Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 15:55:23.590 00:05:00.680 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 15:59:36.991 00:00:10.337 TCP 23.104.0.1:54824 -> 1.101.0.1:3000 11 1507 1 2025-09-04 15:59:41.283 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33476 10 6452 1 2025-09-04 16:00:41.516 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50548 10 6452 1 2025-09-04 16:00:37.357 00:00:10.363 TCP 23.104.0.1:34918 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:01:41.736 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35628 10 6452 1 2025-09-04 16:01:37.760 00:00:10.376 TCP 23.104.0.1:49350 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:02:38.173 00:00:10.322 TCP 23.104.0.1:49018 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:02:41.969 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42430 10 6452 1 2025-09-04 16:03:09.721 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 16:03:09.760 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 16:03:38.541 00:00:10.357 TCP 23.104.0.1:44540 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:03:42.207 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48290 10 6452 1 2025-09-04 16:00:23.588 00:05:00.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 16:04:38.938 00:00:10.329 TCP 23.104.0.1:36978 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:04:42.421 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55734 10 6452 1 2025-09-04 16:01:23.592 00:05:00.678 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 16:05:39.308 00:00:10.367 TCP 23.104.0.1:44852 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:05:42.635 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43428 10 6452 1 2025-09-04 16:06:39.708 00:00:10.322 TCP 23.104.0.1:58002 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:06:42.846 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37538 10 6452 1 2025-09-04 16:07:40.093 00:00:10.364 TCP 23.104.0.1:51542 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:07:43.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48804 10 6452 1 2025-09-04 16:08:09.836 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 16:08:09.670 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 16:08:40.496 00:00:10.372 TCP 23.104.0.1:55946 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:08:43.301 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58716 10 6452 1 2025-09-04 16:09:40.901 00:00:10.366 TCP 23.104.0.1:39444 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:09:43.525 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37410 10 6452 1 2025-09-04 16:06:23.589 00:05:00.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 16:10:41.309 00:00:10.362 TCP 23.104.0.1:58670 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:10:43.742 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35196 10 6452 1 2025-09-04 16:07:23.594 00:05:00.677 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 16:11:41.714 00:00:10.375 TCP 23.104.0.1:47946 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:11:43.959 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:57874 12 6556 1 2025-09-04 16:12:42.137 00:00:10.368 TCP 23.104.0.1:47856 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:12:44.191 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40706 10 6452 1 2025-09-04 16:13:10.064 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 16:13:09.885 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 16:13:44.368 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55224 10 6452 1 2025-09-04 16:13:42.544 00:00:10.370 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:14:44.587 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60976 10 6452 1 2025-09-04 16:14:42.948 00:00:10.375 TCP 23.104.0.1:43444 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:15:43.363 00:00:10.364 TCP 23.104.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:15:44.759 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36966 10 6452 1 2025-09-04 16:12:23.594 00:05:00.681 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 16:16:43.765 00:00:10.377 TCP 23.104.0.1:48038 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:16:44.935 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:38144 10 6452 1 2025-09-04 16:13:23.598 00:05:00.675 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 16:17:44.180 00:00:10.362 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:17:45.129 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48812 10 6452 1 2025-09-04 16:18:10.112 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 16:18:10.085 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 16:18:45.340 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46286 10 6452 1 2025-09-04 16:18:44.582 00:00:10.330 TCP 23.104.0.1:36532 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:19:44.957 00:00:10.362 TCP 23.104.0.1:57366 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:19:45.551 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35428 10 6452 1 2025-09-04 16:20:45.360 00:00:10.366 TCP 23.104.0.1:52788 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:20:45.780 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35596 10 6452 1 2025-09-04 16:21:45.990 00:00:10.451 TCP 1.101.0.1:3000 -> 22.102.0.1:55840 10 6452 1 2025-09-04 16:21:45.768 00:00:10.743 TCP 23.104.0.1:42768 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:18:23.596 00:05:00.682 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 16:22:46.481 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51192 10 6452 1 2025-09-04 16:22:46.563 00:00:10.360 TCP 23.104.0.1:37708 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:23:10.323 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 16:23:10.470 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 16:19:23.600 00:05:00.676 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 16:23:46.649 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59838 10 6452 1 2025-09-04 16:23:46.967 00:00:10.371 TCP 23.104.0.1:59362 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:24:47.373 00:00:10.321 TCP 23.104.0.1:35342 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:24:46.824 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46448 10 6452 1 2025-09-04 16:25:47.071 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47194 10 6452 1 2025-09-04 16:25:47.732 00:00:10.325 TCP 23.104.0.1:49126 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:26:47.285 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54540 10 6452 1 2025-09-04 16:26:48.124 00:00:10.324 TCP 23.104.0.1:45660 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:27:47.497 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54596 10 6452 1 2025-09-04 16:27:48.485 00:00:10.367 TCP 23.104.0.1:58756 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:28:10.252 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 16:28:10.399 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 16:24:23.599 00:05:00.681 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 16:28:47.674 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47134 10 6452 1 2025-09-04 16:28:48.884 00:00:10.399 TCP 23.104.0.1:39900 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:25:23.608 00:05:00.669 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 16:29:47.884 00:00:10.348 TCP 1.101.0.1:3000 -> 22.102.0.1:41584 10 6452 1 2025-09-04 16:29:49.319 00:00:10.368 TCP 23.104.0.1:42686 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:30:48.273 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39462 10 6452 1 2025-09-04 16:30:49.725 00:00:10.369 TCP 23.104.0.1:59422 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:31:48.484 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57882 10 6452 1 2025-09-04 16:31:50.134 00:00:10.365 TCP 23.104.0.1:54598 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:32:50.536 00:00:10.445 TCP 23.104.0.1:56322 -> 1.101.0.1:3000 15 1926 1 2025-09-04 16:32:48.698 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37054 12 10367 1 2025-09-04 16:33:10.201 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 16:33:10.374 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 16:33:48.936 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:41104 10 6452 1 2025-09-04 16:33:51.012 00:00:10.328 TCP 23.104.0.1:55766 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:30:23.604 00:05:00.677 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 16:34:51.374 00:00:10.365 TCP 23.104.0.1:48628 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:34:49.130 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34944 10 6452 1 2025-09-04 16:31:23.607 00:05:00.672 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 16:35:49.344 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38188 10 6452 1 2025-09-04 16:35:51.776 00:00:10.372 TCP 23.104.0.1:49906 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:36:49.514 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38752 10 6452 1 2025-09-04 16:36:52.185 00:00:10.366 TCP 23.104.0.1:46570 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:37:49.729 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55512 10 6452 1 2025-09-04 16:37:52.589 00:00:10.360 TCP 23.104.0.1:60470 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:38:10.687 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 16:38:10.742 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 16:38:49.939 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:36266 10 6452 1 2025-09-04 16:38:52.989 00:00:10.358 TCP 23.104.0.1:54784 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:39:50.181 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35540 10 6452 1 2025-09-04 16:39:53.384 00:00:10.367 TCP 23.104.0.1:43386 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:36:23.605 00:05:00.676 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 16:40:50.395 00:00:10.550 TCP 1.101.0.1:3000 -> 22.102.0.1:42692 10 6452 1 2025-09-04 16:40:53.788 00:00:10.416 TCP 23.104.0.1:57690 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:37:23.608 00:05:00.671 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 16:41:50.983 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36552 10 6452 1 2025-09-04 16:41:54.248 00:00:10.362 TCP 23.104.0.1:57874 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:42:51.215 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34378 10 6452 1 2025-09-04 16:42:54.648 00:00:10.364 TCP 23.104.0.1:53222 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:43:10.731 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 16:43:10.759 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 16:43:51.427 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37568 10 6452 1 2025-09-04 16:43:55.057 00:00:10.375 TCP 23.104.0.1:48780 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:44:51.598 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37824 10 6452 1 2025-09-04 16:44:55.469 00:00:10.314 TCP 23.104.0.1:50646 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:45:51.809 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40202 10 6452 1 2025-09-04 16:45:55.821 00:00:10.325 TCP 23.104.0.1:59352 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:42:23.606 00:05:00.676 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 16:46:52.037 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33756 10 6452 1 2025-09-04 16:46:56.183 00:00:10.362 TCP 23.104.0.1:54986 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:43:23.609 00:05:00.673 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 16:47:56.584 00:00:10.327 TCP 23.104.0.1:35634 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:47:52.259 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:55314 10 6452 1 2025-09-04 16:48:10.948 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 16:48:10.881 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 16:48:52.426 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58788 10 6452 1 2025-09-04 16:48:56.947 00:00:10.376 TCP 23.104.0.1:53848 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:49:52.641 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54294 10 6452 1 2025-09-04 16:49:57.365 00:00:10.364 TCP 23.104.0.1:58882 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:50:52.855 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58222 10 6452 1 2025-09-04 16:50:57.768 00:00:10.371 TCP 23.104.0.1:56728 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:51:53.085 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60646 10 6452 1 2025-09-04 16:51:58.178 00:00:10.356 TCP 23.104.0.1:41094 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:48:23.606 00:05:00.679 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 16:52:53.299 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:45704 12 10365 1 2025-09-04 16:53:11.051 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 16:53:11.028 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 16:52:58.576 00:00:10.446 TCP 23.104.0.1:35698 -> 1.101.0.1:3000 15 1926 1 2025-09-04 16:49:23.609 00:05:00.674 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 16:53:53.502 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52936 10 6452 1 2025-09-04 16:53:59.089 00:00:10.367 TCP 23.104.0.1:40690 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:54:53.677 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39382 10 6452 1 2025-09-04 16:54:59.494 00:00:10.385 TCP 23.104.0.1:43574 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:55:53.891 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43136 10 6452 1 2025-09-04 16:55:59.931 00:00:10.395 TCP 23.104.0.1:51798 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:56:54.109 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37926 10 6452 1 2025-09-04 16:57:00.361 00:00:10.374 TCP 23.104.0.1:48354 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:57:54.280 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40532 10 6452 1 2025-09-04 16:58:11.042 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 16:58:00.773 00:00:10.368 TCP 23.104.0.1:58712 -> 1.101.0.1:3000 11 1507 1 2025-09-04 16:58:10.953 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 16:54:23.608 00:05:00.678 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 499159, total packets: 1565, avg bps: 1039, avg pps: 0, avg bpp: 318 Time window: 2025-09-04 15:55:23 - 2025-09-04 16:59:24 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0052s User: 0.0009s Wall: 0.0031s flows/second: 52890.0 Runtime: 0.0031s