Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 09:59:11.650 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38084 10 6452 1 2025-09-14 09:59:30.969 00:00:10.368 TCP 23.104.0.1:37102 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:00:11.861 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57184 10 6452 1 2025-09-14 09:56:28.262 00:05:00.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 10:00:31.384 00:00:10.366 TCP 23.104.0.1:45476 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:01:12.087 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50730 10 6452 1 2025-09-14 09:57:28.265 00:05:00.942 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 10:01:31.785 00:00:10.368 TCP 23.104.0.1:46294 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:02:12.307 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55060 10 6452 1 2025-09-14 10:02:32.190 00:00:10.358 TCP 23.104.0.1:39900 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:02:58.696 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 10:02:58.831 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 10:03:12.479 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40178 10 6452 1 2025-09-14 10:03:32.590 00:00:10.365 TCP 23.104.0.1:52830 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:04:12.690 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33722 10 6452 1 2025-09-14 10:04:32.994 00:00:10.365 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:05:12.861 00:00:10.637 TCP 1.101.0.1:3000 -> 22.102.0.1:49492 10 6452 1 2025-09-14 10:05:33.396 00:00:10.370 TCP 23.104.0.1:46148 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:06:13.534 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35764 10 6452 1 2025-09-14 10:02:28.265 00:05:00.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 10:06:33.798 00:00:10.373 TCP 23.104.0.1:55562 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:07:13.759 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43262 10 6452 1 2025-09-14 10:03:28.267 00:05:00.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 10:07:34.210 00:00:10.327 TCP 23.104.0.1:57000 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:07:58.728 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 10:07:58.873 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 10:08:13.970 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54108 10 6452 1 2025-09-14 10:08:34.568 00:00:10.372 TCP 23.104.0.1:55598 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:09:14.209 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43020 10 6452 1 2025-09-14 10:09:34.982 00:00:10.343 TCP 23.104.0.1:55742 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:10:14.381 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45618 10 6452 1 2025-09-14 10:10:35.366 00:00:10.369 TCP 23.104.0.1:55612 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:11:14.586 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39692 10 6452 1 2025-09-14 10:11:35.770 00:00:10.373 TCP 23.104.0.1:58882 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:12:14.795 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52524 10 6452 1 2025-09-14 10:08:28.265 00:05:00.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 10:12:36.181 00:00:10.370 TCP 23.104.0.1:52896 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:12:59.012 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 10:12:59.062 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 10:13:15.010 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41166 10 6452 1 2025-09-14 10:09:28.268 00:05:00.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 10:13:36.583 00:00:10.328 TCP 23.104.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:14:15.222 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59022 10 6452 1 2025-09-14 10:14:36.945 00:00:10.372 TCP 23.104.0.1:59346 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:15:15.434 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58530 10 6452 1 2025-09-14 10:15:37.355 00:00:10.363 TCP 23.104.0.1:50610 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:16:15.648 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43608 10 6452 1 2025-09-14 10:16:37.766 00:00:10.373 TCP 23.104.0.1:55834 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:17:15.861 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48364 10 6452 1 2025-09-14 10:17:38.176 00:00:10.365 TCP 23.104.0.1:60548 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:17:58.950 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 10:17:59.049 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 10:18:16.084 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46118 10 6452 1 2025-09-14 10:14:28.269 00:05:00.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 10:18:38.579 00:00:10.325 TCP 23.104.0.1:37492 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:19:16.298 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48612 10 6452 1 2025-09-14 10:15:28.272 00:05:00.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 10:19:38.950 00:00:10.365 TCP 23.104.0.1:46628 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:20:16.510 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49928 10 6452 1 2025-09-14 10:20:39.356 00:00:10.364 TCP 23.104.0.1:51888 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:21:16.718 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37958 10 6452 1 2025-09-14 10:21:39.761 00:00:10.337 TCP 23.104.0.1:50058 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:22:16.923 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60992 10 6452 1 2025-09-14 10:22:40.137 00:00:10.370 TCP 23.104.0.1:58582 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:22:58.933 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 10:22:59.302 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 10:23:17.163 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34846 10 6452 1 2025-09-14 10:23:40.544 00:00:10.373 TCP 23.104.0.1:51500 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:20:28.270 00:05:00.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 10:24:17.373 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:46556 12 10367 1 2025-09-14 10:24:40.952 00:00:10.441 TCP 23.104.0.1:60826 -> 1.101.0.1:3000 15 1926 1 2025-09-14 10:25:17.621 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:41536 10 6452 1 2025-09-14 10:21:28.273 00:05:00.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 10:25:41.438 00:00:10.358 TCP 23.104.0.1:41986 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:26:17.844 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45234 10 6452 1 2025-09-14 10:26:41.835 00:00:10.390 TCP 23.104.0.1:59906 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:27:18.049 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39386 10 6452 1 2025-09-14 10:27:42.264 00:00:10.433 TCP 23.104.0.1:34992 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:27:59.361 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 10:27:59.200 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 10:28:18.278 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44466 10 6452 1 2025-09-14 10:28:42.733 00:00:10.368 TCP 23.104.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:29:18.482 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33948 10 6452 1 2025-09-14 10:29:43.137 00:00:10.367 TCP 23.104.0.1:52288 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:30:18.693 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59868 10 6452 1 2025-09-14 10:26:28.271 00:05:00.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 10:30:43.543 00:00:10.327 TCP 23.104.0.1:39844 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:31:18.907 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41878 10 6452 1 2025-09-14 10:27:28.280 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 10:31:43.904 00:00:10.366 TCP 23.104.0.1:54104 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:32:19.131 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53058 10 6452 1 2025-09-14 10:32:44.315 00:00:10.369 TCP 23.104.0.1:53558 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:32:59.913 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 10:33:00.160 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 10:33:19.341 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57786 10 6452 1 2025-09-14 10:33:44.722 00:00:10.379 TCP 23.104.0.1:54188 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:34:19.555 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57146 10 6452 1 2025-09-14 10:34:45.139 00:00:10.366 TCP 23.104.0.1:50486 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:35:19.764 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44302 10 6452 1 2025-09-14 10:35:45.545 00:00:10.360 TCP 23.104.0.1:37344 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:36:19.938 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60822 10 6452 1 2025-09-14 10:32:28.278 00:05:00.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 10:36:45.945 00:00:10.371 TCP 23.104.0.1:52286 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:33:28.280 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 10:37:20.178 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58844 10 6452 1 2025-09-14 10:37:46.356 00:00:10.366 TCP 23.104.0.1:46162 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:37:59.518 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 10:37:59.361 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 10:38:20.394 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60584 10 6452 1 2025-09-14 10:38:46.761 00:00:10.376 TCP 23.104.0.1:54634 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:39:20.607 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47628 12 10367 1 2025-09-14 10:39:47.169 00:00:10.439 TCP 23.104.0.1:57744 -> 1.101.0.1:3000 15 1926 1 2025-09-14 10:40:20.842 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40842 10 6452 1 2025-09-14 10:40:47.648 00:00:10.367 TCP 23.104.0.1:59058 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:41:21.026 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52876 10 6452 1 2025-09-14 10:41:48.057 00:00:10.366 TCP 23.104.0.1:52512 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:38:28.278 00:05:00.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 10:42:21.239 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46006 10 6452 1 2025-09-14 10:42:59.620 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 10:42:59.581 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 10:42:48.461 00:00:10.364 TCP 23.104.0.1:47178 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:39:28.281 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 10:43:21.453 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35740 10 6452 1 2025-09-14 10:43:48.862 00:00:10.371 TCP 23.104.0.1:35896 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:44:21.665 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41418 10 6452 1 2025-09-14 10:44:49.271 00:00:10.374 TCP 23.104.0.1:53206 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:45:21.888 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51496 10 6452 1 2025-09-14 10:45:49.682 00:00:10.336 TCP 23.104.0.1:35376 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:46:22.104 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33618 10 6452 1 2025-09-14 10:46:50.059 00:00:10.369 TCP 23.104.0.1:44992 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:47:22.282 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39610 10 6452 1 2025-09-14 10:47:59.472 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 10:47:59.661 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 10:47:50.467 00:00:10.368 TCP 23.104.0.1:37990 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:44:28.280 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 10:48:22.498 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39452 10 6452 1 2025-09-14 10:48:50.876 00:00:10.364 TCP 23.104.0.1:58206 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:45:28.284 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 10:49:22.714 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38226 10 6452 1 2025-09-14 10:49:51.280 00:00:10.368 TCP 23.104.0.1:53138 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:50:22.929 00:00:10.760 TCP 1.101.0.1:3000 -> 22.102.0.1:57492 10 6452 1 2025-09-14 10:50:51.690 00:00:10.375 TCP 23.104.0.1:54734 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:51:23.729 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-09-14 10:51:52.116 00:00:10.363 TCP 23.104.0.1:41194 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:52:23.954 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:52234 12 6556 1 2025-09-14 10:52:59.848 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 10:53:00.046 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 10:52:52.516 00:00:10.595 TCP 23.104.0.1:38982 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:53:24.204 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43534 10 6452 1 2025-09-14 10:53:53.145 00:00:10.364 TCP 23.104.0.1:36646 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:50:28.281 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 10:54:24.418 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51242 10 6452 1 2025-09-14 10:54:53.547 00:00:10.365 TCP 23.104.0.1:40620 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:51:28.283 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 10:55:24.630 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49936 10 6452 1 2025-09-14 10:55:53.949 00:00:10.364 TCP 23.104.0.1:39412 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:56:24.845 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41854 10 6452 1 2025-09-14 10:56:54.354 00:00:10.322 TCP 23.104.0.1:51904 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:57:25.079 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53090 10 6452 1 2025-09-14 10:57:59.789 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 10:57:59.988 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 10:57:54.713 00:00:10.325 TCP 23.104.0.1:50792 -> 1.101.0.1:3000 11 1507 1 2025-09-14 10:58:25.288 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35924 10 6452 1 Summary: total flows: 163, total bytes: 505613, total packets: 1575, avg bps: 1085, avg pps: 0, avg bpp: 321 Time window: 2025-09-14 09:56:28 - 2025-09-14 10:58:35 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0010s Wall: 0.0025s flows/second: 64582.6 Runtime: 0.0025s