Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 17:58:44.839 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60470 10 6452 1 2025-09-03 17:59:30.460 00:00:10.368 TCP 23.104.0.1:59070 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:59:45.085 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49326 10 6452 1 2025-09-03 18:00:30.866 00:00:10.374 TCP 23.104.0.1:55774 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:00:45.296 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35070 10 6452 1 2025-09-03 18:01:31.280 00:00:10.370 TCP 23.104.0.1:54834 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:01:45.509 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55942 10 6452 1 2025-09-03 18:02:43.346 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 18:02:43.481 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 18:02:31.683 00:00:10.367 TCP 23.104.0.1:42748 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:02:45.718 00:00:10.260 TCP 1.101.0.1:3000 -> 22.102.0.1:48672 10 6452 1 2025-09-03 17:58:23.072 00:06:00.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 18:03:32.108 00:00:10.377 TCP 23.104.0.1:44062 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:03:46.031 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34842 10 6452 1 2025-09-03 17:59:23.068 00:06:00.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 18:04:32.533 00:00:10.368 TCP 23.104.0.1:44450 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:04:46.246 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38576 10 6452 1 2025-09-03 18:05:32.941 00:00:10.331 TCP 23.104.0.1:44026 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:05:46.421 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43798 10 6452 1 2025-09-03 18:06:33.306 00:00:10.367 TCP 23.104.0.1:48110 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:06:46.632 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33150 10 6452 1 2025-09-03 18:07:43.547 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 18:07:33.710 00:00:10.385 TCP 23.104.0.1:47276 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:07:43.270 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 18:07:46.845 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49796 10 6452 1 2025-09-03 18:08:34.121 00:00:10.365 TCP 23.104.0.1:54506 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:08:47.081 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46810 10 6452 1 2025-09-03 18:09:34.526 00:00:10.366 TCP 23.104.0.1:58918 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:09:47.294 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47344 10 6452 1 2025-09-03 18:05:23.073 00:06:00.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 18:10:34.933 00:00:10.390 TCP 23.104.0.1:39868 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:10:47.505 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40436 10 6452 1 2025-09-03 18:06:23.069 00:06:00.732 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 18:11:35.367 00:00:10.371 TCP 23.104.0.1:33994 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:11:47.719 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33136 10 6452 1 2025-09-03 18:12:43.365 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 18:12:43.668 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 18:12:35.779 00:00:10.368 TCP 23.104.0.1:39598 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:12:47.940 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:46526 10 6452 1 2025-09-03 18:13:36.182 00:00:10.371 TCP 23.104.0.1:37236 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:13:48.137 00:00:10.514 TCP 1.101.0.1:3000 -> 22.102.0.1:46666 10 6452 1 2025-09-03 18:14:36.588 00:00:10.365 TCP 23.104.0.1:51948 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:14:48.691 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59164 10 6452 1 2025-09-03 18:15:36.992 00:00:10.324 TCP 23.104.0.1:55122 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:15:48.909 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:46730 10 6452 1 2025-09-03 18:16:37.357 00:00:10.330 TCP 23.104.0.1:37528 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:16:49.174 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49142 10 6452 1 2025-09-03 18:12:23.074 00:06:00.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 18:17:44.220 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 18:17:43.995 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 18:17:37.721 00:00:10.327 TCP 23.104.0.1:38148 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:17:49.382 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51914 10 6452 1 2025-09-03 18:13:23.070 00:06:00.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 18:18:38.103 00:00:10.326 TCP 23.104.0.1:34514 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:18:49.561 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55142 10 6452 1 2025-09-03 18:19:38.469 00:00:10.326 TCP 23.104.0.1:51032 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:19:49.771 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57838 10 6452 1 2025-09-03 18:20:38.832 00:00:10.796 TCP 23.104.0.1:59088 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:20:49.985 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44434 10 6452 1 2025-09-03 18:21:39.687 00:00:10.370 TCP 23.104.0.1:42352 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:21:50.217 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59728 10 6452 1 2025-09-03 18:22:44.174 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 18:22:44.080 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 18:22:40.109 00:00:10.359 TCP 23.104.0.1:40418 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:22:50.440 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41712 10 6452 1 2025-09-03 18:23:40.508 00:00:10.366 TCP 23.104.0.1:35302 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:23:50.614 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50624 10 6452 1 2025-09-03 18:19:23.077 00:06:00.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 18:24:40.910 00:00:10.369 TCP 23.104.0.1:40064 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:24:50.830 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34518 10 6452 1 2025-09-03 18:20:23.076 00:06:00.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 18:25:41.316 00:00:10.364 TCP 23.104.0.1:35486 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:25:51.073 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46884 10 6452 1 2025-09-03 18:26:41.717 00:00:10.374 TCP 23.104.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:26:51.283 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54788 10 6452 1 2025-09-03 18:27:43.754 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 18:27:43.961 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 18:27:42.127 00:00:10.363 TCP 23.104.0.1:58674 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:27:51.499 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46572 10 6452 1 2025-09-03 18:28:42.536 00:00:10.364 TCP 23.104.0.1:34918 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:28:51.712 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47446 10 6452 1 2025-09-03 18:29:42.936 00:00:10.370 TCP 23.104.0.1:47418 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:29:51.883 00:00:10.356 TCP 1.101.0.1:3000 -> 22.102.0.1:42252 10 6452 1 2025-09-03 18:30:43.344 00:00:10.361 TCP 23.104.0.1:53980 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:30:52.290 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47666 10 6452 1 2025-09-03 18:26:23.080 00:06:00.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 18:31:43.746 00:00:10.365 TCP 23.104.0.1:55186 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:31:52.504 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60542 10 6452 1 2025-09-03 18:27:23.077 00:06:00.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 18:32:43.956 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 18:32:43.939 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 18:32:44.146 00:00:10.368 TCP 23.104.0.1:44068 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:32:52.716 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37832 10 6452 1 2025-09-03 18:33:44.547 00:00:10.369 TCP 23.104.0.1:57116 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:33:52.889 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50980 10 6452 1 2025-09-03 18:34:44.956 00:00:10.375 TCP 23.104.0.1:51084 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:34:53.112 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33170 10 6452 1 2025-09-03 18:35:45.371 00:00:10.360 TCP 23.104.0.1:35370 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:35:53.286 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43788 10 6452 1 2025-09-03 18:36:45.767 00:00:10.377 TCP 23.104.0.1:33250 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:36:53.502 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51110 10 6452 1 2025-09-03 18:37:44.383 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 18:37:43.931 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 18:37:46.180 00:00:10.372 TCP 23.104.0.1:50342 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:37:53.720 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:32982 10 6452 1 2025-09-03 18:33:23.082 00:06:00.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 18:38:46.598 00:00:10.364 TCP 23.104.0.1:52582 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:38:53.945 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41222 10 6452 1 2025-09-03 18:34:23.078 00:06:00.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 18:39:46.996 00:00:10.339 TCP 23.104.0.1:39280 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:39:54.175 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54898 10 6452 1 2025-09-03 18:40:47.372 00:00:10.382 TCP 23.104.0.1:52146 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:40:54.349 00:00:10.511 TCP 1.101.0.1:3000 -> 22.102.0.1:59514 10 6452 1 2025-09-03 18:41:47.796 00:00:10.368 TCP 23.104.0.1:58860 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:41:54.907 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:54368 10 6452 1 2025-09-03 18:42:44.232 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 18:42:44.425 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 18:42:48.202 00:00:10.692 TCP 23.104.0.1:57278 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:42:55.090 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53200 10 6452 1 2025-09-03 18:43:48.934 00:00:10.378 TCP 23.104.0.1:59176 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:43:55.301 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55958 10 6452 1 2025-09-03 18:44:49.351 00:00:10.331 TCP 23.104.0.1:42650 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:44:55.517 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 10 6452 1 2025-09-03 18:40:23.081 00:06:00.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 18:45:49.721 00:00:10.375 TCP 23.104.0.1:52990 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:45:55.735 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58190 10 6452 1 2025-09-03 18:41:23.078 00:06:00.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 18:46:50.136 00:00:10.363 TCP 23.104.0.1:47852 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:46:55.944 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44996 10 6452 1 2025-09-03 18:47:44.433 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 18:47:44.295 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 18:47:50.540 00:00:10.436 TCP 23.104.0.1:35058 -> 1.101.0.1:3000 15 1926 1 2025-09-03 18:47:56.173 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51752 12 10367 1 2025-09-03 18:48:51.015 00:00:10.361 TCP 23.104.0.1:47226 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:48:56.416 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44146 10 6452 1 2025-09-03 18:49:51.416 00:00:10.321 TCP 23.104.0.1:51226 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:49:56.635 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43882 10 6452 1 2025-09-03 18:50:51.776 00:00:10.368 TCP 23.104.0.1:48064 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:50:56.847 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45882 10 6452 1 2025-09-03 18:51:52.184 00:00:10.372 TCP 23.104.0.1:35282 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:51:57.086 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36734 10 6452 1 2025-09-03 18:47:23.083 00:06:00.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 18:52:44.442 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 18:52:44.572 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 18:52:52.593 00:00:10.373 TCP 23.104.0.1:43302 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:52:57.300 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45166 10 6452 1 2025-09-03 18:48:23.080 00:06:00.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 18:53:53.004 00:00:10.365 TCP 23.104.0.1:46924 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:53:57.521 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35640 10 6452 1 2025-09-03 18:54:53.410 00:00:10.364 TCP 23.104.0.1:51584 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:54:57.735 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35036 10 6452 1 2025-09-03 18:55:53.814 00:00:10.366 TCP 23.104.0.1:52362 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:55:57.954 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:53428 12 6556 1 2025-09-03 18:56:54.222 00:00:10.365 TCP 23.104.0.1:33242 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:56:58.202 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51460 10 6452 1 2025-09-03 18:57:44.530 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 18:57:44.531 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 18:57:54.633 00:00:10.456 TCP 23.104.0.1:33188 -> 1.101.0.1:3000 15 1926 1 2025-09-03 18:57:58.423 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51770 12 10365 1 Summary: total flows: 159, total bytes: 504627, total packets: 1559, avg bps: 1125, avg pps: 0, avg bpp: 323 Time window: 2025-09-03 17:58:23 - 2025-09-03 18:58:08 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0032s User: 0.0021s Wall: 0.0029s flows/second: 55037.9 Runtime: 0.0029s