Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-27 13:58:53.113 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54106 10 6452 1 2025-09-27 13:59:18.769 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 13:59:18.837 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 13:59:12.142 00:00:10.362 TCP 23.104.0.1:57044 -> 1.101.0.1:3000 11 1507 1 2025-09-27 13:59:53.324 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42910 10 6452 1 2025-09-27 14:00:12.540 00:00:10.365 TCP 23.104.0.1:34092 -> 1.101.0.1:3000 11 1507 1 2025-09-27 13:56:34.355 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 14:00:53.498 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42558 10 6452 1 2025-09-27 14:01:12.942 00:00:10.321 TCP 23.104.0.1:46808 -> 1.101.0.1:3000 11 1507 1 2025-09-27 13:57:34.359 00:05:01.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 14:01:53.722 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36090 10 6452 1 2025-09-27 14:02:13.312 00:00:10.369 TCP 23.104.0.1:37216 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:02:53.941 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35264 10 6452 1 2025-09-27 14:03:13.718 00:00:10.371 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:03:54.190 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51818 10 6452 1 2025-09-27 14:04:19.134 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 14:04:19.247 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 14:04:14.131 00:00:10.364 TCP 23.104.0.1:45274 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:04:54.406 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53946 10 6452 1 2025-09-27 14:05:14.538 00:00:10.319 TCP 23.104.0.1:40536 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:05:54.622 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46850 10 6452 1 2025-09-27 14:06:14.894 00:00:10.329 TCP 23.104.0.1:47664 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:02:34.359 00:05:01.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 14:06:54.846 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:48844 12 10367 1 2025-09-27 14:07:15.260 00:00:10.438 TCP 23.104.0.1:50334 -> 1.101.0.1:3000 15 1926 1 2025-09-27 14:03:34.360 00:05:01.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 14:07:55.093 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46608 10 6452 1 2025-09-27 14:08:15.737 00:00:10.322 TCP 23.104.0.1:49208 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:08:55.301 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35570 10 6452 1 2025-09-27 14:09:19.162 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 14:09:18.910 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 14:09:16.101 00:00:10.371 TCP 23.104.0.1:35684 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:09:55.513 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57832 10 6452 1 2025-09-27 14:10:16.511 00:00:10.323 TCP 23.104.0.1:48786 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:10:55.731 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34740 10 6452 1 2025-09-27 14:11:16.873 00:00:10.372 TCP 23.104.0.1:53480 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:11:55.943 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48720 10 6452 1 2025-09-27 14:12:17.286 00:00:10.370 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:08:34.359 00:05:01.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 14:12:56.176 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56320 10 6452 1 2025-09-27 14:13:17.695 00:00:10.359 TCP 23.104.0.1:47002 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:09:34.361 00:05:01.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 14:13:56.397 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35310 10 6452 1 2025-09-27 14:14:19.179 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 14:14:18.924 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 14:14:18.104 00:00:10.321 TCP 23.104.0.1:42846 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:14:56.614 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35166 10 6452 1 2025-09-27 14:15:18.467 00:00:10.364 TCP 23.104.0.1:57944 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:15:56.790 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46904 10 6452 1 2025-09-27 14:16:18.869 00:00:10.829 TCP 23.104.0.1:47996 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:16:56.965 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52394 12 6556 1 2025-09-27 14:17:19.730 00:00:10.370 TCP 23.104.0.1:50136 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:17:57.186 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45438 10 6452 1 2025-09-27 14:18:20.138 00:00:13.526 TCP 23.104.0.1:38472 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:14:34.360 00:05:01.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 14:18:57.401 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53038 10 6452 1 2025-09-27 14:19:19.352 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 14:19:19.365 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 14:15:34.362 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 14:19:23.707 00:00:10.368 TCP 23.104.0.1:60190 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:19:57.617 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60252 10 6452 1 2025-09-27 14:20:24.111 00:00:10.362 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:20:57.835 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50280 10 6452 1 2025-09-27 14:21:24.512 00:00:10.366 TCP 23.104.0.1:39742 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:21:58.082 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44498 10 6452 1 2025-09-27 14:22:24.914 00:00:10.369 TCP 23.104.0.1:59550 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:22:58.295 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55722 10 6452 1 2025-09-27 14:23:25.319 00:00:10.357 TCP 23.104.0.1:40760 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:23:58.511 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-09-27 14:24:19.321 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 14:24:19.426 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 14:20:34.360 00:05:01.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 14:24:25.716 00:00:10.335 TCP 23.104.0.1:41302 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:24:58.681 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38140 10 6452 1 2025-09-27 14:21:34.364 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 14:25:26.111 00:00:10.364 TCP 23.104.0.1:42980 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:25:58.856 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:36358 10 6452 1 2025-09-27 14:26:26.514 00:00:10.626 TCP 23.104.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:26:59.102 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59258 10 6452 1 2025-09-27 14:27:27.197 00:00:10.333 TCP 23.104.0.1:54762 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:27:59.327 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36260 10 6452 1 2025-09-27 14:28:27.568 00:00:10.403 TCP 23.104.0.1:32912 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:28:59.572 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40504 10 6452 1 2025-09-27 14:29:19.515 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 14:29:19.472 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 14:29:27.980 00:00:10.338 TCP 23.104.0.1:35978 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:29:59.793 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38474 10 6452 1 2025-09-27 14:26:34.361 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 14:30:28.356 00:00:10.362 TCP 23.104.0.1:55498 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:31:00.032 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52074 10 6452 1 2025-09-27 14:27:34.364 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 14:31:28.754 00:00:10.384 TCP 23.104.0.1:42776 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:32:00.272 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39464 10 6452 1 2025-09-27 14:32:29.178 00:00:10.363 TCP 23.104.0.1:37586 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:33:00.492 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48588 10 6452 1 2025-09-27 14:33:29.581 00:00:10.712 TCP 23.104.0.1:58162 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:34:00.671 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:35240 11 6504 1 2025-09-27 14:34:19.585 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 14:34:19.391 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 14:34:30.330 00:00:11.663 TCP 23.104.0.1:53374 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:35:00.948 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:41830 10 6452 1 2025-09-27 14:35:32.032 00:00:10.365 TCP 23.104.0.1:43398 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:36:01.186 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41742 10 6452 1 2025-09-27 14:32:34.362 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 14:36:32.437 00:00:10.324 TCP 23.104.0.1:33404 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:37:01.361 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60624 10 6452 1 2025-09-27 14:33:34.365 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 14:37:32.799 00:00:10.366 TCP 23.104.0.1:59202 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:38:01.572 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40564 10 6452 1 2025-09-27 14:38:33.199 00:00:10.366 TCP 23.104.0.1:34748 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:39:01.783 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45912 10 6452 1 2025-09-27 14:39:19.661 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 14:39:19.638 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 14:39:33.604 00:00:10.363 TCP 23.104.0.1:33080 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:40:02.002 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53936 10 6452 1 2025-09-27 14:40:34.006 00:00:10.362 TCP 23.104.0.1:34228 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:41:02.228 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47496 10 6452 1 2025-09-27 14:41:34.409 00:00:10.328 TCP 23.104.0.1:60880 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:42:02.440 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53150 10 6452 1 2025-09-27 14:38:34.364 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 14:42:34.771 00:00:10.370 TCP 23.104.0.1:40944 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:43:02.675 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37646 10 6452 1 2025-09-27 14:39:34.367 00:05:01.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 14:43:35.177 00:00:10.366 TCP 23.104.0.1:35502 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:44:02.887 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33144 10 6452 1 2025-09-27 14:44:19.933 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 14:44:19.640 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 14:44:35.578 00:00:10.372 TCP 23.104.0.1:41234 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:45:03.114 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42096 10 6452 1 2025-09-27 14:45:35.989 00:00:10.369 TCP 23.104.0.1:38320 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:46:03.332 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52674 10 6452 1 2025-09-27 14:46:36.397 00:00:10.957 TCP 23.104.0.1:47090 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:47:03.546 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56398 12 10367 1 2025-09-27 14:47:37.385 00:00:10.501 TCP 23.104.0.1:48834 -> 1.101.0.1:3000 15 1926 1 2025-09-27 14:48:03.773 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46652 10 6452 1 2025-09-27 14:44:34.367 00:05:01.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 14:48:37.916 00:00:10.389 TCP 23.104.0.1:36170 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:49:19.846 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 14:49:03.986 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:36148 10 6452 1 2025-09-27 14:49:19.909 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 14:45:34.370 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 14:49:38.332 00:00:10.373 TCP 23.104.0.1:36400 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:50:04.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37930 10 6452 1 2025-09-27 14:50:38.747 00:00:10.341 TCP 23.104.0.1:50342 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:51:04.395 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42680 10 6452 1 2025-09-27 14:51:39.127 00:00:10.362 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:52:04.616 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33208 10 6452 1 2025-09-27 14:52:39.526 00:00:10.320 TCP 23.104.0.1:60168 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:53:04.859 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38444 10 6452 1 2025-09-27 14:53:39.884 00:00:10.332 TCP 23.104.0.1:51854 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:54:05.085 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:40524 10 6452 1 2025-09-27 14:54:19.895 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 14:54:20.074 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 14:50:34.368 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 14:54:40.253 00:00:10.420 TCP 23.104.0.1:33104 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:55:05.268 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47216 10 6452 1 2025-09-27 14:51:34.372 00:05:01.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 14:55:40.715 00:00:10.375 TCP 23.104.0.1:50394 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:56:05.473 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42952 10 6452 1 2025-09-27 14:56:41.140 00:00:10.368 TCP 23.104.0.1:46616 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:57:05.693 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41784 12 6556 1 2025-09-27 14:57:41.547 00:00:10.368 TCP 23.104.0.1:58660 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:58:05.922 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33538 10 6452 1 Summary: total flows: 163, total bytes: 505769, total packets: 1578, avg bps: 1093, avg pps: 0, avg bpp: 320 Time window: 2025-09-27 13:56:34 - 2025-09-27 14:58:16 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0008s Wall: 0.0022s flows/second: 72831.7 Runtime: 0.0023s