Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 19:58:47.522 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44874 10 6452 1 2025-09-15 19:59:01.069 00:00:10.362 TCP 23.104.0.1:35656 -> 1.101.0.1:3000 11 1507 1 2025-09-15 19:59:47.696 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51808 10 6452 1 2025-09-15 20:00:01.469 00:00:10.366 TCP 23.104.0.1:41152 -> 1.101.0.1:3000 11 1507 1 2025-09-15 19:56:28.865 00:05:01.042 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 20:00:47.887 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52834 10 6452 1 2025-09-15 20:01:01.869 00:00:10.370 TCP 23.104.0.1:53624 -> 1.101.0.1:3000 11 1507 1 2025-09-15 19:57:28.867 00:05:01.048 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 20:01:48.111 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45348 10 6452 1 2025-09-15 20:02:02.276 00:00:10.360 TCP 23.104.0.1:50596 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:02:48.316 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55762 10 6452 1 2025-09-15 20:03:02.674 00:00:10.368 TCP 23.104.0.1:41940 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:03:40.112 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 20:03:40.172 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 20:03:48.527 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53314 10 6452 1 2025-09-15 20:04:03.103 00:00:10.321 TCP 23.104.0.1:55410 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:04:48.739 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34406 10 6452 1 2025-09-15 20:05:03.462 00:00:10.328 TCP 23.104.0.1:37838 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:05:48.909 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:41432 10 6452 1 2025-09-15 20:06:03.824 00:00:10.364 TCP 23.104.0.1:50306 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:02:28.865 00:05:01.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 20:06:49.098 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34578 10 6452 1 2025-09-15 20:07:04.222 00:00:10.326 TCP 23.104.0.1:39712 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:03:28.869 00:05:01.051 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 20:07:49.311 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37928 10 6452 1 2025-09-15 20:08:04.586 00:00:10.421 TCP 23.104.0.1:37456 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:08:39.906 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 20:08:39.758 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 20:08:49.523 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40188 10 6452 1 2025-09-15 20:09:05.045 00:00:10.370 TCP 23.104.0.1:36846 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:09:49.734 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59112 10 6452 1 2025-09-15 20:10:05.452 00:00:10.363 TCP 23.104.0.1:35056 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:10:49.940 00:00:10.463 TCP 1.101.0.1:3000 -> 22.102.0.1:44972 10 6452 1 2025-09-15 20:11:05.855 00:00:10.374 TCP 23.104.0.1:52044 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:11:50.441 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47064 10 6452 1 2025-09-15 20:12:06.265 00:00:10.335 TCP 23.104.0.1:37976 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:08:28.867 00:05:01.062 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 20:12:50.659 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32872 10 6452 1 2025-09-15 20:13:06.644 00:00:10.371 TCP 23.104.0.1:39786 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:09:28.871 00:05:01.057 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 20:13:39.985 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 20:13:40.172 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 20:13:50.828 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51304 10 6452 1 2025-09-15 20:14:07.055 00:00:10.371 TCP 23.104.0.1:59780 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:14:51.069 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40592 10 6452 1 2025-09-15 20:15:07.458 00:00:10.376 TCP 23.104.0.1:56266 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:15:51.280 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37288 10 6452 1 2025-09-15 20:16:07.874 00:00:18.227 TCP 23.104.0.1:50610 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:16:51.502 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33900 10 6452 1 2025-09-15 20:17:16.157 00:00:10.362 TCP 23.104.0.1:36624 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:17:51.714 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60848 10 6452 1 2025-09-15 20:18:16.558 00:00:10.360 TCP 23.104.0.1:36490 -> 1.101.0.1:3000 12 1559 1 2025-09-15 20:14:28.868 00:05:01.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 20:18:40.024 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 20:18:39.959 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 20:18:51.885 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46034 10 6452 1 2025-09-15 20:19:16.957 00:00:10.370 TCP 23.104.0.1:55182 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:15:28.871 00:05:01.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 20:19:52.107 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49710 10 6452 1 2025-09-15 20:20:17.367 00:00:10.370 TCP 23.104.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:20:52.332 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33428 10 6452 1 2025-09-15 20:21:17.776 00:00:11.361 TCP 23.104.0.1:51026 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:21:52.548 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:36840 10 6452 1 2025-09-15 20:22:19.175 00:00:10.365 TCP 23.104.0.1:51004 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:22:52.727 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56718 10 6452 1 2025-09-15 20:23:19.578 00:00:10.327 TCP 23.104.0.1:57512 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:23:40.025 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 20:23:39.733 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 20:23:52.910 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49352 10 6452 1 2025-09-15 20:24:19.943 00:00:10.369 TCP 23.104.0.1:39882 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:20:28.869 00:05:01.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 20:24:53.123 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47954 10 6452 1 2025-09-15 20:21:28.873 00:05:01.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 20:25:20.347 00:00:10.328 TCP 23.104.0.1:49636 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:25:53.299 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60190 10 6452 1 2025-09-15 20:26:20.713 00:00:10.374 TCP 23.104.0.1:59802 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:26:53.517 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40294 10 6452 1 2025-09-15 20:27:21.126 00:00:10.364 TCP 23.104.0.1:56974 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:27:53.733 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34818 10 6452 1 2025-09-15 20:28:21.531 00:00:10.363 TCP 23.104.0.1:58848 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:28:40.282 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 20:28:40.414 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 20:28:53.945 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 10 6452 1 2025-09-15 20:29:21.935 00:00:10.377 TCP 23.104.0.1:46422 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:29:54.177 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37286 10 6452 1 2025-09-15 20:26:28.872 00:05:01.062 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 20:30:22.350 00:00:10.367 TCP 23.104.0.1:53254 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:30:54.351 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44170 10 6452 1 2025-09-15 20:27:28.874 00:05:01.057 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 20:31:22.753 00:00:10.392 TCP 23.104.0.1:35234 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:31:54.528 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57304 10 6452 1 2025-09-15 20:32:23.182 00:00:10.368 TCP 23.104.0.1:42094 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:32:54.744 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59130 10 6452 1 2025-09-15 20:33:23.591 00:00:10.366 TCP 23.104.0.1:47520 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:33:40.538 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 20:33:40.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 20:33:54.954 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:42546 10 6452 1 2025-09-15 20:34:23.996 00:00:10.364 TCP 23.104.0.1:52450 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:34:55.135 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53226 10 6452 1 2025-09-15 20:35:24.400 00:00:10.368 TCP 23.104.0.1:48836 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:35:55.306 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36128 10 6452 1 2025-09-15 20:32:28.872 00:05:01.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 20:36:24.803 00:00:10.370 TCP 23.104.0.1:36670 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:36:55.520 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:36006 10 6452 1 2025-09-15 20:33:28.875 00:05:01.058 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 20:37:25.210 00:00:10.362 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:37:55.789 00:00:10.604 TCP 1.101.0.1:3000 -> 22.102.0.1:56492 10 6452 1 2025-09-15 20:38:25.611 00:00:10.365 TCP 23.104.0.1:52742 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:38:40.621 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 20:38:40.338 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 20:38:56.432 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40570 10 6452 1 2025-09-15 20:39:26.013 00:00:10.359 TCP 23.104.0.1:58940 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:39:56.608 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49130 10 6452 1 2025-09-15 20:40:26.409 00:00:10.359 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:40:56.816 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41042 10 6452 1 2025-09-15 20:41:26.809 00:00:10.367 TCP 23.104.0.1:57578 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:41:57.034 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60494 10 6452 1 2025-09-15 20:38:28.873 00:05:01.074 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 20:42:27.216 00:00:10.366 TCP 23.104.0.1:44028 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:42:57.271 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47234 10 6452 1 2025-09-15 20:39:28.876 00:05:01.069 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 20:43:40.706 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 20:43:27.626 00:00:10.389 TCP 23.104.0.1:49316 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:43:40.436 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 20:43:57.490 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41566 10 6452 1 2025-09-15 20:44:28.051 00:00:10.369 TCP 23.104.0.1:32838 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:44:57.718 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50090 10 6452 1 2025-09-15 20:45:28.453 00:00:10.365 TCP 23.104.0.1:59006 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:45:57.936 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45122 10 6452 1 2025-09-15 20:46:28.859 00:00:10.384 TCP 23.104.0.1:44922 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:46:58.156 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37944 10 6452 1 2025-09-15 20:47:29.283 00:00:10.365 TCP 23.104.0.1:33156 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:47:58.380 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54742 10 6452 1 2025-09-15 20:44:28.878 00:05:01.070 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 20:48:29.687 00:00:10.369 TCP 23.104.0.1:34752 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:48:40.615 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 20:48:40.473 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 20:48:58.601 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36348 10 6452 1 2025-09-15 20:45:28.881 00:05:01.065 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 20:49:30.106 00:00:10.367 TCP 23.104.0.1:50714 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:49:58.824 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57240 10 6452 1 2025-09-15 20:50:30.511 00:00:10.375 TCP 23.104.0.1:47232 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:50:59.073 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59194 10 6452 1 2025-09-15 20:51:30.923 00:00:10.385 TCP 23.104.0.1:37022 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:51:59.246 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 10 6452 1 2025-09-15 20:52:31.346 00:00:10.321 TCP 23.104.0.1:56930 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:52:59.419 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34254 10 6452 1 2025-09-15 20:53:40.995 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 20:53:40.901 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 20:53:31.708 00:00:10.324 TCP 23.104.0.1:43872 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:53:59.636 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43114 10 6452 1 2025-09-15 20:50:28.883 00:05:01.068 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 20:54:32.092 00:00:10.445 TCP 23.104.0.1:53922 -> 1.101.0.1:3000 15 1926 1 2025-09-15 20:54:59.847 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 12 10367 1 2025-09-15 20:51:28.885 00:05:01.062 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 20:55:32.572 00:00:10.417 TCP 23.104.0.1:40956 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:56:00.101 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50564 10 6452 1 2025-09-15 20:56:33.025 00:00:10.372 TCP 23.104.0.1:57354 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:57:00.327 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:52744 10 6452 1 2025-09-15 20:57:33.434 00:00:11.509 TCP 23.104.0.1:49222 -> 1.101.0.1:3000 11 1507 1 2025-09-15 20:58:00.516 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35310 10 6452 1 2025-09-15 20:58:40.741 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 20:58:40.883 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 20:58:34.979 00:00:10.340 TCP 23.104.0.1:32770 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502734, total packets: 1579, avg bps: 1076, avg pps: 0, avg bpp: 318 Time window: 2025-09-15 19:56:28 - 2025-09-15 20:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0019s Wall: 0.0027s flows/second: 60760.2 Runtime: 0.0027s