Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 04:59:01.629 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40250 10 6452 1 2025-09-14 04:59:24.764 00:00:10.375 TCP 23.104.0.1:58988 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:00:01.808 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46494 10 6452 1 2025-09-14 04:56:28.186 00:05:00.891 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 05:00:25.179 00:00:10.361 TCP 23.104.0.1:40496 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:01:02.041 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36960 10 6452 1 2025-09-14 04:57:28.188 00:05:00.886 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 05:01:25.583 00:00:10.367 TCP 23.104.0.1:60588 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:02:02.257 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40842 10 6452 1 2025-09-14 05:02:25.983 00:00:10.374 TCP 23.104.0.1:59902 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:02:52.734 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 05:02:52.830 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 05:03:02.432 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35424 10 6452 1 2025-09-14 05:03:26.403 00:00:10.368 TCP 23.104.0.1:41136 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:04:02.621 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 10 6452 1 2025-09-14 05:04:26.809 00:00:10.332 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:05:02.829 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40794 10 6452 1 2025-09-14 05:05:27.179 00:00:10.365 TCP 23.104.0.1:57066 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:06:03.070 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55294 10 6452 1 2025-09-14 05:02:28.186 00:05:00.891 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 05:06:27.585 00:00:10.366 TCP 23.104.0.1:46714 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:07:03.282 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48770 10 6452 1 2025-09-14 05:03:28.191 00:05:00.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 05:07:27.989 00:00:10.369 TCP 23.104.0.1:33578 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:07:52.719 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 05:07:52.837 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 05:08:03.457 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42132 10 6452 1 2025-09-14 05:08:28.397 00:00:10.358 TCP 23.104.0.1:51690 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:09:03.672 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46734 10 6452 1 2025-09-14 05:09:28.794 00:00:10.365 TCP 23.104.0.1:42070 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:10:03.892 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37294 10 6452 1 2025-09-14 05:10:29.197 00:00:10.367 TCP 23.104.0.1:57092 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:11:04.112 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60414 10 6452 1 2025-09-14 05:11:29.609 00:00:10.370 TCP 23.104.0.1:49332 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:12:04.285 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58950 10 6452 1 2025-09-14 05:08:28.191 00:05:00.888 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 05:12:30.020 00:00:10.362 TCP 23.104.0.1:39736 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:12:53.085 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 05:12:53.411 00:00:00.003 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 05:13:04.496 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56668 10 6452 1 2025-09-14 05:09:28.193 00:05:00.883 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 05:13:30.425 00:00:10.364 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:14:04.713 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54168 10 6452 1 2025-09-14 05:14:30.830 00:00:10.364 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:15:04.920 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:45884 12 6556 1 2025-09-14 05:15:31.234 00:00:10.364 TCP 23.104.0.1:38382 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:16:05.181 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54338 10 6452 1 2025-09-14 05:16:31.639 00:00:10.365 TCP 23.104.0.1:47972 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:17:05.354 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41652 10 6452 1 2025-09-14 05:17:32.050 00:00:10.367 TCP 23.104.0.1:37192 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:17:52.802 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 05:17:53.040 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 05:18:05.566 00:00:10.283 TCP 1.101.0.1:3000 -> 22.102.0.1:58132 10 6452 1 2025-09-14 05:14:28.191 00:05:00.891 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 05:18:32.474 00:00:10.384 TCP 23.104.0.1:37296 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:19:05.883 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57940 10 6452 1 2025-09-14 05:15:28.194 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 05:19:32.899 00:00:10.365 TCP 23.104.0.1:47030 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:20:06.104 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48122 10 6452 1 2025-09-14 05:20:33.306 00:00:10.368 TCP 23.104.0.1:45686 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:21:06.323 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60360 10 6452 1 2025-09-14 05:21:33.710 00:00:10.368 TCP 23.104.0.1:44130 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:22:06.557 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34760 10 6452 1 2025-09-14 05:22:34.115 00:00:10.362 TCP 23.104.0.1:47264 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:22:53.011 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 05:22:53.070 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 05:23:06.730 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53684 10 6452 1 2025-09-14 05:23:34.516 00:00:10.386 TCP 23.104.0.1:38876 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:24:06.904 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52604 10 6452 1 2025-09-14 05:20:28.193 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 05:24:34.941 00:00:10.397 TCP 23.104.0.1:55426 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:25:07.088 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56504 10 6452 1 2025-09-14 05:21:28.196 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 05:25:35.379 00:00:10.363 TCP 23.104.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:26:07.263 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58112 10 6452 1 2025-09-14 05:26:35.780 00:00:10.363 TCP 23.104.0.1:44416 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:27:07.476 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57890 10 6452 1 2025-09-14 05:27:36.182 00:00:10.363 TCP 23.104.0.1:47132 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:27:53.354 00:00:00.073 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 05:27:54.061 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 05:28:07.692 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34980 10 6452 1 2025-09-14 05:28:36.584 00:00:10.363 TCP 23.104.0.1:49696 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:29:07.902 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45158 10 6452 1 2025-09-14 05:29:36.993 00:00:10.384 TCP 23.104.0.1:39838 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:30:08.119 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:48516 10 6452 1 2025-09-14 05:26:28.196 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 05:30:37.424 00:00:10.365 TCP 23.104.0.1:35528 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:31:08.362 00:00:10.808 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-09-14 05:27:28.198 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 05:31:37.832 00:00:10.383 TCP 23.104.0.1:51586 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:32:09.216 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41590 10 6452 1 2025-09-14 05:32:38.255 00:00:10.364 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:32:53.272 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 05:32:52.966 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 05:33:09.389 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48422 10 6452 1 2025-09-14 05:33:38.655 00:00:10.365 TCP 23.104.0.1:43414 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:34:09.607 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37272 10 6452 1 2025-09-14 05:34:39.063 00:00:10.363 TCP 23.104.0.1:40514 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:35:09.824 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41082 10 6452 1 2025-09-14 05:35:39.465 00:00:10.367 TCP 23.104.0.1:45988 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:36:09.997 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36910 10 6452 1 2025-09-14 05:32:28.196 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 05:36:39.866 00:00:10.367 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:37:10.216 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60894 10 6452 1 2025-09-14 05:33:28.198 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 05:37:40.270 00:00:10.362 TCP 23.104.0.1:39586 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:37:53.384 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 05:37:53.476 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 05:38:10.427 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40746 10 6452 1 2025-09-14 05:38:40.676 00:00:10.380 TCP 23.104.0.1:56456 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:39:10.646 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46422 10 6452 1 2025-09-14 05:39:41.114 00:00:10.320 TCP 23.104.0.1:34636 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:40:10.858 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56276 10 6452 1 2025-09-14 05:40:41.473 00:00:10.324 TCP 23.104.0.1:37394 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:41:11.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52988 10 6452 1 2025-09-14 05:41:41.836 00:00:10.376 TCP 23.104.0.1:38982 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:42:11.295 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45778 10 6452 1 2025-09-14 05:38:28.196 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 05:42:53.607 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 05:42:53.510 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 05:42:42.252 00:00:10.366 TCP 23.104.0.1:56134 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:43:11.509 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41544 10 6452 1 2025-09-14 05:39:28.200 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 05:43:42.669 00:00:10.381 TCP 23.104.0.1:48154 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:44:11.723 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:49512 12 10367 1 2025-09-14 05:44:43.119 00:00:10.464 TCP 23.104.0.1:37634 -> 1.101.0.1:3000 15 1926 1 2025-09-14 05:45:11.958 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51386 10 6452 1 2025-09-14 05:45:43.623 00:00:10.368 TCP 23.104.0.1:36964 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:46:12.182 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:40072 10 6452 1 2025-09-14 05:46:44.027 00:00:10.328 TCP 23.104.0.1:57428 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:47:12.407 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54376 10 6452 1 2025-09-14 05:47:53.513 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 05:47:53.721 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 05:47:44.393 00:00:10.377 TCP 23.104.0.1:42500 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:48:12.630 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41530 10 6452 1 2025-09-14 05:44:28.198 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 05:48:44.807 00:00:10.443 TCP 23.104.0.1:56458 -> 1.101.0.1:3000 15 1926 1 2025-09-14 05:49:12.802 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:42704 12 10367 1 2025-09-14 05:45:28.200 00:05:00.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 05:49:45.294 00:00:10.323 TCP 23.104.0.1:60322 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:50:13.041 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42000 10 6452 1 2025-09-14 05:50:45.657 00:00:10.368 TCP 23.104.0.1:38322 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:51:13.258 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43378 10 6452 1 2025-09-14 05:51:46.095 00:00:10.368 TCP 23.104.0.1:41890 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:52:13.468 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52306 10 6452 1 2025-09-14 05:52:53.784 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 05:52:46.504 00:00:10.366 TCP 23.104.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:52:53.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 05:53:13.684 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43044 10 6452 1 2025-09-14 05:53:46.909 00:00:10.323 TCP 23.104.0.1:60700 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:54:13.895 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46856 10 6452 1 2025-09-14 05:50:28.200 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 05:54:47.275 00:00:10.326 TCP 23.104.0.1:36162 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:55:14.109 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56504 10 6452 1 2025-09-14 05:51:28.202 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 05:55:47.640 00:00:10.365 TCP 23.104.0.1:58710 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:56:14.319 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52560 10 6452 1 2025-09-14 05:56:48.044 00:00:10.363 TCP 23.104.0.1:45962 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:57:14.544 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59038 10 6452 1 2025-09-14 05:57:53.885 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 05:57:53.870 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 05:57:48.441 00:00:10.370 TCP 23.104.0.1:43850 -> 1.101.0.1:3000 11 1507 1 2025-09-14 05:58:14.760 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58128 10 6452 1 Summary: total flows: 163, total bytes: 505613, total packets: 1575, avg bps: 1088, avg pps: 0, avg bpp: 321 Time window: 2025-09-14 04:56:28 - 2025-09-14 05:58:24 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0011s Wall: 0.0024s flows/second: 67244.2 Runtime: 0.0024s