Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 15:59:19.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56330 10 6452 1 2025-09-03 15:59:39.396 00:00:10.363 TCP 23.104.0.1:43352 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:00:19.260 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46948 10 6452 1 2025-09-03 16:00:39.796 00:00:10.377 TCP 23.104.0.1:52056 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:01:19.433 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49062 10 6452 1 2025-09-03 16:01:40.216 00:00:10.365 TCP 23.104.0.1:54018 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:02:19.650 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52556 10 6452 1 2025-09-03 16:02:40.820 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 16:02:40.856 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 16:02:40.619 00:00:10.361 TCP 23.104.0.1:43626 -> 1.101.0.1:3000 11 1507 1 2025-09-03 15:59:22.975 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 16:03:19.871 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42400 12 10367 1 2025-09-03 16:03:41.022 00:00:10.444 TCP 23.104.0.1:38432 -> 1.101.0.1:3000 15 1926 1 2025-09-03 16:00:22.975 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 16:04:20.085 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56816 10 6452 1 2025-09-03 16:04:41.498 00:00:10.366 TCP 23.104.0.1:43062 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:05:20.298 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50594 10 6452 1 2025-09-03 16:05:41.904 00:00:10.365 TCP 23.104.0.1:56724 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:06:20.510 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47896 10 6452 1 2025-09-03 16:06:42.313 00:00:10.325 TCP 23.104.0.1:37010 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:07:20.724 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60914 10 6452 1 2025-09-03 16:07:40.962 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 16:07:41.254 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 16:07:42.678 00:00:10.379 TCP 23.104.0.1:36110 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:08:20.938 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49196 10 6452 1 2025-09-03 16:08:43.103 00:00:10.365 TCP 23.104.0.1:59100 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:05:22.980 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 16:09:21.174 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39844 10 6452 1 2025-09-03 16:09:43.505 00:00:10.377 TCP 23.104.0.1:54926 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:06:22.979 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 16:10:21.350 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34418 10 6452 1 2025-09-03 16:10:43.930 00:00:10.343 TCP 23.104.0.1:45488 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:11:21.566 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44882 10 6452 1 2025-09-03 16:11:44.310 00:00:10.358 TCP 23.104.0.1:47066 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:12:21.780 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56738 10 6452 1 2025-09-03 16:12:41.216 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 16:12:40.939 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 16:12:44.720 00:00:10.373 TCP 23.104.0.1:44228 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:13:21.994 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56256 10 6452 1 2025-09-03 16:13:45.141 00:00:10.339 TCP 23.104.0.1:59940 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:14:22.216 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32978 10 6452 1 2025-09-03 16:14:45.520 00:00:10.363 TCP 23.104.0.1:60514 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:11:22.983 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 16:15:22.434 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39828 10 6452 1 2025-09-03 16:15:45.917 00:00:10.347 TCP 23.104.0.1:40536 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:12:22.980 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 16:16:22.662 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:42622 10 6452 1 2025-09-03 16:16:46.307 00:00:10.320 TCP 23.104.0.1:58714 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:17:22.869 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40978 10 6452 1 2025-09-03 16:17:41.558 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 16:17:41.410 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 16:17:46.666 00:00:10.368 TCP 23.104.0.1:47088 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:18:23.107 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43778 10 6452 1 2025-09-03 16:18:47.100 00:00:10.742 TCP 23.104.0.1:45390 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:19:23.285 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60008 10 6452 1 2025-09-03 16:19:47.884 00:00:10.439 TCP 23.104.0.1:34960 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:20:23.520 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54566 10 6452 1 2025-09-03 16:20:48.366 00:00:10.356 TCP 23.104.0.1:57692 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:17:22.985 00:05:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 16:21:23.734 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47258 10 6452 1 2025-09-03 16:21:48.766 00:00:10.367 TCP 23.104.0.1:54964 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:18:22.984 00:05:00.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 16:22:23.948 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:39168 10 6452 1 2025-09-03 16:22:41.455 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 16:22:41.341 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 16:22:49.172 00:00:10.365 TCP 23.104.0.1:34314 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:23:24.142 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44102 10 6452 1 2025-09-03 16:23:49.575 00:00:10.365 TCP 23.104.0.1:49856 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:24:24.361 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50200 10 6452 1 2025-09-03 16:24:49.984 00:00:10.323 TCP 23.104.0.1:60180 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:25:24.571 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51672 10 6452 1 2025-09-03 16:25:50.350 00:00:10.362 TCP 23.104.0.1:60942 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:26:24.784 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49064 10 6452 1 2025-09-03 16:26:50.758 00:00:10.374 TCP 23.104.0.1:47678 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:23:22.989 00:05:00.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 16:27:24.955 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58898 10 6452 1 2025-09-03 16:27:41.652 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 16:27:41.534 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 16:27:51.173 00:00:10.362 TCP 23.104.0.1:60138 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:24:22.987 00:05:00.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 16:28:25.186 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35156 10 6452 1 2025-09-03 16:28:51.573 00:00:10.363 TCP 23.104.0.1:45288 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:29:25.438 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39350 10 6452 1 2025-09-03 16:29:51.979 00:00:10.859 TCP 23.104.0.1:52054 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:30:25.650 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56384 10 6452 1 2025-09-03 16:30:52.875 00:00:10.365 TCP 23.104.0.1:59192 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:31:25.863 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54748 10 6452 1 2025-09-03 16:31:53.288 00:00:10.373 TCP 23.104.0.1:38460 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:32:26.090 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55160 10 6452 1 2025-09-03 16:32:41.401 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 16:32:41.590 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 16:32:53.698 00:00:10.364 TCP 23.104.0.1:59346 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:29:22.992 00:05:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 16:33:26.298 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53526 10 6452 1 2025-09-03 16:33:54.110 00:00:10.367 TCP 23.104.0.1:51728 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:30:22.990 00:05:00.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 16:34:26.514 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33224 10 6452 1 2025-09-03 16:34:54.518 00:00:10.364 TCP 23.104.0.1:53156 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:35:26.737 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50400 10 6452 1 2025-09-03 16:35:54.918 00:00:10.360 TCP 23.104.0.1:35356 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:36:26.947 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60982 10 6452 1 2025-09-03 16:36:55.317 00:00:10.361 TCP 23.104.0.1:47154 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:37:41.808 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 16:37:41.769 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 16:37:27.180 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57094 10 6452 1 2025-09-03 16:37:55.717 00:00:10.326 TCP 23.104.0.1:52862 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:38:27.390 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50662 10 6452 1 2025-09-03 16:38:56.102 00:00:10.378 TCP 23.104.0.1:33180 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:35:22.993 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 16:39:27.567 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40404 10 6452 1 2025-09-03 16:39:56.516 00:00:10.330 TCP 23.104.0.1:43858 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:36:22.991 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 16:40:27.783 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:60304 10 6452 1 2025-09-03 16:40:56.880 00:00:10.363 TCP 23.104.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:41:27.988 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58136 10 6452 1 2025-09-03 16:41:57.282 00:00:10.365 TCP 23.104.0.1:42558 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:42:28.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46252 10 6452 1 2025-09-03 16:42:41.853 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 16:42:41.856 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 16:42:57.685 00:00:10.652 TCP 23.104.0.1:57616 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:43:28.431 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54794 10 6452 1 2025-09-03 16:43:58.388 00:00:10.365 TCP 23.104.0.1:50486 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:44:28.608 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:44974 10 6452 1 2025-09-03 16:44:58.790 00:00:10.384 TCP 23.104.0.1:47996 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:45:28.815 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40230 10 6452 1 2025-09-03 16:45:59.212 00:00:10.370 TCP 23.104.0.1:50494 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:41:23.015 00:06:00.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 16:46:29.041 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49122 10 6452 1 2025-09-03 16:46:59.621 00:00:10.366 TCP 23.104.0.1:52342 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:42:23.022 00:06:00.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 16:47:29.250 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40328 10 6452 1 2025-09-03 16:47:41.792 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 16:47:42.032 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 16:48:00.027 00:00:10.437 TCP 23.104.0.1:60236 -> 1.101.0.1:3000 15 1926 1 2025-09-03 16:48:29.467 00:00:10.395 TCP 1.101.0.1:3000 -> 22.102.0.1:59444 12 10367 1 2025-09-03 16:49:00.506 00:00:10.364 TCP 23.104.0.1:60476 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:49:29.895 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59764 10 6452 1 2025-09-03 16:50:00.910 00:00:10.364 TCP 23.104.0.1:58420 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:50:30.112 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40600 10 6452 1 2025-09-03 16:51:01.315 00:00:10.376 TCP 23.104.0.1:45588 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:51:30.321 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39178 10 6452 1 2025-09-03 16:52:01.730 00:00:10.367 TCP 23.104.0.1:43908 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:52:30.537 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60906 10 6452 1 2025-09-03 16:52:42.299 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 16:52:42.067 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 16:53:02.131 00:00:10.362 TCP 23.104.0.1:35964 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:48:23.036 00:06:00.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 16:53:30.749 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42048 10 6452 1 2025-09-03 16:54:02.529 00:00:10.326 TCP 23.104.0.1:53638 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:49:23.035 00:06:00.745 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 16:54:30.965 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59898 10 6452 1 2025-09-03 16:55:02.890 00:00:10.379 TCP 23.104.0.1:36410 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:55:31.187 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46480 10 6452 1 2025-09-03 16:56:03.306 00:00:10.367 TCP 23.104.0.1:60104 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:56:31.360 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53376 10 6452 1 2025-09-03 16:57:03.709 00:00:10.366 TCP 23.104.0.1:40898 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:57:31.537 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47336 10 6452 1 2025-09-03 16:57:41.934 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 16:57:42.205 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 16:58:04.118 00:00:10.363 TCP 23.104.0.1:50864 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:58:31.724 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50486 10 6452 1 Summary: total flows: 161, total bytes: 504525, total packets: 1557, avg bps: 1132, avg pps: 0, avg bpp: 324 Time window: 2025-09-03 15:59:19 - 2025-09-03 16:58:41 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0038s User: 0.0008s Wall: 0.0027s flows/second: 60411.8 Runtime: 0.0027s