Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 16:58:58.836 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60126 10 6452 1 2025-09-08 16:59:03.656 00:00:10.364 TCP 23.104.0.1:48250 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:59:59.077 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50462 10 6452 1 2025-09-08 17:00:13.953 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 17:00:04.088 00:00:10.365 TCP 23.104.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:00:13.869 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 17:00:59.251 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37794 10 6452 1 2025-09-08 17:01:04.491 00:00:10.362 TCP 23.104.0.1:56856 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:01:59.461 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47662 10 6452 1 2025-09-08 17:02:04.891 00:00:10.368 TCP 23.104.0.1:39878 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:02:59.638 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47034 10 6452 1 2025-09-08 17:03:05.301 00:00:10.360 TCP 23.104.0.1:54174 -> 1.101.0.1:3000 11 1507 1 2025-09-08 16:59:25.481 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 17:03:59.813 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48324 10 6452 1 2025-09-08 17:04:05.700 00:00:10.367 TCP 23.104.0.1:41246 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:00:25.478 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 17:05:00.041 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41356 10 6452 1 2025-09-08 17:05:13.903 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 17:05:13.700 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 17:05:06.110 00:00:10.362 TCP 23.104.0.1:43366 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:06:00.247 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48800 10 6452 1 2025-09-08 17:06:06.514 00:00:10.362 TCP 23.104.0.1:54298 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:07:00.456 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38340 10 6452 1 2025-09-08 17:07:06.915 00:00:10.327 TCP 23.104.0.1:47512 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:08:00.669 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44912 10 6452 1 2025-09-08 17:08:07.280 00:00:10.366 TCP 23.104.0.1:41124 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:09:00.881 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55262 10 6452 1 2025-09-08 17:09:07.686 00:00:10.372 TCP 23.104.0.1:58270 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:05:25.481 00:05:00.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 17:10:01.080 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34182 10 6452 1 2025-09-08 17:10:13.860 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 17:10:13.932 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 17:10:08.104 00:00:10.322 TCP 23.104.0.1:60452 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:06:25.479 00:05:00.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 17:11:01.251 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46004 10 6452 1 2025-09-08 17:11:08.471 00:00:10.365 TCP 23.104.0.1:33848 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:12:01.463 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55754 10 6452 1 2025-09-08 17:12:08.874 00:00:10.365 TCP 23.104.0.1:57720 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:13:01.681 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48998 10 6452 1 2025-09-08 17:13:09.278 00:00:10.364 TCP 23.104.0.1:52160 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:14:01.914 00:00:10.345 TCP 1.101.0.1:3000 -> 22.102.0.1:48190 10 6452 1 2025-09-08 17:14:09.684 00:00:10.365 TCP 23.104.0.1:51072 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:15:02.293 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:47892 10 6452 1 2025-09-08 17:15:14.060 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 17:15:14.177 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 17:15:10.105 00:00:10.366 TCP 23.104.0.1:57482 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:11:25.483 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 17:16:02.505 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60996 10 6452 1 2025-09-08 17:16:10.503 00:00:10.366 TCP 23.104.0.1:60574 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:12:25.481 00:05:00.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 17:17:02.676 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57884 10 6452 1 2025-09-08 17:17:10.900 00:00:10.324 TCP 23.104.0.1:41018 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:18:02.889 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40142 10 6452 1 2025-09-08 17:18:11.261 00:00:10.370 TCP 23.104.0.1:58674 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:19:03.109 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43072 10 6452 1 2025-09-08 17:19:11.671 00:00:10.375 TCP 23.104.0.1:46684 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:20:14.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 17:20:03.324 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49448 10 6452 1 2025-09-08 17:20:14.234 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 17:20:12.105 00:00:10.338 TCP 23.104.0.1:33418 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:21:03.546 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35116 10 6452 1 2025-09-08 17:21:12.494 00:00:10.332 TCP 23.104.0.1:49178 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:17:25.485 00:05:00.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 17:22:03.755 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37680 10 6452 1 2025-09-08 17:18:25.482 00:05:00.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 17:22:12.878 00:00:10.392 TCP 23.104.0.1:41182 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:23:03.963 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36710 12 6556 1 2025-09-08 17:23:13.301 00:00:10.334 TCP 23.104.0.1:43124 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:24:04.197 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60770 10 6452 1 2025-09-08 17:24:13.674 00:00:10.368 TCP 23.104.0.1:33700 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:25:14.366 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 17:25:04.408 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33280 10 6452 1 2025-09-08 17:25:14.359 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 17:25:14.101 00:00:10.363 TCP 23.104.0.1:41374 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:26:04.574 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33364 10 6452 1 2025-09-08 17:26:14.505 00:00:10.324 TCP 23.104.0.1:58124 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:27:04.784 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-09-08 17:27:14.862 00:00:10.371 TCP 23.104.0.1:49324 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:23:25.489 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 17:28:04.967 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38578 10 6452 1 2025-09-08 17:28:15.271 00:00:10.830 TCP 23.104.0.1:60222 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:24:25.487 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 17:29:05.190 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38882 10 6452 1 2025-09-08 17:29:16.138 00:00:10.370 TCP 23.104.0.1:44398 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:30:05.401 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34844 10 6452 1 2025-09-08 17:30:14.408 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 17:30:14.409 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 17:30:16.546 00:00:10.369 TCP 23.104.0.1:50492 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:31:05.611 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35186 10 6452 1 2025-09-08 17:31:16.950 00:00:10.367 TCP 23.104.0.1:56252 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:32:05.825 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42492 10 6452 1 2025-09-08 17:32:17.355 00:00:10.362 TCP 23.104.0.1:44336 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:33:06.039 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47402 10 6452 1 2025-09-08 17:29:25.490 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 17:33:17.755 00:00:10.460 TCP 23.104.0.1:46046 -> 1.101.0.1:3000 15 1926 1 2025-09-08 17:34:06.252 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:57166 12 10365 1 2025-09-08 17:30:25.486 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 17:34:18.251 00:00:10.363 TCP 23.104.0.1:42670 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:35:06.491 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58684 10 6452 1 2025-09-08 17:35:14.318 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 17:35:14.554 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 17:35:18.653 00:00:10.367 TCP 23.104.0.1:50078 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:36:06.712 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46752 10 6452 1 2025-09-08 17:36:19.061 00:00:10.359 TCP 23.104.0.1:43108 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:37:06.923 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:39152 10 6452 1 2025-09-08 17:37:19.460 00:00:10.365 TCP 23.104.0.1:39808 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:38:07.104 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51542 10 6452 1 2025-09-08 17:38:19.869 00:00:10.366 TCP 23.104.0.1:37928 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:39:07.327 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46316 10 6452 1 2025-09-08 17:35:25.490 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 17:39:20.274 00:00:10.366 TCP 23.104.0.1:42162 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:40:14.504 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 17:40:14.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 17:40:07.546 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35060 10 6452 1 2025-09-08 17:36:25.488 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 17:40:20.683 00:00:10.372 TCP 23.104.0.1:41878 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:41:07.765 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44260 10 6452 1 2025-09-08 17:41:21.112 00:00:10.334 TCP 23.104.0.1:56090 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:42:07.986 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60578 10 6452 1 2025-09-08 17:42:21.485 00:00:10.324 TCP 23.104.0.1:45914 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:43:08.211 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49980 10 6452 1 2025-09-08 17:43:21.850 00:00:10.372 TCP 23.104.0.1:44654 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:44:08.388 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35748 10 6452 1 2025-09-08 17:44:22.255 00:00:10.366 TCP 23.104.0.1:55570 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:45:14.793 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 17:45:14.838 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 17:45:08.600 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39318 11 6492 1 2025-09-08 17:41:25.490 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 17:45:22.661 00:00:10.580 TCP 23.104.0.1:50108 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:46:08.819 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56082 10 6452 1 2025-09-08 17:42:25.488 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 17:46:23.280 00:00:10.325 TCP 23.104.0.1:43306 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:47:09.042 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60822 10 6452 1 2025-09-08 17:47:23.643 00:00:10.365 TCP 23.104.0.1:32776 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:48:09.258 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52872 10 6452 1 2025-09-08 17:48:24.063 00:00:10.327 TCP 23.104.0.1:37478 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:49:09.473 00:00:10.336 TCP 1.101.0.1:3000 -> 22.102.0.1:59824 10 6452 1 2025-09-08 17:49:24.428 00:00:10.365 TCP 23.104.0.1:55372 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:50:14.461 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 17:50:14.866 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 17:50:09.846 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47810 10 6452 1 2025-09-08 17:50:24.837 00:00:10.408 TCP 23.104.0.1:33734 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:51:10.082 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33736 10 6452 1 2025-09-08 17:47:25.492 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 17:51:25.296 00:00:10.326 TCP 23.104.0.1:47910 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:52:10.289 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:46554 11 6504 1 2025-09-08 17:48:25.490 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 17:52:25.677 00:00:10.369 TCP 23.104.0.1:34976 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:53:10.553 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:55080 12 10367 1 2025-09-08 17:53:26.113 00:00:10.442 TCP 23.104.0.1:43796 -> 1.101.0.1:3000 15 1926 1 2025-09-08 17:54:10.792 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34420 10 6452 1 2025-09-08 17:54:26.605 00:00:10.827 TCP 23.104.0.1:58296 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:55:14.911 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 17:55:14.864 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 17:55:11.002 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42046 10 6452 1 2025-09-08 17:55:27.473 00:00:10.371 TCP 23.104.0.1:46320 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:56:11.219 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34042 10 6452 1 2025-09-08 17:56:27.872 00:00:10.366 TCP 23.104.0.1:53316 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:57:11.440 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47736 10 6452 1 2025-09-08 17:53:25.493 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 17:57:28.276 00:00:10.365 TCP 23.104.0.1:58216 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:58:11.655 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39872 10 6452 1 2025-09-08 17:54:25.492 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 17:58:28.689 00:00:10.369 TCP 23.104.0.1:59524 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507210, total packets: 1588, avg bps: 1118, avg pps: 0, avg bpp: 319 Time window: 2025-09-08 16:58:58 - 2025-09-08 17:59:26 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0052s User: 0.0000s Wall: 0.0020s flows/second: 80954.0 Runtime: 0.0020s