Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 08:58:57.092 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45438 10 6452 1 2025-09-14 08:59:05.266 00:00:10.329 TCP 23.104.0.1:40212 -> 1.101.0.1:3000 11 1507 1 2025-09-14 08:59:57.309 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60356 10 6452 1 2025-09-14 09:00:05.637 00:00:10.370 TCP 23.104.0.1:57498 -> 1.101.0.1:3000 11 1507 1 2025-09-14 08:56:28.243 00:05:00.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 09:00:57.519 00:00:10.775 TCP 1.101.0.1:3000 -> 22.102.0.1:45344 10 6452 1 2025-09-14 09:01:06.063 00:00:10.366 TCP 23.104.0.1:60954 -> 1.101.0.1:3000 11 1507 1 2025-09-14 08:57:28.246 00:05:00.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 09:01:58.328 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50984 10 6452 1 2025-09-14 09:02:06.467 00:00:10.364 TCP 23.104.0.1:44106 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:02:57.576 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 09:02:57.422 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 09:02:58.536 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44684 10 6452 1 2025-09-14 09:03:06.867 00:00:10.368 TCP 23.104.0.1:36582 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:03:58.708 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37282 10 6452 1 2025-09-14 09:04:07.274 00:00:10.364 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:04:58.921 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45526 10 6452 1 2025-09-14 09:05:07.688 00:00:10.345 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:05:59.133 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54238 10 6452 1 2025-09-14 09:06:08.101 00:00:10.365 TCP 23.104.0.1:34788 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:02:28.244 00:05:00.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 09:06:59.346 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40744 10 6452 1 2025-09-14 09:07:08.505 00:00:10.365 TCP 23.104.0.1:52336 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:03:28.248 00:05:00.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 09:07:57.519 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 09:07:57.787 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 09:07:59.518 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56956 10 6452 1 2025-09-14 09:08:08.909 00:00:10.371 TCP 23.104.0.1:45584 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:08:59.731 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44926 10 6452 1 2025-09-14 09:09:09.310 00:00:10.362 TCP 23.104.0.1:46814 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:09:59.948 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:37748 10 6452 1 2025-09-14 09:10:09.707 00:00:10.324 TCP 23.104.0.1:58136 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:11:00.130 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33076 10 6452 1 2025-09-14 09:11:10.090 00:00:10.365 TCP 23.104.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:12:00.340 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49534 10 6452 1 2025-09-14 09:12:10.490 00:00:10.322 TCP 23.104.0.1:35020 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:08:28.247 00:05:00.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 09:12:57.863 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 09:12:57.542 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 09:13:00.551 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41932 10 6452 1 2025-09-14 09:13:10.857 00:00:10.373 TCP 23.104.0.1:54548 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:09:28.251 00:05:00.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 09:14:00.766 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49430 10 6452 1 2025-09-14 09:14:11.270 00:00:10.364 TCP 23.104.0.1:53230 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:15:00.983 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:44002 10 6452 1 2025-09-14 09:15:11.677 00:00:10.323 TCP 23.104.0.1:55566 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:16:01.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55302 10 6452 1 2025-09-14 09:16:12.046 00:00:10.366 TCP 23.104.0.1:45544 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:17:01.432 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59350 10 6452 1 2025-09-14 09:17:12.453 00:00:10.358 TCP 23.104.0.1:52994 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:17:58.161 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 09:17:57.972 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 09:18:01.653 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58150 10 6452 1 2025-09-14 09:18:12.849 00:00:10.975 TCP 23.104.0.1:38406 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:14:28.250 00:05:00.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 09:19:01.883 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-09-14 09:19:13.864 00:00:10.328 TCP 23.104.0.1:59346 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:15:28.253 00:05:00.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 09:20:02.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52728 10 6452 1 2025-09-14 09:20:14.228 00:00:10.367 TCP 23.104.0.1:52012 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:21:02.326 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40698 10 6452 1 2025-09-14 09:21:14.630 00:00:10.366 TCP 23.104.0.1:37518 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:22:02.504 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50970 10 6452 1 2025-09-14 09:22:15.047 00:00:10.367 TCP 23.104.0.1:53410 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:22:57.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 09:22:57.845 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 09:23:02.701 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50112 10 6452 1 2025-09-14 09:23:15.453 00:00:10.371 TCP 23.104.0.1:60550 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:24:02.917 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47680 10 6452 1 2025-09-14 09:24:15.857 00:00:10.375 TCP 23.104.0.1:40090 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:20:28.253 00:05:00.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 09:25:03.130 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36048 10 6452 1 2025-09-14 09:25:16.272 00:00:10.511 TCP 23.104.0.1:54974 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:21:28.254 00:05:00.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 09:26:03.358 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48114 10 6452 1 2025-09-14 09:26:16.816 00:00:10.365 TCP 23.104.0.1:52924 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:27:03.570 00:00:10.343 TCP 1.101.0.1:3000 -> 22.102.0.1:37310 10 6452 1 2025-09-14 09:27:17.217 00:00:10.370 TCP 23.104.0.1:50944 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:27:58.145 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 09:27:58.551 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 09:28:03.950 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:45202 10 6452 1 2025-09-14 09:28:17.623 00:00:10.369 TCP 23.104.0.1:46970 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:29:04.137 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39442 10 6452 1 2025-09-14 09:29:18.048 00:00:10.365 TCP 23.104.0.1:38154 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:30:04.308 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58268 10 6452 1 2025-09-14 09:30:18.459 00:00:10.365 TCP 23.104.0.1:33842 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:26:28.252 00:05:00.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 09:31:04.522 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51742 10 6452 1 2025-09-14 09:31:18.862 00:00:10.375 TCP 23.104.0.1:42008 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:27:28.255 00:05:00.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 09:32:04.740 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53682 10 6452 1 2025-09-14 09:32:19.277 00:00:10.369 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:32:58.278 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 09:32:58.043 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 09:33:04.955 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37486 10 6452 1 2025-09-14 09:33:19.678 00:00:10.331 TCP 23.104.0.1:59558 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:34:05.191 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60872 10 6452 1 2025-09-14 09:34:20.059 00:00:10.372 TCP 23.104.0.1:53080 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:35:05.402 00:00:10.573 TCP 1.101.0.1:3000 -> 22.102.0.1:60928 10 6452 1 2025-09-14 09:35:20.468 00:00:10.367 TCP 23.104.0.1:41918 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:36:06.027 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35728 10 6452 1 2025-09-14 09:32:28.255 00:05:00.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 09:36:20.872 00:00:10.364 TCP 23.104.0.1:34796 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:37:06.243 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47588 10 6452 1 2025-09-14 09:37:21.274 00:00:10.328 TCP 23.104.0.1:38304 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:33:28.256 00:05:00.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 09:37:58.291 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 09:37:58.052 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 09:38:06.456 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55658 10 6452 1 2025-09-14 09:38:21.643 00:00:10.375 TCP 23.104.0.1:34900 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:39:06.673 00:00:10.308 TCP 1.101.0.1:3000 -> 22.102.0.1:54784 10 6452 1 2025-09-14 09:39:22.061 00:00:10.367 TCP 23.104.0.1:39888 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:40:07.028 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57808 10 6452 1 2025-09-14 09:40:22.469 00:00:10.367 TCP 23.104.0.1:58288 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:41:07.200 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43844 10 6452 1 2025-09-14 09:41:22.872 00:00:10.326 TCP 23.104.0.1:48696 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:42:07.416 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46414 10 6452 1 2025-09-14 09:38:28.255 00:05:00.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 09:42:23.236 00:00:10.365 TCP 23.104.0.1:49302 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:42:58.733 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 09:42:58.392 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 09:43:07.637 00:00:10.818 TCP 1.101.0.1:3000 -> 22.102.0.1:42470 10 6452 1 2025-09-14 09:39:28.259 00:05:00.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 09:43:23.639 00:00:10.362 TCP 23.104.0.1:45018 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:44:08.496 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57050 10 6452 1 2025-09-14 09:44:24.038 00:00:10.330 TCP 23.104.0.1:39544 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:45:08.713 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56142 10 6452 1 2025-09-14 09:45:24.404 00:00:10.363 TCP 23.104.0.1:36456 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:46:08.928 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:34744 10 6452 1 2025-09-14 09:46:24.805 00:00:10.696 TCP 23.104.0.1:60698 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:47:09.120 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48742 10 6452 1 2025-09-14 09:47:25.539 00:00:10.367 TCP 23.104.0.1:60304 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:47:58.472 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 09:47:58.477 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 09:48:09.333 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43258 10 6452 1 2025-09-14 09:44:28.256 00:05:00.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 09:48:25.942 00:00:10.441 TCP 23.104.0.1:36946 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:49:09.521 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56584 10 6452 1 2025-09-14 09:45:28.260 00:05:00.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 09:49:26.427 00:00:10.370 TCP 23.104.0.1:42112 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:50:09.737 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52288 10 6452 1 2025-09-14 09:50:26.838 00:00:10.392 TCP 23.104.0.1:34988 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:51:09.960 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56922 10 6452 1 2025-09-14 09:51:27.268 00:00:10.937 TCP 23.104.0.1:35388 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:52:10.186 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54500 10 6452 1 2025-09-14 09:52:28.244 00:00:10.323 TCP 23.104.0.1:40006 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:52:58.636 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 09:52:58.255 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 09:53:10.407 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34604 10 6452 1 2025-09-14 09:53:28.604 00:00:10.365 TCP 23.104.0.1:58110 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:54:10.617 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56562 10 6452 1 2025-09-14 09:50:28.257 00:05:00.949 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 09:54:29.007 00:00:10.362 TCP 23.104.0.1:35940 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:55:10.790 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40980 10 6452 1 2025-09-14 09:51:28.263 00:05:00.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 09:55:29.407 00:00:10.364 TCP 23.104.0.1:48138 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:56:11.014 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51102 10 6452 1 2025-09-14 09:56:29.807 00:00:10.364 TCP 23.104.0.1:37266 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:57:11.227 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40024 10 6452 1 2025-09-14 09:57:30.209 00:00:10.322 TCP 23.104.0.1:59618 -> 1.101.0.1:3000 11 1507 1 2025-09-14 09:57:58.706 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 09:57:58.784 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 09:58:11.435 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57842 10 6452 1 2025-09-14 09:58:30.567 00:00:10.364 TCP 23.104.0.1:50696 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1068, avg pps: 0, avg bpp: 317 Time window: 2025-09-14 08:56:28 - 2025-09-14 09:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0018s Wall: 0.0029s flows/second: 56033.4 Runtime: 0.0029s