Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 14:58:54.453 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41922 10 6452 1 2025-09-05 14:59:06.000 00:00:10.373 TCP 23.104.0.1:56630 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:59:54.676 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56494 10 6452 1 2025-09-05 15:00:06.413 00:00:10.366 TCP 23.104.0.1:60054 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:00:54.891 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42854 10 6452 1 2025-09-05 15:01:06.817 00:00:10.365 TCP 23.104.0.1:34316 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:56:24.077 00:06:00.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 15:01:55.109 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38952 10 6452 1 2025-09-05 15:02:07.219 00:00:10.363 TCP 23.104.0.1:36564 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:02:55.322 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46044 12 10365 1 2025-09-05 15:03:07.617 00:00:10.441 TCP 23.104.0.1:60436 -> 1.101.0.1:3000 15 1926 1 2025-09-05 14:58:24.079 00:06:00.679 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 15:03:37.594 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:03:37.403 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 15:03:55.560 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41276 10 6452 1 2025-09-05 15:04:08.102 00:00:10.363 TCP 23.104.0.1:47830 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:04:55.770 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46036 10 6452 1 2025-09-05 15:05:08.499 00:00:10.327 TCP 23.104.0.1:50280 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:05:55.994 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:55124 10 6452 1 2025-09-05 15:06:08.865 00:00:10.335 TCP 23.104.0.1:33594 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:06:56.179 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33360 10 6452 1 2025-09-05 15:07:09.239 00:00:10.368 TCP 23.104.0.1:40642 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:07:56.395 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34024 10 6452 1 2025-09-05 15:08:09.643 00:00:10.361 TCP 23.104.0.1:47034 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:03:24.078 00:06:00.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 15:08:37.705 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:08:37.566 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 15:08:56.610 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56436 10 6452 1 2025-09-05 15:09:10.046 00:00:10.325 TCP 23.104.0.1:42036 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:09:56.826 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59164 10 6452 1 2025-09-05 15:10:10.411 00:00:10.327 TCP 23.104.0.1:60160 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:05:24.080 00:06:00.682 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 15:10:57.068 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51874 10 6452 1 2025-09-05 15:11:10.774 00:00:10.367 TCP 23.104.0.1:58510 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:11:57.281 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40648 10 6452 1 2025-09-05 15:12:11.191 00:00:10.320 TCP 23.104.0.1:55926 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:12:57.493 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43738 10 6452 1 2025-09-05 15:13:11.549 00:00:10.361 TCP 23.104.0.1:45348 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:13:37.737 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 15:13:37.616 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:13:57.708 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52166 10 6452 1 2025-09-05 15:14:11.948 00:00:10.365 TCP 23.104.0.1:33250 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:14:57.880 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49624 10 6452 1 2025-09-05 15:15:12.359 00:00:10.359 TCP 23.104.0.1:38324 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:10:24.078 00:06:00.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 15:15:58.111 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56420 10 6452 1 2025-09-05 15:16:12.761 00:00:10.376 TCP 23.104.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:16:58.321 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51568 10 6452 1 2025-09-05 15:12:24.082 00:06:00.681 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 15:17:13.183 00:00:10.364 TCP 23.104.0.1:52862 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:17:58.535 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35664 10 6452 1 2025-09-05 15:18:13.585 00:00:10.364 TCP 23.104.0.1:46272 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:18:37.933 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:18:37.924 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 15:18:58.745 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49354 10 6452 1 2025-09-05 15:19:13.988 00:00:10.361 TCP 23.104.0.1:36924 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:19:58.953 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37682 12 6556 1 2025-09-05 15:20:14.389 00:00:10.364 TCP 23.104.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:20:59.185 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46052 10 6452 1 2025-09-05 15:21:14.794 00:00:10.532 TCP 23.104.0.1:60900 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:21:59.415 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34684 10 6452 1 2025-09-05 15:22:15.379 00:00:10.325 TCP 23.104.0.1:46648 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:17:24.080 00:06:00.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 15:22:59.636 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54460 10 6452 1 2025-09-05 15:23:15.744 00:00:10.367 TCP 23.104.0.1:55794 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:23:37.916 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 15:23:38.079 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:23:59.850 00:00:10.501 TCP 1.101.0.1:3000 -> 22.102.0.1:47428 10 6452 1 2025-09-05 15:19:24.083 00:06:00.683 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 15:24:16.150 00:00:10.373 TCP 23.104.0.1:35600 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:25:00.402 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53158 10 6452 1 2025-09-05 15:25:16.563 00:00:10.361 TCP 23.104.0.1:40164 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:26:00.619 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40296 10 6452 1 2025-09-05 15:26:16.961 00:00:10.360 TCP 23.104.0.1:52806 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:27:00.833 00:00:10.693 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 2025-09-05 15:27:17.364 00:00:10.358 TCP 23.104.0.1:56862 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:28:01.567 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40922 10 6452 1 2025-09-05 15:28:17.768 00:00:10.369 TCP 23.104.0.1:59814 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:28:38.273 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:28:38.150 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 15:29:01.779 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37880 10 6452 1 2025-09-05 15:24:24.081 00:06:00.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 15:29:18.177 00:00:10.329 TCP 23.104.0.1:60740 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:30:01.954 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58270 12 6556 1 2025-09-05 15:30:18.533 00:00:10.326 TCP 23.104.0.1:50104 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:31:02.188 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56828 10 6452 1 2025-09-05 15:26:24.084 00:06:00.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 15:31:18.896 00:00:10.818 TCP 23.104.0.1:42872 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:32:02.401 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52968 10 6452 1 2025-09-05 15:32:19.755 00:00:10.376 TCP 23.104.0.1:36298 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:33:02.613 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38560 10 6452 1 2025-09-05 15:33:20.170 00:00:10.366 TCP 23.104.0.1:38664 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:33:38.129 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 15:33:38.197 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:34:02.794 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2025-09-05 15:34:20.576 00:00:10.374 TCP 23.104.0.1:37620 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:35:03.008 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42728 10 6452 1 2025-09-05 15:35:20.985 00:00:10.368 TCP 23.104.0.1:60778 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:36:03.221 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45084 10 6452 1 2025-09-05 15:31:24.082 00:06:00.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 15:36:21.394 00:00:10.363 TCP 23.104.0.1:36372 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:37:03.391 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60676 10 6452 1 2025-09-05 15:37:21.797 00:00:10.366 TCP 23.104.0.1:60160 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:38:03.605 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59274 10 6452 1 2025-09-05 15:33:24.086 00:06:00.685 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 15:38:22.195 00:00:10.370 TCP 23.104.0.1:38428 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:38:38.383 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:38:38.206 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 15:39:03.822 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:52518 10 6452 1 2025-09-05 15:39:22.603 00:00:10.364 TCP 23.104.0.1:36664 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:40:03.990 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33864 10 6452 1 2025-09-05 15:40:23.014 00:00:10.367 TCP 23.104.0.1:46412 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:41:04.217 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39362 10 6452 1 2025-09-05 15:41:23.413 00:00:10.365 TCP 23.104.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:42:04.430 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48160 10 6452 1 2025-09-05 15:42:23.816 00:00:10.372 TCP 23.104.0.1:47270 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:43:04.642 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51214 10 6452 1 2025-09-05 15:38:24.083 00:06:00.691 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 15:43:24.225 00:00:10.362 TCP 23.104.0.1:48188 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:43:38.304 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:43:38.315 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 15:44:04.860 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40020 10 6452 1 2025-09-05 15:44:24.624 00:00:10.361 TCP 23.104.0.1:48772 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:45:05.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35912 10 6452 1 2025-09-05 15:40:24.086 00:06:00.686 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 15:45:25.023 00:00:10.320 TCP 23.104.0.1:37010 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:46:05.294 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54912 10 6452 1 2025-09-05 15:46:25.385 00:00:10.365 TCP 23.104.0.1:48214 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:47:05.504 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51754 10 6452 1 2025-09-05 15:47:25.792 00:00:10.365 TCP 23.104.0.1:48850 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:48:05.724 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47084 10 6452 1 2025-09-05 15:48:26.199 00:00:10.368 TCP 23.104.0.1:33886 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:48:38.219 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 15:48:38.272 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:49:05.934 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6452 1 2025-09-05 15:49:26.600 00:00:10.369 TCP 23.104.0.1:55120 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:50:06.174 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40422 10 6452 1 2025-09-05 15:45:24.084 00:06:00.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 15:50:27.010 00:00:10.322 TCP 23.104.0.1:50784 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:51:06.413 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48848 10 6452 1 2025-09-05 15:51:27.368 00:00:10.366 TCP 23.104.0.1:36708 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:52:06.627 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37808 10 6452 1 2025-09-05 15:47:24.088 00:06:00.686 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 15:52:27.782 00:00:10.367 TCP 23.104.0.1:46140 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:53:06.839 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44886 10 6452 1 2025-09-05 15:53:38.665 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 15:53:38.392 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 15:53:28.187 00:00:10.502 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:54:07.016 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37356 10 6452 1 2025-09-05 15:54:28.731 00:00:10.374 TCP 23.104.0.1:57130 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:55:07.229 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35864 10 6452 1 2025-09-05 15:55:29.136 00:00:10.331 TCP 23.104.0.1:54290 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:56:07.444 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54104 10 6452 1 2025-09-05 15:56:29.505 00:00:10.363 TCP 23.104.0.1:48254 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:57:07.615 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56734 10 6452 1 2025-09-05 15:52:24.086 00:06:00.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 15:57:29.908 00:00:10.375 TCP 23.104.0.1:51532 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:58:07.831 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57338 10 6452 1 2025-09-05 15:58:38.778 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 15:58:30.319 00:00:10.323 TCP 23.104.0.1:56062 -> 1.101.0.1:3000 11 1507 1 2025-09-05 15:58:38.663 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 161, total bytes: 502765, total packets: 1580, avg bps: 1076, avg pps: 0, avg bpp: 318 Time window: 2025-09-05 14:56:24 - 2025-09-05 15:58:40 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0029s User: 0.0019s Wall: 0.0027s flows/second: 60639.6 Runtime: 0.0027s