Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-27 09:58:51.493 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56960 10 6452 1 2025-09-27 09:59:13.819 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 09:59:13.862 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 09:59:26.325 00:00:10.414 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-09-27 09:59:51.713 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50956 10 6452 1 2025-09-27 09:56:34.283 00:05:01.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 10:00:26.784 00:00:10.341 TCP 23.104.0.1:59348 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:00:51.919 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60452 10 6452 1 2025-09-27 09:57:34.286 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 10:01:27.166 00:00:10.376 TCP 23.104.0.1:47802 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:01:52.126 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43092 10 6452 1 2025-09-27 10:02:27.586 00:00:10.361 TCP 23.104.0.1:36800 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:02:52.334 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34918 10 6452 1 2025-09-27 10:03:27.992 00:00:10.369 TCP 23.104.0.1:54414 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:03:52.552 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35848 10 6452 1 2025-09-27 10:04:14.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 10:04:14.005 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 10:04:28.397 00:00:10.364 TCP 23.104.0.1:41190 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:04:52.775 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58354 10 6452 1 2025-09-27 10:05:28.801 00:00:10.785 TCP 23.104.0.1:47292 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:05:52.989 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57980 10 6452 1 2025-09-27 10:02:34.283 00:05:01.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 10:06:29.622 00:00:10.363 TCP 23.104.0.1:49888 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:06:53.224 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48236 10 6452 1 2025-09-27 10:03:34.286 00:05:01.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 10:07:30.025 00:00:10.367 TCP 23.104.0.1:37640 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:07:53.432 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60830 10 6452 1 2025-09-27 10:08:30.431 00:00:10.328 TCP 23.104.0.1:43748 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:08:53.649 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46566 10 6452 1 2025-09-27 10:09:14.107 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 10:09:13.965 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 10:09:30.793 00:00:10.349 TCP 23.104.0.1:43766 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:09:53.856 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52788 10 6452 1 2025-09-27 10:10:31.182 00:00:10.325 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:10:54.038 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51968 10 6452 1 2025-09-27 10:11:31.546 00:00:10.364 TCP 23.104.0.1:45168 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:11:54.256 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54776 10 6452 1 2025-09-27 10:08:34.287 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 10:12:31.953 00:00:10.404 TCP 23.104.0.1:59006 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:12:54.467 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43566 10 6452 1 2025-09-27 10:09:34.292 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 10:13:32.399 00:00:10.361 TCP 23.104.0.1:38540 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:13:54.685 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45652 10 6452 1 2025-09-27 10:14:15.312 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 10:14:14.943 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 10:14:32.802 00:00:10.377 TCP 23.104.0.1:36342 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:14:54.851 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43440 10 6452 1 2025-09-27 10:15:33.223 00:00:10.366 TCP 23.104.0.1:37828 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:15:55.088 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40298 10 6452 1 2025-09-27 10:16:33.628 00:00:10.368 TCP 23.104.0.1:53642 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:16:55.312 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41658 10 6452 1 2025-09-27 10:17:34.035 00:00:10.325 TCP 23.104.0.1:51136 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:17:55.540 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42430 10 6452 1 2025-09-27 10:14:34.292 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 10:18:34.397 00:00:10.323 TCP 23.104.0.1:47704 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:18:55.755 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56054 10 6452 1 2025-09-27 10:19:14.311 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 10:19:14.348 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 10:15:34.294 00:05:01.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 10:19:34.758 00:00:10.379 TCP 23.104.0.1:59926 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:19:55.981 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45602 10 6452 1 2025-09-27 10:20:35.170 00:00:10.363 TCP 23.104.0.1:57122 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:20:56.203 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-09-27 10:21:35.570 00:00:10.326 TCP 23.104.0.1:47152 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:21:56.426 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:60382 13 13939 1 2025-09-27 10:22:35.931 00:00:10.443 TCP 23.104.0.1:50640 -> 1.101.0.1:3000 15 1926 1 2025-09-27 10:22:56.677 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50708 10 6452 1 2025-09-27 10:23:36.410 00:00:10.404 TCP 23.104.0.1:33300 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:23:56.890 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38650 10 6452 1 2025-09-27 10:24:14.643 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 10:24:14.422 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 10:20:34.291 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 10:24:36.855 00:00:10.333 TCP 23.104.0.1:36208 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:24:57.118 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53156 10 6452 1 2025-09-27 10:21:34.295 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 10:25:37.231 00:00:10.361 TCP 23.104.0.1:46374 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:25:57.339 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47404 10 6452 1 2025-09-27 10:26:37.636 00:00:10.361 TCP 23.104.0.1:48044 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:26:57.553 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52644 10 6452 1 2025-09-27 10:27:38.034 00:00:10.362 TCP 23.104.0.1:46306 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:27:57.767 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34566 10 6452 1 2025-09-27 10:28:38.435 00:00:10.361 TCP 23.104.0.1:51912 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:29:14.708 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 10:28:57.984 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:38558 10 6452 1 2025-09-27 10:29:14.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 10:29:38.836 00:00:10.390 TCP 23.104.0.1:39568 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:29:58.220 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42330 10 6452 1 2025-09-27 10:26:34.293 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 10:30:39.258 00:00:10.329 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:30:58.447 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34182 10 6452 1 2025-09-27 10:27:34.296 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 10:31:39.625 00:00:10.368 TCP 23.104.0.1:36672 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:31:58.665 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54198 10 6452 1 2025-09-27 10:32:40.032 00:00:10.370 TCP 23.104.0.1:53612 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:32:58.891 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49074 10 6452 1 2025-09-27 10:33:40.442 00:00:10.324 TCP 23.104.0.1:41030 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:33:59.121 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53486 10 6452 1 2025-09-27 10:34:14.903 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 10:34:14.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 10:34:40.805 00:00:10.369 TCP 23.104.0.1:43674 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:34:59.344 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58538 10 6452 1 2025-09-27 10:35:41.216 00:00:10.441 TCP 23.104.0.1:54036 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:35:59.561 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45260 10 6452 1 2025-09-27 10:32:34.295 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 10:36:41.692 00:00:10.369 TCP 23.104.0.1:55404 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:36:59.772 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45678 10 6452 1 2025-09-27 10:33:34.299 00:05:01.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 10:37:42.102 00:00:10.384 TCP 23.104.0.1:42794 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:37:59.989 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:36652 10 6452 1 2025-09-27 10:38:42.526 00:00:10.366 TCP 23.104.0.1:42672 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:39:00.176 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44470 10 6452 1 2025-09-27 10:39:14.990 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 10:39:14.825 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 10:39:42.934 00:00:10.380 TCP 23.104.0.1:34298 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:40:00.403 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53838 10 6452 1 2025-09-27 10:40:43.350 00:00:10.365 TCP 23.104.0.1:55820 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:41:00.577 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:41096 10 6452 1 2025-09-27 10:41:43.759 00:00:10.375 TCP 23.104.0.1:58630 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:42:00.757 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59802 10 6452 1 2025-09-27 10:38:34.299 00:05:01.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 10:42:44.172 00:00:10.373 TCP 23.104.0.1:58130 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:43:00.970 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:57518 10 6452 1 2025-09-27 10:39:34.302 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 10:43:44.590 00:00:10.363 TCP 23.104.0.1:59980 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:44:01.208 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41450 10 6452 1 2025-09-27 10:44:14.978 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 10:44:15.028 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 10:44:45.002 00:00:10.370 TCP 23.104.0.1:48334 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:45:01.423 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55096 10 6452 1 2025-09-27 10:45:45.416 00:00:10.359 TCP 23.104.0.1:43226 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:46:01.649 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38492 10 6452 1 2025-09-27 10:46:45.816 00:00:10.369 TCP 23.104.0.1:59692 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:47:01.872 00:00:10.376 TCP 1.101.0.1:3000 -> 22.102.0.1:49028 10 6452 1 2025-09-27 10:47:46.218 00:00:10.363 TCP 23.104.0.1:49964 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:48:02.291 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33418 10 6452 1 2025-09-27 10:44:34.300 00:05:01.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 10:48:46.617 00:00:10.366 TCP 23.104.0.1:35310 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:49:15.055 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 10:49:15.005 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 10:49:02.460 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37342 10 6452 1 2025-09-27 10:45:34.304 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 10:49:47.022 00:00:10.365 TCP 23.104.0.1:33064 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:50:02.675 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56192 10 6452 1 2025-09-27 10:50:47.427 00:00:10.324 TCP 23.104.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:51:02.900 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48760 10 6452 1 2025-09-27 10:51:47.789 00:00:10.364 TCP 23.104.0.1:39156 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:52:03.128 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33520 10 6452 1 2025-09-27 10:52:48.193 00:00:10.323 TCP 23.104.0.1:44066 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:53:03.344 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39006 10 6452 1 2025-09-27 10:53:48.559 00:00:10.362 TCP 23.104.0.1:60124 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:54:15.232 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 10:54:03.558 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57252 10 6452 1 2025-09-27 10:54:14.969 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 10:50:34.302 00:05:01.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 10:54:48.959 00:00:10.363 TCP 23.104.0.1:33124 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:55:03.727 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57466 10 6452 1 2025-09-27 10:51:34.303 00:05:01.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 10:55:49.361 00:00:10.360 TCP 23.104.0.1:54836 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:56:03.942 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50268 10 6452 1 2025-09-27 10:56:49.757 00:00:10.374 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:57:04.185 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38904 10 6452 1 2025-09-27 10:57:50.169 00:00:10.363 TCP 23.104.0.1:50118 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:58:04.422 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45450 10 6452 1 Summary: total flows: 163, total bytes: 504747, total packets: 1568, avg bps: 1091, avg pps: 0, avg bpp: 321 Time window: 2025-09-27 09:56:34 - 2025-09-27 10:58:14 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0020s Wall: 0.0022s flows/second: 73426.2 Runtime: 0.0022s