09.381 00:05:00.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 23:25:21.991 00:00:10.328 TCP 23.104.0.1:56626 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:25:31.271 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42642 10 6452 1 2025-08-10 23:26:16.100 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 23:26:16.406 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 23:26:22.355 00:00:10.367 TCP 23.104.0.1:53060 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:26:31.498 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44708 10 6452 1 2025-08-10 23:27:22.760 00:00:10.384 TCP 23.104.0.1:44002 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:27:31.716 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55790 10 6452 1 2025-08-10 23:28:23.181 00:00:10.322 TCP 23.104.0.1:38868 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:28:31.941 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:46604 10 6452 1 2025-08-10 23:25:09.379 00:05:00.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 23:29:23.542 00:00:10.366 TCP 23.104.0.1:43010 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:29:32.178 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:40660 10 6452 1 2025-08-10 23:30:23.948 00:00:10.361 TCP 23.104.0.1:49182 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:30:32.343 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46942 10 6452 1 2025-08-10 23:31:16.412 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 23:27:09.381 00:05:00.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 23:31:16.734 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 23:31:24.349 00:00:10.327 TCP 23.104.0.1:47714 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:31:32.561 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60146 10 6452 1 2025-08-10 23:32:24.708 00:00:10.380 TCP 23.104.0.1:37334 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:32:32.774 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57622 10 6452 1 2025-08-10 23:33:25.124 00:00:10.420 TCP 23.104.0.1:40422 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:33:33.001 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35272 10 6452 1 2025-08-10 23:34:25.583 00:00:10.372 TCP 23.104.0.1:58158 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:34:33.211 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:50218 10 6452 1 2025-08-10 23:31:09.378 00:05:00.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 23:35:25.985 00:00:10.365 TCP 23.104.0.1:59138 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:35:33.414 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51764 10 6452 1 2025-08-10 23:36:16.392 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 23:36:16.550 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 23:36:26.386 00:00:10.364 TCP 23.104.0.1:46120 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:36:33.639 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6452 1 2025-08-10 23:33:09.382 00:05:00.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 23:37:26.790 00:00:10.367 TCP 23.104.0.1:60564 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:37:33.861 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50292 10 6452 1 2025-08-10 23:38:27.201 00:00:10.326 TCP 23.104.0.1:58142 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:38:34.086 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54388 10 6452 1 2025-08-10 23:39:27.564 00:00:10.363 TCP 23.104.0.1:36286 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:39:34.305 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:38548 10 6452 1 2025-08-10 23:40:27.966 00:00:10.367 TCP 23.104.0.1:48440 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:40:34.497 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49670 10 6452 1 2025-08-10 23:37:09.380 00:05:00.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 23:41:16.826 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 23:41:16.873 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 23:41:28.376 00:00:10.328 TCP 23.104.0.1:35200 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:41:34.672 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:50190 10 6452 1 2025-08-10 23:42:28.743 00:00:10.368 TCP 23.104.0.1:43184 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:42:34.878 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-08-10 23:39:09.381 00:05:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 23:43:29.148 00:00:10.368 TCP 23.104.0.1:41058 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:43:35.103 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 10 6452 1 2025-08-10 23:44:29.554 00:00:10.363 TCP 23.104.0.1:39136 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:44:35.317 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49696 10 6452 1 2025-08-10 23:45:29.956 00:00:10.350 TCP 23.104.0.1:37342 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:45:35.533 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36172 10 6452 1 2025-08-10 23:46:16.951 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 23:46:17.014 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 23:46:30.348 00:00:10.366 TCP 23.104.0.1:42422 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:46:35.705 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51700 10 6452 1 2025-08-10 23:43:09.380 00:05:00.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 23:47:30.753 00:00:10.390 TCP 23.104.0.1:46640 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:47:35.921 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42778 10 6452 1 2025-08-10 23:48:31.182 00:00:10.326 TCP 23.104.0.1:38036 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:48:36.129 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55504 10 6452 1 2025-08-10 23:45:09.384 00:05:00.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 23:49:31.550 00:00:10.369 TCP 23.104.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:49:36.341 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50262 10 6452 1 2025-08-10 23:50:36.555 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53818 10 6452 1 2025-08-10 23:50:31.959 00:00:10.373 TCP 23.104.0.1:53240 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:51:17.096 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 23:51:16.984 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 23:51:32.373 00:00:10.364 TCP 23.104.0.1:59250 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:51:36.766 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48224 10 6452 1 2025-08-10 23:52:32.780 00:00:10.331 TCP 23.104.0.1:50892 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:52:36.990 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45156 10 6452 1 2025-08-10 23:49:09.383 00:05:00.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 23:53:33.146 00:00:10.330 TCP 23.104.0.1:41346 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:53:37.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51856 10 6452 1 2025-08-10 23:54:33.518 00:00:10.371 TCP 23.104.0.1:36602 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:54:37.386 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47944 10 6452 1 2025-08-10 23:51:09.389 00:05:00.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 23:55:33.957 00:00:10.364 TCP 23.104.0.1:60140 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:55:37.591 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56940 10 6452 1 2025-08-10 23:56:16.879 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 23:56:17.214 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 23:56:34.361 00:00:10.375 TCP 23.104.0.1:60928 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:56:37.812 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45874 10 6452 1 2025-08-10 23:57:34.771 00:00:10.332 TCP 23.104.0.1:46138 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:57:38.000 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:59408 10 6452 1 2025-08-10 23:58:35.141 00:00:10.363 TCP 23.104.0.1:44374 -> 1.101.0.1:3000 11 1507 1 2025-08-10 23:58:38.185 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42708 10 6452 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1044, avg pps: 0, avg bpp: 316 Time window: 2025-08-10 22:55:09 - 2025-08-10 23:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0020s Wall: 0.0021s flows/second: 79651.0 Runtime: 0.0021s