Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 11:58:53.172 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55594 10 6452 1 2025-09-08 11:58:58.170 00:00:10.364 TCP 23.104.0.1:52574 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:59:53.398 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36016 10 6452 1 2025-09-08 11:59:58.572 00:00:10.360 TCP 23.104.0.1:33620 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:00:07.744 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 12:00:07.828 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 12:00:53.572 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47100 10 6452 1 2025-09-08 12:00:58.975 00:00:10.370 TCP 23.104.0.1:44796 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:01:53.792 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37542 10 6452 1 2025-09-08 12:01:59.383 00:00:10.363 TCP 23.104.0.1:43332 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:02:54.007 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34256 11 6492 1 2025-09-08 12:02:59.786 00:00:10.361 TCP 23.104.0.1:60088 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:59:25.388 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 12:03:54.227 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53834 10 6452 1 2025-09-08 12:04:00.187 00:00:10.326 TCP 23.104.0.1:38624 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:00:25.386 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 12:04:54.436 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44552 10 6452 1 2025-09-08 12:05:00.553 00:00:10.367 TCP 23.104.0.1:44006 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:05:07.634 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 12:05:07.819 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 12:05:54.654 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56234 10 6452 1 2025-09-08 12:06:00.955 00:00:10.420 TCP 23.104.0.1:44540 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:06:54.916 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42180 10 6452 1 2025-09-08 12:07:01.415 00:00:10.358 TCP 23.104.0.1:40676 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:07:55.128 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56128 10 6452 1 2025-09-08 12:08:01.817 00:00:10.360 TCP 23.104.0.1:59902 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:08:55.346 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37698 10 6452 1 2025-09-08 12:09:02.216 00:00:10.329 TCP 23.104.0.1:40998 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:05:25.390 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 12:09:55.570 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59718 10 6452 1 2025-09-08 12:10:07.892 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 12:10:07.922 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 12:10:02.578 00:00:10.362 TCP 23.104.0.1:34578 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:06:25.396 00:05:00.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 12:10:55.793 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38532 10 6452 1 2025-09-08 12:11:02.984 00:00:10.363 TCP 23.104.0.1:46808 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:11:56.004 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:44830 10 6452 1 2025-09-08 12:12:03.389 00:00:10.373 TCP 23.104.0.1:33762 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:12:56.185 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53576 10 6452 1 2025-09-08 12:13:03.811 00:00:10.367 TCP 23.104.0.1:49856 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:13:56.403 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43538 10 6452 1 2025-09-08 12:14:04.218 00:00:10.365 TCP 23.104.0.1:50094 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:15:07.932 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 12:14:56.616 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60204 10 6452 1 2025-09-08 12:15:08.362 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 12:15:04.625 00:00:10.371 TCP 23.104.0.1:53024 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:11:25.397 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 12:15:56.833 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36406 10 6452 1 2025-09-08 12:16:05.034 00:00:10.329 TCP 23.104.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:12:25.396 00:05:00.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 12:16:57.078 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48822 10 6452 1 2025-09-08 12:17:05.403 00:00:10.369 TCP 23.104.0.1:46612 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:17:57.254 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43900 10 6452 1 2025-09-08 12:18:05.817 00:00:10.359 TCP 23.104.0.1:34602 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:18:57.475 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56232 10 6452 1 2025-09-08 12:19:06.213 00:00:10.366 TCP 23.104.0.1:41812 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:20:08.113 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 12:19:57.652 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50430 10 6452 1 2025-09-08 12:20:08.280 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 12:20:06.618 00:00:10.328 TCP 23.104.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:20:57.824 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:44702 11 7373 1 2025-09-08 12:21:06.978 00:00:10.367 TCP 23.104.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:17:25.402 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 12:21:58.083 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:46534 10 6452 1 2025-09-08 12:22:07.383 00:00:10.991 TCP 23.104.0.1:47014 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:18:25.400 00:05:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 12:22:58.252 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40742 10 6452 1 2025-09-08 12:23:08.412 00:00:10.367 TCP 23.104.0.1:42910 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:23:58.468 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34904 10 6452 1 2025-09-08 12:24:08.818 00:00:10.367 TCP 23.104.0.1:58878 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:25:08.265 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 12:24:58.685 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56776 10 6452 1 2025-09-08 12:25:08.190 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 12:25:09.232 00:00:10.366 TCP 23.104.0.1:53590 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:25:58.863 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54386 10 6452 1 2025-09-08 12:26:09.640 00:00:10.367 TCP 23.104.0.1:55310 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:26:59.047 00:00:10.549 TCP 1.101.0.1:3000 -> 22.102.0.1:48998 10 6452 1 2025-09-08 12:27:10.055 00:00:10.366 TCP 23.104.0.1:47804 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:23:25.408 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 12:27:59.636 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58430 10 6452 1 2025-09-08 12:28:10.459 00:00:10.372 TCP 23.104.0.1:34934 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:24:25.405 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 12:28:59.858 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53648 10 6452 1 2025-09-08 12:29:10.856 00:00:10.373 TCP 23.104.0.1:58930 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:30:08.271 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 12:30:00.104 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:33264 10 6452 1 2025-09-08 12:30:08.505 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 12:30:11.266 00:00:10.384 TCP 23.104.0.1:60024 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:31:00.361 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44766 10 6452 1 2025-09-08 12:31:11.693 00:00:10.365 TCP 23.104.0.1:32978 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:32:00.578 00:00:10.275 TCP 1.101.0.1:3000 -> 22.102.0.1:53622 10 6452 1 2025-09-08 12:32:12.107 00:00:10.370 TCP 23.104.0.1:50596 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:33:00.899 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53058 10 6452 1 2025-09-08 12:33:12.512 00:00:10.367 TCP 23.104.0.1:43576 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:29:25.409 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 12:34:01.114 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43762 10 6452 1 2025-09-08 12:30:25.408 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 12:34:12.912 00:00:10.365 TCP 23.104.0.1:53748 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:35:08.605 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 12:35:01.325 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33236 10 6452 1 2025-09-08 12:35:08.949 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 12:35:13.318 00:00:10.364 TCP 23.104.0.1:51528 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:36:01.540 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32814 10 6452 1 2025-09-08 12:36:13.721 00:00:10.329 TCP 23.104.0.1:41976 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:37:01.748 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55952 10 6452 1 2025-09-08 12:37:14.102 00:00:10.365 TCP 23.104.0.1:54146 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:38:01.969 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55882 10 6452 1 2025-09-08 12:38:14.502 00:00:10.442 TCP 23.104.0.1:47860 -> 1.101.0.1:3000 15 1926 1 2025-09-08 12:39:02.199 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 12 10365 1 2025-09-08 12:39:14.983 00:00:10.368 TCP 23.104.0.1:44642 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:35:25.413 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 12:40:08.746 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 12:40:08.666 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 12:40:02.452 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49060 10 6452 1 2025-09-08 12:40:15.388 00:00:10.395 TCP 23.104.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:36:25.411 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 12:41:02.674 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60422 10 6452 1 2025-09-08 12:41:15.820 00:00:10.361 TCP 23.104.0.1:46394 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:42:02.889 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50462 10 6452 1 2025-09-08 12:42:16.219 00:00:10.369 TCP 23.104.0.1:33230 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:43:03.077 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:44556 10 6452 1 2025-09-08 12:43:16.627 00:00:10.375 TCP 23.104.0.1:49010 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:44:03.258 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53112 10 6452 1 2025-09-08 12:44:17.047 00:00:10.365 TCP 23.104.0.1:51860 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:45:08.591 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 12:45:08.635 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 12:45:03.432 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37832 10 6452 1 2025-09-08 12:41:25.413 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 12:45:17.457 00:00:10.728 TCP 23.104.0.1:38400 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:46:03.652 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40132 10 6452 1 2025-09-08 12:42:25.411 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 12:46:18.243 00:00:10.365 TCP 23.104.0.1:48520 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:47:03.866 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58676 10 6452 1 2025-09-08 12:47:18.651 00:00:10.333 TCP 23.104.0.1:48600 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:48:04.092 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53772 10 6452 1 2025-09-08 12:48:19.024 00:00:10.366 TCP 23.104.0.1:39234 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:49:04.264 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55020 10 6452 1 2025-09-08 12:49:19.428 00:00:10.329 TCP 23.104.0.1:47498 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:50:08.818 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 12:50:08.751 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 12:50:04.480 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47744 10 6452 1 2025-09-08 12:50:19.794 00:00:10.362 TCP 23.104.0.1:34278 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:51:04.654 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42350 10 6452 1 2025-09-08 12:47:25.413 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 12:51:20.201 00:00:10.368 TCP 23.104.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:52:04.864 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42324 10 6452 1 2025-09-08 12:48:25.412 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 12:52:20.608 00:00:10.320 TCP 23.104.0.1:37842 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:53:05.094 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36604 10 6452 1 2025-09-08 12:53:20.968 00:00:10.374 TCP 23.104.0.1:33340 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:54:05.306 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58580 10 6452 1 2025-09-08 12:54:21.383 00:00:10.364 TCP 23.104.0.1:56186 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:55:09.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 12:55:08.850 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 12:55:05.524 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57646 10 6452 1 2025-09-08 12:55:21.787 00:00:10.367 TCP 23.104.0.1:48420 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:56:05.739 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56076 10 6452 1 2025-09-08 12:56:22.194 00:00:10.361 TCP 23.104.0.1:46850 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:57:05.913 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:38194 10 6452 1 2025-09-08 12:53:25.416 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 12:57:22.593 00:00:10.365 TCP 23.104.0.1:39768 -> 1.101.0.1:3000 11 1507 1 2025-09-08 12:58:06.104 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:59358 10 6452 1 2025-09-08 12:54:25.413 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 12:58:22.995 00:00:10.596 TCP 23.104.0.1:47928 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 503641, total packets: 1580, avg bps: 1109, avg pps: 0, avg bpp: 318 Time window: 2025-09-08 11:58:53 - 2025-09-08 12:59:26 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0011s Wall: 0.0022s flows/second: 74043.7 Runtime: 0.0022s