Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 14:59:05.799 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56088 10 6452 1 2025-09-25 14:59:32.016 00:00:10.358 TCP 23.104.0.1:47146 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:00:06.014 00:00:10.601 TCP 1.101.0.1:3000 -> 22.102.0.1:46700 10 6452 1 2025-09-25 14:56:33.420 00:05:01.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 15:00:32.414 00:00:10.375 TCP 23.104.0.1:43580 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:01:06.655 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42228 10 6452 1 2025-09-25 14:57:33.422 00:05:01.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 15:01:32.833 00:00:10.352 TCP 23.104.0.1:45432 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:02:06.875 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58304 10 6452 1 2025-09-25 15:02:33.219 00:00:10.368 TCP 23.104.0.1:40696 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:03:07.103 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35234 10 6452 1 2025-09-25 15:03:22.685 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 15:03:22.752 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 15:03:33.624 00:00:10.328 TCP 23.104.0.1:58292 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:04:07.336 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48704 10 6452 1 2025-09-25 15:04:33.994 00:00:10.367 TCP 23.104.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:05:07.542 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53374 10 6452 1 2025-09-25 15:05:34.399 00:00:10.360 TCP 23.104.0.1:52144 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:06:07.760 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43096 10 6452 1 2025-09-25 15:02:33.422 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 15:06:34.802 00:00:10.443 TCP 23.104.0.1:37912 -> 1.101.0.1:3000 15 1926 1 2025-09-25 15:07:07.972 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 12 10367 1 2025-09-25 15:03:33.424 00:05:01.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 15:07:35.282 00:00:10.363 TCP 23.104.0.1:45560 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:08:08.225 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48776 10 6452 1 2025-09-25 15:08:22.401 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 15:08:22.575 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 15:08:35.684 00:00:10.323 TCP 23.104.0.1:40318 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:09:08.435 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 10 6452 1 2025-09-25 15:09:36.049 00:00:10.365 TCP 23.104.0.1:39344 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:10:08.647 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39556 10 6452 1 2025-09-25 15:10:36.462 00:00:10.364 TCP 23.104.0.1:47182 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:11:08.854 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58586 10 6452 1 2025-09-25 15:11:36.867 00:00:10.362 TCP 23.104.0.1:43156 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:12:09.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47216 10 6452 1 2025-09-25 15:08:33.424 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 15:12:37.268 00:00:10.368 TCP 23.104.0.1:42352 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:13:09.293 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37164 10 6452 1 2025-09-25 15:13:22.632 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 15:13:22.555 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 15:09:33.427 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 15:13:37.674 00:00:10.378 TCP 23.104.0.1:55698 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:14:09.505 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35360 10 6452 1 2025-09-25 15:14:38.109 00:00:10.362 TCP 23.104.0.1:34334 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:15:09.720 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58940 10 6452 1 2025-09-25 15:15:38.512 00:00:10.368 TCP 23.104.0.1:53592 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:16:09.890 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49132 10 6452 1 2025-09-25 15:16:38.918 00:00:10.348 TCP 23.104.0.1:58274 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:17:10.109 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60202 10 6452 1 2025-09-25 15:17:39.302 00:00:10.367 TCP 23.104.0.1:55830 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:18:10.321 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45252 10 6452 1 2025-09-25 15:18:22.751 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 15:18:22.657 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 15:14:33.428 00:05:01.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 15:18:39.709 00:00:10.371 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:19:10.536 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36888 10 6452 1 2025-09-25 15:15:33.431 00:05:01.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 15:19:40.112 00:00:10.371 TCP 23.104.0.1:37822 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:20:10.748 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39482 10 6452 1 2025-09-25 15:20:40.526 00:00:10.370 TCP 23.104.0.1:47862 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:21:10.963 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:35482 13 6608 1 2025-09-25 15:21:40.933 00:00:10.367 TCP 23.104.0.1:53194 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:22:11.168 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51408 10 6452 1 2025-09-25 15:22:41.343 00:00:10.365 TCP 23.104.0.1:33424 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:23:11.381 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41920 10 6452 1 2025-09-25 15:23:23.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 15:23:22.891 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 15:23:41.750 00:00:10.334 TCP 23.104.0.1:41514 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:24:11.596 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37178 10 6452 1 2025-09-25 15:20:33.430 00:05:01.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 15:24:42.115 00:00:10.370 TCP 23.104.0.1:39710 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:25:11.816 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60036 10 6452 1 2025-09-25 15:21:33.431 00:05:01.569 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 15:25:42.520 00:00:10.366 TCP 23.104.0.1:56462 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:26:12.041 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52056 10 6452 1 2025-09-25 15:26:42.921 00:00:10.381 TCP 23.104.0.1:57150 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:27:12.264 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51108 10 6452 1 2025-09-25 15:27:43.337 00:00:10.369 TCP 23.104.0.1:39128 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:28:23.308 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 15:28:12.484 00:00:10.284 TCP 1.101.0.1:3000 -> 22.102.0.1:41390 10 6452 1 2025-09-25 15:28:23.257 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 15:28:43.749 00:00:10.359 TCP 23.104.0.1:59246 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:29:12.809 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48606 10 6452 1 2025-09-25 15:29:44.148 00:00:10.372 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:30:13.044 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39414 10 6452 1 2025-09-25 15:26:33.430 00:05:01.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 15:30:44.558 00:00:10.326 TCP 23.104.0.1:56770 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:31:13.255 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39784 10 6452 1 2025-09-25 15:27:33.433 00:05:01.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 15:31:44.924 00:00:10.387 TCP 23.104.0.1:46874 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:32:13.475 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60962 10 6452 1 2025-09-25 15:32:45.348 00:00:10.371 TCP 23.104.0.1:41544 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:33:23.001 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 15:33:13.701 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34160 10 6452 1 2025-09-25 15:33:23.054 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 15:33:45.753 00:00:10.850 TCP 23.104.0.1:45806 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:34:13.923 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44814 10 6452 1 2025-09-25 15:34:46.633 00:00:10.323 TCP 23.104.0.1:38380 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:35:14.130 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45584 10 6452 1 2025-09-25 15:35:46.999 00:00:10.647 TCP 23.104.0.1:53240 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:36:14.350 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37324 12 10365 1 2025-09-25 15:32:33.431 00:05:01.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 15:36:47.681 00:00:10.447 TCP 23.104.0.1:35380 -> 1.101.0.1:3000 15 1926 1 2025-09-25 15:37:14.588 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47332 10 6452 1 2025-09-25 15:33:33.434 00:05:01.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 15:37:48.169 00:00:10.323 TCP 23.104.0.1:39658 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:38:14.795 00:00:10.613 TCP 1.101.0.1:3000 -> 22.102.0.1:34298 10 6452 1 2025-09-25 15:38:23.149 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 15:38:22.933 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 15:38:48.531 00:00:10.371 TCP 23.104.0.1:54988 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:39:15.444 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50632 10 6452 1 2025-09-25 15:39:48.942 00:00:10.854 TCP 23.104.0.1:55644 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:40:15.658 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39128 10 6452 1 2025-09-25 15:40:49.834 00:00:10.398 TCP 23.104.0.1:55972 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:41:15.827 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43776 10 6452 1 2025-09-25 15:41:50.261 00:00:10.370 TCP 23.104.0.1:56008 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:42:16.001 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:51050 10 6452 1 2025-09-25 15:38:33.432 00:05:01.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 15:42:50.666 00:00:10.362 TCP 23.104.0.1:42626 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:43:23.270 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 15:43:16.271 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51626 10 6452 1 2025-09-25 15:43:23.026 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 15:39:33.434 00:05:01.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 15:43:51.092 00:00:10.361 TCP 23.104.0.1:48386 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:44:16.497 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45502 10 6452 1 2025-09-25 15:44:51.494 00:00:10.364 TCP 23.104.0.1:48076 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:45:16.721 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39642 10 6452 1 2025-09-25 15:45:51.897 00:00:10.367 TCP 23.104.0.1:40934 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:46:16.945 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39046 10 6452 1 2025-09-25 15:46:52.300 00:00:10.369 TCP 23.104.0.1:58932 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:47:17.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45506 10 6452 1 2025-09-25 15:47:52.717 00:00:10.372 TCP 23.104.0.1:48254 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:48:23.289 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 15:48:23.355 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 15:48:17.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56518 10 6452 1 2025-09-25 15:44:33.433 00:05:01.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 15:48:53.138 00:00:10.324 TCP 23.104.0.1:42010 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:49:17.619 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59342 10 6452 1 2025-09-25 15:45:33.437 00:05:01.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 15:49:53.503 00:00:10.337 TCP 23.104.0.1:58346 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:50:17.830 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49016 10 6452 1 2025-09-25 15:50:53.875 00:00:10.328 TCP 23.104.0.1:34976 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:51:18.069 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:40936 12 10367 1 2025-09-25 15:51:54.242 00:00:10.441 TCP 23.104.0.1:39038 -> 1.101.0.1:3000 15 1926 1 2025-09-25 15:52:18.315 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49950 10 6452 1 2025-09-25 15:52:54.722 00:00:10.331 TCP 23.104.0.1:34356 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:53:23.455 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 15:53:23.366 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 15:53:18.539 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33782 10 6452 1 2025-09-25 15:53:55.099 00:00:10.376 TCP 23.104.0.1:56446 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:54:18.724 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:57526 10 6452 1 2025-09-25 15:50:33.434 00:05:01.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 15:54:55.509 00:00:10.369 TCP 23.104.0.1:38394 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:55:18.907 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44660 10 6452 1 2025-09-25 15:51:33.439 00:05:01.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 15:55:55.917 00:00:10.376 TCP 23.104.0.1:47998 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:56:19.129 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53016 10 6452 1 2025-09-25 15:56:56.334 00:00:10.364 TCP 23.104.0.1:40486 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:57:19.338 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60804 10 6452 1 2025-09-25 15:57:56.739 00:00:10.369 TCP 23.104.0.1:51388 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:58:23.700 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 15:58:23.478 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 15:58:19.507 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58594 10 6452 1 Summary: total flows: 163, total bytes: 509997, total packets: 1582, avg bps: 1097, avg pps: 0, avg bpp: 322 Time window: 2025-09-25 14:56:33 - 2025-09-25 15:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0045s User: 0.0011s Wall: 0.0024s flows/second: 66856.2 Runtime: 0.0025s