Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-28 13:58:56.942 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33830 10 6452 1 2025-09-28 13:59:25.307 00:00:10.365 TCP 23.104.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:59:47.660 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 13:59:47.759 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 13:59:57.174 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46146 10 6452 1 2025-09-28 14:00:25.711 00:00:10.373 TCP 23.104.0.1:40654 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:56:34.798 00:05:01.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 14:00:57.348 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46134 10 6452 1 2025-09-28 14:01:26.127 00:00:10.369 TCP 23.104.0.1:55464 -> 1.101.0.1:3000 11 1507 1 2025-09-28 13:57:34.800 00:05:01.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 14:01:57.560 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56984 10 6452 1 2025-09-28 14:02:26.533 00:00:10.329 TCP 23.104.0.1:57202 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:02:57.774 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40902 10 6452 1 2025-09-28 14:03:26.894 00:00:10.384 TCP 23.104.0.1:51680 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:03:57.986 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34226 10 6452 1 2025-09-28 14:04:27.310 00:00:10.373 TCP 23.104.0.1:40164 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:04:47.846 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 14:04:48.209 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 14:04:58.213 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40852 10 6452 1 2025-09-28 14:05:27.718 00:00:10.376 TCP 23.104.0.1:53964 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:05:58.426 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 10 6452 1 2025-09-28 14:02:34.801 00:05:01.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 14:06:28.130 00:00:10.323 TCP 23.104.0.1:47382 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:06:58.638 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33538 10 6452 1 2025-09-28 14:03:34.804 00:05:01.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 14:07:28.494 00:00:10.367 TCP 23.104.0.1:40180 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:07:58.849 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41242 10 6452 1 2025-09-28 14:08:28.899 00:00:10.369 TCP 23.104.0.1:55736 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:08:59.085 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48992 10 6452 1 2025-09-28 14:09:29.306 00:00:10.326 TCP 23.104.0.1:50570 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:09:47.975 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 14:09:47.939 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 14:09:59.259 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59946 10 6452 1 2025-09-28 14:10:29.669 00:00:10.333 TCP 23.104.0.1:34704 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:10:59.472 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:34104 10 6452 1 2025-09-28 14:11:30.034 00:00:10.363 TCP 23.104.0.1:43160 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:11:59.659 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35644 10 6452 1 2025-09-28 14:08:34.802 00:05:01.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 14:12:30.436 00:00:10.363 TCP 23.104.0.1:36780 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:12:59.874 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36650 10 6452 1 2025-09-28 14:13:30.839 00:00:10.356 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:09:34.806 00:05:01.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 14:14:00.109 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43484 10 6452 1 2025-09-28 14:14:31.243 00:00:10.365 TCP 23.104.0.1:39204 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:14:48.028 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 14:14:48.092 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 14:15:00.277 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39206 10 6452 1 2025-09-28 14:15:31.654 00:00:10.322 TCP 23.104.0.1:54590 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:16:00.508 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:56216 10 6452 1 2025-09-28 14:16:32.015 00:00:10.370 TCP 23.104.0.1:33080 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:17:00.718 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44326 10 6452 1 2025-09-28 14:17:32.429 00:00:10.365 TCP 23.104.0.1:54074 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:18:00.889 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42568 10 6452 1 2025-09-28 14:14:34.805 00:05:01.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 14:18:32.834 00:00:10.344 TCP 23.104.0.1:34730 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:19:01.083 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51800 10 6452 1 2025-09-28 14:15:34.808 00:05:01.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 14:19:33.220 00:00:10.323 TCP 23.104.0.1:48194 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:19:48.022 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 14:19:48.157 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 14:20:01.299 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42832 10 6452 1 2025-09-28 14:20:33.588 00:00:10.365 TCP 23.104.0.1:47836 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:21:01.514 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44036 10 6452 1 2025-09-28 14:21:33.989 00:00:10.370 TCP 23.104.0.1:48340 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:22:01.742 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45480 10 6452 1 2025-09-28 14:22:34.392 00:00:10.366 TCP 23.104.0.1:47540 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:23:01.958 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:51624 12 6556 1 2025-09-28 14:23:34.796 00:00:10.367 TCP 23.104.0.1:49626 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:24:02.195 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47430 10 6452 1 2025-09-28 14:20:34.806 00:05:01.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 14:24:35.200 00:00:10.364 TCP 23.104.0.1:55708 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:24:48.418 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 14:24:48.223 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 14:25:02.415 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60626 10 6452 1 2025-09-28 14:21:34.809 00:05:01.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 14:25:35.604 00:00:10.359 TCP 23.104.0.1:44752 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:26:02.627 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46912 10 6452 1 2025-09-28 14:26:36.006 00:00:10.322 TCP 23.104.0.1:48728 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:27:02.839 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:49310 12 10367 1 2025-09-28 14:27:36.365 00:00:10.397 TCP 23.104.0.1:42878 -> 1.101.0.1:3000 15 1926 1 2025-09-28 14:28:03.084 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35282 10 6452 1 2025-09-28 14:28:36.803 00:00:10.366 TCP 23.104.0.1:54714 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:29:03.305 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49988 10 6452 1 2025-09-28 14:29:48.475 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 14:29:37.204 00:00:10.331 TCP 23.104.0.1:53280 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:29:48.201 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 14:30:03.524 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52038 10 6452 1 2025-09-28 14:26:34.806 00:05:01.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 14:30:37.571 00:00:10.366 TCP 23.104.0.1:34522 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:31:03.748 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46356 10 6452 1 2025-09-28 14:27:34.811 00:05:01.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 14:31:37.975 00:00:10.371 TCP 23.104.0.1:44434 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:32:03.961 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36206 10 6452 1 2025-09-28 14:32:38.380 00:00:10.372 TCP 23.104.0.1:35700 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:33:04.197 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33444 10 6452 1 2025-09-28 14:33:38.791 00:00:10.949 TCP 23.104.0.1:50624 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:34:04.407 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51448 10 6452 1 2025-09-28 14:34:39.778 00:00:10.365 TCP 23.104.0.1:52332 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:34:48.558 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 14:34:48.417 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 14:35:04.635 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51138 10 6452 1 2025-09-28 14:35:40.182 00:00:10.365 TCP 23.104.0.1:58054 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:36:04.848 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58068 10 6452 1 2025-09-28 14:32:34.809 00:05:01.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 14:36:40.585 00:00:10.368 TCP 23.104.0.1:41326 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:37:05.082 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38944 10 6452 1 2025-09-28 14:33:34.813 00:05:01.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 14:37:40.989 00:00:10.327 TCP 23.104.0.1:51248 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:38:05.307 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35044 11 6492 1 2025-09-28 14:38:41.354 00:00:10.360 TCP 23.104.0.1:44360 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:39:05.528 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46850 10 6452 1 2025-09-28 14:39:48.507 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 14:39:48.664 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 14:39:41.755 00:00:10.385 TCP 23.104.0.1:40718 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:40:05.760 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42758 10 6452 1 2025-09-28 14:40:42.173 00:00:10.327 TCP 23.104.0.1:32986 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:41:05.978 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:50158 10 6452 1 2025-09-28 14:41:42.537 00:00:10.321 TCP 23.104.0.1:40314 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:42:06.212 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48404 10 6452 1 2025-09-28 14:38:34.815 00:05:01.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 14:42:42.901 00:00:10.328 TCP 23.104.0.1:52148 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:43:06.424 00:00:10.367 TCP 1.101.0.1:3000 -> 22.102.0.1:58646 10 6452 1 2025-09-28 14:39:34.817 00:05:01.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 14:43:43.265 00:00:10.369 TCP 23.104.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:44:06.827 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41384 10 6452 1 2025-09-28 14:44:48.737 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 14:44:48.513 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 14:44:43.672 00:00:10.754 TCP 23.104.0.1:35174 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:45:06.990 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49322 10 6452 1 2025-09-28 14:45:44.464 00:00:10.366 TCP 23.104.0.1:47404 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:46:07.214 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52514 10 6452 1 2025-09-28 14:46:44.872 00:00:10.364 TCP 23.104.0.1:59710 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:47:07.387 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57882 10 6452 1 2025-09-28 14:47:45.281 00:00:10.320 TCP 23.104.0.1:39138 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:48:07.613 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48402 10 6452 1 2025-09-28 14:44:34.815 00:05:01.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 14:48:45.641 00:00:10.363 TCP 23.104.0.1:51716 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:49:07.834 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-09-28 14:45:34.819 00:05:01.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 14:49:48.695 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 14:49:48.815 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 14:49:46.042 00:00:10.326 TCP 23.104.0.1:41192 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:50:08.074 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50600 10 6452 1 2025-09-28 14:50:46.409 00:00:10.328 TCP 23.104.0.1:42138 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:51:08.284 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48350 10 6452 1 2025-09-28 14:51:46.778 00:00:10.366 TCP 23.104.0.1:41092 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:52:08.494 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37408 10 6452 1 2025-09-28 14:52:47.180 00:00:10.361 TCP 23.104.0.1:58828 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:53:08.716 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42446 10 6452 1 2025-09-28 14:53:47.579 00:00:10.366 TCP 23.104.0.1:55350 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:54:08.955 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44266 10 6452 1 2025-09-28 14:50:34.818 00:05:01.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 14:54:49.009 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 14:54:48.919 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 14:54:47.984 00:00:10.381 TCP 23.104.0.1:57718 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:55:09.199 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:35922 10 6452 1 2025-09-28 14:51:34.821 00:05:01.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 14:55:48.399 00:00:10.374 TCP 23.104.0.1:46876 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:56:09.385 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55740 10 6452 1 2025-09-28 14:56:48.813 00:00:10.369 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-09-28 14:57:09.591 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:50922 12 10365 1 2025-09-28 14:57:49.218 00:00:20.501 TCP 23.104.0.1:36732 -> 1.101.0.1:3000 15 1926 1 2025-09-28 14:58:09.834 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47874 10 6452 1 Summary: total flows: 163, total bytes: 505651, total packets: 1576, avg bps: 1091, avg pps: 0, avg bpp: 320 Time window: 2025-09-28 13:56:34 - 2025-09-28 14:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0056s User: 0.0000s Wall: 0.0026s flows/second: 63396.8 Runtime: 0.0026s