Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-27 01:58:50.633 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54068 12 6556 1 2025-09-27 01:59:04.330 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 01:58:52.533 00:00:10.360 TCP 23.104.0.1:53382 -> 1.101.0.1:3000 11 1507 1 2025-09-27 01:59:04.487 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 01:59:50.857 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40280 10 6452 1 2025-09-27 01:59:52.932 00:00:10.381 TCP 23.104.0.1:53194 -> 1.101.0.1:3000 11 1507 1 2025-09-27 01:56:34.131 00:05:01.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 02:00:51.042 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49482 10 6452 1 2025-09-27 02:00:53.351 00:00:10.364 TCP 23.104.0.1:54588 -> 1.101.0.1:3000 11 1507 1 2025-09-27 01:57:34.133 00:05:01.537 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 02:01:51.259 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49848 10 6452 1 2025-09-27 02:01:53.757 00:00:10.379 TCP 23.104.0.1:34784 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:02:51.476 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42406 10 6452 1 2025-09-27 02:02:54.175 00:00:10.366 TCP 23.104.0.1:38770 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:03:51.698 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59192 10 6452 1 2025-09-27 02:04:04.587 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 02:04:04.479 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 02:03:54.579 00:00:10.364 TCP 23.104.0.1:33842 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:04:54.980 00:00:10.368 TCP 23.104.0.1:54664 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:04:51.945 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57448 10 6452 1 2025-09-27 02:05:55.386 00:00:10.381 TCP 23.104.0.1:34216 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:05:52.186 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39252 10 6452 1 2025-09-27 02:02:34.132 00:05:01.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 02:06:55.821 00:00:10.326 TCP 23.104.0.1:36724 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:06:52.412 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56374 10 6452 1 2025-09-27 02:03:34.134 00:05:01.536 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 02:07:56.186 00:00:10.368 TCP 23.104.0.1:47740 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:07:52.636 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6452 1 2025-09-27 02:09:04.494 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 02:08:56.596 00:00:10.337 TCP 23.104.0.1:58614 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:08:52.845 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51658 10 6452 1 2025-09-27 02:09:04.503 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 02:09:53.076 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43946 10 6452 1 2025-09-27 02:09:56.974 00:00:10.368 TCP 23.104.0.1:54992 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:10:53.300 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37892 11 6813 1 2025-09-27 02:10:57.387 00:00:10.321 TCP 23.104.0.1:38418 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:11:53.545 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40724 10 6452 1 2025-09-27 02:11:57.750 00:00:10.395 TCP 23.104.0.1:42030 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:08:34.132 00:05:01.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 02:12:53.758 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41190 10 6452 1 2025-09-27 02:12:58.179 00:00:10.370 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:09:34.135 00:05:01.537 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 02:13:53.973 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:38356 10 6452 1 2025-09-27 02:14:04.892 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 02:14:04.826 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 02:13:58.590 00:00:10.366 TCP 23.104.0.1:42830 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:14:54.206 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49738 10 6452 1 2025-09-27 02:14:58.998 00:00:10.321 TCP 23.104.0.1:59976 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:15:54.417 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37212 10 6452 1 2025-09-27 02:15:59.376 00:00:10.322 TCP 23.104.0.1:37596 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:16:54.589 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56300 10 6452 1 2025-09-27 02:16:59.738 00:00:10.360 TCP 23.104.0.1:36100 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:17:54.804 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60820 10 6452 1 2025-09-27 02:18:00.136 00:00:10.366 TCP 23.104.0.1:41822 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:14:34.134 00:05:01.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 02:19:04.840 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 02:19:04.755 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 02:18:54.978 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41330 10 6452 1 2025-09-27 02:19:00.546 00:00:10.364 TCP 23.104.0.1:57110 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:15:34.138 00:05:01.535 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 02:19:55.213 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51522 10 6452 1 2025-09-27 02:20:00.951 00:00:10.368 TCP 23.104.0.1:35272 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:20:55.426 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40550 10 6452 1 2025-09-27 02:21:01.356 00:00:10.324 TCP 23.104.0.1:54072 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:21:55.646 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34898 10 6452 1 2025-09-27 02:22:01.721 00:00:10.325 TCP 23.104.0.1:51804 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:22:55.864 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42932 10 6452 1 2025-09-27 02:23:02.104 00:00:10.382 TCP 23.104.0.1:58760 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:24:05.829 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 02:23:56.090 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35966 10 6452 1 2025-09-27 02:24:05.619 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 02:24:02.522 00:00:10.328 TCP 23.104.0.1:56862 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:20:34.135 00:05:01.540 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 02:24:56.313 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39538 10 6452 1 2025-09-27 02:25:02.889 00:00:10.345 TCP 23.104.0.1:33254 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:21:34.138 00:05:01.535 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 02:25:56.535 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:46278 10 6452 1 2025-09-27 02:26:03.270 00:00:10.367 TCP 23.104.0.1:43372 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:26:56.715 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48594 10 6452 1 2025-09-27 02:27:03.676 00:00:10.370 TCP 23.104.0.1:58610 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:27:56.929 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:44562 10 6452 1 2025-09-27 02:28:04.108 00:00:10.367 TCP 23.104.0.1:41188 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:29:05.161 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 02:29:05.265 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 02:28:57.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45154 10 6452 1 2025-09-27 02:29:04.515 00:00:10.326 TCP 23.104.0.1:50892 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:29:57.379 00:00:11.056 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6452 1 2025-09-27 02:30:04.886 00:00:10.383 TCP 23.104.0.1:52202 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:26:34.136 00:05:01.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 02:30:58.475 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41336 10 6452 1 2025-09-27 02:31:05.310 00:00:10.366 TCP 23.104.0.1:53248 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:27:34.141 00:05:01.533 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 02:31:58.681 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49042 10 6452 1 2025-09-27 02:32:05.725 00:00:10.376 TCP 23.104.0.1:49204 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:32:58.893 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40304 10 6452 1 2025-09-27 02:33:06.138 00:00:10.366 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:34:05.085 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 02:34:05.127 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 02:33:59.108 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51302 10 6452 1 2025-09-27 02:34:06.542 00:00:10.367 TCP 23.104.0.1:58740 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:34:59.325 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45086 10 6452 1 2025-09-27 02:35:06.944 00:00:10.375 TCP 23.104.0.1:46794 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:35:59.546 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35934 10 6452 1 2025-09-27 02:36:07.354 00:00:10.376 TCP 23.104.0.1:52886 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:32:34.143 00:05:01.535 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 02:36:59.714 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52106 10 6452 1 2025-09-27 02:37:07.758 00:00:10.372 TCP 23.104.0.1:35036 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:33:34.146 00:05:01.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 02:37:59.928 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:59878 10 6452 1 2025-09-27 02:38:08.171 00:00:10.609 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:39:05.253 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 02:39:05.171 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 02:39:00.167 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57770 10 6452 1 2025-09-27 02:39:08.819 00:00:10.364 TCP 23.104.0.1:46786 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:40:00.345 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43892 10 6452 1 2025-09-27 02:40:09.221 00:00:10.362 TCP 23.104.0.1:37344 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:41:00.560 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39030 10 6452 1 2025-09-27 02:41:09.621 00:00:10.328 TCP 23.104.0.1:57554 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:42:00.729 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35930 10 6452 1 2025-09-27 02:42:09.986 00:00:10.322 TCP 23.104.0.1:55876 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:38:34.144 00:05:01.535 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 02:43:00.940 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35298 10 6452 1 2025-09-27 02:43:10.347 00:00:10.365 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:39:34.147 00:05:01.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 02:44:05.367 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 02:44:05.155 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 02:44:01.169 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44124 10 6452 1 2025-09-27 02:44:10.748 00:00:10.358 TCP 23.104.0.1:54744 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:45:01.386 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45546 10 6452 1 2025-09-27 02:45:11.147 00:00:10.754 TCP 23.104.0.1:38500 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:46:01.614 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51904 10 6452 1 2025-09-27 02:46:11.941 00:00:10.375 TCP 23.104.0.1:40730 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:47:01.849 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:35356 12 10367 1 2025-09-27 02:47:12.349 00:00:10.436 TCP 23.104.0.1:58240 -> 1.101.0.1:3000 15 1926 1 2025-09-27 02:48:02.099 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55882 10 6452 1 2025-09-27 02:48:12.834 00:00:10.366 TCP 23.104.0.1:34016 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:44:34.145 00:05:01.536 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 02:49:05.905 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 02:49:05.756 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 02:49:02.314 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:38746 10 6452 1 2025-09-27 02:49:13.243 00:00:10.363 TCP 23.104.0.1:57186 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:45:34.149 00:05:01.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 02:50:02.493 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:33752 10 6452 1 2025-09-27 02:50:13.645 00:00:10.365 TCP 23.104.0.1:58554 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:51:02.673 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60806 10 6452 1 2025-09-27 02:51:14.054 00:00:10.328 TCP 23.104.0.1:47830 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:52:02.890 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49982 10 6452 1 2025-09-27 02:52:14.419 00:00:10.324 TCP 23.104.0.1:35146 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:53:03.110 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52974 10 6452 1 2025-09-27 02:53:14.784 00:00:10.332 TCP 23.104.0.1:50240 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:54:05.206 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 02:54:05.543 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 02:54:03.332 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-09-27 02:54:15.148 00:00:10.379 TCP 23.104.0.1:39330 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:50:34.147 00:05:01.536 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 02:55:03.553 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36398 10 6452 1 2025-09-27 02:55:15.567 00:00:10.365 TCP 23.104.0.1:49312 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:51:34.149 00:05:01.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 02:56:03.769 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54696 10 6452 1 2025-09-27 02:56:15.971 00:00:10.403 TCP 23.104.0.1:40186 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:57:03.991 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57412 10 6452 1 2025-09-27 02:57:16.416 00:00:10.373 TCP 23.104.0.1:57994 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:58:04.223 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43988 10 6452 1 2025-09-27 02:58:16.827 00:00:10.339 TCP 23.104.0.1:33024 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 503147, total packets: 1581, avg bps: 1084, avg pps: 0, avg bpp: 318 Time window: 2025-09-27 01:56:34 - 2025-09-27 02:58:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0019s User: 0.0039s Wall: 0.0028s flows/second: 59206.9 Runtime: 0.0028s