Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 09:58:47.969 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40678 10 6452 1 2025-09-05 09:59:01.698 00:00:10.372 TCP 23.104.0.1:51390 -> 1.101.0.1:3000 11 1507 1 2025-09-05 09:55:23.942 00:05:00.711 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 09:59:48.203 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56262 10 6452 1 2025-09-05 10:00:02.110 00:00:10.369 TCP 23.104.0.1:45594 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:00:48.428 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36100 10 6452 1 2025-09-05 10:01:02.515 00:00:10.363 TCP 23.104.0.1:36042 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:01:48.645 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55374 10 6452 1 2025-09-05 10:02:02.916 00:00:10.358 TCP 23.104.0.1:57950 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:02:48.851 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38896 10 6452 1 2025-09-05 10:03:03.314 00:00:10.334 TCP 23.104.0.1:57526 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:03:31.401 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 10:03:31.557 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 10:03:49.092 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52752 10 6452 1 2025-09-05 10:04:03.680 00:00:10.362 TCP 23.104.0.1:36664 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:00:23.940 00:05:00.727 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 10:04:49.309 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59946 10 6452 1 2025-09-05 10:05:04.102 00:00:10.320 TCP 23.104.0.1:46134 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:01:23.943 00:05:00.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 10:05:49.484 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60024 10 6452 1 2025-09-05 10:06:04.464 00:00:10.364 TCP 23.104.0.1:44876 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:06:49.692 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41118 10 6452 1 2025-09-05 10:07:04.870 00:00:10.366 TCP 23.104.0.1:42540 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:07:49.906 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55062 10 6452 1 2025-09-05 10:08:05.274 00:00:10.369 TCP 23.104.0.1:50276 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:08:31.662 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 10:08:31.678 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 10:08:50.121 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50436 10 6452 1 2025-09-05 10:09:05.682 00:00:10.380 TCP 23.104.0.1:52084 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:09:50.332 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39100 10 6452 1 2025-09-05 10:10:06.111 00:00:10.364 TCP 23.104.0.1:40672 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:06:23.942 00:05:00.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 10:10:50.540 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48784 10 6452 1 2025-09-05 10:11:06.520 00:00:10.363 TCP 23.104.0.1:56380 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:07:23.944 00:05:00.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 10:11:50.724 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6452 1 2025-09-05 10:12:06.922 00:00:10.348 TCP 23.104.0.1:47118 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:12:50.932 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36062 10 6452 1 2025-09-05 10:13:07.311 00:00:10.369 TCP 23.104.0.1:49644 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:13:31.583 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 10:13:31.777 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 10:13:51.172 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56994 10 6452 1 2025-09-05 10:14:07.721 00:00:10.375 TCP 23.104.0.1:58378 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:14:51.348 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60048 10 6452 1 2025-09-05 10:15:08.150 00:00:10.373 TCP 23.104.0.1:43940 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:15:51.558 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39670 10 6452 1 2025-09-05 10:16:08.561 00:00:10.361 TCP 23.104.0.1:51240 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:12:23.945 00:05:00.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 10:16:51.765 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37690 10 6452 1 2025-09-05 10:17:08.963 00:00:10.367 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:13:23.947 00:05:00.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 10:17:51.984 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46206 10 6452 1 2025-09-05 10:18:09.368 00:00:10.361 TCP 23.104.0.1:36298 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:18:31.923 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 10:18:31.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 10:18:52.226 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52708 10 6452 1 2025-09-05 10:19:09.776 00:00:10.368 TCP 23.104.0.1:41776 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:19:52.446 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56474 10 6452 1 2025-09-05 10:20:10.183 00:00:10.384 TCP 23.104.0.1:59610 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:20:52.621 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59990 10 6452 1 2025-09-05 10:21:10.610 00:00:10.363 TCP 23.104.0.1:38992 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:21:52.847 00:00:10.949 TCP 1.101.0.1:3000 -> 22.102.0.1:37444 11 6504 1 2025-09-05 10:22:11.016 00:00:10.328 TCP 23.104.0.1:36426 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:18:23.945 00:05:00.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 10:22:53.842 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46440 10 6452 1 2025-09-05 10:23:11.383 00:00:10.366 TCP 23.104.0.1:36658 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:19:23.948 00:05:00.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 10:23:31.828 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 10:23:31.947 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 10:23:54.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42286 10 6452 1 2025-09-05 10:24:11.789 00:00:10.359 TCP 23.104.0.1:32804 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:24:54.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40228 10 6452 1 2025-09-05 10:25:12.188 00:00:10.367 TCP 23.104.0.1:58356 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:25:54.506 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:40758 10 6452 1 2025-09-05 10:26:12.592 00:00:10.367 TCP 23.104.0.1:45678 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:26:54.673 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49916 10 6452 1 2025-09-05 10:27:12.998 00:00:10.328 TCP 23.104.0.1:50780 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:27:54.894 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56462 10 6452 1 2025-09-05 10:24:23.948 00:05:00.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 10:28:13.367 00:00:10.365 TCP 23.104.0.1:43036 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:28:31.739 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 10:28:32.133 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 10:28:55.116 00:00:10.316 TCP 1.101.0.1:3000 -> 22.102.0.1:34136 10 6452 1 2025-09-05 10:29:13.773 00:00:10.329 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:25:23.949 00:05:00.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 10:29:55.477 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45240 10 6452 1 2025-09-05 10:30:14.140 00:00:10.367 TCP 23.104.0.1:49600 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:30:55.657 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39218 10 6452 1 2025-09-05 10:31:14.549 00:00:10.362 TCP 23.104.0.1:33698 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:31:55.871 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34372 10 6452 1 2025-09-05 10:32:14.949 00:00:10.369 TCP 23.104.0.1:60896 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:32:56.108 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50238 10 6452 1 2025-09-05 10:33:15.359 00:00:10.367 TCP 23.104.0.1:49992 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:33:32.356 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 10:33:32.246 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 10:33:56.319 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49648 10 6452 1 2025-09-05 10:30:23.948 00:05:00.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 10:34:15.762 00:00:10.376 TCP 23.104.0.1:53724 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:34:56.531 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35282 10 6452 1 2025-09-05 10:35:16.170 00:00:10.369 TCP 23.104.0.1:37716 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:31:23.952 00:05:00.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 10:35:56.740 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43798 10 6452 1 2025-09-05 10:36:16.571 00:00:10.323 TCP 23.104.0.1:44796 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:36:56.957 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59784 10 6452 1 2025-09-05 10:37:16.936 00:00:10.378 TCP 23.104.0.1:47172 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:37:57.178 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48502 10 6452 1 2025-09-05 10:38:17.353 00:00:10.360 TCP 23.104.0.1:33198 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:38:31.919 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 10:38:32.355 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 10:38:57.389 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60244 10 6452 1 2025-09-05 10:39:17.753 00:00:10.337 TCP 23.104.0.1:50448 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:39:57.600 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34608 10 6452 1 2025-09-05 10:36:23.950 00:05:00.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 10:40:18.127 00:00:10.364 TCP 23.104.0.1:59088 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:40:57.775 00:00:10.348 TCP 1.101.0.1:3000 -> 22.102.0.1:49136 10 6452 1 2025-09-05 10:37:23.954 00:05:00.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 10:41:18.525 00:00:10.415 TCP 23.104.0.1:40268 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:41:58.162 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55790 12 6556 1 2025-09-05 10:42:18.982 00:00:10.368 TCP 23.104.0.1:33954 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:42:58.375 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60974 10 6452 1 2025-09-05 10:43:19.385 00:00:10.328 TCP 23.104.0.1:34894 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:43:32.386 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 10:43:32.351 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 10:43:58.583 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43062 10 6452 1 2025-09-05 10:44:19.748 00:00:10.364 TCP 23.104.0.1:43116 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:44:58.794 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54100 10 6452 1 2025-09-05 10:45:20.151 00:00:10.368 TCP 23.104.0.1:51586 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:45:59.012 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50894 10 6452 1 2025-09-05 10:42:23.951 00:05:00.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 10:46:20.559 00:00:10.366 TCP 23.104.0.1:52648 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:46:59.185 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55620 10 6452 1 2025-09-05 10:43:23.954 00:05:00.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 10:47:20.969 00:00:10.421 TCP 23.104.0.1:49552 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:47:59.405 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46840 10 6452 1 2025-09-05 10:48:21.431 00:00:10.379 TCP 23.104.0.1:33466 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:48:32.632 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 10:48:32.512 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 10:48:59.618 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60082 10 6452 1 2025-09-05 10:49:21.877 00:00:10.373 TCP 23.104.0.1:53102 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:49:59.827 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41012 10 6452 1 2025-09-05 10:50:22.288 00:00:10.372 TCP 23.104.0.1:51700 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:51:00.070 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34682 10 6452 1 2025-09-05 10:51:22.693 00:00:10.365 TCP 23.104.0.1:39456 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:52:00.283 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60838 10 6452 1 2025-09-05 10:48:23.954 00:05:00.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 10:52:23.103 00:00:10.327 TCP 23.104.0.1:38846 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:53:00.497 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36272 10 6452 1 2025-09-05 10:49:23.957 00:05:00.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 10:53:32.443 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 10:53:23.467 00:00:10.368 TCP 23.104.0.1:49278 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:53:32.665 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 10:54:00.710 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56216 10 6452 1 2025-09-05 10:54:23.871 00:00:10.363 TCP 23.104.0.1:46810 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:55:00.941 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:38668 10 6452 1 2025-09-05 10:55:24.272 00:00:10.368 TCP 23.104.0.1:37156 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:56:01.139 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33890 10 6452 1 2025-09-05 10:56:24.678 00:00:10.367 TCP 23.104.0.1:41622 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:57:01.353 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42742 10 6452 1 2025-09-05 10:57:25.100 00:00:10.325 TCP 23.104.0.1:37430 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:58:01.526 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57482 10 6452 1 2025-09-05 10:54:23.956 00:05:00.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 10:58:32.595 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 10:58:25.465 00:00:10.322 TCP 23.104.0.1:44452 -> 1.101.0.1:3000 11 1507 1 2025-09-05 10:58:32.598 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 164, total bytes: 498504, total packets: 1575, avg bps: 1038, avg pps: 0, avg bpp: 316 Time window: 2025-09-05 09:55:23 - 2025-09-05 10:59:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0049s User: 0.0000s Wall: 0.0019s flows/second: 84670.8 Runtime: 0.0020s