Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 18:59:04.766 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37486 10 6452 1 2025-09-14 18:59:30.377 00:00:10.360 TCP 23.104.0.1:48554 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:00:04.979 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 10 6452 1 2025-09-14 18:56:28.431 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 19:00:30.775 00:00:10.372 TCP 23.104.0.1:60748 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:01:05.214 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33318 10 6452 1 2025-09-14 18:57:28.434 00:05:00.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 19:01:31.184 00:00:10.363 TCP 23.104.0.1:33270 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:02:05.433 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37638 10 6452 1 2025-09-14 19:02:31.585 00:00:10.365 TCP 23.104.0.1:48368 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:03:09.716 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 19:03:09.476 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 19:03:05.650 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56744 10 6452 1 2025-09-14 19:03:31.986 00:00:10.365 TCP 23.104.0.1:46774 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:04:05.857 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41440 10 6452 1 2025-09-14 19:04:32.389 00:00:10.363 TCP 23.104.0.1:36184 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:05:06.083 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43056 10 6452 1 2025-09-14 19:05:32.790 00:00:10.375 TCP 23.104.0.1:38962 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:06:06.305 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58578 10 6452 1 2025-09-14 19:02:28.432 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 19:06:33.202 00:00:10.537 TCP 23.104.0.1:46952 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:07:06.518 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59966 10 6452 1 2025-09-14 19:03:28.436 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 19:07:33.775 00:00:10.368 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:08:09.721 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 19:08:09.759 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 19:08:06.728 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46998 10 6452 1 2025-09-14 19:08:34.183 00:00:10.369 TCP 23.104.0.1:51122 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:09:06.942 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:46002 10 6452 1 2025-09-14 19:09:34.589 00:00:10.360 TCP 23.104.0.1:37984 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:10:07.143 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56530 10 6452 1 2025-09-14 19:10:34.987 00:00:10.371 TCP 23.104.0.1:35080 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:11:07.359 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48086 10 6452 1 2025-09-14 19:11:35.396 00:00:10.366 TCP 23.104.0.1:59404 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:12:07.583 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42444 10 6452 1 2025-09-14 19:08:28.433 00:05:00.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 19:12:35.809 00:00:10.378 TCP 23.104.0.1:54748 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:13:09.854 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 19:13:09.759 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 19:13:07.792 00:00:10.914 TCP 1.101.0.1:3000 -> 22.102.0.1:59958 10 6452 1 2025-09-14 19:09:28.437 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 19:13:36.230 00:00:10.363 TCP 23.104.0.1:44612 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:14:08.754 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59574 10 6452 1 2025-09-14 19:14:36.635 00:00:10.368 TCP 23.104.0.1:39784 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:15:08.962 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:56442 13 6608 1 2025-09-14 19:15:37.043 00:00:10.363 TCP 23.104.0.1:57618 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:16:09.224 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-09-14 19:16:37.450 00:00:10.363 TCP 23.104.0.1:59954 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:17:09.400 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52888 10 6452 1 2025-09-14 19:17:37.861 00:00:10.364 TCP 23.104.0.1:57422 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:18:09.893 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 19:18:10.013 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 19:18:09.582 00:00:10.634 TCP 1.101.0.1:3000 -> 22.102.0.1:35952 10 6452 1 2025-09-14 19:14:28.436 00:05:00.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 19:18:38.269 00:00:10.331 TCP 23.104.0.1:54254 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:19:10.257 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34378 10 6452 1 2025-09-14 19:15:28.439 00:05:00.932 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 19:19:38.631 00:00:10.365 TCP 23.104.0.1:40684 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:20:10.472 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38886 10 6452 1 2025-09-14 19:20:39.035 00:00:10.322 TCP 23.104.0.1:33144 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:21:10.691 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48792 10 6452 1 2025-09-14 19:21:39.395 00:00:10.362 TCP 23.104.0.1:43500 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:22:10.914 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43058 10 6452 1 2025-09-14 19:22:39.795 00:00:10.345 TCP 23.104.0.1:34460 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:23:09.919 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 19:23:09.829 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 19:23:11.126 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35876 10 6452 1 2025-09-14 19:23:40.176 00:00:10.372 TCP 23.104.0.1:46164 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:24:11.307 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:41128 12 10365 1 2025-09-14 19:20:28.435 00:05:00.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 19:24:40.580 00:00:10.442 TCP 23.104.0.1:44118 -> 1.101.0.1:3000 15 1926 1 2025-09-14 19:25:11.546 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39304 10 6452 1 2025-09-14 19:21:28.438 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 19:25:41.068 00:00:10.326 TCP 23.104.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:26:11.768 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56566 10 6452 1 2025-09-14 19:26:41.428 00:00:10.368 TCP 23.104.0.1:34996 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:27:11.989 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:36566 10 6452 1 2025-09-14 19:27:41.827 00:00:10.350 TCP 23.104.0.1:41716 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:28:10.146 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 19:28:10.159 00:00:00.012 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 19:28:12.178 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:48922 10 6452 1 2025-09-14 19:28:42.213 00:00:10.366 TCP 23.104.0.1:49320 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:29:12.366 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43410 10 6452 1 2025-09-14 19:29:42.615 00:00:10.365 TCP 23.104.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:30:12.539 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50254 10 6452 1 2025-09-14 19:26:28.436 00:05:00.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 19:30:43.020 00:00:10.323 TCP 23.104.0.1:45852 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:31:12.755 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46950 10 6452 1 2025-09-14 19:27:28.440 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 19:31:43.382 00:00:10.363 TCP 23.104.0.1:41222 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:32:12.972 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-09-14 19:32:43.784 00:00:10.363 TCP 23.104.0.1:58346 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:33:10.313 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 19:33:10.352 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 19:33:13.203 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56612 10 6452 1 2025-09-14 19:33:44.186 00:00:10.318 TCP 23.104.0.1:37502 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:34:13.422 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44608 10 6452 1 2025-09-14 19:34:44.551 00:00:10.363 TCP 23.104.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:35:13.634 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55464 10 6452 1 2025-09-14 19:35:44.951 00:00:10.370 TCP 23.104.0.1:50170 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:36:13.845 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41204 10 6452 1 2025-09-14 19:32:28.440 00:05:00.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 19:36:45.361 00:00:10.324 TCP 23.104.0.1:51534 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:37:14.085 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43920 10 6452 1 2025-09-14 19:33:28.443 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 19:37:45.725 00:00:10.369 TCP 23.104.0.1:56812 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:38:10.652 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 19:38:10.314 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 19:38:14.261 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51412 10 6452 1 2025-09-14 19:38:46.131 00:00:10.365 TCP 23.104.0.1:55236 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:39:14.482 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35690 10 6452 1 2025-09-14 19:39:46.532 00:00:10.363 TCP 23.104.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:40:14.701 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44288 10 6452 1 2025-09-14 19:40:46.939 00:00:10.377 TCP 23.104.0.1:35574 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:41:14.874 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43498 10 6452 1 2025-09-14 19:41:47.358 00:00:10.367 TCP 23.104.0.1:41334 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:42:15.077 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39214 10 6452 1 2025-09-14 19:38:28.442 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 19:42:47.770 00:00:10.330 TCP 23.104.0.1:51114 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:43:10.486 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 19:43:10.506 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 19:43:15.282 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59708 10 6452 1 2025-09-14 19:39:28.446 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 19:43:48.142 00:00:10.369 TCP 23.104.0.1:42262 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:44:15.454 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38664 10 6452 1 2025-09-14 19:44:48.552 00:00:10.330 TCP 23.104.0.1:58234 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:45:15.667 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51080 10 6452 1 2025-09-14 19:45:48.930 00:00:10.385 TCP 23.104.0.1:59278 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:46:15.832 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42998 10 6452 1 2025-09-14 19:46:49.353 00:00:10.366 TCP 23.104.0.1:57252 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:47:16.077 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47454 10 6452 1 2025-09-14 19:47:49.759 00:00:10.344 TCP 23.104.0.1:37506 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:48:10.381 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 19:48:10.457 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 19:48:16.295 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56368 10 6452 1 2025-09-14 19:44:28.443 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 19:48:50.139 00:00:10.366 TCP 23.104.0.1:51204 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:49:16.501 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46912 10 6452 1 2025-09-14 19:45:28.447 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 19:49:50.543 00:00:10.672 TCP 23.104.0.1:58044 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:50:16.718 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45010 10 6452 1 2025-09-14 19:50:51.256 00:00:10.368 TCP 23.104.0.1:56296 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:51:16.933 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34862 10 6452 1 2025-09-14 19:51:51.663 00:00:10.324 TCP 23.104.0.1:57192 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:52:17.170 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55048 10 6452 1 2025-09-14 19:52:52.037 00:00:10.324 TCP 23.104.0.1:58850 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:53:10.675 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 19:53:10.667 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 19:53:17.341 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40636 10 6452 1 2025-09-14 19:53:52.400 00:00:10.365 TCP 23.104.0.1:57924 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:54:17.547 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:46406 10 6452 1 2025-09-14 19:50:28.444 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 19:54:52.809 00:00:17.592 TCP 23.104.0.1:54750 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:55:17.717 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54950 10 6452 1 2025-09-14 19:51:28.447 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 19:56:00.441 00:00:10.364 TCP 23.104.0.1:48922 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:56:17.934 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:56356 10 6452 1 2025-09-14 19:57:00.840 00:00:10.389 TCP 23.104.0.1:38218 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:57:18.132 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48194 10 6452 1 2025-09-14 19:58:10.664 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 19:58:01.273 00:00:10.362 TCP 23.104.0.1:40320 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:58:10.840 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 19:58:18.349 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38016 10 6452 1 Summary: total flows: 163, total bytes: 501329, total packets: 1570, avg bps: 1078, avg pps: 0, avg bpp: 319 Time window: 2025-09-14 18:56:28 - 2025-09-14 19:58:28 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0048s User: 0.0000s Wall: 0.0022s flows/second: 75046.3 Runtime: 0.0022s