Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-19 13:58:49.943 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42648 10 6452 1 2025-09-19 13:59:37.783 00:00:10.363 TCP 23.104.0.1:39994 -> 1.101.0.1:3000 11 1507 1 2025-09-19 13:59:50.175 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37290 10 6452 1 2025-09-19 14:00:27.873 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 14:00:27.829 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 13:56:30.628 00:05:01.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 14:00:38.187 00:00:10.437 TCP 23.104.0.1:54130 -> 1.101.0.1:3000 15 1926 1 2025-09-19 14:00:50.389 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:39144 12 10367 1 2025-09-19 13:57:30.630 00:05:01.230 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 14:01:38.663 00:00:10.365 TCP 23.104.0.1:53808 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:01:50.629 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36558 10 6452 1 2025-09-19 14:02:39.099 00:00:10.321 TCP 23.104.0.1:40550 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:02:50.836 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59106 10 6452 1 2025-09-19 14:03:39.459 00:00:10.364 TCP 23.104.0.1:59862 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:03:51.077 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35332 10 6452 1 2025-09-19 14:04:39.861 00:00:10.387 TCP 23.104.0.1:34528 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:04:51.290 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42434 10 6452 1 2025-09-19 14:05:27.919 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 14:05:28.189 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 14:05:40.287 00:00:10.401 TCP 23.104.0.1:36200 -> 1.101.0.1:3000 15 1926 1 2025-09-19 14:05:51.461 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41172 12 10367 1 2025-09-19 14:02:30.630 00:05:01.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 14:06:40.722 00:00:10.329 TCP 23.104.0.1:57938 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:06:51.699 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:39754 10 6452 1 2025-09-19 14:03:30.635 00:05:01.230 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 14:07:41.105 00:00:10.321 TCP 23.104.0.1:38570 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:07:51.884 00:00:10.362 TCP 1.101.0.1:3000 -> 22.102.0.1:58978 10 6452 1 2025-09-19 14:08:41.467 00:00:10.364 TCP 23.104.0.1:52484 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:08:52.292 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47928 10 6452 1 2025-09-19 14:09:41.870 00:00:10.367 TCP 23.104.0.1:40776 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:09:52.514 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60642 10 6452 1 2025-09-19 14:10:27.982 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 14:10:27.954 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 14:10:42.277 00:00:10.361 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:10:52.728 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46722 10 6452 1 2025-09-19 14:11:42.677 00:00:10.347 TCP 23.104.0.1:38288 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:11:52.938 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34104 10 6452 1 2025-09-19 14:08:30.635 00:05:01.235 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 14:12:43.095 00:00:10.367 TCP 23.104.0.1:48300 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:12:53.136 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44744 10 6452 1 2025-09-19 14:09:30.637 00:05:01.230 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 14:13:43.508 00:00:10.364 TCP 23.104.0.1:36952 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:13:53.351 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56672 10 6452 1 2025-09-19 14:14:43.910 00:00:10.365 TCP 23.104.0.1:39450 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:14:53.524 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56214 10 6452 1 2025-09-19 14:15:28.285 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 14:15:27.989 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 14:15:44.316 00:00:10.367 TCP 23.104.0.1:34998 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:15:53.739 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50722 10 6452 1 2025-09-19 14:16:44.725 00:00:10.376 TCP 23.104.0.1:38454 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:16:53.952 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:59786 10 6452 1 2025-09-19 14:17:45.143 00:00:10.366 TCP 23.104.0.1:52828 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:17:54.183 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36142 10 6452 1 2025-09-19 14:14:30.637 00:05:01.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 14:18:45.549 00:00:10.366 TCP 23.104.0.1:34786 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:18:54.398 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-09-19 14:15:30.640 00:05:01.230 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 14:19:45.957 00:00:10.367 TCP 23.104.0.1:45426 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:19:54.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33526 10 6452 1 2025-09-19 14:20:28.394 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 14:20:28.288 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 14:20:46.365 00:00:10.365 TCP 23.104.0.1:41660 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:20:54.841 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53004 10 6452 1 2025-09-19 14:21:46.767 00:00:10.374 TCP 23.104.0.1:56612 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:21:55.010 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33164 10 6452 1 2025-09-19 14:22:47.182 00:00:10.369 TCP 23.104.0.1:60068 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:22:55.228 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33652 10 6452 1 2025-09-19 14:23:47.590 00:00:10.364 TCP 23.104.0.1:36938 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:23:55.404 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54414 10 6452 1 2025-09-19 14:20:30.638 00:05:01.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 14:24:47.994 00:00:10.375 TCP 23.104.0.1:44128 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:24:55.622 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54090 10 6452 1 2025-09-19 14:25:28.419 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 14:25:28.629 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 14:21:30.641 00:05:01.232 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 14:25:48.409 00:00:10.366 TCP 23.104.0.1:37962 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:25:55.828 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:33450 11 6504 1 2025-09-19 14:26:48.810 00:00:10.332 TCP 23.104.0.1:33670 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:26:56.111 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49498 10 6452 1 2025-09-19 14:27:49.187 00:00:10.366 TCP 23.104.0.1:40378 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:27:56.327 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38612 10 6452 1 2025-09-19 14:28:49.596 00:00:10.369 TCP 23.104.0.1:58662 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:28:56.568 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60364 10 6452 1 2025-09-19 14:29:50.004 00:00:10.364 TCP 23.104.0.1:35370 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:29:56.780 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38986 10 6452 1 2025-09-19 14:30:28.387 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 14:30:28.361 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 14:26:30.639 00:05:01.241 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 14:30:50.410 00:00:10.366 TCP 23.104.0.1:51152 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:30:56.989 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:51962 10 6452 1 2025-09-19 14:27:30.641 00:05:01.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 14:31:50.818 00:00:10.362 TCP 23.104.0.1:45542 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:31:57.175 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57118 10 6452 1 2025-09-19 14:32:51.218 00:00:10.838 TCP 23.104.0.1:55668 -> 1.101.0.1:3000 13 1611 1 2025-09-19 14:32:57.388 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39862 10 6452 1 2025-09-19 14:33:52.108 00:00:10.363 TCP 23.104.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:33:57.560 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49390 10 6452 1 2025-09-19 14:34:52.509 00:00:10.375 TCP 23.104.0.1:35418 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:34:57.779 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57698 10 6452 1 2025-09-19 14:35:28.629 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 14:35:28.626 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 14:35:52.920 00:00:10.385 TCP 23.104.0.1:51340 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:35:57.991 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55972 10 6452 1 2025-09-19 14:32:30.650 00:05:01.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 14:36:53.345 00:00:10.322 TCP 23.104.0.1:43154 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:36:58.227 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38696 10 6452 1 2025-09-19 14:33:30.652 00:05:01.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 14:37:53.704 00:00:10.362 TCP 23.104.0.1:57820 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:37:58.403 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39766 10 6452 1 2025-09-19 14:38:54.108 00:00:10.366 TCP 23.104.0.1:33404 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:38:58.612 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60906 10 6452 1 2025-09-19 14:39:54.508 00:00:10.451 TCP 23.104.0.1:49476 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:39:58.789 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56258 10 6452 1 2025-09-19 14:40:28.664 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 14:40:28.744 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 14:40:54.996 00:00:10.370 TCP 23.104.0.1:53542 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:40:59.002 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34360 10 6452 1 2025-09-19 14:41:55.407 00:00:10.366 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:41:59.170 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58540 10 6452 1 2025-09-19 14:38:30.649 00:05:01.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 14:42:55.810 00:00:10.365 TCP 23.104.0.1:36600 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:42:59.383 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49302 10 6452 1 2025-09-19 14:39:30.653 00:05:01.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 14:43:56.211 00:00:10.368 TCP 23.104.0.1:44854 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:43:59.596 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60042 10 6452 1 2025-09-19 14:44:56.622 00:00:10.341 TCP 23.104.0.1:60154 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:44:59.812 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37440 10 6452 1 2025-09-19 14:45:29.346 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 14:45:28.936 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 14:46:00.038 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55344 10 6452 1 2025-09-19 14:45:57.007 00:00:10.366 TCP 23.104.0.1:54064 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:46:57.410 00:00:10.375 TCP 23.104.0.1:48430 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:47:00.260 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40660 10 6452 1 2025-09-19 14:47:57.820 00:00:10.365 TCP 23.104.0.1:39390 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:48:00.431 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36118 10 6452 1 2025-09-19 14:44:30.651 00:05:01.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 14:48:58.217 00:00:10.327 TCP 23.104.0.1:46170 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:49:00.641 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 12 6544 1 2025-09-19 14:45:30.653 00:05:01.229 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 14:49:58.579 00:00:10.365 TCP 23.104.0.1:39076 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:50:00.853 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43428 10 6452 1 2025-09-19 14:50:28.960 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 14:50:28.743 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 14:50:58.985 00:00:10.370 TCP 23.104.0.1:46850 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:51:01.079 00:00:10.485 TCP 1.101.0.1:3000 -> 22.102.0.1:40660 10 6452 1 2025-09-19 14:52:01.602 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47278 10 6452 1 2025-09-19 14:51:59.388 00:00:10.368 TCP 23.104.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:52:59.790 00:00:10.363 TCP 23.104.0.1:51738 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:53:01.816 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37734 10 6452 1 2025-09-19 14:54:00.190 00:00:10.367 TCP 23.104.0.1:49948 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:54:02.063 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46254 10 6452 1 2025-09-19 14:50:30.652 00:05:01.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 14:55:00.589 00:00:10.365 TCP 23.104.0.1:42224 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:55:02.282 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52562 10 6452 1 2025-09-19 14:55:29.170 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 14:55:28.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 14:51:30.654 00:05:01.230 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 14:56:00.992 00:00:10.363 TCP 23.104.0.1:38094 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:56:02.496 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57188 10 6452 1 2025-09-19 14:57:01.393 00:00:10.366 TCP 23.104.0.1:59096 -> 1.101.0.1:3000 11 1507 1 2025-09-19 14:57:02.710 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51304 10 6452 1 2025-09-19 14:58:02.884 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47840 10 6452 1 2025-09-19 14:58:01.801 00:00:10.366 TCP 23.104.0.1:35910 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505757, total packets: 1578, avg bps: 1092, avg pps: 0, avg bpp: 320 Time window: 2025-09-19 13:56:30 - 2025-09-19 14:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0010s Wall: 0.0020s flows/second: 82608.9 Runtime: 0.0020s