Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-27 19:58:48.728 00:00:10.367 TCP 23.104.0.1:57572 -> 1.101.0.1:3000 11 1507 1 2025-09-27 19:59:26.017 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 19:59:26.214 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 19:59:35.868 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44878 10 6452 1 2025-09-27 19:59:49.136 00:00:10.364 TCP 23.104.0.1:51546 -> 1.101.0.1:3000 11 1507 1 2025-09-27 19:56:34.470 00:05:01.590 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 20:00:36.088 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40392 10 6452 1 2025-09-27 20:00:49.540 00:00:10.431 TCP 23.104.0.1:53870 -> 1.101.0.1:3000 11 1507 1 2025-09-27 19:57:34.478 00:05:01.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 20:01:36.309 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48562 10 6452 1 2025-09-27 20:01:50.008 00:00:10.360 TCP 23.104.0.1:35474 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:02:36.527 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55554 10 6452 1 2025-09-27 20:02:50.405 00:00:10.333 TCP 23.104.0.1:37838 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:03:36.693 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56618 10 6452 1 2025-09-27 20:03:50.774 00:00:10.368 TCP 23.104.0.1:44582 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:04:26.180 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 20:04:26.169 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 20:04:36.912 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48224 10 6452 1 2025-09-27 20:04:51.178 00:00:10.361 TCP 23.104.0.1:33882 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:05:37.136 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-09-27 20:05:51.578 00:00:10.364 TCP 23.104.0.1:42872 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:02:34.474 00:05:01.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 20:06:37.354 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34416 10 6452 1 2025-09-27 20:06:51.977 00:00:10.365 TCP 23.104.0.1:48920 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:03:34.478 00:05:01.583 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 20:07:37.575 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55818 10 6452 1 2025-09-27 20:07:52.386 00:00:10.555 TCP 23.104.0.1:56676 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:08:37.799 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35670 10 6452 1 2025-09-27 20:08:52.979 00:00:10.362 TCP 23.104.0.1:36574 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:09:26.330 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 20:09:26.089 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 20:09:38.028 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42224 10 6452 1 2025-09-27 20:09:53.377 00:00:10.368 TCP 23.104.0.1:56888 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:10:38.239 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39890 10 6452 1 2025-09-27 20:10:53.786 00:00:10.369 TCP 23.104.0.1:58324 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:11:38.463 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:32840 10 6452 1 2025-09-27 20:11:54.197 00:00:10.370 TCP 23.104.0.1:45822 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:08:34.476 00:05:01.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 20:12:38.686 00:00:10.903 TCP 1.101.0.1:3000 -> 22.102.0.1:39468 10 6452 1 2025-09-27 20:12:54.603 00:00:10.370 TCP 23.104.0.1:50108 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:09:34.478 00:05:01.583 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 20:13:39.625 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49066 10 6452 1 2025-09-27 20:13:55.013 00:00:10.324 TCP 23.104.0.1:55424 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:14:26.524 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 20:14:26.864 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 20:14:39.799 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36452 10 6452 1 2025-09-27 20:14:55.382 00:00:10.366 TCP 23.104.0.1:50058 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:15:40.030 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57168 10 6452 1 2025-09-27 20:15:55.796 00:00:10.496 TCP 23.104.0.1:40990 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:16:40.245 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48608 10 6452 1 2025-09-27 20:16:56.336 00:00:10.366 TCP 23.104.0.1:37598 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:17:40.467 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52564 10 6452 1 2025-09-27 20:17:56.741 00:00:10.575 TCP 23.104.0.1:33382 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:14:34.478 00:05:01.590 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 20:18:40.681 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59044 10 6452 1 2025-09-27 20:18:57.357 00:00:10.321 TCP 23.104.0.1:38640 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:19:26.591 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 20:19:26.541 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 20:15:34.480 00:05:01.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 20:19:40.889 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39840 10 6452 1 2025-09-27 20:19:57.717 00:00:10.381 TCP 23.104.0.1:47376 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:20:41.110 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32836 10 6452 1 2025-09-27 20:20:58.134 00:00:10.368 TCP 23.104.0.1:35040 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:21:41.330 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50388 10 6452 1 2025-09-27 20:21:58.539 00:00:10.368 TCP 23.104.0.1:53400 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:22:41.519 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51680 10 6452 1 2025-09-27 20:22:58.943 00:00:10.374 TCP 23.104.0.1:36512 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:23:41.751 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52602 10 6452 1 2025-09-27 20:23:59.358 00:00:10.326 TCP 23.104.0.1:55952 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:24:26.400 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 20:24:26.467 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 20:20:34.478 00:05:01.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 20:24:41.970 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:36732 13 6608 1 2025-09-27 20:24:59.718 00:00:10.371 TCP 23.104.0.1:39864 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:21:34.482 00:05:01.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 20:25:42.229 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48714 10 6452 1 2025-09-27 20:26:00.126 00:00:10.331 TCP 23.104.0.1:52316 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:26:42.433 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57158 10 6452 1 2025-09-27 20:27:00.487 00:00:10.366 TCP 23.104.0.1:46850 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:27:42.652 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34364 10 6452 1 2025-09-27 20:28:00.892 00:00:10.371 TCP 23.104.0.1:59658 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:28:42.829 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33862 10 6452 1 2025-09-27 20:29:01.300 00:00:10.363 TCP 23.104.0.1:42608 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:29:26.815 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 20:29:26.580 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 20:29:43.072 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43050 10 6452 1 2025-09-27 20:30:01.701 00:00:10.362 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:26:34.480 00:05:01.592 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 20:30:43.287 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53678 10 6452 1 2025-09-27 20:31:02.106 00:00:10.323 TCP 23.104.0.1:52342 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:27:34.483 00:05:01.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 20:31:43.497 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33982 10 6452 1 2025-09-27 20:32:02.468 00:00:10.367 TCP 23.104.0.1:36612 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:32:43.712 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40166 10 6452 1 2025-09-27 20:33:02.872 00:00:10.364 TCP 23.104.0.1:50658 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:33:43.928 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:36498 10 6452 1 2025-09-27 20:34:03.275 00:00:10.362 TCP 23.104.0.1:48136 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:34:26.948 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 20:34:26.941 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 20:34:44.177 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55762 10 6452 1 2025-09-27 20:35:03.678 00:00:10.369 TCP 23.104.0.1:47724 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:35:44.396 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34826 10 6452 1 2025-09-27 20:36:04.112 00:00:10.465 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:32:34.481 00:05:01.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 20:36:44.622 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41668 10 6452 1 2025-09-27 20:37:04.616 00:00:10.365 TCP 23.104.0.1:36966 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:33:34.483 00:05:01.588 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 20:37:44.839 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48870 10 6452 1 2025-09-27 20:38:05.020 00:00:10.371 TCP 23.104.0.1:59628 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:38:45.078 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35696 10 6452 1 2025-09-27 20:39:05.434 00:00:10.365 TCP 23.104.0.1:48552 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:39:26.871 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 20:39:26.889 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 20:39:45.295 00:00:10.626 TCP 1.101.0.1:3000 -> 22.102.0.1:43166 10 6452 1 2025-09-27 20:40:05.839 00:00:10.343 TCP 23.104.0.1:60926 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:40:45.955 00:00:10.840 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 12 6556 1 2025-09-27 20:41:06.226 00:00:10.383 TCP 23.104.0.1:60396 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:41:46.828 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:49750 10 6452 1 2025-09-27 20:42:06.657 00:00:10.367 TCP 23.104.0.1:52764 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:38:34.482 00:05:01.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 20:42:47.040 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46764 10 6452 1 2025-09-27 20:43:07.079 00:00:10.324 TCP 23.104.0.1:50316 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:39:34.485 00:05:01.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 20:43:47.249 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48718 10 6452 1 2025-09-27 20:44:07.444 00:00:10.324 TCP 23.104.0.1:34036 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:44:27.022 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 20:44:27.020 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 20:44:47.464 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46044 10 6452 1 2025-09-27 20:45:07.805 00:00:10.368 TCP 23.104.0.1:48750 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:45:47.678 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60186 10 6452 1 2025-09-27 20:46:08.210 00:00:10.369 TCP 23.104.0.1:53754 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:46:47.851 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54704 10 6452 1 2025-09-27 20:47:08.615 00:00:10.367 TCP 23.104.0.1:46314 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:47:48.080 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 10 6452 1 2025-09-27 20:48:09.021 00:00:10.366 TCP 23.104.0.1:49160 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:44:34.483 00:05:01.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 20:48:48.295 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38414 10 6452 1 2025-09-27 20:49:09.422 00:00:10.366 TCP 23.104.0.1:50158 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:49:26.914 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 20:49:27.112 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 20:45:34.486 00:05:01.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 20:49:48.506 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35418 10 6452 1 2025-09-27 20:50:09.829 00:00:10.350 TCP 23.104.0.1:54190 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:50:48.739 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55572 10 6452 1 2025-09-27 20:51:10.214 00:00:10.365 TCP 23.104.0.1:42666 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:51:48.916 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47994 10 6452 1 2025-09-27 20:52:10.618 00:00:10.364 TCP 23.104.0.1:48856 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:52:49.126 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46938 10 6452 1 2025-09-27 20:53:11.021 00:00:10.366 TCP 23.104.0.1:59536 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:53:49.339 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37720 10 6452 1 2025-09-27 20:54:11.424 00:00:10.366 TCP 23.104.0.1:50620 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:54:27.242 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 20:54:27.141 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 20:50:34.485 00:05:01.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 20:54:49.561 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52398 10 6452 1 2025-09-27 20:55:11.831 00:00:10.376 TCP 23.104.0.1:59242 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:51:34.487 00:05:01.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 20:55:49.778 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36270 10 6452 1 2025-09-27 20:56:12.245 00:00:10.322 TCP 23.104.0.1:57634 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:56:50.001 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59388 10 6452 1 2025-09-27 20:57:12.606 00:00:10.366 TCP 23.104.0.1:34570 -> 1.101.0.1:3000 11 1507 1 2025-09-27 20:57:50.215 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6452 1 2025-09-27 20:58:13.015 00:00:10.362 TCP 23.104.0.1:57258 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492156, total packets: 1567, avg bps: 1061, avg pps: 0, avg bpp: 314 Time window: 2025-09-27 19:56:34 - 2025-09-27 20:58:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0023s Wall: 0.0029s flows/second: 55556.0 Runtime: 0.0030s