Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 18:58:53.659 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:34126 12 10365 1 2025-09-10 18:59:18.676 00:00:10.378 TCP 23.104.0.1:35326 -> 1.101.0.1:3000 11 1507 1 2025-09-10 18:59:53.900 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43338 10 6452 1 2025-09-10 19:00:19.105 00:00:10.561 TCP 23.104.0.1:49346 -> 1.101.0.1:3000 11 1507 1 2025-09-10 18:56:26.470 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 19:00:54.122 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52192 10 6452 1 2025-09-10 19:01:14.221 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 19:01:13.921 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 19:01:19.702 00:00:10.371 TCP 23.104.0.1:38120 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:01:54.299 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:33986 10 6452 1 2025-09-10 19:02:20.109 00:00:10.371 TCP 23.104.0.1:37018 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:02:54.538 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59486 10 6452 1 2025-09-10 19:03:20.519 00:00:10.364 TCP 23.104.0.1:57780 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:03:54.750 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34894 10 6452 1 2025-09-10 19:00:26.474 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 19:04:20.923 00:00:10.388 TCP 23.104.0.1:43188 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:04:54.918 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55788 10 6452 1 2025-09-10 19:05:21.347 00:00:10.364 TCP 23.104.0.1:35886 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:05:55.133 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53214 10 6452 1 2025-09-10 19:06:14.238 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 19:06:14.181 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 19:02:26.471 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 19:06:21.755 00:00:10.341 TCP 23.104.0.1:52440 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:06:55.352 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49964 10 6452 1 2025-09-10 19:07:22.136 00:00:10.371 TCP 23.104.0.1:49608 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:07:55.568 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39074 10 6452 1 2025-09-10 19:08:22.540 00:00:10.365 TCP 23.104.0.1:50202 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:08:55.789 00:00:10.629 TCP 1.101.0.1:3000 -> 22.102.0.1:56476 10 6452 1 2025-09-10 19:09:22.943 00:00:10.372 TCP 23.104.0.1:44134 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:09:56.459 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33914 10 6452 1 2025-09-10 19:06:26.474 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 19:10:23.358 00:00:10.503 TCP 23.104.0.1:59546 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:10:56.684 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33498 10 6452 1 2025-09-10 19:11:14.224 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 19:11:14.243 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 19:11:23.903 00:00:10.368 TCP 23.104.0.1:49958 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:11:56.906 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36894 10 6452 1 2025-09-10 19:08:26.471 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 19:12:24.311 00:00:10.367 TCP 23.104.0.1:40568 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:12:57.121 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37048 10 6452 1 2025-09-10 19:13:24.712 00:00:10.588 TCP 23.104.0.1:58278 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:13:57.334 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51134 10 6452 1 2025-09-10 19:14:25.349 00:00:10.361 TCP 23.104.0.1:45470 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:14:57.559 00:00:10.297 TCP 1.101.0.1:3000 -> 22.102.0.1:39364 10 6452 1 2025-09-10 19:15:25.754 00:00:10.343 TCP 23.104.0.1:59316 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:15:57.900 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54244 10 6452 1 2025-09-10 19:16:14.715 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 19:16:14.583 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 19:12:26.475 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 19:16:26.145 00:00:10.369 TCP 23.104.0.1:37390 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:16:58.123 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6452 1 2025-09-10 19:17:26.557 00:00:10.365 TCP 23.104.0.1:33490 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:17:58.346 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48160 10 6452 1 2025-09-10 19:14:26.473 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 19:18:26.959 00:00:10.365 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:18:58.569 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35060 10 6452 1 2025-09-10 19:19:27.362 00:00:10.364 TCP 23.104.0.1:37330 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:19:58.751 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42590 10 6452 1 2025-09-10 19:20:27.764 00:00:10.375 TCP 23.104.0.1:40010 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:20:58.928 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58090 10 6452 1 2025-09-10 19:21:14.433 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 19:21:14.446 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 19:21:28.173 00:00:10.369 TCP 23.104.0.1:58562 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:21:59.166 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44160 10 6452 1 2025-09-10 19:18:26.478 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 19:22:28.581 00:00:10.329 TCP 23.104.0.1:56894 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:22:59.400 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43722 10 6452 1 2025-09-10 19:23:28.947 00:00:10.373 TCP 23.104.0.1:40898 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:23:59.623 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54108 10 6452 1 2025-09-10 19:20:26.474 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 19:24:29.360 00:00:10.364 TCP 23.104.0.1:56246 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:24:59.854 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52852 10 6452 1 2025-09-10 19:25:29.760 00:00:10.337 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:26:14.655 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 19:26:00.089 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56406 10 6452 1 2025-09-10 19:26:14.539 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 19:26:30.137 00:00:10.327 TCP 23.104.0.1:43922 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:27:00.324 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33812 10 6452 1 2025-09-10 19:27:30.502 00:00:10.367 TCP 23.104.0.1:53184 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:28:00.499 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47300 10 6452 1 2025-09-10 19:24:26.478 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 19:28:30.909 00:00:10.364 TCP 23.104.0.1:60632 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:29:00.720 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53178 10 6452 1 2025-09-10 19:29:31.314 00:00:10.326 TCP 23.104.0.1:38900 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:30:00.939 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:39082 10 6452 1 2025-09-10 19:26:26.476 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 19:30:31.675 00:00:10.371 TCP 23.104.0.1:38874 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:31:01.199 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38772 10 6452 1 2025-09-10 19:31:14.643 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 19:31:14.713 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 19:31:32.108 00:00:10.368 TCP 23.104.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:32:01.423 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60958 10 6452 1 2025-09-10 19:32:32.513 00:00:10.379 TCP 23.104.0.1:45900 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:33:01.644 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35860 10 6452 1 2025-09-10 19:33:32.931 00:00:10.383 TCP 23.104.0.1:48662 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:34:01.852 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52726 10 6452 1 2025-09-10 19:30:26.479 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 19:34:33.353 00:00:10.362 TCP 23.104.0.1:48570 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:35:02.085 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:34588 10 6452 1 2025-09-10 19:35:33.757 00:00:10.373 TCP 23.104.0.1:42322 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:36:14.682 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 19:36:02.279 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50026 10 6452 1 2025-09-10 19:36:14.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 19:32:26.478 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 19:36:34.175 00:00:10.369 TCP 23.104.0.1:38320 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:37:02.454 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46418 10 6452 1 2025-09-10 19:37:34.578 00:00:10.324 TCP 23.104.0.1:45800 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:38:02.671 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38252 10 6452 1 2025-09-10 19:38:34.945 00:00:10.463 TCP 23.104.0.1:54210 -> 1.101.0.1:3000 15 1926 1 2025-09-10 19:39:02.887 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:57876 12 10365 1 2025-09-10 19:39:35.443 00:00:10.378 TCP 23.104.0.1:53606 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:40:03.135 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45850 10 6452 1 2025-09-10 19:36:26.479 00:05:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 19:40:35.863 00:00:10.383 TCP 23.104.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:41:03.348 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:55208 10 6452 1 2025-09-10 19:41:14.649 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 19:41:15.046 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 19:41:36.281 00:00:10.323 TCP 23.104.0.1:46412 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:42:03.516 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36540 10 6452 1 2025-09-10 19:38:26.478 00:05:00.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 19:42:36.646 00:00:10.322 TCP 23.104.0.1:59122 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:43:03.725 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39808 10 6452 1 2025-09-10 19:43:37.012 00:00:10.320 TCP 23.104.0.1:38716 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:44:03.894 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41786 10 6452 1 2025-09-10 19:44:37.373 00:00:10.323 TCP 23.104.0.1:37204 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:45:04.086 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40886 10 6452 1 2025-09-10 19:45:37.740 00:00:10.365 TCP 23.104.0.1:47190 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:46:15.104 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 19:46:04.262 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35732 10 6452 1 2025-09-10 19:46:15.133 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 19:42:26.481 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 19:46:38.141 00:00:10.366 TCP 23.104.0.1:46526 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:47:04.481 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57706 10 6452 1 2025-09-10 19:47:38.546 00:00:10.387 TCP 23.104.0.1:60990 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:48:04.698 00:00:10.661 TCP 1.101.0.1:3000 -> 22.102.0.1:37492 10 6452 1 2025-09-10 19:44:26.479 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 19:48:38.960 00:00:10.368 TCP 23.104.0.1:42708 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:49:05.396 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47218 10 6452 1 2025-09-10 19:49:39.382 00:00:10.533 TCP 23.104.0.1:37734 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:50:05.604 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50902 10 6452 1 2025-09-10 19:50:39.949 00:00:10.329 TCP 23.104.0.1:43120 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:51:15.170 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 19:51:05.820 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:52116 10 6452 1 2025-09-10 19:51:14.887 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 19:51:40.312 00:00:10.324 TCP 23.104.0.1:33136 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:52:06.010 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46876 10 6452 1 2025-09-10 19:48:26.485 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 19:52:40.671 00:00:10.366 TCP 23.104.0.1:46478 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:53:06.230 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33962 10 6452 1 2025-09-10 19:53:41.101 00:00:10.365 TCP 23.104.0.1:35200 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:54:06.452 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:54506 10 6452 1 2025-09-10 19:50:26.481 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 19:54:41.500 00:00:10.368 TCP 23.104.0.1:45576 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:55:06.658 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57380 10 6452 1 2025-09-10 19:55:41.908 00:00:10.374 TCP 23.104.0.1:34096 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:56:15.129 00:00:00.015 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 19:56:15.170 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 19:56:06.870 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41578 10 6452 1 2025-09-10 19:56:42.319 00:00:10.364 TCP 23.104.0.1:52092 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:57:07.092 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47730 10 6452 1 2025-09-10 19:57:42.756 00:00:10.372 TCP 23.104.0.1:56314 -> 1.101.0.1:3000 11 1507 1 2025-09-10 19:58:07.313 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45670 10 6452 1 2025-09-10 19:54:26.484 00:05:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 Summary: total flows: 163, total bytes: 505086, total packets: 1569, avg bps: 1068, avg pps: 0, avg bpp: 321 Time window: 2025-09-10 18:56:26 - 2025-09-10 19:59:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0019s User: 0.0029s Wall: 0.0020s flows/second: 81671.4 Runtime: 0.0020s