Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 04:55:06.087 00:04:00.245 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 04:59:06.308 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46464 10 6452 1 2025-08-04 04:59:10.300 00:00:10.361 TCP 23.104.0.1:40116 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:55:06.084 00:06:00.257 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 05:00:06.529 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49238 10 6452 1 2025-08-04 05:00:10.709 00:00:10.366 TCP 23.104.0.1:53272 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:01:06.745 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36944 10 6452 1 2025-08-04 05:01:11.114 00:00:10.363 TCP 23.104.0.1:47770 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:02:06.958 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35734 10 6452 1 2025-08-04 05:02:11.521 00:00:10.364 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:03:00.956 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:03:01.037 00:00:00.013 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:03:07.197 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55366 10 6452 1 2025-08-04 05:03:11.928 00:00:10.398 TCP 23.104.0.1:33086 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:04:07.411 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54970 12 10367 1 2025-08-04 05:04:12.371 00:00:10.491 TCP 23.104.0.1:41178 -> 1.101.0.1:3000 15 1926 1 2025-08-04 05:00:06.088 00:06:00.249 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 05:05:07.649 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44170 10 6452 1 2025-08-04 05:05:12.902 00:00:10.364 TCP 23.104.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:06:07.869 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37816 10 6452 1 2025-08-04 05:06:13.310 00:00:10.367 TCP 23.104.0.1:42292 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:02:06.087 00:06:00.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 05:07:08.102 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-08-04 05:07:13.715 00:00:10.325 TCP 23.104.0.1:47572 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:08:01.030 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:08:01.288 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:08:08.310 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59434 10 6452 1 2025-08-04 05:08:14.099 00:00:10.364 TCP 23.104.0.1:57988 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:09:08.526 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58774 10 6452 1 2025-08-04 05:09:14.502 00:00:10.362 TCP 23.104.0.1:35210 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:10:08.698 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34762 10 6452 1 2025-08-04 05:10:14.906 00:00:10.367 TCP 23.104.0.1:34298 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:11:08.908 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49178 10 6452 1 2025-08-04 05:11:15.316 00:00:10.370 TCP 23.104.0.1:38994 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:07:06.089 00:06:00.249 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 05:12:09.117 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54708 10 6452 1 2025-08-04 05:12:15.726 00:00:10.387 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:13:01.240 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:13:01.237 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:13:09.329 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56560 10 6452 1 2025-08-04 05:13:16.151 00:00:10.365 TCP 23.104.0.1:53120 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:09:06.086 00:06:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-04 05:14:09.545 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60884 10 6452 1 2025-08-04 05:14:16.563 00:00:10.361 TCP 23.104.0.1:46308 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:15:09.777 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57706 10 6452 1 2025-08-04 05:15:16.963 00:00:10.369 TCP 23.104.0.1:48880 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:15:06.341 00:01:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 3 175 1 2025-08-04 05:16:09.990 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:47188 10 6452 1 2025-08-04 05:16:17.373 00:00:10.363 TCP 23.104.0.1:34154 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:17:10.170 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57082 10 6452 1 2025-08-04 05:17:17.776 00:00:10.373 TCP 23.104.0.1:38896 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:18:01.091 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:18:01.368 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:18:10.391 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36552 10 6452 1 2025-08-04 05:18:18.179 00:00:10.367 TCP 23.104.0.1:53082 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:14:06.091 00:06:00.006 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-04 05:19:10.604 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:39918 12 10367 1 2025-08-04 05:19:18.581 00:00:10.441 TCP 23.104.0.1:50928 -> 1.101.0.1:3000 15 1926 1 2025-08-04 05:20:10.845 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42802 10 6452 1 2025-08-04 05:20:19.085 00:00:10.367 TCP 23.104.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:20:06.347 00:01:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 3 194 1 2025-08-04 05:17:06.092 00:04:00.258 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 05:21:11.087 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37680 10 6452 1 2025-08-04 05:21:19.490 00:00:10.372 TCP 23.104.0.1:43996 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:22:11.297 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52896 10 6452 1 2025-08-04 05:22:19.907 00:00:10.366 TCP 23.104.0.1:41726 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:23:01.960 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:23:01.500 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:23:11.512 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42306 10 6452 1 2025-08-04 05:23:20.311 00:00:10.366 TCP 23.104.0.1:51184 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:24:11.725 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42908 10 6452 1 2025-08-04 05:24:20.715 00:00:10.382 TCP 23.104.0.1:58136 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:25:11.951 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:43838 10 6452 1 2025-08-04 05:25:21.138 00:00:10.365 TCP 23.104.0.1:36408 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:22:06.096 00:04:00.255 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 05:22:06.095 00:04:00.259 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 05:26:12.135 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48056 10 6452 1 2025-08-04 05:26:21.543 00:00:10.365 TCP 23.104.0.1:34842 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:27:12.353 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36532 10 6452 1 2025-08-04 05:27:21.948 00:00:10.366 TCP 23.104.0.1:49452 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:28:01.508 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:28:01.269 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:28:12.566 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39998 10 6452 1 2025-08-04 05:28:22.354 00:00:10.364 TCP 23.104.0.1:48572 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:29:12.777 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50530 10 6452 1 2025-08-04 05:29:22.759 00:00:10.384 TCP 23.104.0.1:51220 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:30:12.987 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37174 10 6452 1 2025-08-04 05:30:23.180 00:00:10.322 TCP 23.104.0.1:43186 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:27:06.096 00:04:00.261 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 05:27:06.098 00:04:00.256 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 05:31:13.221 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55132 10 6452 1 2025-08-04 05:31:23.543 00:00:10.323 TCP 23.104.0.1:53588 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:32:13.436 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33400 10 6452 1 2025-08-04 05:32:23.905 00:00:10.363 TCP 23.104.0.1:41268 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:33:01.726 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:33:01.738 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:33:13.669 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35828 10 6452 1 2025-08-04 05:33:24.314 00:00:10.335 TCP 23.104.0.1:48826 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:34:13.887 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44562 10 6452 1 2025-08-04 05:34:24.702 00:00:10.371 TCP 23.104.0.1:41208 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:35:14.108 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55618 10 6452 1 2025-08-04 05:35:25.110 00:00:10.364 TCP 23.104.0.1:47016 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:36:14.323 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59904 10 6452 1 2025-08-04 05:36:25.511 00:00:10.365 TCP 23.104.0.1:47758 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:32:06.097 00:06:00.263 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 05:32:06.099 00:06:00.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 05:37:14.531 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53132 10 6452 1 2025-08-04 05:37:25.917 00:00:10.379 TCP 23.104.0.1:39122 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:38:01.786 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:38:02.005 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:38:14.701 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55438 10 6452 1 2025-08-04 05:38:26.336 00:00:10.327 TCP 23.104.0.1:48768 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:39:14.913 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57190 10 6452 1 2025-08-04 05:39:26.704 00:00:10.361 TCP 23.104.0.1:33244 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:40:15.125 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:55508 10 6452 1 2025-08-04 05:40:27.112 00:00:10.328 TCP 23.104.0.1:53234 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:41:15.388 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34144 10 6452 1 2025-08-04 05:41:27.478 00:00:10.326 TCP 23.104.0.1:58694 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:42:15.597 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47864 10 6452 1 2025-08-04 05:42:27.845 00:00:10.384 TCP 23.104.0.1:57028 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:43:01.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:43:02.153 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:43:15.807 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37340 10 6452 1 2025-08-04 05:43:28.267 00:00:10.385 TCP 23.104.0.1:43118 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:39:06.101 00:06:00.258 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 05:39:06.098 00:06:00.263 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 05:44:16.027 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58258 10 6452 1 2025-08-04 05:44:28.668 00:00:10.323 TCP 23.104.0.1:41296 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:45:16.240 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45784 10 6452 1 2025-08-04 05:45:29.029 00:00:10.337 TCP 23.104.0.1:54072 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:46:16.410 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35408 10 6452 1 2025-08-04 05:46:29.405 00:00:10.363 TCP 23.104.0.1:51564 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:47:16.618 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46690 10 6452 1 2025-08-04 05:47:29.807 00:00:10.370 TCP 23.104.0.1:52846 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:48:01.817 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:46:06.103 00:02:00.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 6 369 1 2025-08-04 05:46:06.101 00:02:00.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 6 369 1 2025-08-04 05:48:02.041 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:48:16.834 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53686 10 6452 1 2025-08-04 05:48:30.213 00:00:10.366 TCP 23.104.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:49:17.073 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46504 10 6452 1 2025-08-04 05:49:30.616 00:00:10.370 TCP 23.104.0.1:37622 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:50:17.296 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38512 10 6452 1 2025-08-04 05:50:31.022 00:00:10.369 TCP 23.104.0.1:47962 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:51:17.514 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40192 10 6452 1 2025-08-04 05:51:31.441 00:00:10.364 TCP 23.104.0.1:60512 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:52:17.731 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42792 10 6452 1 2025-08-04 05:52:31.857 00:00:10.375 TCP 23.104.0.1:36432 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:53:02.059 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:49:06.101 00:04:00.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 05:53:01.852 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:49:06.104 00:04:00.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 05:53:17.903 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38142 10 6452 1 2025-08-04 05:53:32.275 00:00:10.366 TCP 23.104.0.1:35974 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:54:18.115 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59970 10 6452 1 2025-08-04 05:54:32.677 00:00:10.365 TCP 23.104.0.1:57900 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:55:18.336 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50930 10 6452 1 2025-08-04 05:55:33.100 00:00:10.323 TCP 23.104.0.1:36904 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:56:18.547 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47940 10 6452 1 2025-08-04 05:56:33.463 00:00:10.370 TCP 23.104.0.1:53164 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:57:18.765 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53540 10 6452 1 2025-08-04 05:57:33.870 00:00:10.325 TCP 23.104.0.1:49666 -> 1.101.0.1:3000 11 1507 1 2025-08-04 05:58:01.885 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:54:06.104 00:04:00.258 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 05:58:02.087 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:54:06.102 00:04:00.264 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 05:58:18.977 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:59570 10 6452 1 2025-08-04 05:58:34.231 00:00:10.361 TCP 23.104.0.1:44470 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 168, total bytes: 508000, total packets: 1600, avg bps: 1064, avg pps: 0, avg bpp: 317 Time window: 2025-08-04 04:55:06 - 2025-08-04 05:58:44 Total flows processed: 168, passed: 168, Blocks skipped: 0, Bytes read: 17536 Sys: 0.0029s User: 0.0019s Wall: 0.0028s flows/second: 59114.4 Runtime: 0.0029s