Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 05:59:21.263 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59318 10 6452 1 2025-09-08 05:59:25.743 00:00:10.401 TCP 23.104.0.1:55648 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:59:53.519 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 05:59:53.365 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:00:21.482 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51008 10 6452 1 2025-09-08 06:00:26.183 00:00:10.363 TCP 23.104.0.1:54558 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:01:21.654 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60406 10 6452 1 2025-09-08 06:01:26.582 00:00:10.320 TCP 23.104.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:02:21.869 00:00:10.690 TCP 1.101.0.1:3000 -> 22.102.0.1:54554 10 6452 1 2025-09-08 06:02:26.940 00:00:10.378 TCP 23.104.0.1:50444 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:59:25.267 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 06:03:22.597 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56886 10 6452 1 2025-09-08 06:03:27.354 00:00:10.364 TCP 23.104.0.1:48446 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:00:25.264 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 06:04:22.808 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41178 10 6452 1 2025-09-08 06:04:27.756 00:00:10.377 TCP 23.104.0.1:44808 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:04:53.478 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:04:53.201 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:05:23.027 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57528 10 6452 1 2025-09-08 06:05:28.170 00:00:10.363 TCP 23.104.0.1:50230 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:06:23.199 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53796 10 6452 1 2025-09-08 06:06:28.577 00:00:10.376 TCP 23.104.0.1:48588 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:07:23.420 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42260 10 6452 1 2025-09-08 06:07:28.989 00:00:10.368 TCP 23.104.0.1:43470 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:08:23.639 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49384 10 6452 1 2025-09-08 06:08:29.392 00:00:10.367 TCP 23.104.0.1:41912 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:05:25.267 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 06:09:23.849 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35420 10 6452 1 2025-09-08 06:09:29.795 00:00:10.369 TCP 23.104.0.1:36806 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:09:53.431 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:09:53.181 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:06:25.265 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 06:10:24.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44782 10 6452 1 2025-09-08 06:10:30.201 00:00:10.325 TCP 23.104.0.1:39198 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:11:24.295 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54392 10 6452 1 2025-09-08 06:11:30.563 00:00:10.368 TCP 23.104.0.1:50204 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:12:24.474 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59552 10 6452 1 2025-09-08 06:12:30.968 00:00:10.379 TCP 23.104.0.1:35466 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:13:24.663 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54072 10 6452 1 2025-09-08 06:13:31.396 00:00:10.370 TCP 23.104.0.1:53178 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:14:24.880 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53404 10 6452 1 2025-09-08 06:14:31.803 00:00:10.375 TCP 23.104.0.1:37920 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:14:53.408 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:14:53.668 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:11:25.267 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 06:15:25.102 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55422 10 6452 1 2025-09-08 06:15:32.214 00:00:10.367 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:12:25.265 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 06:16:25.312 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50740 10 6452 1 2025-09-08 06:16:32.619 00:00:10.364 TCP 23.104.0.1:44238 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:17:25.491 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60382 10 6452 1 2025-09-08 06:17:33.024 00:00:10.365 TCP 23.104.0.1:36564 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:18:25.705 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35262 10 6452 1 2025-09-08 06:18:33.447 00:00:10.362 TCP 23.104.0.1:38608 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:19:25.920 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:51348 10 6452 1 2025-09-08 06:19:33.848 00:00:10.382 TCP 23.104.0.1:56642 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:19:53.599 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:19:53.525 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:20:26.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44992 10 6452 1 2025-09-08 06:20:34.268 00:00:10.356 TCP 23.104.0.1:43638 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:17:25.292 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 06:21:26.328 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50400 10 6452 1 2025-09-08 06:21:34.672 00:00:10.363 TCP 23.104.0.1:37236 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:18:25.288 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 06:22:26.538 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41796 10 6452 1 2025-09-08 06:22:35.099 00:00:10.328 TCP 23.104.0.1:50362 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:23:26.753 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56684 10 6452 1 2025-09-08 06:23:35.462 00:00:10.964 TCP 23.104.0.1:46606 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:24:26.961 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36156 10 6452 1 2025-09-08 06:24:36.461 00:00:10.368 TCP 23.104.0.1:51234 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:24:53.985 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:24:53.848 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:25:27.196 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45500 10 6452 1 2025-09-08 06:25:36.867 00:00:10.363 TCP 23.104.0.1:48446 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:26:27.413 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60480 10 6452 1 2025-09-08 06:26:37.270 00:00:10.769 TCP 23.104.0.1:39700 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:23:25.292 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 06:27:27.626 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55150 10 6452 1 2025-09-08 06:27:38.102 00:00:10.365 TCP 23.104.0.1:50044 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:24:25.289 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 06:28:27.834 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55546 10 6452 1 2025-09-08 06:28:38.503 00:00:10.364 TCP 23.104.0.1:38394 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:29:28.090 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2025-09-08 06:29:38.908 00:00:10.698 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:29:53.829 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:29:53.786 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:30:28.311 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39818 10 6452 1 2025-09-08 06:30:39.648 00:00:10.366 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:31:28.483 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37836 10 6452 1 2025-09-08 06:31:40.059 00:00:10.364 TCP 23.104.0.1:58384 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:32:28.690 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42546 10 6452 1 2025-09-08 06:32:40.462 00:00:10.371 TCP 23.104.0.1:59138 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:29:25.295 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 06:33:28.863 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55426 10 6452 1 2025-09-08 06:33:40.868 00:00:10.328 TCP 23.104.0.1:46378 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:30:25.291 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 06:34:29.086 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43566 10 6452 1 2025-09-08 06:34:41.234 00:00:10.368 TCP 23.104.0.1:36862 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:34:53.855 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:34:54.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:35:29.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6452 1 2025-09-08 06:35:41.636 00:00:10.320 TCP 23.104.0.1:56518 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:36:29.513 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59746 10 6452 1 2025-09-08 06:36:42.001 00:00:10.371 TCP 23.104.0.1:32940 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:37:29.727 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53974 10 6452 1 2025-09-08 06:37:42.404 00:00:10.378 TCP 23.104.0.1:38300 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:38:29.933 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39738 10 6452 1 2025-09-08 06:38:42.818 00:00:10.368 TCP 23.104.0.1:42434 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:35:25.294 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 06:39:30.174 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55258 10 6452 1 2025-09-08 06:39:54.021 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:39:53.811 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:39:43.222 00:00:10.369 TCP 23.104.0.1:50252 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:36:25.292 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 06:40:30.393 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47928 10 6452 1 2025-09-08 06:40:43.628 00:00:10.377 TCP 23.104.0.1:57204 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:41:30.613 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41226 10 6452 1 2025-09-08 06:41:44.045 00:00:10.378 TCP 23.104.0.1:47926 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:42:30.825 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59304 10 6452 1 2025-09-08 06:42:44.469 00:00:10.328 TCP 23.104.0.1:53760 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:43:31.068 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36704 10 6452 1 2025-09-08 06:43:44.837 00:00:10.427 TCP 23.104.0.1:52104 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:44:31.280 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33780 10 6452 1 2025-09-08 06:44:54.053 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:44:45.304 00:00:10.363 TCP 23.104.0.1:42006 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:44:54.016 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:41:25.295 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 06:45:31.487 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49654 10 6452 1 2025-09-08 06:45:45.703 00:00:10.367 TCP 23.104.0.1:46310 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:42:25.298 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 06:46:31.703 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49510 10 6452 1 2025-09-08 06:46:46.109 00:00:10.368 TCP 23.104.0.1:58124 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:47:31.919 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42116 10 6452 1 2025-09-08 06:47:46.513 00:00:10.366 TCP 23.104.0.1:46844 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:48:32.128 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52702 10 6452 1 2025-09-08 06:48:46.913 00:00:10.370 TCP 23.104.0.1:43710 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:49:32.296 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49864 10 6452 1 2025-09-08 06:49:54.133 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:49:54.313 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:49:47.324 00:00:10.366 TCP 23.104.0.1:38368 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:50:32.509 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38924 10 6452 1 2025-09-08 06:50:47.727 00:00:10.380 TCP 23.104.0.1:53690 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:47:25.301 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 06:51:32.676 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56206 10 6452 1 2025-09-08 06:51:48.142 00:00:10.358 TCP 23.104.0.1:41748 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:48:25.299 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 06:52:32.890 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46418 10 6452 1 2025-09-08 06:52:48.543 00:00:10.363 TCP 23.104.0.1:60348 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:53:33.084 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47454 10 6452 1 2025-09-08 06:53:48.947 00:00:10.369 TCP 23.104.0.1:55086 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:54:33.268 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42822 10 6452 1 2025-09-08 06:54:54.282 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:54:54.404 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:54:49.357 00:00:10.359 TCP 23.104.0.1:53372 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:55:33.475 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60174 10 6452 1 2025-09-08 06:55:49.755 00:00:10.341 TCP 23.104.0.1:42144 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:56:33.692 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45904 10 6452 1 2025-09-08 06:56:50.138 00:00:10.445 TCP 23.104.0.1:36674 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:53:25.302 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 06:57:33.905 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34694 10 6452 1 2025-09-08 06:57:50.621 00:00:10.367 TCP 23.104.0.1:56564 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:54:25.299 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 06:58:34.086 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35010 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1102, avg pps: 0, avg bpp: 318 Time window: 2025-09-08 05:59:21 - 2025-09-08 06:59:26 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0014s Wall: 0.0032s flows/second: 51695.4 Runtime: 0.0032s