Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 19:59:02.123 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58842 10 6452 1 2025-09-05 19:59:10.803 00:00:10.370 TCP 23.104.0.1:42746 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:00:02.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40276 10 6452 1 2025-09-05 20:00:11.220 00:00:10.364 TCP 23.104.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:01:02.548 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38090 10 6452 1 2025-09-05 20:01:11.620 00:00:10.367 TCP 23.104.0.1:50656 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:02:02.799 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38304 10 6452 1 2025-09-05 19:57:24.154 00:06:00.701 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 20:02:12.025 00:00:10.326 TCP 23.104.0.1:48096 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:03:03.011 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45176 10 6452 1 2025-09-05 20:03:12.388 00:00:10.369 TCP 23.104.0.1:57346 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:03:43.381 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 20:03:43.569 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 20:04:03.180 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51252 10 6452 1 2025-09-05 20:04:12.793 00:00:10.368 TCP 23.104.0.1:47356 -> 1.101.0.1:3000 11 1507 1 2025-09-05 19:59:24.157 00:06:00.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 20:05:03.393 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57072 10 6452 1 2025-09-05 20:05:13.197 00:00:10.327 TCP 23.104.0.1:45924 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:06:03.607 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33622 10 6452 1 2025-09-05 20:06:13.557 00:00:10.370 TCP 23.104.0.1:42474 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:07:03.844 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47990 10 6452 1 2025-09-05 20:07:13.965 00:00:10.340 TCP 23.104.0.1:39500 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:08:04.026 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48522 10 6452 1 2025-09-05 20:08:14.345 00:00:10.362 TCP 23.104.0.1:33720 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:08:43.727 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 20:08:43.611 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 20:09:04.238 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36874 10 6452 1 2025-09-05 20:09:14.741 00:00:10.366 TCP 23.104.0.1:51072 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:04:24.154 00:06:00.703 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 20:10:04.456 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59312 10 6452 1 2025-09-05 20:10:15.142 00:00:10.377 TCP 23.104.0.1:48542 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:11:04.672 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52284 10 6452 1 2025-09-05 20:11:15.558 00:00:10.324 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:06:24.158 00:06:00.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 20:12:04.882 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53686 10 6452 1 2025-09-05 20:12:15.921 00:00:10.369 TCP 23.104.0.1:34238 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:13:05.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40584 10 6452 1 2025-09-05 20:13:16.329 00:00:10.371 TCP 23.104.0.1:53634 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:13:43.781 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 20:13:43.927 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 20:14:05.328 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44290 10 6452 1 2025-09-05 20:14:16.736 00:00:10.374 TCP 23.104.0.1:44956 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:15:05.556 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45330 10 6452 1 2025-09-05 20:15:17.145 00:00:10.329 TCP 23.104.0.1:48956 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:16:05.771 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56702 10 6452 1 2025-09-05 20:11:24.156 00:06:00.703 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 20:16:17.515 00:00:10.369 TCP 23.104.0.1:59998 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:17:05.988 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59986 10 6452 1 2025-09-05 20:17:17.925 00:00:10.355 TCP 23.104.0.1:38370 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:18:06.221 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53692 10 6452 1 2025-09-05 20:13:24.159 00:06:00.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 20:18:18.323 00:00:10.372 TCP 23.104.0.1:42564 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:18:43.891 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 20:18:44.027 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 20:19:06.448 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60894 10 6452 1 2025-09-05 20:19:18.751 00:00:10.377 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:20:06.664 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46744 10 6452 1 2025-09-05 20:20:19.167 00:00:10.378 TCP 23.104.0.1:45008 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:21:06.876 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34960 10 6452 1 2025-09-05 20:21:19.588 00:00:10.326 TCP 23.104.0.1:59434 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:22:07.098 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55330 10 6452 1 2025-09-05 20:22:19.954 00:00:10.370 TCP 23.104.0.1:44262 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:23:07.310 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51744 10 6452 1 2025-09-05 20:18:24.158 00:06:00.703 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 20:23:20.358 00:00:10.363 TCP 23.104.0.1:54266 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:23:43.883 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 20:23:43.911 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 20:24:07.517 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55350 10 6452 1 2025-09-05 20:24:20.759 00:00:10.332 TCP 23.104.0.1:36586 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:25:07.727 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32840 10 6452 1 2025-09-05 20:20:24.162 00:06:00.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 20:25:21.137 00:00:10.367 TCP 23.104.0.1:55154 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:26:07.941 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:35098 10 6452 1 2025-09-05 20:26:21.543 00:00:10.722 TCP 23.104.0.1:60252 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:27:08.136 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33034 10 6452 1 2025-09-05 20:27:22.314 00:00:10.366 TCP 23.104.0.1:36284 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:28:08.349 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54004 10 6452 1 2025-09-05 20:28:22.721 00:00:10.379 TCP 23.104.0.1:44740 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:28:43.797 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 20:28:43.977 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 20:29:08.564 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56338 10 6452 1 2025-09-05 20:29:23.135 00:00:10.371 TCP 23.104.0.1:45166 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:30:08.795 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:42400 10 6452 1 2025-09-05 20:25:24.164 00:06:00.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 20:30:23.546 00:00:10.363 TCP 23.104.0.1:42194 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:31:08.983 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45016 10 6452 1 2025-09-05 20:31:23.951 00:00:10.370 TCP 23.104.0.1:46956 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:32:09.167 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56900 10 6452 1 2025-09-05 20:27:24.166 00:06:00.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 20:32:24.362 00:00:10.363 TCP 23.104.0.1:39122 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:33:09.371 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42856 10 6452 1 2025-09-05 20:33:24.768 00:00:10.333 TCP 23.104.0.1:42608 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:33:44.072 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 20:33:44.028 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 20:34:09.585 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33408 10 6452 1 2025-09-05 20:34:25.136 00:00:10.368 TCP 23.104.0.1:46064 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:35:09.797 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36490 10 6452 1 2025-09-05 20:35:25.541 00:00:10.364 TCP 23.104.0.1:47542 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:36:09.965 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46626 12 6556 1 2025-09-05 20:36:25.942 00:00:10.371 TCP 23.104.0.1:34698 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:37:10.199 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60290 10 6452 1 2025-09-05 20:32:24.165 00:06:00.701 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 20:37:26.355 00:00:10.364 TCP 23.104.0.1:48868 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:38:10.418 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39126 10 6452 1 2025-09-05 20:38:26.758 00:00:10.385 TCP 23.104.0.1:58568 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:38:44.048 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 20:38:44.164 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 20:39:10.646 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44944 10 6452 1 2025-09-05 20:34:24.168 00:06:00.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 20:39:27.182 00:00:10.369 TCP 23.104.0.1:45986 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:40:10.865 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45244 10 6452 1 2025-09-05 20:40:27.587 00:00:10.373 TCP 23.104.0.1:35854 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:41:11.092 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41612 10 6452 1 2025-09-05 20:41:28.007 00:00:10.365 TCP 23.104.0.1:43908 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:42:11.303 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6452 1 2025-09-05 20:42:28.417 00:00:10.372 TCP 23.104.0.1:52176 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:43:11.510 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:38262 12 10367 1 2025-09-05 20:43:28.850 00:00:10.466 TCP 23.104.0.1:57438 -> 1.101.0.1:3000 15 1926 1 2025-09-05 20:43:44.294 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 20:43:44.468 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 20:44:11.761 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47054 10 6452 1 2025-09-05 20:39:24.168 00:06:00.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 20:44:29.358 00:00:10.369 TCP 23.104.0.1:60718 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:45:11.987 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38604 10 6452 1 2025-09-05 20:45:29.763 00:00:10.374 TCP 23.104.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:41:24.169 00:06:00.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 20:46:12.204 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60152 10 6452 1 2025-09-05 20:46:30.169 00:00:10.365 TCP 23.104.0.1:50492 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:47:12.417 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42908 10 6452 1 2025-09-05 20:47:30.570 00:00:10.372 TCP 23.104.0.1:45154 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:48:12.627 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53892 10 6452 1 2025-09-05 20:48:30.976 00:00:10.365 TCP 23.104.0.1:36990 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:48:44.268 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 20:48:44.471 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 20:49:12.844 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46856 10 6452 1 2025-09-05 20:49:31.378 00:00:10.365 TCP 23.104.0.1:45584 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:50:13.080 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57672 10 6452 1 2025-09-05 20:50:31.780 00:00:10.367 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:51:13.250 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33068 10 6452 1 2025-09-05 20:46:24.169 00:06:00.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 20:51:32.184 00:00:10.367 TCP 23.104.0.1:55554 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:52:13.418 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56832 10 6452 1 2025-09-05 20:52:32.588 00:00:10.367 TCP 23.104.0.1:53374 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:53:13.639 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49842 10 6452 1 2025-09-05 20:48:24.173 00:06:00.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 20:53:44.657 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 20:53:32.998 00:00:10.325 TCP 23.104.0.1:54974 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:53:45.142 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 20:54:13.860 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46000 10 6452 1 2025-09-05 20:54:33.358 00:00:10.372 TCP 23.104.0.1:48438 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:55:14.093 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41696 10 6452 1 2025-09-05 20:55:33.764 00:00:10.429 TCP 23.104.0.1:49764 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:56:14.304 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37898 10 6452 1 2025-09-05 20:56:34.232 00:00:10.366 TCP 23.104.0.1:40198 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:57:14.523 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33756 10 6452 1 2025-09-05 20:57:34.637 00:00:10.366 TCP 23.104.0.1:43952 -> 1.101.0.1:3000 11 1507 1 2025-09-05 20:53:24.171 00:06:00.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 20:58:14.730 00:00:13.258 TCP 1.101.0.1:3000 -> 22.102.0.1:51844 10 6452 1 2025-09-05 20:58:44.541 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 20:58:44.365 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 20:58:35.053 00:00:10.333 TCP 23.104.0.1:44464 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 502663, total packets: 1578, avg bps: 1080, avg pps: 0, avg bpp: 318 Time window: 2025-09-05 19:57:24 - 2025-09-05 20:59:24 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0025s User: 0.0025s Wall: 0.0024s flows/second: 67312.9 Runtime: 0.0024s