Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 19:59:23.100 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54138 10 6452 1 2025-09-25 19:59:41.637 00:00:10.323 TCP 23.104.0.1:45850 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:56:33.511 00:05:01.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 20:00:23.276 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40624 10 6452 1 2025-09-25 20:00:42.002 00:00:10.367 TCP 23.104.0.1:57440 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:01:23.451 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37202 10 6452 1 2025-09-25 19:57:33.516 00:05:01.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 20:01:42.403 00:00:10.319 TCP 23.104.0.1:55798 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:02:23.624 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60526 10 6452 1 2025-09-25 20:02:42.767 00:00:10.377 TCP 23.104.0.1:46286 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:03:28.568 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 20:03:28.523 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 20:03:23.810 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49020 10 6452 1 2025-09-25 20:03:43.184 00:00:10.365 TCP 23.104.0.1:45576 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:04:24.030 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40474 10 6452 1 2025-09-25 20:04:43.587 00:00:10.367 TCP 23.104.0.1:56204 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:05:24.199 00:00:10.659 TCP 1.101.0.1:3000 -> 22.102.0.1:50020 10 6452 1 2025-09-25 20:05:43.999 00:00:10.357 TCP 23.104.0.1:45014 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:06:24.900 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58340 10 6452 1 2025-09-25 20:02:33.513 00:05:01.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 20:06:44.398 00:00:10.360 TCP 23.104.0.1:35586 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:07:25.119 00:00:10.661 TCP 1.101.0.1:3000 -> 22.102.0.1:41744 10 6452 1 2025-09-25 20:03:33.515 00:05:01.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 20:07:44.799 00:00:10.361 TCP 23.104.0.1:58288 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:08:28.820 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 20:08:28.650 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 20:08:25.829 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36568 10 6452 1 2025-09-25 20:08:45.204 00:00:10.325 TCP 23.104.0.1:60224 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:09:25.993 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58674 10 6452 1 2025-09-25 20:09:45.569 00:00:10.362 TCP 23.104.0.1:55170 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:10:26.221 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:43522 10 6452 1 2025-09-25 20:10:45.972 00:00:10.373 TCP 23.104.0.1:57170 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:11:26.429 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47334 10 6452 1 2025-09-25 20:11:46.385 00:00:10.362 TCP 23.104.0.1:36554 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:12:26.640 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57878 10 6452 1 2025-09-25 20:08:33.515 00:05:01.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 20:12:46.786 00:00:10.366 TCP 23.104.0.1:39684 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:13:28.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 20:13:28.655 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 20:09:33.523 00:05:01.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 20:13:26.851 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56352 10 6452 1 2025-09-25 20:13:47.189 00:00:10.363 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:14:27.079 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:53414 10 6452 1 2025-09-25 20:14:47.594 00:00:11.005 TCP 23.104.0.1:37222 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:15:27.284 00:00:10.660 TCP 1.101.0.1:3000 -> 22.102.0.1:57284 10 6452 1 2025-09-25 20:15:48.630 00:00:10.365 TCP 23.104.0.1:54094 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:16:27.986 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52684 10 6452 1 2025-09-25 20:16:49.031 00:00:10.366 TCP 23.104.0.1:44668 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:17:28.208 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43928 10 6452 1 2025-09-25 20:17:49.437 00:00:10.660 TCP 23.104.0.1:46334 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:18:28.818 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 20:18:28.730 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 20:14:33.517 00:05:01.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 20:18:28.424 00:00:10.451 TCP 1.101.0.1:3000 -> 22.102.0.1:41534 10 6452 1 2025-09-25 20:18:50.134 00:00:10.333 TCP 23.104.0.1:60052 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:15:33.519 00:05:01.583 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 20:19:28.913 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43748 10 6452 1 2025-09-25 20:19:50.505 00:00:10.367 TCP 23.104.0.1:52780 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:20:29.135 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53498 10 6452 1 2025-09-25 20:20:50.912 00:00:10.363 TCP 23.104.0.1:38792 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:21:29.348 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33608 10 6452 1 2025-09-25 20:21:51.317 00:00:10.319 TCP 23.104.0.1:51660 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:22:29.575 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55164 10 6452 1 2025-09-25 20:22:51.675 00:00:10.328 TCP 23.104.0.1:54630 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:23:28.761 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 20:23:28.882 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 20:23:29.783 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46482 10 6452 1 2025-09-25 20:23:52.047 00:00:10.368 TCP 23.104.0.1:35282 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:20:33.519 00:05:01.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 20:24:30.002 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46236 12 6556 1 2025-09-25 20:24:52.452 00:00:10.335 TCP 23.104.0.1:32872 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:21:33.522 00:05:01.581 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 20:25:30.219 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51964 10 6452 1 2025-09-25 20:25:52.825 00:00:10.365 TCP 23.104.0.1:60760 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:26:30.392 00:00:10.478 TCP 1.101.0.1:3000 -> 22.102.0.1:55702 10 6452 1 2025-09-25 20:26:53.234 00:00:10.369 TCP 23.104.0.1:43928 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:27:30.905 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36044 10 6452 1 2025-09-25 20:27:53.639 00:00:10.367 TCP 23.104.0.1:39002 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:28:29.061 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 20:28:29.268 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 20:28:31.115 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43532 10 6452 1 2025-09-25 20:28:54.046 00:00:10.367 TCP 23.104.0.1:38610 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:29:31.331 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44524 10 6452 1 2025-09-25 20:29:54.451 00:00:10.364 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:26:33.523 00:05:01.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 20:30:31.545 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40222 10 6452 1 2025-09-25 20:30:54.855 00:00:10.371 TCP 23.104.0.1:53718 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:27:33.526 00:05:01.583 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 20:31:31.770 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59472 10 6452 1 2025-09-25 20:31:55.265 00:00:10.380 TCP 23.104.0.1:35552 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:32:31.939 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52956 10 6452 1 2025-09-25 20:32:55.685 00:00:10.370 TCP 23.104.0.1:50652 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:33:29.089 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 20:33:28.915 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 20:33:32.175 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34262 10 6452 1 2025-09-25 20:33:56.098 00:00:10.364 TCP 23.104.0.1:45336 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:34:32.385 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57512 10 6452 1 2025-09-25 20:34:56.498 00:00:10.360 TCP 23.104.0.1:50560 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:35:32.607 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40700 10 6452 1 2025-09-25 20:35:56.898 00:00:10.367 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:32:33.526 00:05:01.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 20:36:32.829 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43648 10 6452 1 2025-09-25 20:36:57.305 00:00:10.364 TCP 23.104.0.1:59706 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:33:33.529 00:05:01.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 20:37:33.070 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53384 10 6452 1 2025-09-25 20:37:57.710 00:00:10.363 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:38:29.326 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 20:38:28.951 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 20:38:33.275 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44608 10 6452 1 2025-09-25 20:38:58.112 00:00:10.391 TCP 23.104.0.1:35390 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:39:33.495 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:44180 10 6452 1 2025-09-25 20:39:58.519 00:00:10.381 TCP 23.104.0.1:40044 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:40:33.730 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53156 10 6452 1 2025-09-25 20:40:58.924 00:00:10.388 TCP 23.104.0.1:37058 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:41:33.945 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56670 10 6452 1 2025-09-25 20:41:59.350 00:00:10.369 TCP 23.104.0.1:49608 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:38:33.525 00:05:01.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 20:42:34.177 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44584 10 6452 1 2025-09-25 20:42:59.755 00:00:10.388 TCP 23.104.0.1:46802 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:43:29.039 00:00:00.018 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 20:43:28.946 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 20:39:33.529 00:05:01.585 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 20:43:34.397 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46918 10 6452 1 2025-09-25 20:44:00.181 00:00:10.366 TCP 23.104.0.1:56894 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:44:34.625 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42942 10 6452 1 2025-09-25 20:45:00.582 00:00:10.360 TCP 23.104.0.1:54008 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:45:34.837 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60996 10 6452 1 2025-09-25 20:46:00.982 00:00:10.370 TCP 23.104.0.1:53408 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:46:35.011 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41996 10 6452 1 2025-09-25 20:47:01.394 00:00:10.367 TCP 23.104.0.1:57166 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:47:35.181 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53262 10 6452 1 2025-09-25 20:48:01.802 00:00:10.689 TCP 23.104.0.1:46100 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:48:29.279 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 20:48:29.144 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 20:44:33.527 00:05:01.590 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 20:48:35.406 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55112 10 6452 1 2025-09-25 20:49:02.528 00:00:10.366 TCP 23.104.0.1:33886 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:45:33.530 00:05:01.585 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 20:49:35.625 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46256 10 6452 1 2025-09-25 20:50:02.931 00:00:10.378 TCP 23.104.0.1:54054 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:50:35.845 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41016 10 6452 1 2025-09-25 20:51:03.347 00:00:10.323 TCP 23.104.0.1:55112 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:51:36.028 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54796 10 6452 1 2025-09-25 20:52:03.707 00:00:10.324 TCP 23.104.0.1:36226 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:52:36.201 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33014 10 6452 1 2025-09-25 20:53:04.094 00:00:10.374 TCP 23.104.0.1:45614 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:53:29.434 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 20:53:29.436 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 20:53:36.377 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:34622 10 6452 1 2025-09-25 20:54:04.498 00:00:10.324 TCP 23.104.0.1:41704 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:50:33.528 00:05:01.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 20:54:36.670 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35352 10 6452 1 2025-09-25 20:55:04.864 00:00:10.370 TCP 23.104.0.1:47750 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:51:33.530 00:05:01.586 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 20:55:36.882 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57960 10 6452 1 2025-09-25 20:56:05.275 00:00:10.364 TCP 23.104.0.1:35192 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:56:37.121 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37026 10 6452 1 2025-09-25 20:57:05.685 00:00:10.366 TCP 23.104.0.1:38294 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:57:37.335 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35664 10 6452 1 2025-09-25 20:58:06.119 00:00:10.363 TCP 23.104.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:58:29.358 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 20:58:29.617 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 20:58:37.556 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34340 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1064, avg pps: 0, avg bpp: 317 Time window: 2025-09-25 19:56:33 - 2025-09-25 20:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0019s Wall: 0.0019s flows/second: 84196.0 Runtime: 0.0020s