Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 17:59:00.289 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50106 10 6452 1 2025-09-24 17:59:34.864 00:00:10.374 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:00:00.459 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54898 10 6452 1 2025-09-24 17:56:32.989 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 18:00:35.284 00:00:10.370 TCP 23.104.0.1:52742 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:01:00.681 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54686 10 6452 1 2025-09-24 17:57:32.992 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 18:01:35.693 00:00:10.368 TCP 23.104.0.1:56870 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:02:00.901 00:00:10.813 TCP 1.101.0.1:3000 -> 22.102.0.1:45444 10 6452 1 2025-09-24 18:02:36.107 00:00:10.366 TCP 23.104.0.1:38590 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:02:57.171 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 18:02:57.256 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 18:03:01.756 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46354 10 6452 1 2025-09-24 18:03:36.509 00:00:10.325 TCP 23.104.0.1:57564 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:04:01.963 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56532 10 6452 1 2025-09-24 18:04:36.873 00:00:10.326 TCP 23.104.0.1:51460 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:05:02.179 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6452 1 2025-09-24 18:05:37.235 00:00:10.372 TCP 23.104.0.1:48888 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:06:02.391 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54706 10 6452 1 2025-09-24 18:02:32.991 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 18:06:37.643 00:00:10.368 TCP 23.104.0.1:57770 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:07:02.623 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:58766 10 6452 1 2025-09-24 18:03:32.994 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 18:07:38.050 00:00:10.330 TCP 23.104.0.1:47228 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:07:57.190 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 18:07:57.280 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 18:08:02.813 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46376 10 6452 1 2025-09-24 18:08:38.417 00:00:10.326 TCP 23.104.0.1:59426 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:09:03.035 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60532 10 6452 1 2025-09-24 18:09:38.783 00:00:10.522 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:10:03.251 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50572 10 6452 1 2025-09-24 18:10:39.336 00:00:10.361 TCP 23.104.0.1:58794 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:11:03.468 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59288 10 6452 1 2025-09-24 18:11:39.739 00:00:10.365 TCP 23.104.0.1:42626 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:12:03.679 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58104 10 6452 1 2025-09-24 18:08:32.993 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 18:12:40.148 00:00:10.364 TCP 23.104.0.1:52158 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:12:57.340 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 18:12:57.363 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 18:13:03.902 00:00:10.416 TCP 1.101.0.1:3000 -> 22.102.0.1:55316 10 6452 1 2025-09-24 18:09:32.995 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 18:13:40.548 00:00:10.364 TCP 23.104.0.1:59550 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:14:04.352 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43308 10 6452 1 2025-09-24 18:14:40.949 00:00:10.367 TCP 23.104.0.1:47862 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:15:04.568 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42868 10 6452 1 2025-09-24 18:15:41.353 00:00:10.366 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:16:04.789 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39524 10 6452 1 2025-09-24 18:16:41.753 00:00:10.389 TCP 23.104.0.1:59420 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:17:05.011 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47568 10 6452 1 2025-09-24 18:17:42.178 00:00:10.369 TCP 23.104.0.1:56800 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:17:57.295 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 18:17:57.382 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 18:18:05.227 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49590 10 6452 1 2025-09-24 18:14:32.995 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 18:18:42.581 00:00:10.366 TCP 23.104.0.1:45694 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:19:05.436 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54122 10 6452 1 2025-09-24 18:15:32.998 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 18:19:42.985 00:00:10.329 TCP 23.104.0.1:47904 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:20:05.658 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56268 10 6452 1 2025-09-24 18:20:43.358 00:00:10.323 TCP 23.104.0.1:50998 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:21:05.879 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:49934 10 6452 1 2025-09-24 18:21:43.718 00:00:10.323 TCP 23.104.0.1:54200 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:22:06.134 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41572 10 6452 1 2025-09-24 18:22:44.102 00:00:10.364 TCP 23.104.0.1:35362 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:22:57.515 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 18:22:57.591 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 18:23:06.356 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:41526 10 6452 1 2025-09-24 18:23:44.505 00:00:10.363 TCP 23.104.0.1:45898 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:24:06.569 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46248 10 6452 1 2025-09-24 18:20:32.996 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 18:24:44.903 00:00:10.375 TCP 23.104.0.1:47988 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:25:06.748 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52994 10 6452 1 2025-09-24 18:21:33.000 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 18:25:45.315 00:00:10.328 TCP 23.104.0.1:52366 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:26:06.967 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53076 12 6556 1 2025-09-24 18:26:45.679 00:00:10.770 TCP 23.104.0.1:48444 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:27:07.192 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57396 10 6452 1 2025-09-24 18:27:46.487 00:00:10.364 TCP 23.104.0.1:51292 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:27:57.679 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 18:27:57.728 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 18:28:07.404 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45578 10 6452 1 2025-09-24 18:28:46.894 00:00:10.343 TCP 23.104.0.1:56846 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:29:07.614 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45572 10 6452 1 2025-09-24 18:29:47.285 00:00:10.329 TCP 23.104.0.1:45438 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:30:07.845 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39378 10 6452 1 2025-09-24 18:26:32.998 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 18:30:47.651 00:00:10.325 TCP 23.104.0.1:48730 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:31:08.075 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53786 10 6452 1 2025-09-24 18:27:33.002 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 18:31:48.019 00:00:10.362 TCP 23.104.0.1:33070 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:32:08.281 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51790 10 6452 1 2025-09-24 18:32:57.792 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 18:32:57.748 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 18:32:48.422 00:00:10.368 TCP 23.104.0.1:45364 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:33:08.451 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45232 10 6452 1 2025-09-24 18:33:48.833 00:00:10.342 TCP 23.104.0.1:58994 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:34:08.674 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35096 10 6452 1 2025-09-24 18:34:49.217 00:00:10.327 TCP 23.104.0.1:42180 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:35:08.886 00:00:10.600 TCP 1.101.0.1:3000 -> 22.102.0.1:43852 10 6452 1 2025-09-24 18:35:49.585 00:00:10.366 TCP 23.104.0.1:42250 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:36:09.524 00:00:10.850 TCP 1.101.0.1:3000 -> 22.102.0.1:36838 12 10367 1 2025-09-24 18:32:33.000 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 18:36:49.991 00:00:10.441 TCP 23.104.0.1:51072 -> 1.101.0.1:3000 15 1926 1 2025-09-24 18:37:10.421 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:38120 10 6452 1 2025-09-24 18:33:33.004 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 18:37:58.076 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 18:37:50.472 00:00:10.368 TCP 23.104.0.1:35756 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:37:57.943 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 18:38:10.706 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39368 10 6452 1 2025-09-24 18:38:50.874 00:00:10.381 TCP 23.104.0.1:54528 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:39:10.920 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:56312 10 6452 1 2025-09-24 18:39:51.295 00:00:10.365 TCP 23.104.0.1:42550 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:40:11.158 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47768 10 6452 1 2025-09-24 18:40:51.701 00:00:10.331 TCP 23.104.0.1:52226 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:41:11.377 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33766 10 6452 1 2025-09-24 18:41:52.090 00:00:10.362 TCP 23.104.0.1:54860 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:42:11.590 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41946 10 6452 1 2025-09-24 18:38:33.030 00:05:01.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 18:42:57.938 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 18:42:57.741 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 18:42:52.494 00:00:10.651 TCP 23.104.0.1:54200 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:43:11.806 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42158 10 6452 1 2025-09-24 18:39:33.032 00:05:01.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 18:43:53.181 00:00:10.366 TCP 23.104.0.1:39128 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:44:12.031 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47700 10 6452 1 2025-09-24 18:44:53.580 00:00:10.366 TCP 23.104.0.1:54796 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:45:12.242 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55600 10 6452 1 2025-09-24 18:45:53.987 00:00:10.330 TCP 23.104.0.1:50862 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:46:12.452 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46146 10 6452 1 2025-09-24 18:46:54.354 00:00:10.364 TCP 23.104.0.1:51064 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:47:12.667 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49606 10 6452 1 2025-09-24 18:47:57.963 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 18:47:57.981 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 18:47:54.754 00:00:10.364 TCP 23.104.0.1:60620 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:48:12.898 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34524 10 6452 1 2025-09-24 18:44:33.035 00:05:01.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 18:48:55.158 00:00:10.325 TCP 23.104.0.1:48144 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:49:13.117 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40768 10 6452 1 2025-09-24 18:45:33.038 00:05:01.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 18:49:55.520 00:00:10.366 TCP 23.104.0.1:46234 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:50:13.289 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48194 10 6452 1 2025-09-24 18:50:55.921 00:00:10.386 TCP 23.104.0.1:45646 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:51:13.512 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60690 10 6452 1 2025-09-24 18:51:56.345 00:00:10.363 TCP 23.104.0.1:48978 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:52:13.730 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50364 10 6452 1 2025-09-24 18:52:57.886 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 18:52:57.988 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 18:52:56.747 00:00:10.330 TCP 23.104.0.1:34262 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:53:13.960 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:55014 10 6452 1 2025-09-24 18:53:57.115 00:00:10.807 TCP 23.104.0.1:39736 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:54:14.215 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:42582 10 6452 1 2025-09-24 18:50:33.037 00:05:01.528 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 18:54:57.961 00:00:10.365 TCP 23.104.0.1:46512 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:55:14.409 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60392 10 6452 1 2025-09-24 18:51:33.040 00:05:01.523 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 18:55:58.364 00:00:18.250 TCP 23.104.0.1:51786 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:56:14.629 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50146 10 6452 1 2025-09-24 18:57:06.662 00:00:10.418 TCP 23.104.0.1:50638 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:57:14.848 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58698 10 6452 1 2025-09-24 18:57:58.227 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 18:57:58.227 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 18:58:07.130 00:00:10.364 TCP 23.104.0.1:40562 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:58:15.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43884 10 6452 1 Summary: total flows: 163, total bytes: 501279, total packets: 1569, avg bps: 1080, avg pps: 0, avg bpp: 319 Time window: 2025-09-24 17:56:32 - 2025-09-24 18:58:25 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0010s Wall: 0.0025s flows/second: 64631.5 Runtime: 0.0025s