Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 00:55:13.725 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 00:59:16.709 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45908 10 6452 1 2025-08-20 00:59:12.495 00:00:10.321 TCP 23.104.0.1:45228 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:56:13.728 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 01:00:12.857 00:00:10.377 TCP 23.104.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:00:16.890 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47820 10 6452 1 2025-08-20 01:00:38.190 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 01:00:37.937 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 01:01:13.273 00:00:10.362 TCP 23.104.0.1:54412 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:01:17.107 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52022 10 6452 1 2025-08-20 01:02:13.680 00:00:10.380 TCP 23.104.0.1:44196 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:02:17.327 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45826 10 6452 1 2025-08-20 01:03:14.108 00:00:10.364 TCP 23.104.0.1:48954 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:03:17.562 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47962 10 6452 1 2025-08-20 01:04:14.511 00:00:10.362 TCP 23.104.0.1:42528 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:04:17.778 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57362 10 6452 1 2025-08-20 01:01:13.727 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 01:05:14.912 00:00:10.363 TCP 23.104.0.1:33666 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:05:18.001 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42636 10 6452 1 2025-08-20 01:05:38.049 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 01:05:38.402 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 01:02:13.731 00:05:00.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 01:06:15.310 00:00:10.373 TCP 23.104.0.1:49302 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:06:18.224 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41012 10 6452 1 2025-08-20 01:07:15.721 00:00:10.368 TCP 23.104.0.1:60780 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:07:18.449 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57388 10 6452 1 2025-08-20 01:08:16.126 00:00:10.357 TCP 23.104.0.1:38776 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:08:18.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54076 10 6452 1 2025-08-20 01:09:16.524 00:00:10.321 TCP 23.104.0.1:34034 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:09:18.835 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35914 10 6452 1 2025-08-20 01:10:16.885 00:00:10.364 TCP 23.104.0.1:38670 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:10:19.016 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48032 10 6452 1 2025-08-20 01:10:38.709 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 01:10:38.581 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 01:07:13.730 00:05:00.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 01:11:17.288 00:00:10.370 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:11:19.188 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36538 10 6452 1 2025-08-20 01:08:13.733 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 01:12:19.363 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49162 10 6452 1 2025-08-20 01:12:17.690 00:00:10.367 TCP 23.104.0.1:45904 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:13:19.574 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49608 10 6452 1 2025-08-20 01:13:18.104 00:00:10.364 TCP 23.104.0.1:48530 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:14:19.792 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43054 10 6452 1 2025-08-20 01:14:18.506 00:00:10.365 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:15:20.007 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50210 10 6452 1 2025-08-20 01:15:18.904 00:00:10.367 TCP 23.104.0.1:50272 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:15:38.508 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 01:15:38.626 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 01:16:20.213 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38944 10 6452 1 2025-08-20 01:16:19.311 00:00:10.365 TCP 23.104.0.1:42756 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:13:13.733 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 01:17:19.717 00:00:10.326 TCP 23.104.0.1:58872 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:17:20.394 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47752 10 6452 1 2025-08-20 01:14:13.737 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 01:18:20.108 00:00:10.363 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:18:20.610 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50706 10 6452 1 2025-08-20 01:19:20.512 00:00:10.366 TCP 23.104.0.1:59290 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:19:20.826 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43756 10 6452 1 2025-08-20 01:20:20.925 00:00:10.344 TCP 23.104.0.1:57912 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:20:21.071 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42768 10 6452 1 2025-08-20 01:20:38.474 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 01:20:38.812 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 01:21:21.287 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47784 10 6452 1 2025-08-20 01:21:21.307 00:00:10.364 TCP 23.104.0.1:36206 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:22:21.503 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44516 10 6452 1 2025-08-20 01:22:21.709 00:00:10.323 TCP 23.104.0.1:42194 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:19:13.737 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 01:23:21.715 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58598 10 6452 1 2025-08-20 01:23:22.092 00:00:10.368 TCP 23.104.0.1:59152 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:20:13.738 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 01:24:21.928 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:49082 10 6452 1 2025-08-20 01:24:22.504 00:00:10.367 TCP 23.104.0.1:50230 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:25:22.175 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37306 10 6452 1 2025-08-20 01:25:22.904 00:00:10.372 TCP 23.104.0.1:40664 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:25:38.757 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 01:25:38.846 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 01:26:22.403 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58908 10 6452 1 2025-08-20 01:26:23.313 00:00:10.372 TCP 23.104.0.1:59146 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:27:22.581 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45874 10 6452 1 2025-08-20 01:27:23.722 00:00:10.332 TCP 23.104.0.1:48454 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:28:22.794 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43778 10 6452 1 2025-08-20 01:28:24.110 00:00:10.371 TCP 23.104.0.1:35152 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:25:13.741 00:05:00.959 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 01:29:24.518 00:00:10.828 TCP 23.104.0.1:34734 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:29:23.005 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36768 10 6452 1 2025-08-20 01:26:13.742 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 01:30:23.225 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57012 10 6452 1 2025-08-20 01:30:25.386 00:00:10.371 TCP 23.104.0.1:46998 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:30:38.747 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 01:30:38.988 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 01:31:25.794 00:00:10.371 TCP 23.104.0.1:36614 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:31:23.454 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59476 10 6452 1 2025-08-20 01:32:26.202 00:00:10.363 TCP 23.104.0.1:39008 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:32:23.680 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60816 10 6452 1 2025-08-20 01:33:26.608 00:00:10.370 TCP 23.104.0.1:41750 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:33:23.901 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58800 10 6452 1 2025-08-20 01:34:24.125 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36216 10 6452 1 2025-08-20 01:34:27.026 00:00:10.415 TCP 23.104.0.1:51130 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:31:13.741 00:05:00.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 01:35:39.044 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 01:35:27.482 00:00:10.322 TCP 23.104.0.1:44744 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:35:24.351 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53020 10 6452 1 2025-08-20 01:35:39.056 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 01:32:13.743 00:05:00.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 01:36:24.574 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53596 10 6452 1 2025-08-20 01:36:27.839 00:00:10.389 TCP 23.104.0.1:55130 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:37:24.801 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59076 10 6452 1 2025-08-20 01:37:28.263 00:00:10.330 TCP 23.104.0.1:35926 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:38:25.011 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45548 10 6452 1 2025-08-20 01:38:28.635 00:00:10.363 TCP 23.104.0.1:42778 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:39:25.223 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33804 10 6452 1 2025-08-20 01:39:29.034 00:00:10.365 TCP 23.104.0.1:59860 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:40:25.434 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45154 10 6452 1 2025-08-20 01:40:39.093 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 01:40:29.434 00:00:10.364 TCP 23.104.0.1:41674 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:40:39.177 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 01:37:13.743 00:05:00.959 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 01:41:25.650 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52216 10 6452 1 2025-08-20 01:41:29.839 00:00:10.387 TCP 23.104.0.1:60218 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:38:13.745 00:05:00.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 01:42:25.858 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44924 10 6452 1 2025-08-20 01:42:30.258 00:00:10.362 TCP 23.104.0.1:57346 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:43:26.082 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52540 10 6452 1 2025-08-20 01:43:30.661 00:00:10.365 TCP 23.104.0.1:33864 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:44:26.257 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46048 10 6452 1 2025-08-20 01:44:31.095 00:00:10.377 TCP 23.104.0.1:57422 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:45:26.425 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58456 10 6452 1 2025-08-20 01:45:39.246 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 01:45:31.514 00:00:10.365 TCP 23.104.0.1:47630 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:45:38.995 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 01:46:26.604 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48942 10 6452 1 2025-08-20 01:46:31.920 00:00:10.385 TCP 23.104.0.1:51648 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:43:13.743 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 01:47:26.817 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-08-20 01:47:32.345 00:00:10.361 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:44:13.748 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 01:48:26.998 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53422 10 6452 1 2025-08-20 01:48:32.747 00:00:10.326 TCP 23.104.0.1:45368 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:49:27.211 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40220 10 6452 1 2025-08-20 01:49:33.117 00:00:10.363 TCP 23.104.0.1:40972 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:50:39.313 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 01:50:27.426 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50260 10 6452 1 2025-08-20 01:50:39.333 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 01:50:33.527 00:00:10.318 TCP 23.104.0.1:34654 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:51:27.643 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40756 10 6452 1 2025-08-20 01:51:33.877 00:00:10.393 TCP 23.104.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:52:27.855 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32880 10 6452 1 2025-08-20 01:52:34.305 00:00:10.362 TCP 23.104.0.1:44746 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:49:13.746 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 01:53:28.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43954 10 6452 1 2025-08-20 01:53:34.709 00:00:10.325 TCP 23.104.0.1:57264 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:50:13.749 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 01:54:28.297 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:52156 10 6452 1 2025-08-20 01:54:35.096 00:00:10.365 TCP 23.104.0.1:58558 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:55:39.414 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 01:55:28.503 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39524 10 6452 1 2025-08-20 01:55:39.344 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 01:55:35.506 00:00:10.365 TCP 23.104.0.1:58656 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:56:28.727 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:56134 10 6452 1 2025-08-20 01:56:35.908 00:00:10.326 TCP 23.104.0.1:55076 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:57:29.006 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36596 10 6452 1 2025-08-20 01:57:36.274 00:00:10.373 TCP 23.104.0.1:58496 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:58:29.227 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57934 10 6452 1 2025-08-20 01:58:36.694 00:00:10.367 TCP 23.104.0.1:34088 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1045, avg pps: 0, avg bpp: 317 Time window: 2025-08-20 00:55:13 - 2025-08-20 01:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0023s User: 0.0023s Wall: 0.0023s flows/second: 72636.3 Runtime: 0.0023s