Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 00:58:50.590 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50806 10 6452 1 2025-09-20 00:59:22.361 00:00:10.331 TCP 23.104.0.1:60908 -> 1.101.0.1:3000 11 1507 1 2025-09-20 00:59:50.811 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35240 10 6452 1 2025-09-20 00:56:30.831 00:05:01.332 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 01:00:22.747 00:00:10.363 TCP 23.104.0.1:34920 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:00:41.033 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 01:00:41.250 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 01:00:51.036 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52204 10 6452 1 2025-09-20 00:57:30.835 00:05:01.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 01:01:23.146 00:00:10.365 TCP 23.104.0.1:60432 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:01:51.250 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34908 10 6452 1 2025-09-20 01:02:23.552 00:00:10.373 TCP 23.104.0.1:34014 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:02:51.459 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35982 10 6452 1 2025-09-20 01:03:23.964 00:00:10.381 TCP 23.104.0.1:47978 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:03:51.668 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36366 10 6452 1 2025-09-20 01:04:24.383 00:00:10.368 TCP 23.104.0.1:34902 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:04:51.880 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57504 10 6452 1 2025-09-20 01:05:24.786 00:00:10.369 TCP 23.104.0.1:52160 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:05:41.318 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 01:05:41.240 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 01:05:52.105 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56226 10 6452 1 2025-09-20 01:02:30.834 00:05:01.331 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 01:06:25.190 00:00:18.188 TCP 23.104.0.1:59764 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:06:52.326 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35040 10 6452 1 2025-09-20 01:03:30.834 00:05:01.327 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 01:07:33.444 00:00:10.367 TCP 23.104.0.1:52700 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:07:52.503 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60434 10 6452 1 2025-09-20 01:08:33.850 00:00:10.380 TCP 23.104.0.1:36456 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:08:52.719 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42574 10 6452 1 2025-09-20 01:09:34.272 00:00:10.370 TCP 23.104.0.1:50180 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:09:52.930 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46966 10 6452 1 2025-09-20 01:10:41.873 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 01:10:42.188 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 01:10:34.682 00:00:10.325 TCP 23.104.0.1:33264 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:10:53.158 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35644 10 6452 1 2025-09-20 01:11:35.052 00:00:10.370 TCP 23.104.0.1:53504 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:11:53.338 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38322 10 6452 1 2025-09-20 01:08:30.834 00:05:01.331 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 01:12:35.456 00:00:10.361 TCP 23.104.0.1:53950 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:12:53.554 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:32912 10 6452 1 2025-09-20 01:09:30.836 00:05:01.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 01:13:35.857 00:00:10.374 TCP 23.104.0.1:48368 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:13:53.787 00:00:10.494 TCP 1.101.0.1:3000 -> 22.102.0.1:33296 10 6452 1 2025-09-20 01:14:36.271 00:00:10.362 TCP 23.104.0.1:45762 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:14:54.323 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59680 10 6452 1 2025-09-20 01:15:41.386 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 01:15:41.454 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 01:15:36.674 00:00:10.380 TCP 23.104.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:15:54.546 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42136 10 6452 1 2025-09-20 01:16:37.105 00:00:10.369 TCP 23.104.0.1:35964 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:16:54.767 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58382 10 6452 1 2025-09-20 01:17:37.512 00:00:10.363 TCP 23.104.0.1:59614 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:17:54.982 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47806 10 6452 1 2025-09-20 01:14:30.834 00:05:01.331 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 01:18:37.915 00:00:10.367 TCP 23.104.0.1:43258 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:18:55.220 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53996 10 6452 1 2025-09-20 01:15:30.838 00:05:01.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 01:19:38.313 00:00:10.324 TCP 23.104.0.1:54286 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:19:55.436 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44252 10 6452 1 2025-09-20 01:20:41.642 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 01:20:41.586 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 01:20:38.672 00:00:10.361 TCP 23.104.0.1:43050 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:20:55.657 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55694 10 6452 1 2025-09-20 01:21:39.096 00:00:10.370 TCP 23.104.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:21:55.878 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51384 10 6452 1 2025-09-20 01:22:39.503 00:00:10.365 TCP 23.104.0.1:34494 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:22:56.074 00:00:10.393 TCP 1.101.0.1:3000 -> 22.102.0.1:59632 10 6452 1 2025-09-20 01:23:39.908 00:00:10.365 TCP 23.104.0.1:36744 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:23:56.498 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43916 10 6452 1 2025-09-20 01:20:30.837 00:05:01.330 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 01:24:40.312 00:00:10.374 TCP 23.104.0.1:40836 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:24:56.721 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:55456 10 6452 1 2025-09-20 01:25:41.753 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 01:21:30.840 00:05:01.325 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 01:25:41.810 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 01:25:40.725 00:00:10.369 TCP 23.104.0.1:40780 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:25:56.905 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37140 10 6452 1 2025-09-20 01:26:41.132 00:00:10.371 TCP 23.104.0.1:57356 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:26:57.118 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57130 10 6452 1 2025-09-20 01:27:41.541 00:00:10.325 TCP 23.104.0.1:34224 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:27:57.294 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57824 10 6452 1 2025-09-20 01:28:41.904 00:00:10.365 TCP 23.104.0.1:47788 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:28:57.519 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43442 10 6452 1 2025-09-20 01:29:42.304 00:00:10.325 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:29:57.740 00:00:10.684 TCP 1.101.0.1:3000 -> 22.102.0.1:39036 10 6452 1 2025-09-20 01:26:30.838 00:05:01.331 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 01:30:41.987 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 01:30:42.043 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 01:30:42.672 00:00:10.565 TCP 23.104.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:30:58.463 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38220 10 6452 1 2025-09-20 01:27:30.840 00:05:01.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 01:31:43.276 00:00:10.397 TCP 23.104.0.1:46740 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:31:58.676 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51962 10 6452 1 2025-09-20 01:32:43.725 00:00:10.491 TCP 23.104.0.1:36362 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:32:58.890 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52602 10 6452 1 2025-09-20 01:33:44.256 00:00:10.364 TCP 23.104.0.1:52136 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:33:59.107 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48704 10 6452 1 2025-09-20 01:34:44.659 00:00:10.332 TCP 23.104.0.1:60976 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:34:59.317 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36628 10 6452 1 2025-09-20 01:35:41.715 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 01:35:41.892 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 01:35:45.029 00:00:10.363 TCP 23.104.0.1:40352 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:35:59.548 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38276 10 6452 1 2025-09-20 01:32:30.840 00:05:01.331 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 01:36:45.429 00:00:10.364 TCP 23.104.0.1:47168 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:36:59.725 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38618 10 6452 1 2025-09-20 01:33:30.841 00:05:01.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 01:37:45.833 00:00:10.338 TCP 23.104.0.1:49402 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:37:59.942 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45452 10 6452 1 2025-09-20 01:38:46.213 00:00:10.364 TCP 23.104.0.1:45134 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:39:00.171 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55836 10 6452 1 2025-09-20 01:39:46.615 00:00:10.364 TCP 23.104.0.1:45014 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:40:00.352 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48664 10 6452 1 2025-09-20 01:40:41.928 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 01:40:41.836 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 01:40:47.019 00:00:10.367 TCP 23.104.0.1:58268 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:41:00.572 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45552 10 6452 1 2025-09-20 01:41:47.425 00:00:10.328 TCP 23.104.0.1:39400 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:42:00.746 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45642 10 6452 1 2025-09-20 01:38:30.839 00:05:01.344 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 01:42:47.788 00:00:13.098 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:43:00.964 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44624 10 6452 1 2025-09-20 01:39:30.842 00:05:01.337 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 01:43:50.927 00:00:10.386 TCP 23.104.0.1:53512 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:44:01.195 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48690 10 6452 1 2025-09-20 01:44:51.353 00:00:10.364 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:45:01.407 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37646 10 6452 1 2025-09-20 01:45:41.975 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 01:45:41.965 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 01:45:51.759 00:00:10.326 TCP 23.104.0.1:47368 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:46:01.616 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57592 10 6452 1 2025-09-20 01:46:52.127 00:00:10.892 TCP 23.104.0.1:48120 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:47:01.855 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46346 10 6452 1 2025-09-20 01:47:53.079 00:00:10.361 TCP 23.104.0.1:58702 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:48:02.090 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48058 10 6452 1 2025-09-20 01:44:30.840 00:05:01.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 01:48:53.483 00:00:10.370 TCP 23.104.0.1:60090 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:49:02.311 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40664 10 6452 1 2025-09-20 01:45:30.848 00:05:01.333 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 01:49:53.889 00:00:10.389 TCP 23.104.0.1:36042 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:50:02.522 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59530 10 6452 1 2025-09-20 01:50:42.413 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 01:50:42.388 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 01:50:54.309 00:00:10.363 TCP 23.104.0.1:43434 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:51:02.735 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48650 10 6452 1 2025-09-20 01:51:54.714 00:00:10.370 TCP 23.104.0.1:52374 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:52:02.941 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37106 10 6452 1 2025-09-20 01:52:55.125 00:00:10.359 TCP 23.104.0.1:36222 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:53:03.176 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39454 10 6452 1 2025-09-20 01:53:55.526 00:00:11.027 TCP 23.104.0.1:54576 -> 1.101.0.1:3000 13 1611 1 2025-09-20 01:54:03.397 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39446 10 6452 1 2025-09-20 01:50:30.846 00:05:01.338 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 01:54:57.237 00:00:10.368 TCP 23.104.0.1:60690 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:55:03.610 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43834 10 6452 1 2025-09-20 01:51:30.849 00:05:01.335 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 01:55:42.382 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 01:55:42.199 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 01:55:57.645 00:00:10.367 TCP 23.104.0.1:46148 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:56:03.823 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38274 10 6452 1 2025-09-20 01:56:58.061 00:00:10.358 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:57:04.062 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59908 10 6452 1 2025-09-20 01:57:58.458 00:00:10.368 TCP 23.104.0.1:53068 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:58:04.286 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39264 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1073, avg pps: 0, avg bpp: 317 Time window: 2025-09-20 00:56:30 - 2025-09-20 01:58:14 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0019s User: 0.0028s Wall: 0.0021s flows/second: 79202.0 Runtime: 0.0021s