Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 07:58:50.883 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42312 10 6452 1 2025-09-17 07:59:22.817 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 07:59:22.905 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 07:59:22.578 00:00:10.364 TCP 23.104.0.1:58932 -> 1.101.0.1:3000 11 1507 1 2025-09-17 07:59:51.109 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:37620 12 10367 1 2025-09-17 07:56:29.608 00:05:01.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 08:00:22.980 00:00:10.440 TCP 23.104.0.1:48194 -> 1.101.0.1:3000 15 1926 1 2025-09-17 08:00:51.353 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36014 10 6452 1 2025-09-17 07:57:29.610 00:05:01.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 08:01:23.460 00:00:10.360 TCP 23.104.0.1:49950 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:01:51.570 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43476 10 6452 1 2025-09-17 08:02:23.858 00:00:10.371 TCP 23.104.0.1:47176 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:02:51.780 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38162 10 6452 1 2025-09-17 08:03:24.265 00:00:10.322 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:03:51.997 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:55346 10 6452 1 2025-09-17 08:04:23.085 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 08:04:23.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 08:04:24.629 00:00:10.328 TCP 23.104.0.1:32852 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:04:52.186 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55742 10 6452 1 2025-09-17 08:05:24.995 00:00:10.362 TCP 23.104.0.1:58360 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:05:52.366 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39138 10 6452 1 2025-09-17 08:02:29.609 00:05:01.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 08:06:25.398 00:00:10.368 TCP 23.104.0.1:37988 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:06:52.584 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53384 12 6556 1 2025-09-17 08:03:29.611 00:05:01.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 08:07:25.802 00:00:10.339 TCP 23.104.0.1:36138 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:07:52.795 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56118 10 6452 1 2025-09-17 08:08:26.184 00:00:10.367 TCP 23.104.0.1:51372 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:08:53.010 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49072 10 6452 1 2025-09-17 08:09:23.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 08:09:23.187 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 08:09:26.583 00:00:10.378 TCP 23.104.0.1:43552 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:09:53.229 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54144 12 10365 1 2025-09-17 08:10:27.004 00:00:10.906 TCP 23.104.0.1:33376 -> 1.101.0.1:3000 15 1926 1 2025-09-17 08:10:53.451 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52506 10 6452 1 2025-09-17 08:11:27.949 00:00:10.366 TCP 23.104.0.1:42204 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:11:53.662 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49952 10 6452 1 2025-09-17 08:08:29.611 00:05:01.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 08:12:28.351 00:00:10.361 TCP 23.104.0.1:56096 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:12:53.877 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57806 10 6452 1 2025-09-17 08:09:29.614 00:05:01.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 08:13:28.751 00:00:10.360 TCP 23.104.0.1:48320 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:13:54.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47580 10 6452 1 2025-09-17 08:14:23.083 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 08:14:22.877 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 08:14:29.149 00:00:10.372 TCP 23.104.0.1:47128 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:14:54.301 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44234 10 6452 1 2025-09-17 08:15:29.567 00:00:10.374 TCP 23.104.0.1:43116 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:15:54.512 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39660 10 6452 1 2025-09-17 08:16:29.978 00:00:10.360 TCP 23.104.0.1:60050 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:16:54.729 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45254 10 6452 1 2025-09-17 08:17:30.381 00:00:10.364 TCP 23.104.0.1:52132 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:17:54.946 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:34866 10 6452 1 2025-09-17 08:14:29.612 00:05:01.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 08:18:30.780 00:00:10.366 TCP 23.104.0.1:53138 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:18:55.188 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33418 10 6452 1 2025-09-17 08:19:23.506 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 08:19:23.186 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 08:15:29.615 00:05:01.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 08:19:31.178 00:00:10.376 TCP 23.104.0.1:32990 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:19:55.399 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42070 10 6452 1 2025-09-17 08:20:31.591 00:00:10.365 TCP 23.104.0.1:50710 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:20:55.608 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59634 10 6452 1 2025-09-17 08:21:31.993 00:00:10.366 TCP 23.104.0.1:55288 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:21:55.821 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42882 10 6452 1 2025-09-17 08:22:32.397 00:00:10.368 TCP 23.104.0.1:33834 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:22:56.039 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46542 10 6452 1 2025-09-17 08:23:32.807 00:00:10.374 TCP 23.104.0.1:36552 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:23:56.251 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56558 10 6452 1 2025-09-17 08:24:23.283 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 08:24:23.269 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 08:20:29.615 00:05:01.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 08:24:33.218 00:00:10.324 TCP 23.104.0.1:45488 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:24:56.467 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38702 10 6452 1 2025-09-17 08:21:29.618 00:05:01.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 08:25:33.578 00:00:10.328 TCP 23.104.0.1:46090 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:25:56.678 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60070 10 6452 1 2025-09-17 08:26:33.945 00:00:10.364 TCP 23.104.0.1:48360 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:26:56.900 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42260 10 6452 1 2025-09-17 08:27:34.351 00:00:10.366 TCP 23.104.0.1:46806 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:27:57.115 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58508 10 6452 1 2025-09-17 08:28:34.762 00:00:10.378 TCP 23.104.0.1:44268 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:28:57.332 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58376 10 6452 1 2025-09-17 08:29:23.488 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 08:29:23.569 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 08:29:35.183 00:00:10.361 TCP 23.104.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:29:57.546 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:43578 12 10367 1 2025-09-17 08:26:29.617 00:05:01.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 08:30:35.586 00:00:10.445 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 15 1926 1 2025-09-17 08:30:57.745 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34626 10 6452 1 2025-09-17 08:27:29.619 00:05:01.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 08:31:36.098 00:00:10.368 TCP 23.104.0.1:44774 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:31:57.959 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56476 10 6452 1 2025-09-17 08:32:36.504 00:00:10.365 TCP 23.104.0.1:60884 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:32:58.199 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35474 10 6452 1 2025-09-17 08:33:36.907 00:00:10.366 TCP 23.104.0.1:35206 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:33:58.368 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43578 10 6452 1 2025-09-17 08:34:23.532 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 08:34:23.372 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 08:34:37.306 00:00:10.323 TCP 23.104.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:34:58.591 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34286 10 6452 1 2025-09-17 08:35:37.684 00:00:10.327 TCP 23.104.0.1:53478 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:35:58.814 00:00:10.275 TCP 1.101.0.1:3000 -> 22.102.0.1:43300 10 6452 1 2025-09-17 08:32:29.618 00:05:01.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 08:36:38.058 00:00:10.364 TCP 23.104.0.1:33838 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:36:59.131 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40792 10 6452 1 2025-09-17 08:33:29.620 00:05:01.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 08:37:38.464 00:00:10.669 TCP 23.104.0.1:59220 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:37:59.353 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59770 10 6452 1 2025-09-17 08:38:39.168 00:00:10.357 TCP 23.104.0.1:34866 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:38:59.570 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46296 10 6452 1 2025-09-17 08:39:23.558 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 08:39:23.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 08:39:39.568 00:00:10.332 TCP 23.104.0.1:35628 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:39:59.788 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:38678 13 13939 1 2025-09-17 08:40:39.938 00:00:10.455 TCP 23.104.0.1:48006 -> 1.101.0.1:3000 15 1926 1 2025-09-17 08:40:59.987 00:00:10.846 TCP 1.101.0.1:3000 -> 22.102.0.1:38636 10 6452 1 2025-09-17 08:41:40.434 00:00:10.376 TCP 23.104.0.1:54894 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:42:00.869 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55150 10 6452 1 2025-09-17 08:38:29.618 00:05:01.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 08:42:40.838 00:00:10.331 TCP 23.104.0.1:36764 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:43:01.064 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:52094 10 6452 1 2025-09-17 08:39:29.621 00:05:01.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 08:43:41.210 00:00:10.367 TCP 23.104.0.1:52914 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:44:01.262 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51720 10 6452 1 2025-09-17 08:44:23.750 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 08:44:23.718 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 08:44:41.610 00:00:10.362 TCP 23.104.0.1:52382 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:45:01.441 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36568 10 6452 1 2025-09-17 08:45:42.013 00:00:10.365 TCP 23.104.0.1:59598 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:46:01.655 00:00:10.245 TCP 1.101.0.1:3000 -> 22.102.0.1:52312 10 6452 1 2025-09-17 08:46:42.413 00:00:10.336 TCP 23.104.0.1:59060 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:47:01.935 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:54168 10 6452 1 2025-09-17 08:47:42.792 00:00:10.362 TCP 23.104.0.1:39036 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:48:02.179 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35788 10 6452 1 2025-09-17 08:44:29.620 00:05:01.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 08:48:43.196 00:00:10.368 TCP 23.104.0.1:47274 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:49:02.351 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57962 10 6452 1 2025-09-17 08:49:24.153 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 08:49:23.991 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 08:45:29.622 00:05:01.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 08:49:43.601 00:00:10.435 TCP 23.104.0.1:37520 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:50:02.564 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58648 10 6452 1 2025-09-17 08:50:44.101 00:00:10.363 TCP 23.104.0.1:40446 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:51:02.780 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57608 10 6452 1 2025-09-17 08:51:44.504 00:00:10.367 TCP 23.104.0.1:57272 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:52:02.993 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56162 10 6452 1 2025-09-17 08:52:44.910 00:00:10.329 TCP 23.104.0.1:44294 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:53:03.198 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43728 10 6452 1 2025-09-17 08:53:45.277 00:00:10.321 TCP 23.104.0.1:45904 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:54:03.415 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37830 10 6452 1 2025-09-17 08:54:23.988 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 08:54:24.058 00:00:00.051 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 08:50:29.620 00:05:01.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 08:54:45.641 00:00:10.683 TCP 23.104.0.1:44080 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:55:03.622 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58576 10 6452 1 2025-09-17 08:51:29.623 00:05:01.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 08:55:46.364 00:00:10.329 TCP 23.104.0.1:57108 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:56:03.796 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52882 10 6452 1 2025-09-17 08:56:46.730 00:00:10.377 TCP 23.104.0.1:38790 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:57:03.969 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:39454 10 6452 1 2025-09-17 08:57:47.135 00:00:10.367 TCP 23.104.0.1:55600 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:58:04.223 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40268 10 6452 1 Summary: total flows: 163, total bytes: 517851, total packets: 1588, avg bps: 1118, avg pps: 0, avg bpp: 326 Time window: 2025-09-17 07:56:29 - 2025-09-17 08:58:14 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0048s User: 0.0012s Wall: 0.0025s flows/second: 66427.5 Runtime: 0.0025s