Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 07:58:54.197 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39908 10 6452 1 2025-09-13 07:59:19.646 00:00:10.364 TCP 23.104.0.1:45322 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:59:54.415 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49580 10 6452 1 2025-09-13 08:00:20.063 00:00:10.367 TCP 23.104.0.1:54718 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:00:54.589 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 10 6452 1 2025-09-13 07:57:27.743 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 08:01:20.473 00:00:10.368 TCP 23.104.0.1:50302 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:57:27.740 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 08:01:54.767 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56770 10 6452 1 2025-09-13 08:02:27.302 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 08:02:20.870 00:00:10.366 TCP 23.104.0.1:35610 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:02:27.496 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:02:54.940 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:47408 10 6452 1 2025-09-13 08:03:21.278 00:00:10.370 TCP 23.104.0.1:43202 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:03:55.180 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58014 10 6452 1 2025-09-13 08:04:21.684 00:00:10.327 TCP 23.104.0.1:49460 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:04:55.394 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60436 10 6452 1 2025-09-13 08:05:22.055 00:00:10.368 TCP 23.104.0.1:47322 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:05:55.601 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37074 10 6452 1 2025-09-13 08:06:22.462 00:00:10.364 TCP 23.104.0.1:40304 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:06:55.818 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52826 10 6452 1 2025-09-13 08:07:27.480 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:03:27.744 00:05:00.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 08:07:27.363 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 08:03:27.741 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 08:07:22.865 00:00:10.328 TCP 23.104.0.1:35194 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:07:56.037 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48194 10 6452 1 2025-09-13 08:08:23.234 00:00:10.328 TCP 23.104.0.1:54768 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:08:56.246 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50916 10 6452 1 2025-09-13 08:09:23.615 00:00:10.323 TCP 23.104.0.1:42014 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:09:56.459 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35600 10 6452 1 2025-09-13 08:10:23.977 00:00:10.373 TCP 23.104.0.1:47904 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:10:56.673 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2025-09-13 08:11:24.390 00:00:10.365 TCP 23.104.0.1:34374 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:11:56.894 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38768 10 6452 1 2025-09-13 08:12:27.527 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:12:27.633 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 08:12:24.796 00:00:10.370 TCP 23.104.0.1:54424 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:12:57.079 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:33744 10 6452 1 2025-09-13 08:09:27.744 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 08:09:27.742 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 08:13:25.212 00:00:10.380 TCP 23.104.0.1:53738 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:13:57.293 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60380 10 6452 1 2025-09-13 08:14:25.623 00:00:10.363 TCP 23.104.0.1:59536 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:14:57.524 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59042 10 6452 1 2025-09-13 08:15:26.026 00:00:10.361 TCP 23.104.0.1:39930 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:15:57.738 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 6452 1 2025-09-13 08:16:26.426 00:00:11.013 TCP 23.104.0.1:51580 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:16:57.964 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59850 10 6452 1 2025-09-13 08:17:27.733 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 08:17:27.685 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:17:27.476 00:00:10.368 TCP 23.104.0.1:48724 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:17:58.198 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45072 10 6452 1 2025-09-13 08:18:27.884 00:00:10.388 TCP 23.104.0.1:41130 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:18:58.406 00:00:10.995 TCP 1.101.0.1:3000 -> 22.102.0.1:60458 10 6452 1 2025-09-13 08:15:27.747 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 08:15:27.745 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 08:19:28.309 00:00:10.364 TCP 23.104.0.1:33802 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:19:59.439 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37906 10 6452 1 2025-09-13 08:20:28.713 00:00:10.376 TCP 23.104.0.1:41918 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:20:59.650 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37276 10 6452 1 2025-09-13 08:21:29.127 00:00:10.365 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:21:59.861 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42382 10 6452 1 2025-09-13 08:22:27.933 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 08:22:27.747 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:22:29.539 00:00:10.364 TCP 23.104.0.1:37074 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:23:00.088 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44308 10 6452 1 2025-09-13 08:23:29.937 00:00:10.380 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:24:00.298 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52500 10 6452 1 2025-09-13 08:24:30.353 00:00:10.369 TCP 23.104.0.1:51960 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:25:00.509 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50382 10 6452 1 2025-09-13 08:21:27.750 00:05:00.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 08:21:27.748 00:05:00.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 08:25:30.759 00:00:10.387 TCP 23.104.0.1:41260 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:26:00.727 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36204 10 6452 1 2025-09-13 08:26:31.184 00:00:10.365 TCP 23.104.0.1:56762 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:27:00.935 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42824 10 6452 1 2025-09-13 08:27:28.036 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 08:27:27.835 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:27:31.585 00:00:10.359 TCP 23.104.0.1:36430 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:28:01.169 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47308 10 6452 1 2025-09-13 08:28:31.986 00:00:10.371 TCP 23.104.0.1:38132 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:29:01.380 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55224 10 6452 1 2025-09-13 08:29:32.393 00:00:10.365 TCP 23.104.0.1:37252 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:30:01.596 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49144 10 6452 1 2025-09-13 08:30:32.799 00:00:10.367 TCP 23.104.0.1:43554 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:31:01.809 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50052 10 6452 1 2025-09-13 08:27:27.751 00:05:00.874 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 08:27:27.748 00:05:00.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 08:31:33.203 00:00:10.366 TCP 23.104.0.1:36016 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:32:02.032 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60150 10 6452 1 2025-09-13 08:32:27.879 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 08:32:28.242 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:32:33.605 00:00:10.370 TCP 23.104.0.1:33770 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:33:02.247 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48580 10 6452 1 2025-09-13 08:33:34.014 00:00:10.368 TCP 23.104.0.1:47076 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:34:02.464 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37248 10 6452 1 2025-09-13 08:34:34.417 00:00:10.368 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:35:02.674 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-09-13 08:35:34.831 00:00:10.338 TCP 23.104.0.1:34984 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:36:02.887 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:43550 10 6452 1 2025-09-13 08:36:35.205 00:00:10.328 TCP 23.104.0.1:58616 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:37:03.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40444 10 6452 1 2025-09-13 08:33:27.749 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 08:37:28.194 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 08:37:28.073 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:33:27.751 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 08:37:35.569 00:00:10.365 TCP 23.104.0.1:35862 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:38:03.300 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32910 10 6452 1 2025-09-13 08:38:35.976 00:00:10.376 TCP 23.104.0.1:38918 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:39:03.516 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51822 10 6452 1 2025-09-13 08:39:36.395 00:00:10.329 TCP 23.104.0.1:57104 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:40:03.687 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:48364 10 6452 1 2025-09-13 08:40:36.763 00:00:10.383 TCP 23.104.0.1:35768 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:41:03.924 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47588 10 6452 1 2025-09-13 08:41:37.183 00:00:10.362 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:42:04.141 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52618 10 6452 1 2025-09-13 08:42:28.141 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 08:42:28.017 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:42:37.585 00:00:10.367 TCP 23.104.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:43:04.357 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57860 10 6452 1 2025-09-13 08:39:27.749 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 08:39:27.753 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 08:43:37.993 00:00:10.374 TCP 23.104.0.1:52686 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:44:04.571 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59864 10 6452 1 2025-09-13 08:44:38.404 00:00:10.370 TCP 23.104.0.1:55144 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:45:04.782 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40266 10 6452 1 2025-09-13 08:45:38.818 00:00:10.363 TCP 23.104.0.1:57490 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:46:05.002 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42128 10 6452 1 2025-09-13 08:46:39.221 00:00:10.366 TCP 23.104.0.1:49608 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:47:05.228 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49458 10 6452 1 2025-09-13 08:47:28.312 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 08:47:28.028 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:47:39.630 00:00:10.368 TCP 23.104.0.1:39864 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:48:05.414 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48932 10 6452 1 2025-09-13 08:48:40.051 00:00:10.369 TCP 23.104.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:49:05.626 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54636 10 6452 1 2025-09-13 08:45:27.753 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 08:45:27.750 00:05:00.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 08:49:40.455 00:00:10.332 TCP 23.104.0.1:56202 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:50:05.841 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52080 10 6452 1 2025-09-13 08:50:40.838 00:00:10.347 TCP 23.104.0.1:34278 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:51:06.071 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57276 10 6452 1 2025-09-13 08:51:41.220 00:00:10.370 TCP 23.104.0.1:53204 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:52:06.287 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34462 10 6452 1 2025-09-13 08:52:28.543 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 08:52:28.437 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:52:41.625 00:00:10.362 TCP 23.104.0.1:33964 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:53:06.497 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60060 10 6452 1 2025-09-13 08:53:42.024 00:00:10.362 TCP 23.104.0.1:59346 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:54:06.711 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46314 10 6452 1 2025-09-13 08:54:42.425 00:00:10.369 TCP 23.104.0.1:42404 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:55:06.882 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41928 10 6452 1 2025-09-13 08:51:27.751 00:05:00.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 08:51:27.755 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 08:55:42.831 00:00:10.348 TCP 23.104.0.1:44086 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:56:07.102 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42876 10 6452 1 2025-09-13 08:56:43.217 00:00:10.322 TCP 23.104.0.1:41312 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:57:07.317 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46680 10 6452 1 2025-09-13 08:57:28.540 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 08:57:28.853 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 08:57:43.578 00:00:10.320 TCP 23.104.0.1:52736 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:58:07.532 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54074 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1088, avg pps: 0, avg bpp: 318 Time window: 2025-09-13 07:57:27 - 2025-09-13 08:58:17 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0008s Wall: 0.0030s flows/second: 54152.2 Runtime: 0.0030s