Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-28 01:59:05.679 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53036 10 6452 1 2025-09-28 01:59:33.055 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 01:59:25.549 00:00:10.362 TCP 23.104.0.1:60886 -> 1.101.0.1:3000 11 1507 1 2025-09-28 01:59:33.095 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:00:05.905 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35220 10 6452 1 2025-09-28 02:00:25.950 00:00:10.372 TCP 23.104.0.1:46484 -> 1.101.0.1:3000 11 1507 1 2025-09-28 01:56:34.568 00:05:01.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 02:01:06.123 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-09-28 02:01:26.370 00:00:10.364 TCP 23.104.0.1:40784 -> 1.101.0.1:3000 11 1507 1 2025-09-28 01:57:34.570 00:05:01.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 02:02:06.334 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35596 10 6452 1 2025-09-28 02:02:26.773 00:00:10.365 TCP 23.104.0.1:48744 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:03:06.556 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52124 10 6452 1 2025-09-28 02:03:27.176 00:00:10.365 TCP 23.104.0.1:44580 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:04:06.767 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55510 10 6452 1 2025-09-28 02:04:33.159 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 02:04:33.394 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:04:27.583 00:00:10.365 TCP 23.104.0.1:33070 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:05:06.947 00:00:10.774 TCP 1.101.0.1:3000 -> 22.102.0.1:41190 10 6452 1 2025-09-28 02:05:27.995 00:00:10.365 TCP 23.104.0.1:49142 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:06:07.760 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34252 10 6452 1 2025-09-28 02:06:28.405 00:00:10.365 TCP 23.104.0.1:60098 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:02:34.570 00:05:01.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 02:07:07.973 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:41010 10 6452 1 2025-09-28 02:07:28.807 00:00:10.377 TCP 23.104.0.1:38378 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:03:34.572 00:05:01.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 02:08:08.167 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41148 10 6452 1 2025-09-28 02:08:29.247 00:00:10.368 TCP 23.104.0.1:44038 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:09:08.376 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34312 10 6452 1 2025-09-28 02:09:33.823 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:09:34.027 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 02:09:29.657 00:00:10.365 TCP 23.104.0.1:39176 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:10:08.595 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52538 10 6452 1 2025-09-28 02:10:30.089 00:00:10.364 TCP 23.104.0.1:40410 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:11:08.809 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36450 10 6452 1 2025-09-28 02:11:30.491 00:00:10.363 TCP 23.104.0.1:33030 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:12:08.976 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39652 10 6452 1 2025-09-28 02:08:34.570 00:05:01.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 02:12:30.890 00:00:10.379 TCP 23.104.0.1:59162 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:13:09.217 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:34708 10 6452 1 2025-09-28 02:09:34.574 00:05:01.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 02:13:31.307 00:00:10.369 TCP 23.104.0.1:36174 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:14:09.488 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58354 10 6452 1 2025-09-28 02:14:33.377 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:14:33.463 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 02:14:31.719 00:00:10.374 TCP 23.104.0.1:55136 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:15:09.709 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51114 10 6452 1 2025-09-28 02:15:32.129 00:00:10.364 TCP 23.104.0.1:55996 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:16:09.917 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6452 1 2025-09-28 02:16:32.534 00:00:10.359 TCP 23.104.0.1:50408 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:17:10.129 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54232 10 6452 1 2025-09-28 02:17:32.934 00:00:10.368 TCP 23.104.0.1:37290 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:18:10.305 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35046 12 6556 1 2025-09-28 02:14:34.571 00:05:01.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 02:18:33.341 00:00:10.324 TCP 23.104.0.1:39662 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:19:10.533 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47788 10 6452 1 2025-09-28 02:15:34.575 00:05:01.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 02:19:33.731 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 02:19:33.697 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:19:33.705 00:00:10.365 TCP 23.104.0.1:34726 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:20:10.748 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:49110 10 6452 1 2025-09-28 02:20:34.110 00:00:10.362 TCP 23.104.0.1:51700 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:21:10.949 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33276 10 6452 1 2025-09-28 02:21:34.510 00:00:10.361 TCP 23.104.0.1:36032 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:22:11.181 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42364 10 6452 1 2025-09-28 02:22:34.910 00:00:10.362 TCP 23.104.0.1:35130 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:23:11.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46434 10 6452 1 2025-09-28 02:23:35.313 00:00:10.367 TCP 23.104.0.1:35450 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:24:11.600 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34990 10 6452 1 2025-09-28 02:24:33.808 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:20:34.572 00:05:01.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 02:24:33.757 00:00:00.052 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 02:24:35.718 00:00:10.369 TCP 23.104.0.1:50082 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:25:11.812 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55398 10 6452 1 2025-09-28 02:21:34.574 00:05:01.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 02:25:36.130 00:00:10.359 TCP 23.104.0.1:42148 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:26:12.029 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47324 10 6452 1 2025-09-28 02:26:36.529 00:00:10.369 TCP 23.104.0.1:35070 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:27:12.246 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37238 10 6452 1 2025-09-28 02:27:36.935 00:00:10.386 TCP 23.104.0.1:52852 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:28:12.464 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34804 10 6452 1 2025-09-28 02:28:37.361 00:00:10.371 TCP 23.104.0.1:37152 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:29:12.676 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34360 10 6452 1 2025-09-28 02:29:33.784 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 02:29:33.945 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:29:37.771 00:00:10.369 TCP 23.104.0.1:39104 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:30:12.894 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47184 10 6452 1 2025-09-28 02:26:34.573 00:05:01.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 02:30:38.176 00:00:10.335 TCP 23.104.0.1:48762 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:31:13.110 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39646 10 6452 1 2025-09-28 02:27:34.575 00:05:01.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 02:31:38.546 00:00:10.374 TCP 23.104.0.1:43152 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:32:13.334 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:60990 12 10365 1 2025-09-28 02:32:38.969 00:00:10.501 TCP 23.104.0.1:45298 -> 1.101.0.1:3000 15 1926 1 2025-09-28 02:33:13.567 00:00:10.620 TCP 1.101.0.1:3000 -> 22.102.0.1:50252 10 6452 1 2025-09-28 02:33:39.514 00:00:10.370 TCP 23.104.0.1:60928 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:34:14.225 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57650 10 6452 1 2025-09-28 02:34:34.101 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:34:34.041 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 02:34:39.917 00:00:10.367 TCP 23.104.0.1:57172 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:35:14.443 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60362 10 6452 1 2025-09-28 02:35:40.325 00:00:10.368 TCP 23.104.0.1:38786 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:36:14.656 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51648 10 6452 1 2025-09-28 02:32:34.574 00:05:01.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 02:36:40.734 00:00:10.370 TCP 23.104.0.1:55710 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:37:14.887 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52598 10 6452 1 2025-09-28 02:33:34.577 00:05:01.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 02:37:41.145 00:00:10.366 TCP 23.104.0.1:54954 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:38:15.116 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35420 10 6452 1 2025-09-28 02:38:41.548 00:00:10.366 TCP 23.104.0.1:34082 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:39:15.338 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56066 10 6452 1 2025-09-28 02:39:34.209 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 02:39:33.946 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:39:41.953 00:00:10.366 TCP 23.104.0.1:59854 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:40:15.562 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51766 10 6452 1 2025-09-28 02:40:42.356 00:00:10.609 TCP 23.104.0.1:33364 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:41:15.791 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33614 10 6452 1 2025-09-28 02:41:43.005 00:00:10.363 TCP 23.104.0.1:42188 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:42:16.025 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:43858 12 10367 1 2025-09-28 02:38:34.576 00:05:01.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 02:42:43.403 00:00:10.440 TCP 23.104.0.1:54322 -> 1.101.0.1:3000 15 1926 1 2025-09-28 02:43:16.284 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57096 10 6452 1 2025-09-28 02:39:34.578 00:05:01.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 02:43:43.881 00:00:10.376 TCP 23.104.0.1:45118 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:44:16.494 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51528 10 6452 1 2025-09-28 02:44:34.264 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:44:34.232 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 02:44:44.297 00:00:10.369 TCP 23.104.0.1:44790 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:45:16.709 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43406 10 6452 1 2025-09-28 02:45:44.705 00:00:10.337 TCP 23.104.0.1:58254 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:46:16.932 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42750 10 6452 1 2025-09-28 02:46:45.106 00:00:10.359 TCP 23.104.0.1:45314 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:47:17.172 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33848 10 6452 1 2025-09-28 02:47:45.508 00:00:10.361 TCP 23.104.0.1:42348 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:48:17.390 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33610 10 6452 1 2025-09-28 02:44:34.579 00:05:01.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 02:48:45.906 00:00:10.366 TCP 23.104.0.1:39410 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:49:17.598 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58030 10 6452 1 2025-09-28 02:49:34.547 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:49:34.012 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 02:45:34.580 00:05:01.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 02:49:46.315 00:00:10.366 TCP 23.104.0.1:47732 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:50:17.813 00:00:10.740 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-09-28 02:50:46.721 00:00:10.367 TCP 23.104.0.1:38988 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:51:18.590 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59622 10 6452 1 2025-09-28 02:51:47.124 00:00:10.368 TCP 23.104.0.1:45562 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:52:18.804 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34254 10 6452 1 2025-09-28 02:52:47.532 00:00:10.416 TCP 23.104.0.1:33616 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:53:19.023 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43278 10 6452 1 2025-09-28 02:53:47.993 00:00:10.361 TCP 23.104.0.1:33040 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:54:19.231 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58930 10 6452 1 2025-09-28 02:54:34.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 02:54:34.492 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:50:34.581 00:05:01.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 02:54:48.392 00:00:10.327 TCP 23.104.0.1:35738 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:55:19.407 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43230 10 6452 1 2025-09-28 02:51:34.583 00:05:01.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 02:55:48.759 00:00:10.335 TCP 23.104.0.1:49634 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:56:19.583 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49608 10 6452 1 2025-09-28 02:56:49.137 00:00:10.364 TCP 23.104.0.1:43070 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:57:19.758 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45500 10 6452 1 2025-09-28 02:57:49.542 00:00:10.361 TCP 23.104.0.1:33162 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:58:19.928 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:57992 10 6452 1 Summary: total flows: 163, total bytes: 505611, total packets: 1575, avg bps: 1088, avg pps: 0, avg bpp: 321 Time window: 2025-09-28 01:56:34 - 2025-09-28 02:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0034s User: 0.0017s Wall: 0.0027s flows/second: 60150.6 Runtime: 0.0027s