Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-05 22:55:06.893 00:05:00.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 22:59:16.360 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47372 10 6452 1 2025-08-05 22:59:37.929 00:00:10.419 TCP 23.104.0.1:37994 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:00:16.574 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35168 10 6452 1 2025-08-05 23:00:38.378 00:00:10.371 TCP 23.104.0.1:58462 -> 1.101.0.1:3000 11 1507 1 2025-08-05 22:57:06.896 00:05:00.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 23:01:16.787 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55732 10 6452 1 2025-08-05 23:01:38.786 00:00:10.322 TCP 23.104.0.1:50284 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:02:17.006 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40014 10 6452 1 2025-08-05 23:02:39.147 00:00:10.322 TCP 23.104.0.1:36762 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:03:17.183 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37658 10 6452 1 2025-08-05 23:03:51.490 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 23:03:51.742 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 23:03:39.508 00:00:10.366 TCP 23.104.0.1:43772 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:04:17.394 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34596 10 6452 1 2025-08-05 23:04:39.911 00:00:10.370 TCP 23.104.0.1:36108 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:01:06.896 00:05:00.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 23:05:17.612 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:33846 10 6452 1 2025-08-05 23:05:40.314 00:00:10.365 TCP 23.104.0.1:52140 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:06:17.800 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48318 10 6452 1 2025-08-05 23:06:40.721 00:00:10.375 TCP 23.104.0.1:39514 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:03:06.906 00:05:00.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 23:07:18.009 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:34824 10 6452 1 2025-08-05 23:07:41.130 00:00:10.327 TCP 23.104.0.1:59434 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:08:18.215 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40336 10 6452 1 2025-08-05 23:08:41.492 00:00:10.363 TCP 23.104.0.1:36426 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:08:51.600 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 23:08:51.903 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 23:09:18.429 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36500 10 6452 1 2025-08-05 23:09:41.894 00:00:10.369 TCP 23.104.0.1:54198 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:10:18.643 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59668 10 6452 1 2025-08-05 23:10:42.297 00:00:10.369 TCP 23.104.0.1:51966 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:07:06.904 00:05:00.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 23:11:18.814 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54538 10 6452 1 2025-08-05 23:11:42.704 00:00:10.365 TCP 23.104.0.1:54610 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:12:19.041 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46996 10 6452 1 2025-08-05 23:12:43.107 00:00:10.320 TCP 23.104.0.1:45008 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:09:06.908 00:05:00.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 23:13:19.251 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42966 10 6452 1 2025-08-05 23:13:51.943 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 23:13:51.543 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 23:13:43.508 00:00:10.370 TCP 23.104.0.1:47470 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:14:19.464 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46698 10 6452 1 2025-08-05 23:14:43.915 00:00:10.363 TCP 23.104.0.1:59518 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:15:19.634 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:56168 10 6452 1 2025-08-05 23:15:44.317 00:00:10.373 TCP 23.104.0.1:46154 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:16:19.841 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59220 10 6452 1 2025-08-05 23:16:44.729 00:00:10.329 TCP 23.104.0.1:37924 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:13:06.907 00:05:00.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 23:17:20.078 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57990 10 6452 1 2025-08-05 23:17:45.103 00:00:10.365 TCP 23.104.0.1:45854 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:18:20.292 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60470 10 6452 1 2025-08-05 23:18:51.850 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 23:18:45.506 00:00:10.446 TCP 23.104.0.1:43648 -> 1.101.0.1:3000 15 1926 1 2025-08-05 23:18:51.994 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 23:15:06.909 00:05:00.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 23:19:20.502 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:56846 12 10367 1 2025-08-05 23:19:45.995 00:00:10.468 TCP 23.104.0.1:47590 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:20:20.744 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34928 10 6452 1 2025-08-05 23:20:46.503 00:00:10.367 TCP 23.104.0.1:53146 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:21:20.961 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-08-05 23:21:46.909 00:00:10.367 TCP 23.104.0.1:60636 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:22:21.183 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58310 10 6452 1 2025-08-05 23:22:47.315 00:00:10.365 TCP 23.104.0.1:56238 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:19:06.906 00:05:00.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 23:23:21.360 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53094 10 6452 1 2025-08-05 23:23:51.928 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 23:23:51.812 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 23:23:47.717 00:00:10.377 TCP 23.104.0.1:39960 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:24:21.591 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44660 10 6452 1 2025-08-05 23:24:48.133 00:00:10.366 TCP 23.104.0.1:51930 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:21:06.913 00:05:00.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 23:25:21.764 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47478 10 6452 1 2025-08-05 23:25:48.536 00:00:10.323 TCP 23.104.0.1:56800 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:26:21.976 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:51932 10 6452 1 2025-08-05 23:26:48.899 00:00:10.370 TCP 23.104.0.1:36852 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:27:22.220 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:36956 10 6452 1 2025-08-05 23:27:49.308 00:00:10.361 TCP 23.104.0.1:58090 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:28:22.512 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-08-05 23:28:51.849 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 23:28:52.020 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 23:28:49.711 00:00:10.365 TCP 23.104.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:25:06.912 00:05:00.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 23:29:22.728 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35286 10 6452 1 2025-08-05 23:29:50.114 00:00:10.361 TCP 23.104.0.1:53576 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:30:22.943 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47664 10 6452 1 2025-08-05 23:30:50.516 00:00:10.367 TCP 23.104.0.1:39508 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:27:06.914 00:05:00.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 23:31:23.187 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50676 10 6452 1 2025-08-05 23:31:50.923 00:00:10.393 TCP 23.104.0.1:60850 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:32:23.402 00:00:10.124 TCP 1.101.0.1:3000 -> 22.102.0.1:42420 10 6452 1 2025-08-05 23:32:51.358 00:00:10.366 TCP 23.104.0.1:45132 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:33:23.565 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39198 10 6452 1 2025-08-05 23:33:51.893 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 23:33:52.099 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 23:33:51.769 00:00:10.373 TCP 23.104.0.1:53152 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:34:23.778 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59960 10 6452 1 2025-08-05 23:34:52.181 00:00:10.364 TCP 23.104.0.1:36622 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:31:06.912 00:05:00.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 23:35:23.990 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42052 10 6452 1 2025-08-05 23:35:52.587 00:00:10.362 TCP 23.104.0.1:54032 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:36:24.235 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46298 10 6452 1 2025-08-05 23:36:53.013 00:00:10.365 TCP 23.104.0.1:58638 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:33:06.915 00:05:00.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 23:37:24.445 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52652 10 6452 1 2025-08-05 23:37:53.416 00:00:10.366 TCP 23.104.0.1:40124 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:38:24.655 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44158 10 6452 1 2025-08-05 23:38:52.019 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 23:38:52.383 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 23:38:53.825 00:00:10.366 TCP 23.104.0.1:39330 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:39:24.864 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38204 10 6452 1 2025-08-05 23:39:54.229 00:00:10.362 TCP 23.104.0.1:52988 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:40:25.101 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38516 10 6452 1 2025-08-05 23:40:54.630 00:00:10.363 TCP 23.104.0.1:40424 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:37:06.913 00:05:00.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 23:41:25.311 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42696 10 6452 1 2025-08-05 23:41:55.034 00:00:10.360 TCP 23.104.0.1:57842 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:42:25.526 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42810 10 6452 1 2025-08-05 23:42:55.437 00:00:10.366 TCP 23.104.0.1:33320 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:39:06.917 00:05:00.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 23:43:25.745 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57340 10 6452 1 2025-08-05 23:43:52.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 23:43:52.174 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 23:43:55.843 00:00:10.357 TCP 23.104.0.1:32828 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:44:25.985 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33372 10 6452 1 2025-08-05 23:44:56.240 00:00:10.326 TCP 23.104.0.1:50010 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:45:26.210 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49486 10 6452 1 2025-08-05 23:45:56.607 00:00:10.369 TCP 23.104.0.1:50960 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:46:26.420 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42138 10 6452 1 2025-08-05 23:46:57.010 00:00:10.363 TCP 23.104.0.1:59344 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:43:06.913 00:05:00.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 23:47:26.636 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33014 10 6452 1 2025-08-05 23:47:57.415 00:00:10.364 TCP 23.104.0.1:55468 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:48:26.847 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53096 10 6452 1 2025-08-05 23:48:52.622 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 23:48:52.392 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 23:45:06.917 00:05:00.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 23:48:57.816 00:00:10.375 TCP 23.104.0.1:55576 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:49:27.029 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33218 10 6452 1 2025-08-05 23:49:58.231 00:00:10.366 TCP 23.104.0.1:37336 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:50:27.238 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47068 10 6452 1 2025-08-05 23:50:58.638 00:00:10.364 TCP 23.104.0.1:45390 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:51:27.455 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41846 10 6452 1 2025-08-05 23:51:59.055 00:00:10.364 TCP 23.104.0.1:53186 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:52:27.668 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33572 10 6452 1 2025-08-05 23:49:06.915 00:05:00.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 23:52:59.456 00:00:10.326 TCP 23.104.0.1:54000 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:53:27.881 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59692 10 6452 1 2025-08-05 23:53:52.695 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 23:53:52.638 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 23:53:59.820 00:00:10.370 TCP 23.104.0.1:51942 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:54:28.100 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60228 10 6452 1 2025-08-05 23:51:06.924 00:05:00.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 23:55:00.230 00:00:10.364 TCP 23.104.0.1:45466 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:55:28.319 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37690 10 6452 1 2025-08-05 23:56:00.632 00:00:10.318 TCP 23.104.0.1:35750 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:56:28.490 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41870 10 6452 1 2025-08-05 23:57:00.993 00:00:10.369 TCP 23.104.0.1:47612 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:57:28.662 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46136 10 6452 1 2025-08-05 23:58:01.400 00:00:10.366 TCP 23.104.0.1:34686 -> 1.101.0.1:3000 11 1507 1 2025-08-05 23:58:28.880 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34474 10 6452 1 Summary: total flows: 161, total bytes: 500671, total packets: 1561, avg bps: 1050, avg pps: 0, avg bpp: 320 Time window: 2025-08-05 22:55:06 - 2025-08-05 23:58:39 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0044s User: 0.0000s Wall: 0.0023s flows/second: 71142.3 Runtime: 0.0023s