Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 01:55:13.748 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 01:59:29.442 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40552 10 6452 1 2025-08-20 01:59:37.105 00:00:10.364 TCP 23.104.0.1:42880 -> 1.101.0.1:3000 11 1507 1 2025-08-20 01:56:13.752 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 02:00:39.326 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:00:29.665 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49710 10 6452 1 2025-08-20 02:00:39.213 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 02:00:37.515 00:00:10.365 TCP 23.104.0.1:55948 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:01:29.877 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:49884 10 6452 1 2025-08-20 02:01:37.917 00:00:10.375 TCP 23.104.0.1:55566 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:02:30.080 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34050 10 6452 1 2025-08-20 02:02:38.340 00:00:10.361 TCP 23.104.0.1:57926 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:03:30.251 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40958 10 6452 1 2025-08-20 02:03:38.743 00:00:10.327 TCP 23.104.0.1:42968 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:04:30.466 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57224 10 6452 1 2025-08-20 02:04:39.113 00:00:10.376 TCP 23.104.0.1:43328 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:01:13.749 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 02:05:39.755 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:05:39.684 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 02:05:30.678 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55164 10 6452 1 2025-08-20 02:05:39.530 00:00:10.365 TCP 23.104.0.1:33680 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:02:13.751 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 02:06:30.853 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59886 10 6452 1 2025-08-20 02:06:39.935 00:00:10.389 TCP 23.104.0.1:55802 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:07:31.083 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-08-20 02:07:40.358 00:00:10.372 TCP 23.104.0.1:60652 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:08:31.301 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50540 10 6452 1 2025-08-20 02:08:40.766 00:00:10.338 TCP 23.104.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:09:31.513 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36126 10 6452 1 2025-08-20 02:09:41.132 00:00:10.364 TCP 23.104.0.1:45116 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:10:39.679 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 02:10:31.684 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48336 12 10365 1 2025-08-20 02:10:39.881 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:10:41.540 00:00:10.436 TCP 23.104.0.1:34106 -> 1.101.0.1:3000 15 1926 1 2025-08-20 02:07:13.751 00:05:00.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 02:11:31.918 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35572 10 6452 1 2025-08-20 02:11:42.020 00:00:10.378 TCP 23.104.0.1:53114 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:08:13.754 00:05:00.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 02:12:32.127 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57792 10 6452 1 2025-08-20 02:12:42.441 00:00:10.363 TCP 23.104.0.1:54372 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:13:32.346 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48956 10 6452 1 2025-08-20 02:13:42.845 00:00:10.379 TCP 23.104.0.1:34968 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:14:32.555 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44226 10 6452 1 2025-08-20 02:14:43.264 00:00:10.325 TCP 23.104.0.1:39120 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:15:39.801 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 02:15:39.858 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:15:32.775 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:46022 10 6452 1 2025-08-20 02:15:43.626 00:00:10.326 TCP 23.104.0.1:48202 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:16:32.963 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39888 10 6452 1 2025-08-20 02:16:43.991 00:00:10.326 TCP 23.104.0.1:38654 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:13:13.752 00:05:00.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 02:17:33.186 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52178 10 6452 1 2025-08-20 02:17:44.360 00:00:10.358 TCP 23.104.0.1:51430 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:14:13.756 00:05:00.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 02:18:33.392 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48380 10 6452 1 2025-08-20 02:18:44.757 00:00:10.385 TCP 23.104.0.1:34166 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:19:33.600 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51276 10 6452 1 2025-08-20 02:19:45.182 00:00:10.369 TCP 23.104.0.1:35594 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:20:39.635 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:20:39.558 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 02:20:33.824 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49986 10 6452 1 2025-08-20 02:20:45.592 00:00:10.332 TCP 23.104.0.1:43720 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:21:34.056 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43644 10 6452 1 2025-08-20 02:21:45.960 00:00:10.329 TCP 23.104.0.1:36368 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:22:34.272 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56260 10 6452 1 2025-08-20 02:22:46.325 00:00:10.370 TCP 23.104.0.1:54276 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:19:13.755 00:05:00.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 02:23:34.483 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35620 10 6452 1 2025-08-20 02:23:46.731 00:00:10.323 TCP 23.104.0.1:42828 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:20:13.756 00:05:00.958 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 02:24:34.697 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45170 10 6452 1 2025-08-20 02:24:47.107 00:00:10.362 TCP 23.104.0.1:42494 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:25:39.812 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 02:25:40.026 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:25:34.870 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:53756 11 6504 1 2025-08-20 02:25:47.507 00:00:10.365 TCP 23.104.0.1:44714 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:26:35.143 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40928 10 6452 1 2025-08-20 02:26:47.912 00:00:10.714 TCP 23.104.0.1:57190 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:27:35.356 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6452 1 2025-08-20 02:27:48.658 00:00:10.374 TCP 23.104.0.1:48322 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:28:35.568 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49218 10 6452 1 2025-08-20 02:28:49.091 00:00:10.321 TCP 23.104.0.1:47764 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:25:13.756 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 02:29:35.780 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44624 10 6452 1 2025-08-20 02:29:49.452 00:00:10.365 TCP 23.104.0.1:43330 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:26:13.759 00:05:00.958 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 02:30:40.257 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:30:39.984 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 02:30:35.996 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33524 10 6452 1 2025-08-20 02:30:49.857 00:00:10.338 TCP 23.104.0.1:40462 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:31:36.209 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:57522 10 6452 1 2025-08-20 02:31:50.238 00:00:10.369 TCP 23.104.0.1:34944 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:32:36.481 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41596 10 6452 1 2025-08-20 02:32:50.659 00:00:10.328 TCP 23.104.0.1:41452 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:33:36.658 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49472 10 6452 1 2025-08-20 02:33:51.024 00:00:10.329 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:34:36.867 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33118 10 6452 1 2025-08-20 02:34:51.391 00:00:10.326 TCP 23.104.0.1:34736 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:31:13.759 00:05:00.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 02:35:40.278 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:35:39.965 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 02:35:37.086 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53846 10 6452 1 2025-08-20 02:35:51.754 00:00:10.373 TCP 23.104.0.1:47890 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:32:13.762 00:05:00.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 02:36:37.301 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56416 10 6452 1 2025-08-20 02:36:52.160 00:00:10.323 TCP 23.104.0.1:39404 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:37:37.541 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52846 10 6452 1 2025-08-20 02:37:52.520 00:00:10.320 TCP 23.104.0.1:40980 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:38:37.754 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40188 10 6452 1 2025-08-20 02:38:52.878 00:00:10.365 TCP 23.104.0.1:34690 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:39:37.972 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51238 10 6452 1 2025-08-20 02:39:53.278 00:00:10.333 TCP 23.104.0.1:45946 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:40:40.248 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:40:39.985 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 02:40:38.199 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35864 10 6452 1 2025-08-20 02:40:53.650 00:00:10.368 TCP 23.104.0.1:44992 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:37:13.763 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 02:41:38.408 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45206 10 6452 1 2025-08-20 02:41:54.057 00:00:10.369 TCP 23.104.0.1:38160 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:38:13.764 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 02:42:38.627 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53916 10 6452 1 2025-08-20 02:42:54.463 00:00:10.363 TCP 23.104.0.1:39876 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:43:38.843 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59284 10 6452 1 2025-08-20 02:43:54.862 00:00:10.584 TCP 23.104.0.1:56534 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:44:39.082 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44200 10 6452 1 2025-08-20 02:44:55.486 00:00:10.367 TCP 23.104.0.1:59056 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:45:40.368 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:45:40.274 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 02:45:39.296 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45378 10 6452 1 2025-08-20 02:45:55.889 00:00:10.381 TCP 23.104.0.1:51580 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:46:39.511 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50272 10 6452 1 2025-08-20 02:46:56.311 00:00:10.368 TCP 23.104.0.1:59056 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:43:13.761 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 02:47:39.727 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50822 10 6452 1 2025-08-20 02:47:56.722 00:00:10.372 TCP 23.104.0.1:33072 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:44:13.765 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 02:48:39.944 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41350 10 6452 1 2025-08-20 02:48:57.133 00:00:10.365 TCP 23.104.0.1:41916 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:49:40.175 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58852 10 6452 1 2025-08-20 02:49:57.533 00:00:10.369 TCP 23.104.0.1:59182 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:50:40.527 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 02:50:40.211 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:50:40.383 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49646 10 6452 1 2025-08-20 02:50:57.935 00:00:10.374 TCP 23.104.0.1:51428 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:51:40.598 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54040 10 6452 1 2025-08-20 02:51:58.345 00:00:10.365 TCP 23.104.0.1:58462 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:52:40.808 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53578 10 6452 1 2025-08-20 02:52:58.753 00:00:10.386 TCP 23.104.0.1:49092 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:49:13.764 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 02:53:41.039 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48700 10 6452 1 2025-08-20 02:53:59.176 00:00:10.362 TCP 23.104.0.1:41224 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:50:13.768 00:05:00.958 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 02:54:41.215 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47932 10 6452 1 2025-08-20 02:54:59.580 00:00:10.678 TCP 23.104.0.1:49218 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:55:40.549 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 02:55:40.628 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 02:55:41.428 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33352 10 6452 1 2025-08-20 02:56:00.299 00:00:10.325 TCP 23.104.0.1:51082 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:56:41.643 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49408 10 6452 1 2025-08-20 02:57:00.664 00:00:10.372 TCP 23.104.0.1:41910 -> 1.101.0.1:3000 11 1507 1 2025-08-20 02:57:41.814 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46528 10 6452 1 2025-08-20 02:58:01.097 00:00:10.335 TCP 23.104.0.1:56698 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494773, total packets: 1558, avg bps: 1047, avg pps: 0, avg bpp: 317 Time window: 2025-08-20 01:55:13 - 2025-08-20 02:58:11 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0045s User: 0.0000s Wall: 0.0022s flows/second: 72975.8 Runtime: 0.0022s