Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 15:58:45.972 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:35424 10 6452 1 2025-09-08 15:59:39.600 00:00:10.362 TCP 23.104.0.1:39750 -> 1.101.0.1:3000 11 1507 1 2025-09-08 15:59:46.213 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49184 10 6452 1 2025-09-08 16:00:12.700 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 16:00:12.499 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 16:00:40.000 00:00:10.365 TCP 23.104.0.1:44252 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:00:46.430 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60290 10 6452 1 2025-09-08 16:01:40.402 00:00:10.366 TCP 23.104.0.1:42168 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:01:46.615 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:58774 10 6452 1 2025-09-08 16:02:40.813 00:00:10.367 TCP 23.104.0.1:48072 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:02:46.828 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6452 1 2025-09-08 15:59:25.465 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 16:03:41.217 00:00:10.487 TCP 23.104.0.1:50380 -> 1.101.0.1:3000 15 1926 1 2025-09-08 16:03:47.072 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:37142 12 10367 1 2025-09-08 16:00:25.462 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 16:04:41.743 00:00:10.394 TCP 23.104.0.1:42348 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:04:47.271 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6452 1 2025-09-08 16:05:12.753 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 16:05:12.794 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 16:05:42.177 00:00:10.363 TCP 23.104.0.1:58172 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:05:47.482 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33690 10 6452 1 2025-09-08 16:06:42.579 00:00:10.363 TCP 23.104.0.1:41544 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:06:47.691 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60206 10 6452 1 2025-09-08 16:07:42.982 00:00:10.365 TCP 23.104.0.1:49990 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:07:47.869 00:00:10.384 TCP 1.101.0.1:3000 -> 22.102.0.1:56722 10 6452 1 2025-09-08 16:08:43.384 00:00:10.364 TCP 23.104.0.1:58036 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:08:48.296 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55900 10 6452 1 2025-09-08 16:05:25.465 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 16:09:43.789 00:00:10.361 TCP 23.104.0.1:37458 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:09:48.522 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54600 10 6452 1 2025-09-08 16:10:12.854 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 16:10:12.737 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 16:06:25.463 00:05:00.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 16:10:44.192 00:00:10.367 TCP 23.104.0.1:50954 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:10:48.747 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35624 10 6452 1 2025-09-08 16:11:44.595 00:00:10.322 TCP 23.104.0.1:58356 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:11:48.965 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47960 10 6452 1 2025-09-08 16:12:44.955 00:00:10.365 TCP 23.104.0.1:33990 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:12:49.183 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44152 10 6452 1 2025-09-08 16:13:45.357 00:00:10.366 TCP 23.104.0.1:54682 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:13:49.400 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56654 10 6452 1 2025-09-08 16:14:45.761 00:00:10.376 TCP 23.104.0.1:49902 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:14:49.582 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49772 10 6452 1 2025-09-08 16:15:13.191 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 16:15:13.259 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 16:11:25.466 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 16:15:46.178 00:00:10.347 TCP 23.104.0.1:46746 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:15:49.788 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34984 10 6452 1 2025-09-08 16:12:25.465 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 16:16:46.566 00:00:10.379 TCP 23.104.0.1:50852 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:16:50.004 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54604 10 6452 1 2025-09-08 16:17:50.219 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48462 10 6452 1 2025-09-08 16:17:46.988 00:00:10.363 TCP 23.104.0.1:40056 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:18:47.394 00:00:10.367 TCP 23.104.0.1:55148 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:18:50.391 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42948 10 6452 1 2025-09-08 16:19:50.618 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55200 10 6452 1 2025-09-08 16:19:47.792 00:00:10.342 TCP 23.104.0.1:46306 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:20:13.214 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 16:20:13.058 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 16:20:48.182 00:00:10.324 TCP 23.104.0.1:33290 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:20:50.798 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44498 10 6452 1 2025-09-08 16:17:25.468 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 16:21:48.542 00:00:10.365 TCP 23.104.0.1:50962 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:21:51.035 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:41602 10 6452 1 2025-09-08 16:18:25.466 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 16:22:51.230 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42034 10 6452 1 2025-09-08 16:22:48.956 00:00:10.365 TCP 23.104.0.1:53642 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:23:51.413 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59128 10 6452 1 2025-09-08 16:23:49.361 00:00:10.360 TCP 23.104.0.1:39796 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:24:49.763 00:00:10.337 TCP 23.104.0.1:41408 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:24:51.628 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55476 10 6452 1 2025-09-08 16:25:13.182 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 16:25:13.235 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 16:25:50.140 00:00:10.327 TCP 23.104.0.1:40900 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:25:51.801 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57892 10 6452 1 2025-09-08 16:26:50.507 00:00:10.339 TCP 23.104.0.1:51640 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:26:52.024 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55572 10 6452 1 2025-09-08 16:23:25.472 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 16:27:50.881 00:00:10.390 TCP 23.104.0.1:52614 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:27:52.191 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45450 10 6452 1 2025-09-08 16:24:25.470 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 16:28:51.306 00:00:10.365 TCP 23.104.0.1:36500 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:28:52.402 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44102 10 6452 1 2025-09-08 16:29:52.618 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39528 10 6452 1 2025-09-08 16:29:51.709 00:00:10.386 TCP 23.104.0.1:44934 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:30:13.306 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 16:30:13.109 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 16:30:52.134 00:00:10.331 TCP 23.104.0.1:52742 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:30:52.839 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58356 10 6452 1 2025-09-08 16:31:52.504 00:00:10.371 TCP 23.104.0.1:58364 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:31:53.081 00:00:10.277 TCP 1.101.0.1:3000 -> 22.102.0.1:33566 10 6452 1 2025-09-08 16:32:52.915 00:00:10.372 TCP 23.104.0.1:50170 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:32:53.395 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52100 10 6452 1 2025-09-08 16:29:25.474 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 16:33:53.571 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50614 10 6452 1 2025-09-08 16:33:53.324 00:00:10.364 TCP 23.104.0.1:55982 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:30:25.470 00:05:00.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 16:34:53.743 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48366 10 6452 1 2025-09-08 16:34:53.723 00:00:10.374 TCP 23.104.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:35:13.393 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 16:35:13.325 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 16:35:53.961 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59036 10 6452 1 2025-09-08 16:35:54.132 00:00:10.333 TCP 23.104.0.1:49288 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:36:54.505 00:00:10.388 TCP 23.104.0.1:35782 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:36:54.182 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54494 10 6452 1 2025-09-08 16:37:54.933 00:00:10.385 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:37:54.394 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:38142 10 6452 1 2025-09-08 16:38:54.576 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49752 10 6452 1 2025-09-08 16:38:55.357 00:00:10.367 TCP 23.104.0.1:53752 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:35:25.473 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 16:39:54.747 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56184 10 6452 1 2025-09-08 16:39:55.765 00:00:10.379 TCP 23.104.0.1:44292 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:40:13.608 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 16:40:13.227 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 16:36:25.470 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 16:40:54.965 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44840 10 6452 1 2025-09-08 16:40:56.180 00:00:10.370 TCP 23.104.0.1:48522 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:41:56.587 00:00:10.321 TCP 23.104.0.1:57736 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:41:55.189 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34294 10 6452 1 2025-09-08 16:42:55.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41206 10 6452 1 2025-09-08 16:42:56.947 00:00:10.513 TCP 23.104.0.1:44180 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:43:55.612 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37162 10 6452 1 2025-09-08 16:43:57.491 00:00:10.326 TCP 23.104.0.1:37960 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:44:55.829 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33680 10 6452 1 2025-09-08 16:44:57.855 00:00:10.334 TCP 23.104.0.1:37890 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:45:13.493 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 16:45:13.553 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 16:41:25.474 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 16:45:56.071 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44648 10 6452 1 2025-09-08 16:45:58.236 00:00:10.364 TCP 23.104.0.1:56376 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:42:25.471 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 16:46:56.283 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36330 10 6452 1 2025-09-08 16:46:58.642 00:00:10.367 TCP 23.104.0.1:52134 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:47:56.506 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48868 10 6452 1 2025-09-08 16:47:59.058 00:00:10.365 TCP 23.104.0.1:39016 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:48:56.738 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57602 10 6452 1 2025-09-08 16:48:59.463 00:00:10.368 TCP 23.104.0.1:48296 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:49:56.958 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:45388 10 6452 1 2025-09-08 16:49:59.876 00:00:10.392 TCP 23.104.0.1:42628 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:50:13.725 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 16:50:13.719 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 16:50:57.154 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40298 10 6452 1 2025-09-08 16:51:00.311 00:00:10.324 TCP 23.104.0.1:37392 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:47:25.475 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 16:51:57.367 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33610 10 6452 1 2025-09-08 16:52:00.678 00:00:10.500 TCP 23.104.0.1:41422 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:48:25.473 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 16:52:57.579 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39650 10 6452 1 2025-09-08 16:53:01.217 00:00:10.366 TCP 23.104.0.1:47400 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:53:57.804 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:54308 10 6452 1 2025-09-08 16:54:01.622 00:00:10.364 TCP 23.104.0.1:35028 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:54:58.014 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 10 6452 1 2025-09-08 16:55:13.785 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 16:55:02.022 00:00:10.367 TCP 23.104.0.1:57036 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:55:13.668 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 16:55:58.191 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47974 10 6452 1 2025-09-08 16:56:02.425 00:00:10.367 TCP 23.104.0.1:35872 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:56:58.408 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39660 10 6452 1 2025-09-08 16:57:02.832 00:00:10.382 TCP 23.104.0.1:34340 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:53:25.479 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 16:57:58.619 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45216 10 6452 1 2025-09-08 16:58:03.252 00:00:10.363 TCP 23.104.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:54:25.477 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 163, total bytes: 501175, total packets: 1567, avg bps: 1101, avg pps: 0, avg bpp: 319 Time window: 2025-09-08 15:58:45 - 2025-09-08 16:59:26 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0018s Wall: 0.0022s flows/second: 74231.4 Runtime: 0.0022s