Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 10:58:48.889 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40052 10 6452 1 2025-09-23 10:59:26.193 00:00:10.369 TCP 23.104.0.1:36394 -> 1.101.0.1:3000 11 1507 1 2025-09-23 10:59:49.106 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53152 10 6452 1 2025-09-23 10:56:32.422 00:05:01.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 11:00:26.597 00:00:10.324 TCP 23.104.0.1:45298 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:00:49.280 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51930 10 6452 1 2025-09-23 10:57:32.424 00:05:01.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 11:01:26.959 00:00:10.375 TCP 23.104.0.1:37784 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:01:49.495 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57388 10 6452 1 2025-09-23 11:02:19.807 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 11:02:19.680 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 11:02:27.372 00:00:10.364 TCP 23.104.0.1:49068 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:02:49.663 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42392 10 6452 1 2025-09-23 11:03:27.776 00:00:10.369 TCP 23.104.0.1:40344 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:03:49.877 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34754 10 6452 1 2025-09-23 11:04:28.183 00:00:10.360 TCP 23.104.0.1:34290 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:04:50.103 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44906 10 6452 1 2025-09-23 11:05:28.591 00:00:10.386 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:05:50.275 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51586 10 6452 1 2025-09-23 11:02:32.423 00:05:01.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 11:06:29.016 00:00:10.380 TCP 23.104.0.1:47614 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:06:50.484 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37124 10 6452 1 2025-09-23 11:07:19.964 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 11:07:20.016 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 11:03:32.426 00:05:01.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 11:07:29.425 00:00:10.365 TCP 23.104.0.1:36710 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:07:50.711 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60722 10 6452 1 2025-09-23 11:08:29.822 00:00:10.366 TCP 23.104.0.1:35252 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:08:50.923 00:00:10.809 TCP 1.101.0.1:3000 -> 22.102.0.1:38818 10 6452 1 2025-09-23 11:09:30.225 00:00:10.365 TCP 23.104.0.1:41100 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:09:51.768 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51094 10 6452 1 2025-09-23 11:10:30.631 00:00:10.370 TCP 23.104.0.1:48832 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:10:51.976 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48124 10 6452 1 2025-09-23 11:11:31.034 00:00:10.364 TCP 23.104.0.1:45128 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:11:52.220 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37232 10 6452 1 2025-09-23 11:12:19.940 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 11:12:19.862 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 11:08:32.427 00:05:01.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 11:12:31.437 00:00:10.371 TCP 23.104.0.1:40192 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:12:52.394 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58080 10 6452 1 2025-09-23 11:09:32.429 00:05:01.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 11:13:31.842 00:00:10.382 TCP 23.104.0.1:48624 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:13:52.609 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58812 10 6452 1 2025-09-23 11:14:32.261 00:00:10.366 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:14:52.820 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35034 10 6452 1 2025-09-23 11:15:32.665 00:00:10.341 TCP 23.104.0.1:53838 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:15:53.056 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43634 10 6452 1 2025-09-23 11:16:33.059 00:00:10.321 TCP 23.104.0.1:42718 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:16:53.266 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33902 10 6452 1 2025-09-23 11:17:20.235 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 11:17:20.248 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 11:17:33.418 00:00:10.369 TCP 23.104.0.1:54322 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:17:53.481 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-09-23 11:14:32.427 00:05:01.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 11:18:33.824 00:00:10.324 TCP 23.104.0.1:55384 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:18:53.692 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-09-23 11:15:32.429 00:05:01.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 11:19:34.191 00:00:10.373 TCP 23.104.0.1:34922 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:19:53.902 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42368 10 6452 1 2025-09-23 11:20:34.599 00:00:10.324 TCP 23.104.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:20:54.096 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48846 10 6452 1 2025-09-23 11:21:34.960 00:00:10.327 TCP 23.104.0.1:45728 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:21:54.311 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57310 10 6452 1 2025-09-23 11:22:20.103 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 11:22:20.206 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 11:22:35.330 00:00:10.368 TCP 23.104.0.1:46366 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:22:54.520 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48940 10 6452 1 2025-09-23 11:23:35.736 00:00:10.366 TCP 23.104.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:23:54.734 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33212 10 6452 1 2025-09-23 11:20:32.427 00:05:01.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 11:24:36.136 00:00:10.366 TCP 23.104.0.1:48200 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:24:54.904 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39220 10 6452 1 2025-09-23 11:21:32.431 00:05:01.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 11:25:36.543 00:00:10.371 TCP 23.104.0.1:49584 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:25:55.123 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49520 10 6452 1 2025-09-23 11:26:36.956 00:00:10.439 TCP 23.104.0.1:56332 -> 1.101.0.1:3000 15 1926 1 2025-09-23 11:26:55.337 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:43100 12 10367 1 2025-09-23 11:27:20.293 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 11:27:20.353 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 11:27:37.432 00:00:10.366 TCP 23.104.0.1:56660 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:27:55.583 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50436 10 6452 1 2025-09-23 11:28:37.840 00:00:10.391 TCP 23.104.0.1:39486 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:28:55.755 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37448 10 6452 1 2025-09-23 11:29:38.272 00:00:10.325 TCP 23.104.0.1:51342 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:29:55.970 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48586 10 6452 1 2025-09-23 11:26:32.429 00:05:01.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 11:30:38.635 00:00:10.363 TCP 23.104.0.1:39976 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:30:56.203 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56800 10 6452 1 2025-09-23 11:27:32.433 00:05:01.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 11:31:39.033 00:00:10.371 TCP 23.104.0.1:37944 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:31:56.424 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39742 10 6452 1 2025-09-23 11:32:20.522 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 11:32:20.487 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 11:32:39.445 00:00:10.365 TCP 23.104.0.1:41602 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:32:56.641 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45576 10 6452 1 2025-09-23 11:33:39.849 00:00:10.380 TCP 23.104.0.1:57748 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:33:56.854 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53360 10 6452 1 2025-09-23 11:34:40.271 00:00:10.320 TCP 23.104.0.1:51188 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:34:57.039 00:00:10.288 TCP 1.101.0.1:3000 -> 22.102.0.1:57186 10 6452 1 2025-09-23 11:35:40.637 00:00:10.367 TCP 23.104.0.1:44774 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:35:57.369 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38894 10 6452 1 2025-09-23 11:32:32.431 00:05:01.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 11:36:41.052 00:00:10.371 TCP 23.104.0.1:50896 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:36:57.585 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39034 10 6452 1 2025-09-23 11:37:20.446 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 11:37:20.422 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 11:33:32.433 00:05:01.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 11:37:41.456 00:00:10.371 TCP 23.104.0.1:40020 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:37:57.807 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52398 10 6452 1 2025-09-23 11:38:41.858 00:00:10.836 TCP 23.104.0.1:50252 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:38:57.977 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56452 10 6452 1 2025-09-23 11:39:42.731 00:00:10.369 TCP 23.104.0.1:44908 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:39:58.215 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34974 10 6452 1 2025-09-23 11:40:43.137 00:00:10.366 TCP 23.104.0.1:57500 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:40:58.424 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56592 10 6452 1 2025-09-23 11:41:43.545 00:00:10.358 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:41:58.635 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40344 10 6452 1 2025-09-23 11:42:20.703 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 11:42:20.756 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 11:38:32.431 00:05:01.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 11:42:43.942 00:00:10.521 TCP 23.104.0.1:35334 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:42:58.850 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51846 10 6452 1 2025-09-23 11:39:32.434 00:05:01.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 11:43:44.501 00:00:10.366 TCP 23.104.0.1:43192 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:43:59.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42838 10 6452 1 2025-09-23 11:44:44.909 00:00:10.362 TCP 23.104.0.1:50556 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:44:59.293 00:00:10.758 TCP 1.101.0.1:3000 -> 22.102.0.1:55218 10 6452 1 2025-09-23 11:45:45.311 00:00:10.375 TCP 23.104.0.1:51792 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:46:00.089 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53894 10 6452 1 2025-09-23 11:46:45.721 00:00:10.372 TCP 23.104.0.1:55864 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:47:00.304 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55620 10 6452 1 2025-09-23 11:47:20.725 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 11:47:20.671 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 11:47:46.130 00:00:10.369 TCP 23.104.0.1:51030 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:48:00.513 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51406 10 6452 1 2025-09-23 11:44:32.431 00:05:01.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 11:48:46.550 00:00:10.371 TCP 23.104.0.1:58390 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:49:00.729 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35312 10 6452 1 2025-09-23 11:45:32.435 00:05:01.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 11:49:46.950 00:00:10.367 TCP 23.104.0.1:60710 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:50:00.945 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46974 10 6452 1 2025-09-23 11:50:47.356 00:00:10.367 TCP 23.104.0.1:46372 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:51:01.174 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60864 10 6452 1 2025-09-23 11:51:47.756 00:00:10.386 TCP 23.104.0.1:44842 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:52:01.347 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55590 10 6452 1 2025-09-23 11:52:21.067 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 11:52:21.105 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 11:52:48.190 00:00:10.365 TCP 23.104.0.1:57612 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:53:01.557 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60678 10 6452 1 2025-09-23 11:53:48.591 00:00:10.326 TCP 23.104.0.1:39096 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:54:01.764 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58038 10 6452 1 2025-09-23 11:50:32.436 00:05:01.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 11:54:48.952 00:00:10.366 TCP 23.104.0.1:59088 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:55:01.979 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58012 10 6452 1 2025-09-23 11:51:32.439 00:05:01.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 11:55:49.353 00:00:10.368 TCP 23.104.0.1:39138 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:56:02.196 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39194 10 6452 1 2025-09-23 11:56:49.762 00:00:10.383 TCP 23.104.0.1:59976 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:57:02.411 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40964 10 6452 1 2025-09-23 11:57:20.920 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 11:57:20.955 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 11:57:50.185 00:00:10.370 TCP 23.104.0.1:44242 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:58:02.624 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35544 10 6452 1 Summary: total flows: 163, total bytes: 501175, total packets: 1567, avg bps: 1083, avg pps: 0, avg bpp: 319 Time window: 2025-09-23 10:56:32 - 2025-09-23 11:58:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0032s Wall: 0.0026s flows/second: 62191.5 Runtime: 0.0026s