Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 09:58:59.543 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60838 10 6452 1 2025-09-03 09:59:06.532 00:00:10.365 TCP 23.104.0.1:35952 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:59:59.709 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50032 10 6452 1 2025-09-03 10:00:06.935 00:00:10.377 TCP 23.104.0.1:37482 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:00:59.920 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34798 10 6452 1 2025-09-03 10:01:07.345 00:00:10.366 TCP 23.104.0.1:51026 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:02:00.133 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49074 10 6452 1 2025-09-03 10:02:07.750 00:00:10.327 TCP 23.104.0.1:37100 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:02:33.752 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 10:02:33.747 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 10:03:00.341 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37038 10 6452 1 2025-09-03 10:03:08.117 00:00:10.359 TCP 23.104.0.1:39832 -> 1.101.0.1:3000 11 1507 1 2025-09-03 09:59:22.841 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 10:04:00.513 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:32812 10 6452 1 2025-09-03 10:04:08.519 00:00:10.365 TCP 23.104.0.1:54468 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:00:22.839 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 10:05:00.683 00:00:10.494 TCP 1.101.0.1:3000 -> 22.102.0.1:57276 10 6452 1 2025-09-03 10:05:08.925 00:00:10.387 TCP 23.104.0.1:36750 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:06:01.212 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43650 10 6452 1 2025-09-03 10:06:09.359 00:00:10.326 TCP 23.104.0.1:44108 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:07:01.424 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57610 10 6452 1 2025-09-03 10:07:09.726 00:00:10.368 TCP 23.104.0.1:33954 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:07:33.838 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 10:07:33.663 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 10:08:01.640 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48104 10 6452 1 2025-09-03 10:08:10.135 00:00:10.366 TCP 23.104.0.1:36890 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:09:01.820 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:60108 10 6452 1 2025-09-03 10:09:10.541 00:00:10.324 TCP 23.104.0.1:54974 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:05:22.842 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 10:10:02.104 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46170 10 6452 1 2025-09-03 10:10:10.910 00:00:10.326 TCP 23.104.0.1:50034 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:06:22.843 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 10:11:02.317 00:00:12.255 TCP 1.101.0.1:3000 -> 22.102.0.1:48774 10 6452 1 2025-09-03 10:11:11.277 00:00:10.367 TCP 23.104.0.1:38410 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:12:04.609 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45428 10 6452 1 2025-09-03 10:12:11.682 00:00:10.381 TCP 23.104.0.1:46080 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:12:34.054 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 10:12:33.827 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 10:13:04.824 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35700 10 6452 1 2025-09-03 10:13:12.105 00:00:10.370 TCP 23.104.0.1:55842 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:14:05.064 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46646 10 6452 1 2025-09-03 10:14:12.512 00:00:10.384 TCP 23.104.0.1:54606 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:15:05.277 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36672 10 6452 1 2025-09-03 10:11:22.863 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 10:15:12.955 00:00:10.344 TCP 23.104.0.1:41442 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:16:05.487 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54304 10 6452 1 2025-09-03 10:12:22.860 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 10:16:13.342 00:00:10.372 TCP 23.104.0.1:37844 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:17:05.704 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35496 10 6452 1 2025-09-03 10:17:13.757 00:00:10.385 TCP 23.104.0.1:53216 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:17:33.967 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 10:17:34.157 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 10:18:05.912 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43098 10 6452 1 2025-09-03 10:18:14.180 00:00:10.367 TCP 23.104.0.1:44882 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:19:06.124 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47720 10 6452 1 2025-09-03 10:19:14.590 00:00:10.324 TCP 23.104.0.1:47316 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:20:06.340 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37164 10 6452 1 2025-09-03 10:20:14.951 00:00:10.373 TCP 23.104.0.1:34576 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:21:06.553 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60124 10 6452 1 2025-09-03 10:21:15.357 00:00:10.361 TCP 23.104.0.1:45288 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:17:22.864 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 10:22:06.765 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38532 10 6452 1 2025-09-03 10:18:22.862 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 10:22:15.759 00:00:10.383 TCP 23.104.0.1:33520 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:22:34.301 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 10:22:34.206 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 10:23:06.975 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58552 10 6452 1 2025-09-03 10:23:16.176 00:00:10.365 TCP 23.104.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:24:07.209 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46226 10 6452 1 2025-09-03 10:24:16.580 00:00:10.323 TCP 23.104.0.1:33534 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:25:07.419 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39934 10 6452 1 2025-09-03 10:25:16.940 00:00:10.374 TCP 23.104.0.1:44462 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:26:07.635 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60848 10 6452 1 2025-09-03 10:26:17.356 00:00:10.370 TCP 23.104.0.1:36360 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:27:07.856 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37022 10 6452 1 2025-09-03 10:23:22.865 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 10:27:17.760 00:00:10.381 TCP 23.104.0.1:43166 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:27:34.060 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 10:27:34.177 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 10:28:08.068 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56904 10 6452 1 2025-09-03 10:24:22.862 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 10:28:18.182 00:00:10.363 TCP 23.104.0.1:37296 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:29:08.238 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38094 10 6452 1 2025-09-03 10:29:18.580 00:00:10.713 TCP 23.104.0.1:38846 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:30:08.453 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42122 10 6452 1 2025-09-03 10:30:19.330 00:00:10.325 TCP 23.104.0.1:40622 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:31:08.661 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56948 10 6452 1 2025-09-03 10:31:19.694 00:00:10.366 TCP 23.104.0.1:41172 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:32:08.871 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36784 10 6452 1 2025-09-03 10:32:20.106 00:00:10.363 TCP 23.104.0.1:34408 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:32:34.335 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 10:32:34.346 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 10:33:09.098 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47464 10 6452 1 2025-09-03 10:29:22.866 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 10:33:20.502 00:00:10.325 TCP 23.104.0.1:60910 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:34:09.315 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37534 10 6452 1 2025-09-03 10:30:22.862 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 10:34:20.866 00:00:10.326 TCP 23.104.0.1:48966 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:35:09.527 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47714 10 6452 1 2025-09-03 10:35:21.235 00:00:10.323 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:36:09.740 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2025-09-03 10:36:21.596 00:00:10.322 TCP 23.104.0.1:59862 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:37:09.963 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:49242 10 6452 1 2025-09-03 10:37:34.493 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 10:37:21.957 00:00:10.330 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:37:34.500 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 10:38:10.153 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51066 10 6452 1 2025-09-03 10:38:22.327 00:00:10.369 TCP 23.104.0.1:45136 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:39:10.328 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53714 10 6452 1 2025-09-03 10:35:22.866 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 10:39:22.737 00:00:10.368 TCP 23.104.0.1:58120 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:40:10.539 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52688 10 6452 1 2025-09-03 10:36:22.865 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 10:40:23.143 00:00:10.363 TCP 23.104.0.1:58040 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:41:10.748 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54322 10 6452 1 2025-09-03 10:41:23.543 00:00:10.357 TCP 23.104.0.1:33996 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:42:10.965 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45356 10 6452 1 2025-09-03 10:42:34.465 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 10:42:34.332 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 10:42:23.946 00:00:10.332 TCP 23.104.0.1:38374 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:43:11.144 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34382 10 6452 1 2025-09-03 10:43:24.314 00:00:10.365 TCP 23.104.0.1:48810 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:44:11.311 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46812 10 6452 1 2025-09-03 10:44:24.714 00:00:10.384 TCP 23.104.0.1:50178 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:45:11.532 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42334 10 6452 1 2025-09-03 10:41:22.868 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 10:45:25.144 00:00:10.326 TCP 23.104.0.1:45758 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:46:11.737 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35430 10 6452 1 2025-09-03 10:42:22.866 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 10:46:25.515 00:00:10.325 TCP 23.104.0.1:36936 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:47:11.946 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:49748 10 6452 1 2025-09-03 10:47:34.768 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 10:47:34.606 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 10:47:25.879 00:00:10.393 TCP 23.104.0.1:48096 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:48:12.217 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51938 10 6452 1 2025-09-03 10:48:26.325 00:00:10.361 TCP 23.104.0.1:59554 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:49:12.432 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 10 6452 1 2025-09-03 10:49:26.725 00:00:10.372 TCP 23.104.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:50:12.643 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39938 10 6452 1 2025-09-03 10:50:27.138 00:00:10.322 TCP 23.104.0.1:50786 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:47:22.870 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 10:51:12.856 00:00:10.541 TCP 1.101.0.1:3000 -> 22.102.0.1:42356 10 6452 1 2025-09-03 10:51:27.496 00:00:10.365 TCP 23.104.0.1:56652 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:52:13.439 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40404 10 6452 1 2025-09-03 10:48:22.867 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 10:52:35.224 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 10:52:35.065 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 10:52:27.899 00:00:10.330 TCP 23.104.0.1:59868 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:53:13.651 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38056 10 6452 1 2025-09-03 10:53:28.273 00:00:10.318 TCP 23.104.0.1:60462 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:54:13.863 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40968 10 6452 1 2025-09-03 10:54:28.631 00:00:10.370 TCP 23.104.0.1:33680 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:55:14.094 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47986 10 6452 1 2025-09-03 10:55:29.035 00:00:10.363 TCP 23.104.0.1:43600 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:56:14.307 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48066 10 6452 1 2025-09-03 10:56:29.436 00:00:10.342 TCP 23.104.0.1:43326 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:53:22.870 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 10:57:14.522 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37586 10 6452 1 2025-09-03 10:57:34.772 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 10:57:35.051 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 10:57:29.818 00:00:10.367 TCP 23.104.0.1:47576 -> 1.101.0.1:3000 11 1507 1 2025-09-03 10:58:14.728 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:49416 12 10367 1 2025-09-03 10:54:22.868 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 10:58:30.230 00:00:10.440 TCP 23.104.0.1:53910 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1109, avg pps: 0, avg bpp: 318 Time window: 2025-09-03 09:58:59 - 2025-09-03 10:59:23 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0019s Wall: 0.0030s flows/second: 54631.6 Runtime: 0.0030s