Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 01:55:09.902 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 01:59:04.011 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54224 10 6452 1 2025-08-12 01:59:19.213 00:00:10.366 TCP 23.104.0.1:44750 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:00:04.227 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57908 10 6452 1 2025-08-12 02:00:19.618 00:00:10.361 TCP 23.104.0.1:43474 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:57:09.906 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 02:01:04.467 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47292 10 6452 1 2025-08-12 02:01:20.016 00:00:10.367 TCP 23.104.0.1:33378 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:01:48.355 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 02:01:48.561 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 02:02:04.689 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34316 10 6452 1 2025-08-12 02:02:20.418 00:00:10.328 TCP 23.104.0.1:59352 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:03:04.913 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35558 10 6452 1 2025-08-12 02:03:20.788 00:00:10.327 TCP 23.104.0.1:38264 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:04:05.132 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49014 10 6452 1 2025-08-12 02:04:21.151 00:00:10.327 TCP 23.104.0.1:38304 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:01:09.905 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 02:05:05.355 00:00:10.514 TCP 1.101.0.1:3000 -> 22.102.0.1:43916 13 13939 1 2025-08-12 02:05:21.512 00:00:10.394 TCP 23.104.0.1:51338 -> 1.101.0.1:3000 15 1926 1 2025-08-12 02:06:05.918 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:36916 10 6452 1 2025-08-12 02:06:21.950 00:00:10.367 TCP 23.104.0.1:36470 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:06:48.485 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 02:06:48.381 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 02:03:09.918 00:05:00.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 02:07:06.172 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43464 10 6452 1 2025-08-12 02:07:22.360 00:00:10.322 TCP 23.104.0.1:50902 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:08:06.352 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37938 10 6452 1 2025-08-12 02:08:22.725 00:00:10.335 TCP 23.104.0.1:55528 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:09:06.567 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58652 10 6452 1 2025-08-12 02:09:23.104 00:00:10.365 TCP 23.104.0.1:50324 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:10:06.784 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33426 10 6452 1 2025-08-12 02:10:23.511 00:00:10.366 TCP 23.104.0.1:41882 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:07:09.909 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 02:11:07.004 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53666 10 6452 1 2025-08-12 02:11:23.915 00:00:10.326 TCP 23.104.0.1:45102 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:11:48.642 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 02:11:48.309 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 02:12:07.226 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55550 10 6452 1 2025-08-12 02:12:24.273 00:00:10.325 TCP 23.104.0.1:39694 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:09:09.910 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 02:13:07.450 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39840 10 6452 1 2025-08-12 02:13:24.637 00:00:10.360 TCP 23.104.0.1:40002 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:14:07.667 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45824 10 6452 1 2025-08-12 02:14:25.033 00:00:10.367 TCP 23.104.0.1:36008 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:15:07.889 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:41416 10 6452 1 2025-08-12 02:15:25.436 00:00:10.367 TCP 23.104.0.1:44068 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:16:08.091 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50790 10 6452 1 2025-08-12 02:16:25.839 00:00:10.342 TCP 23.104.0.1:55888 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:16:48.686 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 02:16:48.638 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 02:13:09.908 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 02:17:08.305 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59886 10 6452 1 2025-08-12 02:17:26.222 00:00:10.328 TCP 23.104.0.1:33136 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:18:08.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59690 10 6452 1 2025-08-12 02:18:26.592 00:00:10.327 TCP 23.104.0.1:52554 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:15:09.912 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 02:19:08.736 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42846 10 6452 1 2025-08-12 02:19:26.968 00:00:10.381 TCP 23.104.0.1:53628 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:20:08.950 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46012 10 6452 1 2025-08-12 02:20:27.404 00:00:10.369 TCP 23.104.0.1:34360 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:21:09.158 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54522 10 6452 1 2025-08-12 02:21:27.816 00:00:10.412 TCP 23.104.0.1:42180 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:21:48.873 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 02:21:48.459 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 02:22:09.377 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59634 10 6452 1 2025-08-12 02:22:28.275 00:00:10.361 TCP 23.104.0.1:53850 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:19:09.909 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 02:23:09.594 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46832 10 6452 1 2025-08-12 02:23:28.677 00:00:10.322 TCP 23.104.0.1:52244 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:24:09.809 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52084 10 6452 1 2025-08-12 02:24:29.056 00:00:10.437 TCP 23.104.0.1:46312 -> 1.101.0.1:3000 15 1926 1 2025-08-12 02:21:09.912 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 02:25:09.976 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:37020 12 10367 1 2025-08-12 02:25:29.531 00:00:10.363 TCP 23.104.0.1:55412 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:26:10.247 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56288 10 6452 1 2025-08-12 02:26:29.932 00:00:10.652 TCP 23.104.0.1:45606 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:26:48.942 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 02:26:48.924 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 02:27:10.456 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60918 10 6452 1 2025-08-12 02:27:30.622 00:00:10.325 TCP 23.104.0.1:49152 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:28:10.627 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43056 10 6452 1 2025-08-12 02:28:30.985 00:00:10.368 TCP 23.104.0.1:34270 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:25:09.912 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 02:29:10.851 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34792 10 6452 1 2025-08-12 02:29:31.392 00:00:10.363 TCP 23.104.0.1:37180 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:30:11.034 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54878 10 6452 1 2025-08-12 02:30:31.797 00:00:10.343 TCP 23.104.0.1:59598 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:27:09.915 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 02:31:11.255 00:00:10.675 TCP 1.101.0.1:3000 -> 22.102.0.1:50816 10 6452 1 2025-08-12 02:31:32.177 00:00:10.413 TCP 23.104.0.1:40378 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:31:48.839 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 02:31:49.203 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 02:32:11.970 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35630 10 6452 1 2025-08-12 02:32:32.631 00:00:10.356 TCP 23.104.0.1:51416 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:33:12.187 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52640 10 6452 1 2025-08-12 02:33:33.026 00:00:10.367 TCP 23.104.0.1:47376 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:34:12.404 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55412 10 6452 1 2025-08-12 02:34:33.433 00:00:10.323 TCP 23.104.0.1:35982 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:31:09.916 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 02:35:12.575 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52306 10 6452 1 2025-08-12 02:35:33.791 00:00:10.370 TCP 23.104.0.1:43990 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:36:12.744 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39820 10 6452 1 2025-08-12 02:36:34.196 00:00:10.368 TCP 23.104.0.1:37244 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:36:48.943 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 02:36:48.973 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 02:33:09.919 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 02:37:12.957 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45680 10 6452 1 2025-08-12 02:37:34.604 00:00:10.366 TCP 23.104.0.1:38586 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:38:13.192 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40290 10 6452 1 2025-08-12 02:38:35.007 00:00:24.826 TCP 23.104.0.1:51828 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:39:13.405 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33828 10 6452 1 2025-08-12 02:39:49.872 00:00:10.368 TCP 23.104.0.1:45090 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:40:13.615 00:00:10.573 TCP 1.101.0.1:3000 -> 22.102.0.1:38764 10 6452 1 2025-08-12 02:40:50.280 00:00:10.364 TCP 23.104.0.1:49294 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:37:09.918 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 02:41:14.226 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38540 10 6452 1 2025-08-12 02:41:49.257 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 02:41:49.194 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 02:41:50.676 00:00:10.370 TCP 23.104.0.1:33700 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:42:14.446 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50426 10 6452 1 2025-08-12 02:42:51.097 00:00:10.360 TCP 23.104.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:39:09.921 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 02:43:14.657 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37338 10 6452 1 2025-08-12 02:43:51.501 00:00:10.363 TCP 23.104.0.1:43466 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:44:14.836 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43284 10 6452 1 2025-08-12 02:44:51.909 00:00:10.325 TCP 23.104.0.1:48970 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:45:15.074 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60536 10 6452 1 2025-08-12 02:45:52.273 00:00:10.321 TCP 23.104.0.1:33426 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:46:15.294 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37282 10 6452 1 2025-08-12 02:46:49.278 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 02:46:49.217 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 02:46:52.635 00:00:10.365 TCP 23.104.0.1:49330 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:43:09.916 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 02:47:15.515 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52846 10 6452 1 2025-08-12 02:47:53.044 00:00:10.362 TCP 23.104.0.1:48472 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:48:15.728 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42320 10 6452 1 2025-08-12 02:48:53.451 00:00:10.371 TCP 23.104.0.1:35322 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:45:09.920 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 02:49:15.942 00:00:10.384 TCP 1.101.0.1:3000 -> 22.102.0.1:43812 11 6504 1 2025-08-12 02:49:53.862 00:00:10.332 TCP 23.104.0.1:44808 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:50:16.378 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57614 10 6452 1 2025-08-12 02:50:54.227 00:00:10.366 TCP 23.104.0.1:41820 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:51:16.585 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50016 10 6452 1 2025-08-12 02:51:49.526 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 02:51:49.493 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 02:51:54.636 00:00:10.365 TCP 23.104.0.1:59534 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:52:16.809 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60624 10 6452 1 2025-08-12 02:52:55.044 00:00:10.367 TCP 23.104.0.1:59926 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:49:09.918 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 02:53:17.030 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42322 10 6452 1 2025-08-12 02:53:55.448 00:00:10.367 TCP 23.104.0.1:38088 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:54:17.203 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45852 10 6452 1 2025-08-12 02:54:55.850 00:00:10.506 TCP 23.104.0.1:60424 -> 1.101.0.1:3000 15 1926 1 2025-08-12 02:51:09.922 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 02:55:17.375 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56580 12 10365 1 2025-08-12 02:55:56.398 00:00:10.363 TCP 23.104.0.1:42716 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:56:17.585 00:00:10.436 TCP 1.101.0.1:3000 -> 22.102.0.1:50094 10 6452 1 2025-08-12 02:56:49.791 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 02:56:49.625 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 02:56:56.796 00:00:10.373 TCP 23.104.0.1:58040 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:57:18.096 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:40400 10 6452 1 2025-08-12 02:57:57.217 00:00:10.327 TCP 23.104.0.1:48478 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:58:18.281 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55874 10 6452 1 Summary: total flows: 163, total bytes: 513465, total packets: 1581, avg bps: 1081, avg pps: 0, avg bpp: 324 Time window: 2025-08-12 01:55:09 - 2025-08-12 02:58:28 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0012s Wall: 0.0023s flows/second: 71112.1 Runtime: 0.0023s