Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 08:58:43.867 00:00:10.298 TCP 1.101.0.1:3000 -> 22.102.0.1:52420 10 6452 1 2025-09-25 08:58:58.392 00:00:10.364 TCP 23.104.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-09-25 08:59:44.209 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45740 10 6452 1 2025-09-25 08:59:58.799 00:00:10.336 TCP 23.104.0.1:43310 -> 1.101.0.1:3000 11 1507 1 2025-09-25 08:56:33.286 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 09:00:44.425 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44024 10 6452 1 2025-09-25 09:00:59.174 00:00:10.363 TCP 23.104.0.1:51792 -> 1.101.0.1:3000 11 1507 1 2025-09-25 08:57:33.288 00:05:01.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 09:01:44.640 00:00:11.089 TCP 1.101.0.1:3000 -> 22.102.0.1:56502 10 6452 1 2025-09-25 09:01:59.575 00:00:10.331 TCP 23.104.0.1:48272 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:02:45.765 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54150 10 6452 1 2025-09-25 09:02:59.948 00:00:10.366 TCP 23.104.0.1:48628 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:03:15.000 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 09:03:15.273 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 09:03:45.942 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52302 10 6452 1 2025-09-25 09:04:00.353 00:00:10.342 TCP 23.104.0.1:56056 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:04:46.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45984 10 6452 1 2025-09-25 09:05:00.741 00:00:10.331 TCP 23.104.0.1:48126 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:05:46.395 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41470 10 6452 1 2025-09-25 09:06:01.114 00:00:10.363 TCP 23.104.0.1:39146 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:02:33.287 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 09:06:46.607 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50326 10 6452 1 2025-09-25 09:07:01.518 00:00:10.368 TCP 23.104.0.1:58512 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:03:33.291 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 09:07:46.822 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50870 10 6452 1 2025-09-25 09:08:15.198 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 09:08:01.925 00:00:10.382 TCP 23.104.0.1:56886 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:08:15.067 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 09:08:46.992 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60502 10 6452 1 2025-09-25 09:09:02.343 00:00:10.370 TCP 23.104.0.1:47956 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:09:47.212 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44720 10 6452 1 2025-09-25 09:10:02.751 00:00:10.393 TCP 23.104.0.1:37414 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:10:47.385 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39184 10 6452 1 2025-09-25 09:11:03.177 00:00:10.326 TCP 23.104.0.1:37314 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:11:47.597 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51444 10 6452 1 2025-09-25 09:12:03.542 00:00:10.375 TCP 23.104.0.1:59592 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:08:33.288 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 09:12:47.815 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51514 10 6452 1 2025-09-25 09:13:15.577 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 09:13:03.983 00:00:10.368 TCP 23.104.0.1:33772 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:13:15.421 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 09:09:33.292 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 09:13:48.034 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43474 10 6452 1 2025-09-25 09:14:04.397 00:00:10.595 TCP 23.104.0.1:42264 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:14:48.247 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57190 10 6452 1 2025-09-25 09:15:05.058 00:00:10.366 TCP 23.104.0.1:57778 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:15:48.460 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44366 10 6452 1 2025-09-25 09:16:05.457 00:00:10.324 TCP 23.104.0.1:47404 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:16:48.628 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60936 10 6452 1 2025-09-25 09:17:05.821 00:00:10.365 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:17:48.798 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54698 10 6452 1 2025-09-25 09:18:15.487 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 09:18:06.224 00:00:10.368 TCP 23.104.0.1:47804 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:18:16.006 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 09:14:33.289 00:05:01.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 09:18:48.970 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:58066 10 6452 1 2025-09-25 09:19:06.628 00:00:10.335 TCP 23.104.0.1:53924 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:15:33.292 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 09:19:49.154 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37812 10 6452 1 2025-09-25 09:20:06.994 00:00:10.366 TCP 23.104.0.1:42988 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:20:49.368 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53268 10 6452 1 2025-09-25 09:21:07.400 00:00:10.656 TCP 23.104.0.1:37532 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:21:49.584 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33984 10 6452 1 2025-09-25 09:22:08.107 00:00:10.364 TCP 23.104.0.1:43826 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:22:49.797 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44516 10 6452 1 2025-09-25 09:23:15.326 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 09:23:15.644 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 09:23:08.514 00:00:10.366 TCP 23.104.0.1:53124 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:23:50.027 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53440 10 6452 1 2025-09-25 09:24:08.917 00:00:10.378 TCP 23.104.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:20:33.291 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 09:24:50.203 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35914 10 6452 1 2025-09-25 09:25:09.329 00:00:10.369 TCP 23.104.0.1:59016 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:21:33.294 00:05:01.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 09:25:50.434 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42558 10 6452 1 2025-09-25 09:26:09.733 00:00:10.364 TCP 23.104.0.1:39106 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:26:50.603 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 12 10367 1 2025-09-25 09:27:10.136 00:00:10.444 TCP 23.104.0.1:33688 -> 1.101.0.1:3000 15 1926 1 2025-09-25 09:27:50.846 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45874 12 6556 1 2025-09-25 09:28:15.781 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 09:28:15.741 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 09:28:10.621 00:00:10.372 TCP 23.104.0.1:59774 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:28:51.080 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-09-25 09:29:11.031 00:00:10.323 TCP 23.104.0.1:36764 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:29:51.252 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46036 10 6452 1 2025-09-25 09:30:11.395 00:00:10.365 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:26:33.292 00:05:01.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 09:30:51.471 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34160 10 6452 1 2025-09-25 09:31:11.801 00:00:10.364 TCP 23.104.0.1:35698 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:27:33.294 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 09:31:51.682 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36006 10 6452 1 2025-09-25 09:32:12.206 00:00:10.367 TCP 23.104.0.1:43492 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:32:51.895 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48954 10 6452 1 2025-09-25 09:33:15.749 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 09:33:15.744 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 09:33:12.610 00:00:10.372 TCP 23.104.0.1:53748 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:33:52.109 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56568 10 6452 1 2025-09-25 09:34:13.021 00:00:10.362 TCP 23.104.0.1:33298 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:34:52.328 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57120 10 6452 1 2025-09-25 09:35:13.419 00:00:10.364 TCP 23.104.0.1:57490 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:35:52.563 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58752 10 6452 1 2025-09-25 09:36:13.823 00:00:10.366 TCP 23.104.0.1:55282 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:32:33.295 00:05:01.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 09:36:52.781 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36250 10 6452 1 2025-09-25 09:37:14.222 00:00:10.366 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:33:33.298 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 09:37:52.958 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48708 10 6452 1 2025-09-25 09:38:15.981 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 09:38:16.051 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 09:38:14.625 00:00:10.433 TCP 23.104.0.1:40370 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:38:53.192 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57098 10 6452 1 2025-09-25 09:39:15.109 00:00:10.360 TCP 23.104.0.1:48166 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:39:53.362 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45762 10 6452 1 2025-09-25 09:40:15.509 00:00:10.362 TCP 23.104.0.1:50566 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:40:53.574 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47554 10 6452 1 2025-09-25 09:41:15.911 00:00:10.368 TCP 23.104.0.1:54200 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:41:53.787 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37474 10 6452 1 2025-09-25 09:42:16.318 00:00:10.365 TCP 23.104.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:38:33.296 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 09:42:53.998 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50014 10 6452 1 2025-09-25 09:43:15.914 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 09:43:16.139 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 09:43:16.725 00:00:10.381 TCP 23.104.0.1:47756 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:39:33.298 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 09:43:54.175 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33742 10 6452 1 2025-09-25 09:44:17.140 00:00:10.331 TCP 23.104.0.1:49776 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:44:54.390 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59240 10 6452 1 2025-09-25 09:45:17.510 00:00:10.365 TCP 23.104.0.1:56578 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:45:54.599 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41202 10 6452 1 2025-09-25 09:46:17.914 00:00:10.364 TCP 23.104.0.1:47314 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:46:54.822 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60950 10 6452 1 2025-09-25 09:47:18.312 00:00:10.364 TCP 23.104.0.1:48438 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:47:55.061 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58342 10 6452 1 2025-09-25 09:48:16.059 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 09:48:15.852 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 09:48:18.715 00:00:10.377 TCP 23.104.0.1:58092 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:44:33.304 00:05:01.553 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 09:48:55.275 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50516 10 6452 1 2025-09-25 09:49:19.130 00:00:10.366 TCP 23.104.0.1:59590 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:45:33.306 00:05:01.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 09:49:55.455 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35682 10 6452 1 2025-09-25 09:50:19.532 00:00:10.366 TCP 23.104.0.1:56068 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:50:55.669 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47280 10 6452 1 2025-09-25 09:51:19.933 00:00:10.454 TCP 23.104.0.1:52264 -> 1.101.0.1:3000 15 1926 1 2025-09-25 09:51:55.881 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:54546 12 10367 1 2025-09-25 09:52:20.424 00:00:10.320 TCP 23.104.0.1:50900 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:52:56.135 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42118 10 6452 1 2025-09-25 09:53:16.240 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 09:53:16.019 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 09:53:20.778 00:00:10.364 TCP 23.104.0.1:56500 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:53:56.312 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38086 10 6452 1 2025-09-25 09:54:21.178 00:00:10.363 TCP 23.104.0.1:46310 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:50:33.304 00:05:01.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 09:54:56.521 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36962 10 6452 1 2025-09-25 09:55:21.583 00:00:10.376 TCP 23.104.0.1:43414 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:51:33.307 00:05:01.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 09:55:56.693 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33738 10 6452 1 2025-09-25 09:56:21.998 00:00:10.398 TCP 23.104.0.1:55654 -> 1.101.0.1:3000 15 1926 1 2025-09-25 09:56:56.910 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:46814 12 10367 1 2025-09-25 09:57:22.435 00:00:10.362 TCP 23.104.0.1:53640 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:57:57.151 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34762 10 6452 1 2025-09-25 09:58:16.377 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 09:58:16.334 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 09:58:22.836 00:00:10.379 TCP 23.104.0.1:33452 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511454, total packets: 1592, avg bps: 1099, avg pps: 0, avg bpp: 321 Time window: 2025-09-25 08:56:33 - 2025-09-25 09:58:33 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0010s Wall: 0.0020s flows/second: 80161.5 Runtime: 0.0021s