Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 10:58:42.841 00:00:10.779 TCP 1.101.0.1:3000 -> 22.102.0.1:55214 10 6452 1 2025-09-20 10:59:15.055 00:00:10.370 TCP 23.104.0.1:55470 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:59:43.671 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52536 10 6452 1 2025-09-20 11:00:15.465 00:00:10.356 TCP 23.104.0.1:33508 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:56:31.077 00:05:01.297 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 11:00:53.210 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 11:00:43.838 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60832 10 6452 1 2025-09-20 11:00:53.058 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 11:01:15.857 00:00:10.368 TCP 23.104.0.1:34974 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:57:31.080 00:05:01.293 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 11:01:44.070 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59956 10 6452 1 2025-09-20 11:02:16.264 00:00:10.367 TCP 23.104.0.1:60934 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:02:44.285 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:39832 10 6452 1 2025-09-20 11:03:16.670 00:00:10.324 TCP 23.104.0.1:56060 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:03:44.470 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34462 10 6452 1 2025-09-20 11:04:17.035 00:00:10.363 TCP 23.104.0.1:49652 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:04:44.682 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36860 10 6452 1 2025-09-20 11:05:17.435 00:00:10.363 TCP 23.104.0.1:57718 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:05:53.216 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 11:05:44.893 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34358 10 6452 1 2025-09-20 11:05:53.369 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 11:06:17.837 00:00:10.386 TCP 23.104.0.1:57902 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:02:31.079 00:05:01.302 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 11:06:45.111 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32908 10 6452 1 2025-09-20 11:07:18.260 00:00:10.376 TCP 23.104.0.1:34648 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:03:31.081 00:05:01.297 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 11:07:45.280 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44452 10 6452 1 2025-09-20 11:08:18.675 00:00:10.370 TCP 23.104.0.1:46714 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:08:45.494 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49518 10 6452 1 2025-09-20 11:09:19.113 00:00:10.366 TCP 23.104.0.1:44034 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:09:45.707 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46252 10 6452 1 2025-09-20 11:10:19.516 00:00:10.366 TCP 23.104.0.1:58112 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:10:53.420 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 11:10:45.919 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36472 10 6452 1 2025-09-20 11:10:53.239 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 11:11:19.920 00:00:10.376 TCP 23.104.0.1:53514 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:11:46.142 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48892 10 6452 1 2025-09-20 11:12:20.333 00:00:10.367 TCP 23.104.0.1:46060 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:08:31.084 00:05:01.299 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 11:12:46.368 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40142 10 6452 1 2025-09-20 11:13:20.740 00:00:10.364 TCP 23.104.0.1:54444 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:09:31.086 00:05:01.294 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 11:13:46.584 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42734 10 6452 1 2025-09-20 11:14:21.143 00:00:10.369 TCP 23.104.0.1:52076 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:14:46.802 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56996 10 6452 1 2025-09-20 11:15:21.546 00:00:10.380 TCP 23.104.0.1:39196 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:15:53.586 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 11:15:53.869 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 11:15:47.030 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37046 10 6452 1 2025-09-20 11:16:21.969 00:00:10.367 TCP 23.104.0.1:59334 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:16:47.245 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46612 10 6452 1 2025-09-20 11:17:22.377 00:00:10.373 TCP 23.104.0.1:59512 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:17:47.466 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58802 10 6452 1 2025-09-20 11:14:31.084 00:05:01.299 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 11:18:22.791 00:00:10.369 TCP 23.104.0.1:41184 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:18:47.682 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60264 10 6452 1 2025-09-20 11:19:23.199 00:00:10.363 TCP 23.104.0.1:51514 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:15:31.086 00:05:01.294 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 11:19:47.906 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49566 10 6452 1 2025-09-20 11:20:23.598 00:00:10.362 TCP 23.104.0.1:44216 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:20:53.591 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 11:20:53.668 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 11:20:48.130 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40654 10 6452 1 2025-09-20 11:21:24.004 00:00:10.370 TCP 23.104.0.1:53238 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:21:48.311 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56468 10 6452 1 2025-09-20 11:22:24.411 00:00:10.365 TCP 23.104.0.1:52390 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:22:48.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56738 10 6452 1 2025-09-20 11:23:24.815 00:00:10.784 TCP 23.104.0.1:33042 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:23:48.735 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32922 10 6452 1 2025-09-20 11:24:25.640 00:00:10.366 TCP 23.104.0.1:60782 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:20:31.085 00:05:01.299 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 11:24:48.950 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:45432 10 6452 1 2025-09-20 11:21:31.089 00:05:01.294 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 11:25:26.051 00:00:10.324 TCP 23.104.0.1:59004 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:25:53.808 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 11:25:53.650 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 11:25:49.135 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55282 10 6452 1 2025-09-20 11:26:26.412 00:00:10.428 TCP 23.104.0.1:50942 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:26:49.305 00:00:10.393 TCP 1.101.0.1:3000 -> 22.102.0.1:52812 10 6452 1 2025-09-20 11:27:26.883 00:00:10.342 TCP 23.104.0.1:32980 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:27:49.742 00:00:14.936 TCP 1.101.0.1:3000 -> 22.102.0.1:41886 10 6452 1 2025-09-20 11:28:27.264 00:00:10.372 TCP 23.104.0.1:40956 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:28:54.722 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49222 10 6452 1 2025-09-20 11:29:27.672 00:00:10.368 TCP 23.104.0.1:47678 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:29:54.937 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:50858 10 6452 1 2025-09-20 11:26:31.096 00:05:01.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 11:30:28.104 00:00:10.371 TCP 23.104.0.1:51018 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:30:54.264 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 11:30:54.321 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 11:30:55.136 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54420 10 6452 1 2025-09-20 11:27:31.097 00:05:01.288 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 11:31:28.515 00:00:10.367 TCP 23.104.0.1:48872 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:31:55.346 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38638 10 6452 1 2025-09-20 11:32:28.919 00:00:10.359 TCP 23.104.0.1:49612 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:32:55.554 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35286 10 6452 1 2025-09-20 11:33:29.317 00:00:10.373 TCP 23.104.0.1:34666 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:33:55.771 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44322 10 6452 1 2025-09-20 11:34:29.724 00:00:10.374 TCP 23.104.0.1:54848 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:34:56.000 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42754 10 6452 1 2025-09-20 11:35:30.137 00:00:10.379 TCP 23.104.0.1:49762 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:35:53.845 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 11:35:53.716 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 11:35:56.234 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:46308 12 10365 1 2025-09-20 11:32:31.095 00:05:01.293 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 11:36:30.563 00:00:10.435 TCP 23.104.0.1:56604 -> 1.101.0.1:3000 15 1926 1 2025-09-20 11:36:56.477 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50320 10 6452 1 2025-09-20 11:33:31.099 00:05:01.287 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 11:37:31.043 00:00:10.367 TCP 23.104.0.1:50148 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:37:56.701 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57258 10 6452 1 2025-09-20 11:38:31.451 00:00:10.324 TCP 23.104.0.1:53790 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:38:56.923 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:43606 10 6452 1 2025-09-20 11:39:31.821 00:00:10.365 TCP 23.104.0.1:35778 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:39:57.165 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53470 10 6452 1 2025-09-20 11:40:32.224 00:00:10.367 TCP 23.104.0.1:60370 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:40:54.045 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 11:40:54.027 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 11:40:57.385 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32942 10 6452 1 2025-09-20 11:41:32.629 00:00:10.367 TCP 23.104.0.1:46358 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:41:57.604 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45672 10 6452 1 2025-09-20 11:38:31.097 00:05:01.292 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 11:42:33.031 00:00:10.365 TCP 23.104.0.1:46266 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:42:57.783 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39256 10 6452 1 2025-09-20 11:39:31.098 00:05:01.288 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 11:43:33.436 00:00:10.365 TCP 23.104.0.1:48758 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:43:58.000 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40506 10 6452 1 2025-09-20 11:44:33.849 00:00:10.390 TCP 23.104.0.1:58140 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:44:58.178 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58242 10 6452 1 2025-09-20 11:45:34.281 00:00:10.363 TCP 23.104.0.1:37620 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:45:54.050 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 11:45:53.896 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 11:45:58.390 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35064 10 6452 1 2025-09-20 11:46:34.685 00:00:10.326 TCP 23.104.0.1:58666 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:46:58.605 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55830 10 6452 1 2025-09-20 11:47:35.062 00:00:10.363 TCP 23.104.0.1:44306 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:47:58.816 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49966 10 6452 1 2025-09-20 11:44:31.097 00:05:01.293 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 11:48:35.465 00:00:10.362 TCP 23.104.0.1:53122 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:48:59.037 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46276 10 6452 1 2025-09-20 11:45:31.099 00:05:01.288 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 11:49:35.871 00:00:10.322 TCP 23.104.0.1:58676 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:49:59.252 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2025-09-20 11:50:36.234 00:00:10.358 TCP 23.104.0.1:34004 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:50:54.624 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 11:50:54.451 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 11:50:59.467 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55876 10 6452 1 2025-09-20 11:51:36.632 00:00:10.380 TCP 23.104.0.1:58564 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:51:59.674 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58502 10 6452 1 2025-09-20 11:52:37.108 00:00:10.362 TCP 23.104.0.1:56218 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:52:59.886 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45056 10 6452 1 2025-09-20 11:53:37.510 00:00:10.328 TCP 23.104.0.1:38762 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:54:00.110 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49472 10 6452 1 2025-09-20 11:50:31.097 00:05:01.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 11:54:37.873 00:00:10.366 TCP 23.104.0.1:34238 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:55:00.318 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41596 10 6452 1 2025-09-20 11:51:31.100 00:05:01.289 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 11:55:38.276 00:00:10.368 TCP 23.104.0.1:49720 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:55:54.376 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 11:55:54.211 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 11:56:00.531 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60260 10 6452 1 2025-09-20 11:56:38.678 00:00:10.368 TCP 23.104.0.1:59222 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:57:00.746 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58452 10 6452 1 2025-09-20 11:57:39.103 00:00:10.321 TCP 23.104.0.1:58344 -> 1.101.0.1:3000 11 1507 1 2025-09-20 11:58:00.957 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:52540 10 6452 1 2025-09-20 11:58:39.465 00:00:10.365 TCP 23.104.0.1:43230 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502680, total packets: 1578, avg bps: 1075, avg pps: 0, avg bpp: 318 Time window: 2025-09-20 10:56:31 - 2025-09-20 11:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0010s Wall: 0.0023s flows/second: 70870.2 Runtime: 0.0023s