Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 05:55:23.397 00:05:00.671 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 05:59:24.596 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54556 10 6452 1 2025-09-04 05:59:29.799 00:00:10.363 TCP 23.104.0.1:41330 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:00:24.805 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35744 10 6452 1 2025-09-04 06:00:30.201 00:00:10.369 TCP 23.104.0.1:45802 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:01:25.028 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59062 10 6452 1 2025-09-04 06:01:30.606 00:00:10.364 TCP 23.104.0.1:52228 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:02:25.245 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35144 10 6452 1 2025-09-04 06:02:31.008 00:00:10.378 TCP 23.104.0.1:42004 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:02:57.901 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 06:02:57.724 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 06:03:25.464 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50796 10 6452 1 2025-09-04 06:03:31.429 00:00:10.363 TCP 23.104.0.1:39134 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:00:23.401 00:05:00.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 06:04:25.676 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52110 10 6452 1 2025-09-04 06:04:31.833 00:00:10.376 TCP 23.104.0.1:49722 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:01:23.404 00:05:00.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 06:05:25.891 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50642 10 6452 1 2025-09-04 06:05:32.250 00:00:10.366 TCP 23.104.0.1:46354 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:06:26.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41380 10 6452 1 2025-09-04 06:06:32.660 00:00:10.366 TCP 23.104.0.1:38608 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:07:26.320 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39280 10 6452 1 2025-09-04 06:07:33.090 00:00:10.366 TCP 23.104.0.1:50170 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:07:57.722 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 06:07:57.866 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 06:08:26.545 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:56206 10 6452 1 2025-09-04 06:08:33.493 00:00:10.362 TCP 23.104.0.1:54168 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:09:26.728 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34526 10 6452 1 2025-09-04 06:09:33.896 00:00:10.323 TCP 23.104.0.1:46688 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:06:23.402 00:05:00.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 06:10:26.939 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:45472 10 6452 1 2025-09-04 06:10:34.261 00:00:10.324 TCP 23.104.0.1:54858 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:07:23.406 00:05:00.665 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 06:11:27.134 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36564 10 6452 1 2025-09-04 06:11:34.625 00:00:10.727 TCP 23.104.0.1:56736 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:12:27.345 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34772 10 6452 1 2025-09-04 06:12:35.404 00:00:10.364 TCP 23.104.0.1:59728 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:12:58.057 00:00:00.049 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 06:12:58.027 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 06:13:27.558 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35122 10 6452 1 2025-09-04 06:13:35.808 00:00:10.330 TCP 23.104.0.1:56428 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:14:27.739 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56762 10 6452 1 2025-09-04 06:14:36.175 00:00:10.368 TCP 23.104.0.1:43822 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:15:27.943 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36700 10 6452 1 2025-09-04 06:15:36.580 00:00:10.319 TCP 23.104.0.1:37528 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:12:23.404 00:05:00.671 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 06:16:28.182 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42726 10 6452 1 2025-09-04 06:16:36.937 00:00:10.387 TCP 23.104.0.1:39850 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:13:23.407 00:05:00.666 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 06:17:28.397 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42998 10 6452 1 2025-09-04 06:17:37.365 00:00:10.366 TCP 23.104.0.1:37130 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:17:58.176 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 06:17:57.971 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 06:18:28.612 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50488 10 6452 1 2025-09-04 06:18:37.768 00:00:10.374 TCP 23.104.0.1:53782 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:19:28.827 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48124 10 6452 1 2025-09-04 06:19:38.183 00:00:10.369 TCP 23.104.0.1:57544 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:20:29.042 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54246 10 6452 1 2025-09-04 06:20:38.586 00:00:10.365 TCP 23.104.0.1:43088 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:21:29.256 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41688 10 6452 1 2025-09-04 06:21:38.988 00:00:10.368 TCP 23.104.0.1:58190 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:18:23.406 00:05:00.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 06:22:29.474 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52128 10 6452 1 2025-09-04 06:22:39.395 00:00:10.365 TCP 23.104.0.1:56448 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:22:58.226 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 06:22:58.345 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 06:19:23.418 00:05:00.657 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 06:23:29.682 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43600 10 6452 1 2025-09-04 06:23:39.795 00:00:10.383 TCP 23.104.0.1:51906 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:24:29.903 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:33216 11 6504 1 2025-09-04 06:24:40.219 00:00:10.362 TCP 23.104.0.1:38868 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:25:30.172 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56086 10 6452 1 2025-09-04 06:25:40.617 00:00:10.368 TCP 23.104.0.1:59152 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:26:30.380 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35326 10 6452 1 2025-09-04 06:26:41.020 00:00:10.323 TCP 23.104.0.1:45956 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:27:30.555 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47040 10 6452 1 2025-09-04 06:27:41.385 00:00:10.368 TCP 23.104.0.1:45962 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:27:58.342 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 06:27:58.603 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 06:24:23.408 00:05:00.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 06:28:30.776 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52710 10 6452 1 2025-09-04 06:28:41.792 00:00:10.378 TCP 23.104.0.1:59858 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:25:23.411 00:05:00.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 06:29:30.985 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43090 10 6452 1 2025-09-04 06:29:42.208 00:00:10.361 TCP 23.104.0.1:42964 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:30:31.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32942 10 6452 1 2025-09-04 06:30:42.608 00:00:10.367 TCP 23.104.0.1:47252 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:31:31.430 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42844 10 6452 1 2025-09-04 06:31:43.014 00:00:10.371 TCP 23.104.0.1:54418 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:32:31.649 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49186 10 6452 1 2025-09-04 06:32:43.418 00:00:10.336 TCP 23.104.0.1:44704 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:32:58.401 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 06:32:58.434 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 06:33:31.863 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:35746 12 10365 1 2025-09-04 06:33:43.790 00:00:10.423 TCP 23.104.0.1:48284 -> 1.101.0.1:3000 15 1926 1 2025-09-04 06:30:23.409 00:05:00.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 06:34:32.126 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57204 10 6452 1 2025-09-04 06:34:44.252 00:00:10.324 TCP 23.104.0.1:40928 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:31:23.412 00:05:00.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 06:35:32.335 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36224 10 6452 1 2025-09-04 06:35:44.614 00:00:10.324 TCP 23.104.0.1:54230 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:36:32.546 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33726 10 6452 1 2025-09-04 06:36:44.975 00:00:10.367 TCP 23.104.0.1:38872 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:37:32.757 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51042 10 6452 1 2025-09-04 06:37:45.390 00:00:10.364 TCP 23.104.0.1:59784 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:37:58.656 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 06:37:58.277 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 06:38:32.971 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:45096 10 6452 1 2025-09-04 06:38:45.794 00:00:10.780 TCP 23.104.0.1:47608 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:39:33.161 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33040 10 6452 1 2025-09-04 06:39:46.612 00:00:10.366 TCP 23.104.0.1:38954 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:36:23.409 00:05:00.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 06:40:33.373 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42804 10 6452 1 2025-09-04 06:40:47.015 00:00:10.364 TCP 23.104.0.1:41678 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:37:23.412 00:05:00.665 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 06:41:33.585 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60696 10 6452 1 2025-09-04 06:41:47.421 00:00:10.364 TCP 23.104.0.1:53582 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:42:33.798 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41058 10 6452 1 2025-09-04 06:42:58.673 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 06:42:58.435 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 06:42:47.823 00:00:10.445 TCP 23.104.0.1:44964 -> 1.101.0.1:3000 15 1926 1 2025-09-04 06:43:34.027 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:58458 12 10365 1 2025-09-04 06:43:48.308 00:00:10.370 TCP 23.104.0.1:57568 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:44:34.225 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46934 10 6452 1 2025-09-04 06:44:48.718 00:00:10.376 TCP 23.104.0.1:41194 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:45:34.436 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41482 10 6452 1 2025-09-04 06:45:49.137 00:00:10.373 TCP 23.104.0.1:36324 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:42:23.412 00:05:00.676 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 06:46:34.651 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39102 10 6452 1 2025-09-04 06:46:49.554 00:00:10.364 TCP 23.104.0.1:37488 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:43:23.414 00:05:00.670 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 06:47:34.861 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48124 10 6452 1 2025-09-04 06:47:58.673 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 06:47:58.770 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 06:47:49.960 00:00:10.363 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:48:35.086 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45164 10 6452 1 2025-09-04 06:48:50.369 00:00:10.365 TCP 23.104.0.1:56034 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:49:35.303 00:00:10.318 TCP 1.101.0.1:3000 -> 22.102.0.1:53722 10 6452 1 2025-09-04 06:49:50.769 00:00:10.376 TCP 23.104.0.1:43908 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:50:35.666 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40336 10 6452 1 2025-09-04 06:50:51.186 00:00:10.365 TCP 23.104.0.1:40498 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:51:35.876 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42182 10 6452 1 2025-09-04 06:51:51.586 00:00:10.324 TCP 23.104.0.1:41836 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:48:23.411 00:05:00.676 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 06:52:36.070 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51470 10 6452 1 2025-09-04 06:52:58.923 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 06:52:58.946 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 06:52:51.951 00:00:10.364 TCP 23.104.0.1:42490 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:49:23.414 00:05:00.672 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 06:53:36.282 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53662 10 6452 1 2025-09-04 06:53:52.355 00:00:10.365 TCP 23.104.0.1:33814 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:54:36.464 00:00:10.123 TCP 1.101.0.1:3000 -> 22.102.0.1:33354 10 6452 1 2025-09-04 06:54:52.759 00:00:10.333 TCP 23.104.0.1:47714 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:55:36.628 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34208 10 6452 1 2025-09-04 06:55:53.131 00:00:10.379 TCP 23.104.0.1:54060 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:56:36.802 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59076 11 6492 1 2025-09-04 06:56:53.558 00:00:10.327 TCP 23.104.0.1:58298 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:57:37.028 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36398 10 6452 1 2025-09-04 06:57:58.951 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 06:57:58.938 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 06:57:53.925 00:00:10.378 TCP 23.104.0.1:32876 -> 1.101.0.1:3000 11 1507 1 2025-09-04 06:54:23.412 00:05:00.679 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 06:58:37.203 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46564 10 6452 1 Summary: total flows: 163, total bytes: 505597, total packets: 1575, avg bps: 1053, avg pps: 0, avg bpp: 321 Time window: 2025-09-04 05:55:23 - 2025-09-04 06:59:24 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0019s Wall: 0.0031s flows/second: 52276.5 Runtime: 0.0031s