Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 02:59:01.662 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59328 10 6452 1 2025-09-15 02:59:12.456 00:00:10.327 TCP 23.104.0.1:45320 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:00:01.838 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36054 10 6452 1 2025-09-15 03:00:12.823 00:00:10.366 TCP 23.104.0.1:50732 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:56:28.561 00:05:00.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 03:01:02.013 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39344 10 6452 1 2025-09-15 03:01:13.231 00:00:10.372 TCP 23.104.0.1:53716 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:57:28.564 00:05:00.985 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 03:02:02.227 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37810 10 6452 1 2025-09-15 03:02:13.640 00:00:10.374 TCP 23.104.0.1:44174 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:03:02.444 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33874 10 6452 1 2025-09-15 03:03:19.227 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 03:03:19.315 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 03:03:14.061 00:00:10.378 TCP 23.104.0.1:55528 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:04:02.661 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45596 10 6452 1 2025-09-15 03:04:14.479 00:00:10.364 TCP 23.104.0.1:49756 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:05:02.833 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56656 10 6452 1 2025-09-15 03:05:14.881 00:00:10.391 TCP 23.104.0.1:48972 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:06:03.007 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36942 10 6452 1 2025-09-15 03:06:15.315 00:00:10.366 TCP 23.104.0.1:52396 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:02:28.563 00:05:00.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 03:07:03.237 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55902 10 6452 1 2025-09-15 03:07:15.717 00:00:10.366 TCP 23.104.0.1:50274 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:03:28.567 00:05:00.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 03:08:03.444 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40506 10 6452 1 2025-09-15 03:08:19.280 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 03:08:19.444 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 03:08:16.123 00:00:10.361 TCP 23.104.0.1:54596 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:09:03.659 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37522 10 6452 1 2025-09-15 03:09:16.520 00:00:10.365 TCP 23.104.0.1:38130 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:10:03.871 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:40136 10 6452 1 2025-09-15 03:10:16.921 00:00:10.388 TCP 23.104.0.1:37546 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:11:04.110 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51406 10 6452 1 2025-09-15 03:11:17.359 00:00:10.344 TCP 23.104.0.1:36220 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:12:04.332 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57574 10 6452 1 2025-09-15 03:08:28.566 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 03:12:17.781 00:00:10.365 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:13:04.551 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51202 10 6452 1 2025-09-15 03:13:19.448 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 03:13:19.279 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 03:13:18.188 00:00:10.377 TCP 23.104.0.1:40576 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:09:28.569 00:05:00.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 03:14:04.763 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37988 10 6452 1 2025-09-15 03:14:18.601 00:00:10.330 TCP 23.104.0.1:59444 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:15:04.979 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59524 10 6452 1 2025-09-15 03:15:18.968 00:00:10.378 TCP 23.104.0.1:45376 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:16:05.210 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44394 10 6452 1 2025-09-15 03:16:19.379 00:00:10.371 TCP 23.104.0.1:51604 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:17:05.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35404 10 6452 1 2025-09-15 03:17:19.787 00:00:10.342 TCP 23.104.0.1:54782 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:18:05.640 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39442 10 6452 1 2025-09-15 03:18:19.441 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 03:18:19.567 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 03:18:20.169 00:00:10.367 TCP 23.104.0.1:47138 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:14:28.567 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 03:19:05.861 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40614 10 6452 1 2025-09-15 03:19:20.575 00:00:10.363 TCP 23.104.0.1:47546 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:15:28.570 00:05:00.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 03:20:06.088 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47662 10 6452 1 2025-09-15 03:20:20.978 00:00:10.368 TCP 23.104.0.1:37550 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:21:06.303 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52482 10 6452 1 2025-09-15 03:21:21.385 00:00:10.364 TCP 23.104.0.1:41858 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:22:06.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33590 10 6452 1 2025-09-15 03:22:21.793 00:00:10.368 TCP 23.104.0.1:51058 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:23:06.728 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50268 10 6452 1 2025-09-15 03:23:19.654 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 03:23:19.563 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 03:23:22.197 00:00:10.367 TCP 23.104.0.1:58406 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:24:06.949 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56156 10 6452 1 2025-09-15 03:20:28.569 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 03:24:22.601 00:00:10.377 TCP 23.104.0.1:34634 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:25:07.164 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58012 10 6452 1 2025-09-15 03:21:28.571 00:05:00.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 03:25:23.021 00:00:10.364 TCP 23.104.0.1:43168 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:26:07.381 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52966 10 6452 1 2025-09-15 03:26:23.426 00:00:10.383 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:27:07.596 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44432 10 6452 1 2025-09-15 03:27:23.852 00:00:10.381 TCP 23.104.0.1:56322 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:28:19.733 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 03:28:07.769 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43628 10 6452 1 2025-09-15 03:28:19.669 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 03:28:24.272 00:00:10.361 TCP 23.104.0.1:52066 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:29:07.985 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41022 10 6452 1 2025-09-15 03:29:24.672 00:00:10.367 TCP 23.104.0.1:54858 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:30:08.212 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39840 10 6452 1 2025-09-15 03:26:28.574 00:05:00.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 03:30:25.109 00:00:10.369 TCP 23.104.0.1:40320 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:31:08.383 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36078 10 6452 1 2025-09-15 03:27:28.575 00:05:00.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 03:31:25.519 00:00:10.361 TCP 23.104.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:32:08.597 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34040 10 6452 1 2025-09-15 03:32:25.914 00:00:10.365 TCP 23.104.0.1:54484 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:33:19.832 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 03:33:19.686 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 03:33:08.810 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56634 10 6452 1 2025-09-15 03:33:26.315 00:00:10.366 TCP 23.104.0.1:53632 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:34:09.029 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56100 10 6452 1 2025-09-15 03:34:26.716 00:00:10.370 TCP 23.104.0.1:42356 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:35:09.246 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47118 12 6556 1 2025-09-15 03:35:27.127 00:00:10.372 TCP 23.104.0.1:43344 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:36:09.484 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37512 10 6452 1 2025-09-15 03:32:28.573 00:05:00.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 03:36:27.538 00:00:10.364 TCP 23.104.0.1:51076 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:37:09.699 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38998 10 6452 1 2025-09-15 03:33:28.577 00:05:00.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 03:37:27.942 00:00:10.367 TCP 23.104.0.1:48078 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:38:09.875 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54442 10 6452 1 2025-09-15 03:38:19.925 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 03:38:19.894 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 03:38:28.345 00:00:10.365 TCP 23.104.0.1:45418 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:39:10.109 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37678 10 6452 1 2025-09-15 03:39:28.751 00:00:10.385 TCP 23.104.0.1:60158 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:40:10.291 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35208 10 6452 1 2025-09-15 03:40:29.175 00:00:10.370 TCP 23.104.0.1:59588 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:41:10.502 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39442 10 6452 1 2025-09-15 03:41:29.583 00:00:10.369 TCP 23.104.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:42:10.710 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47496 10 6452 1 2025-09-15 03:38:28.577 00:05:00.982 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 03:42:29.994 00:00:10.368 TCP 23.104.0.1:55376 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:43:20.259 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 03:43:10.926 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:46458 10 6452 1 2025-09-15 03:43:20.481 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 03:39:28.582 00:05:00.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 03:43:30.403 00:00:10.363 TCP 23.104.0.1:42340 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:44:11.171 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40032 10 6452 1 2025-09-15 03:44:30.805 00:00:10.368 TCP 23.104.0.1:38266 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:45:11.345 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51584 10 6452 1 2025-09-15 03:45:31.215 00:00:10.318 TCP 23.104.0.1:60764 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:46:11.558 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36532 10 6452 1 2025-09-15 03:46:31.577 00:00:10.363 TCP 23.104.0.1:46368 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:47:11.776 00:00:17.157 TCP 1.101.0.1:3000 -> 22.102.0.1:48412 10 6452 1 2025-09-15 03:47:31.980 00:00:10.372 TCP 23.104.0.1:41370 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:48:20.256 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 03:48:20.131 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 03:44:28.579 00:05:00.980 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 03:48:18.974 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:50822 13 6608 1 2025-09-15 03:48:32.391 00:00:10.361 TCP 23.104.0.1:47954 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:49:19.231 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53194 10 6452 1 2025-09-15 03:45:28.587 00:05:00.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 03:49:32.787 00:00:10.365 TCP 23.104.0.1:39884 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:50:19.447 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42816 10 6452 1 2025-09-15 03:50:33.191 00:00:10.327 TCP 23.104.0.1:36440 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:51:19.620 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42224 10 6452 1 2025-09-15 03:51:33.553 00:00:10.364 TCP 23.104.0.1:60422 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:52:19.844 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53780 10 6452 1 2025-09-15 03:52:33.954 00:00:10.374 TCP 23.104.0.1:53130 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:53:20.176 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 03:53:20.156 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 03:53:20.072 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49322 10 6452 1 2025-09-15 03:53:34.359 00:00:10.366 TCP 23.104.0.1:45240 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:54:20.288 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53640 10 6452 1 2025-09-15 03:50:28.585 00:05:00.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 03:54:34.761 00:00:10.336 TCP 23.104.0.1:51946 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:51:28.588 00:05:00.972 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 03:55:20.463 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56712 10 6452 1 2025-09-15 03:55:35.138 00:00:10.366 TCP 23.104.0.1:54386 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:56:20.690 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53172 10 6452 1 2025-09-15 03:56:35.539 00:00:10.363 TCP 23.104.0.1:55538 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:57:20.906 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:57470 10 6452 1 2025-09-15 03:57:35.941 00:00:10.389 TCP 23.104.0.1:57338 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:58:20.351 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 03:58:20.283 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 03:58:21.105 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33096 10 6452 1 2025-09-15 03:58:36.372 00:00:10.322 TCP 23.104.0.1:55854 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498608, total packets: 1577, avg bps: 1067, avg pps: 0, avg bpp: 316 Time window: 2025-09-15 02:56:28 - 2025-09-15 03:58:46 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0018s Wall: 0.0022s flows/second: 73286.4 Runtime: 0.0023s