Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 15:59:00.968 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:40556 12 6556 1 2025-09-07 15:59:36.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 15:59:21.863 00:00:10.806 TCP 23.104.0.1:42386 -> 1.101.0.1:3000 11 1507 1 2025-09-07 15:59:36.306 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:00:01.207 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52750 10 6452 1 2025-09-07 15:56:24.988 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 16:00:22.705 00:00:10.364 TCP 23.104.0.1:50148 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:01:01.415 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59026 10 6452 1 2025-09-07 16:01:23.107 00:00:10.366 TCP 23.104.0.1:37796 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:02:01.588 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51358 10 6452 1 2025-09-07 15:58:24.992 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 16:02:23.515 00:00:10.330 TCP 23.104.0.1:47820 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:03:01.822 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:56890 10 6452 1 2025-09-07 16:03:23.881 00:00:10.398 TCP 23.104.0.1:40050 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:04:02.009 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34986 10 6452 1 2025-09-07 16:04:36.551 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:04:24.331 00:00:10.326 TCP 23.104.0.1:49988 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:04:36.646 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 16:05:02.221 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55624 10 6452 1 2025-09-07 16:05:24.700 00:00:10.367 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:06:02.430 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43566 10 6452 1 2025-09-07 16:02:24.992 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 16:06:25.105 00:00:10.365 TCP 23.104.0.1:44038 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:07:02.647 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46942 10 6452 1 2025-09-07 16:07:25.507 00:00:10.323 TCP 23.104.0.1:37458 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:08:02.879 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52570 10 6452 1 2025-09-07 16:04:24.993 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 16:08:25.865 00:00:10.366 TCP 23.104.0.1:46412 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:09:03.099 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57312 10 6452 1 2025-09-07 16:09:36.917 00:00:00.015 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 16:09:36.750 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:09:26.273 00:00:10.323 TCP 23.104.0.1:51982 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:10:03.314 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35422 10 6452 1 2025-09-07 16:10:26.632 00:00:10.359 TCP 23.104.0.1:33972 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:11:03.531 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46196 10 6452 1 2025-09-07 16:11:27.031 00:00:10.361 TCP 23.104.0.1:39986 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:12:03.751 00:00:10.580 TCP 1.101.0.1:3000 -> 22.102.0.1:56982 10 6452 1 2025-09-07 16:08:24.991 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 16:12:27.443 00:00:10.325 TCP 23.104.0.1:48432 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:13:04.372 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45212 10 6452 1 2025-09-07 16:13:27.805 00:00:10.914 TCP 23.104.0.1:50168 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:14:04.610 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41510 10 6452 1 2025-09-07 16:10:24.995 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 16:14:36.713 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 16:14:36.848 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:14:28.758 00:00:10.388 TCP 23.104.0.1:58382 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:15:04.820 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35714 10 6452 1 2025-09-07 16:15:29.185 00:00:10.334 TCP 23.104.0.1:45412 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:16:04.993 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:42872 10 6452 1 2025-09-07 16:16:29.559 00:00:10.348 TCP 23.104.0.1:40550 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:17:05.245 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42434 10 6452 1 2025-09-07 16:17:29.946 00:00:10.366 TCP 23.104.0.1:57444 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:18:05.422 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:45862 12 10367 1 2025-09-07 16:14:24.992 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 16:18:30.352 00:00:10.392 TCP 23.104.0.1:51294 -> 1.101.0.1:3000 15 1926 1 2025-09-07 16:19:05.665 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45544 10 6452 1 2025-09-07 16:19:36.917 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 16:19:36.873 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:19:30.781 00:00:10.366 TCP 23.104.0.1:41720 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:20:05.880 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52036 10 6452 1 2025-09-07 16:16:24.995 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 16:20:31.185 00:00:10.363 TCP 23.104.0.1:40884 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:21:06.108 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36272 10 6452 1 2025-09-07 16:21:31.584 00:00:10.367 TCP 23.104.0.1:42252 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:22:06.332 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40290 10 6452 1 2025-09-07 16:22:31.988 00:00:10.370 TCP 23.104.0.1:55982 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:23:06.545 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57968 10 6452 1 2025-09-07 16:23:32.394 00:00:10.323 TCP 23.104.0.1:44780 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:24:06.719 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49876 10 6452 1 2025-09-07 16:20:24.993 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 16:24:36.955 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 16:24:36.933 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:24:32.756 00:00:10.374 TCP 23.104.0.1:54000 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:25:06.935 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39064 10 6452 1 2025-09-07 16:25:33.172 00:00:10.363 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:26:07.163 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34078 10 6452 1 2025-09-07 16:22:24.998 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 16:26:33.574 00:00:10.329 TCP 23.104.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:27:07.376 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56138 10 6452 1 2025-09-07 16:27:33.936 00:00:10.374 TCP 23.104.0.1:41192 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:28:07.593 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32812 10 6452 1 2025-09-07 16:28:34.350 00:00:10.364 TCP 23.104.0.1:38746 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:29:07.800 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33582 10 6452 1 2025-09-07 16:29:36.876 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 16:29:36.706 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:29:34.756 00:00:10.383 TCP 23.104.0.1:49880 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:30:08.026 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49998 10 6452 1 2025-09-07 16:26:24.997 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 16:30:35.182 00:00:10.359 TCP 23.104.0.1:54214 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:31:08.240 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55102 10 6452 1 2025-09-07 16:31:35.579 00:00:10.369 TCP 23.104.0.1:38992 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:32:08.417 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35568 10 6452 1 2025-09-07 16:32:35.988 00:00:10.362 TCP 23.104.0.1:36870 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:33:08.627 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-09-07 16:28:25.000 00:06:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 16:33:36.389 00:00:10.363 TCP 23.104.0.1:47826 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:34:08.841 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48772 10 6452 1 2025-09-07 16:34:37.422 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 16:34:37.154 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:34:36.790 00:00:10.324 TCP 23.104.0.1:40784 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:35:09.083 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55664 10 6452 1 2025-09-07 16:35:37.148 00:00:10.358 TCP 23.104.0.1:58550 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:36:09.302 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48290 10 6452 1 2025-09-07 16:32:24.997 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 16:36:37.546 00:00:10.363 TCP 23.104.0.1:44040 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:37:09.523 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43970 10 6452 1 2025-09-07 16:37:37.949 00:00:10.370 TCP 23.104.0.1:57468 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:38:09.698 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45054 10 6452 1 2025-09-07 16:38:38.358 00:00:10.316 TCP 23.104.0.1:57710 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:39:09.913 00:00:10.330 TCP 1.101.0.1:3000 -> 22.102.0.1:33376 10 6452 1 2025-09-07 16:39:37.384 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 16:39:37.286 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:39:38.711 00:00:10.365 TCP 23.104.0.1:39226 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:40:10.283 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42390 10 6452 1 2025-09-07 16:35:25.003 00:06:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 16:40:39.120 00:00:10.373 TCP 23.104.0.1:48178 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:41:10.491 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38820 10 6452 1 2025-09-07 16:41:39.531 00:00:10.366 TCP 23.104.0.1:36092 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:42:10.726 00:00:10.775 TCP 1.101.0.1:3000 -> 22.102.0.1:58736 10 6452 1 2025-09-07 16:42:39.935 00:00:10.335 TCP 23.104.0.1:58334 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:43:11.540 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51708 10 6452 1 2025-09-07 16:38:25.023 00:06:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 16:43:40.310 00:00:10.365 TCP 23.104.0.1:51036 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:44:11.723 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60078 10 6452 1 2025-09-07 16:44:37.704 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 16:44:37.008 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:44:40.709 00:00:10.381 TCP 23.104.0.1:49686 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:45:11.932 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60788 10 6452 1 2025-09-07 16:45:41.128 00:00:10.325 TCP 23.104.0.1:48366 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:46:12.175 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58128 10 6452 1 2025-09-07 16:46:41.489 00:00:10.365 TCP 23.104.0.1:38062 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:47:12.388 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55522 10 6452 1 2025-09-07 16:42:25.019 00:06:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 16:47:41.901 00:00:10.337 TCP 23.104.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:48:12.612 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45540 10 6452 1 2025-09-07 16:48:42.273 00:00:10.331 TCP 23.104.0.1:45788 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:49:12.839 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46940 10 6452 1 2025-09-07 16:49:37.588 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:49:37.448 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 16:49:42.644 00:00:10.364 TCP 23.104.0.1:40220 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:50:13.086 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35438 10 6452 1 2025-09-07 16:45:25.034 00:06:00.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 16:50:43.051 00:00:10.320 TCP 23.104.0.1:36104 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:51:13.306 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47156 10 6452 1 2025-09-07 16:51:43.412 00:00:10.367 TCP 23.104.0.1:38448 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:52:13.484 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 10 6452 1 2025-09-07 16:52:43.816 00:00:10.367 TCP 23.104.0.1:60814 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:53:13.658 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44544 10 6452 1 2025-09-07 16:53:44.221 00:00:10.322 TCP 23.104.0.1:37382 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:54:13.872 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41430 10 6452 1 2025-09-07 16:49:25.039 00:06:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 16:54:37.489 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:54:37.433 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 16:54:44.583 00:00:10.365 TCP 23.104.0.1:41362 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:55:14.105 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59816 10 6452 1 2025-09-07 16:55:44.983 00:00:10.327 TCP 23.104.0.1:53728 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:56:14.326 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58280 10 6452 1 2025-09-07 16:56:45.349 00:00:10.365 TCP 23.104.0.1:57098 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:57:14.551 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54284 10 6452 1 2025-09-07 16:52:25.038 00:06:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 16:57:45.750 00:00:10.393 TCP 23.104.0.1:53770 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:58:14.768 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53338 10 6452 1 Summary: total flows: 162, total bytes: 501402, total packets: 1571, avg bps: 1078, avg pps: 0, avg bpp: 319 Time window: 2025-09-07 15:56:24 - 2025-09-07 16:58:25 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0030s User: 0.0020s Wall: 0.0021s flows/second: 76380.1 Runtime: 0.0021s