Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 17:59:07.497 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41016 10 6452 1 2025-09-04 17:55:23.629 00:05:00.681 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 17:59:26.367 00:00:10.331 TCP 23.104.0.1:34700 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:00:07.672 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46710 10 6452 1 2025-09-04 18:00:26.738 00:00:10.371 TCP 23.104.0.1:48494 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:01:07.886 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58596 10 6452 1 2025-09-04 18:01:27.145 00:00:10.367 TCP 23.104.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:02:08.107 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41568 10 6452 1 2025-09-04 18:02:27.548 00:00:10.323 TCP 23.104.0.1:33714 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:03:12.205 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 18:03:12.291 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 18:03:08.316 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33638 10 6452 1 2025-09-04 18:03:27.905 00:00:10.370 TCP 23.104.0.1:59454 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:04:08.523 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42268 10 6452 1 2025-09-04 18:00:23.633 00:05:00.680 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 18:04:28.306 00:00:10.370 TCP 23.104.0.1:39792 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:05:08.735 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55248 10 6452 1 2025-09-04 18:01:23.636 00:05:00.675 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 18:05:28.718 00:00:10.379 TCP 23.104.0.1:51538 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:06:08.950 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51300 10 6452 1 2025-09-04 18:06:29.130 00:00:10.365 TCP 23.104.0.1:56128 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:07:09.172 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52744 10 6452 1 2025-09-04 18:07:29.538 00:00:10.360 TCP 23.104.0.1:35950 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:08:12.211 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 18:08:12.348 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 18:08:09.387 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55358 10 6452 1 2025-09-04 18:08:29.938 00:00:10.377 TCP 23.104.0.1:54218 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:09:09.601 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41340 10 6452 1 2025-09-04 18:09:30.356 00:00:10.326 TCP 23.104.0.1:46934 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:10:09.820 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56780 10 6452 1 2025-09-04 18:06:23.634 00:05:00.681 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 18:10:30.719 00:00:10.371 TCP 23.104.0.1:42730 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:11:10.040 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34984 10 6452 1 2025-09-04 18:07:23.637 00:05:00.675 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 18:11:31.131 00:00:10.360 TCP 23.104.0.1:58922 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:12:10.261 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52784 10 6452 1 2025-09-04 18:12:31.533 00:00:10.320 TCP 23.104.0.1:41178 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:13:12.393 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 18:13:12.542 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 18:13:10.471 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57204 12 10365 1 2025-09-04 18:13:31.891 00:00:10.449 TCP 23.104.0.1:35144 -> 1.101.0.1:3000 15 1926 1 2025-09-04 18:14:10.709 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54030 10 6452 1 2025-09-04 18:14:32.384 00:00:10.361 TCP 23.104.0.1:36550 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:15:10.922 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44016 10 6452 1 2025-09-04 18:15:32.782 00:00:10.373 TCP 23.104.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:16:11.143 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36590 10 6452 1 2025-09-04 18:12:23.637 00:05:00.680 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 18:16:33.197 00:00:10.364 TCP 23.104.0.1:40788 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:17:11.358 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 10 6452 1 2025-09-04 18:13:23.639 00:05:00.675 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 18:17:33.600 00:00:10.321 TCP 23.104.0.1:48832 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:18:12.518 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 18:18:12.484 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 18:18:11.568 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58534 10 6452 1 2025-09-04 18:18:33.960 00:00:10.366 TCP 23.104.0.1:44896 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:19:11.734 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51954 10 6452 1 2025-09-04 18:19:34.368 00:00:10.362 TCP 23.104.0.1:56458 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:20:11.943 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48558 10 6452 1 2025-09-04 18:20:34.767 00:00:10.368 TCP 23.104.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:21:12.177 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48808 10 6452 1 2025-09-04 18:21:35.175 00:00:10.338 TCP 23.104.0.1:42500 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:22:12.385 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56362 10 6452 1 2025-09-04 18:18:23.637 00:05:00.681 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 18:22:35.551 00:00:10.323 TCP 23.104.0.1:50284 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:23:12.748 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 18:23:12.668 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 18:23:12.593 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59154 10 6452 1 2025-09-04 18:19:23.640 00:05:00.676 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 18:23:35.908 00:00:10.325 TCP 23.104.0.1:45518 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:24:12.806 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50616 10 6452 1 2025-09-04 18:24:36.277 00:00:10.380 TCP 23.104.0.1:58828 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:25:13.035 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45344 10 6452 1 2025-09-04 18:25:36.694 00:00:10.372 TCP 23.104.0.1:38836 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:26:13.240 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43468 10 6452 1 2025-09-04 18:26:37.108 00:00:10.367 TCP 23.104.0.1:33948 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:27:13.459 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46210 10 6452 1 2025-09-04 18:27:37.518 00:00:10.367 TCP 23.104.0.1:51372 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:28:12.928 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 18:28:12.749 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 18:28:13.686 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57254 10 6452 1 2025-09-04 18:24:23.638 00:05:00.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 18:28:37.923 00:00:10.382 TCP 23.104.0.1:40122 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:25:23.640 00:05:00.680 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 18:29:13.898 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51600 10 6452 1 2025-09-04 18:29:38.348 00:00:10.363 TCP 23.104.0.1:57672 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:30:14.102 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42328 10 6452 1 2025-09-04 18:30:38.752 00:00:10.382 TCP 23.104.0.1:57152 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:31:14.283 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60930 10 6452 1 2025-09-04 18:31:39.182 00:00:10.371 TCP 23.104.0.1:34666 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:32:14.504 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38660 10 6452 1 2025-09-04 18:32:39.588 00:00:10.321 TCP 23.104.0.1:46444 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:33:12.962 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 18:33:12.715 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 18:33:14.713 00:00:10.359 TCP 1.101.0.1:3000 -> 22.102.0.1:60982 10 6452 1 2025-09-04 18:33:39.947 00:00:10.328 TCP 23.104.0.1:44436 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:34:15.114 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56738 10 6452 1 2025-09-04 18:30:23.641 00:05:00.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 18:34:40.315 00:00:10.373 TCP 23.104.0.1:56138 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:35:15.327 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:52874 10 6452 1 2025-09-04 18:31:23.642 00:05:00.682 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 18:35:40.726 00:00:10.377 TCP 23.104.0.1:38278 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:36:15.509 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39412 10 6452 1 2025-09-04 18:36:41.138 00:00:10.366 TCP 23.104.0.1:53136 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:37:15.734 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57996 10 6452 1 2025-09-04 18:37:41.539 00:00:10.370 TCP 23.104.0.1:58384 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:38:12.877 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 18:38:13.118 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 18:38:15.910 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49980 10 6452 1 2025-09-04 18:38:41.948 00:00:10.332 TCP 23.104.0.1:34756 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:39:16.123 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41448 10 6452 1 2025-09-04 18:39:42.320 00:00:10.363 TCP 23.104.0.1:49240 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:40:16.345 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39018 10 6452 1 2025-09-04 18:36:23.641 00:05:00.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 18:40:42.720 00:00:10.374 TCP 23.104.0.1:55962 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:37:23.643 00:05:00.683 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 18:41:16.557 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52612 10 6452 1 2025-09-04 18:41:43.139 00:00:10.358 TCP 23.104.0.1:41882 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:42:16.739 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46630 10 6452 1 2025-09-04 18:42:43.535 00:00:10.365 TCP 23.104.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:43:12.947 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 18:43:13.111 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 18:43:16.952 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49998 10 6452 1 2025-09-04 18:43:43.932 00:00:10.387 TCP 23.104.0.1:39670 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:44:17.185 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50868 10 6452 1 2025-09-04 18:44:44.362 00:00:10.361 TCP 23.104.0.1:44184 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:45:17.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39654 10 6452 1 2025-09-04 18:45:44.765 00:00:10.945 TCP 23.104.0.1:50268 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:42:23.641 00:05:00.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 18:46:17.605 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51130 10 6452 1 2025-09-04 18:46:45.747 00:00:10.362 TCP 23.104.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:43:23.644 00:05:00.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 18:47:17.817 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46310 10 6452 1 2025-09-04 18:47:46.147 00:00:10.368 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:48:12.982 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 18:48:13.512 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 18:48:17.989 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44752 10 6452 1 2025-09-04 18:48:46.552 00:00:10.324 TCP 23.104.0.1:59112 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:49:18.212 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60656 10 6452 1 2025-09-04 18:49:46.916 00:00:10.362 TCP 23.104.0.1:47002 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:50:18.425 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52306 10 6452 1 2025-09-04 18:50:47.316 00:00:10.364 TCP 23.104.0.1:53224 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:51:18.593 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:37128 10 6452 1 2025-09-04 18:51:47.717 00:00:10.325 TCP 23.104.0.1:54230 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:48:23.642 00:05:00.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 18:52:18.771 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55690 10 6452 1 2025-09-04 18:52:48.108 00:00:10.323 TCP 23.104.0.1:44102 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:53:13.304 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 18:53:13.317 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 18:49:23.646 00:05:00.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 18:53:18.984 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:49794 10 6452 1 2025-09-04 18:53:48.472 00:00:10.366 TCP 23.104.0.1:46168 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:54:19.196 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38698 10 6452 1 2025-09-04 18:54:48.883 00:00:10.386 TCP 23.104.0.1:40150 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:55:19.404 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42890 10 6452 1 2025-09-04 18:55:49.310 00:00:10.366 TCP 23.104.0.1:54724 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:56:19.572 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56142 10 6452 1 2025-09-04 18:56:49.712 00:00:10.382 TCP 23.104.0.1:47710 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:57:19.795 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42312 10 6452 1 2025-09-04 18:57:50.142 00:00:10.362 TCP 23.104.0.1:39218 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:58:13.505 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 18:58:13.377 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 18:54:23.645 00:05:00.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 18:58:20.011 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35750 10 6452 1 Summary: total flows: 163, total bytes: 501173, total packets: 1567, avg bps: 1043, avg pps: 0, avg bpp: 319 Time window: 2025-09-04 17:55:23 - 2025-09-04 18:59:24 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0010s Wall: 0.0022s flows/second: 74972.2 Runtime: 0.0022s