Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 17:59:16.771 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48806 10 6452 1 2025-09-17 17:59:34.755 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 17:59:34.814 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 17:59:23.888 00:00:10.393 TCP 23.104.0.1:33680 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:00:16.983 00:00:10.654 TCP 1.101.0.1:3000 -> 22.102.0.1:43020 10 6452 1 2025-09-17 17:56:29.771 00:05:01.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 18:00:24.318 00:00:10.382 TCP 23.104.0.1:59070 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:57:29.774 00:05:01.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 18:01:17.671 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39466 10 6452 1 2025-09-17 18:01:24.737 00:00:10.369 TCP 23.104.0.1:47788 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:02:17.884 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45478 10 6452 1 2025-09-17 18:02:25.145 00:00:10.393 TCP 23.104.0.1:35544 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:03:18.110 00:00:10.455 TCP 1.101.0.1:3000 -> 22.102.0.1:51730 10 6452 1 2025-09-17 18:03:25.589 00:00:10.327 TCP 23.104.0.1:60326 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:04:18.603 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60830 10 6452 1 2025-09-17 18:04:34.981 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 18:04:34.955 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 18:04:25.957 00:00:10.375 TCP 23.104.0.1:60890 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:05:18.815 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52290 10 6452 1 2025-09-17 18:05:26.370 00:00:10.360 TCP 23.104.0.1:51764 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:06:19.037 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55136 10 6452 1 2025-09-17 18:02:29.772 00:05:01.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 18:06:26.769 00:00:10.375 TCP 23.104.0.1:36124 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:07:19.262 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39468 10 6452 1 2025-09-17 18:03:29.775 00:05:01.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 18:07:27.183 00:00:10.372 TCP 23.104.0.1:47308 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:08:19.478 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55690 10 6452 1 2025-09-17 18:08:27.597 00:00:10.363 TCP 23.104.0.1:35506 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:09:35.449 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 18:09:19.654 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42102 10 6452 1 2025-09-17 18:09:35.399 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 18:09:28.001 00:00:10.364 TCP 23.104.0.1:33952 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:10:19.866 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38786 10 6452 1 2025-09-17 18:10:28.404 00:00:10.367 TCP 23.104.0.1:36516 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:11:20.101 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42106 10 6452 1 2025-09-17 18:11:28.811 00:00:10.368 TCP 23.104.0.1:60054 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:12:20.318 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58886 10 6452 1 2025-09-17 18:08:29.772 00:05:01.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 18:12:29.214 00:00:10.324 TCP 23.104.0.1:53904 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:13:20.540 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39930 10 6452 1 2025-09-17 18:09:29.776 00:05:01.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 18:13:29.571 00:00:10.330 TCP 23.104.0.1:51014 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:14:20.763 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54614 10 6452 1 2025-09-17 18:14:35.165 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 18:14:35.157 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 18:14:29.936 00:00:10.375 TCP 23.104.0.1:41376 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:15:20.984 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34260 10 6452 1 2025-09-17 18:15:30.343 00:00:10.361 TCP 23.104.0.1:45652 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:16:21.210 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50866 10 6452 1 2025-09-17 18:16:30.745 00:00:10.366 TCP 23.104.0.1:41620 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:17:21.420 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49148 10 6452 1 2025-09-17 18:17:31.145 00:00:10.367 TCP 23.104.0.1:52178 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:18:21.646 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52752 10 6452 1 2025-09-17 18:14:29.774 00:05:01.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 18:18:31.546 00:00:10.370 TCP 23.104.0.1:51396 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:15:29.776 00:05:01.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 18:19:35.293 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 18:19:21.871 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57372 10 6452 1 2025-09-17 18:19:35.342 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 18:19:31.956 00:00:10.364 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:20:22.104 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48056 11 6492 1 2025-09-17 18:20:32.363 00:00:10.363 TCP 23.104.0.1:37756 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:21:22.337 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51904 10 6452 1 2025-09-17 18:21:32.763 00:00:10.372 TCP 23.104.0.1:38250 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:22:22.558 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-09-17 18:22:33.171 00:00:10.368 TCP 23.104.0.1:55976 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:23:22.776 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53040 10 6452 1 2025-09-17 18:23:33.576 00:00:10.320 TCP 23.104.0.1:52320 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:20:29.775 00:05:01.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 18:24:35.533 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 18:24:22.961 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58774 10 6452 1 2025-09-17 18:24:35.278 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 18:24:33.935 00:00:10.380 TCP 23.104.0.1:32956 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:21:29.778 00:05:01.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 18:25:23.184 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42702 10 6452 1 2025-09-17 18:25:34.348 00:00:10.750 TCP 23.104.0.1:37154 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:26:23.401 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48664 10 6452 1 2025-09-17 18:26:35.134 00:00:10.365 TCP 23.104.0.1:42842 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:27:23.615 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39768 10 6452 1 2025-09-17 18:27:35.539 00:00:10.361 TCP 23.104.0.1:50848 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:28:23.826 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52400 10 6452 1 2025-09-17 18:28:35.939 00:00:10.374 TCP 23.104.0.1:54578 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:29:35.650 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 18:29:24.046 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53294 10 6452 1 2025-09-17 18:29:35.825 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 18:29:36.350 00:00:10.367 TCP 23.104.0.1:32854 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:26:29.777 00:05:01.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 18:30:24.254 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38608 10 6452 1 2025-09-17 18:30:36.764 00:00:10.372 TCP 23.104.0.1:60140 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:27:29.779 00:05:01.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 18:31:24.471 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38780 10 6452 1 2025-09-17 18:31:37.172 00:00:10.370 TCP 23.104.0.1:57428 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:32:24.687 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46014 10 6452 1 2025-09-17 18:32:37.578 00:00:10.371 TCP 23.104.0.1:35654 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:33:24.903 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40060 10 6452 1 2025-09-17 18:33:37.984 00:00:10.373 TCP 23.104.0.1:41754 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:34:25.085 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45272 10 6452 1 2025-09-17 18:34:35.632 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 18:34:35.675 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 18:34:38.401 00:00:10.324 TCP 23.104.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:35:25.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47948 10 6452 1 2025-09-17 18:35:38.762 00:00:10.341 TCP 23.104.0.1:48196 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:32:29.780 00:05:01.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 18:36:25.512 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43494 10 6452 1 2025-09-17 18:36:39.131 00:00:10.372 TCP 23.104.0.1:44418 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:33:29.783 00:05:01.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 18:37:25.722 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52672 10 6452 1 2025-09-17 18:37:39.540 00:00:10.365 TCP 23.104.0.1:57096 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:38:25.934 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42900 10 6452 1 2025-09-17 18:38:39.944 00:00:10.389 TCP 23.104.0.1:37388 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:39:35.699 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 18:39:26.164 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41284 10 6452 1 2025-09-17 18:39:35.802 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 18:39:40.357 00:00:10.363 TCP 23.104.0.1:44180 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:40:26.334 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:50320 12 10367 1 2025-09-17 18:40:40.764 00:00:10.451 TCP 23.104.0.1:53048 -> 1.101.0.1:3000 15 1926 1 2025-09-17 18:41:26.576 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:49568 11 6504 1 2025-09-17 18:41:41.251 00:00:10.935 TCP 23.104.0.1:46982 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:38:29.781 00:05:01.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 18:42:26.842 00:00:19.286 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-09-17 18:42:42.231 00:00:10.368 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:39:29.784 00:05:01.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 18:43:36.173 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41850 10 6452 1 2025-09-17 18:43:42.645 00:00:10.365 TCP 23.104.0.1:53108 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:44:35.758 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 18:44:35.965 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 18:44:36.393 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57170 10 6452 1 2025-09-17 18:44:43.056 00:00:10.366 TCP 23.104.0.1:59036 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:45:36.613 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41866 10 6452 1 2025-09-17 18:45:43.466 00:00:10.363 TCP 23.104.0.1:54422 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:46:36.819 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57900 10 6452 1 2025-09-17 18:46:43.868 00:00:10.329 TCP 23.104.0.1:56352 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:47:37.038 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58950 10 6452 1 2025-09-17 18:47:44.236 00:00:10.384 TCP 23.104.0.1:48892 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:44:29.783 00:05:01.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 18:48:37.247 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56286 10 6452 1 2025-09-17 18:48:44.681 00:00:10.364 TCP 23.104.0.1:42538 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:45:29.784 00:05:01.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 18:49:35.913 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 18:49:35.866 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 18:49:37.464 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46390 10 6452 1 2025-09-17 18:49:45.103 00:00:10.373 TCP 23.104.0.1:56374 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:50:37.681 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54550 10 6452 1 2025-09-17 18:50:45.507 00:00:10.368 TCP 23.104.0.1:46952 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:51:37.909 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59472 10 6452 1 2025-09-17 18:51:45.916 00:00:10.366 TCP 23.104.0.1:55508 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:52:38.127 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37730 10 6452 1 2025-09-17 18:52:46.316 00:00:10.321 TCP 23.104.0.1:60436 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:53:38.346 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54524 10 6452 1 2025-09-17 18:53:46.674 00:00:10.387 TCP 23.104.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:50:29.782 00:05:01.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 18:54:35.857 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 18:54:36.218 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 18:54:38.528 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45118 10 6452 1 2025-09-17 18:54:47.108 00:00:10.364 TCP 23.104.0.1:40578 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:51:29.786 00:05:01.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 18:55:38.704 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52162 10 6452 1 2025-09-17 18:55:47.510 00:00:10.367 TCP 23.104.0.1:50812 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:56:38.913 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52252 10 6452 1 2025-09-17 18:56:47.913 00:00:10.365 TCP 23.104.0.1:42564 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:57:39.124 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32916 10 6452 1 2025-09-17 18:57:48.317 00:00:10.369 TCP 23.104.0.1:42660 -> 1.101.0.1:3000 11 1507 1 2025-09-17 18:58:39.339 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48976 10 6452 1 Summary: total flows: 163, total bytes: 501267, total packets: 1569, avg bps: 1072, avg pps: 0, avg bpp: 319 Time window: 2025-09-17 17:56:29 - 2025-09-17 18:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0011s User: 0.0043s Wall: 0.0022s flows/second: 75327.4 Runtime: 0.0022s