Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 19:58:49.891 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51320 10 6452 1 2025-09-18 19:59:21.513 00:00:10.378 TCP 23.104.0.1:51698 -> 1.101.0.1:3000 11 1507 1 2025-09-18 19:59:50.114 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57238 10 6452 1 2025-09-18 20:00:06.176 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 20:00:06.407 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 19:56:30.266 00:05:01.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 20:00:21.940 00:00:10.369 TCP 23.104.0.1:39230 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:00:50.290 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:47014 10 6452 1 2025-09-18 19:57:30.268 00:05:01.234 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 20:01:22.348 00:00:10.369 TCP 23.104.0.1:46250 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:01:50.474 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54054 10 6452 1 2025-09-18 20:02:22.760 00:00:10.330 TCP 23.104.0.1:56368 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:02:50.684 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38428 10 6452 1 2025-09-18 20:03:23.126 00:00:10.373 TCP 23.104.0.1:55678 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:03:50.894 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48646 10 6452 1 2025-09-18 20:04:23.531 00:00:10.360 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:05:06.553 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 20:04:51.115 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38604 10 6452 1 2025-09-18 20:05:06.467 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 20:05:23.925 00:00:10.348 TCP 23.104.0.1:36042 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:05:51.327 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49560 10 6452 1 2025-09-18 20:06:24.310 00:00:10.323 TCP 23.104.0.1:60468 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:02:30.267 00:05:01.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 20:06:51.546 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47822 10 6452 1 2025-09-18 20:03:30.269 00:05:01.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 20:07:24.674 00:00:10.366 TCP 23.104.0.1:45304 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:07:51.760 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44058 10 6452 1 2025-09-18 20:08:25.100 00:00:10.363 TCP 23.104.0.1:35242 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:08:51.975 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43158 10 6452 1 2025-09-18 20:09:25.500 00:00:10.364 TCP 23.104.0.1:52480 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:10:06.479 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 20:09:52.207 00:00:10.662 TCP 1.101.0.1:3000 -> 22.102.0.1:39828 10 6452 1 2025-09-18 20:10:06.420 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 20:10:25.902 00:00:10.367 TCP 23.104.0.1:47228 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:10:52.902 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:38454 10 6452 1 2025-09-18 20:11:26.307 00:00:10.324 TCP 23.104.0.1:51040 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:11:53.090 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55762 10 6452 1 2025-09-18 20:08:30.269 00:05:01.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 20:12:26.670 00:00:10.363 TCP 23.104.0.1:41062 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:12:53.318 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52544 10 6452 1 2025-09-18 20:09:30.272 00:05:01.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 20:13:27.097 00:00:10.323 TCP 23.104.0.1:48336 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:13:53.538 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39550 10 6452 1 2025-09-18 20:14:27.461 00:00:10.319 TCP 23.104.0.1:37810 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:15:06.620 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 20:14:53.760 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43796 10 6452 1 2025-09-18 20:15:06.491 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 20:15:27.818 00:00:10.364 TCP 23.104.0.1:50892 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:15:53.971 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:45144 10 6452 1 2025-09-18 20:16:28.222 00:00:10.324 TCP 23.104.0.1:46404 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:16:54.171 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:44700 10 6452 1 2025-09-18 20:17:28.580 00:00:10.372 TCP 23.104.0.1:36328 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:17:54.411 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45250 10 6452 1 2025-09-18 20:14:30.272 00:05:01.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 20:18:28.993 00:00:10.361 TCP 23.104.0.1:33950 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:18:54.640 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34860 10 6452 1 2025-09-18 20:15:30.274 00:05:01.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 20:19:29.388 00:00:10.710 TCP 23.104.0.1:54010 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:20:06.642 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 20:19:54.875 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55314 10 6452 1 2025-09-18 20:20:06.569 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 20:20:30.137 00:00:10.365 TCP 23.104.0.1:53054 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:20:55.104 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47078 10 6452 1 2025-09-18 20:21:30.538 00:00:12.808 TCP 23.104.0.1:49534 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:21:55.312 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35150 10 6452 1 2025-09-18 20:22:33.399 00:00:10.361 TCP 23.104.0.1:42422 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:22:55.524 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53918 10 6452 1 2025-09-18 20:23:33.802 00:00:10.363 TCP 23.104.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:23:55.749 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59642 10 6452 1 2025-09-18 20:20:30.273 00:05:01.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 20:24:34.206 00:00:10.363 TCP 23.104.0.1:38802 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:24:55.926 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34500 10 6452 1 2025-09-18 20:25:06.856 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 20:25:06.700 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 20:21:30.277 00:05:01.231 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 20:25:34.602 00:00:10.605 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 15 1926 1 2025-09-18 20:25:56.160 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:57868 13 13937 1 2025-09-18 20:26:35.245 00:00:10.365 TCP 23.104.0.1:44206 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:26:56.355 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44600 10 6452 1 2025-09-18 20:27:35.649 00:00:10.327 TCP 23.104.0.1:44924 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:27:56.577 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49642 10 6452 1 2025-09-18 20:28:36.013 00:00:10.323 TCP 23.104.0.1:51994 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:28:56.752 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:46014 10 6452 1 2025-09-18 20:29:36.376 00:00:10.365 TCP 23.104.0.1:45280 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:30:06.887 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 20:29:56.935 00:00:10.674 TCP 1.101.0.1:3000 -> 22.102.0.1:36178 10 6452 1 2025-09-18 20:30:07.014 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 20:26:30.275 00:05:01.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 20:30:36.778 00:00:10.373 TCP 23.104.0.1:42540 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:30:57.640 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60182 10 6452 1 2025-09-18 20:27:30.279 00:05:01.231 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 20:31:37.193 00:00:10.366 TCP 23.104.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:31:57.811 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50178 10 6452 1 2025-09-18 20:32:37.595 00:00:10.367 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:32:58.036 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52220 10 6452 1 2025-09-18 20:33:37.996 00:00:10.367 TCP 23.104.0.1:42284 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:33:58.254 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37214 10 6452 1 2025-09-18 20:34:38.405 00:00:10.385 TCP 23.104.0.1:41658 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:35:06.976 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 20:34:58.459 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38688 10 6452 1 2025-09-18 20:35:06.994 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 20:35:38.828 00:00:10.362 TCP 23.104.0.1:50376 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:35:58.670 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59716 10 6452 1 2025-09-18 20:32:30.288 00:05:01.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 20:36:39.229 00:00:10.319 TCP 23.104.0.1:51894 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:36:58.880 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43330 10 6452 1 2025-09-18 20:33:30.290 00:05:01.222 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 20:37:39.588 00:00:10.364 TCP 23.104.0.1:44244 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:37:59.114 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56874 10 6452 1 2025-09-18 20:38:39.990 00:00:10.365 TCP 23.104.0.1:57982 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:38:59.297 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48608 10 6452 1 2025-09-18 20:39:40.393 00:00:10.359 TCP 23.104.0.1:58698 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:40:06.963 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 20:40:06.980 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 20:39:59.517 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50656 10 6452 1 2025-09-18 20:40:40.798 00:00:10.328 TCP 23.104.0.1:38642 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:40:59.737 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59464 10 6452 1 2025-09-18 20:41:41.166 00:00:10.323 TCP 23.104.0.1:57656 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:41:59.954 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:51552 10 6452 1 2025-09-18 20:38:30.288 00:05:01.229 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 20:42:41.529 00:00:10.898 TCP 23.104.0.1:60732 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:43:00.188 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50388 10 6452 1 2025-09-18 20:39:30.291 00:05:01.223 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 20:43:42.462 00:00:10.369 TCP 23.104.0.1:36168 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:44:00.419 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50096 10 6452 1 2025-09-18 20:44:42.865 00:00:10.370 TCP 23.104.0.1:60402 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:45:07.319 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 20:45:00.637 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45986 10 6452 1 2025-09-18 20:45:07.229 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 20:45:43.271 00:00:10.369 TCP 23.104.0.1:46676 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:46:00.812 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50064 12 6556 1 2025-09-18 20:46:43.677 00:00:10.358 TCP 23.104.0.1:42000 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:47:01.039 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60384 10 6452 1 2025-09-18 20:47:44.100 00:00:10.368 TCP 23.104.0.1:42708 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:48:01.254 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60492 10 6452 1 2025-09-18 20:44:30.289 00:05:01.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 20:48:44.504 00:00:10.334 TCP 23.104.0.1:54224 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:49:01.476 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46306 10 6452 1 2025-09-18 20:45:30.292 00:05:01.224 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 20:49:44.886 00:00:10.373 TCP 23.104.0.1:45456 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:50:07.469 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 20:50:01.686 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55968 10 6452 1 2025-09-18 20:50:07.299 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 20:50:45.302 00:00:10.372 TCP 23.104.0.1:46508 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:51:01.913 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:39118 10 6452 1 2025-09-18 20:51:45.730 00:00:10.331 TCP 23.104.0.1:44504 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:52:02.170 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-09-18 20:52:46.099 00:00:10.363 TCP 23.104.0.1:55454 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:53:02.384 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44998 10 6452 1 2025-09-18 20:53:46.497 00:00:10.369 TCP 23.104.0.1:47238 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:54:02.560 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59772 10 6452 1 2025-09-18 20:50:30.291 00:05:01.228 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 20:54:46.905 00:00:10.367 TCP 23.104.0.1:49174 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:55:07.375 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 20:55:07.454 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 20:55:02.775 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60874 10 6452 1 2025-09-18 20:51:30.294 00:05:01.223 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 20:55:47.306 00:00:10.363 TCP 23.104.0.1:38494 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:56:02.981 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57006 10 6452 1 2025-09-18 20:56:47.711 00:00:10.380 TCP 23.104.0.1:59864 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:57:03.206 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38634 10 6452 1 2025-09-18 20:57:48.124 00:00:10.369 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-09-18 20:58:03.378 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37136 10 6452 1 Summary: total flows: 163, total bytes: 504849, total packets: 1570, avg bps: 1090, avg pps: 0, avg bpp: 321 Time window: 2025-09-18 19:56:30 - 2025-09-18 20:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0027s User: 0.0027s Wall: 0.0024s flows/second: 67079.2 Runtime: 0.0025s