Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 09:58:57.367 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51358 10 6452 1 2025-09-25 09:59:23.258 00:00:10.367 TCP 23.104.0.1:57668 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:59:57.581 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33464 10 6452 1 2025-09-25 09:56:33.308 00:05:01.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 10:00:23.661 00:00:10.367 TCP 23.104.0.1:35506 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:00:57.805 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52208 10 6452 1 2025-09-25 10:01:24.091 00:00:10.365 TCP 23.104.0.1:56636 -> 1.101.0.1:3000 11 1507 1 2025-09-25 09:57:33.310 00:05:01.549 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 10:01:58.029 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35892 10 6452 1 2025-09-25 10:02:24.495 00:00:10.322 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:02:58.257 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48286 10 6452 1 2025-09-25 10:03:16.523 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 10:03:16.562 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 10:03:24.854 00:00:10.376 TCP 23.104.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:03:58.475 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57482 10 6452 1 2025-09-25 10:04:25.270 00:00:10.362 TCP 23.104.0.1:41970 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:04:58.702 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41468 10 6452 1 2025-09-25 10:05:25.668 00:00:10.369 TCP 23.104.0.1:48560 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:05:58.925 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38674 10 6452 1 2025-09-25 10:02:33.309 00:05:01.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 10:06:26.107 00:00:10.367 TCP 23.104.0.1:47446 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:06:59.164 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53820 10 6452 1 2025-09-25 10:07:26.511 00:00:10.367 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:03:33.311 00:05:01.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 10:07:59.341 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47800 10 6452 1 2025-09-25 10:08:16.268 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 10:08:16.679 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 10:08:26.916 00:00:10.377 TCP 23.104.0.1:36150 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:08:59.555 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34400 10 6452 1 2025-09-25 10:09:27.331 00:00:10.373 TCP 23.104.0.1:42434 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:09:59.766 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35400 10 6452 1 2025-09-25 10:10:27.742 00:00:10.367 TCP 23.104.0.1:35516 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:10:59.973 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52350 10 6452 1 2025-09-25 10:11:28.150 00:00:10.373 TCP 23.104.0.1:55534 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:12:00.210 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36836 10 6452 1 2025-09-25 10:08:33.310 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 10:12:28.565 00:00:10.370 TCP 23.104.0.1:60796 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:13:00.421 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54748 10 6452 1 2025-09-25 10:13:16.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 10:13:16.749 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 10:09:33.312 00:05:01.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 10:13:28.974 00:00:10.337 TCP 23.104.0.1:38066 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:14:00.636 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59686 10 6452 1 2025-09-25 10:14:29.350 00:00:10.327 TCP 23.104.0.1:47318 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:15:00.857 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:37592 10 6452 1 2025-09-25 10:15:29.714 00:00:10.373 TCP 23.104.0.1:42470 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:16:01.123 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46038 10 6452 1 2025-09-25 10:16:30.124 00:00:10.361 TCP 23.104.0.1:41414 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:17:01.344 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58694 10 6452 1 2025-09-25 10:17:30.527 00:00:10.366 TCP 23.104.0.1:50256 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:18:01.554 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42376 10 6452 1 2025-09-25 10:18:16.666 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 10:18:16.614 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 10:14:33.311 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 10:18:30.932 00:00:10.378 TCP 23.104.0.1:51808 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:19:01.774 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46238 10 6452 1 2025-09-25 10:15:33.313 00:05:01.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 10:19:31.344 00:00:10.453 TCP 23.104.0.1:54000 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:20:01.942 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57376 10 6452 1 2025-09-25 10:20:31.835 00:00:10.395 TCP 23.104.0.1:46152 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:21:02.176 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59936 10 6452 1 2025-09-25 10:21:32.265 00:00:10.360 TCP 23.104.0.1:34028 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:22:02.361 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51140 10 6452 1 2025-09-25 10:22:32.666 00:00:10.323 TCP 23.104.0.1:56968 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:23:16.891 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 10:23:02.585 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51398 10 6452 1 2025-09-25 10:23:16.969 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 10:23:33.031 00:00:10.319 TCP 23.104.0.1:50496 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:24:02.797 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41022 10 6452 1 2025-09-25 10:20:33.313 00:05:01.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 10:24:33.391 00:00:10.321 TCP 23.104.0.1:47750 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:25:03.009 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33210 10 6452 1 2025-09-25 10:21:33.316 00:05:01.549 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 10:25:33.747 00:00:10.364 TCP 23.104.0.1:58558 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:26:03.195 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41002 10 6452 1 2025-09-25 10:26:34.148 00:00:10.324 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:27:03.413 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51052 10 6452 1 2025-09-25 10:27:34.517 00:00:10.373 TCP 23.104.0.1:48888 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:28:16.939 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 10:28:03.584 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-09-25 10:28:16.848 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 10:28:34.928 00:00:10.394 TCP 23.104.0.1:39452 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:29:03.757 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52186 10 6452 1 2025-09-25 10:29:35.364 00:00:10.364 TCP 23.104.0.1:45542 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:30:03.964 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-09-25 10:26:33.314 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 10:30:35.773 00:00:10.326 TCP 23.104.0.1:42136 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:31:04.201 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41260 10 6452 1 2025-09-25 10:27:33.319 00:05:01.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 10:31:36.137 00:00:10.328 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:32:04.417 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54984 10 6452 1 2025-09-25 10:32:36.506 00:00:10.368 TCP 23.104.0.1:39964 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:33:04.634 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50222 10 6452 1 2025-09-25 10:33:17.072 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 10:33:17.173 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 10:33:36.913 00:00:10.362 TCP 23.104.0.1:51174 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:34:04.806 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:33884 10 6452 1 2025-09-25 10:34:37.315 00:00:10.366 TCP 23.104.0.1:35964 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:35:04.982 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:53540 10 6452 1 2025-09-25 10:35:37.719 00:00:10.375 TCP 23.104.0.1:50244 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:36:05.224 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59910 10 6452 1 2025-09-25 10:32:33.315 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 10:36:38.131 00:00:10.373 TCP 23.104.0.1:50270 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:37:05.448 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59954 10 6452 1 2025-09-25 10:33:33.318 00:05:01.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 10:37:38.549 00:00:10.367 TCP 23.104.0.1:41332 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:38:05.661 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52076 10 6452 1 2025-09-25 10:38:17.101 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 10:38:17.033 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 10:38:38.952 00:00:10.372 TCP 23.104.0.1:55206 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:39:05.871 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43718 10 6452 1 2025-09-25 10:39:39.362 00:00:10.366 TCP 23.104.0.1:39740 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:40:06.094 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36110 10 6452 1 2025-09-25 10:40:39.766 00:00:10.371 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:41:06.307 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34044 10 6452 1 2025-09-25 10:41:40.176 00:00:10.333 TCP 23.104.0.1:36672 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:42:06.521 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54810 10 6452 1 2025-09-25 10:38:33.317 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 10:42:40.535 00:00:10.369 TCP 23.104.0.1:38324 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:43:17.022 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 10:43:06.697 00:00:10.357 TCP 1.101.0.1:3000 -> 22.102.0.1:46904 10 6452 1 2025-09-25 10:43:17.173 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 10:39:33.319 00:05:01.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 10:43:40.939 00:00:10.426 TCP 23.104.0.1:47608 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:44:07.095 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33126 10 6452 1 2025-09-25 10:44:41.405 00:00:10.324 TCP 23.104.0.1:36312 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:45:07.269 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56086 10 6452 1 2025-09-25 10:45:41.766 00:00:10.329 TCP 23.104.0.1:54808 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:46:07.482 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50696 10 6452 1 2025-09-25 10:46:42.127 00:00:10.440 TCP 23.104.0.1:51404 -> 1.101.0.1:3000 15 1926 1 2025-09-25 10:47:07.661 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:46746 12 10365 1 2025-09-25 10:47:42.603 00:00:10.326 TCP 23.104.0.1:47924 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:48:07.900 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:55980 10 6452 1 2025-09-25 10:48:17.278 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 10:48:17.266 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 10:44:33.318 00:05:01.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 10:48:42.967 00:00:10.373 TCP 23.104.0.1:36980 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:49:08.088 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56934 10 6452 1 2025-09-25 10:45:33.323 00:05:01.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 10:49:43.377 00:00:10.676 TCP 23.104.0.1:49136 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:50:08.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52994 10 6452 1 2025-09-25 10:50:44.103 00:00:10.364 TCP 23.104.0.1:54418 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:51:08.514 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:52048 10 6452 1 2025-09-25 10:51:44.500 00:00:10.639 TCP 23.104.0.1:44088 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:52:08.768 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59588 10 6452 1 2025-09-25 10:52:45.178 00:00:10.359 TCP 23.104.0.1:57296 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:53:08.985 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33516 10 6452 1 2025-09-25 10:53:17.435 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 10:53:17.303 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 10:53:45.576 00:00:10.359 TCP 23.104.0.1:50918 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:54:09.205 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:58156 10 6452 1 2025-09-25 10:50:33.320 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 10:54:45.978 00:00:10.378 TCP 23.104.0.1:33262 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:55:09.456 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39534 10 6452 1 2025-09-25 10:51:33.323 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 10:55:46.391 00:00:10.333 TCP 23.104.0.1:50910 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:56:09.628 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42884 10 6452 1 2025-09-25 10:56:46.762 00:00:10.388 TCP 23.104.0.1:59940 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:57:09.845 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47648 10 6452 1 2025-09-25 10:57:47.191 00:00:10.364 TCP 23.104.0.1:46596 -> 1.101.0.1:3000 11 1507 1 2025-09-25 10:58:17.749 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 10:58:10.026 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55644 10 6452 1 2025-09-25 10:58:17.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 501173, total packets: 1567, avg bps: 1081, avg pps: 0, avg bpp: 319 Time window: 2025-09-25 09:56:33 - 2025-09-25 10:58:20 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0049s User: 0.0000s Wall: 0.0026s flows/second: 63420.4 Runtime: 0.0026s