Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 07:58:55.189 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36926 10 6452 1 2025-09-04 07:55:23.432 00:05:00.673 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 07:59:19.026 00:00:10.371 TCP 23.104.0.1:47028 -> 1.101.0.1:3000 11 1507 1 2025-09-04 07:59:55.412 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58198 10 6452 1 2025-09-04 08:00:19.430 00:00:10.361 TCP 23.104.0.1:34678 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:00:55.624 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41218 10 6452 1 2025-09-04 08:01:19.831 00:00:10.390 TCP 23.104.0.1:58188 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:01:55.827 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56620 10 6452 1 2025-09-04 08:02:20.267 00:00:10.329 TCP 23.104.0.1:48312 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:02:59.977 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 08:03:00.249 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 08:02:56.073 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46426 10 6452 1 2025-09-04 08:03:20.634 00:00:10.367 TCP 23.104.0.1:57830 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:03:56.285 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36818 10 6452 1 2025-09-04 08:00:23.433 00:05:00.675 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 08:04:21.050 00:00:10.363 TCP 23.104.0.1:32790 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:04:56.499 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54506 10 6452 1 2025-09-04 08:01:23.436 00:05:00.671 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 08:05:21.447 00:00:10.368 TCP 23.104.0.1:57496 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:05:56.667 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50080 10 6452 1 2025-09-04 08:06:21.847 00:00:10.386 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:06:56.850 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42762 10 6452 1 2025-09-04 08:07:22.268 00:00:10.365 TCP 23.104.0.1:39290 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:08:00.371 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 08:08:00.352 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 08:07:57.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53258 10 6452 1 2025-09-04 08:08:22.667 00:00:10.364 TCP 23.104.0.1:54816 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:08:57.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47732 10 6452 1 2025-09-04 08:09:23.100 00:00:10.326 TCP 23.104.0.1:49728 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:09:57.510 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39412 10 6452 1 2025-09-04 08:06:23.434 00:05:00.676 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 08:10:23.465 00:00:10.367 TCP 23.104.0.1:60734 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:10:57.725 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41304 10 6452 1 2025-09-04 08:07:23.436 00:05:00.671 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 08:11:23.873 00:00:10.394 TCP 23.104.0.1:53674 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:11:57.941 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59452 10 6452 1 2025-09-04 08:12:24.299 00:00:10.371 TCP 23.104.0.1:38988 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:13:00.714 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 08:13:00.463 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 08:12:58.177 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-09-04 08:13:24.706 00:00:10.369 TCP 23.104.0.1:47398 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:13:58.393 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51004 10 6452 1 2025-09-04 08:14:25.111 00:00:10.322 TCP 23.104.0.1:47838 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:14:58.565 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57846 10 6452 1 2025-09-04 08:15:25.476 00:00:10.367 TCP 23.104.0.1:51682 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:15:58.793 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-09-04 08:12:23.441 00:05:00.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 08:16:25.873 00:00:10.364 TCP 23.104.0.1:41230 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:16:59.009 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33672 10 6452 1 2025-09-04 08:13:23.443 00:05:00.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 08:17:26.274 00:00:10.365 TCP 23.104.0.1:49516 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:18:00.515 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 08:18:00.615 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 08:17:59.224 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 12 10367 1 2025-09-04 08:18:26.685 00:00:10.455 TCP 23.104.0.1:38812 -> 1.101.0.1:3000 15 1926 1 2025-09-04 08:18:59.456 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33964 10 6452 1 2025-09-04 08:19:27.180 00:00:10.362 TCP 23.104.0.1:33822 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:19:59.632 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:41142 10 6452 1 2025-09-04 08:20:27.584 00:00:10.331 TCP 23.104.0.1:45952 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:20:59.806 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42786 10 6452 1 2025-09-04 08:21:27.954 00:00:10.368 TCP 23.104.0.1:60706 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:22:00.043 00:00:10.276 TCP 1.101.0.1:3000 -> 22.102.0.1:58998 10 6452 1 2025-09-04 08:18:23.441 00:05:00.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 08:22:28.360 00:00:10.386 TCP 23.104.0.1:52820 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:23:00.753 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 08:23:00.571 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 08:23:00.359 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47734 10 6452 1 2025-09-04 08:19:23.443 00:05:00.665 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 08:23:28.760 00:00:10.379 TCP 23.104.0.1:38902 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:24:00.569 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38262 10 6452 1 2025-09-04 08:24:29.173 00:00:10.752 TCP 23.104.0.1:51696 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:25:00.782 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60554 10 6452 1 2025-09-04 08:25:29.961 00:00:10.370 TCP 23.104.0.1:59536 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:26:00.991 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44076 10 6452 1 2025-09-04 08:26:30.370 00:00:10.368 TCP 23.104.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:27:01.166 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34346 10 6452 1 2025-09-04 08:27:30.773 00:00:10.332 TCP 23.104.0.1:43272 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:28:00.855 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 08:28:00.700 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 08:28:01.381 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49872 10 6452 1 2025-09-04 08:24:23.443 00:05:00.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 08:28:31.142 00:00:10.360 TCP 23.104.0.1:56862 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:29:01.602 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47492 10 6452 1 2025-09-04 08:25:23.447 00:05:00.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 08:29:31.544 00:00:10.365 TCP 23.104.0.1:50650 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:30:01.815 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51184 10 6452 1 2025-09-04 08:30:31.946 00:00:10.374 TCP 23.104.0.1:32814 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:31:01.987 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43040 10 6452 1 2025-09-04 08:31:32.354 00:00:10.368 TCP 23.104.0.1:60414 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:32:02.222 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41934 10 6452 1 2025-09-04 08:32:32.761 00:00:10.378 TCP 23.104.0.1:46082 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:33:00.917 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 08:33:00.770 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 08:33:02.442 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38132 10 6452 1 2025-09-04 08:33:33.177 00:00:10.699 TCP 23.104.0.1:47952 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:34:02.612 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48190 10 6452 1 2025-09-04 08:30:23.445 00:05:00.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 08:34:33.913 00:00:10.411 TCP 23.104.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:35:02.824 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:48014 10 6452 1 2025-09-04 08:31:23.448 00:05:00.665 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 08:35:34.364 00:00:10.364 TCP 23.104.0.1:57432 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:36:02.993 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47970 10 6452 1 2025-09-04 08:36:34.771 00:00:10.374 TCP 23.104.0.1:60848 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:37:03.224 00:00:10.356 TCP 1.101.0.1:3000 -> 22.102.0.1:48058 10 6452 1 2025-09-04 08:37:35.182 00:00:10.366 TCP 23.104.0.1:49434 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:38:01.266 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 08:38:01.321 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 08:38:03.615 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:54926 12 10367 1 2025-09-04 08:38:35.582 00:00:10.402 TCP 23.104.0.1:42188 -> 1.101.0.1:3000 15 1926 1 2025-09-04 08:39:03.823 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47104 10 6452 1 2025-09-04 08:39:36.027 00:00:10.367 TCP 23.104.0.1:60124 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:40:03.994 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57004 10 6452 1 2025-09-04 08:36:23.448 00:05:00.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 08:40:36.432 00:00:10.363 TCP 23.104.0.1:54338 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:41:04.228 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51260 10 6452 1 2025-09-04 08:37:23.451 00:05:00.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 08:41:36.840 00:00:10.392 TCP 23.104.0.1:41500 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:42:04.450 00:00:10.430 TCP 1.101.0.1:3000 -> 22.102.0.1:55482 10 6452 1 2025-09-04 08:42:37.262 00:00:10.363 TCP 23.104.0.1:59368 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:43:00.967 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 08:43:01.089 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 08:43:04.918 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37812 12 10367 1 2025-09-04 08:43:37.664 00:00:10.445 TCP 23.104.0.1:35060 -> 1.101.0.1:3000 15 1926 1 2025-09-04 08:44:05.135 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57282 10 6452 1 2025-09-04 08:44:38.145 00:00:10.366 TCP 23.104.0.1:40988 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:45:05.353 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50992 10 6452 1 2025-09-04 08:45:38.559 00:00:10.365 TCP 23.104.0.1:59820 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:46:05.580 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39966 10 6452 1 2025-09-04 08:42:23.451 00:05:00.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 08:46:38.966 00:00:10.375 TCP 23.104.0.1:47376 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:47:05.759 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36326 10 6452 1 2025-09-04 08:43:23.454 00:05:00.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 08:47:39.376 00:00:10.364 TCP 23.104.0.1:38284 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:48:01.268 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 08:48:01.112 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 08:48:05.973 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 13 6608 1 2025-09-04 08:48:39.782 00:00:10.368 TCP 23.104.0.1:52582 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:49:06.252 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55988 10 6452 1 2025-09-04 08:49:40.187 00:00:10.371 TCP 23.104.0.1:39606 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:50:06.475 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55710 10 6452 1 2025-09-04 08:50:40.591 00:00:10.365 TCP 23.104.0.1:46824 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:51:06.686 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43314 10 6452 1 2025-09-04 08:51:40.992 00:00:10.412 TCP 23.104.0.1:37826 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:52:06.861 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59142 10 6452 1 2025-09-04 08:48:23.456 00:05:00.665 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 08:52:41.446 00:00:10.339 TCP 23.104.0.1:53896 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:53:01.228 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 08:53:01.088 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 08:53:07.092 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35476 10 6452 1 2025-09-04 08:49:23.456 00:05:00.662 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 08:53:41.808 00:00:10.369 TCP 23.104.0.1:51736 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:54:07.299 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38874 10 6452 1 2025-09-04 08:54:42.211 00:00:10.373 TCP 23.104.0.1:46144 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:55:07.508 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57034 10 6452 1 2025-09-04 08:55:42.628 00:00:10.408 TCP 23.104.0.1:35266 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:56:07.680 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46442 10 6452 1 2025-09-04 08:56:43.099 00:00:10.373 TCP 23.104.0.1:58730 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:57:07.894 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60984 10 6452 1 2025-09-04 08:57:43.512 00:00:10.365 TCP 23.104.0.1:57516 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:58:01.518 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 08:58:01.604 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 08:58:08.123 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48334 10 6452 1 2025-09-04 08:54:23.456 00:05:00.665 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 163, total bytes: 509999, total packets: 1582, avg bps: 1062, avg pps: 0, avg bpp: 322 Time window: 2025-09-04 07:55:23 - 2025-09-04 08:59:24 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0114s User: 0.0000s Wall: 0.0035s flows/second: 46932.9 Runtime: 0.0035s