Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 19:58:58.773 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52768 10 6452 1 2025-09-13 19:59:39.552 00:00:10.367 TCP 23.104.0.1:48132 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:59:58.985 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48728 10 6452 1 2025-09-13 20:00:39.958 00:00:10.367 TCP 23.104.0.1:59366 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:00:59.220 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39546 10 6452 1 2025-09-13 20:01:40.365 00:00:10.368 TCP 23.104.0.1:58386 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:01:59.428 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49884 10 6452 1 2025-09-13 19:57:28.000 00:06:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:02:41.670 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:02:41.813 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:02:40.769 00:00:10.374 TCP 23.104.0.1:42592 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:02:59.644 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:56562 10 6452 1 2025-09-13 19:58:28.003 00:06:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:03:41.183 00:00:10.477 TCP 23.104.0.1:52642 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:03:59.827 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39454 10 6452 1 2025-09-13 20:04:41.697 00:00:10.367 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:05:00.061 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45382 10 6452 1 2025-09-13 20:05:42.107 00:00:10.327 TCP 23.104.0.1:57648 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:06:00.309 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48036 10 6452 1 2025-09-13 20:06:42.480 00:00:10.365 TCP 23.104.0.1:48898 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:07:00.522 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-09-13 20:07:41.816 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:07:42.040 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:07:42.886 00:00:10.333 TCP 23.104.0.1:45012 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:08:00.693 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51962 10 6452 1 2025-09-13 20:08:43.259 00:00:10.364 TCP 23.104.0.1:35930 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:09:00.865 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52878 10 6452 1 2025-09-13 20:04:28.033 00:06:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:09:43.663 00:00:10.367 TCP 23.104.0.1:54550 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:10:01.092 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36844 11 6504 1 2025-09-13 20:05:28.037 00:06:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:10:44.082 00:00:10.326 TCP 23.104.0.1:35082 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:11:01.324 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46996 10 6452 1 2025-09-13 20:11:44.447 00:00:10.364 TCP 23.104.0.1:43986 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:12:01.529 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55042 10 6452 1 2025-09-13 20:12:42.371 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:12:42.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:12:44.856 00:00:10.372 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:13:01.737 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6452 1 2025-09-13 20:13:45.263 00:00:10.365 TCP 23.104.0.1:53192 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:14:01.928 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37102 10 6452 1 2025-09-13 20:14:45.667 00:00:10.373 TCP 23.104.0.1:40402 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:15:02.103 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44148 10 6452 1 2025-09-13 20:15:46.113 00:00:10.367 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 12 1559 1 2025-09-13 20:16:02.272 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52138 10 6452 1 2025-09-13 20:11:28.041 00:06:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:16:46.524 00:00:10.366 TCP 23.104.0.1:44706 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:17:02.484 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39710 10 6452 1 2025-09-13 20:12:28.042 00:06:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:17:42.474 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:17:42.493 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:17:46.935 00:00:10.382 TCP 23.104.0.1:60192 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:18:02.697 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56028 10 6452 1 2025-09-13 20:18:47.370 00:00:10.322 TCP 23.104.0.1:55044 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:19:02.925 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:36076 10 6452 1 2025-09-13 20:19:47.735 00:00:10.504 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:20:03.127 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58986 10 6452 1 2025-09-13 20:20:48.282 00:00:10.362 TCP 23.104.0.1:44950 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:21:03.305 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48628 10 6452 1 2025-09-13 20:21:48.681 00:00:10.363 TCP 23.104.0.1:55262 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:22:03.520 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60960 10 6452 1 2025-09-13 20:22:42.294 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:22:42.275 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:22:49.102 00:00:10.365 TCP 23.104.0.1:49568 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:23:03.732 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60518 10 6452 1 2025-09-13 20:18:28.043 00:06:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:23:49.505 00:00:10.381 TCP 23.104.0.1:48606 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:24:03.948 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:45410 10 6452 1 2025-09-13 20:19:28.045 00:06:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:24:49.934 00:00:10.382 TCP 23.104.0.1:47940 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:25:04.184 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60382 10 6452 1 2025-09-13 20:25:50.356 00:00:10.367 TCP 23.104.0.1:36752 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:26:04.358 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-09-13 20:26:50.761 00:00:10.379 TCP 23.104.0.1:44458 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:27:04.569 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58592 10 6452 1 2025-09-13 20:27:42.599 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:27:42.370 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:27:51.179 00:00:10.363 TCP 23.104.0.1:49956 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:28:04.745 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52510 10 6452 1 2025-09-13 20:28:51.579 00:00:10.362 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:29:04.955 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48868 10 6452 1 2025-09-13 20:29:51.979 00:00:10.321 TCP 23.104.0.1:55374 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:30:05.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-09-13 20:25:28.043 00:06:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:30:52.339 00:00:10.366 TCP 23.104.0.1:58372 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:31:05.388 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41076 10 6452 1 2025-09-13 20:26:28.047 00:06:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:31:52.747 00:00:10.360 TCP 23.104.0.1:48780 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:32:05.557 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51198 10 6452 1 2025-09-13 20:32:42.336 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:32:42.624 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:32:53.147 00:00:10.366 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:33:05.776 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55526 10 6452 1 2025-09-13 20:33:53.554 00:00:10.363 TCP 23.104.0.1:34002 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:34:05.991 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47328 10 6452 1 2025-09-13 20:34:53.954 00:00:10.368 TCP 23.104.0.1:39586 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:35:06.221 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-09-13 20:35:54.363 00:00:10.362 TCP 23.104.0.1:54240 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:36:06.437 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35974 10 6452 1 2025-09-13 20:36:54.762 00:00:10.343 TCP 23.104.0.1:46236 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:37:06.613 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49092 10 6452 1 2025-09-13 20:32:28.045 00:06:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:37:42.588 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:37:42.547 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:37:55.146 00:00:10.369 TCP 23.104.0.1:40286 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:38:06.795 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53052 10 6452 1 2025-09-13 20:33:28.048 00:06:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:38:55.552 00:00:10.363 TCP 23.104.0.1:37072 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:39:07.010 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35836 10 6452 1 2025-09-13 20:39:55.955 00:00:10.374 TCP 23.104.0.1:35708 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:40:07.189 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35758 10 6452 1 2025-09-13 20:40:56.365 00:00:10.361 TCP 23.104.0.1:51060 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:41:07.424 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52098 10 6452 1 2025-09-13 20:41:56.762 00:00:10.374 TCP 23.104.0.1:50278 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:42:07.637 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58884 10 6452 1 2025-09-13 20:42:42.782 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:42:42.642 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:42:57.178 00:00:10.374 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:43:07.847 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52718 10 6452 1 2025-09-13 20:43:57.580 00:00:10.346 TCP 23.104.0.1:50988 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:44:08.085 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40348 10 6452 1 2025-09-13 20:39:28.046 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:44:57.973 00:00:10.333 TCP 23.104.0.1:38054 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:45:08.299 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42466 10 6452 1 2025-09-13 20:40:28.049 00:06:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:45:58.343 00:00:10.365 TCP 23.104.0.1:36790 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:46:08.516 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-09-13 20:46:58.749 00:00:10.371 TCP 23.104.0.1:48284 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:47:08.728 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50392 10 6452 1 2025-09-13 20:47:42.608 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:47:42.699 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:47:59.163 00:00:10.359 TCP 23.104.0.1:40302 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:48:08.940 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:37720 10 6452 1 2025-09-13 20:48:59.566 00:00:11.051 TCP 23.104.0.1:48774 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:49:09.192 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55802 10 6452 1 2025-09-13 20:50:00.656 00:00:10.368 TCP 23.104.0.1:49864 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:50:09.364 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60204 10 6452 1 2025-09-13 20:51:01.088 00:00:10.364 TCP 23.104.0.1:60322 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:51:09.577 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40110 10 6452 1 2025-09-13 20:46:28.047 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:52:01.491 00:00:10.368 TCP 23.104.0.1:55802 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:52:09.791 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34392 10 6452 1 2025-09-13 20:47:28.050 00:06:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:52:42.569 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:52:42.800 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:53:01.902 00:00:10.380 TCP 23.104.0.1:55878 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:53:10.002 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41454 10 6452 1 2025-09-13 20:54:02.309 00:00:10.331 TCP 23.104.0.1:53720 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:54:10.218 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34988 10 6452 1 2025-09-13 20:55:02.678 00:00:10.370 TCP 23.104.0.1:58650 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:55:10.425 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50852 10 6452 1 2025-09-13 20:56:03.116 00:00:10.332 TCP 23.104.0.1:53346 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:56:10.641 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46798 10 6452 1 2025-09-13 20:57:03.494 00:00:10.409 TCP 23.104.0.1:53652 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:57:10.854 00:00:10.647 TCP 1.101.0.1:3000 -> 22.102.0.1:55988 10 6452 1 2025-09-13 20:57:42.701 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:57:42.868 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:58:03.942 00:00:10.375 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:58:11.537 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39774 10 6452 1 2025-09-13 20:53:28.048 00:06:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 Summary: total flows: 160, total bytes: 496822, total packets: 1561, avg bps: 1068, avg pps: 0, avg bpp: 318 Time window: 2025-09-13 19:57:28 - 2025-09-13 20:59:28 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0029s User: 0.0020s Wall: 0.0027s flows/second: 58630.8 Runtime: 0.0027s