Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-11 14:55:09.711 00:05:00.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 14:59:08.484 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43104 10 6452 1 2025-08-11 14:59:12.103 00:00:10.364 TCP 23.104.0.1:46652 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:00:08.701 00:00:18.030 TCP 1.101.0.1:3000 -> 22.102.0.1:58362 10 6452 1 2025-08-11 15:00:12.505 00:00:14.296 TCP 23.104.0.1:55190 -> 1.101.0.1:3000 11 1507 1 2025-08-11 14:57:09.715 00:05:00.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 15:01:16.778 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60504 10 6452 1 2025-08-11 15:01:16.854 00:00:10.382 TCP 23.104.0.1:40078 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:01:35.001 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 15:01:35.161 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 15:02:17.273 00:00:10.325 TCP 23.104.0.1:60900 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:02:17.001 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47656 10 6452 1 2025-08-11 15:03:17.227 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43106 10 6452 1 2025-08-11 15:03:17.637 00:00:10.367 TCP 23.104.0.1:47430 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:04:17.450 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50370 10 6452 1 2025-08-11 15:04:18.051 00:00:10.368 TCP 23.104.0.1:37576 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:01:09.713 00:05:00.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 15:05:17.674 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37498 10 6452 1 2025-08-11 15:05:18.453 00:00:10.364 TCP 23.104.0.1:59168 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:06:17.891 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52152 10 6452 1 2025-08-11 15:06:35.300 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 15:06:18.860 00:00:10.373 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:06:34.968 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 15:03:09.714 00:05:00.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 15:07:19.272 00:00:10.371 TCP 23.104.0.1:48242 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:07:18.117 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42000 10 6452 1 2025-08-11 15:08:19.680 00:00:10.374 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:08:18.342 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38654 10 6452 1 2025-08-11 15:09:18.566 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40288 10 6452 1 2025-08-11 15:09:20.100 00:00:10.323 TCP 23.104.0.1:33606 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:10:18.783 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57998 10 6452 1 2025-08-11 15:10:20.466 00:00:10.369 TCP 23.104.0.1:53696 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:07:09.713 00:05:00.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 15:11:20.871 00:00:10.365 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:11:35.520 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 15:11:19.003 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40468 10 6452 1 2025-08-11 15:11:35.408 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 15:12:19.225 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41870 10 6452 1 2025-08-11 15:12:21.280 00:00:10.374 TCP 23.104.0.1:45924 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:09:09.714 00:05:00.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 15:13:19.447 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47512 10 6452 1 2025-08-11 15:13:21.695 00:00:10.336 TCP 23.104.0.1:40232 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:14:19.665 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36262 10 6452 1 2025-08-11 15:14:22.095 00:00:10.363 TCP 23.104.0.1:60200 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:15:19.892 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48610 10 6452 1 2025-08-11 15:15:22.497 00:00:10.365 TCP 23.104.0.1:57070 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:16:20.108 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33914 10 6452 1 2025-08-11 15:16:35.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 15:16:22.901 00:00:10.366 TCP 23.104.0.1:48148 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:16:35.362 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 15:13:09.713 00:05:00.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 15:17:20.276 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53866 10 6452 1 2025-08-11 15:17:23.307 00:00:10.364 TCP 23.104.0.1:49128 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:18:20.517 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49976 10 6452 1 2025-08-11 15:18:23.710 00:00:10.369 TCP 23.104.0.1:47308 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:15:09.715 00:05:00.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 15:19:20.734 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56872 10 6452 1 2025-08-11 15:19:24.119 00:00:10.324 TCP 23.104.0.1:39912 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:20:20.943 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48238 10 6452 1 2025-08-11 15:20:24.477 00:00:10.377 TCP 23.104.0.1:43334 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:21:21.169 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38770 10 6452 1 2025-08-11 15:21:35.383 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 15:21:24.902 00:00:10.370 TCP 23.104.0.1:52302 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:21:35.529 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 15:22:21.383 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41448 10 6452 1 2025-08-11 15:22:25.312 00:00:10.367 TCP 23.104.0.1:49276 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:19:09.715 00:05:00.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 15:23:21.595 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50082 10 6452 1 2025-08-11 15:23:25.715 00:00:10.392 TCP 23.104.0.1:55712 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:24:21.805 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33564 10 6452 1 2025-08-11 15:24:26.145 00:00:10.327 TCP 23.104.0.1:46124 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:21:09.717 00:05:00.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 15:25:26.510 00:00:10.324 TCP 23.104.0.1:52824 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:25:22.014 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40732 10 6452 1 2025-08-11 15:26:35.903 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 15:26:22.230 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45442 10 6452 1 2025-08-11 15:26:35.586 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 15:26:26.871 00:00:10.364 TCP 23.104.0.1:60728 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:27:22.402 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54150 10 6452 1 2025-08-11 15:27:27.279 00:00:10.369 TCP 23.104.0.1:38424 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:28:22.580 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41930 10 6452 1 2025-08-11 15:28:27.683 00:00:10.369 TCP 23.104.0.1:54946 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:25:09.715 00:05:00.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 15:29:22.793 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55000 10 6452 1 2025-08-11 15:29:28.108 00:00:10.328 TCP 23.104.0.1:53036 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:30:23.014 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34402 10 6452 1 2025-08-11 15:30:28.472 00:00:10.365 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:27:09.718 00:05:00.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 15:31:23.184 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35932 10 6452 1 2025-08-11 15:31:35.644 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 15:31:35.870 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 15:31:28.873 00:00:10.326 TCP 23.104.0.1:49922 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:32:23.399 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59360 10 6452 1 2025-08-11 15:32:29.238 00:00:10.367 TCP 23.104.0.1:53446 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:33:23.613 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57800 10 6452 1 2025-08-11 15:33:29.644 00:00:10.368 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:34:23.833 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49036 10 6452 1 2025-08-11 15:34:30.049 00:00:10.367 TCP 23.104.0.1:46386 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:31:09.716 00:05:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 15:35:24.067 00:00:10.348 TCP 1.101.0.1:3000 -> 22.102.0.1:40292 10 6452 1 2025-08-11 15:35:30.454 00:00:10.360 TCP 23.104.0.1:46188 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:36:35.680 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 15:36:24.455 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43332 10 6452 1 2025-08-11 15:36:35.725 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 15:36:30.852 00:00:10.375 TCP 23.104.0.1:57038 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:33:09.719 00:05:00.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 15:37:24.677 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48124 10 6452 1 2025-08-11 15:37:31.268 00:00:10.364 TCP 23.104.0.1:47980 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:38:24.898 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33146 10 6452 1 2025-08-11 15:38:31.669 00:00:10.320 TCP 23.104.0.1:43050 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:39:25.126 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41754 10 6452 1 2025-08-11 15:39:32.030 00:00:10.365 TCP 23.104.0.1:48356 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:40:25.349 00:00:10.374 TCP 1.101.0.1:3000 -> 22.102.0.1:53726 10 6452 1 2025-08-11 15:40:32.438 00:00:10.369 TCP 23.104.0.1:55558 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:37:09.718 00:05:00.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 15:41:36.141 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 15:41:25.767 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52430 10 6452 1 2025-08-11 15:41:36.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 15:41:32.848 00:00:10.379 TCP 23.104.0.1:48226 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:42:25.991 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:37862 10 6452 1 2025-08-11 15:42:33.267 00:00:10.327 TCP 23.104.0.1:57064 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:39:09.720 00:05:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 15:43:26.180 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57070 10 6452 1 2025-08-11 15:43:33.635 00:00:10.366 TCP 23.104.0.1:43718 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:44:26.397 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34766 10 6452 1 2025-08-11 15:44:34.050 00:00:10.337 TCP 23.104.0.1:35992 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:45:26.568 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54240 10 6452 1 2025-08-11 15:45:34.433 00:00:10.367 TCP 23.104.0.1:40810 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:46:35.830 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 15:46:36.204 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 15:46:26.779 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46100 10 6452 1 2025-08-11 15:46:34.839 00:00:10.394 TCP 23.104.0.1:54880 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:43:09.717 00:05:00.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 15:47:27.007 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51144 10 6452 1 2025-08-11 15:47:35.274 00:00:10.359 TCP 23.104.0.1:52850 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:48:27.228 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34836 10 6452 1 2025-08-11 15:48:35.672 00:00:10.379 TCP 23.104.0.1:56408 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:45:09.722 00:05:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 15:49:27.451 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37214 10 6452 1 2025-08-11 15:49:36.105 00:00:10.373 TCP 23.104.0.1:38204 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:50:27.629 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58350 10 6452 1 2025-08-11 15:50:36.510 00:00:10.368 TCP 23.104.0.1:47476 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:51:36.173 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 15:51:36.285 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 15:51:27.838 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40350 10 6452 1 2025-08-11 15:51:36.913 00:00:10.371 TCP 23.104.0.1:51256 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:52:28.074 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52064 10 6452 1 2025-08-11 15:52:37.320 00:00:10.366 TCP 23.104.0.1:55430 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:49:09.722 00:05:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 15:53:28.286 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36480 10 6452 1 2025-08-11 15:53:37.725 00:00:10.369 TCP 23.104.0.1:53932 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:54:28.497 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55772 10 6452 1 2025-08-11 15:54:38.132 00:00:10.362 TCP 23.104.0.1:40204 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:51:09.724 00:05:00.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 15:55:28.717 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6452 1 2025-08-11 15:55:38.533 00:00:10.365 TCP 23.104.0.1:59308 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:56:36.220 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 15:56:36.344 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 15:56:28.943 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48248 10 6452 1 2025-08-11 15:56:38.940 00:00:10.335 TCP 23.104.0.1:59984 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:57:29.180 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50250 10 6452 1 2025-08-11 15:57:39.317 00:00:10.371 TCP 23.104.0.1:41796 -> 1.101.0.1:3000 11 1507 1 2025-08-11 15:58:29.401 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54638 10 6452 1 2025-08-11 15:58:39.725 00:00:10.381 TCP 23.104.0.1:35106 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1043, avg pps: 0, avg bpp: 317 Time window: 2025-08-11 14:55:09 - 2025-08-11 15:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0020s User: 0.0020s Wall: 0.0015s flows/second: 112103.3 Runtime: 0.0015s