Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-05 16:55:06.775 00:05:00.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 16:58:58.744 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33512 10 6452 1 2025-08-05 16:59:10.177 00:00:10.374 TCP 23.104.0.1:49102 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:59:58.954 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:48868 12 6556 1 2025-08-05 17:00:10.587 00:00:10.364 TCP 23.104.0.1:46284 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:00:59.200 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35644 10 6452 1 2025-08-05 16:57:06.778 00:05:00.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 17:01:10.992 00:00:10.369 TCP 23.104.0.1:47540 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:01:59.416 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44454 10 6452 1 2025-08-05 17:02:11.397 00:00:10.365 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:02:59.630 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46702 10 6452 1 2025-08-05 17:03:11.802 00:00:10.366 TCP 23.104.0.1:34644 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:03:44.273 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 17:03:44.589 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 17:03:59.842 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36248 10 6452 1 2025-08-05 17:04:12.210 00:00:10.367 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:01:06.778 00:05:00.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 17:05:00.014 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44084 10 6452 1 2025-08-05 17:05:12.614 00:00:10.383 TCP 23.104.0.1:49274 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:06:00.229 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57818 10 6452 1 2025-08-05 17:06:13.086 00:00:10.362 TCP 23.104.0.1:42090 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:03:06.780 00:05:00.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 17:07:00.441 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58462 10 6452 1 2025-08-05 17:07:13.484 00:00:10.326 TCP 23.104.0.1:37538 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:08:00.660 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58724 10 6452 1 2025-08-05 17:08:13.848 00:00:10.346 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:08:44.234 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 17:08:44.477 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 17:09:00.875 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40998 10 6452 1 2025-08-05 17:09:14.236 00:00:10.330 TCP 23.104.0.1:41476 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:10:01.101 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32796 10 6452 1 2025-08-05 17:10:14.598 00:00:10.368 TCP 23.104.0.1:42142 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:11:01.312 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57590 10 6452 1 2025-08-05 17:07:06.780 00:05:00.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 17:11:15.001 00:00:10.372 TCP 23.104.0.1:43844 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:12:01.524 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44566 10 6452 1 2025-08-05 17:12:15.411 00:00:10.366 TCP 23.104.0.1:54384 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:13:01.738 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:37364 11 6504 1 2025-08-05 17:09:06.785 00:05:00.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 17:13:15.811 00:00:10.365 TCP 23.104.0.1:35562 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:13:44.503 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 17:13:44.515 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 17:14:02.035 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35896 10 6452 1 2025-08-05 17:14:16.214 00:00:10.327 TCP 23.104.0.1:60976 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:15:02.215 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46112 10 6452 1 2025-08-05 17:15:16.574 00:00:10.365 TCP 23.104.0.1:60028 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:16:02.424 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38164 10 6452 1 2025-08-05 17:16:16.973 00:00:10.367 TCP 23.104.0.1:42176 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:13:06.783 00:05:00.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 17:17:02.634 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55570 10 6452 1 2025-08-05 17:17:17.376 00:00:10.363 TCP 23.104.0.1:53764 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:18:02.848 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58888 10 6452 1 2025-08-05 17:18:17.780 00:00:10.366 TCP 23.104.0.1:38896 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:18:44.787 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 17:18:44.717 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 17:15:06.786 00:05:00.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 17:19:03.081 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45054 10 6452 1 2025-08-05 17:19:18.188 00:00:10.363 TCP 23.104.0.1:56460 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:20:03.302 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49714 10 6452 1 2025-08-05 17:20:18.587 00:00:10.368 TCP 23.104.0.1:48252 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:21:03.539 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33990 10 6452 1 2025-08-05 17:21:18.994 00:00:10.365 TCP 23.104.0.1:56512 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:22:03.752 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:53200 10 6452 1 2025-08-05 17:22:19.398 00:00:10.322 TCP 23.104.0.1:50982 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:19:06.785 00:05:00.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 17:23:03.917 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38530 10 6452 1 2025-08-05 17:23:19.759 00:00:10.334 TCP 23.104.0.1:55894 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:23:44.865 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 17:23:44.833 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 17:24:04.131 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51050 10 6452 1 2025-08-05 17:24:20.132 00:00:10.361 TCP 23.104.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:21:06.788 00:05:00.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 17:25:04.301 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47072 10 6452 1 2025-08-05 17:25:20.534 00:00:10.858 TCP 23.104.0.1:59356 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:26:04.514 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33614 10 6452 1 2025-08-05 17:26:21.434 00:00:10.366 TCP 23.104.0.1:55640 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:27:04.730 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 10 6452 1 2025-08-05 17:27:21.842 00:00:10.398 TCP 23.104.0.1:55148 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:28:04.954 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51572 10 6452 1 2025-08-05 17:28:22.278 00:00:10.376 TCP 23.104.0.1:35978 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:28:45.158 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 17:28:44.820 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 17:25:06.786 00:05:00.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 17:29:05.196 00:00:11.392 TCP 1.101.0.1:3000 -> 22.102.0.1:49526 11 6504 1 2025-08-05 17:29:22.707 00:00:10.376 TCP 23.104.0.1:58264 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:30:06.629 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:48482 10 6452 1 2025-08-05 17:30:23.124 00:00:10.367 TCP 23.104.0.1:36880 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:27:06.789 00:05:00.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 17:31:06.816 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39810 10 6452 1 2025-08-05 17:31:23.528 00:00:10.368 TCP 23.104.0.1:55650 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:32:07.039 00:00:10.352 TCP 1.101.0.1:3000 -> 22.102.0.1:42596 10 6452 1 2025-08-05 17:32:23.930 00:00:10.371 TCP 23.104.0.1:44248 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:33:07.430 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56618 10 6452 1 2025-08-05 17:33:24.346 00:00:10.360 TCP 23.104.0.1:44718 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:33:45.007 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 17:33:44.890 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 17:34:07.604 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44134 10 6452 1 2025-08-05 17:34:24.750 00:00:10.388 TCP 23.104.0.1:59196 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:31:06.786 00:05:00.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 17:35:07.826 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59650 10 6452 1 2025-08-05 17:35:25.172 00:00:10.319 TCP 23.104.0.1:49960 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:36:08.078 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43152 10 6452 1 2025-08-05 17:36:25.529 00:00:10.362 TCP 23.104.0.1:54814 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:33:06.789 00:05:00.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 17:37:08.255 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49986 10 6452 1 2025-08-05 17:37:25.939 00:00:10.616 TCP 23.104.0.1:33814 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:38:08.427 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45948 10 6452 1 2025-08-05 17:38:26.597 00:00:10.328 TCP 23.104.0.1:43452 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:38:45.090 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 17:38:45.040 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 17:39:08.638 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48118 10 6452 1 2025-08-05 17:39:26.957 00:00:10.367 TCP 23.104.0.1:48112 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:40:08.856 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58400 10 6452 1 2025-08-05 17:40:27.363 00:00:10.366 TCP 23.104.0.1:53762 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:37:06.789 00:05:00.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 17:41:09.096 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59808 10 6452 1 2025-08-05 17:41:27.767 00:00:10.392 TCP 23.104.0.1:45442 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:42:09.272 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51886 10 6452 1 2025-08-05 17:42:28.198 00:00:10.368 TCP 23.104.0.1:35878 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:39:06.792 00:05:00.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 17:43:09.483 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40910 10 6452 1 2025-08-05 17:43:28.603 00:00:10.366 TCP 23.104.0.1:43052 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:43:45.234 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 17:43:45.276 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 17:44:09.717 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52216 10 6452 1 2025-08-05 17:44:29.012 00:00:10.323 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:45:09.894 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45020 10 6452 1 2025-08-05 17:45:29.376 00:00:10.324 TCP 23.104.0.1:51588 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:46:10.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35168 10 6452 1 2025-08-05 17:46:29.741 00:00:10.365 TCP 23.104.0.1:44922 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:43:06.792 00:05:00.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 17:47:10.325 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41348 10 6452 1 2025-08-05 17:47:30.145 00:00:10.362 TCP 23.104.0.1:34624 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:48:10.536 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52368 10 6452 1 2025-08-05 17:48:30.547 00:00:10.369 TCP 23.104.0.1:49108 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:48:45.299 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 17:48:45.249 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 17:45:06.796 00:05:00.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 17:49:10.755 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48024 10 6452 1 2025-08-05 17:49:30.957 00:00:10.335 TCP 23.104.0.1:39876 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:50:10.972 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42286 10 6452 1 2025-08-05 17:50:31.330 00:00:10.371 TCP 23.104.0.1:49874 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:51:11.204 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57622 10 6452 1 2025-08-05 17:51:31.736 00:00:10.364 TCP 23.104.0.1:37360 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:52:11.418 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:56028 10 6452 1 2025-08-05 17:52:32.140 00:00:10.360 TCP 23.104.0.1:58310 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:49:06.793 00:05:00.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 17:53:11.580 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47928 10 6452 1 2025-08-05 17:53:45.017 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 17:53:32.542 00:00:10.360 TCP 23.104.0.1:46758 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:53:45.221 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 17:54:11.796 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49528 10 6452 1 2025-08-05 17:54:32.937 00:00:10.380 TCP 23.104.0.1:46796 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:51:06.795 00:05:00.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 17:55:12.005 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42514 10 6452 1 2025-08-05 17:55:33.360 00:00:10.359 TCP 23.104.0.1:49294 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:56:12.220 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37008 10 6452 1 2025-08-05 17:56:33.755 00:00:10.368 TCP 23.104.0.1:34458 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:57:12.434 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59568 10 6452 1 2025-08-05 17:57:34.161 00:00:10.365 TCP 23.104.0.1:41818 -> 1.101.0.1:3000 11 1507 1 2025-08-05 17:58:12.657 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6452 1 2025-08-05 17:58:45.659 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 17:58:45.513 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 17:58:34.569 00:00:10.439 TCP 23.104.0.1:34216 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 164, total bytes: 498975, total packets: 1580, avg bps: 1045, avg pps: 0, avg bpp: 315 Time window: 2025-08-05 16:55:06 - 2025-08-05 17:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0015s Wall: 0.0025s flows/second: 64388.8 Runtime: 0.0026s