Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 03:58:50.102 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42170 10 6452 1 2025-09-08 03:59:34.600 00:00:10.324 TCP 23.104.0.1:46368 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:59:50.938 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:59:50.892 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 03:59:50.269 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36580 10 6452 1 2025-09-08 04:00:34.963 00:00:10.397 TCP 23.104.0.1:55826 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:00:50.484 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51288 10 6452 1 2025-09-08 04:01:35.397 00:00:10.386 TCP 23.104.0.1:43568 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:01:50.694 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53350 10 6452 1 2025-09-08 04:02:35.822 00:00:10.632 TCP 23.104.0.1:37806 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:02:50.911 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33958 10 6452 1 2025-09-08 03:59:25.244 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 04:03:36.498 00:00:10.401 TCP 23.104.0.1:50818 -> 1.101.0.1:3000 15 1926 1 2025-09-08 04:03:51.099 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35514 12 10367 1 2025-09-08 04:00:25.244 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 04:04:50.953 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 04:04:36.937 00:00:10.335 TCP 23.104.0.1:55796 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:04:50.682 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 04:04:51.337 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48346 10 6452 1 2025-09-08 04:05:37.311 00:00:10.360 TCP 23.104.0.1:41948 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:05:51.551 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42328 10 6452 1 2025-09-08 04:06:37.708 00:00:10.368 TCP 23.104.0.1:51926 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:06:51.764 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53346 10 6452 1 2025-09-08 04:07:38.112 00:00:10.368 TCP 23.104.0.1:59494 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:07:51.977 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:46196 10 6452 1 2025-09-08 04:08:38.522 00:00:10.367 TCP 23.104.0.1:60474 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:08:52.221 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33458 10 6452 1 2025-09-08 04:05:25.248 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 04:09:38.926 00:00:10.348 TCP 23.104.0.1:50234 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:09:51.180 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 04:09:51.189 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 04:09:52.437 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44758 10 6452 1 2025-09-08 04:06:25.244 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 04:10:39.312 00:00:10.367 TCP 23.104.0.1:45870 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:10:52.660 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46344 10 6452 1 2025-09-08 04:11:39.719 00:00:10.339 TCP 23.104.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:11:52.878 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58420 10 6452 1 2025-09-08 04:12:40.102 00:00:10.366 TCP 23.104.0.1:45668 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:12:53.086 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38114 10 6452 1 2025-09-08 04:13:40.508 00:00:10.367 TCP 23.104.0.1:37528 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:13:53.278 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43154 10 6452 1 2025-09-08 04:14:51.162 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 04:14:40.911 00:00:10.330 TCP 23.104.0.1:34498 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:14:51.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 04:14:53.449 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:41708 10 6452 1 2025-09-08 04:11:25.248 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 04:15:41.280 00:00:10.329 TCP 23.104.0.1:60642 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:15:53.655 00:00:10.677 TCP 1.101.0.1:3000 -> 22.102.0.1:35348 10 6452 1 2025-09-08 04:12:25.246 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 04:16:41.644 00:00:10.323 TCP 23.104.0.1:50994 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:16:54.372 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36852 10 6452 1 2025-09-08 04:17:42.009 00:00:10.366 TCP 23.104.0.1:37984 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:17:54.580 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51900 10 6452 1 2025-09-08 04:18:42.411 00:00:10.882 TCP 23.104.0.1:42338 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:18:54.795 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46302 10 6452 1 2025-09-08 04:19:51.165 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 04:19:51.191 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 04:19:43.336 00:00:10.367 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:19:55.010 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57252 10 6452 1 2025-09-08 04:20:43.763 00:00:10.371 TCP 23.104.0.1:43726 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:20:55.220 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47610 10 6452 1 2025-09-08 04:17:25.250 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 04:21:44.176 00:00:10.364 TCP 23.104.0.1:57980 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:21:55.429 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42718 10 6452 1 2025-09-08 04:18:25.247 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 04:22:44.579 00:00:10.362 TCP 23.104.0.1:60698 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:22:55.598 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:42512 10 6452 1 2025-09-08 04:23:44.982 00:00:10.364 TCP 23.104.0.1:59908 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:23:55.805 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46382 10 6452 1 2025-09-08 04:24:51.422 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 04:24:51.115 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 04:24:45.381 00:00:10.369 TCP 23.104.0.1:38378 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:24:56.030 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51092 10 6452 1 2025-09-08 04:25:45.787 00:00:10.369 TCP 23.104.0.1:47600 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:25:56.243 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:34938 10 6452 1 2025-09-08 04:26:46.197 00:00:10.368 TCP 23.104.0.1:42104 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:26:56.501 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44704 10 6452 1 2025-09-08 04:23:25.250 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 04:27:46.607 00:00:10.399 TCP 23.104.0.1:59984 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:27:56.677 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51258 10 6452 1 2025-09-08 04:24:25.247 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 04:28:47.058 00:00:10.361 TCP 23.104.0.1:33678 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:28:56.892 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49718 10 6452 1 2025-09-08 04:29:51.595 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 04:29:51.584 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 04:29:47.461 00:00:10.316 TCP 23.104.0.1:52164 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:29:57.108 00:00:13.096 TCP 1.101.0.1:3000 -> 22.102.0.1:53526 10 6452 1 2025-09-08 04:30:47.819 00:00:10.364 TCP 23.104.0.1:43118 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:31:00.241 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47522 10 6452 1 2025-09-08 04:31:48.220 00:00:10.375 TCP 23.104.0.1:51070 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:32:00.455 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48002 10 6452 1 2025-09-08 04:32:48.639 00:00:10.884 TCP 23.104.0.1:33402 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:33:00.679 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57432 10 6452 1 2025-09-08 04:29:25.251 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 04:33:49.564 00:00:10.449 TCP 23.104.0.1:32926 -> 1.101.0.1:3000 15 1926 1 2025-09-08 04:34:00.909 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37908 12 10367 1 2025-09-08 04:30:25.250 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 04:34:51.685 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 04:34:51.652 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 04:34:50.054 00:00:10.365 TCP 23.104.0.1:38058 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:35:01.156 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39490 10 6452 1 2025-09-08 04:35:50.455 00:00:10.323 TCP 23.104.0.1:58992 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:36:01.326 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49188 10 6452 1 2025-09-08 04:36:50.814 00:00:10.362 TCP 23.104.0.1:51704 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:37:01.538 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45290 10 6452 1 2025-09-08 04:37:51.219 00:00:10.366 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:38:01.774 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47520 10 6452 1 2025-09-08 04:38:51.618 00:00:10.368 TCP 23.104.0.1:37882 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:39:01.983 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49774 10 6452 1 2025-09-08 04:35:25.252 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 04:39:51.796 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 04:39:51.774 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 04:39:52.025 00:00:10.369 TCP 23.104.0.1:45102 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:40:02.219 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39082 10 6452 1 2025-09-08 04:36:25.251 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 04:40:52.437 00:00:10.364 TCP 23.104.0.1:50830 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:41:02.441 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51938 10 6452 1 2025-09-08 04:41:52.838 00:00:10.392 TCP 23.104.0.1:38596 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:42:02.661 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47162 10 6452 1 2025-09-08 04:42:53.265 00:00:10.368 TCP 23.104.0.1:58076 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:43:02.877 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:43280 10 6452 1 2025-09-08 04:43:53.673 00:00:10.381 TCP 23.104.0.1:36226 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:44:03.119 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33340 10 6452 1 2025-09-08 04:44:51.669 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 04:44:51.642 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 04:44:54.105 00:00:10.325 TCP 23.104.0.1:48658 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:45:03.348 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50442 10 6452 1 2025-09-08 04:41:25.252 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 04:45:54.466 00:00:10.366 TCP 23.104.0.1:37556 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:46:03.577 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42420 10 6452 1 2025-09-08 04:42:25.251 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 04:46:54.870 00:00:10.366 TCP 23.104.0.1:49700 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:47:03.797 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:54758 10 6452 1 2025-09-08 04:47:55.277 00:00:10.318 TCP 23.104.0.1:47536 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:48:03.977 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34696 10 6452 1 2025-09-08 04:48:55.633 00:00:10.357 TCP 23.104.0.1:34754 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:49:04.208 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53762 10 6452 1 2025-09-08 04:49:51.864 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 04:49:51.619 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 04:49:56.030 00:00:10.415 TCP 23.104.0.1:45248 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:50:04.375 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41234 10 6452 1 2025-09-08 04:50:56.484 00:00:10.363 TCP 23.104.0.1:51624 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:51:04.587 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50098 10 6452 1 2025-09-08 04:47:25.254 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 04:51:56.885 00:00:10.346 TCP 23.104.0.1:47526 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:52:04.807 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36318 10 6452 1 2025-09-08 04:48:25.251 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 04:52:57.273 00:00:10.363 TCP 23.104.0.1:56308 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:53:05.028 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36150 10 6452 1 2025-09-08 04:53:57.675 00:00:10.365 TCP 23.104.0.1:43316 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:54:05.249 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43736 10 6452 1 2025-09-08 04:54:51.912 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 04:54:51.997 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 04:54:58.106 00:00:10.360 TCP 23.104.0.1:37574 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:55:05.462 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54420 10 6452 1 2025-09-08 04:55:58.505 00:00:10.368 TCP 23.104.0.1:49374 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:56:05.674 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60044 10 6452 1 2025-09-08 04:56:58.918 00:00:10.385 TCP 23.104.0.1:45510 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:57:05.884 00:00:10.553 TCP 1.101.0.1:3000 -> 22.102.0.1:41272 10 6452 1 2025-09-08 04:53:25.254 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 04:57:59.343 00:00:10.333 TCP 23.104.0.1:53588 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:58:06.472 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38318 10 6452 1 2025-09-08 04:54:25.252 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 163, total bytes: 505509, total packets: 1573, avg bps: 1112, avg pps: 0, avg bpp: 321 Time window: 2025-09-08 03:58:50 - 2025-09-08 04:59:26 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0045s User: 0.0009s Wall: 0.0028s flows/second: 59105.3 Runtime: 0.0028s