Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 00:58:53.011 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37048 10 6452 1 2025-09-12 00:59:32.576 00:00:10.365 TCP 23.104.0.1:55454 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:59:53.223 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55136 10 6452 1 2025-09-12 01:00:32.977 00:00:10.363 TCP 23.104.0.1:38428 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:00:53.397 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39294 10 6452 1 2025-09-12 01:01:33.381 00:00:10.372 TCP 23.104.0.1:42206 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:01:50.329 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 01:01:50.129 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:01:53.610 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49452 10 6452 1 2025-09-12 01:02:33.789 00:00:10.371 TCP 23.104.0.1:52280 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:02:53.822 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46572 10 6452 1 2025-09-12 00:58:27.118 00:06:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 01:03:34.200 00:00:10.365 TCP 23.104.0.1:60476 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:03:53.992 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6452 1 2025-09-12 00:59:27.116 00:06:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 01:04:34.600 00:00:10.371 TCP 23.104.0.1:60524 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:04:54.221 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49638 10 6452 1 2025-09-12 01:05:35.008 00:00:10.367 TCP 23.104.0.1:34936 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:05:54.440 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-09-12 01:06:35.407 00:00:10.367 TCP 23.104.0.1:57982 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:06:50.398 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 01:06:50.397 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:06:54.650 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43592 10 6452 1 2025-09-12 01:07:35.813 00:00:10.336 TCP 23.104.0.1:42672 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:07:54.823 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49056 10 6452 1 2025-09-12 01:08:36.187 00:00:10.324 TCP 23.104.0.1:33184 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:08:55.060 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45702 10 6452 1 2025-09-12 01:09:36.550 00:00:10.605 TCP 23.104.0.1:35356 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:09:55.278 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51980 10 6452 1 2025-09-12 01:05:27.121 00:06:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 01:10:37.196 00:00:10.366 TCP 23.104.0.1:52798 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:10:55.489 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:54892 12 6556 1 2025-09-12 01:06:27.117 00:06:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 01:11:50.444 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 01:11:37.599 00:00:10.370 TCP 23.104.0.1:58290 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:11:50.128 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:11:55.724 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36838 10 6452 1 2025-09-12 01:12:38.000 00:00:10.323 TCP 23.104.0.1:56540 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:12:55.895 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40070 10 6452 1 2025-09-12 01:13:38.368 00:00:10.364 TCP 23.104.0.1:38376 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:13:56.127 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53234 10 6452 1 2025-09-12 01:14:38.768 00:00:10.331 TCP 23.104.0.1:42198 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:14:56.360 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40004 10 6452 1 2025-09-12 01:15:39.137 00:00:10.359 TCP 23.104.0.1:59690 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:15:56.576 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:48418 11 6504 1 2025-09-12 01:16:39.535 00:00:10.365 TCP 23.104.0.1:45478 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:16:50.776 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:16:50.559 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 01:16:56.865 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56734 10 6452 1 2025-09-12 01:12:27.121 00:06:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 01:17:39.935 00:00:10.383 TCP 23.104.0.1:44690 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:17:57.092 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60120 10 6452 1 2025-09-12 01:13:27.119 00:06:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 01:18:40.355 00:00:10.323 TCP 23.104.0.1:52402 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:18:57.302 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34640 10 6452 1 2025-09-12 01:19:40.717 00:00:10.375 TCP 23.104.0.1:55748 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:19:57.514 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56070 10 6452 1 2025-09-12 01:20:41.133 00:00:10.360 TCP 23.104.0.1:55958 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:20:57.735 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58110 10 6452 1 2025-09-12 01:21:50.630 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 01:21:50.598 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:21:41.533 00:00:10.360 TCP 23.104.0.1:49326 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:21:57.959 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:33298 10 6452 1 2025-09-12 01:22:41.930 00:00:10.386 TCP 23.104.0.1:59908 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:22:58.148 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46248 10 6452 1 2025-09-12 01:23:42.350 00:00:10.328 TCP 23.104.0.1:54496 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:23:58.357 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58634 10 6452 1 2025-09-12 01:19:27.122 00:06:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 01:24:42.714 00:00:10.382 TCP 23.104.0.1:36250 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:24:58.570 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55202 10 6452 1 2025-09-12 01:20:27.119 00:06:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 01:25:43.136 00:00:10.377 TCP 23.104.0.1:49908 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:25:58.745 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40450 10 6452 1 2025-09-12 01:26:50.836 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 01:26:50.904 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:26:43.570 00:00:10.363 TCP 23.104.0.1:55062 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:26:58.914 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59274 10 6452 1 2025-09-12 01:27:43.975 00:00:10.709 TCP 23.104.0.1:32950 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:27:59.088 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59774 10 6452 1 2025-09-12 01:28:44.727 00:00:10.369 TCP 23.104.0.1:59560 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:28:59.299 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47640 10 6452 1 2025-09-12 01:29:45.127 00:00:10.369 TCP 23.104.0.1:55004 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:29:59.514 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58218 10 6452 1 2025-09-12 01:30:45.535 00:00:10.329 TCP 23.104.0.1:40396 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:30:59.727 00:00:10.375 TCP 1.101.0.1:3000 -> 22.102.0.1:37450 10 6452 1 2025-09-12 01:26:27.124 00:06:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 01:31:50.832 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 01:31:50.537 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:31:45.904 00:00:10.372 TCP 23.104.0.1:52938 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:32:00.142 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57636 10 6452 1 2025-09-12 01:27:27.122 00:06:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 01:32:46.315 00:00:10.321 TCP 23.104.0.1:50820 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:33:00.311 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47350 10 6452 1 2025-09-12 01:33:46.676 00:00:10.378 TCP 23.104.0.1:35510 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:34:00.481 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49572 10 6452 1 2025-09-12 01:34:47.108 00:00:10.372 TCP 23.104.0.1:40204 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:35:00.695 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47372 10 6452 1 2025-09-12 01:35:47.519 00:00:10.326 TCP 23.104.0.1:44858 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:36:00.924 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:42662 10 6452 1 2025-09-12 01:36:50.770 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:36:50.749 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 01:36:47.884 00:00:10.386 TCP 23.104.0.1:54742 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:37:01.177 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33820 10 6452 1 2025-09-12 01:37:48.308 00:00:10.376 TCP 23.104.0.1:47684 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:38:01.400 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43362 10 6452 1 2025-09-12 01:33:27.125 00:06:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 01:38:48.718 00:00:10.373 TCP 23.104.0.1:55208 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:39:01.621 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50090 10 6452 1 2025-09-12 01:34:27.126 00:06:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 01:39:49.127 00:00:10.363 TCP 23.104.0.1:35986 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:40:01.795 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45818 10 6452 1 2025-09-12 01:40:49.529 00:00:10.365 TCP 23.104.0.1:42668 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:41:02.012 00:00:10.288 TCP 1.101.0.1:3000 -> 22.102.0.1:36372 10 6452 1 2025-09-12 01:41:50.948 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:41:50.790 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 01:41:49.929 00:00:10.390 TCP 23.104.0.1:45698 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:42:02.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46622 10 6452 1 2025-09-12 01:42:50.361 00:00:10.364 TCP 23.104.0.1:40060 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:43:02.554 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37000 10 6452 1 2025-09-12 01:43:50.768 00:00:10.370 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:44:02.765 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59392 10 6452 1 2025-09-12 01:44:51.171 00:00:10.359 TCP 23.104.0.1:55498 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:45:02.972 00:00:10.383 TCP 1.101.0.1:3000 -> 22.102.0.1:54804 12 6556 1 2025-09-12 01:40:27.127 00:06:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 01:45:51.568 00:00:10.364 TCP 23.104.0.1:41302 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:46:03.393 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52478 10 6452 1 2025-09-12 01:41:27.126 00:06:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 01:46:50.936 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 01:46:51.092 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:46:51.973 00:00:10.380 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:47:03.605 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40508 10 6452 1 2025-09-12 01:47:52.388 00:00:10.368 TCP 23.104.0.1:48718 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:48:03.828 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34440 10 6452 1 2025-09-12 01:48:52.791 00:00:10.440 TCP 23.104.0.1:46406 -> 1.101.0.1:3000 15 1926 1 2025-09-12 01:49:04.068 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52106 12 10365 1 2025-09-12 01:49:53.272 00:00:10.364 TCP 23.104.0.1:44452 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:50:04.309 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43620 10 6452 1 2025-09-12 01:50:53.675 00:00:10.379 TCP 23.104.0.1:46820 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:51:04.521 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58546 10 6452 1 2025-09-12 01:51:51.141 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 01:51:50.980 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:51:54.108 00:00:10.365 TCP 23.104.0.1:49612 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:52:04.736 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46966 10 6452 1 2025-09-12 01:47:27.130 00:06:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 01:52:54.515 00:00:10.371 TCP 23.104.0.1:53488 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:53:04.949 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47102 10 6452 1 2025-09-12 01:48:27.128 00:06:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 01:53:54.933 00:00:10.402 TCP 23.104.0.1:55498 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:54:05.175 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57748 10 6452 1 2025-09-12 01:54:55.372 00:00:10.362 TCP 23.104.0.1:54578 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:55:05.394 00:00:10.453 TCP 1.101.0.1:3000 -> 22.102.0.1:41782 10 6452 1 2025-09-12 01:55:55.776 00:00:10.368 TCP 23.104.0.1:34506 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:56:05.887 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46378 10 6452 1 2025-09-12 01:56:51.335 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 01:56:51.163 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 01:56:56.180 00:00:10.366 TCP 23.104.0.1:45240 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:57:06.112 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53414 10 6452 1 2025-09-12 01:57:56.583 00:00:10.370 TCP 23.104.0.1:51396 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:58:06.291 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40440 10 6452 1 Summary: total flows: 159, total bytes: 500449, total packets: 1556, avg bps: 1115, avg pps: 0, avg bpp: 321 Time window: 2025-09-12 00:58:27 - 2025-09-12 01:58:16 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0031s User: 0.0023s Wall: 0.0021s flows/second: 76112.1 Runtime: 0.0021s