Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 18:58:43.504 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49106 10 6452 1 2025-09-16 18:59:07.090 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 18:59:07.281 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 18:59:31.529 00:00:10.367 TCP 23.104.0.1:39602 -> 1.101.0.1:3000 11 1507 1 2025-09-16 18:59:43.726 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:53662 12 10367 1 2025-09-16 18:56:29.315 00:05:01.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 19:00:31.937 00:00:10.454 TCP 23.104.0.1:56714 -> 1.101.0.1:3000 15 1926 1 2025-09-16 19:00:43.991 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:52116 10 6452 1 2025-09-16 18:57:29.318 00:05:01.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 19:01:32.426 00:00:10.328 TCP 23.104.0.1:40420 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:01:44.189 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47026 10 6452 1 2025-09-16 19:02:32.789 00:00:10.358 TCP 23.104.0.1:42300 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:02:44.416 00:00:10.334 TCP 1.101.0.1:3000 -> 22.102.0.1:56058 10 6452 1 2025-09-16 19:03:33.188 00:00:10.367 TCP 23.104.0.1:50060 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:03:44.808 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40198 10 6452 1 2025-09-16 19:04:07.355 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 19:04:07.419 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 19:04:33.592 00:00:10.373 TCP 23.104.0.1:40740 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:04:45.028 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54584 10 6452 1 2025-09-16 19:05:34.005 00:00:10.365 TCP 23.104.0.1:41690 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:05:45.246 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40430 10 6452 1 2025-09-16 19:02:29.317 00:05:01.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 19:06:34.410 00:00:10.367 TCP 23.104.0.1:34398 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:06:45.455 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54318 10 6452 1 2025-09-16 19:03:29.318 00:05:01.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 19:07:34.812 00:00:10.366 TCP 23.104.0.1:49094 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:07:45.667 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60592 10 6452 1 2025-09-16 19:08:35.276 00:00:10.324 TCP 23.104.0.1:37118 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:08:45.879 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43662 10 6452 1 2025-09-16 19:09:07.411 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 19:09:07.314 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 19:09:35.642 00:00:10.359 TCP 23.104.0.1:39582 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:09:46.101 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59742 10 6452 1 2025-09-16 19:10:36.043 00:00:10.321 TCP 23.104.0.1:60338 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:10:46.319 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51306 10 6452 1 2025-09-16 19:11:36.405 00:00:10.367 TCP 23.104.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:11:46.536 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50300 10 6452 1 2025-09-16 19:08:29.318 00:05:01.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 19:12:36.808 00:00:10.372 TCP 23.104.0.1:38054 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:12:46.709 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55960 10 6452 1 2025-09-16 19:09:29.322 00:05:01.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 19:13:37.216 00:00:10.376 TCP 23.104.0.1:36114 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:13:46.928 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48496 12 6556 1 2025-09-16 19:14:07.844 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 19:14:07.732 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 19:14:37.638 00:00:10.329 TCP 23.104.0.1:56356 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:14:47.144 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42578 10 6452 1 2025-09-16 19:15:38.007 00:00:10.373 TCP 23.104.0.1:35978 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:15:47.357 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36898 10 6452 1 2025-09-16 19:16:38.412 00:00:10.364 TCP 23.104.0.1:46186 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:16:47.570 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55804 10 6452 1 2025-09-16 19:17:38.816 00:00:10.364 TCP 23.104.0.1:35992 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:17:47.781 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57860 10 6452 1 2025-09-16 19:14:29.321 00:05:01.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 19:18:39.217 00:00:10.371 TCP 23.104.0.1:45272 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:18:47.997 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45852 10 6452 1 2025-09-16 19:19:07.890 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 19:19:07.888 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 19:15:29.324 00:05:01.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 19:19:39.625 00:00:10.361 TCP 23.104.0.1:57232 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:19:48.217 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56520 10 6452 1 2025-09-16 19:20:40.031 00:00:22.379 TCP 23.104.0.1:42616 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:20:48.428 00:00:13.886 TCP 1.101.0.1:3000 -> 22.102.0.1:55516 10 6452 1 2025-09-16 19:21:52.376 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41264 10 6452 1 2025-09-16 19:21:52.461 00:00:11.005 TCP 23.104.0.1:48306 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:22:53.500 00:00:10.368 TCP 23.104.0.1:36402 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:22:52.583 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51392 10 6452 1 2025-09-16 19:23:52.802 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:32932 10 6452 1 2025-09-16 19:23:53.909 00:00:10.375 TCP 23.104.0.1:46316 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:24:07.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 19:24:07.701 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 19:20:29.324 00:05:01.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 19:24:53.039 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44270 10 6452 1 2025-09-16 19:24:54.324 00:00:10.324 TCP 23.104.0.1:57764 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:21:29.325 00:05:01.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 19:25:54.685 00:00:10.368 TCP 23.104.0.1:56750 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:25:53.248 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60494 10 6452 1 2025-09-16 19:26:55.101 00:00:11.032 TCP 23.104.0.1:37816 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:26:53.466 00:00:10.280 TCP 1.101.0.1:3000 -> 22.102.0.1:53194 10 6452 1 2025-09-16 19:27:56.171 00:00:10.358 TCP 23.104.0.1:38776 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:27:53.784 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52218 10 6452 1 2025-09-16 19:28:53.998 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58288 10 6452 1 2025-09-16 19:28:56.566 00:00:10.368 TCP 23.104.0.1:50186 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:29:07.766 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 19:29:08.177 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 19:29:54.227 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35150 10 6452 1 2025-09-16 19:29:56.975 00:00:10.369 TCP 23.104.0.1:43264 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:26:29.324 00:05:01.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 19:30:54.447 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36676 10 6452 1 2025-09-16 19:30:57.374 00:00:10.366 TCP 23.104.0.1:49312 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:27:29.327 00:05:01.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 19:31:54.626 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55884 10 6452 1 2025-09-16 19:31:57.781 00:00:10.880 TCP 23.104.0.1:55464 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:32:54.839 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42370 10 6452 1 2025-09-16 19:32:58.696 00:00:10.362 TCP 23.104.0.1:51354 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:33:55.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50078 10 6452 1 2025-09-16 19:34:07.782 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 19:33:59.105 00:00:10.364 TCP 23.104.0.1:49840 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:34:07.866 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 19:34:55.290 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58156 10 6452 1 2025-09-16 19:34:59.507 00:00:10.362 TCP 23.104.0.1:59694 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:35:55.497 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37654 10 6452 1 2025-09-16 19:35:59.906 00:00:10.366 TCP 23.104.0.1:59142 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:32:29.325 00:05:01.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 19:36:55.709 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37206 10 6452 1 2025-09-16 19:37:00.309 00:00:10.364 TCP 23.104.0.1:41266 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:33:29.329 00:05:01.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 19:37:55.931 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:53156 10 6452 1 2025-09-16 19:38:00.709 00:00:10.384 TCP 23.104.0.1:37996 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:38:56.170 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 10 6452 1 2025-09-16 19:39:01.125 00:00:10.363 TCP 23.104.0.1:51362 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:39:08.219 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 19:39:08.234 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 19:39:56.386 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45236 10 6452 1 2025-09-16 19:40:01.531 00:00:10.365 TCP 23.104.0.1:42350 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:40:56.632 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36760 10 6452 1 2025-09-16 19:41:01.930 00:00:10.385 TCP 23.104.0.1:33652 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:41:56.847 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-09-16 19:42:02.352 00:00:10.363 TCP 23.104.0.1:52524 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:38:29.328 00:05:01.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 19:42:57.088 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47386 10 6452 1 2025-09-16 19:43:02.757 00:00:10.350 TCP 23.104.0.1:41782 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:39:29.331 00:05:01.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 19:43:57.258 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60532 10 6452 1 2025-09-16 19:44:08.110 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 19:44:07.931 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 19:44:03.155 00:00:10.373 TCP 23.104.0.1:45828 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:44:57.426 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44254 10 6452 1 2025-09-16 19:45:03.565 00:00:10.365 TCP 23.104.0.1:44546 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:45:57.645 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56072 10 6452 1 2025-09-16 19:46:03.967 00:00:10.371 TCP 23.104.0.1:48480 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:46:57.821 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-09-16 19:47:04.378 00:00:10.366 TCP 23.104.0.1:33272 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:47:58.004 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57262 10 6452 1 2025-09-16 19:48:04.784 00:00:10.322 TCP 23.104.0.1:38166 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:44:29.333 00:05:01.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 19:49:08.076 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 19:49:08.138 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 19:48:58.211 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54560 10 6452 1 2025-09-16 19:49:05.145 00:00:10.566 TCP 23.104.0.1:33000 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:45:29.335 00:05:01.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 19:49:58.425 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6452 1 2025-09-16 19:50:05.742 00:00:10.361 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:50:58.635 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52608 10 6452 1 2025-09-16 19:51:06.143 00:00:10.370 TCP 23.104.0.1:58310 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:51:58.809 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37882 10 6452 1 2025-09-16 19:52:06.551 00:00:10.364 TCP 23.104.0.1:33274 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:52:59.035 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59090 10 6452 1 2025-09-16 19:53:06.951 00:00:10.366 TCP 23.104.0.1:53880 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:53:59.246 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37552 10 6452 1 2025-09-16 19:54:08.345 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 19:54:08.329 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 19:54:07.356 00:00:10.366 TCP 23.104.0.1:34744 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:50:29.333 00:05:01.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 19:54:59.455 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56906 10 6452 1 2025-09-16 19:55:07.758 00:00:10.386 TCP 23.104.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:51:29.337 00:05:01.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 19:55:59.671 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34306 10 6452 1 2025-09-16 19:56:08.184 00:00:10.365 TCP 23.104.0.1:54746 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:56:59.839 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59854 10 6452 1 2025-09-16 19:57:08.586 00:00:10.365 TCP 23.104.0.1:42844 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:58:00.084 00:00:10.249 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6452 1 2025-09-16 19:58:08.991 00:00:10.362 TCP 23.104.0.1:38812 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 501279, total packets: 1569, avg bps: 1080, avg pps: 0, avg bpp: 319 Time window: 2025-09-16 18:56:29 - 2025-09-16 19:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0008s Wall: 0.0019s flows/second: 84372.6 Runtime: 0.0019s