Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 15:58:58.690 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36764 10 6452 1 2025-09-23 15:59:33.192 00:00:10.367 TCP 23.104.0.1:49582 -> 1.101.0.1:3000 11 1507 1 2025-09-23 15:59:58.897 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55708 10 6452 1 2025-09-23 15:56:32.497 00:05:01.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 16:00:33.600 00:00:10.372 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:00:59.122 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52600 10 6452 1 2025-09-23 15:57:32.498 00:05:01.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 16:01:34.010 00:00:10.961 TCP 23.104.0.1:58440 -> 1.101.0.1:3000 15 1926 1 2025-09-23 16:01:59.304 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:40438 12 10367 1 2025-09-23 16:02:25.833 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 16:02:25.972 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 16:02:35.006 00:00:10.332 TCP 23.104.0.1:50314 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:02:59.549 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48232 10 6452 1 2025-09-23 16:03:35.371 00:00:10.330 TCP 23.104.0.1:44352 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:03:59.781 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51300 10 6452 1 2025-09-23 16:04:35.739 00:00:10.366 TCP 23.104.0.1:36148 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:04:59.997 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6452 1 2025-09-23 16:05:36.143 00:00:10.371 TCP 23.104.0.1:55136 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:06:00.216 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60472 10 6452 1 2025-09-23 16:02:32.499 00:05:01.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 16:06:36.558 00:00:10.361 TCP 23.104.0.1:57046 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:07:00.443 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53370 10 6452 1 2025-09-23 16:07:25.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 16:07:25.986 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 16:03:32.501 00:05:01.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 16:07:36.959 00:00:10.365 TCP 23.104.0.1:37642 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:08:00.624 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53878 10 6452 1 2025-09-23 16:08:37.364 00:00:10.329 TCP 23.104.0.1:37040 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:09:00.844 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35116 10 6452 1 2025-09-23 16:09:37.734 00:00:10.366 TCP 23.104.0.1:37098 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:10:01.079 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-09-23 16:10:38.139 00:00:10.327 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:11:01.301 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50068 10 6452 1 2025-09-23 16:11:38.507 00:00:10.364 TCP 23.104.0.1:56308 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:12:01.520 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-09-23 16:12:26.211 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 16:12:25.886 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 16:08:32.499 00:05:01.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 16:12:38.908 00:00:10.382 TCP 23.104.0.1:52958 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:13:01.733 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54364 10 6452 1 2025-09-23 16:09:32.502 00:05:01.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 16:13:39.331 00:00:10.370 TCP 23.104.0.1:34204 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:14:01.958 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:47882 10 6452 1 2025-09-23 16:14:39.739 00:00:10.366 TCP 23.104.0.1:42904 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:15:02.200 00:00:10.858 TCP 1.101.0.1:3000 -> 22.102.0.1:59676 10 6452 1 2025-09-23 16:15:40.142 00:00:10.364 TCP 23.104.0.1:40564 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:16:03.098 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33754 10 6452 1 2025-09-23 16:16:40.548 00:00:10.318 TCP 23.104.0.1:36854 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:17:03.314 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6452 1 2025-09-23 16:17:26.084 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 16:17:26.035 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 16:17:40.906 00:00:10.376 TCP 23.104.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:18:03.523 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52546 10 6452 1 2025-09-23 16:14:32.500 00:05:01.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 16:18:41.337 00:00:10.371 TCP 23.104.0.1:55002 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:19:03.740 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39836 10 6452 1 2025-09-23 16:15:32.503 00:05:01.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 16:19:41.743 00:00:10.831 TCP 23.104.0.1:47874 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:20:03.961 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51824 10 6452 1 2025-09-23 16:20:42.610 00:00:10.366 TCP 23.104.0.1:37772 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:21:04.182 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43478 10 6452 1 2025-09-23 16:21:43.016 00:00:10.370 TCP 23.104.0.1:47322 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:22:04.359 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36146 10 6452 1 2025-09-23 16:22:26.336 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 16:22:26.552 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 16:22:43.424 00:00:10.371 TCP 23.104.0.1:50434 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:23:04.527 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:51198 10 6452 1 2025-09-23 16:23:43.826 00:00:10.367 TCP 23.104.0.1:48636 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:24:04.756 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40568 10 6452 1 2025-09-23 16:20:32.502 00:05:01.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 16:24:44.228 00:00:10.366 TCP 23.104.0.1:40948 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:25:04.970 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37310 10 6452 1 2025-09-23 16:21:32.504 00:05:01.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 16:25:44.656 00:00:10.363 TCP 23.104.0.1:43916 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:26:05.217 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46268 10 6452 1 2025-09-23 16:26:45.075 00:00:10.321 TCP 23.104.0.1:57726 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:27:05.436 00:00:10.405 TCP 1.101.0.1:3000 -> 22.102.0.1:56942 10 6452 1 2025-09-23 16:27:26.395 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 16:27:26.341 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 16:27:45.435 00:00:10.370 TCP 23.104.0.1:37314 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:28:05.876 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40674 10 6452 1 2025-09-23 16:28:45.858 00:00:10.372 TCP 23.104.0.1:43440 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:29:06.103 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33958 10 6452 1 2025-09-23 16:29:46.273 00:00:10.324 TCP 23.104.0.1:38580 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:30:06.310 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42348 10 6452 1 2025-09-23 16:26:32.502 00:05:01.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 16:30:46.635 00:00:10.370 TCP 23.104.0.1:49486 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:31:06.517 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52594 10 6452 1 2025-09-23 16:27:32.505 00:05:01.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 16:31:47.059 00:00:10.369 TCP 23.104.0.1:55390 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:32:06.731 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50696 10 6452 1 2025-09-23 16:32:26.400 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 16:32:26.423 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 16:32:47.467 00:00:10.365 TCP 23.104.0.1:46876 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:33:06.938 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47250 10 6452 1 2025-09-23 16:33:47.870 00:00:10.673 TCP 23.104.0.1:47722 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:34:07.166 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39594 10 6452 1 2025-09-23 16:34:48.585 00:00:10.327 TCP 23.104.0.1:40818 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:35:07.377 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60358 10 6452 1 2025-09-23 16:35:48.955 00:00:10.363 TCP 23.104.0.1:42736 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:36:07.559 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34256 10 6452 1 2025-09-23 16:32:32.503 00:05:01.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 16:36:49.354 00:00:10.365 TCP 23.104.0.1:55166 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:37:07.768 00:00:10.686 TCP 1.101.0.1:3000 -> 22.102.0.1:39768 10 6452 1 2025-09-23 16:37:26.900 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 16:37:26.696 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 16:33:32.507 00:05:01.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 16:37:49.766 00:00:10.376 TCP 23.104.0.1:49686 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:38:08.494 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36748 10 6452 1 2025-09-23 16:38:50.177 00:00:10.366 TCP 23.104.0.1:46788 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:39:08.681 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:57302 10 6452 1 2025-09-23 16:39:50.578 00:00:10.370 TCP 23.104.0.1:37062 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:40:08.942 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59756 10 6452 1 2025-09-23 16:40:50.989 00:00:10.331 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:41:09.138 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51602 10 6452 1 2025-09-23 16:41:51.359 00:00:10.326 TCP 23.104.0.1:39576 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:42:09.349 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47894 10 6452 1 2025-09-23 16:42:26.595 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 16:42:26.698 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 16:38:32.505 00:05:01.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 16:42:51.722 00:00:10.372 TCP 23.104.0.1:56900 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:43:09.521 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6452 1 2025-09-23 16:39:32.508 00:05:01.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 16:43:52.131 00:00:10.486 TCP 23.104.0.1:36290 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:44:09.706 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37146 10 6452 1 2025-09-23 16:44:52.667 00:00:10.367 TCP 23.104.0.1:43216 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:45:09.924 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60906 10 6452 1 2025-09-23 16:45:53.098 00:00:10.367 TCP 23.104.0.1:47786 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:46:10.145 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58418 10 6452 1 2025-09-23 16:46:53.503 00:00:10.365 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:47:10.354 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35454 10 6452 1 2025-09-23 16:47:26.740 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 16:47:26.761 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 16:47:53.910 00:00:10.369 TCP 23.104.0.1:43614 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:48:10.572 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40330 10 6452 1 2025-09-23 16:44:32.506 00:05:01.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 16:48:54.311 00:00:10.324 TCP 23.104.0.1:40192 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:49:10.791 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50404 10 6452 1 2025-09-23 16:45:32.508 00:05:01.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 16:49:54.678 00:00:10.373 TCP 23.104.0.1:37770 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:50:11.039 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44796 10 6452 1 2025-09-23 16:50:55.110 00:00:10.326 TCP 23.104.0.1:42192 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:51:11.246 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42406 12 10367 1 2025-09-23 16:51:55.471 00:00:10.439 TCP 23.104.0.1:51354 -> 1.101.0.1:3000 15 1926 1 2025-09-23 16:52:11.486 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34672 10 6452 1 2025-09-23 16:52:26.662 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 16:52:26.706 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 16:52:55.948 00:00:10.365 TCP 23.104.0.1:39292 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:53:11.712 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38932 10 6452 1 2025-09-23 16:53:56.352 00:00:10.362 TCP 23.104.0.1:47628 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:54:11.927 00:00:10.845 TCP 1.101.0.1:3000 -> 22.102.0.1:51852 11 6504 1 2025-09-23 16:50:32.508 00:05:01.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 16:54:56.751 00:00:10.361 TCP 23.104.0.1:57168 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:55:12.809 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47290 10 6452 1 2025-09-23 16:51:32.510 00:05:01.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 16:55:57.150 00:00:10.361 TCP 23.104.0.1:42406 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:56:13.041 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58318 10 6452 1 2025-09-23 16:56:57.549 00:00:10.485 TCP 23.104.0.1:51520 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:57:13.262 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43090 10 6452 1 2025-09-23 16:57:26.885 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 16:57:26.977 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 16:57:58.090 00:00:10.329 TCP 23.104.0.1:57448 -> 1.101.0.1:3000 11 1507 1 2025-09-23 16:58:13.484 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53892 10 6452 1 Summary: total flows: 163, total bytes: 505561, total packets: 1574, avg bps: 1089, avg pps: 0, avg bpp: 321 Time window: 2025-09-23 15:56:32 - 2025-09-23 16:58:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0032s Wall: 0.0025s flows/second: 66505.0 Runtime: 0.0025s