Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 11:58:57.884 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56858 10 6661 1 2025-09-14 11:59:21.786 00:00:10.363 TCP 23.104.0.1:36386 -> 1.101.0.1:3000 11 1507 1 2025-09-14 11:59:58.111 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39620 10 6661 1 2025-09-14 11:56:28.298 00:05:00.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 12:00:22.189 00:00:10.362 TCP 23.104.0.1:37980 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:00:58.324 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40510 10 6661 1 2025-09-14 11:57:28.302 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 12:01:22.589 00:00:10.367 TCP 23.104.0.1:44706 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:01:58.535 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44742 10 6661 1 2025-09-14 12:02:22.996 00:00:10.366 TCP 23.104.0.1:36284 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:03:01.235 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 12:03:01.366 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 12:02:58.706 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53378 10 6661 1 2025-09-14 12:03:23.396 00:00:10.366 TCP 23.104.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:03:58.923 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:34634 10 6661 1 2025-09-14 12:04:23.798 00:00:10.364 TCP 23.104.0.1:47224 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:04:59.173 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47964 10 6661 1 2025-09-14 12:05:24.198 00:00:10.375 TCP 23.104.0.1:48590 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:05:59.392 00:00:10.678 TCP 1.101.0.1:3000 -> 22.102.0.1:52292 10 6661 1 2025-09-14 12:02:28.298 00:05:00.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 12:06:24.623 00:00:10.368 TCP 23.104.0.1:58154 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:07:00.110 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49506 10 6661 1 2025-09-14 12:03:28.301 00:05:00.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 12:07:25.029 00:00:10.369 TCP 23.104.0.1:55300 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:08:01.194 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 12:08:01.212 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 12:08:00.282 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 10 6661 1 2025-09-14 12:08:25.437 00:00:10.380 TCP 23.104.0.1:49250 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:09:00.507 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:48908 12 10783 1 2025-09-14 12:09:25.866 00:00:10.405 TCP 23.104.0.1:33812 -> 1.101.0.1:3000 15 1926 1 2025-09-14 12:10:00.760 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:54110 10 6870 1 2025-09-14 12:10:26.312 00:00:10.323 TCP 23.104.0.1:37332 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:11:01.016 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48530 10 6870 1 2025-09-14 12:11:26.674 00:00:10.325 TCP 23.104.0.1:59130 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:12:01.232 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:41730 10 6870 1 2025-09-14 12:08:28.300 00:05:00.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 12:12:27.048 00:00:10.325 TCP 23.104.0.1:58598 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:13:01.320 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 12:13:01.363 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 12:13:01.469 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43296 10 6870 1 2025-09-14 12:09:28.308 00:05:00.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 12:13:27.415 00:00:10.360 TCP 23.104.0.1:47430 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:14:01.687 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36778 10 6870 1 2025-09-14 12:14:27.817 00:00:12.657 TCP 23.104.0.1:39450 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:15:01.913 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47732 10 6870 1 2025-09-14 12:15:30.532 00:00:10.324 TCP 23.104.0.1:38276 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:16:02.129 00:00:10.314 TCP 1.101.0.1:3000 -> 22.102.0.1:48780 10 6870 1 2025-09-14 12:16:30.889 00:00:10.366 TCP 23.104.0.1:33682 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:17:02.485 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44120 10 6870 1 2025-09-14 12:17:31.296 00:00:10.363 TCP 23.104.0.1:37264 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:18:01.622 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 12:18:01.439 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 12:18:02.707 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56422 10 6870 1 2025-09-14 12:14:28.305 00:05:00.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 12:18:31.698 00:00:10.622 TCP 23.104.0.1:44866 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:19:02.930 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:36442 10 6870 1 2025-09-14 12:15:28.307 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 12:19:32.365 00:00:10.362 TCP 23.104.0.1:59292 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:20:03.179 00:00:10.369 TCP 1.101.0.1:3000 -> 22.102.0.1:34866 10 6870 1 2025-09-14 12:20:32.767 00:00:10.323 TCP 23.104.0.1:38938 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:21:03.592 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46124 10 6870 1 2025-09-14 12:21:33.126 00:00:10.369 TCP 23.104.0.1:57470 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:22:03.809 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35872 10 6870 1 2025-09-14 12:22:33.534 00:00:10.361 TCP 23.104.0.1:42312 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:23:01.525 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 12:23:01.435 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 12:23:04.037 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33404 10 6870 1 2025-09-14 12:23:33.939 00:00:10.374 TCP 23.104.0.1:54524 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:24:04.263 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60016 10 6870 1 2025-09-14 12:20:28.306 00:05:00.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 12:24:34.357 00:00:10.367 TCP 23.104.0.1:41196 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:25:04.478 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37296 10 6870 1 2025-09-14 12:21:28.309 00:05:00.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 12:25:34.762 00:00:10.374 TCP 23.104.0.1:58360 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:26:04.697 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53048 10 6870 1 2025-09-14 12:26:35.175 00:00:10.318 TCP 23.104.0.1:36728 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:27:04.906 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57668 10 6870 1 2025-09-14 12:27:35.535 00:00:10.330 TCP 23.104.0.1:49552 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:28:01.719 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 12:28:01.591 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 12:28:05.122 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60702 10 6870 1 2025-09-14 12:28:35.904 00:00:10.331 TCP 23.104.0.1:58564 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:29:05.297 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34168 10 6870 1 2025-09-14 12:29:36.266 00:00:10.320 TCP 23.104.0.1:52028 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:30:05.520 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:57248 10 6870 1 2025-09-14 12:26:28.307 00:05:00.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 12:30:36.620 00:00:10.366 TCP 23.104.0.1:35776 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:31:05.762 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39806 10 6870 1 2025-09-14 12:27:28.311 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 12:31:37.026 00:00:10.420 TCP 23.104.0.1:40536 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:32:05.942 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:42486 10 6870 1 2025-09-14 12:32:37.489 00:00:10.374 TCP 23.104.0.1:51024 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:33:01.809 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 12:33:01.944 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 12:33:06.188 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43606 10 6870 1 2025-09-14 12:33:37.897 00:00:10.375 TCP 23.104.0.1:55884 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:34:06.411 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33290 10 6870 1 2025-09-14 12:34:38.309 00:00:10.366 TCP 23.104.0.1:49986 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:35:06.635 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57908 10 6870 1 2025-09-14 12:35:38.715 00:00:10.324 TCP 23.104.0.1:37678 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:36:06.850 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50434 10 6870 1 2025-09-14 12:32:28.310 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 12:36:39.117 00:00:10.369 TCP 23.104.0.1:42028 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:37:07.085 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58158 10 6870 1 2025-09-14 12:33:28.312 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 12:37:39.524 00:00:10.368 TCP 23.104.0.1:35616 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:38:01.950 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 12:38:01.960 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 12:38:07.313 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50104 10 6870 1 2025-09-14 12:38:39.929 00:00:10.385 TCP 23.104.0.1:44246 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:39:07.533 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46048 10 6870 1 2025-09-14 12:39:40.356 00:00:10.361 TCP 23.104.0.1:60478 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:40:07.747 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51792 10 6870 1 2025-09-14 12:40:40.760 00:00:10.371 TCP 23.104.0.1:42906 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:41:07.961 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51092 12 6974 1 2025-09-14 12:41:41.171 00:00:10.362 TCP 23.104.0.1:42008 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:42:08.193 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39278 10 6870 1 2025-09-14 12:38:28.311 00:05:00.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 12:42:41.568 00:00:10.362 TCP 23.104.0.1:34992 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:43:01.891 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 12:43:01.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 12:43:08.416 00:00:10.523 TCP 1.101.0.1:3000 -> 22.102.0.1:42418 10 6870 1 2025-09-14 12:39:28.314 00:05:00.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 12:43:41.970 00:00:10.363 TCP 23.104.0.1:33974 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:44:08.978 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:44306 10 6870 1 2025-09-14 12:44:42.375 00:00:10.366 TCP 23.104.0.1:33106 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:45:09.227 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59970 10 6870 1 2025-09-14 12:45:42.783 00:00:10.324 TCP 23.104.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:46:09.466 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40664 10 6870 1 2025-09-14 12:46:43.146 00:00:10.386 TCP 23.104.0.1:41554 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:47:09.684 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59154 10 6870 1 2025-09-14 12:47:43.570 00:00:10.366 TCP 23.104.0.1:39168 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:48:02.194 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 12:48:02.146 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 12:48:09.919 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37224 10 6870 1 2025-09-14 12:44:28.316 00:05:00.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 12:48:43.971 00:00:10.371 TCP 23.104.0.1:33634 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:49:10.134 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43266 10 6870 1 2025-09-14 12:45:28.318 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 12:49:44.390 00:00:10.377 TCP 23.104.0.1:51164 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:50:10.321 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42198 10 6870 1 2025-09-14 12:50:44.816 00:00:10.368 TCP 23.104.0.1:54266 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:51:10.541 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60608 10 6870 1 2025-09-14 12:51:45.223 00:00:10.369 TCP 23.104.0.1:42600 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:52:10.764 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39666 10 6870 1 2025-09-14 12:52:45.631 00:00:10.328 TCP 23.104.0.1:54878 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:53:02.157 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 12:53:02.104 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 12:53:10.982 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:43872 10 6870 1 2025-09-14 12:53:46.003 00:00:10.369 TCP 23.104.0.1:53144 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:54:11.231 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54648 10 6870 1 2025-09-14 12:50:28.317 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 12:54:46.411 00:00:10.366 TCP 23.104.0.1:58892 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:55:11.443 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54864 10 6870 1 2025-09-14 12:51:28.320 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 12:55:46.817 00:00:10.367 TCP 23.104.0.1:46530 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:56:11.666 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37624 10 6870 1 2025-09-14 12:56:47.219 00:00:10.363 TCP 23.104.0.1:60984 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:57:11.877 00:00:10.340 TCP 1.101.0.1:3000 -> 22.102.0.1:56434 10 6870 1 2025-09-14 12:57:47.620 00:00:10.363 TCP 23.104.0.1:55696 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:58:02.335 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 12:58:02.470 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 12:58:12.254 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58498 10 6870 1 Summary: total flows: 163, total bytes: 524267, total packets: 1569, avg bps: 1129, avg pps: 0, avg bpp: 334 Time window: 2025-09-14 11:56:28 - 2025-09-14 12:58:22 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0007s Wall: 0.0023s flows/second: 70474.3 Runtime: 0.0023s