Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 10:54:10.119 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 10:59:07.307 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58906 10 6452 1 2025-08-12 10:59:38.911 00:00:10.512 TCP 23.104.0.1:51232 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:00:07.523 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46458 10 6452 1 2025-08-12 11:00:39.463 00:00:10.362 TCP 23.104.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:56:10.117 00:06:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 11:01:07.695 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41530 10 6452 1 2025-08-12 11:01:39.866 00:00:10.368 TCP 23.104.0.1:56420 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:01:59.267 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:01:59.294 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 11:02:07.903 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34362 10 6452 1 2025-08-12 11:02:40.278 00:00:10.359 TCP 23.104.0.1:36946 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:03:08.130 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51460 10 6452 1 2025-08-12 11:03:40.677 00:00:10.378 TCP 23.104.0.1:34856 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:04:08.305 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37188 10 6452 1 2025-08-12 11:04:41.100 00:00:10.366 TCP 23.104.0.1:49944 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:05:08.520 00:00:18.966 TCP 1.101.0.1:3000 -> 22.102.0.1:42824 10 6452 1 2025-08-12 11:05:41.509 00:00:10.323 TCP 23.104.0.1:35024 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:01:10.120 00:06:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 11:06:17.551 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47086 10 6452 1 2025-08-12 11:06:41.868 00:00:10.365 TCP 23.104.0.1:56938 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:06:59.491 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:06:58.984 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 11:07:17.785 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:41568 10 6452 1 2025-08-12 11:07:42.271 00:00:10.365 TCP 23.104.0.1:48482 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:03:10.117 00:06:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 11:08:17.969 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54720 10 6452 1 2025-08-12 11:08:42.679 00:00:10.373 TCP 23.104.0.1:43160 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:09:18.176 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44718 10 6452 1 2025-08-12 11:09:43.103 00:00:10.369 TCP 23.104.0.1:49436 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:10:18.396 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40404 10 6452 1 2025-08-12 11:10:43.509 00:00:10.322 TCP 23.104.0.1:34428 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:11:18.620 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51742 10 6452 1 2025-08-12 11:11:43.875 00:00:10.389 TCP 23.104.0.1:33848 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:11:59.665 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:11:59.445 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 11:12:18.840 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57806 12 6556 1 2025-08-12 11:12:44.302 00:00:10.362 TCP 23.104.0.1:54556 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:08:10.120 00:06:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 11:13:19.081 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49698 10 6452 1 2025-08-12 11:13:44.701 00:00:10.368 TCP 23.104.0.1:39674 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:14:19.248 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33024 10 6452 1 2025-08-12 11:14:45.110 00:00:10.441 TCP 23.104.0.1:37192 -> 1.101.0.1:3000 15 1926 1 2025-08-12 11:10:10.120 00:06:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 11:15:19.461 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42686 12 10365 1 2025-08-12 11:15:45.589 00:00:10.376 TCP 23.104.0.1:55342 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:16:19.697 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50094 10 6452 1 2025-08-12 11:16:46.002 00:00:10.362 TCP 23.104.0.1:51258 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:16:59.569 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:16:59.463 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 11:17:19.916 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57400 10 6452 1 2025-08-12 11:17:46.402 00:00:10.328 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:18:20.129 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49762 10 6452 1 2025-08-12 11:18:46.766 00:00:10.376 TCP 23.104.0.1:36076 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:19:20.301 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48886 10 6452 1 2025-08-12 11:19:47.179 00:00:10.366 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:15:10.122 00:06:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 11:20:20.466 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51138 10 6452 1 2025-08-12 11:20:47.587 00:00:10.367 TCP 23.104.0.1:43752 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:21:20.690 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43054 10 6452 1 2025-08-12 11:21:59.582 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:21:59.601 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 11:21:47.998 00:00:10.365 TCP 23.104.0.1:52250 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:17:10.119 00:06:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 11:22:20.905 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47156 10 6452 1 2025-08-12 11:22:48.395 00:00:10.539 TCP 23.104.0.1:56420 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:23:21.128 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46740 10 6452 1 2025-08-12 11:23:48.974 00:00:10.326 TCP 23.104.0.1:60274 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:24:21.350 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49592 10 6452 1 2025-08-12 11:24:49.342 00:00:10.379 TCP 23.104.0.1:53778 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:25:21.568 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35936 10 6452 1 2025-08-12 11:25:49.758 00:00:10.342 TCP 23.104.0.1:35284 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:26:21.782 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43774 10 6452 1 2025-08-12 11:26:59.816 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:26:59.840 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 11:26:50.134 00:00:10.366 TCP 23.104.0.1:46500 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:22:10.126 00:06:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 11:27:21.997 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39044 10 6452 1 2025-08-12 11:27:50.535 00:00:10.369 TCP 23.104.0.1:38902 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:28:22.215 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40912 10 6452 1 2025-08-12 11:28:50.938 00:00:10.386 TCP 23.104.0.1:40228 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:24:10.124 00:06:00.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 11:29:22.437 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55484 10 6452 1 2025-08-12 11:29:51.366 00:00:10.442 TCP 23.104.0.1:40130 -> 1.101.0.1:3000 15 1926 1 2025-08-12 11:30:22.618 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33728 12 10365 1 2025-08-12 11:30:51.851 00:00:10.382 TCP 23.104.0.1:52928 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:31:22.854 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56074 10 6452 1 2025-08-12 11:31:59.910 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:31:59.951 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 11:31:52.295 00:00:10.366 TCP 23.104.0.1:50850 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:32:23.092 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47964 10 6452 1 2025-08-12 11:32:52.700 00:00:10.367 TCP 23.104.0.1:37288 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:33:23.306 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41774 10 6452 1 2025-08-12 11:33:53.108 00:00:10.325 TCP 23.104.0.1:60936 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:29:10.129 00:06:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 11:34:23.515 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57216 10 6452 1 2025-08-12 11:34:53.473 00:00:14.350 TCP 23.104.0.1:40004 -> 1.101.0.1:3000 13 1611 1 2025-08-12 11:35:23.728 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49026 12 6556 1 2025-08-12 11:35:57.863 00:00:10.369 TCP 23.104.0.1:36228 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:31:10.127 00:06:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 11:36:23.956 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:52294 10 6452 1 2025-08-12 11:37:00.008 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 11:36:59.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:36:58.272 00:00:10.371 TCP 23.104.0.1:48806 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:37:24.197 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42282 10 6452 1 2025-08-12 11:37:58.674 00:00:10.330 TCP 23.104.0.1:54746 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:38:24.417 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47530 10 6452 1 2025-08-12 11:38:59.051 00:00:10.326 TCP 23.104.0.1:37198 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:39:24.638 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39004 10 6452 1 2025-08-12 11:39:59.415 00:00:10.321 TCP 23.104.0.1:60956 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:40:24.854 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 6452 1 2025-08-12 11:40:59.777 00:00:10.363 TCP 23.104.0.1:45746 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:36:10.129 00:06:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 11:41:25.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36924 10 6452 1 2025-08-12 11:41:59.951 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 11:42:00.185 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:42:00.179 00:00:10.364 TCP 23.104.0.1:48742 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:42:25.293 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60864 10 6452 1 2025-08-12 11:43:00.582 00:00:10.368 TCP 23.104.0.1:41740 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:38:10.128 00:06:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 11:43:25.514 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41166 10 6452 1 2025-08-12 11:44:00.986 00:00:10.369 TCP 23.104.0.1:57346 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:44:25.733 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50422 10 6452 1 2025-08-12 11:45:01.397 00:00:10.323 TCP 23.104.0.1:51226 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:45:25.953 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51108 12 6556 1 2025-08-12 11:46:01.757 00:00:10.387 TCP 23.104.0.1:41218 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:46:26.190 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49238 10 6452 1 2025-08-12 11:47:00.043 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:46:59.822 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 11:47:02.185 00:00:10.667 TCP 23.104.0.1:57246 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:47:26.400 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47770 10 6452 1 2025-08-12 11:43:10.132 00:06:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 11:48:02.892 00:00:10.332 TCP 23.104.0.1:59172 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:48:26.615 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51406 10 6452 1 2025-08-12 11:49:03.264 00:00:10.367 TCP 23.104.0.1:47264 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:49:26.829 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44742 10 6452 1 2025-08-12 11:45:10.129 00:06:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 11:50:03.667 00:00:10.327 TCP 23.104.0.1:44982 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:50:27.069 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58880 10 6452 1 2025-08-12 11:51:04.034 00:00:10.363 TCP 23.104.0.1:58664 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:51:27.274 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53714 10 6452 1 2025-08-12 11:52:00.380 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:52:00.403 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 11:52:04.440 00:00:10.367 TCP 23.104.0.1:57760 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:52:27.482 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39786 10 6452 1 2025-08-12 11:53:04.844 00:00:10.385 TCP 23.104.0.1:48090 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:53:27.704 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44302 10 6452 1 2025-08-12 11:54:05.267 00:00:10.369 TCP 23.104.0.1:37676 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:54:27.920 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55580 10 6452 1 2025-08-12 11:50:10.133 00:06:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 11:55:05.674 00:00:10.368 TCP 23.104.0.1:50988 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:55:28.141 00:00:10.723 TCP 1.101.0.1:3000 -> 22.102.0.1:52708 10 6452 1 2025-08-12 11:56:06.102 00:00:10.428 TCP 23.104.0.1:43684 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:56:28.901 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55018 10 6452 1 2025-08-12 11:57:00.380 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 11:57:00.303 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:52:10.130 00:06:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 11:57:06.566 00:00:10.941 TCP 23.104.0.1:36142 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:57:29.119 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57142 10 6452 1 2025-08-12 11:58:07.601 00:00:10.356 TCP 23.104.0.1:41644 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:58:29.327 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46014 10 6452 1 Summary: total flows: 161, total bytes: 506659, total packets: 1593, avg bps: 1047, avg pps: 0, avg bpp: 318 Time window: 2025-08-12 10:54:10 - 2025-08-12 11:58:39 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0014s User: 0.0027s Wall: 0.0022s flows/second: 73209.3 Runtime: 0.0022s