Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 16:59:27.730 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44692 10 6452 1 2025-09-14 16:59:37.371 00:00:10.322 TCP 23.104.0.1:42428 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:56:28.398 00:05:00.935 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 17:00:27.947 00:00:10.383 TCP 1.101.0.1:3000 -> 22.102.0.1:44554 12 6556 1 2025-09-14 17:00:37.734 00:00:10.364 TCP 23.104.0.1:46876 -> 1.101.0.1:3000 11 1507 1 2025-09-14 16:57:28.401 00:05:00.931 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 17:01:28.376 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37516 10 6452 1 2025-09-14 17:01:38.137 00:00:10.324 TCP 23.104.0.1:43060 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:02:28.592 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44356 10 6452 1 2025-09-14 17:02:38.500 00:00:10.363 TCP 23.104.0.1:55556 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:03:07.136 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 17:03:07.269 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 17:03:28.807 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46388 10 6452 1 2025-09-14 17:03:38.903 00:00:12.471 TCP 23.104.0.1:51624 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:04:28.986 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42524 10 6452 1 2025-09-14 17:04:41.432 00:00:10.366 TCP 23.104.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:05:29.207 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33780 10 6452 1 2025-09-14 17:05:41.832 00:00:10.373 TCP 23.104.0.1:39300 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:02:28.400 00:05:00.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 17:06:29.425 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36860 10 6452 1 2025-09-14 17:06:42.243 00:00:10.368 TCP 23.104.0.1:54768 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:03:28.403 00:05:00.932 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 17:07:29.597 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32854 10 6452 1 2025-09-14 17:07:42.651 00:00:10.363 TCP 23.104.0.1:57240 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:08:07.085 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 17:08:07.162 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 17:08:29.815 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40768 10 6452 1 2025-09-14 17:08:43.088 00:00:10.331 TCP 23.104.0.1:41550 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:09:29.986 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39152 10 6452 1 2025-09-14 17:09:43.448 00:00:10.371 TCP 23.104.0.1:40264 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:10:30.217 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44996 10 6452 1 2025-09-14 17:10:43.855 00:00:10.379 TCP 23.104.0.1:37676 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:11:30.431 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38212 10 6452 1 2025-09-14 17:11:44.270 00:00:10.363 TCP 23.104.0.1:53846 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:08:28.401 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 17:12:30.643 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49090 10 6452 1 2025-09-14 17:12:44.669 00:00:10.365 TCP 23.104.0.1:44284 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:13:07.442 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 17:13:07.354 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 17:09:28.404 00:05:00.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 17:13:30.859 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34068 10 6452 1 2025-09-14 17:13:45.104 00:00:10.360 TCP 23.104.0.1:46182 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:14:31.090 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34282 10 6452 1 2025-09-14 17:14:45.501 00:00:10.321 TCP 23.104.0.1:50234 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:15:31.319 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40262 10 6452 1 2025-09-14 17:15:45.860 00:00:10.367 TCP 23.104.0.1:50950 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:16:31.535 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33640 10 6452 1 2025-09-14 17:16:46.268 00:00:10.361 TCP 23.104.0.1:51806 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:17:31.715 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40666 10 6452 1 2025-09-14 17:17:46.670 00:00:10.320 TCP 23.104.0.1:40534 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:18:07.635 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 17:18:07.528 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 17:14:28.402 00:05:00.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 17:18:31.946 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58324 10 6452 1 2025-09-14 17:18:47.035 00:00:10.363 TCP 23.104.0.1:51026 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:15:28.405 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 17:19:32.182 00:00:10.595 TCP 1.101.0.1:3000 -> 22.102.0.1:59782 10 6452 1 2025-09-14 17:19:47.439 00:00:10.372 TCP 23.104.0.1:59318 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:20:32.820 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43814 10 6452 1 2025-09-14 17:20:47.844 00:00:10.381 TCP 23.104.0.1:36900 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:21:33.035 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37218 10 6452 1 2025-09-14 17:21:48.267 00:00:10.360 TCP 23.104.0.1:39698 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:22:33.256 00:00:17.115 TCP 1.101.0.1:3000 -> 22.102.0.1:35980 10 6452 1 2025-09-14 17:22:48.667 00:00:10.663 TCP 23.104.0.1:40868 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:23:07.644 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 17:23:07.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 17:23:40.421 00:00:10.879 TCP 1.101.0.1:3000 -> 22.102.0.1:46510 10 6452 1 2025-09-14 17:23:49.363 00:00:10.327 TCP 23.104.0.1:45282 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:20:28.404 00:05:00.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 17:24:41.339 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34590 10 6452 1 2025-09-14 17:24:49.729 00:00:10.370 TCP 23.104.0.1:52284 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:21:28.407 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 17:25:41.550 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51982 10 6452 1 2025-09-14 17:25:50.138 00:00:10.362 TCP 23.104.0.1:36472 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:26:41.765 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41218 10 6452 1 2025-09-14 17:26:50.547 00:00:10.324 TCP 23.104.0.1:40938 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:27:41.983 00:00:10.352 TCP 1.101.0.1:3000 -> 22.102.0.1:55320 10 6452 1 2025-09-14 17:27:50.907 00:00:10.366 TCP 23.104.0.1:36004 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:28:07.817 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 17:28:07.741 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 17:28:42.377 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:47874 10 6452 1 2025-09-14 17:28:51.313 00:00:10.372 TCP 23.104.0.1:52026 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:29:42.559 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40182 10 6452 1 2025-09-14 17:29:51.722 00:00:10.376 TCP 23.104.0.1:34560 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:26:28.404 00:05:00.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 17:30:42.772 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58698 10 6452 1 2025-09-14 17:30:52.143 00:00:10.364 TCP 23.104.0.1:34236 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:27:28.407 00:05:00.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 17:31:42.983 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:43248 10 6452 1 2025-09-14 17:31:52.553 00:00:10.328 TCP 23.104.0.1:41256 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:32:43.178 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51504 10 6452 1 2025-09-14 17:32:52.919 00:00:10.381 TCP 23.104.0.1:48448 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:33:07.619 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 17:33:07.789 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 17:33:43.356 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60444 10 6452 1 2025-09-14 17:33:53.344 00:00:10.367 TCP 23.104.0.1:55974 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:34:43.569 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35904 10 6452 1 2025-09-14 17:34:53.746 00:00:10.393 TCP 23.104.0.1:46800 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:35:43.748 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47494 10 6452 1 2025-09-14 17:35:54.182 00:00:10.362 TCP 23.104.0.1:57642 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:32:28.405 00:05:00.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 17:36:43.958 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39560 12 6556 1 2025-09-14 17:36:54.582 00:00:10.373 TCP 23.104.0.1:41054 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:33:28.409 00:05:00.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 17:37:44.192 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33266 10 6452 1 2025-09-14 17:37:54.994 00:00:10.369 TCP 23.104.0.1:33756 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:38:07.944 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 17:38:08.224 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 17:38:44.402 00:00:10.363 TCP 1.101.0.1:3000 -> 22.102.0.1:54852 10 6452 1 2025-09-14 17:38:55.396 00:00:10.367 TCP 23.104.0.1:43622 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:39:44.808 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53242 10 6452 1 2025-09-14 17:39:55.799 00:00:10.361 TCP 23.104.0.1:51520 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:40:45.038 00:00:10.310 TCP 1.101.0.1:3000 -> 22.102.0.1:39150 10 6452 1 2025-09-14 17:40:56.197 00:00:10.320 TCP 23.104.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:41:45.388 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:58942 10 6452 1 2025-09-14 17:41:56.552 00:00:10.360 TCP 23.104.0.1:42074 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:38:28.407 00:05:00.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 17:42:45.650 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55196 10 6452 1 2025-09-14 17:43:07.770 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 17:42:56.952 00:00:10.365 TCP 23.104.0.1:39592 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:43:07.805 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 17:39:28.409 00:05:00.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 17:43:45.868 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42560 10 6452 1 2025-09-14 17:43:57.359 00:00:11.039 TCP 23.104.0.1:56816 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:44:46.090 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50424 10 6452 1 2025-09-14 17:44:58.440 00:00:10.363 TCP 23.104.0.1:37036 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:45:46.303 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45818 10 6452 1 2025-09-14 17:45:58.839 00:00:10.389 TCP 23.104.0.1:33742 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:46:46.517 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:43474 10 6452 1 2025-09-14 17:46:59.272 00:00:10.368 TCP 23.104.0.1:36476 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:47:46.707 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35194 10 6452 1 2025-09-14 17:48:08.162 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 17:48:08.246 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 17:47:59.681 00:00:10.378 TCP 23.104.0.1:59412 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:44:28.409 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 17:48:46.931 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42436 10 6452 1 2025-09-14 17:49:00.109 00:00:10.368 TCP 23.104.0.1:40200 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:45:28.412 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 17:49:47.165 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51722 12 10367 1 2025-09-14 17:50:00.515 00:00:10.444 TCP 23.104.0.1:49784 -> 1.101.0.1:3000 15 1926 1 2025-09-14 17:50:47.402 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50962 10 6452 1 2025-09-14 17:51:01.003 00:00:10.362 TCP 23.104.0.1:42626 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:51:47.620 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43062 10 6452 1 2025-09-14 17:52:01.401 00:00:10.372 TCP 23.104.0.1:52988 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:52:47.830 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41644 10 6452 1 2025-09-14 17:53:08.364 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 17:53:08.098 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 17:53:01.808 00:00:10.366 TCP 23.104.0.1:57628 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:53:48.070 00:00:10.674 TCP 1.101.0.1:3000 -> 22.102.0.1:36104 10 6452 1 2025-09-14 17:54:02.211 00:00:10.365 TCP 23.104.0.1:55350 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:50:28.410 00:05:00.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 17:54:48.784 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35878 10 6452 1 2025-09-14 17:55:02.611 00:00:10.370 TCP 23.104.0.1:44264 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:51:28.412 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 17:55:48.957 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50970 10 6452 1 2025-09-14 17:56:03.014 00:00:10.360 TCP 23.104.0.1:52800 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:56:49.134 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36714 10 6452 1 2025-09-14 17:57:03.412 00:00:10.979 TCP 23.104.0.1:36964 -> 1.101.0.1:3000 11 1507 1 2025-09-14 17:57:49.351 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37090 10 6452 1 2025-09-14 17:58:08.273 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 17:58:08.398 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 17:58:04.430 00:00:10.366 TCP 23.104.0.1:51802 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494931, total packets: 1561, avg bps: 1068, avg pps: 0, avg bpp: 317 Time window: 2025-09-14 16:56:28 - 2025-09-14 17:58:14 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0021s User: 0.0031s Wall: 0.0021s flows/second: 76560.8 Runtime: 0.0021s