Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 01:59:06.209 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33260 10 6452 1 2025-09-11 01:59:21.230 00:00:10.367 TCP 23.104.0.1:47010 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:00:06.435 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44744 10 6452 1 2025-09-11 01:56:26.599 00:05:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 02:00:21.640 00:00:10.367 TCP 23.104.0.1:46054 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:01:06.608 00:00:10.288 TCP 1.101.0.1:3000 -> 22.102.0.1:58826 10 6452 1 2025-09-11 02:01:22.589 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 02:01:22.636 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 02:01:22.052 00:00:10.363 TCP 23.104.0.1:36252 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:02:06.930 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:33260 10 6452 1 2025-09-11 02:02:22.455 00:00:10.367 TCP 23.104.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:03:07.177 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45522 10 6452 1 2025-09-11 02:03:22.858 00:00:10.376 TCP 23.104.0.1:48026 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:04:07.399 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:35156 10 6452 1 2025-09-11 02:00:26.603 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 02:04:23.274 00:00:10.369 TCP 23.104.0.1:50928 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:05:07.670 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46288 10 6452 1 2025-09-11 02:05:23.682 00:00:10.370 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:06:07.845 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59894 10 6452 1 2025-09-11 02:06:22.431 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 02:06:22.540 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 02:02:26.601 00:05:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 02:06:24.100 00:00:10.364 TCP 23.104.0.1:37824 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:07:08.088 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51198 10 6452 1 2025-09-11 02:07:24.503 00:00:10.854 TCP 23.104.0.1:42310 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:08:08.310 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53832 10 6452 1 2025-09-11 02:08:25.392 00:00:10.323 TCP 23.104.0.1:38292 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:09:08.544 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37976 10 6452 1 2025-09-11 02:09:25.752 00:00:10.387 TCP 23.104.0.1:43960 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:10:08.758 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56628 10 6452 1 2025-09-11 02:06:26.604 00:05:00.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 02:10:26.178 00:00:10.369 TCP 23.104.0.1:57280 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:11:08.984 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:35758 13 6608 1 2025-09-11 02:11:22.629 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 02:11:22.797 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 02:11:26.582 00:00:10.367 TCP 23.104.0.1:52692 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:12:09.234 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42098 10 6452 1 2025-09-11 02:08:26.603 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 02:12:26.984 00:00:10.327 TCP 23.104.0.1:55162 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:13:09.456 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42850 10 6452 1 2025-09-11 02:13:27.349 00:00:10.369 TCP 23.104.0.1:48972 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:14:09.680 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45454 10 6452 1 2025-09-11 02:14:27.756 00:00:10.379 TCP 23.104.0.1:54776 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:15:09.899 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59060 10 6452 1 2025-09-11 02:15:28.170 00:00:10.363 TCP 23.104.0.1:46940 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:16:10.107 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44248 10 6452 1 2025-09-11 02:16:22.637 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 02:16:22.866 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 02:12:26.607 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 02:16:28.570 00:00:10.322 TCP 23.104.0.1:56186 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:17:10.332 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34502 10 6452 1 2025-09-11 02:17:28.931 00:00:10.381 TCP 23.104.0.1:58486 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:18:10.549 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38978 10 6452 1 2025-09-11 02:14:26.604 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 02:18:29.355 00:00:10.369 TCP 23.104.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:19:10.757 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33470 10 6452 1 2025-09-11 02:19:29.763 00:00:10.371 TCP 23.104.0.1:34916 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:20:10.971 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:34270 10 6452 1 2025-09-11 02:20:30.172 00:00:10.363 TCP 23.104.0.1:51606 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:21:22.988 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 02:21:11.163 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52778 10 6452 1 2025-09-11 02:21:22.807 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 02:21:30.576 00:00:10.365 TCP 23.104.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:22:11.373 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48820 10 6452 1 2025-09-11 02:18:26.608 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 02:22:30.979 00:00:10.371 TCP 23.104.0.1:55758 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:23:11.589 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36882 10 6452 1 2025-09-11 02:23:31.393 00:00:10.367 TCP 23.104.0.1:49970 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:24:11.793 00:00:10.307 TCP 1.101.0.1:3000 -> 22.102.0.1:55748 10 6452 1 2025-09-11 02:20:26.606 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 02:24:31.798 00:00:10.361 TCP 23.104.0.1:45858 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:25:12.141 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38142 10 6452 1 2025-09-11 02:25:32.203 00:00:10.371 TCP 23.104.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:26:22.669 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 02:26:12.357 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58180 10 6452 1 2025-09-11 02:26:22.925 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 02:26:32.613 00:00:10.359 TCP 23.104.0.1:40660 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:27:12.577 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54720 10 6452 1 2025-09-11 02:27:33.010 00:00:10.325 TCP 23.104.0.1:40766 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:28:12.747 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44110 10 6452 1 2025-09-11 02:24:26.609 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 02:28:33.384 00:00:10.368 TCP 23.104.0.1:49352 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:29:12.926 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:59848 10 6452 1 2025-09-11 02:29:33.788 00:00:10.365 TCP 23.104.0.1:48238 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:30:13.163 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44084 10 6452 1 2025-09-11 02:26:26.607 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 02:30:34.195 00:00:10.325 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:31:13.384 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57444 10 6452 1 2025-09-11 02:31:22.852 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 02:31:22.878 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 02:31:34.563 00:00:10.324 TCP 23.104.0.1:57582 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:32:13.612 00:00:10.827 TCP 1.101.0.1:3000 -> 22.102.0.1:38790 10 6452 1 2025-09-11 02:32:34.925 00:00:10.391 TCP 23.104.0.1:37968 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:33:14.482 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:46564 11 6504 1 2025-09-11 02:33:35.358 00:00:10.323 TCP 23.104.0.1:50744 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:34:14.753 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34888 10 6452 1 2025-09-11 02:30:26.612 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 02:34:35.720 00:00:10.383 TCP 23.104.0.1:50162 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:35:14.987 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54776 10 6452 1 2025-09-11 02:35:36.140 00:00:10.363 TCP 23.104.0.1:48934 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:36:15.219 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47000 10 6452 1 2025-09-11 02:36:23.226 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 02:36:23.298 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 02:32:26.610 00:05:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 02:36:36.545 00:00:10.362 TCP 23.104.0.1:54246 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:37:15.434 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41432 10 6452 1 2025-09-11 02:37:36.951 00:00:10.367 TCP 23.104.0.1:55324 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:38:15.650 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45658 10 6452 1 2025-09-11 02:38:37.359 00:00:10.363 TCP 23.104.0.1:57560 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:39:15.870 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43292 10 6452 1 2025-09-11 02:39:37.768 00:00:10.368 TCP 23.104.0.1:49636 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:40:16.090 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35860 10 6452 1 2025-09-11 02:36:26.614 00:05:00.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 02:40:38.175 00:00:10.372 TCP 23.104.0.1:52392 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:41:16.300 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56304 10 6452 1 2025-09-11 02:41:23.165 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 02:41:23.343 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 02:41:38.587 00:00:10.359 TCP 23.104.0.1:44840 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:42:16.505 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49678 10 6452 1 2025-09-11 02:38:26.611 00:05:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 02:42:38.987 00:00:10.330 TCP 23.104.0.1:41472 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:43:16.722 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57836 10 6452 1 2025-09-11 02:43:39.359 00:00:10.364 TCP 23.104.0.1:46536 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:44:16.941 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:55310 10 6452 1 2025-09-11 02:44:39.762 00:00:10.369 TCP 23.104.0.1:50786 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:45:17.176 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57176 10 6452 1 2025-09-11 02:45:40.170 00:00:10.365 TCP 23.104.0.1:33340 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:46:23.352 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 02:46:23.353 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 02:46:17.391 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52650 10 6452 1 2025-09-11 02:42:26.614 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 02:46:40.573 00:00:10.363 TCP 23.104.0.1:51370 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:47:17.608 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34828 10 6452 1 2025-09-11 02:47:40.978 00:00:10.328 TCP 23.104.0.1:41924 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:48:17.783 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60214 10 6452 1 2025-09-11 02:44:26.612 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 02:48:41.348 00:00:10.319 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:49:17.994 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60170 10 6452 1 2025-09-11 02:49:41.706 00:00:10.365 TCP 23.104.0.1:32956 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:50:18.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36106 10 6452 1 2025-09-11 02:50:42.125 00:00:10.362 TCP 23.104.0.1:40374 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:51:23.563 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 02:51:23.424 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 02:51:18.429 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35770 10 6452 1 2025-09-11 02:51:42.531 00:00:10.388 TCP 23.104.0.1:44282 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:52:18.648 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56434 10 6452 1 2025-09-11 02:48:26.617 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 02:52:42.958 00:00:10.365 TCP 23.104.0.1:51904 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:53:18.862 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53988 10 6452 1 2025-09-11 02:53:43.363 00:00:10.380 TCP 23.104.0.1:34926 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:54:19.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51616 10 6452 1 2025-09-11 02:50:26.615 00:05:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 02:54:43.769 00:00:10.379 TCP 23.104.0.1:38174 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:55:19.301 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45448 10 6452 1 2025-09-11 02:55:44.185 00:00:10.883 TCP 23.104.0.1:55160 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:56:23.465 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 02:56:23.643 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 02:56:19.525 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56376 10 6452 1 2025-09-11 02:56:45.109 00:00:10.331 TCP 23.104.0.1:41150 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:57:19.749 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37234 10 6452 1 2025-09-11 02:57:45.475 00:00:10.365 TCP 23.104.0.1:55584 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:54:26.619 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 02:58:19.918 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41986 10 6452 1 Summary: total flows: 163, total bytes: 497049, total packets: 1565, avg bps: 1051, avg pps: 0, avg bpp: 317 Time window: 2025-09-11 01:56:26 - 2025-09-11 02:59:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0262s User: 0.0075s Wall: 0.0171s flows/second: 9512.2 Runtime: 0.0172s