Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 14:59:19.335 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39344 10 6452 1 2025-09-24 14:59:19.791 00:00:10.363 TCP 23.104.0.1:55120 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:00:20.193 00:00:10.327 TCP 23.104.0.1:49020 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:00:19.559 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44422 10 6452 1 2025-09-24 14:56:32.919 00:05:01.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 15:01:20.556 00:00:10.321 TCP 23.104.0.1:40150 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:01:19.771 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35464 10 6452 1 2025-09-24 14:57:32.922 00:05:01.545 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 15:02:19.987 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57348 10 6452 1 2025-09-24 15:02:20.913 00:00:10.363 TCP 23.104.0.1:36026 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:02:53.293 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 15:02:53.580 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 15:03:20.207 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40266 10 6452 1 2025-09-24 15:03:21.317 00:00:10.323 TCP 23.104.0.1:36092 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:04:20.418 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58374 10 6452 1 2025-09-24 15:04:21.684 00:00:10.364 TCP 23.104.0.1:39576 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:05:20.631 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55692 10 6452 1 2025-09-24 15:05:22.100 00:00:10.405 TCP 23.104.0.1:34324 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:06:20.844 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57426 10 6452 1 2025-09-24 15:02:32.920 00:05:01.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 15:06:22.532 00:00:10.323 TCP 23.104.0.1:53914 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:07:21.079 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49552 10 6452 1 2025-09-24 15:03:32.923 00:05:01.546 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 15:07:22.893 00:00:10.376 TCP 23.104.0.1:51994 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:07:53.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 15:07:53.772 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 15:08:21.296 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32776 10 6452 1 2025-09-24 15:08:23.304 00:00:10.361 TCP 23.104.0.1:45580 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:09:21.526 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:44828 10 6452 1 2025-09-24 15:09:23.704 00:00:10.367 TCP 23.104.0.1:40158 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:10:21.771 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57368 10 6452 1 2025-09-24 15:10:24.113 00:00:10.325 TCP 23.104.0.1:46170 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:11:22.005 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6452 1 2025-09-24 15:11:24.476 00:00:10.362 TCP 23.104.0.1:38596 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:12:22.225 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52728 10 6452 1 2025-09-24 15:08:32.923 00:05:01.554 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 15:12:24.878 00:00:10.375 TCP 23.104.0.1:32932 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:12:53.741 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 15:12:53.551 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 15:13:25.292 00:00:10.370 TCP 23.104.0.1:55060 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:09:32.925 00:05:01.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 15:13:22.437 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41096 10 6452 1 2025-09-24 15:14:25.700 00:00:10.375 TCP 23.104.0.1:58054 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:14:22.648 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34260 10 6452 1 2025-09-24 15:15:22.860 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53104 10 6452 1 2025-09-24 15:15:26.113 00:00:10.367 TCP 23.104.0.1:35582 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:16:26.521 00:00:10.366 TCP 23.104.0.1:44992 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:16:23.079 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42514 10 6452 1 2025-09-24 15:17:23.250 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41048 10 6452 1 2025-09-24 15:17:26.923 00:00:10.388 TCP 23.104.0.1:33806 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:17:53.740 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 15:17:53.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 15:18:23.463 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 10 6452 1 2025-09-24 15:14:32.923 00:05:01.554 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 15:18:27.349 00:00:10.367 TCP 23.104.0.1:54518 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:19:23.679 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45022 10 6452 1 2025-09-24 15:15:32.927 00:05:01.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 15:19:27.752 00:00:10.323 TCP 23.104.0.1:34976 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:20:23.892 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40316 10 6452 1 2025-09-24 15:20:28.113 00:00:11.033 TCP 23.104.0.1:41532 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:21:24.109 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34720 10 6452 1 2025-09-24 15:21:29.189 00:00:10.322 TCP 23.104.0.1:56778 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:22:24.314 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35696 10 6452 1 2025-09-24 15:22:29.551 00:00:10.365 TCP 23.104.0.1:60218 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:22:53.923 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 15:22:53.679 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 15:23:24.524 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37104 10 6452 1 2025-09-24 15:23:29.954 00:00:10.366 TCP 23.104.0.1:46432 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:24:24.741 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36118 10 6452 1 2025-09-24 15:20:32.925 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 15:24:30.360 00:00:10.371 TCP 23.104.0.1:58970 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:25:24.911 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55650 10 6452 1 2025-09-24 15:21:32.927 00:05:01.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 15:25:30.764 00:00:10.377 TCP 23.104.0.1:33544 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:26:25.094 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55290 10 6452 1 2025-09-24 15:26:31.180 00:00:10.365 TCP 23.104.0.1:55434 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:27:25.305 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56048 10 6452 1 2025-09-24 15:27:31.583 00:00:10.371 TCP 23.104.0.1:57978 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:27:54.205 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 15:27:54.199 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 15:28:25.519 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:51816 10 6452 1 2025-09-24 15:28:31.985 00:00:10.376 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:29:25.802 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39588 10 6452 1 2025-09-24 15:29:32.398 00:00:10.327 TCP 23.104.0.1:53944 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:30:26.022 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51830 10 6452 1 2025-09-24 15:26:32.926 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 15:30:32.766 00:00:10.325 TCP 23.104.0.1:36762 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:27:32.928 00:05:01.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 15:31:26.241 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54730 10 6452 1 2025-09-24 15:31:33.133 00:00:10.323 TCP 23.104.0.1:59118 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:32:26.460 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50890 10 6452 1 2025-09-24 15:32:33.494 00:00:10.365 TCP 23.104.0.1:43180 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:32:54.311 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 15:32:54.227 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 15:33:26.671 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36878 10 6452 1 2025-09-24 15:33:33.897 00:00:10.376 TCP 23.104.0.1:49816 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:34:26.879 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46908 10 6452 1 2025-09-24 15:34:34.310 00:00:10.365 TCP 23.104.0.1:33902 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:35:27.097 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50516 10 6452 1 2025-09-24 15:35:34.710 00:00:10.358 TCP 23.104.0.1:56616 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:32:32.927 00:05:01.558 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 15:36:27.320 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48642 10 6452 1 2025-09-24 15:36:35.110 00:00:10.364 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:33:32.930 00:05:01.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 15:37:27.539 00:00:11.463 TCP 1.101.0.1:3000 -> 22.102.0.1:57700 10 6452 1 2025-09-24 15:37:35.513 00:00:10.363 TCP 23.104.0.1:35018 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:37:54.277 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 15:37:54.244 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 15:38:29.063 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33522 10 6452 1 2025-09-24 15:38:35.918 00:00:10.335 TCP 23.104.0.1:58460 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:39:29.242 00:00:10.582 TCP 1.101.0.1:3000 -> 22.102.0.1:50764 10 6452 1 2025-09-24 15:39:36.290 00:00:10.366 TCP 23.104.0.1:33622 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:40:29.865 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34532 10 6452 1 2025-09-24 15:40:36.703 00:00:10.389 TCP 23.104.0.1:44376 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:41:30.098 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38030 10 6452 1 2025-09-24 15:41:37.133 00:00:10.369 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:38:32.936 00:05:01.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 15:42:30.277 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37020 12 6556 1 2025-09-24 15:42:37.542 00:00:10.368 TCP 23.104.0.1:37032 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:42:54.448 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 15:42:54.251 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 15:39:32.938 00:05:01.545 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 15:43:30.490 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54754 10 6452 1 2025-09-24 15:43:37.947 00:00:10.372 TCP 23.104.0.1:35554 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:44:30.663 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49822 10 6452 1 2025-09-24 15:44:38.357 00:00:10.367 TCP 23.104.0.1:52958 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:45:30.870 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:53350 12 6556 1 2025-09-24 15:45:38.763 00:00:10.378 TCP 23.104.0.1:52600 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:46:31.107 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33248 10 6452 1 2025-09-24 15:46:39.177 00:00:10.326 TCP 23.104.0.1:42890 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:47:31.325 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57094 10 6452 1 2025-09-24 15:47:39.541 00:00:10.326 TCP 23.104.0.1:46488 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:47:54.434 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 15:47:54.338 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 15:44:32.936 00:05:01.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 15:48:31.539 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58330 10 6452 1 2025-09-24 15:48:39.908 00:00:10.365 TCP 23.104.0.1:50870 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:45:32.939 00:05:01.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 15:49:31.763 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50158 10 6452 1 2025-09-24 15:49:40.310 00:00:10.372 TCP 23.104.0.1:40794 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:50:31.937 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:50432 10 6452 1 2025-09-24 15:50:40.721 00:00:10.372 TCP 23.104.0.1:39584 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:51:32.185 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:43078 10 6452 1 2025-09-24 15:51:41.131 00:00:10.362 TCP 23.104.0.1:51982 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:52:32.373 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53572 10 6452 1 2025-09-24 15:52:41.537 00:00:10.373 TCP 23.104.0.1:55958 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:52:54.485 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 15:52:54.484 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 15:53:32.587 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44260 10 6452 1 2025-09-24 15:53:41.943 00:00:10.369 TCP 23.104.0.1:58196 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:50:32.941 00:05:01.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 15:54:32.755 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38608 10 6452 1 2025-09-24 15:54:42.347 00:00:10.746 TCP 23.104.0.1:54784 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:51:32.941 00:05:01.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 15:55:32.936 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38162 10 6452 1 2025-09-24 15:55:43.131 00:00:10.352 TCP 23.104.0.1:42770 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:56:33.139 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48930 10 6452 1 2025-09-24 15:56:43.521 00:00:10.367 TCP 23.104.0.1:47376 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:57:33.369 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35522 10 6452 1 2025-09-24 15:57:54.587 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 15:57:54.551 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 15:57:43.931 00:00:10.370 TCP 23.104.0.1:56074 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:58:33.552 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36418 10 6452 1 Summary: total flows: 163, total bytes: 497049, total packets: 1565, avg bps: 1065, avg pps: 0, avg bpp: 317 Time window: 2025-09-24 14:56:32 - 2025-09-24 15:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0025s User: 0.0012s Wall: 0.0015s flows/second: 107597.0 Runtime: 0.0015s