Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 08:55:23.926 00:05:00.706 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 08:59:34.299 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48360 10 6452 1 2025-09-05 08:59:37.927 00:00:10.349 TCP 23.104.0.1:40334 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:00:34.510 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44578 10 6452 1 2025-09-05 09:00:38.315 00:00:10.364 TCP 23.104.0.1:55660 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:01:34.725 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53046 10 6452 1 2025-09-05 09:01:38.717 00:00:10.375 TCP 23.104.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:02:34.941 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46220 10 6452 1 2025-09-05 09:02:39.122 00:00:10.327 TCP 23.104.0.1:55394 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:03:30.207 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 09:03:30.501 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 09:03:35.175 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:34732 14 14491 1 2025-09-05 09:03:39.493 00:00:10.519 TCP 23.104.0.1:40616 -> 1.101.0.1:3000 17 2241 1 2025-09-05 09:00:23.926 00:05:00.711 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 09:04:35.442 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33496 10 6661 1 2025-09-05 09:04:40.063 00:00:10.364 TCP 23.104.0.1:57216 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:01:23.927 00:05:00.706 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 09:05:35.659 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50652 10 6661 1 2025-09-05 09:05:40.462 00:00:10.368 TCP 23.104.0.1:50002 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:06:35.830 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34964 10 6661 1 2025-09-05 09:06:40.867 00:00:10.369 TCP 23.104.0.1:50282 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:07:36.065 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56232 10 6661 1 2025-09-05 09:07:41.272 00:00:10.364 TCP 23.104.0.1:45600 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:08:30.493 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 09:08:30.442 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 09:08:36.281 00:00:10.384 TCP 1.101.0.1:3000 -> 22.102.0.1:37368 10 6661 1 2025-09-05 09:08:41.687 00:00:10.326 TCP 23.104.0.1:52232 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:09:36.704 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38136 10 6661 1 2025-09-05 09:09:42.061 00:00:10.364 TCP 23.104.0.1:50274 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:06:23.925 00:05:00.712 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 09:10:36.929 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:39640 10 6661 1 2025-09-05 09:10:42.467 00:00:10.367 TCP 23.104.0.1:49876 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:07:23.928 00:05:00.707 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 09:11:37.175 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39850 10 6661 1 2025-09-05 09:11:42.870 00:00:10.367 TCP 23.104.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:12:37.395 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:59420 10 6661 1 2025-09-05 09:12:43.278 00:00:10.369 TCP 23.104.0.1:38838 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:13:30.522 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 09:13:30.355 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 09:13:37.637 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6661 1 2025-09-05 09:13:43.682 00:00:10.372 TCP 23.104.0.1:56838 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:14:37.875 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50320 10 6661 1 2025-09-05 09:14:44.112 00:00:10.366 TCP 23.104.0.1:38492 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:15:38.099 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6661 1 2025-09-05 09:15:44.527 00:00:10.328 TCP 23.104.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:12:23.927 00:05:00.711 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 09:16:38.319 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35018 10 6661 1 2025-09-05 09:16:44.888 00:00:10.386 TCP 23.104.0.1:53740 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:13:23.931 00:05:00.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 09:17:38.539 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 10 6661 1 2025-09-05 09:17:45.317 00:00:10.326 TCP 23.104.0.1:42514 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:18:30.711 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 09:18:30.612 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 09:18:38.762 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37180 10 6661 1 2025-09-05 09:18:45.682 00:00:10.394 TCP 23.104.0.1:53824 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:19:38.978 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54584 10 6661 1 2025-09-05 09:19:46.114 00:00:10.365 TCP 23.104.0.1:35390 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:20:39.221 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48792 10 6661 1 2025-09-05 09:20:46.513 00:00:10.369 TCP 23.104.0.1:41352 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:21:39.435 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43984 10 6661 1 2025-09-05 09:21:46.920 00:00:10.388 TCP 23.104.0.1:34626 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:18:23.929 00:05:00.711 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 09:22:39.644 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6661 1 2025-09-05 09:22:47.350 00:00:10.371 TCP 23.104.0.1:56614 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:19:23.932 00:05:00.706 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 09:23:30.698 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 09:23:30.801 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 09:23:39.861 00:00:10.774 TCP 1.101.0.1:3000 -> 22.102.0.1:48732 10 6661 1 2025-09-05 09:23:47.757 00:00:10.377 TCP 23.104.0.1:42600 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:24:40.674 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36296 10 6661 1 2025-09-05 09:24:48.187 00:00:10.323 TCP 23.104.0.1:57034 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:25:40.845 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54058 10 6661 1 2025-09-05 09:25:48.551 00:00:10.358 TCP 23.104.0.1:40226 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:26:41.092 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40562 10 6661 1 2025-09-05 09:26:48.952 00:00:10.367 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:27:41.302 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45346 10 6661 1 2025-09-05 09:27:49.357 00:00:10.329 TCP 23.104.0.1:49934 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:24:23.932 00:05:00.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 09:28:30.952 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 09:28:30.745 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 09:28:41.469 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54590 10 6661 1 2025-09-05 09:28:49.729 00:00:10.330 TCP 23.104.0.1:48596 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:25:23.935 00:05:00.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 09:29:41.691 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47536 10 6661 1 2025-09-05 09:29:50.105 00:00:10.331 TCP 23.104.0.1:34730 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:30:41.903 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57632 10 6661 1 2025-09-05 09:30:50.473 00:00:10.367 TCP 23.104.0.1:44034 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:31:42.115 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38346 10 6661 1 2025-09-05 09:31:50.877 00:00:10.387 TCP 23.104.0.1:43094 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:32:42.325 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47412 10 6661 1 2025-09-05 09:32:51.304 00:00:10.323 TCP 23.104.0.1:34634 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:33:30.990 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 09:33:30.743 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 09:33:42.545 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42800 10 6661 1 2025-09-05 09:33:51.665 00:00:10.367 TCP 23.104.0.1:33242 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:30:23.932 00:05:00.712 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 09:34:42.757 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35314 10 6661 1 2025-09-05 09:34:52.095 00:00:10.365 TCP 23.104.0.1:43226 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:31:23.936 00:05:00.707 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 09:35:42.987 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44074 10 6661 1 2025-09-05 09:35:52.506 00:00:10.363 TCP 23.104.0.1:56198 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:36:43.212 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51628 10 6661 1 2025-09-05 09:36:52.904 00:00:10.323 TCP 23.104.0.1:40474 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:37:43.425 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42034 10 6661 1 2025-09-05 09:37:53.264 00:00:10.329 TCP 23.104.0.1:53712 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:38:30.793 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 09:38:31.151 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 09:38:43.639 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41858 10 6661 1 2025-09-05 09:38:53.632 00:00:10.324 TCP 23.104.0.1:41832 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:39:43.808 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39716 10 6661 1 2025-09-05 09:39:53.995 00:00:10.361 TCP 23.104.0.1:56526 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:36:23.933 00:05:00.716 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 09:40:44.038 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44430 10 6661 1 2025-09-05 09:40:54.395 00:00:10.324 TCP 23.104.0.1:55322 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:37:23.937 00:05:00.710 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 09:41:44.254 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38524 10 6661 1 2025-09-05 09:41:54.758 00:00:10.374 TCP 23.104.0.1:41410 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:42:44.475 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34286 10 6661 1 2025-09-05 09:42:55.170 00:00:10.447 TCP 23.104.0.1:52804 -> 1.101.0.1:3000 15 1926 1 2025-09-05 09:43:30.948 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 09:43:31.303 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 09:43:44.698 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:50024 12 10367 1 2025-09-05 09:43:55.653 00:00:10.363 TCP 23.104.0.1:56870 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:44:44.941 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:33730 10 6452 1 2025-09-05 09:44:56.075 00:00:10.363 TCP 23.104.0.1:52982 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:45:45.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34636 10 6452 1 2025-09-05 09:45:56.474 00:00:10.367 TCP 23.104.0.1:57520 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:42:23.934 00:05:00.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 09:46:45.393 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57882 10 6452 1 2025-09-05 09:46:56.879 00:00:10.404 TCP 23.104.0.1:41130 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:43:23.938 00:05:00.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 09:47:45.609 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60836 10 6452 1 2025-09-05 09:47:57.322 00:00:10.359 TCP 23.104.0.1:48046 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:48:31.177 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 09:48:31.248 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 09:48:45.817 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56108 10 6452 1 2025-09-05 09:48:57.719 00:00:10.372 TCP 23.104.0.1:50250 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:49:46.045 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33508 10 6452 1 2025-09-05 09:49:58.131 00:00:10.368 TCP 23.104.0.1:60432 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:50:46.268 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50814 10 6452 1 2025-09-05 09:50:58.539 00:00:10.326 TCP 23.104.0.1:40508 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:51:46.478 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59124 10 6452 1 2025-09-05 09:51:58.903 00:00:10.324 TCP 23.104.0.1:41482 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:48:23.937 00:05:00.716 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 09:52:46.689 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40534 10 6452 1 2025-09-05 09:52:59.265 00:00:10.367 TCP 23.104.0.1:60682 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:49:23.941 00:05:00.711 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 09:53:31.299 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 09:53:31.448 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 09:53:46.909 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37474 10 6452 1 2025-09-05 09:53:59.672 00:00:10.364 TCP 23.104.0.1:37800 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:54:47.125 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37004 10 6452 1 2025-09-05 09:55:00.097 00:00:10.359 TCP 23.104.0.1:37352 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:55:47.341 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47112 10 6452 1 2025-09-05 09:56:00.492 00:00:10.363 TCP 23.104.0.1:38904 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:56:47.552 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33246 10 6452 1 2025-09-05 09:57:00.892 00:00:10.367 TCP 23.104.0.1:59520 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:57:47.762 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40706 10 6452 1 2025-09-05 09:58:01.301 00:00:10.359 TCP 23.104.0.1:44496 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:54:23.940 00:05:00.717 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 09:58:31.253 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 09:58:31.576 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 162, total bytes: 511647, total packets: 1567, avg bps: 1065, avg pps: 0, avg bpp: 326 Time window: 2025-09-05 08:55:23 - 2025-09-05 09:59:24 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0009s User: 0.0045s Wall: 0.0028s flows/second: 58084.9 Runtime: 0.0028s