Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 17:59:11.867 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44570 10 6452 1 2025-09-08 17:59:29.102 00:00:10.363 TCP 23.104.0.1:57404 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:00:14.872 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 18:00:14.947 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 18:00:12.102 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53866 10 6452 1 2025-09-08 18:00:29.502 00:00:10.378 TCP 23.104.0.1:49262 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:01:12.275 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54880 10 6452 1 2025-09-08 18:01:29.917 00:00:10.372 TCP 23.104.0.1:53868 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:02:12.491 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60932 10 6452 1 2025-09-08 18:02:30.319 00:00:10.365 TCP 23.104.0.1:39878 -> 1.101.0.1:3000 11 1507 1 2025-09-08 17:59:25.495 00:05:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 18:03:12.715 00:00:10.839 TCP 1.101.0.1:3000 -> 22.102.0.1:45762 10 6452 1 2025-09-08 18:03:30.725 00:00:10.331 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:04:13.596 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52100 10 6452 1 2025-09-08 18:00:25.492 00:05:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 18:04:31.114 00:00:10.324 TCP 23.104.0.1:44812 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:05:15.165 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 18:05:15.318 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 18:05:13.807 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50370 10 6452 1 2025-09-08 18:05:31.475 00:00:10.360 TCP 23.104.0.1:33468 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:06:14.039 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:49712 10 6452 1 2025-09-08 18:06:31.873 00:00:10.362 TCP 23.104.0.1:39670 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:07:14.209 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-09-08 18:07:32.276 00:00:10.363 TCP 23.104.0.1:59508 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:08:14.436 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59104 10 6452 1 2025-09-08 18:08:32.677 00:00:10.365 TCP 23.104.0.1:45852 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:09:14.661 00:00:10.277 TCP 1.101.0.1:3000 -> 22.102.0.1:37278 10 6452 1 2025-09-08 18:05:25.495 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 18:09:33.111 00:00:10.365 TCP 23.104.0.1:35546 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:10:15.149 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 18:10:15.254 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 18:10:14.976 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:48436 10 6452 1 2025-09-08 18:06:25.494 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 18:10:33.516 00:00:10.365 TCP 23.104.0.1:38838 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:11:15.220 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40112 10 6452 1 2025-09-08 18:11:33.922 00:00:10.387 TCP 23.104.0.1:45484 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:12:15.392 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32808 10 6452 1 2025-09-08 18:12:34.349 00:00:10.324 TCP 23.104.0.1:39790 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:13:15.614 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52194 10 6452 1 2025-09-08 18:13:34.714 00:00:10.624 TCP 23.104.0.1:37176 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:14:15.835 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41578 10 6452 1 2025-09-08 18:14:35.376 00:00:10.362 TCP 23.104.0.1:55826 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:15:15.362 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 18:15:15.222 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 18:15:16.078 00:00:10.543 TCP 1.101.0.1:3000 -> 22.102.0.1:51892 11 6492 1 2025-09-08 18:11:25.496 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 18:15:35.777 00:00:10.368 TCP 23.104.0.1:45994 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:16:16.663 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39652 10 6452 1 2025-09-08 18:12:25.494 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 18:16:36.182 00:00:10.366 TCP 23.104.0.1:47704 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:17:16.880 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:52458 12 6568 1 2025-09-08 18:17:36.583 00:00:10.325 TCP 23.104.0.1:56866 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:18:17.138 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:41358 10 6452 1 2025-09-08 18:18:36.947 00:00:10.366 TCP 23.104.0.1:38914 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:19:17.315 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37274 10 6452 1 2025-09-08 18:19:37.351 00:00:10.369 TCP 23.104.0.1:53002 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:20:15.498 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 18:20:15.404 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 18:20:17.528 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36832 10 6452 1 2025-09-08 18:20:37.776 00:00:10.369 TCP 23.104.0.1:36502 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:21:17.741 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43150 10 6452 1 2025-09-08 18:17:25.500 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 18:21:38.185 00:00:10.321 TCP 23.104.0.1:51830 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:18:25.499 00:05:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 18:22:17.913 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37824 10 6452 1 2025-09-08 18:22:38.543 00:00:10.367 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:23:18.131 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60572 10 6452 1 2025-09-08 18:23:38.949 00:00:10.369 TCP 23.104.0.1:57630 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:24:18.337 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37562 10 6452 1 2025-09-08 18:24:39.386 00:00:10.322 TCP 23.104.0.1:40036 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:25:15.609 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 18:25:15.496 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 18:25:18.547 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50890 10 6452 1 2025-09-08 18:25:39.746 00:00:10.391 TCP 23.104.0.1:38742 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:26:18.725 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42580 10 6452 1 2025-09-08 18:26:40.193 00:00:10.328 TCP 23.104.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:23:25.500 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 18:27:18.941 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39660 10 6452 1 2025-09-08 18:27:40.557 00:00:10.367 TCP 23.104.0.1:42746 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:24:25.498 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 18:28:19.179 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:57838 10 6452 1 2025-09-08 18:28:40.961 00:00:10.327 TCP 23.104.0.1:59326 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:29:19.372 00:00:10.316 TCP 1.101.0.1:3000 -> 22.102.0.1:44198 10 6452 1 2025-09-08 18:29:41.322 00:00:10.364 TCP 23.104.0.1:60222 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:30:15.480 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 18:30:15.751 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 18:30:19.731 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56440 10 6452 1 2025-09-08 18:30:41.729 00:00:10.370 TCP 23.104.0.1:60898 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:31:19.956 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:46524 10 6452 1 2025-09-08 18:31:42.135 00:00:10.360 TCP 23.104.0.1:38376 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:32:20.164 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34530 10 6452 1 2025-09-08 18:32:42.534 00:00:10.324 TCP 23.104.0.1:48814 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:29:25.502 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 18:33:20.394 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51852 10 6452 1 2025-09-08 18:33:42.897 00:00:10.334 TCP 23.104.0.1:59324 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:30:25.499 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 18:34:20.603 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-09-08 18:34:43.269 00:00:10.359 TCP 23.104.0.1:60412 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:35:15.593 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 18:35:15.773 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 18:35:20.819 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53132 10 6452 1 2025-09-08 18:35:43.672 00:00:10.377 TCP 23.104.0.1:41124 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:36:21.037 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55432 10 6452 1 2025-09-08 18:36:44.100 00:00:10.324 TCP 23.104.0.1:54750 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:37:21.256 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36924 10 6452 1 2025-09-08 18:37:44.458 00:00:10.329 TCP 23.104.0.1:53622 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:38:21.464 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51786 11 6504 1 2025-09-08 18:38:44.824 00:00:10.380 TCP 23.104.0.1:59872 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:35:25.503 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 18:39:21.694 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42490 10 6452 1 2025-09-08 18:39:45.241 00:00:10.366 TCP 23.104.0.1:42110 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:40:15.945 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 18:40:15.911 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 18:36:25.501 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 18:40:21.910 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44918 10 6452 1 2025-09-08 18:40:45.646 00:00:10.365 TCP 23.104.0.1:46982 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:41:22.134 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:32858 10 6452 1 2025-09-08 18:41:46.056 00:00:10.365 TCP 23.104.0.1:46560 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:42:22.353 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59524 10 6452 1 2025-09-08 18:42:46.466 00:00:10.468 TCP 23.104.0.1:46390 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:43:22.573 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60714 10 6452 1 2025-09-08 18:43:46.973 00:00:10.323 TCP 23.104.0.1:53808 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:44:22.795 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33404 10 6452 1 2025-09-08 18:44:47.336 00:00:10.365 TCP 23.104.0.1:34602 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:45:15.922 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 18:45:16.168 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 18:41:25.506 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 18:45:23.013 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41022 10 6452 1 2025-09-08 18:45:47.737 00:00:10.366 TCP 23.104.0.1:39402 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:42:25.503 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 18:46:23.227 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51802 10 6452 1 2025-09-08 18:46:48.140 00:00:10.322 TCP 23.104.0.1:45346 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:47:23.437 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40404 10 6452 1 2025-09-08 18:47:48.504 00:00:10.366 TCP 23.104.0.1:44408 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:48:23.649 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48862 10 6452 1 2025-09-08 18:48:48.909 00:00:10.329 TCP 23.104.0.1:48002 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:49:23.869 00:00:10.417 TCP 1.101.0.1:3000 -> 22.102.0.1:51944 10 6452 1 2025-09-08 18:49:49.276 00:00:10.367 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:50:16.194 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 18:50:16.044 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 18:50:24.324 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45878 10 6452 1 2025-09-08 18:50:49.681 00:00:10.365 TCP 23.104.0.1:56230 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:47:25.507 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 18:51:24.495 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33828 10 6452 1 2025-09-08 18:51:50.112 00:00:10.369 TCP 23.104.0.1:39518 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:48:25.507 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 18:52:24.713 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51348 10 6452 1 2025-09-08 18:52:50.522 00:00:10.366 TCP 23.104.0.1:34398 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:53:24.935 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:48180 12 10367 1 2025-09-08 18:53:50.925 00:00:10.474 TCP 23.104.0.1:36756 -> 1.101.0.1:3000 15 1926 1 2025-09-08 18:54:25.204 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38624 10 6452 1 2025-09-08 18:54:51.439 00:00:10.321 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:55:16.124 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 18:55:16.256 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 18:55:25.415 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53492 10 6452 1 2025-09-08 18:55:51.800 00:00:10.371 TCP 23.104.0.1:56142 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:56:25.640 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46694 10 6452 1 2025-09-08 18:56:52.203 00:00:10.316 TCP 23.104.0.1:42536 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:53:25.509 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 18:57:25.865 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:59770 10 6452 1 2025-09-08 18:57:52.563 00:00:10.368 TCP 23.104.0.1:50798 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:54:25.508 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 18:58:26.115 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38612 10 6452 1 Summary: total flows: 163, total bytes: 501383, total packets: 1571, avg bps: 1109, avg pps: 0, avg bpp: 319 Time window: 2025-09-08 17:59:11 - 2025-09-08 18:59:26 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0025s User: 0.0025s Wall: 0.0030s flows/second: 54768.2 Runtime: 0.0030s