Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 06:59:03.667 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53366 10 6452 1 2025-09-15 06:59:06.305 00:00:10.324 TCP 23.104.0.1:35868 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:00:03.883 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:57750 10 6452 1 2025-09-15 07:00:06.667 00:00:10.373 TCP 23.104.0.1:50720 -> 1.101.0.1:3000 11 1507 1 2025-09-15 06:56:28.645 00:05:00.972 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 07:01:04.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53882 10 6452 1 2025-09-15 07:01:07.105 00:00:10.362 TCP 23.104.0.1:59724 -> 1.101.0.1:3000 11 1507 1 2025-09-15 06:57:28.647 00:05:00.967 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 07:02:04.295 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50754 10 6452 1 2025-09-15 07:02:07.509 00:00:10.362 TCP 23.104.0.1:52156 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:03:04.520 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50434 10 6452 1 2025-09-15 07:03:07.911 00:00:10.363 TCP 23.104.0.1:38640 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:03:24.354 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:03:24.693 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 07:04:04.740 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41800 10 6452 1 2025-09-15 07:04:08.313 00:00:10.322 TCP 23.104.0.1:51796 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:05:04.953 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:36846 10 6452 1 2025-09-15 07:05:08.672 00:00:10.367 TCP 23.104.0.1:38602 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:06:05.195 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:43136 11 6504 1 2025-09-15 07:06:09.105 00:00:10.368 TCP 23.104.0.1:52812 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:02:28.648 00:05:00.972 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 07:07:05.455 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59594 10 6452 1 2025-09-15 07:07:09.512 00:00:10.370 TCP 23.104.0.1:53638 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:03:28.651 00:05:00.966 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 07:08:05.678 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38660 10 6452 1 2025-09-15 07:08:09.919 00:00:10.382 TCP 23.104.0.1:54288 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:08:24.270 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:08:24.303 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 07:09:05.893 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39974 10 6452 1 2025-09-15 07:09:10.342 00:00:10.368 TCP 23.104.0.1:36972 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:10:06.122 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57206 10 6452 1 2025-09-15 07:10:10.749 00:00:10.365 TCP 23.104.0.1:43584 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:11:06.345 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58314 10 6452 1 2025-09-15 07:11:11.150 00:00:10.367 TCP 23.104.0.1:51336 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:12:06.524 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:36940 10 6452 1 2025-09-15 07:12:11.558 00:00:10.365 TCP 23.104.0.1:44562 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:08:28.650 00:05:00.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 07:13:06.762 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35070 10 6452 1 2025-09-15 07:13:24.260 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:13:11.963 00:00:10.335 TCP 23.104.0.1:51084 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:13:24.197 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 07:09:28.653 00:05:00.967 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 07:14:06.984 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:35130 10 6452 1 2025-09-15 07:14:12.350 00:00:10.361 TCP 23.104.0.1:39616 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:15:07.244 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:56748 14 14278 1 2025-09-15 07:15:12.748 00:00:10.486 TCP 23.104.0.1:43252 -> 1.101.0.1:3000 20 2433 1 2025-09-15 07:16:07.518 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58550 10 6452 1 2025-09-15 07:16:13.273 00:00:10.379 TCP 23.104.0.1:60398 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:17:07.743 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54760 10 6452 1 2025-09-15 07:17:13.692 00:00:10.332 TCP 23.104.0.1:60334 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:18:07.956 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:43216 12 6556 1 2025-09-15 07:18:24.147 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:18:14.100 00:00:10.362 TCP 23.104.0.1:58430 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:18:24.285 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 07:14:28.653 00:05:00.972 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 07:19:08.193 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38518 10 6452 1 2025-09-15 07:19:14.503 00:00:10.337 TCP 23.104.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:15:28.655 00:05:00.967 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 07:20:08.410 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40572 10 6452 1 2025-09-15 07:20:14.881 00:00:10.381 TCP 23.104.0.1:35832 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:21:08.642 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47046 10 6452 1 2025-09-15 07:21:15.295 00:00:10.364 TCP 23.104.0.1:52848 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:22:08.857 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38884 10 6452 1 2025-09-15 07:22:15.696 00:00:10.361 TCP 23.104.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:23:09.034 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46094 10 6452 1 2025-09-15 07:23:24.458 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 07:23:24.469 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:23:16.102 00:00:10.371 TCP 23.104.0.1:39598 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:24:09.244 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55218 10 6452 1 2025-09-15 07:24:16.512 00:00:10.319 TCP 23.104.0.1:48646 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:20:28.654 00:05:00.972 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 07:25:09.459 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51354 10 6452 1 2025-09-15 07:21:28.656 00:05:00.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 07:25:16.870 00:00:10.366 TCP 23.104.0.1:53712 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:26:09.643 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52294 10 6452 1 2025-09-15 07:26:17.276 00:00:10.322 TCP 23.104.0.1:35316 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:27:09.866 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42532 10 6452 1 2025-09-15 07:27:17.638 00:00:10.362 TCP 23.104.0.1:46174 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:28:10.084 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53042 10 6452 1 2025-09-15 07:28:24.607 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:28:24.594 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 07:28:18.059 00:00:10.956 TCP 23.104.0.1:46380 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:29:10.297 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44532 10 6452 1 2025-09-15 07:29:19.065 00:00:10.368 TCP 23.104.0.1:41156 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:30:10.514 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57238 10 6452 1 2025-09-15 07:30:19.472 00:00:10.360 TCP 23.104.0.1:48398 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:26:28.656 00:05:00.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 07:31:10.735 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35856 10 6452 1 2025-09-15 07:27:28.661 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 07:31:19.876 00:00:10.353 TCP 23.104.0.1:33180 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:32:10.945 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:40184 10 6452 1 2025-09-15 07:32:20.270 00:00:10.364 TCP 23.104.0.1:59668 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:33:11.188 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42410 10 6452 1 2025-09-15 07:33:24.808 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 07:33:24.804 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:33:20.676 00:00:10.670 TCP 23.104.0.1:41350 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:34:11.410 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44826 10 6452 1 2025-09-15 07:34:21.391 00:00:10.446 TCP 23.104.0.1:38234 -> 1.101.0.1:3000 15 1926 1 2025-09-15 07:35:11.624 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:38002 12 10367 1 2025-09-15 07:35:21.880 00:00:10.386 TCP 23.104.0.1:59876 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:36:11.867 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:50862 10 6452 1 2025-09-15 07:32:28.659 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 07:36:22.305 00:00:10.362 TCP 23.104.0.1:51880 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:37:12.110 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34062 10 6452 1 2025-09-15 07:33:28.662 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 07:37:22.705 00:00:10.361 TCP 23.104.0.1:59180 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:38:12.326 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43610 10 6452 1 2025-09-15 07:38:24.877 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 07:38:24.683 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:38:23.109 00:00:10.367 TCP 23.104.0.1:44508 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:39:12.541 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41820 10 6452 1 2025-09-15 07:39:23.515 00:00:10.367 TCP 23.104.0.1:33296 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:40:12.766 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43944 10 6452 1 2025-09-15 07:40:23.922 00:00:10.388 TCP 23.104.0.1:33080 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:41:12.997 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41128 10 6452 1 2025-09-15 07:41:24.345 00:00:10.365 TCP 23.104.0.1:37742 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:42:13.228 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32898 10 6452 1 2025-09-15 07:38:28.660 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 07:42:24.746 00:00:10.328 TCP 23.104.0.1:44016 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:43:24.851 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:43:13.449 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59326 10 6452 1 2025-09-15 07:43:24.908 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 07:39:28.663 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 07:43:25.111 00:00:10.326 TCP 23.104.0.1:36330 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:44:13.670 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60130 10 6452 1 2025-09-15 07:44:25.472 00:00:10.321 TCP 23.104.0.1:53826 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:45:13.881 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50788 10 6452 1 2025-09-15 07:45:25.836 00:00:10.398 TCP 23.104.0.1:38884 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:46:14.106 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39828 10 6452 1 2025-09-15 07:46:26.278 00:00:10.369 TCP 23.104.0.1:57620 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:47:14.321 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37062 10 6452 1 2025-09-15 07:47:26.677 00:00:10.367 TCP 23.104.0.1:33716 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:48:14.533 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36526 10 6452 1 2025-09-15 07:48:25.191 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 07:48:25.082 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:44:28.663 00:05:00.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 07:48:27.105 00:00:10.373 TCP 23.104.0.1:38400 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:49:14.752 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52306 10 6452 1 2025-09-15 07:45:28.666 00:05:00.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 07:49:27.517 00:00:10.372 TCP 23.104.0.1:38622 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:50:14.964 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37440 10 6452 1 2025-09-15 07:50:27.928 00:00:10.385 TCP 23.104.0.1:41044 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:51:15.188 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52826 10 6452 1 2025-09-15 07:51:28.352 00:00:10.367 TCP 23.104.0.1:41538 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:52:15.401 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59690 10 6452 1 2025-09-15 07:52:28.773 00:00:10.364 TCP 23.104.0.1:46886 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:53:15.620 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49210 10 6452 1 2025-09-15 07:53:24.844 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 07:53:24.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:53:29.178 00:00:10.366 TCP 23.104.0.1:53158 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:54:15.835 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58988 10 6452 1 2025-09-15 07:50:28.664 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 07:54:29.584 00:00:10.367 TCP 23.104.0.1:44030 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:55:16.069 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51862 10 6452 1 2025-09-15 07:51:28.670 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 07:55:29.987 00:00:10.375 TCP 23.104.0.1:49280 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:56:16.276 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49774 10 6452 1 2025-09-15 07:56:30.401 00:00:10.389 TCP 23.104.0.1:48234 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:57:16.490 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51962 10 6452 1 2025-09-15 07:57:30.819 00:00:10.366 TCP 23.104.0.1:56606 -> 1.101.0.1:3000 11 1507 1 2025-09-15 07:58:25.256 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 07:58:16.658 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42234 10 6452 1 2025-09-15 07:58:25.003 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 07:58:31.226 00:00:10.362 TCP 23.104.0.1:48092 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511590, total packets: 1594, avg bps: 1096, avg pps: 0, avg bpp: 320 Time window: 2025-09-15 06:56:28 - 2025-09-15 07:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0012s Wall: 0.0031s flows/second: 53125.3 Runtime: 0.0031s