Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 02:58:49.105 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50140 10 6452 1 2025-09-10 02:59:26.973 00:00:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 1 71 1 2025-09-10 02:59:20.593 00:00:10.323 TCP 23.104.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:59:49.311 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59620 10 6452 1 2025-09-10 02:55:26.175 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-09-10 03:00:20.956 00:00:10.362 TCP 23.104.0.1:57510 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:00:54.859 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 03:00:54.810 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 03:00:49.527 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60402 10 6452 1 2025-09-10 03:01:26.976 00:00:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 1 52 1 2025-09-10 03:01:21.359 00:00:10.365 TCP 23.104.0.1:38652 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:01:49.738 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-09-10 03:02:21.760 00:00:10.383 TCP 23.104.0.1:57122 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:02:49.951 00:00:10.531 TCP 1.101.0.1:3000 -> 22.102.0.1:46526 10 6452 1 2025-09-10 03:03:22.181 00:00:10.326 TCP 23.104.0.1:35000 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:03:50.522 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60958 10 6452 1 2025-09-10 03:00:26.179 00:04:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 03:04:22.552 00:00:10.384 TCP 23.104.0.1:43312 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:04:50.735 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43286 10 6452 1 2025-09-10 03:05:22.951 00:00:10.374 TCP 23.104.0.1:33964 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:05:54.694 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 03:05:54.851 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 03:05:50.947 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49112 10 6452 1 2025-09-10 03:02:26.177 00:04:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 03:06:23.361 00:00:10.364 TCP 23.104.0.1:46250 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:06:51.177 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39834 10 6452 1 2025-09-10 03:07:23.759 00:00:10.388 TCP 23.104.0.1:57172 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:07:51.389 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43298 10 6452 1 2025-09-10 03:08:24.183 00:00:10.323 TCP 23.104.0.1:53282 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:08:51.567 00:00:10.557 TCP 1.101.0.1:3000 -> 22.102.0.1:52566 10 6452 1 2025-09-10 03:05:26.181 00:04:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 03:09:24.545 00:00:10.324 TCP 23.104.0.1:39702 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:09:52.164 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53448 10 6452 1 2025-09-10 03:10:24.910 00:00:10.329 TCP 23.104.0.1:44184 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:10:54.909 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 03:10:55.095 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 03:10:52.375 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38270 10 6452 1 2025-09-10 03:07:26.179 00:04:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 03:11:25.274 00:00:10.366 TCP 23.104.0.1:52754 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:11:52.593 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33012 10 6452 1 2025-09-10 03:12:25.686 00:00:10.329 TCP 23.104.0.1:40638 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:12:52.836 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58020 10 6452 1 2025-09-10 03:13:26.058 00:00:10.439 TCP 23.104.0.1:51456 -> 1.101.0.1:3000 15 1926 1 2025-09-10 03:13:53.077 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:59828 12 10365 1 2025-09-10 03:10:26.182 00:04:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 03:14:26.536 00:00:10.875 TCP 23.104.0.1:53622 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:14:53.316 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:51012 10 6452 1 2025-09-10 03:15:27.467 00:00:10.365 TCP 23.104.0.1:48776 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:15:55.069 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 03:15:55.388 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 03:15:53.559 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46516 10 6452 1 2025-09-10 03:12:26.178 00:04:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 03:16:27.870 00:00:10.365 TCP 23.104.0.1:44858 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:16:53.781 00:00:10.340 TCP 1.101.0.1:3000 -> 22.102.0.1:42510 10 6452 1 2025-09-10 03:17:28.274 00:00:10.325 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:17:54.161 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41240 10 6452 1 2025-09-10 03:18:28.635 00:00:10.330 TCP 23.104.0.1:37024 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:18:54.373 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48556 10 6452 1 2025-09-10 03:15:26.181 00:04:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 03:19:29.020 00:00:10.368 TCP 23.104.0.1:48038 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:19:54.587 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:48812 10 6452 1 2025-09-10 03:20:29.431 00:00:10.366 TCP 23.104.0.1:46214 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:20:55.291 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 03:20:55.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 03:20:54.858 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47378 10 6452 1 2025-09-10 03:17:26.180 00:04:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 03:21:29.835 00:00:10.395 TCP 23.104.0.1:43552 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:21:55.089 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33590 10 6452 1 2025-09-10 03:22:30.268 00:00:10.363 TCP 23.104.0.1:51548 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:22:55.303 00:00:10.435 TCP 1.101.0.1:3000 -> 22.102.0.1:38610 10 6452 1 2025-09-10 03:23:30.665 00:00:10.365 TCP 23.104.0.1:44266 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:23:55.780 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49436 10 6452 1 2025-09-10 03:20:26.182 00:04:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 03:24:31.092 00:00:10.397 TCP 23.104.0.1:60266 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:24:55.994 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39398 10 6452 1 2025-09-10 03:25:31.523 00:00:10.366 TCP 23.104.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:25:55.300 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 03:25:55.181 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 03:25:56.214 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46030 10 6452 1 2025-09-10 03:22:26.181 00:04:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 03:26:31.925 00:00:10.387 TCP 23.104.0.1:42276 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:26:56.428 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40928 10 6452 1 2025-09-10 03:27:32.355 00:00:10.391 TCP 23.104.0.1:33050 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:27:56.603 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46422 10 6452 1 2025-09-10 03:28:32.760 00:00:10.382 TCP 23.104.0.1:41350 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:28:56.810 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43402 10 6452 1 2025-09-10 03:29:33.187 00:00:10.322 TCP 23.104.0.1:37124 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:29:57.034 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41728 10 6452 1 2025-09-10 03:25:26.184 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-09-10 03:30:33.552 00:00:10.370 TCP 23.104.0.1:40456 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:30:55.449 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 03:30:55.362 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 03:30:57.251 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39024 10 6452 1 2025-09-10 03:31:26.982 00:00:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 1 71 1 2025-09-10 03:31:33.962 00:00:10.368 TCP 23.104.0.1:35460 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:31:57.424 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58668 10 6452 1 2025-09-10 03:27:26.182 00:06:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-09-10 03:32:34.366 00:00:10.322 TCP 23.104.0.1:53128 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:32:57.635 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60270 10 6452 1 2025-09-10 03:33:26.985 00:00:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 1 52 1 2025-09-10 03:33:34.729 00:00:10.377 TCP 23.104.0.1:44242 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:33:57.806 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42050 10 6452 1 2025-09-10 03:34:35.138 00:00:10.322 TCP 23.104.0.1:56814 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:34:57.976 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58798 10 6452 1 2025-09-10 03:35:35.502 00:00:10.420 TCP 23.104.0.1:42362 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:35:55.509 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 03:35:55.439 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 03:35:58.217 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50624 10 6452 1 2025-09-10 03:32:26.185 00:04:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 03:36:35.962 00:00:10.367 TCP 23.104.0.1:49486 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:36:58.437 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45618 10 6452 1 2025-09-10 03:37:36.371 00:00:10.361 TCP 23.104.0.1:33816 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:37:58.653 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48056 12 6556 1 2025-09-10 03:34:26.184 00:04:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 03:38:36.767 00:00:10.376 TCP 23.104.0.1:38070 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:38:58.870 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42240 10 6452 1 2025-09-10 03:39:37.177 00:00:10.368 TCP 23.104.0.1:56536 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:39:59.102 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46914 10 6452 1 2025-09-10 03:40:37.583 00:00:10.357 TCP 23.104.0.1:59236 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:40:55.525 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 03:40:55.692 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 03:40:59.318 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56234 10 6452 1 2025-09-10 03:37:26.187 00:04:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 03:41:37.985 00:00:10.380 TCP 23.104.0.1:39886 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:41:59.537 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48444 10 6452 1 2025-09-10 03:42:38.407 00:00:10.324 TCP 23.104.0.1:44076 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:42:59.710 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54328 10 6452 1 2025-09-10 03:39:26.184 00:04:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 03:43:38.771 00:00:10.374 TCP 23.104.0.1:35084 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:43:59.882 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43994 10 6452 1 2025-09-10 03:44:39.183 00:00:10.328 TCP 23.104.0.1:45310 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:45:00.110 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60082 10 6452 1 2025-09-10 03:45:39.552 00:00:10.377 TCP 23.104.0.1:42148 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:45:55.863 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 03:45:55.558 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 03:46:00.320 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54962 10 6452 1 2025-09-10 03:42:26.188 00:04:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 03:46:39.969 00:00:10.376 TCP 23.104.0.1:39424 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:47:00.535 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38310 10 6452 1 2025-09-10 03:47:40.386 00:00:10.362 TCP 23.104.0.1:46148 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:48:00.706 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50700 10 6452 1 2025-09-10 03:44:26.185 00:04:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 03:48:40.787 00:00:10.341 TCP 23.104.0.1:35366 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:49:00.919 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44836 10 6452 1 2025-09-10 03:49:41.165 00:00:10.363 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:50:01.131 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38390 10 6452 1 2025-09-10 03:50:41.570 00:00:10.372 TCP 23.104.0.1:52188 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:50:55.978 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 03:50:56.122 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 03:51:01.340 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57884 10 6452 1 2025-09-10 03:47:26.189 00:04:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 03:51:41.980 00:00:10.364 TCP 23.104.0.1:51780 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:52:01.553 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41596 10 6452 1 2025-09-10 03:52:42.382 00:00:10.363 TCP 23.104.0.1:50564 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:53:01.732 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59242 10 6452 1 2025-09-10 03:49:26.186 00:04:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 03:53:42.781 00:00:10.372 TCP 23.104.0.1:37424 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:54:01.952 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:56790 10 6452 1 2025-09-10 03:54:43.194 00:00:10.364 TCP 23.104.0.1:48210 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:55:02.148 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36862 10 6452 1 2025-09-10 03:55:43.594 00:00:10.369 TCP 23.104.0.1:41444 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:55:55.714 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 03:55:55.907 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 03:56:02.356 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37724 10 6452 1 2025-09-10 03:52:26.189 00:04:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 03:56:44.003 00:00:10.365 TCP 23.104.0.1:48890 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:57:02.567 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37612 10 6452 1 2025-09-10 03:57:44.404 00:00:10.367 TCP 23.104.0.1:46092 -> 1.101.0.1:3000 11 1507 1 2025-09-10 03:58:02.741 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-09-10 03:54:26.186 00:04:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 Summary: total flows: 170, total bytes: 501471, total packets: 1572, avg bps: 1061, avg pps: 0, avg bpp: 319 Time window: 2025-09-10 02:55:26 - 2025-09-10 03:58:26 Total flows processed: 170, passed: 170, Blocks skipped: 0, Bytes read: 17744 Sys: 0.0036s User: 0.0009s Wall: 0.0020s flows/second: 85979.9 Runtime: 0.0020s