Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 04:58:43.511 00:00:10.386 TCP 1.101.0.1:3000 -> 22.102.0.1:38632 10 6452 1 2025-09-25 04:59:19.388 00:00:10.326 TCP 23.104.0.1:43286 -> 1.101.0.1:3000 11 1507 1 2025-09-25 04:59:43.934 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54216 10 6452 1 2025-09-25 05:00:19.755 00:00:10.375 TCP 23.104.0.1:46480 -> 1.101.0.1:3000 11 1507 1 2025-09-25 04:56:33.223 00:05:01.551 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 05:00:44.166 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44500 10 6452 1 2025-09-25 05:01:20.170 00:00:10.364 TCP 23.104.0.1:41556 -> 1.101.0.1:3000 11 1507 1 2025-09-25 04:57:33.227 00:05:01.545 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 05:01:44.341 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56500 10 6452 1 2025-09-25 05:02:20.574 00:00:10.858 TCP 23.104.0.1:38798 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:02:44.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46564 10 6452 1 2025-09-25 05:03:10.552 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 05:03:10.429 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 05:03:21.471 00:00:10.364 TCP 23.104.0.1:34872 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:03:44.725 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48036 10 6452 1 2025-09-25 05:04:21.876 00:00:10.832 TCP 23.104.0.1:33524 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:04:44.902 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59182 10 6452 1 2025-09-25 05:05:22.748 00:00:10.393 TCP 23.104.0.1:53598 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:05:45.117 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40220 10 6452 1 2025-09-25 05:02:33.226 00:05:01.549 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 05:06:23.172 00:00:10.448 TCP 23.104.0.1:57900 -> 1.101.0.1:3000 15 1926 1 2025-09-25 05:06:45.331 00:00:10.360 TCP 1.101.0.1:3000 -> 22.102.0.1:42824 12 10367 1 2025-09-25 05:07:23.660 00:00:10.321 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:03:33.227 00:05:01.546 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 05:07:45.747 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:35372 10 6452 1 2025-09-25 05:08:10.191 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 05:08:10.539 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 05:08:24.020 00:00:10.369 TCP 23.104.0.1:56982 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:08:45.931 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52876 10 6452 1 2025-09-25 05:09:24.430 00:00:10.364 TCP 23.104.0.1:55798 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:09:46.168 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48662 10 6452 1 2025-09-25 05:10:24.836 00:00:10.391 TCP 23.104.0.1:47864 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:10:46.387 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34576 10 6452 1 2025-09-25 05:11:25.267 00:00:10.400 TCP 23.104.0.1:41804 -> 1.101.0.1:3000 15 1926 1 2025-09-25 05:11:46.614 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:55396 12 10367 1 2025-09-25 05:08:33.225 00:05:01.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 05:12:25.707 00:00:10.365 TCP 23.104.0.1:47042 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:12:46.860 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54250 10 6452 1 2025-09-25 05:13:10.611 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 05:13:10.696 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 05:09:33.228 00:05:01.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 05:13:26.109 00:00:10.450 TCP 23.104.0.1:40488 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:13:47.099 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60734 10 6452 1 2025-09-25 05:14:26.596 00:00:10.363 TCP 23.104.0.1:60860 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:14:47.324 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37290 10 6452 1 2025-09-25 05:15:26.998 00:00:10.364 TCP 23.104.0.1:39234 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:15:47.540 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59542 10 6452 1 2025-09-25 05:16:27.404 00:00:10.373 TCP 23.104.0.1:37576 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:16:47.715 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48326 10 6452 1 2025-09-25 05:17:27.820 00:00:10.371 TCP 23.104.0.1:38994 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:17:47.936 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:59570 10 6452 1 2025-09-25 05:18:10.568 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 05:18:10.355 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 05:14:33.225 00:05:01.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 05:18:28.226 00:00:10.369 TCP 23.104.0.1:40922 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:18:48.205 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:59988 10 6452 1 2025-09-25 05:15:33.228 00:05:01.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 05:19:28.635 00:00:10.368 TCP 23.104.0.1:40556 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:19:48.441 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46226 10 6452 1 2025-09-25 05:20:29.054 00:00:10.364 TCP 23.104.0.1:35628 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:20:48.669 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52914 10 6452 1 2025-09-25 05:21:29.459 00:00:10.343 TCP 23.104.0.1:48588 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:21:48.878 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50066 10 6452 1 2025-09-25 05:22:29.847 00:00:10.381 TCP 23.104.0.1:52608 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:22:49.105 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32862 12 6556 1 2025-09-25 05:23:10.706 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 05:23:10.647 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 05:23:30.265 00:00:10.361 TCP 23.104.0.1:38022 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:23:49.312 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38362 10 6452 1 2025-09-25 05:20:33.226 00:05:01.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 05:24:30.666 00:00:10.365 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:24:49.524 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-09-25 05:21:33.229 00:05:01.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 05:25:31.095 00:00:10.368 TCP 23.104.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:25:49.740 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44236 10 6452 1 2025-09-25 05:26:31.497 00:00:10.323 TCP 23.104.0.1:47836 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:26:49.946 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57162 10 6452 1 2025-09-25 05:27:31.858 00:00:10.372 TCP 23.104.0.1:45986 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:27:50.182 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55432 10 6452 1 2025-09-25 05:28:10.786 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 05:28:10.942 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 05:28:32.269 00:00:10.366 TCP 23.104.0.1:60938 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:28:50.395 00:00:14.886 TCP 1.101.0.1:3000 -> 22.102.0.1:39744 10 6452 1 2025-09-25 05:29:32.672 00:00:10.362 TCP 23.104.0.1:54448 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:29:55.321 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57484 10 6452 1 2025-09-25 05:26:33.227 00:05:01.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 05:30:33.104 00:00:10.373 TCP 23.104.0.1:55166 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:30:55.540 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39184 10 6452 1 2025-09-25 05:27:33.229 00:05:01.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 05:31:33.515 00:00:10.366 TCP 23.104.0.1:41198 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:31:55.761 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39710 10 6452 1 2025-09-25 05:32:33.914 00:00:10.362 TCP 23.104.0.1:46144 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:32:55.973 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41638 10 6452 1 2025-09-25 05:33:11.033 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 05:33:10.956 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 05:33:34.312 00:00:10.333 TCP 23.104.0.1:56678 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:33:56.183 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58200 10 6452 1 2025-09-25 05:34:34.682 00:00:10.342 TCP 23.104.0.1:40242 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:34:56.397 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49230 10 6452 1 2025-09-25 05:35:35.079 00:00:10.322 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:35:56.603 00:00:10.589 TCP 1.101.0.1:3000 -> 22.102.0.1:54690 10 6452 1 2025-09-25 05:32:33.227 00:05:01.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 05:36:35.441 00:00:10.362 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:36:57.227 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59466 10 6452 1 2025-09-25 05:33:33.230 00:05:01.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 05:37:35.843 00:00:10.386 TCP 23.104.0.1:35530 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:38:11.126 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 05:37:57.450 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34106 10 6452 1 2025-09-25 05:38:10.746 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 05:38:36.269 00:00:10.366 TCP 23.104.0.1:46062 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:38:57.630 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34838 10 6452 1 2025-09-25 05:39:36.676 00:00:10.419 TCP 23.104.0.1:48482 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:39:57.844 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58330 10 6452 1 2025-09-25 05:40:37.131 00:00:10.364 TCP 23.104.0.1:49586 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:40:58.091 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37572 10 6452 1 2025-09-25 05:41:37.531 00:00:10.366 TCP 23.104.0.1:55298 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:41:58.315 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34218 10 6452 1 2025-09-25 05:38:33.229 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 05:42:37.936 00:00:10.369 TCP 23.104.0.1:39828 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:43:11.209 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 05:42:58.491 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42838 10 6452 1 2025-09-25 05:43:11.336 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 05:39:33.231 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 05:43:38.344 00:00:10.384 TCP 23.104.0.1:38584 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:43:58.716 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43180 10 6452 1 2025-09-25 05:44:38.767 00:00:10.377 TCP 23.104.0.1:37092 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:44:58.936 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 10 6452 1 2025-09-25 05:45:39.180 00:00:10.375 TCP 23.104.0.1:58786 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:45:59.190 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33366 10 6452 1 2025-09-25 05:46:39.594 00:00:10.365 TCP 23.104.0.1:53922 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:46:59.402 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40250 10 6452 1 2025-09-25 05:47:40.010 00:00:10.375 TCP 23.104.0.1:34290 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:48:11.946 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 05:47:59.573 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32774 10 6452 1 2025-09-25 05:48:11.103 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 05:44:33.232 00:05:01.558 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 05:48:40.437 00:00:10.367 TCP 23.104.0.1:48970 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:48:59.788 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34602 10 6452 1 2025-09-25 05:45:33.236 00:05:01.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 05:49:40.850 00:00:10.375 TCP 23.104.0.1:38726 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:50:00.012 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2025-09-25 05:50:41.264 00:00:10.377 TCP 23.104.0.1:58076 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:51:00.184 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48016 10 6452 1 2025-09-25 05:51:41.677 00:00:10.364 TCP 23.104.0.1:45664 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:52:00.354 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54284 10 6452 1 2025-09-25 05:52:42.103 00:00:10.369 TCP 23.104.0.1:44578 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:53:11.543 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 05:53:11.365 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 05:53:00.566 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55626 10 6452 1 2025-09-25 05:53:42.509 00:00:10.361 TCP 23.104.0.1:48734 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:54:00.749 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42810 10 6452 1 2025-09-25 05:50:33.234 00:05:01.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 05:54:42.909 00:00:10.367 TCP 23.104.0.1:53460 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:55:00.923 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39494 10 6452 1 2025-09-25 05:51:33.237 00:05:01.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 05:55:43.310 00:00:10.363 TCP 23.104.0.1:43652 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:56:01.130 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41910 10 6452 1 2025-09-25 05:56:43.712 00:00:10.378 TCP 23.104.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:57:01.345 00:00:10.613 TCP 1.101.0.1:3000 -> 22.102.0.1:35928 10 6452 1 2025-09-25 05:57:44.131 00:00:10.362 TCP 23.104.0.1:58154 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:58:11.496 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 05:58:11.489 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 05:58:02.001 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45900 10 6452 1 Summary: total flows: 163, total bytes: 505613, total packets: 1575, avg bps: 1093, avg pps: 0, avg bpp: 321 Time window: 2025-09-25 04:56:33 - 2025-09-25 05:58:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0023s User: 0.0023s Wall: 0.0021s flows/second: 76379.3 Runtime: 0.0022s