Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 02:58:45.211 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55694 10 6452 1 2025-09-16 02:59:16.764 00:00:10.373 TCP 23.104.0.1:36560 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:59:45.423 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49584 10 6452 1 2025-09-16 02:56:28.982 00:05:01.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 03:00:17.175 00:00:10.360 TCP 23.104.0.1:36750 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:00:45.638 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41862 10 6452 1 2025-09-16 02:57:28.983 00:05:01.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 03:01:17.574 00:00:10.366 TCP 23.104.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:01:45.859 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35872 10 6452 1 2025-09-16 03:02:17.981 00:00:10.376 TCP 23.104.0.1:55110 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:02:46.090 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50940 10 6452 1 2025-09-16 03:03:18.392 00:00:10.364 TCP 23.104.0.1:40260 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:03:48.033 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 03:03:48.019 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 03:03:46.264 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42134 10 6452 1 2025-09-16 03:04:18.793 00:00:10.376 TCP 23.104.0.1:33262 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:04:46.477 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57538 10 6452 1 2025-09-16 03:05:19.204 00:00:10.370 TCP 23.104.0.1:53318 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:05:46.695 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33434 10 6452 1 2025-09-16 03:06:19.608 00:00:10.370 TCP 23.104.0.1:39844 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:02:28.987 00:05:01.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 03:06:46.911 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40854 10 6452 1 2025-09-16 03:03:28.990 00:05:01.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 03:07:20.021 00:00:10.326 TCP 23.104.0.1:50740 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:07:47.089 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53932 10 6452 1 2025-09-16 03:08:20.381 00:00:10.364 TCP 23.104.0.1:44372 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:08:48.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 03:08:48.296 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 03:08:47.304 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52108 10 6452 1 2025-09-16 03:09:20.780 00:00:10.326 TCP 23.104.0.1:59436 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:09:47.518 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40182 10 6452 1 2025-09-16 03:10:21.142 00:00:10.420 TCP 23.104.0.1:57058 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:10:47.734 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:60820 10 6452 1 2025-09-16 03:11:21.605 00:00:10.327 TCP 23.104.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:11:47.973 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:51132 10 6452 1 2025-09-16 03:08:28.988 00:05:01.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 03:12:21.971 00:00:10.366 TCP 23.104.0.1:59460 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:12:48.158 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48034 10 6452 1 2025-09-16 03:09:28.992 00:05:01.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 03:13:22.379 00:00:10.363 TCP 23.104.0.1:34370 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:13:48.037 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 03:13:48.499 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 03:13:48.329 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39780 10 6452 1 2025-09-16 03:14:22.779 00:00:10.376 TCP 23.104.0.1:58726 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:14:48.537 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53844 10 6452 1 2025-09-16 03:15:23.194 00:00:10.692 TCP 23.104.0.1:57198 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:15:48.753 00:00:17.582 TCP 1.101.0.1:3000 -> 22.102.0.1:49964 10 6452 1 2025-09-16 03:16:23.923 00:00:10.392 TCP 23.104.0.1:37194 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:16:56.411 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59984 10 6452 1 2025-09-16 03:17:24.353 00:00:10.368 TCP 23.104.0.1:36362 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:17:56.581 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56118 10 6452 1 2025-09-16 03:14:28.991 00:05:01.127 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 03:18:24.759 00:00:10.375 TCP 23.104.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:18:48.247 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 03:18:48.503 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 03:18:56.802 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56352 10 6452 1 2025-09-16 03:15:28.993 00:05:01.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 03:19:25.172 00:00:10.368 TCP 23.104.0.1:58828 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:19:57.025 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37280 10 6452 1 2025-09-16 03:20:25.580 00:00:10.362 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:20:57.242 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44648 10 6452 1 2025-09-16 03:21:25.978 00:00:10.366 TCP 23.104.0.1:51258 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:21:57.462 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52158 10 6452 1 2025-09-16 03:22:26.382 00:00:10.361 TCP 23.104.0.1:43394 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:22:57.639 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37450 10 6452 1 2025-09-16 03:23:26.783 00:00:10.372 TCP 23.104.0.1:38618 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:23:48.284 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 03:23:48.572 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 03:23:57.853 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33684 10 6452 1 2025-09-16 03:20:28.990 00:05:01.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 03:24:27.190 00:00:10.365 TCP 23.104.0.1:56516 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:24:58.035 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50566 10 6452 1 2025-09-16 03:21:28.994 00:05:01.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 03:25:27.593 00:00:10.368 TCP 23.104.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:25:58.247 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57544 10 6452 1 2025-09-16 03:26:28.001 00:00:10.363 TCP 23.104.0.1:56032 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:26:58.468 00:00:10.324 TCP 1.101.0.1:3000 -> 22.102.0.1:52654 10 6452 1 2025-09-16 03:27:28.404 00:00:10.358 TCP 23.104.0.1:38816 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:27:58.825 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43082 10 6452 1 2025-09-16 03:28:28.803 00:00:10.387 TCP 23.104.0.1:33260 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:28:48.506 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 03:28:48.733 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 03:28:59.073 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45592 10 6452 1 2025-09-16 03:29:29.225 00:00:10.361 TCP 23.104.0.1:34584 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:29:59.291 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48132 10 6452 1 2025-09-16 03:26:28.993 00:05:01.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 03:30:29.627 00:00:10.364 TCP 23.104.0.1:34086 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:30:59.509 00:00:10.865 TCP 1.101.0.1:3000 -> 22.102.0.1:43278 10 6452 1 2025-09-16 03:27:28.996 00:05:01.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 03:31:30.028 00:00:10.362 TCP 23.104.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:32:00.416 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48796 10 6452 1 2025-09-16 03:32:30.430 00:00:10.365 TCP 23.104.0.1:50546 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:33:00.635 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34636 10 6452 1 2025-09-16 03:33:30.839 00:00:10.355 TCP 23.104.0.1:51424 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:33:48.765 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 03:33:48.711 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 03:34:00.847 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59922 10 6452 1 2025-09-16 03:34:31.226 00:00:10.368 TCP 23.104.0.1:45554 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:35:01.082 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45288 10 6452 1 2025-09-16 03:35:31.629 00:00:10.363 TCP 23.104.0.1:34178 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:36:01.254 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41880 10 6452 1 2025-09-16 03:32:28.994 00:05:01.127 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 03:36:32.027 00:00:10.326 TCP 23.104.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:37:01.477 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43344 10 6452 1 2025-09-16 03:33:28.996 00:05:01.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 03:37:32.392 00:00:10.372 TCP 23.104.0.1:51570 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:38:01.707 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36276 10 6452 1 2025-09-16 03:38:32.806 00:00:10.364 TCP 23.104.0.1:45272 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:38:48.700 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 03:38:48.896 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 03:39:01.927 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:41594 10 6452 1 2025-09-16 03:39:33.213 00:00:10.369 TCP 23.104.0.1:45642 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:40:02.169 00:00:13.109 TCP 1.101.0.1:3000 -> 22.102.0.1:42338 10 6452 1 2025-09-16 03:40:33.624 00:00:10.369 TCP 23.104.0.1:50952 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:41:05.331 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48812 10 6452 1 2025-09-16 03:41:34.044 00:00:10.325 TCP 23.104.0.1:34422 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:42:05.507 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47730 10 6452 1 2025-09-16 03:38:28.997 00:05:01.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 03:42:34.405 00:00:10.322 TCP 23.104.0.1:35396 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:43:05.685 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53476 10 6452 1 2025-09-16 03:39:28.997 00:05:01.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 03:43:34.765 00:00:10.375 TCP 23.104.0.1:53936 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:43:48.839 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 03:43:48.868 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 03:44:05.863 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57268 10 6452 1 2025-09-16 03:44:35.175 00:00:10.365 TCP 23.104.0.1:40718 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:45:06.096 00:00:10.967 TCP 1.101.0.1:3000 -> 22.102.0.1:46452 10 6452 1 2025-09-16 03:45:35.578 00:00:10.365 TCP 23.104.0.1:34026 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:46:07.103 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48002 10 6452 1 2025-09-16 03:46:35.980 00:00:10.370 TCP 23.104.0.1:47560 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:47:07.320 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35360 10 6452 1 2025-09-16 03:47:36.390 00:00:10.364 TCP 23.104.0.1:50884 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:48:07.538 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 10 6452 1 2025-09-16 03:44:28.996 00:05:01.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 03:48:49.191 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 03:48:48.983 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 03:48:36.789 00:00:10.328 TCP 23.104.0.1:49836 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:49:07.752 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50530 10 6452 1 2025-09-16 03:45:29.000 00:05:01.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 03:49:37.154 00:00:10.365 TCP 23.104.0.1:41910 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:50:07.965 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:58340 10 6452 1 2025-09-16 03:50:37.556 00:00:10.374 TCP 23.104.0.1:48272 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:51:08.213 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34306 10 6452 1 2025-09-16 03:51:37.965 00:00:10.377 TCP 23.104.0.1:56218 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:52:08.432 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35982 10 6452 1 2025-09-16 03:52:38.383 00:00:10.327 TCP 23.104.0.1:33478 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:53:08.643 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57180 10 6452 1 2025-09-16 03:53:49.351 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 03:53:38.747 00:00:10.393 TCP 23.104.0.1:58974 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:53:49.133 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 03:54:08.863 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:41600 10 6452 1 2025-09-16 03:50:28.999 00:05:01.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 03:54:39.174 00:00:10.339 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:55:09.076 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59486 10 6452 1 2025-09-16 03:51:29.001 00:05:01.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 03:55:39.548 00:00:10.324 TCP 23.104.0.1:34338 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:56:09.298 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6452 1 2025-09-16 03:56:39.914 00:00:10.375 TCP 23.104.0.1:46716 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:57:09.523 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44816 10 6452 1 2025-09-16 03:57:40.323 00:00:10.364 TCP 23.104.0.1:33904 -> 1.101.0.1:3000 11 1507 1 2025-09-16 03:58:09.742 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36882 10 6452 1 2025-09-16 03:58:49.316 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 03:58:49.296 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 03:58:40.724 00:00:10.366 TCP 23.104.0.1:57844 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1065, avg pps: 0, avg bpp: 317 Time window: 2025-09-16 02:56:28 - 2025-09-16 03:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0010s Wall: 0.0018s flows/second: 88975.0 Runtime: 0.0019s