Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 07:58:58.491 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44602 10 6452 1 2025-09-10 07:59:32.669 00:00:10.369 TCP 23.104.0.1:49306 -> 1.101.0.1:3000 11 1507 1 2025-09-10 07:59:58.707 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39418 10 6452 1 2025-09-10 07:56:26.259 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 08:00:33.103 00:00:10.367 TCP 23.104.0.1:60286 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:01:00.852 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 08:01:00.750 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 08:00:58.915 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:53980 10 6452 1 2025-09-10 08:01:33.509 00:00:10.323 TCP 23.104.0.1:33552 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:01:59.097 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56156 10 6452 1 2025-09-10 08:02:33.869 00:00:10.370 TCP 23.104.0.1:32912 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:02:59.310 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43912 10 6452 1 2025-09-10 08:03:34.275 00:00:10.439 TCP 23.104.0.1:40930 -> 1.101.0.1:3000 15 1926 1 2025-09-10 08:03:59.521 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:51188 12 10367 1 2025-09-10 08:00:26.264 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 08:04:34.754 00:00:10.406 TCP 23.104.0.1:40154 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:04:59.719 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47110 10 6452 1 2025-09-10 08:05:35.178 00:00:10.331 TCP 23.104.0.1:53344 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:06:00.829 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 08:06:00.950 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 08:05:59.935 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59600 10 6452 1 2025-09-10 08:02:26.262 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 08:06:35.548 00:00:10.324 TCP 23.104.0.1:34740 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:07:00.167 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36594 10 6452 1 2025-09-10 08:07:35.908 00:00:10.364 TCP 23.104.0.1:52078 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:08:00.380 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44460 10 6452 1 2025-09-10 08:08:36.309 00:00:10.366 TCP 23.104.0.1:54752 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:09:00.585 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36378 10 6452 1 2025-09-10 08:09:36.719 00:00:10.371 TCP 23.104.0.1:53578 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:10:00.792 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36038 10 6452 1 2025-09-10 08:06:26.264 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 08:10:37.130 00:00:10.322 TCP 23.104.0.1:52196 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:11:01.053 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 08:11:00.689 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 08:11:01.010 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48626 10 6452 1 2025-09-10 08:11:37.494 00:00:10.388 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:12:01.227 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55652 10 6452 1 2025-09-10 08:08:26.263 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 08:12:37.923 00:00:10.383 TCP 23.104.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:13:01.458 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52356 10 6452 1 2025-09-10 08:13:38.342 00:00:10.325 TCP 23.104.0.1:46012 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:14:01.696 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50996 10 6452 1 2025-09-10 08:14:38.706 00:00:10.324 TCP 23.104.0.1:41790 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:15:01.913 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52930 10 6452 1 2025-09-10 08:15:39.099 00:00:10.365 TCP 23.104.0.1:36844 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:16:00.826 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 08:16:01.064 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 08:16:02.134 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58766 10 6452 1 2025-09-10 08:12:26.271 00:05:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 08:16:39.496 00:00:10.368 TCP 23.104.0.1:49026 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:17:02.352 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57572 10 6452 1 2025-09-10 08:17:39.914 00:00:10.365 TCP 23.104.0.1:46544 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:18:02.573 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43310 10 6452 1 2025-09-10 08:14:26.270 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 08:18:40.319 00:00:10.368 TCP 23.104.0.1:34278 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:19:02.795 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38080 10 6452 1 2025-09-10 08:19:40.726 00:00:10.338 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:20:03.012 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43908 10 6452 1 2025-09-10 08:20:41.125 00:00:10.370 TCP 23.104.0.1:46772 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:21:01.069 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 08:21:01.323 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 08:21:03.234 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56234 10 6452 1 2025-09-10 08:21:41.544 00:00:10.365 TCP 23.104.0.1:46774 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:22:03.457 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42872 10 6452 1 2025-09-10 08:18:26.275 00:05:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 08:22:41.946 00:00:10.376 TCP 23.104.0.1:44888 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:23:03.674 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34286 10 6452 1 2025-09-10 08:23:42.359 00:00:10.367 TCP 23.104.0.1:45642 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:24:03.885 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60194 10 6452 1 2025-09-10 08:20:26.273 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 08:24:42.768 00:00:10.334 TCP 23.104.0.1:47352 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:25:04.108 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41016 10 6452 1 2025-09-10 08:25:43.134 00:00:10.361 TCP 23.104.0.1:43036 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:26:01.274 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 08:26:01.320 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 08:26:04.321 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37258 10 6452 1 2025-09-10 08:26:43.531 00:00:10.369 TCP 23.104.0.1:50134 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:27:04.531 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42584 10 6452 1 2025-09-10 08:27:43.945 00:00:10.378 TCP 23.104.0.1:38988 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:28:04.738 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41288 10 6452 1 2025-09-10 08:24:26.277 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 08:28:44.361 00:00:10.323 TCP 23.104.0.1:43268 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:29:04.952 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50220 10 6452 1 2025-09-10 08:29:44.724 00:00:10.380 TCP 23.104.0.1:60042 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:30:05.180 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40746 10 6452 1 2025-09-10 08:26:26.273 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 08:30:45.145 00:00:10.361 TCP 23.104.0.1:41160 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:31:01.387 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 08:31:01.366 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 08:31:05.404 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35290 10 6452 1 2025-09-10 08:31:45.543 00:00:10.372 TCP 23.104.0.1:45942 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:32:05.569 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60402 10 6452 1 2025-09-10 08:32:45.950 00:00:10.368 TCP 23.104.0.1:52144 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:33:05.747 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43590 10 6452 1 2025-09-10 08:33:46.379 00:00:10.369 TCP 23.104.0.1:55106 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:34:05.921 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40148 10 6452 1 2025-09-10 08:30:26.277 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 08:34:46.786 00:00:10.323 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:35:06.135 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42620 10 6452 1 2025-09-10 08:36:01.519 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 08:36:01.598 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 08:35:47.148 00:00:10.369 TCP 23.104.0.1:39798 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:36:06.351 00:00:18.308 TCP 1.101.0.1:3000 -> 22.102.0.1:47230 10 6452 1 2025-09-10 08:32:26.276 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 08:36:47.553 00:00:10.364 TCP 23.104.0.1:57850 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:37:14.710 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57810 10 6452 1 2025-09-10 08:37:47.956 00:00:10.366 TCP 23.104.0.1:44630 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:38:14.894 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55382 10 6452 1 2025-09-10 08:38:48.364 00:00:10.364 TCP 23.104.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:39:15.133 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54420 10 6452 1 2025-09-10 08:39:48.774 00:00:10.322 TCP 23.104.0.1:37638 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:40:15.353 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46376 10 6452 1 2025-09-10 08:36:26.278 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 08:41:01.654 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 08:41:01.391 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 08:40:49.138 00:00:10.363 TCP 23.104.0.1:34206 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:41:15.565 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54012 10 6452 1 2025-09-10 08:41:49.541 00:00:10.367 TCP 23.104.0.1:37304 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:42:15.780 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47332 10 6452 1 2025-09-10 08:38:26.276 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 08:42:49.944 00:00:10.376 TCP 23.104.0.1:59652 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:43:15.993 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:42480 12 10367 1 2025-09-10 08:43:50.357 00:00:10.434 TCP 23.104.0.1:49012 -> 1.101.0.1:3000 15 1926 1 2025-09-10 08:44:16.239 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38714 10 6452 1 2025-09-10 08:44:50.833 00:00:10.395 TCP 23.104.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:45:16.450 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 10 6452 1 2025-09-10 08:46:01.690 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 08:45:51.264 00:00:10.368 TCP 23.104.0.1:50470 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:46:02.118 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 08:46:16.633 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42460 10 6452 1 2025-09-10 08:42:26.279 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 08:46:51.669 00:00:10.367 TCP 23.104.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:47:16.848 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42274 10 6452 1 2025-09-10 08:47:52.106 00:00:10.321 TCP 23.104.0.1:58342 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:48:17.074 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38062 10 6452 1 2025-09-10 08:44:26.276 00:05:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 08:48:52.468 00:00:10.324 TCP 23.104.0.1:58756 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:49:17.282 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57030 10 6452 1 2025-09-10 08:49:52.829 00:00:10.380 TCP 23.104.0.1:39436 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:50:17.453 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37618 10 6452 1 2025-09-10 08:51:01.828 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 08:51:01.920 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 08:50:53.247 00:00:10.388 TCP 23.104.0.1:55864 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:51:17.666 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48628 10 6452 1 2025-09-10 08:51:53.680 00:00:10.367 TCP 23.104.0.1:49024 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:52:17.874 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48674 10 6452 1 2025-09-10 08:48:26.281 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 08:52:54.102 00:00:10.366 TCP 23.104.0.1:53648 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:53:18.068 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55160 10 6452 1 2025-09-10 08:53:54.515 00:00:10.365 TCP 23.104.0.1:40384 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:54:18.278 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-09-10 08:50:26.278 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 08:54:54.919 00:00:10.352 TCP 23.104.0.1:44870 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:55:18.457 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37862 10 6452 1 2025-09-10 08:56:01.933 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 08:56:02.209 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 08:55:55.306 00:00:10.364 TCP 23.104.0.1:36574 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:56:18.672 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34562 10 6452 1 2025-09-10 08:56:55.707 00:00:10.364 TCP 23.104.0.1:41976 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:57:18.889 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45260 10 6452 1 2025-09-10 08:57:56.113 00:00:10.367 TCP 23.104.0.1:40652 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:58:19.132 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54068 10 6452 1 2025-09-10 08:54:26.283 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 Summary: total flows: 163, total bytes: 505509, total packets: 1573, avg bps: 1069, avg pps: 0, avg bpp: 321 Time window: 2025-09-10 07:56:26 - 2025-09-10 08:59:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0019s User: 0.0029s Wall: 0.0020s flows/second: 82449.5 Runtime: 0.0020s