Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 15:59:00.045 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:35142 10 6452 1 2025-09-14 15:59:08.338 00:00:10.367 TCP 23.104.0.1:51626 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:00:00.279 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:37920 10 6452 1 2025-09-14 16:00:08.750 00:00:10.362 TCP 23.104.0.1:57458 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:56:28.380 00:05:00.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 16:01:00.447 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57938 10 6452 1 2025-09-14 16:01:09.146 00:00:10.372 TCP 23.104.0.1:44670 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:57:28.383 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 16:02:00.663 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38454 10 6452 1 2025-09-14 16:02:09.563 00:00:10.321 TCP 23.104.0.1:33738 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:03:06.309 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 16:03:05.836 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 16:03:00.836 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58750 10 6452 1 2025-09-14 16:03:09.922 00:00:10.453 TCP 23.104.0.1:59360 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:04:01.085 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44226 10 6452 1 2025-09-14 16:04:10.416 00:00:10.368 TCP 23.104.0.1:56520 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:05:01.296 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57072 10 6452 1 2025-09-14 16:05:10.823 00:00:10.365 TCP 23.104.0.1:46890 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:06:01.518 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41770 10 6452 1 2025-09-14 16:06:11.227 00:00:10.363 TCP 23.104.0.1:50064 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:02:28.380 00:05:00.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 16:07:01.745 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49434 10 6452 1 2025-09-14 16:07:11.630 00:00:10.365 TCP 23.104.0.1:59298 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:03:28.383 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 16:08:06.148 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 16:08:06.269 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 16:08:01.918 00:00:10.364 TCP 1.101.0.1:3000 -> 22.102.0.1:54394 10 6452 1 2025-09-14 16:08:12.032 00:00:10.369 TCP 23.104.0.1:52878 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:09:02.323 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49038 10 6452 1 2025-09-14 16:09:12.444 00:00:10.325 TCP 23.104.0.1:59484 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:10:02.547 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33556 10 6452 1 2025-09-14 16:10:12.807 00:00:10.336 TCP 23.104.0.1:46290 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:11:02.758 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34710 10 6452 1 2025-09-14 16:11:13.186 00:00:10.367 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:12:02.978 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43260 10 6452 1 2025-09-14 16:12:13.594 00:00:10.367 TCP 23.104.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:08:28.383 00:05:00.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 16:13:06.245 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 16:13:06.308 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 16:13:14.000 00:00:13.902 TCP 23.104.0.1:38104 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:09:28.388 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 16:13:03.223 00:00:24.518 TCP 1.101.0.1:3000 -> 22.102.0.1:46550 10 6452 1 2025-09-14 16:14:17.954 00:00:10.343 TCP 23.104.0.1:51500 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:14:17.781 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56882 10 6452 1 2025-09-14 16:15:18.337 00:00:10.361 TCP 23.104.0.1:59030 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:15:17.997 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:36714 10 6452 1 2025-09-14 16:16:18.178 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42194 10 6452 1 2025-09-14 16:16:18.736 00:00:10.368 TCP 23.104.0.1:60328 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:17:18.402 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47902 10 6452 1 2025-09-14 16:17:19.143 00:00:10.363 TCP 23.104.0.1:33906 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:18:05.990 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 16:18:06.320 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 16:18:19.544 00:00:10.370 TCP 23.104.0.1:50854 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:18:18.615 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42348 10 6452 1 2025-09-14 16:14:28.385 00:05:00.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 16:19:18.833 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-09-14 16:19:19.957 00:00:10.370 TCP 23.104.0.1:60488 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:15:28.388 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 16:20:20.361 00:00:10.377 TCP 23.104.0.1:43622 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:20:19.076 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60224 10 6452 1 2025-09-14 16:21:19.289 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:54190 10 6452 1 2025-09-14 16:21:20.773 00:00:10.369 TCP 23.104.0.1:34402 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:22:19.455 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38034 10 6452 1 2025-09-14 16:22:21.178 00:00:10.325 TCP 23.104.0.1:51572 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:23:06.701 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 16:23:06.554 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 16:23:21.544 00:00:10.322 TCP 23.104.0.1:48810 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:23:19.631 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38098 10 6452 1 2025-09-14 16:20:28.389 00:05:00.935 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 16:24:19.800 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50800 10 6452 1 2025-09-14 16:24:21.902 00:00:10.369 TCP 23.104.0.1:47032 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:25:19.968 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:53572 10 6452 1 2025-09-14 16:21:28.390 00:05:00.931 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 16:25:22.314 00:00:10.870 TCP 23.104.0.1:37616 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:26:20.202 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43128 10 6452 1 2025-09-14 16:26:23.225 00:00:10.363 TCP 23.104.0.1:55682 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:27:20.411 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56120 10 6452 1 2025-09-14 16:27:23.628 00:00:10.371 TCP 23.104.0.1:47032 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:28:06.446 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 16:28:06.504 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 16:28:20.625 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39690 10 6452 1 2025-09-14 16:28:24.034 00:00:10.364 TCP 23.104.0.1:45158 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:29:20.837 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51340 10 6452 1 2025-09-14 16:29:24.436 00:00:10.365 TCP 23.104.0.1:35306 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:30:21.023 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39740 10 6452 1 2025-09-14 16:26:28.389 00:05:00.936 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 16:30:24.837 00:00:10.381 TCP 23.104.0.1:58682 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:27:28.391 00:05:00.931 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 16:31:21.250 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40904 10 6452 1 2025-09-14 16:31:25.254 00:00:10.368 TCP 23.104.0.1:54096 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:32:21.463 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44892 10 6452 1 2025-09-14 16:32:25.661 00:00:10.370 TCP 23.104.0.1:57902 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:33:06.550 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 16:33:06.665 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 16:33:21.637 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34782 10 6452 1 2025-09-14 16:33:26.100 00:00:10.370 TCP 23.104.0.1:39768 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:34:26.508 00:00:10.366 TCP 23.104.0.1:41594 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:34:21.865 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60278 10 6452 1 2025-09-14 16:35:22.090 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43730 10 6452 1 2025-09-14 16:35:26.917 00:00:10.385 TCP 23.104.0.1:57946 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:32:28.390 00:05:00.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 16:36:22.310 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59680 10 6452 1 2025-09-14 16:36:27.337 00:00:10.923 TCP 23.104.0.1:45756 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:33:28.393 00:05:00.931 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 16:37:22.525 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39082 10 6452 1 2025-09-14 16:37:28.296 00:00:10.367 TCP 23.104.0.1:51598 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:38:06.819 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 16:38:06.587 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 16:38:22.752 00:00:10.326 TCP 1.101.0.1:3000 -> 22.102.0.1:34084 10 6452 1 2025-09-14 16:38:28.704 00:00:10.328 TCP 23.104.0.1:55992 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:39:23.116 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52156 10 6452 1 2025-09-14 16:39:29.107 00:00:10.370 TCP 23.104.0.1:45704 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:40:23.331 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54264 10 6452 1 2025-09-14 16:40:29.524 00:00:10.366 TCP 23.104.0.1:44968 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:41:23.505 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38112 10 6452 1 2025-09-14 16:41:29.927 00:00:10.394 TCP 23.104.0.1:44324 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:38:28.392 00:05:00.936 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 16:42:23.717 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55804 10 6452 1 2025-09-14 16:42:30.356 00:00:10.322 TCP 23.104.0.1:48650 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:43:06.753 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 16:43:06.623 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 16:39:28.395 00:05:00.932 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 16:43:23.935 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50794 10 6452 1 2025-09-14 16:43:30.716 00:00:10.379 TCP 23.104.0.1:36376 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:44:24.169 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36596 10 6452 1 2025-09-14 16:44:31.134 00:00:10.369 TCP 23.104.0.1:41908 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:45:24.382 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48544 10 6452 1 2025-09-14 16:45:31.537 00:00:10.369 TCP 23.104.0.1:39482 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:46:24.593 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56944 10 6452 1 2025-09-14 16:46:31.945 00:00:10.598 TCP 23.104.0.1:46702 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:47:24.801 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44938 10 6452 1 2025-09-14 16:47:32.586 00:00:10.391 TCP 23.104.0.1:50390 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:48:06.725 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 16:48:07.003 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 16:44:28.394 00:05:00.936 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 16:48:25.031 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42304 10 6452 1 2025-09-14 16:48:33.016 00:00:10.361 TCP 23.104.0.1:57080 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:45:28.398 00:05:00.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 16:49:25.239 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:53356 12 10365 1 2025-09-14 16:49:33.414 00:00:10.443 TCP 23.104.0.1:43058 -> 1.101.0.1:3000 15 1926 1 2025-09-14 16:50:25.446 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35330 10 6452 1 2025-09-14 16:50:33.899 00:00:10.372 TCP 23.104.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:51:25.622 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41484 10 6452 1 2025-09-14 16:51:34.309 00:00:10.325 TCP 23.104.0.1:60580 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:52:25.833 00:00:10.568 TCP 1.101.0.1:3000 -> 22.102.0.1:52308 10 6452 1 2025-09-14 16:52:34.671 00:00:10.323 TCP 23.104.0.1:37200 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:53:06.937 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 16:53:07.071 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 16:53:26.439 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58420 10 6452 1 2025-09-14 16:53:35.034 00:00:10.368 TCP 23.104.0.1:57500 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:50:28.397 00:05:00.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 16:54:26.653 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46460 10 6452 1 2025-09-14 16:54:35.437 00:00:10.325 TCP 23.104.0.1:45764 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:51:28.400 00:05:00.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 16:55:26.870 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:57218 10 6452 1 2025-09-14 16:55:35.798 00:00:10.363 TCP 23.104.0.1:48454 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:56:27.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59916 10 6452 1 2025-09-14 16:56:36.199 00:00:10.320 TCP 23.104.0.1:50364 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:57:27.302 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57354 10 6452 1 2025-09-14 16:57:36.559 00:00:10.363 TCP 23.104.0.1:54628 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:58:06.957 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 16:58:06.776 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 16:58:27.513 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58742 10 6452 1 2025-09-14 16:58:36.961 00:00:10.362 TCP 23.104.0.1:53190 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502680, total packets: 1578, avg bps: 1075, avg pps: 0, avg bpp: 318 Time window: 2025-09-14 15:56:28 - 2025-09-14 16:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0011s User: 0.0034s Wall: 0.0027s flows/second: 59986.6 Runtime: 0.0028s