Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 02:58:56.081 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34294 10 6452 1 2025-09-07 02:59:20.935 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 02:59:20.462 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 02:59:30.377 00:00:10.371 TCP 23.104.0.1:60892 -> 1.101.0.1:3000 11 1507 1 2025-09-07 02:59:56.293 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44582 10 6452 1 2025-09-07 02:56:24.731 00:05:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 03:00:30.791 00:00:10.318 TCP 23.104.0.1:43348 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:00:56.517 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48688 10 6452 1 2025-09-07 03:01:31.154 00:00:10.370 TCP 23.104.0.1:51400 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:01:56.690 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47194 10 6452 1 2025-09-07 02:58:24.738 00:05:00.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 03:02:31.563 00:00:10.363 TCP 23.104.0.1:58998 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:02:56.874 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45254 10 6452 1 2025-09-07 03:03:31.966 00:00:10.379 TCP 23.104.0.1:53902 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:03:57.108 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57568 10 6452 1 2025-09-07 03:04:20.888 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 03:04:20.949 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 03:04:32.404 00:00:10.369 TCP 23.104.0.1:36960 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:04:57.332 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52906 10 6452 1 2025-09-07 03:05:32.809 00:00:10.367 TCP 23.104.0.1:52768 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:05:57.550 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50722 10 6452 1 2025-09-07 03:02:24.734 00:05:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 03:06:33.216 00:00:10.363 TCP 23.104.0.1:45036 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:06:57.770 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56930 10 6452 1 2025-09-07 03:07:33.615 00:00:10.368 TCP 23.104.0.1:38500 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:07:58.006 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33748 10 6452 1 2025-09-07 03:04:24.738 00:05:00.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 03:08:34.023 00:00:10.758 TCP 23.104.0.1:54262 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:08:58.178 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35120 10 6452 1 2025-09-07 03:09:20.836 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 03:09:21.011 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 03:09:34.817 00:00:10.363 TCP 23.104.0.1:50992 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:09:58.412 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41950 10 6452 1 2025-09-07 03:10:35.221 00:00:10.324 TCP 23.104.0.1:39578 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:10:58.633 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40634 10 6452 1 2025-09-07 03:11:35.585 00:00:10.370 TCP 23.104.0.1:39300 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:11:58.857 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53366 10 6452 1 2025-09-07 03:08:24.735 00:05:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 03:12:35.991 00:00:10.366 TCP 23.104.0.1:50176 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:12:59.086 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42960 10 6452 1 2025-09-07 03:13:36.396 00:00:10.365 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:13:59.299 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41002 10 6452 1 2025-09-07 03:14:21.165 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 03:14:21.289 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 03:10:24.738 00:05:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 03:14:36.800 00:00:10.367 TCP 23.104.0.1:59672 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:14:59.474 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57048 10 6452 1 2025-09-07 03:15:37.207 00:00:10.376 TCP 23.104.0.1:34506 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:15:59.679 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54212 10 6452 1 2025-09-07 03:16:37.625 00:00:10.360 TCP 23.104.0.1:40946 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:16:59.906 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:52636 10 6452 1 2025-09-07 03:17:38.018 00:00:10.367 TCP 23.104.0.1:43406 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:18:00.106 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36048 10 6452 1 2025-09-07 03:14:24.735 00:05:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 03:18:38.423 00:00:10.365 TCP 23.104.0.1:40996 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:19:00.281 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44272 10 6452 1 2025-09-07 03:19:21.489 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 03:19:21.295 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 03:19:38.830 00:00:10.391 TCP 23.104.0.1:37038 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:20:00.492 00:00:10.124 TCP 1.101.0.1:3000 -> 22.102.0.1:53792 10 6452 1 2025-09-07 03:16:24.739 00:05:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 03:20:39.258 00:00:10.323 TCP 23.104.0.1:47332 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:21:00.657 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33066 10 6452 1 2025-09-07 03:21:39.615 00:00:10.371 TCP 23.104.0.1:46780 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:22:00.880 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44268 10 6452 1 2025-09-07 03:22:40.023 00:00:10.320 TCP 23.104.0.1:56166 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:23:01.105 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33062 10 6452 1 2025-09-07 03:23:40.384 00:00:10.365 TCP 23.104.0.1:42970 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:24:01.326 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34504 10 6452 1 2025-09-07 03:24:21.346 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 03:24:21.198 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 03:20:24.737 00:05:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 03:24:40.790 00:00:10.340 TCP 23.104.0.1:34080 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:25:01.544 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49792 10 6452 1 2025-09-07 03:25:41.170 00:00:10.323 TCP 23.104.0.1:50192 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:26:01.763 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38732 10 6452 1 2025-09-07 03:22:24.741 00:05:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 03:26:41.531 00:00:10.366 TCP 23.104.0.1:56712 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:27:01.976 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32890 10 6452 1 2025-09-07 03:27:41.936 00:00:10.343 TCP 23.104.0.1:38498 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:28:02.197 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52044 10 6452 1 2025-09-07 03:28:42.319 00:00:10.326 TCP 23.104.0.1:43774 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:29:02.417 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60706 10 6452 1 2025-09-07 03:29:21.448 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 03:29:21.357 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 03:29:42.681 00:00:10.331 TCP 23.104.0.1:55546 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:30:02.588 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50128 10 6452 1 2025-09-07 03:26:24.739 00:05:00.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 03:30:43.055 00:00:10.371 TCP 23.104.0.1:43934 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:31:02.765 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52392 10 6452 1 2025-09-07 03:31:43.463 00:00:10.323 TCP 23.104.0.1:47806 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:32:02.983 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41812 10 6452 1 2025-09-07 03:28:24.742 00:05:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 03:32:43.826 00:00:10.358 TCP 23.104.0.1:40518 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:33:03.214 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:54160 12 10367 1 2025-09-07 03:33:44.221 00:00:10.447 TCP 23.104.0.1:41056 -> 1.101.0.1:3000 15 1926 1 2025-09-07 03:34:03.464 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33202 10 6452 1 2025-09-07 03:34:21.453 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 03:34:21.665 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 03:34:44.709 00:00:10.553 TCP 23.104.0.1:56402 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:35:03.679 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45372 10 6452 1 2025-09-07 03:35:45.312 00:00:10.326 TCP 23.104.0.1:56622 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:36:03.894 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-09-07 03:32:24.741 00:05:00.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 03:36:45.673 00:00:10.362 TCP 23.104.0.1:57092 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:37:04.114 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37176 10 6452 1 2025-09-07 03:37:46.103 00:00:10.374 TCP 23.104.0.1:33920 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:38:04.328 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48118 10 6452 1 2025-09-07 03:34:24.743 00:05:00.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 03:38:46.519 00:00:10.362 TCP 23.104.0.1:35400 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:39:04.552 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48124 10 6452 1 2025-09-07 03:39:21.781 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 03:39:21.583 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 03:39:46.926 00:00:10.344 TCP 23.104.0.1:46590 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:40:04.721 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46684 10 6452 1 2025-09-07 03:40:47.310 00:00:10.364 TCP 23.104.0.1:54060 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:41:04.944 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36988 10 6452 1 2025-09-07 03:41:47.713 00:00:10.321 TCP 23.104.0.1:36162 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:42:05.171 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42610 10 6452 1 2025-09-07 03:38:24.742 00:05:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 03:42:48.102 00:00:10.360 TCP 23.104.0.1:56116 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:43:05.394 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35256 10 6452 1 2025-09-07 03:43:48.498 00:00:10.327 TCP 23.104.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:44:05.614 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58434 10 6452 1 2025-09-07 03:44:21.707 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 03:44:21.879 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 03:40:24.743 00:05:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 03:44:48.864 00:00:10.335 TCP 23.104.0.1:38762 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:45:05.832 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59708 10 6452 1 2025-09-07 03:45:49.235 00:00:10.327 TCP 23.104.0.1:55102 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:46:06.059 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40542 10 6452 1 2025-09-07 03:46:49.597 00:00:10.364 TCP 23.104.0.1:47314 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:47:06.234 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:60688 10 6452 1 2025-09-07 03:47:50.002 00:00:10.319 TCP 23.104.0.1:60952 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:48:06.434 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:49992 12 10367 1 2025-09-07 03:44:24.741 00:05:00.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 03:48:50.359 00:00:10.438 TCP 23.104.0.1:42162 -> 1.101.0.1:3000 15 1926 1 2025-09-07 03:49:06.673 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38586 10 6452 1 2025-09-07 03:49:21.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 03:49:21.713 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 03:49:50.831 00:00:10.391 TCP 23.104.0.1:54014 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:50:06.887 00:00:10.617 TCP 1.101.0.1:3000 -> 22.102.0.1:59416 10 6452 1 2025-09-07 03:46:24.744 00:05:00.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 03:50:51.260 00:00:10.371 TCP 23.104.0.1:53012 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:51:07.544 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50470 10 6452 1 2025-09-07 03:51:51.674 00:00:10.368 TCP 23.104.0.1:33600 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:52:07.761 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48992 10 6452 1 2025-09-07 03:52:52.102 00:00:10.340 TCP 23.104.0.1:46810 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:53:08.015 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53028 10 6452 1 2025-09-07 03:53:52.477 00:00:10.362 TCP 23.104.0.1:49262 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:54:08.234 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40172 10 6452 1 2025-09-07 03:54:21.917 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 03:54:21.729 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 03:50:24.743 00:05:00.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 03:54:52.876 00:00:10.362 TCP 23.104.0.1:58638 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:55:08.444 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56954 10 6452 1 2025-09-07 03:55:53.279 00:00:10.324 TCP 23.104.0.1:46904 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:56:08.660 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56736 10 6452 1 2025-09-07 03:52:24.746 00:05:00.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 03:56:53.645 00:00:10.363 TCP 23.104.0.1:54144 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:57:08.876 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41024 10 6452 1 2025-09-07 03:57:54.050 00:00:10.328 TCP 23.104.0.1:57428 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:58:09.111 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36124 10 6452 1 Summary: total flows: 163, total bytes: 505509, total packets: 1573, avg bps: 1088, avg pps: 0, avg bpp: 321 Time window: 2025-09-07 02:56:24 - 2025-09-07 03:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0029s flows/second: 56501.8 Runtime: 0.0029s