Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 05:58:37.108 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49864 10 6452 1 2025-09-16 05:58:52.009 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 05:59:32.110 00:00:10.366 TCP 23.104.0.1:37682 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:59:37.326 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58450 10 6452 1 2025-09-16 05:56:29.082 00:05:01.079 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 06:00:32.510 00:00:10.324 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:00:37.553 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34058 10 6452 1 2025-09-16 05:57:29.084 00:05:01.073 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 06:01:32.879 00:00:10.384 TCP 23.104.0.1:57700 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:01:37.766 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37142 10 6452 1 2025-09-16 06:02:33.299 00:00:10.362 TCP 23.104.0.1:38860 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:02:37.977 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:40146 13 6608 1 2025-09-16 06:03:33.704 00:00:10.366 TCP 23.104.0.1:60486 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:03:38.224 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51780 10 6452 1 2025-09-16 06:03:52.101 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 06:03:52.012 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 06:04:34.108 00:00:10.363 TCP 23.104.0.1:48176 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:04:38.436 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58268 10 6452 1 2025-09-16 06:05:34.505 00:00:10.366 TCP 23.104.0.1:54748 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:05:38.643 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39166 10 6452 1 2025-09-16 06:02:29.083 00:05:01.079 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 06:06:34.907 00:00:10.369 TCP 23.104.0.1:54000 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:06:38.852 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52834 10 6452 1 2025-09-16 06:03:29.085 00:05:01.074 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 06:07:35.315 00:00:10.418 TCP 23.104.0.1:53012 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:07:39.077 00:00:10.544 TCP 1.101.0.1:3000 -> 22.102.0.1:45784 10 6452 1 2025-09-16 06:08:35.773 00:00:10.812 TCP 23.104.0.1:57474 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:08:39.657 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51726 10 6452 1 2025-09-16 06:08:51.485 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 06:08:51.718 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 06:09:36.625 00:00:10.374 TCP 23.104.0.1:45408 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:09:39.834 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50522 10 6452 1 2025-09-16 06:10:40.072 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39508 10 6452 1 2025-09-16 06:10:37.048 00:00:10.364 TCP 23.104.0.1:44546 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:11:40.285 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49094 10 6452 1 2025-09-16 06:11:37.452 00:00:10.362 TCP 23.104.0.1:52856 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:08:29.084 00:05:01.079 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 06:12:37.854 00:00:10.379 TCP 23.104.0.1:41114 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:12:40.505 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40628 10 6452 1 2025-09-16 06:09:29.087 00:05:01.074 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 06:13:38.269 00:00:10.367 TCP 23.104.0.1:57632 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:13:51.896 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 06:13:40.716 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43436 10 6452 1 2025-09-16 06:13:52.007 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 06:14:38.677 00:00:10.362 TCP 23.104.0.1:35516 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:14:40.894 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45582 10 6452 1 2025-09-16 06:15:39.104 00:00:10.373 TCP 23.104.0.1:48560 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:15:41.107 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53438 10 6452 1 2025-09-16 06:16:39.514 00:00:10.366 TCP 23.104.0.1:56894 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:16:41.334 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39110 10 6452 1 2025-09-16 06:17:39.922 00:00:10.373 TCP 23.104.0.1:60128 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:17:41.557 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:35976 10 6452 1 2025-09-16 06:14:29.084 00:05:01.080 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 06:18:40.331 00:00:10.320 TCP 23.104.0.1:49704 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:18:51.813 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 06:18:41.815 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49456 10 6452 1 2025-09-16 06:18:51.841 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 06:15:29.086 00:05:01.076 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 06:19:40.692 00:00:10.443 TCP 23.104.0.1:54524 -> 1.101.0.1:3000 15 1926 1 2025-09-16 06:19:42.039 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:53176 12 10365 1 2025-09-16 06:20:41.174 00:00:10.369 TCP 23.104.0.1:44304 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:20:42.291 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53524 10 6452 1 2025-09-16 06:21:41.578 00:00:10.362 TCP 23.104.0.1:57092 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:21:42.511 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41854 10 6452 1 2025-09-16 06:22:41.981 00:00:10.334 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:22:42.732 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55442 10 6452 1 2025-09-16 06:23:42.946 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:50528 10 6452 1 2025-09-16 06:23:52.102 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 06:23:42.357 00:00:10.364 TCP 23.104.0.1:49808 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:23:52.381 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 06:20:29.084 00:05:01.085 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 06:24:42.759 00:00:10.456 TCP 23.104.0.1:48990 -> 1.101.0.1:3000 15 1926 1 2025-09-16 06:24:43.189 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:33222 12 10367 1 2025-09-16 06:21:29.087 00:05:01.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 06:25:43.440 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52176 10 6452 1 2025-09-16 06:25:43.252 00:00:10.363 TCP 23.104.0.1:55334 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:26:43.660 00:00:10.369 TCP 23.104.0.1:48166 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:26:43.655 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43010 10 6452 1 2025-09-16 06:27:44.091 00:00:10.330 TCP 23.104.0.1:45808 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:27:43.878 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:53294 10 6452 1 2025-09-16 06:28:52.372 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 06:28:44.110 00:00:10.380 TCP 1.101.0.1:3000 -> 22.102.0.1:37650 10 6452 1 2025-09-16 06:28:52.290 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 06:28:44.460 00:00:10.364 TCP 23.104.0.1:60500 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:29:44.857 00:00:10.371 TCP 23.104.0.1:52076 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:29:44.528 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40480 10 6452 1 2025-09-16 06:26:29.086 00:05:01.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 06:30:45.265 00:00:10.361 TCP 23.104.0.1:41050 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:30:44.734 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 10 6452 1 2025-09-16 06:27:29.090 00:05:01.084 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 06:31:44.948 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:40760 10 6452 1 2025-09-16 06:31:45.662 00:00:10.364 TCP 23.104.0.1:37230 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:32:46.093 00:00:10.364 TCP 23.104.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:32:45.183 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53090 10 6452 1 2025-09-16 06:33:45.390 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37088 10 6452 1 2025-09-16 06:33:52.429 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 06:33:46.496 00:00:10.364 TCP 23.104.0.1:42776 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:33:52.440 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 06:34:45.598 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33594 10 6452 1 2025-09-16 06:34:46.897 00:00:10.664 TCP 23.104.0.1:45382 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:35:45.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60246 10 6452 1 2025-09-16 06:35:47.600 00:00:10.366 TCP 23.104.0.1:34232 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:32:29.088 00:05:01.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 06:36:46.028 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43460 10 6452 1 2025-09-16 06:36:48.006 00:00:10.363 TCP 23.104.0.1:60578 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:33:29.092 00:05:01.086 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 06:37:46.244 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-09-16 06:37:48.410 00:00:10.371 TCP 23.104.0.1:59786 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:38:46.452 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41466 10 6452 1 2025-09-16 06:38:52.500 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 06:38:52.563 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 06:38:48.818 00:00:10.362 TCP 23.104.0.1:46590 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:39:46.661 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54806 10 6452 1 2025-09-16 06:39:49.217 00:00:10.784 TCP 23.104.0.1:39102 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:40:50.044 00:00:10.362 TCP 23.104.0.1:44018 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:40:46.893 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60684 10 6452 1 2025-09-16 06:41:47.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55500 10 6452 1 2025-09-16 06:41:50.446 00:00:10.364 TCP 23.104.0.1:48856 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:38:29.092 00:05:01.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 06:42:50.857 00:00:10.374 TCP 23.104.0.1:42716 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:42:47.299 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53578 10 6452 1 2025-09-16 06:39:29.092 00:05:01.086 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 06:43:53.086 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 06:43:52.704 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 06:43:47.523 00:00:10.501 TCP 1.101.0.1:3000 -> 22.102.0.1:60582 10 6452 1 2025-09-16 06:43:51.275 00:00:10.360 TCP 23.104.0.1:59430 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:44:48.070 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55128 10 6452 1 2025-09-16 06:44:51.673 00:00:10.367 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:45:48.308 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52666 10 6452 1 2025-09-16 06:45:52.105 00:00:10.370 TCP 23.104.0.1:46082 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:46:48.532 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34732 10 6452 1 2025-09-16 06:46:52.517 00:00:10.374 TCP 23.104.0.1:46218 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:47:48.760 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55508 10 6452 1 2025-09-16 06:47:52.929 00:00:10.436 TCP 23.104.0.1:50852 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:44:29.092 00:05:01.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 06:48:52.678 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 06:48:52.589 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 06:48:48.981 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48662 10 6452 1 2025-09-16 06:48:53.413 00:00:10.372 TCP 23.104.0.1:35444 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:45:29.095 00:05:01.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 06:49:49.217 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52040 10 6452 1 2025-09-16 06:49:53.828 00:00:10.390 TCP 23.104.0.1:55408 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:50:49.382 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38126 10 6452 1 2025-09-16 06:50:54.252 00:00:10.363 TCP 23.104.0.1:39294 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:51:49.603 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54872 10 6452 1 2025-09-16 06:51:54.656 00:00:10.363 TCP 23.104.0.1:34868 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:52:49.824 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53258 10 6452 1 2025-09-16 06:52:55.066 00:00:10.364 TCP 23.104.0.1:40270 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:53:52.642 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 06:53:52.781 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 06:53:50.066 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51200 10 6452 1 2025-09-16 06:53:55.470 00:00:10.363 TCP 23.104.0.1:43992 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:50:29.094 00:05:01.092 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 06:54:50.281 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37722 10 6452 1 2025-09-16 06:54:55.870 00:00:10.328 TCP 23.104.0.1:38328 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:51:29.095 00:05:01.086 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 06:55:50.493 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38360 10 6452 1 2025-09-16 06:55:56.234 00:00:10.323 TCP 23.104.0.1:52528 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:56:50.705 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57812 10 6452 1 2025-09-16 06:56:56.596 00:00:10.321 TCP 23.104.0.1:60860 -> 1.101.0.1:3000 11 1507 1 2025-09-16 06:57:50.914 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52258 11 6775 1 2025-09-16 06:57:56.960 00:00:10.330 TCP 23.104.0.1:40144 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 505734, total packets: 1574, avg bps: 1094, avg pps: 0, avg bpp: 321 Time window: 2025-09-16 05:56:29 - 2025-09-16 06:58:07 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0032s User: 0.0016s Wall: 0.0023s flows/second: 71336.2 Runtime: 0.0023s