Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-06 00:59:13.747 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58452 10 6452 1 2025-09-06 00:59:17.086 00:00:10.325 TCP 23.104.0.1:48802 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:00:13.957 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41180 10 6452 1 2025-09-06 01:00:17.448 00:00:10.382 TCP 23.104.0.1:40360 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:01:14.180 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43298 10 6452 1 2025-09-06 01:01:17.881 00:00:10.374 TCP 23.104.0.1:37872 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:02:14.393 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40888 10 6452 1 2025-09-06 01:02:18.295 00:00:10.363 TCP 23.104.0.1:38970 -> 1.101.0.1:3000 11 1507 1 2025-09-06 00:58:24.234 00:06:00.724 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 01:03:14.614 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59864 10 6452 1 2025-09-06 01:03:18.696 00:00:10.367 TCP 23.104.0.1:57510 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:03:49.466 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 01:03:49.428 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 01:04:14.825 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39464 10 6452 1 2025-09-06 01:04:19.106 00:00:10.366 TCP 23.104.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:05:15.056 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42616 10 6452 1 2025-09-06 01:00:24.235 00:06:00.719 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 01:05:19.504 00:00:10.326 TCP 23.104.0.1:59124 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:06:15.270 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55122 10 6452 1 2025-09-06 01:06:19.866 00:00:10.371 TCP 23.104.0.1:54874 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:07:15.485 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48486 10 6452 1 2025-09-06 01:07:20.277 00:00:10.368 TCP 23.104.0.1:59212 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:08:15.659 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47838 10 6452 1 2025-09-06 01:08:20.683 00:00:10.371 TCP 23.104.0.1:56818 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:08:49.659 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 01:08:49.775 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 01:09:15.870 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41528 10 6452 1 2025-09-06 01:09:21.108 00:00:10.367 TCP 23.104.0.1:45700 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:10:16.097 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 2025-09-06 01:05:24.235 00:06:00.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 01:10:21.510 00:00:10.323 TCP 23.104.0.1:53598 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:11:16.310 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41828 10 6452 1 2025-09-06 01:11:21.870 00:00:10.370 TCP 23.104.0.1:59154 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:12:16.524 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50014 10 6452 1 2025-09-06 01:07:24.238 00:06:00.719 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 01:12:22.283 00:00:10.370 TCP 23.104.0.1:55544 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:13:16.739 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47116 10 6452 1 2025-09-06 01:13:22.690 00:00:10.371 TCP 23.104.0.1:35764 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:13:49.690 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 01:13:49.943 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 01:14:16.961 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32938 10 6452 1 2025-09-06 01:14:23.111 00:00:10.365 TCP 23.104.0.1:58870 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:15:17.183 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58990 10 6452 1 2025-09-06 01:15:23.514 00:00:10.366 TCP 23.104.0.1:56088 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:16:17.400 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44698 10 6452 1 2025-09-06 01:16:23.922 00:00:10.390 TCP 23.104.0.1:52696 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:12:24.246 00:06:00.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 01:17:17.614 00:00:10.893 TCP 1.101.0.1:3000 -> 22.102.0.1:43610 10 6452 1 2025-09-06 01:17:24.359 00:00:10.367 TCP 23.104.0.1:55426 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:18:18.553 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38036 10 6452 1 2025-09-06 01:18:24.774 00:00:10.371 TCP 23.104.0.1:56382 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:18:49.845 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 01:18:49.689 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 01:14:24.249 00:06:00.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 01:19:18.766 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44972 10 6452 1 2025-09-06 01:19:25.184 00:00:10.365 TCP 23.104.0.1:58438 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:20:18.979 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:45848 10 6452 1 2025-09-06 01:20:25.590 00:00:10.326 TCP 23.104.0.1:47174 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:21:19.226 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47988 10 6452 1 2025-09-06 01:21:25.962 00:00:10.377 TCP 23.104.0.1:38526 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:22:19.446 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47830 10 6452 1 2025-09-06 01:22:26.400 00:00:10.321 TCP 23.104.0.1:59542 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:23:19.675 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38750 10 6452 1 2025-09-06 01:23:26.757 00:00:10.384 TCP 23.104.0.1:41476 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:23:50.020 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 01:23:49.750 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 01:19:24.247 00:06:00.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 01:24:19.861 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35848 10 6452 1 2025-09-06 01:24:27.181 00:00:10.914 TCP 23.104.0.1:54530 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:25:20.089 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52468 10 6452 1 2025-09-06 01:25:28.134 00:00:10.363 TCP 23.104.0.1:34270 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:21:24.251 00:06:00.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 01:26:20.310 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37804 10 6452 1 2025-09-06 01:26:28.536 00:00:10.363 TCP 23.104.0.1:36502 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:27:20.530 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35570 10 6452 1 2025-09-06 01:27:28.937 00:00:10.379 TCP 23.104.0.1:46726 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:28:20.741 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2025-09-06 01:28:29.353 00:00:10.327 TCP 23.104.0.1:36350 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:28:50.070 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 01:28:49.880 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 01:29:20.911 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43032 10 6452 1 2025-09-06 01:29:29.716 00:00:10.371 TCP 23.104.0.1:50400 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:30:21.119 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:39836 10 6452 1 2025-09-06 01:30:30.122 00:00:10.338 TCP 23.104.0.1:57060 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:26:24.249 00:06:00.720 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 01:31:21.324 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37458 10 6452 1 2025-09-06 01:31:30.501 00:00:10.934 TCP 23.104.0.1:48932 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:32:21.553 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-09-06 01:32:31.475 00:00:10.333 TCP 23.104.0.1:60622 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:28:24.252 00:06:00.716 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 01:33:21.778 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44102 10 6452 1 2025-09-06 01:33:31.849 00:00:10.376 TCP 23.104.0.1:54904 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:33:50.294 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 01:33:50.070 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 01:34:22.000 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52612 10 6452 1 2025-09-06 01:34:32.265 00:00:10.324 TCP 23.104.0.1:41700 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:35:22.232 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:53156 10 6452 1 2025-09-06 01:35:32.627 00:00:10.366 TCP 23.104.0.1:56536 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:36:22.439 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42274 10 6452 1 2025-09-06 01:36:33.031 00:00:10.364 TCP 23.104.0.1:58070 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:37:22.608 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39592 10 6452 1 2025-09-06 01:37:33.436 00:00:10.364 TCP 23.104.0.1:50046 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:33:24.252 00:06:00.721 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 01:38:22.830 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:50178 12 10367 1 2025-09-06 01:38:50.545 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 01:38:33.840 00:00:10.454 TCP 23.104.0.1:41774 -> 1.101.0.1:3000 15 1926 1 2025-09-06 01:38:50.856 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 01:39:23.094 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58658 10 6452 1 2025-09-06 01:39:34.329 00:00:10.368 TCP 23.104.0.1:59302 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:35:24.256 00:06:00.716 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 01:40:23.316 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49766 10 6452 1 2025-09-06 01:40:34.733 00:00:10.365 TCP 23.104.0.1:47298 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:41:23.521 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48996 10 6452 1 2025-09-06 01:41:35.137 00:00:10.368 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:42:23.734 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37430 10 6452 1 2025-09-06 01:42:35.548 00:00:10.361 TCP 23.104.0.1:42598 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:43:23.954 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:52096 14 10471 1 2025-09-06 01:43:35.953 00:00:10.436 TCP 23.104.0.1:56870 -> 1.101.0.1:3000 15 1926 1 2025-09-06 01:43:50.365 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 01:43:50.442 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 01:44:24.222 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58720 10 6452 1 2025-09-06 01:44:36.429 00:00:10.365 TCP 23.104.0.1:33828 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:40:24.255 00:06:00.719 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 01:45:24.435 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57134 10 6452 1 2025-09-06 01:45:36.837 00:00:10.383 TCP 23.104.0.1:54796 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:46:24.656 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39486 10 6452 1 2025-09-06 01:46:37.260 00:00:10.365 TCP 23.104.0.1:36160 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:42:24.259 00:06:00.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 01:47:24.883 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:43118 10 6452 1 2025-09-06 01:47:37.664 00:00:10.361 TCP 23.104.0.1:46600 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:48:25.117 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60742 10 6452 1 2025-09-06 01:48:38.094 00:00:10.372 TCP 23.104.0.1:41170 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:48:50.553 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 01:48:50.666 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 01:49:25.340 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55122 10 6452 1 2025-09-06 01:49:38.505 00:00:10.716 TCP 23.104.0.1:53656 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:50:25.553 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51026 10 6452 1 2025-09-06 01:50:39.263 00:00:10.368 TCP 23.104.0.1:54152 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:51:25.736 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52910 10 6452 1 2025-09-06 01:51:39.671 00:00:10.385 TCP 23.104.0.1:50794 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:47:24.263 00:06:00.713 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 01:52:25.958 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42110 10 6452 1 2025-09-06 01:52:40.118 00:00:10.364 TCP 23.104.0.1:40796 -> 1.101.0.1:3000 12 1559 1 2025-09-06 01:53:26.180 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33086 10 6452 1 2025-09-06 01:53:50.663 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 01:53:50.704 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 01:53:40.520 00:00:10.364 TCP 23.104.0.1:47228 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:49:24.264 00:06:00.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 01:54:26.410 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47546 10 6452 1 2025-09-06 01:54:40.925 00:00:10.393 TCP 23.104.0.1:49288 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:55:26.587 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33310 10 6452 1 2025-09-06 01:55:41.353 00:00:10.370 TCP 23.104.0.1:56318 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:56:26.799 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39846 10 6452 1 2025-09-06 01:56:41.759 00:00:10.326 TCP 23.104.0.1:40448 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:57:27.008 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39312 10 6452 1 2025-09-06 01:57:42.128 00:00:10.368 TCP 23.104.0.1:47044 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:58:27.226 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53064 10 6452 1 2025-09-06 01:58:50.734 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 158, total bytes: 504429, total packets: 1557, avg bps: 1112, avg pps: 0, avg bpp: 323 Time window: 2025-09-06 00:58:24 - 2025-09-06 01:58:50 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0035s User: 0.0014s Wall: 0.0036s flows/second: 44121.2 Runtime: 0.0036s