Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 10:54:11.945 00:05:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 667 1 2025-08-14 10:58:59.108 00:00:10.358 TCP 23.104.0.1:43250 -> 1.101.0.1:3000 12 1559 1 2025-08-14 10:59:40.067 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51330 10 6452 1 2025-08-14 10:59:59.513 00:00:10.366 TCP 23.104.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-08-14 10:56:11.159 00:04:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 11:00:40.295 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36380 10 6452 1 2025-08-14 11:00:59.921 00:00:10.384 TCP 23.104.0.1:52222 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:01:40.468 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44462 10 6452 1 2025-08-14 11:02:00.348 00:00:10.324 TCP 23.104.0.1:37366 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:02:40.690 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56274 10 6452 1 2025-08-14 11:02:56.966 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 11:02:56.875 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 11:03:00.712 00:00:10.379 TCP 23.104.0.1:49676 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:03:40.907 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60138 10 6452 1 2025-08-14 11:04:01.131 00:00:10.372 TCP 23.104.0.1:55316 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:00:11.157 00:04:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 11:04:41.125 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49638 10 6452 1 2025-08-14 11:05:01.539 00:00:10.363 TCP 23.104.0.1:40772 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:01:11.160 00:04:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 11:05:41.301 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53194 10 6452 1 2025-08-14 11:06:01.935 00:00:10.381 TCP 23.104.0.1:43802 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:06:41.512 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41542 10 6452 1 2025-08-14 11:07:02.352 00:00:10.360 TCP 23.104.0.1:37014 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:07:41.726 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40850 10 6452 1 2025-08-14 11:07:57.158 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 11:07:57.168 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 11:08:02.753 00:00:10.384 TCP 23.104.0.1:35974 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:08:41.936 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58258 10 6452 1 2025-08-14 11:05:11.158 00:04:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 11:09:03.178 00:00:11.167 TCP 23.104.0.1:53366 -> 1.101.0.1:3000 13 1611 1 2025-08-14 11:09:42.171 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42830 10 6452 1 2025-08-14 11:06:11.160 00:04:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 11:10:04.386 00:00:10.368 TCP 23.104.0.1:51044 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:10:42.385 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35440 10 6452 1 2025-08-14 11:11:04.796 00:00:10.366 TCP 23.104.0.1:33286 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:11:42.605 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52136 10 6452 1 2025-08-14 11:12:05.196 00:00:10.372 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:12:42.827 00:00:10.264 TCP 1.101.0.1:3000 -> 22.102.0.1:52996 10 6452 1 2025-08-14 11:12:57.498 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 11:12:57.070 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 11:13:05.604 00:00:10.366 TCP 23.104.0.1:41334 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:13:43.129 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34898 10 6452 1 2025-08-14 11:10:11.158 00:04:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 11:14:06.011 00:00:10.366 TCP 23.104.0.1:41004 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:14:43.336 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52614 10 6452 1 2025-08-14 11:11:11.161 00:04:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 11:15:06.418 00:00:10.327 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:15:43.509 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51354 10 6452 1 2025-08-14 11:16:06.780 00:00:10.367 TCP 23.104.0.1:53244 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:16:43.686 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58158 10 6452 1 2025-08-14 11:17:07.187 00:00:10.321 TCP 23.104.0.1:34156 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:17:43.862 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52936 10 6452 1 2025-08-14 11:17:57.076 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 11:17:57.299 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 11:18:07.548 00:00:10.372 TCP 23.104.0.1:45880 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:18:44.092 00:00:10.256 TCP 1.101.0.1:3000 -> 22.102.0.1:50798 13 6608 1 2025-08-14 11:15:11.159 00:04:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 11:19:07.965 00:00:10.372 TCP 23.104.0.1:33628 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:19:44.396 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38024 10 6452 1 2025-08-14 11:20:08.378 00:00:10.362 TCP 23.104.0.1:46102 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:20:44.613 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41462 10 6452 1 2025-08-14 11:16:11.163 00:06:00.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-14 11:21:08.780 00:00:10.365 TCP 23.104.0.1:47260 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:21:44.785 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:51884 10 6452 1 2025-08-14 11:22:11.953 00:00:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 1 71 1 2025-08-14 11:22:09.187 00:00:10.365 TCP 23.104.0.1:33028 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:22:44.958 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33602 10 6452 1 2025-08-14 11:22:57.487 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 11:22:57.319 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 11:23:09.588 00:00:10.363 TCP 23.104.0.1:52388 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:23:45.201 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52316 10 6452 1 2025-08-14 11:24:09.989 00:00:10.368 TCP 23.104.0.1:56076 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:24:45.425 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51866 10 6452 1 2025-08-14 11:20:11.161 00:06:00.008 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-14 11:25:10.393 00:00:10.362 TCP 23.104.0.1:49350 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:25:45.604 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-08-14 11:26:11.964 00:00:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 1 52 1 2025-08-14 11:26:10.793 00:00:10.369 TCP 23.104.0.1:50080 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:26:45.820 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47880 10 6452 1 2025-08-14 11:23:11.168 00:04:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 11:27:11.202 00:00:10.367 TCP 23.104.0.1:58436 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:27:46.038 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48144 10 6452 1 2025-08-14 11:27:57.607 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 11:27:57.793 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 11:28:11.607 00:00:10.364 TCP 23.104.0.1:49660 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:28:46.246 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50796 10 6452 1 2025-08-14 11:29:12.009 00:00:10.367 TCP 23.104.0.1:53994 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:29:46.457 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41204 10 6452 1 2025-08-14 11:30:12.418 00:00:10.364 TCP 23.104.0.1:58674 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:30:46.665 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41356 10 6452 1 2025-08-14 11:27:11.169 00:04:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 11:31:12.827 00:00:10.381 TCP 23.104.0.1:39380 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:31:46.878 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38966 10 6452 1 2025-08-14 11:28:11.176 00:04:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 11:32:13.245 00:00:10.321 TCP 23.104.0.1:42898 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:32:47.068 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49870 10 6452 1 2025-08-14 11:32:57.712 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 11:32:57.772 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 11:33:13.608 00:00:10.363 TCP 23.104.0.1:37228 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:33:47.282 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34850 10 6452 1 2025-08-14 11:34:14.010 00:00:10.361 TCP 23.104.0.1:56352 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:34:47.497 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57146 10 6452 1 2025-08-14 11:35:14.406 00:00:10.436 TCP 23.104.0.1:56546 -> 1.101.0.1:3000 15 1926 1 2025-08-14 11:35:47.671 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42862 13 13939 1 2025-08-14 11:32:11.175 00:04:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 11:36:14.882 00:00:10.389 TCP 23.104.0.1:43392 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:36:47.914 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:32992 10 6452 1 2025-08-14 11:33:11.177 00:04:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 11:37:15.312 00:00:10.361 TCP 23.104.0.1:58622 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:37:48.099 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56960 10 6452 1 2025-08-14 11:37:57.750 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 11:37:57.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 11:38:15.707 00:00:10.367 TCP 23.104.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:38:48.313 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43850 10 6452 1 2025-08-14 11:39:16.117 00:00:10.322 TCP 23.104.0.1:54822 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:39:48.527 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38812 10 6452 1 2025-08-14 11:40:16.479 00:00:10.360 TCP 23.104.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:40:48.748 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50948 10 6452 1 2025-08-14 11:37:11.176 00:04:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 11:41:16.884 00:00:10.385 TCP 23.104.0.1:36180 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:41:48.966 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43998 12 6556 1 2025-08-14 11:38:11.179 00:04:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 11:42:17.302 00:00:10.403 TCP 23.104.0.1:56092 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:42:49.201 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49916 10 6452 1 2025-08-14 11:42:57.734 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 11:42:57.866 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 11:43:17.745 00:00:10.330 TCP 23.104.0.1:43036 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:43:49.430 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47070 10 6452 1 2025-08-14 11:44:18.110 00:00:10.324 TCP 23.104.0.1:40512 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:44:49.645 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-08-14 11:45:18.475 00:00:10.369 TCP 23.104.0.1:60238 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:45:49.859 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:49146 10 6452 1 2025-08-14 11:42:11.176 00:04:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 11:46:18.877 00:00:10.368 TCP 23.104.0.1:33874 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:46:50.096 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54820 10 6452 1 2025-08-14 11:43:11.178 00:04:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 11:47:19.285 00:00:10.328 TCP 23.104.0.1:36896 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:47:58.173 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 11:47:58.122 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 11:47:50.266 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60068 10 6452 1 2025-08-14 11:48:19.658 00:00:10.365 TCP 23.104.0.1:55738 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:48:50.490 00:00:14.965 TCP 1.101.0.1:3000 -> 22.102.0.1:54992 10 6452 1 2025-08-14 11:49:20.091 00:00:10.368 TCP 23.104.0.1:41720 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:49:55.515 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43412 10 6452 1 2025-08-14 11:50:20.497 00:00:10.324 TCP 23.104.0.1:48374 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:50:55.747 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33470 10 6452 1 2025-08-14 11:47:11.177 00:04:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 11:51:20.859 00:00:10.329 TCP 23.104.0.1:46716 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:51:55.967 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:58556 10 6452 1 2025-08-14 11:48:11.181 00:04:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 11:52:21.239 00:00:10.326 TCP 23.104.0.1:52502 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:52:57.977 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 11:52:57.863 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 11:52:56.160 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54816 10 6452 1 2025-08-14 11:53:21.602 00:00:10.366 TCP 23.104.0.1:49166 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:53:56.373 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40346 10 6452 1 2025-08-14 11:53:11.184 00:01:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 4 246 1 2025-08-14 11:54:22.010 00:00:10.368 TCP 23.104.0.1:38618 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:54:56.588 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49126 10 6452 1 2025-08-14 11:55:22.412 00:00:10.368 TCP 23.104.0.1:43814 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:55:56.807 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40590 10 6452 1 2025-08-14 11:52:11.181 00:04:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 11:56:22.819 00:00:10.327 TCP 23.104.0.1:45358 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:56:57.027 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41422 10 6452 1 2025-08-14 11:57:23.186 00:00:10.327 TCP 23.104.0.1:54806 -> 1.101.0.1:3000 11 1507 1 2025-08-14 11:57:58.031 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 11:57:58.082 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 11:57:57.238 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:44414 10 6452 1 2025-08-14 11:57:11.186 00:01:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 4 246 1 2025-08-14 11:58:23.550 00:00:11.088 TCP 23.104.0.1:58646 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 170, total bytes: 500639, total packets: 1584, avg bps: 1036, avg pps: 0, avg bpp: 316 Time window: 2025-08-14 10:54:11 - 2025-08-14 11:58:34 Total flows processed: 170, passed: 170, Blocks skipped: 0, Bytes read: 17744 Sys: 0.0048s User: 0.0000s Wall: 0.0023s flows/second: 72551.0 Runtime: 0.0024s