Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 03:55:09.935 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 03:59:21.955 00:00:10.386 TCP 23.104.0.1:51722 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:59:31.728 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40896 10 6452 1 2025-08-12 04:00:22.382 00:00:10.323 TCP 23.104.0.1:33996 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:00:31.943 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:52450 10 6452 1 2025-08-12 03:57:09.938 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 04:01:22.744 00:00:10.363 TCP 23.104.0.1:33082 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:01:32.185 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37722 10 6452 1 2025-08-12 04:01:50.808 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 04:01:50.639 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 04:02:23.145 00:00:10.368 TCP 23.104.0.1:55202 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:02:32.404 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45882 10 6452 1 2025-08-12 04:03:23.553 00:00:10.365 TCP 23.104.0.1:55518 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:03:32.580 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53478 10 6452 1 2025-08-12 04:04:23.956 00:00:10.362 TCP 23.104.0.1:54240 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:04:32.791 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53432 10 6452 1 2025-08-12 04:01:09.936 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 04:05:24.364 00:00:10.318 TCP 23.104.0.1:53128 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:05:33.001 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44494 10 6452 1 2025-08-12 04:06:24.723 00:00:10.373 TCP 23.104.0.1:41342 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:06:33.221 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44464 10 6452 1 2025-08-12 04:06:50.872 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 04:06:50.680 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 04:03:09.939 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 04:07:25.138 00:00:10.324 TCP 23.104.0.1:39928 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:07:33.459 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:50328 10 6452 1 2025-08-12 04:08:25.507 00:00:10.364 TCP 23.104.0.1:50038 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:08:33.711 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47354 10 6452 1 2025-08-12 04:09:25.913 00:00:10.329 TCP 23.104.0.1:40468 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:09:33.925 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35212 12 10365 1 2025-08-12 04:10:26.281 00:00:10.440 TCP 23.104.0.1:49246 -> 1.101.0.1:3000 15 1926 1 2025-08-12 04:10:34.132 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52908 10 6452 1 2025-08-12 04:07:09.937 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 04:11:26.767 00:00:10.324 TCP 23.104.0.1:53342 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:11:34.345 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57252 10 6452 1 2025-08-12 04:11:51.075 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 04:11:51.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 04:12:27.134 00:00:10.363 TCP 23.104.0.1:38966 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:12:34.563 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45944 10 6452 1 2025-08-12 04:09:09.940 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 04:13:27.540 00:00:10.359 TCP 23.104.0.1:58980 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:13:34.778 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59078 10 6452 1 2025-08-12 04:14:27.939 00:00:10.375 TCP 23.104.0.1:41374 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:14:34.959 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35020 12 6556 1 2025-08-12 04:15:28.361 00:00:10.373 TCP 23.104.0.1:36416 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:15:35.197 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59612 10 6452 1 2025-08-12 04:16:28.771 00:00:10.370 TCP 23.104.0.1:54368 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:16:35.414 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53100 10 6452 1 2025-08-12 04:16:51.162 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 04:16:51.157 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 04:13:09.940 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 04:17:29.180 00:00:10.363 TCP 23.104.0.1:42424 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:17:35.627 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51428 10 6452 1 2025-08-12 04:18:29.581 00:00:10.364 TCP 23.104.0.1:41148 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:18:35.838 00:00:10.516 TCP 1.101.0.1:3000 -> 22.102.0.1:42968 10 6452 1 2025-08-12 04:15:09.945 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 04:19:29.986 00:00:10.369 TCP 23.104.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:19:36.398 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33574 10 6452 1 2025-08-12 04:20:30.391 00:00:10.365 TCP 23.104.0.1:49504 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:20:36.627 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:58812 10 6452 1 2025-08-12 04:21:30.795 00:00:10.366 TCP 23.104.0.1:37598 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:21:36.812 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55952 10 6452 1 2025-08-12 04:21:51.198 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 04:21:51.209 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 04:22:31.200 00:00:10.364 TCP 23.104.0.1:41900 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:22:36.994 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42456 10 6452 1 2025-08-12 04:19:09.943 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 04:23:31.600 00:00:10.370 TCP 23.104.0.1:58216 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:23:37.216 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51552 10 6452 1 2025-08-12 04:24:32.006 00:00:10.399 TCP 23.104.0.1:35372 -> 1.101.0.1:3000 15 1926 1 2025-08-12 04:24:37.393 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:47664 12 10367 1 2025-08-12 04:21:09.947 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 04:25:32.446 00:00:10.368 TCP 23.104.0.1:41592 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:25:37.639 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34770 10 6452 1 2025-08-12 04:26:32.849 00:00:10.339 TCP 23.104.0.1:52830 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:26:51.319 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 04:26:37.848 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54900 10 6452 1 2025-08-12 04:26:51.339 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 04:27:33.228 00:00:10.364 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:27:38.081 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49684 10 6452 1 2025-08-12 04:28:33.629 00:00:10.386 TCP 23.104.0.1:45720 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:28:38.302 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46664 10 6452 1 2025-08-12 04:25:09.945 00:05:00.866 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 04:29:34.089 00:00:10.440 TCP 23.104.0.1:60130 -> 1.101.0.1:3000 15 1926 1 2025-08-12 04:29:38.515 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:44488 12 10367 1 2025-08-12 04:30:34.569 00:00:10.368 TCP 23.104.0.1:49106 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:30:38.757 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36904 10 6452 1 2025-08-12 04:27:09.950 00:05:00.858 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 04:31:51.528 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 04:31:38.969 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:39916 10 6452 1 2025-08-12 04:31:34.981 00:00:10.323 TCP 23.104.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:31:51.525 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 04:32:35.345 00:00:10.322 TCP 23.104.0.1:44700 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:32:39.151 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52976 10 6452 1 2025-08-12 04:33:35.705 00:00:10.369 TCP 23.104.0.1:43456 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:33:39.334 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51640 10 6452 1 2025-08-12 04:34:36.111 00:00:10.375 TCP 23.104.0.1:56056 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:34:39.559 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39922 10 6452 1 2025-08-12 04:31:09.949 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 04:35:39.733 00:00:17.562 TCP 1.101.0.1:3000 -> 22.102.0.1:50370 10 6452 1 2025-08-12 04:35:36.528 00:00:20.869 TCP 23.104.0.1:45144 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:36:51.637 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 04:36:51.710 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 04:36:47.344 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43384 10 6452 1 2025-08-12 04:36:47.451 00:00:10.358 TCP 23.104.0.1:34292 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:33:09.952 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 04:37:47.583 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58998 10 6452 1 2025-08-12 04:37:47.849 00:00:10.384 TCP 23.104.0.1:52236 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:38:47.798 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59452 10 6452 1 2025-08-12 04:38:48.270 00:00:10.360 TCP 23.104.0.1:53678 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:39:48.031 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46862 10 6452 1 2025-08-12 04:39:48.670 00:00:10.318 TCP 23.104.0.1:40246 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:40:48.250 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37168 10 6452 1 2025-08-12 04:40:49.033 00:00:10.365 TCP 23.104.0.1:47752 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:37:09.950 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 04:41:51.364 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 04:41:51.792 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 04:41:48.463 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:33998 10 6452 1 2025-08-12 04:41:49.434 00:00:10.364 TCP 23.104.0.1:41378 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:42:49.838 00:00:10.347 TCP 23.104.0.1:54190 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:42:48.653 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38290 10 6452 1 2025-08-12 04:39:09.952 00:05:00.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 04:43:48.869 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59338 10 6452 1 2025-08-12 04:43:50.222 00:00:10.365 TCP 23.104.0.1:35616 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:44:50.625 00:00:10.326 TCP 23.104.0.1:47432 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:44:49.067 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47946 10 6452 1 2025-08-12 04:45:50.988 00:00:10.362 TCP 23.104.0.1:36544 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:45:49.279 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55630 10 6452 1 2025-08-12 04:46:51.881 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 04:46:51.668 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 04:46:49.490 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45486 10 6452 1 2025-08-12 04:46:51.391 00:00:10.358 TCP 23.104.0.1:58800 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:43:09.951 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 04:47:49.711 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40734 10 6452 1 2025-08-12 04:47:51.784 00:00:10.323 TCP 23.104.0.1:39354 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:48:49.888 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58978 10 6452 1 2025-08-12 04:48:52.146 00:00:10.367 TCP 23.104.0.1:38866 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:45:09.954 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 04:49:50.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38566 10 6452 1 2025-08-12 04:49:52.553 00:00:10.363 TCP 23.104.0.1:38640 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:50:50.295 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52110 10 6452 1 2025-08-12 04:50:52.952 00:00:10.455 TCP 23.104.0.1:54946 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:51:51.902 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 04:51:52.007 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 04:51:50.509 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54226 10 6452 1 2025-08-12 04:51:53.456 00:00:10.365 TCP 23.104.0.1:33114 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:52:50.733 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59966 10 6452 1 2025-08-12 04:52:53.861 00:00:10.375 TCP 23.104.0.1:49512 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:49:09.952 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 04:53:50.951 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45788 10 6452 1 2025-08-12 04:53:54.271 00:00:10.367 TCP 23.104.0.1:45122 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:54:51.176 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:49428 12 10365 1 2025-08-12 04:54:54.679 00:00:10.409 TCP 23.104.0.1:33104 -> 1.101.0.1:3000 15 1926 1 2025-08-12 04:51:09.954 00:05:00.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 04:55:51.421 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35632 10 6452 1 2025-08-12 04:55:55.130 00:00:10.365 TCP 23.104.0.1:59366 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:56:51.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 04:56:51.688 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 04:56:51.632 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39846 10 6452 1 2025-08-12 04:56:55.545 00:00:10.323 TCP 23.104.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-08-12 04:57:51.809 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47138 10 6452 1 2025-08-12 04:57:55.920 00:00:10.379 TCP 23.104.0.1:56306 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 507825, total packets: 1577, avg bps: 1075, avg pps: 0, avg bpp: 322 Time window: 2025-08-12 03:55:09 - 2025-08-12 04:58:06 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0018s User: 0.0027s Wall: 0.0022s flows/second: 74138.3 Runtime: 0.0022s