Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 19:58:54.359 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40764 10 6452 1 2025-09-17 19:59:15.022 00:00:10.319 TCP 23.104.0.1:33426 -> 1.101.0.1:3000 11 1507 1 2025-09-17 19:59:37.232 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 19:59:37.086 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 19:59:54.527 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48464 10 6452 1 2025-09-17 20:00:15.381 00:00:10.365 TCP 23.104.0.1:54340 -> 1.101.0.1:3000 11 1507 1 2025-09-17 19:56:29.798 00:05:01.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 20:00:54.741 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34772 10 6452 1 2025-09-17 20:01:15.789 00:00:10.379 TCP 23.104.0.1:50392 -> 1.101.0.1:3000 11 1507 1 2025-09-17 19:57:29.801 00:05:01.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 20:01:54.957 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54520 10 6452 1 2025-09-17 20:02:16.211 00:00:10.363 TCP 23.104.0.1:46082 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:02:55.183 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48614 10 6452 1 2025-09-17 20:03:16.616 00:00:10.327 TCP 23.104.0.1:49538 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:03:55.397 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41456 10 6452 1 2025-09-17 20:04:16.978 00:00:10.367 TCP 23.104.0.1:39642 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:04:37.464 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 20:04:37.388 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 20:04:55.619 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35140 10 6452 1 2025-09-17 20:05:17.392 00:00:10.703 TCP 23.104.0.1:43332 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:05:55.828 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45278 10 6452 1 2025-09-17 20:06:18.131 00:00:10.363 TCP 23.104.0.1:39010 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:02:29.798 00:05:01.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 20:06:56.068 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36680 10 6452 1 2025-09-17 20:03:29.801 00:05:01.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 20:07:18.534 00:00:10.367 TCP 23.104.0.1:48088 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:07:56.288 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 10 6452 1 2025-09-17 20:08:18.945 00:00:10.327 TCP 23.104.0.1:33246 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:08:56.505 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50042 10 6452 1 2025-09-17 20:09:19.317 00:00:10.320 TCP 23.104.0.1:39250 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:09:37.714 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 20:09:37.632 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 20:09:56.745 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47214 10 6452 1 2025-09-17 20:10:19.676 00:00:10.376 TCP 23.104.0.1:52524 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:10:56.962 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38456 10 6452 1 2025-09-17 20:11:20.102 00:00:10.371 TCP 23.104.0.1:42702 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:11:57.185 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33684 10 6452 1 2025-09-17 20:12:20.511 00:00:10.364 TCP 23.104.0.1:44400 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:08:29.799 00:05:01.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 20:12:57.363 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59770 10 6452 1 2025-09-17 20:13:20.916 00:00:10.382 TCP 23.104.0.1:35776 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:09:29.803 00:05:01.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 20:13:57.574 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51330 10 6452 1 2025-09-17 20:14:21.335 00:00:10.368 TCP 23.104.0.1:47944 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:14:37.467 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 20:14:37.649 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 20:14:57.798 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34242 10 6452 1 2025-09-17 20:15:21.743 00:00:10.366 TCP 23.104.0.1:50068 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:15:57.974 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42722 10 6452 1 2025-09-17 20:16:22.146 00:00:10.319 TCP 23.104.0.1:52408 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:16:58.207 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44322 10 6452 1 2025-09-17 20:17:22.507 00:00:10.365 TCP 23.104.0.1:54550 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:17:58.422 00:00:10.326 TCP 1.101.0.1:3000 -> 22.102.0.1:52594 10 6452 1 2025-09-17 20:14:29.801 00:05:01.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 20:18:22.910 00:00:10.363 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:18:58.784 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50836 10 6452 1 2025-09-17 20:15:29.801 00:05:01.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 20:19:37.582 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 20:19:23.312 00:00:10.368 TCP 23.104.0.1:42714 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:19:37.651 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 20:19:58.995 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35318 10 6452 1 2025-09-17 20:20:23.722 00:00:10.375 TCP 23.104.0.1:36094 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:20:59.218 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60760 10 6452 1 2025-09-17 20:21:24.133 00:00:10.371 TCP 23.104.0.1:36542 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:21:59.440 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39270 10 6452 1 2025-09-17 20:22:24.547 00:00:10.365 TCP 23.104.0.1:34784 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:22:59.666 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46000 10 6452 1 2025-09-17 20:23:24.954 00:00:10.367 TCP 23.104.0.1:34984 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:23:59.891 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39918 10 6452 1 2025-09-17 20:20:29.801 00:05:01.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 20:24:25.358 00:00:10.368 TCP 23.104.0.1:46842 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:24:37.892 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 20:24:37.744 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 20:25:00.117 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37456 10 6452 1 2025-09-17 20:21:29.803 00:05:01.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 20:25:25.759 00:00:10.377 TCP 23.104.0.1:40626 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:26:00.330 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46448 10 6452 1 2025-09-17 20:26:26.180 00:00:10.362 TCP 23.104.0.1:57520 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:27:00.554 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46508 10 6452 1 2025-09-17 20:27:26.577 00:00:10.361 TCP 23.104.0.1:33048 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:28:00.778 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48958 10 6452 1 2025-09-17 20:28:26.973 00:00:10.368 TCP 23.104.0.1:35374 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:29:00.990 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53492 10 6452 1 2025-09-17 20:29:37.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 20:29:38.098 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 20:29:27.380 00:00:10.365 TCP 23.104.0.1:33996 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:30:01.220 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52260 10 6452 1 2025-09-17 20:26:29.804 00:05:01.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 20:30:27.785 00:00:10.365 TCP 23.104.0.1:38148 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:31:01.435 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55950 10 6452 1 2025-09-17 20:27:29.805 00:05:01.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 20:31:28.194 00:00:10.364 TCP 23.104.0.1:60292 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:32:01.654 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44438 10 6452 1 2025-09-17 20:32:28.596 00:00:10.327 TCP 23.104.0.1:54480 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:33:01.828 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51776 10 6452 1 2025-09-17 20:33:28.962 00:00:10.364 TCP 23.104.0.1:44730 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:34:02.069 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34692 11 6492 1 2025-09-17 20:34:37.839 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 20:34:29.365 00:00:10.365 TCP 23.104.0.1:49358 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:34:38.100 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 20:35:02.278 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47124 10 6452 1 2025-09-17 20:35:29.766 00:00:10.337 TCP 23.104.0.1:37960 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:36:02.503 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53796 10 6452 1 2025-09-17 20:32:29.804 00:05:01.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 20:36:30.141 00:00:10.373 TCP 23.104.0.1:47724 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:37:02.683 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38928 10 6452 1 2025-09-17 20:33:29.807 00:05:01.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 20:37:30.553 00:00:10.364 TCP 23.104.0.1:48046 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:38:02.896 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47542 10 6452 1 2025-09-17 20:38:30.956 00:00:10.369 TCP 23.104.0.1:50686 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:39:03.111 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60116 10 6452 1 2025-09-17 20:39:38.304 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 20:39:37.934 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 20:39:31.361 00:00:10.364 TCP 23.104.0.1:50748 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:40:03.332 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:40090 10 6452 1 2025-09-17 20:40:31.761 00:00:10.328 TCP 23.104.0.1:51682 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:41:03.501 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56002 10 6452 1 2025-09-17 20:41:32.130 00:00:10.366 TCP 23.104.0.1:44592 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:42:03.723 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34542 10 6452 1 2025-09-17 20:38:29.806 00:05:01.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 20:42:32.536 00:00:10.370 TCP 23.104.0.1:47608 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:43:03.939 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35196 10 6452 1 2025-09-17 20:39:29.809 00:05:01.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 20:43:32.937 00:00:10.378 TCP 23.104.0.1:36016 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:44:04.184 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46068 10 6452 1 2025-09-17 20:44:38.197 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 20:44:38.241 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 20:44:33.354 00:00:10.365 TCP 23.104.0.1:40356 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:45:04.395 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43640 10 6452 1 2025-09-17 20:45:33.759 00:00:10.390 TCP 23.104.0.1:46006 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:46:04.613 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47270 10 6452 1 2025-09-17 20:46:34.180 00:00:10.367 TCP 23.104.0.1:48108 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:47:04.827 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54070 10 6452 1 2025-09-17 20:47:34.586 00:00:10.363 TCP 23.104.0.1:60228 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:48:05.078 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38538 10 6452 1 2025-09-17 20:44:29.807 00:05:01.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 20:48:34.994 00:00:10.367 TCP 23.104.0.1:55682 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:49:05.291 00:00:10.505 TCP 1.101.0.1:3000 -> 22.102.0.1:57124 10 6452 1 2025-09-17 20:45:29.810 00:05:01.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 20:49:38.281 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 20:49:38.037 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 20:49:35.399 00:00:10.372 TCP 23.104.0.1:42494 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:50:05.837 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49074 10 6452 1 2025-09-17 20:50:35.805 00:00:10.373 TCP 23.104.0.1:49036 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:51:06.075 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52350 10 6452 1 2025-09-17 20:51:36.210 00:00:10.365 TCP 23.104.0.1:44512 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:52:06.313 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:47958 10 6452 1 2025-09-17 20:52:36.613 00:00:10.373 TCP 23.104.0.1:39424 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:53:06.488 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35826 10 6452 1 2025-09-17 20:53:37.020 00:00:10.327 TCP 23.104.0.1:41484 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:54:06.705 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37804 10 6452 1 2025-09-17 20:50:29.808 00:05:01.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 20:54:38.421 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 20:54:38.256 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 20:54:37.384 00:00:10.326 TCP 23.104.0.1:46392 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:55:06.926 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55610 10 6452 1 2025-09-17 20:51:29.813 00:05:01.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 20:55:37.743 00:00:10.366 TCP 23.104.0.1:35726 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:56:07.137 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44674 10 6452 1 2025-09-17 20:56:38.142 00:00:10.370 TCP 23.104.0.1:54218 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:57:07.360 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60498 10 6452 1 2025-09-17 20:57:38.550 00:00:10.404 TCP 23.104.0.1:51590 -> 1.101.0.1:3000 11 1507 1 2025-09-17 20:58:07.534 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34916 10 6452 1 2025-09-17 20:58:38.992 00:00:10.365 TCP 23.104.0.1:38120 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498388, total packets: 1573, avg bps: 1066, avg pps: 0, avg bpp: 316 Time window: 2025-09-17 19:56:29 - 2025-09-17 20:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0018s User: 0.0027s Wall: 0.0021s flows/second: 79531.3 Runtime: 0.0021s