Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 04:58:43.513 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60376 10 6452 1 2025-09-20 04:59:24.859 00:00:10.371 TCP 23.104.0.1:58118 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:59:43.729 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54494 10 6452 1 2025-09-20 05:00:25.274 00:00:10.330 TCP 23.104.0.1:48708 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:56:30.912 00:05:01.338 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 05:00:45.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 05:00:45.969 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 05:00:43.902 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:51750 10 6452 1 2025-09-20 05:01:25.635 00:00:10.363 TCP 23.104.0.1:56500 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:57:30.914 00:05:01.334 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 05:01:44.090 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-09-20 05:02:26.060 00:00:10.319 TCP 23.104.0.1:60148 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:02:44.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60770 10 6452 1 2025-09-20 05:03:26.420 00:00:10.370 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:03:44.511 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45216 10 6452 1 2025-09-20 05:04:26.824 00:00:20.128 TCP 23.104.0.1:42346 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:04:44.689 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43180 10 6452 1 2025-09-20 05:05:45.928 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 05:05:45.979 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 05:05:37.020 00:00:10.363 TCP 23.104.0.1:50426 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:05:44.895 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54066 10 6452 1 2025-09-20 05:02:30.912 00:05:01.339 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 05:06:37.422 00:00:10.363 TCP 23.104.0.1:54430 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:06:45.121 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60256 10 6452 1 2025-09-20 05:03:30.916 00:05:01.332 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 05:07:37.826 00:00:10.363 TCP 23.104.0.1:44848 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:07:45.335 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52806 10 6452 1 2025-09-20 05:08:38.227 00:00:10.370 TCP 23.104.0.1:55820 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:08:45.545 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57512 10 6452 1 2025-09-20 05:09:38.645 00:00:10.367 TCP 23.104.0.1:42456 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:09:45.763 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34270 10 6452 1 2025-09-20 05:10:46.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 05:10:46.206 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 05:10:39.054 00:00:10.368 TCP 23.104.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:10:45.979 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:54048 10 6452 1 2025-09-20 05:11:39.464 00:00:10.327 TCP 23.104.0.1:34978 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:11:46.228 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40386 10 6452 1 2025-09-20 05:08:30.913 00:05:01.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 05:12:39.832 00:00:10.388 TCP 23.104.0.1:54666 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:12:46.397 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40334 10 6452 1 2025-09-20 05:09:30.917 00:05:01.335 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 05:13:40.259 00:00:10.365 TCP 23.104.0.1:33290 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:13:46.606 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47842 10 6452 1 2025-09-20 05:14:40.666 00:00:10.369 TCP 23.104.0.1:45398 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:14:46.817 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36870 10 6452 1 2025-09-20 05:15:46.161 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 05:15:46.142 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 05:15:41.094 00:00:10.366 TCP 23.104.0.1:50114 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:15:46.996 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46094 10 6452 1 2025-09-20 05:16:41.499 00:00:10.386 TCP 23.104.0.1:43346 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:16:47.216 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56742 10 6452 1 2025-09-20 05:17:41.924 00:00:10.338 TCP 23.104.0.1:38092 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:17:47.423 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42476 10 6452 1 2025-09-20 05:14:30.915 00:05:01.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 05:18:42.300 00:00:10.362 TCP 23.104.0.1:40856 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:18:47.638 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56894 10 6452 1 2025-09-20 05:15:30.917 00:05:01.335 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 05:19:42.698 00:00:10.365 TCP 23.104.0.1:39776 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:19:47.844 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45612 10 6452 1 2025-09-20 05:20:46.304 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 05:20:46.283 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 05:20:43.109 00:00:10.366 TCP 23.104.0.1:54736 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:20:48.075 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35092 10 6452 1 2025-09-20 05:21:43.518 00:00:10.367 TCP 23.104.0.1:44588 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:21:48.290 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59400 10 6452 1 2025-09-20 05:22:43.921 00:00:10.397 TCP 23.104.0.1:49894 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:22:48.457 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47236 10 6452 1 2025-09-20 05:23:44.356 00:00:10.366 TCP 23.104.0.1:38896 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:23:48.673 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58514 10 6452 1 2025-09-20 05:20:30.917 00:05:01.341 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 05:24:44.769 00:00:10.331 TCP 23.104.0.1:46280 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:24:48.885 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50232 10 6452 1 2025-09-20 05:21:30.921 00:05:01.335 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 05:25:46.505 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 05:25:46.438 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 05:25:45.137 00:00:10.364 TCP 23.104.0.1:52638 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:25:49.080 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50556 10 6452 1 2025-09-20 05:26:45.548 00:00:10.361 TCP 23.104.0.1:50566 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:26:49.255 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45772 10 6452 1 2025-09-20 05:27:45.947 00:00:10.374 TCP 23.104.0.1:50864 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:27:49.476 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39470 10 6452 1 2025-09-20 05:28:46.358 00:00:10.331 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:28:49.686 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47488 10 6452 1 2025-09-20 05:29:49.899 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40128 10 6452 1 2025-09-20 05:29:46.732 00:00:10.371 TCP 23.104.0.1:46758 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:26:30.919 00:05:01.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 05:30:46.601 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 05:30:46.679 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 05:30:50.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35866 10 6452 1 2025-09-20 05:30:47.154 00:00:10.364 TCP 23.104.0.1:36918 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:27:30.922 00:05:01.335 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 05:31:47.559 00:00:10.359 TCP 23.104.0.1:34682 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:31:50.329 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36664 10 6452 1 2025-09-20 05:32:47.959 00:00:10.340 TCP 23.104.0.1:33718 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:32:50.497 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58424 10 6452 1 2025-09-20 05:33:50.710 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39718 10 6452 1 2025-09-20 05:33:48.339 00:00:10.323 TCP 23.104.0.1:40918 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:34:48.702 00:00:10.368 TCP 23.104.0.1:52754 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:34:50.914 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54800 10 6452 1 2025-09-20 05:35:47.386 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 05:35:47.200 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 05:35:51.127 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48432 10 6452 1 2025-09-20 05:35:49.113 00:00:10.365 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:32:30.920 00:05:01.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 05:36:51.338 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60138 10 6452 1 2025-09-20 05:36:49.514 00:00:10.368 TCP 23.104.0.1:60722 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:33:30.923 00:05:01.336 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 05:37:51.506 00:00:10.323 TCP 1.101.0.1:3000 -> 22.102.0.1:40472 10 6452 1 2025-09-20 05:37:49.917 00:00:10.337 TCP 23.104.0.1:36542 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:38:50.290 00:00:10.363 TCP 23.104.0.1:42908 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:38:51.869 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54930 10 6452 1 2025-09-20 05:39:50.691 00:00:10.373 TCP 23.104.0.1:58238 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:39:52.093 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51268 10 6452 1 2025-09-20 05:40:46.557 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 05:40:46.608 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 05:40:51.104 00:00:10.324 TCP 23.104.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:40:52.310 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56546 10 6452 1 2025-09-20 05:41:51.471 00:00:10.320 TCP 23.104.0.1:47158 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:41:52.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35868 10 6452 1 2025-09-20 05:38:30.921 00:05:01.346 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 05:42:52.735 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56334 10 6452 1 2025-09-20 05:42:51.833 00:00:10.389 TCP 23.104.0.1:48426 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:39:30.924 00:05:01.342 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 05:43:52.952 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:50146 10 6452 1 2025-09-20 05:43:52.262 00:00:10.329 TCP 23.104.0.1:46160 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:44:53.189 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48344 10 6452 1 2025-09-20 05:44:52.630 00:00:10.371 TCP 23.104.0.1:54280 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:45:46.771 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 05:45:46.599 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 05:45:53.056 00:00:10.375 TCP 23.104.0.1:49790 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:45:53.404 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57762 10 6452 1 2025-09-20 05:46:53.471 00:00:10.374 TCP 23.104.0.1:51372 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:46:53.622 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57694 10 6452 1 2025-09-20 05:47:53.881 00:00:10.376 TCP 23.104.0.1:56508 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:47:53.836 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32888 10 6452 1 2025-09-20 05:44:30.924 00:05:01.346 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 05:48:54.071 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33788 10 6452 1 2025-09-20 05:48:54.298 00:00:10.337 TCP 23.104.0.1:44628 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:45:30.927 00:05:01.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 05:49:54.287 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47644 10 6452 1 2025-09-20 05:49:54.681 00:00:10.374 TCP 23.104.0.1:43352 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:50:46.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 05:50:47.047 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 05:50:54.496 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53936 10 6452 1 2025-09-20 05:50:55.109 00:00:10.369 TCP 23.104.0.1:47256 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:51:55.520 00:00:10.367 TCP 23.104.0.1:48070 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:51:54.713 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50984 10 6452 1 2025-09-20 05:52:55.929 00:00:14.977 TCP 23.104.0.1:55862 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:52:54.928 00:00:15.886 TCP 1.101.0.1:3000 -> 22.102.0.1:40204 10 6452 1 2025-09-20 05:54:00.861 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57252 10 6452 1 2025-09-20 05:54:00.976 00:00:10.366 TCP 23.104.0.1:50732 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:50:30.927 00:05:01.344 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 05:55:01.384 00:00:10.373 TCP 23.104.0.1:35086 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:55:01.085 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-09-20 05:51:30.929 00:05:01.345 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 05:55:47.171 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 05:55:47.030 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 05:56:01.313 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:46302 12 10367 1 2025-09-20 05:56:01.795 00:00:10.497 TCP 23.104.0.1:40482 -> 1.101.0.1:3000 15 1926 1 2025-09-20 05:57:01.555 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57680 10 6452 1 2025-09-20 05:57:02.333 00:00:10.325 TCP 23.104.0.1:44732 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:58:01.778 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38776 10 6452 1 2025-09-20 05:58:02.695 00:00:10.366 TCP 23.104.0.1:44426 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 501175, total packets: 1567, avg bps: 1082, avg pps: 0, avg bpp: 319 Time window: 2025-09-20 04:56:30 - 2025-09-20 05:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0019s Wall: 0.0021s flows/second: 77991.3 Runtime: 0.0021s