Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 01:59:00.979 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:49990 10 6452 1 2025-10-04 01:59:38.106 00:00:10.372 TCP 23.104.0.1:44138 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:00:01.220 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 2025-10-04 01:56:37.334 00:05:01.918 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 02:00:38.518 00:00:10.370 TCP 23.104.0.1:44736 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:01:01.440 00:00:10.551 TCP 1.101.0.1:3000 -> 22.102.0.1:60836 10 6452 1 2025-10-04 01:57:37.336 00:05:01.912 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 02:01:38.922 00:00:10.331 TCP 23.104.0.1:60772 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:02:02.067 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39454 10 6452 1 2025-10-04 02:02:26.641 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 02:02:26.994 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 02:02:39.289 00:00:10.365 TCP 23.104.0.1:49560 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:03:02.285 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44988 10 6452 1 2025-10-04 02:03:39.691 00:00:10.368 TCP 23.104.0.1:58372 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:04:02.510 00:00:10.519 TCP 1.101.0.1:3000 -> 22.102.0.1:35114 10 6452 1 2025-10-04 02:04:40.109 00:00:10.365 TCP 23.104.0.1:46986 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:05:03.081 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53878 10 6452 1 2025-10-04 02:05:40.511 00:00:10.367 TCP 23.104.0.1:55610 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:06:03.289 00:00:10.674 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 2025-10-04 02:02:37.334 00:05:01.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 02:06:40.917 00:00:10.370 TCP 23.104.0.1:35390 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:07:04.005 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50644 10 6452 1 2025-10-04 02:07:26.869 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 02:07:26.710 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 02:03:37.337 00:05:01.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 02:07:41.331 00:00:10.420 TCP 23.104.0.1:47048 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:08:04.227 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:47622 10 6452 1 2025-10-04 02:08:41.785 00:00:10.368 TCP 23.104.0.1:58490 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:09:04.477 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44592 10 6452 1 2025-10-04 02:09:42.195 00:00:10.327 TCP 23.104.0.1:60562 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:10:04.704 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53296 10 6452 1 2025-10-04 02:10:42.560 00:00:10.366 TCP 23.104.0.1:58390 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:11:04.931 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:46744 10 6452 1 2025-10-04 02:11:42.963 00:00:10.329 TCP 23.104.0.1:45842 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:12:05.187 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39946 10 6452 1 2025-10-04 02:12:26.495 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 02:12:27.241 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 02:08:37.336 00:05:01.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 02:12:43.327 00:00:10.365 TCP 23.104.0.1:41640 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:13:05.402 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37304 10 6452 1 2025-10-04 02:09:37.337 00:05:01.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 02:13:43.727 00:00:10.373 TCP 23.104.0.1:57090 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:14:05.572 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35306 10 6452 1 2025-10-04 02:14:44.139 00:00:10.361 TCP 23.104.0.1:47608 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:15:05.741 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:49550 11 6504 1 2025-10-04 02:15:44.540 00:00:10.320 TCP 23.104.0.1:51390 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:16:06.013 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46148 10 6452 1 2025-10-04 02:16:44.898 00:00:12.067 TCP 23.104.0.1:57206 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:17:06.226 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47378 10 6452 1 2025-10-04 02:17:26.860 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 02:17:26.929 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 02:17:47.025 00:00:10.368 TCP 23.104.0.1:57788 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:18:06.434 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:48486 10 6452 1 2025-10-04 02:14:37.336 00:05:01.922 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 02:18:47.430 00:00:10.373 TCP 23.104.0.1:49854 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:19:06.598 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41256 10 6452 1 2025-10-04 02:15:37.340 00:05:01.917 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 02:19:47.840 00:00:10.387 TCP 23.104.0.1:38998 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:20:06.822 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40836 10 6452 1 2025-10-04 02:20:48.266 00:00:10.367 TCP 23.104.0.1:37982 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:21:07.072 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54448 10 6452 1 2025-10-04 02:21:48.670 00:00:10.367 TCP 23.104.0.1:57246 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:22:07.291 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58732 10 6452 1 2025-10-04 02:22:26.959 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 02:22:27.160 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 02:22:49.103 00:00:10.368 TCP 23.104.0.1:41522 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:23:07.513 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39874 10 6452 1 2025-10-04 02:23:49.508 00:00:10.363 TCP 23.104.0.1:39368 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:24:07.734 00:00:15.629 TCP 1.101.0.1:3000 -> 22.102.0.1:50082 10 6452 1 2025-10-04 02:20:37.339 00:05:01.921 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 02:24:49.910 00:00:10.367 TCP 23.104.0.1:53328 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:25:13.411 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:39036 10 6452 1 2025-10-04 02:21:37.343 00:05:01.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 02:25:50.311 00:00:10.328 TCP 23.104.0.1:54640 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:26:13.685 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55122 10 6452 1 2025-10-04 02:26:50.678 00:00:15.266 TCP 23.104.0.1:38374 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:27:13.902 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56222 10 6452 1 2025-10-04 02:27:28.541 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 02:27:27.903 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 02:27:56.012 00:00:10.325 TCP 23.104.0.1:46130 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:28:14.121 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41594 10 6452 1 2025-10-04 02:28:56.378 00:00:10.356 TCP 23.104.0.1:45030 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:29:14.342 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41418 10 6452 1 2025-10-04 02:29:56.786 00:00:10.366 TCP 23.104.0.1:46076 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:30:14.562 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50728 10 6452 1 2025-10-04 02:26:37.341 00:05:01.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 02:30:57.191 00:00:10.332 TCP 23.104.0.1:55466 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:31:14.781 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52218 10 6452 1 2025-10-04 02:27:37.345 00:05:01.913 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 02:31:57.562 00:00:10.375 TCP 23.104.0.1:48022 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:32:27.344 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 02:32:15.039 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47146 10 6452 1 2025-10-04 02:32:27.009 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 02:32:57.976 00:00:10.334 TCP 23.104.0.1:54924 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:33:15.255 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39482 10 6452 1 2025-10-04 02:33:58.347 00:00:10.379 TCP 23.104.0.1:41320 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:34:15.466 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:52390 10 6452 1 2025-10-04 02:34:58.757 00:00:10.327 TCP 23.104.0.1:38704 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:35:15.633 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34060 10 6452 1 2025-10-04 02:35:59.125 00:00:10.370 TCP 23.104.0.1:56656 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:36:15.843 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51056 10 6452 1 2025-10-04 02:32:37.346 00:05:01.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 02:36:59.540 00:00:10.367 TCP 23.104.0.1:52984 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:37:16.028 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60860 10 6452 1 2025-10-04 02:37:27.630 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 02:37:27.535 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 02:33:37.347 00:05:01.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 02:37:59.951 00:00:10.364 TCP 23.104.0.1:33518 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:38:16.207 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46884 10 6452 1 2025-10-04 02:39:00.353 00:00:10.363 TCP 23.104.0.1:53162 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:39:16.420 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33292 10 6452 1 2025-10-04 02:40:00.756 00:00:10.380 TCP 23.104.0.1:37936 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:40:16.589 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36926 10 6452 1 2025-10-04 02:41:01.174 00:00:10.371 TCP 23.104.0.1:50864 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:41:16.799 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60800 10 6452 1 2025-10-04 02:42:01.582 00:00:10.369 TCP 23.104.0.1:38164 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:42:16.974 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:44316 10 6452 1 2025-10-04 02:42:27.758 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 02:42:27.425 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 02:38:37.346 00:05:01.916 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 02:43:01.982 00:00:10.365 TCP 23.104.0.1:59428 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:43:17.167 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39108 10 6452 1 2025-10-04 02:39:37.350 00:05:01.908 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 02:44:02.387 00:00:10.372 TCP 23.104.0.1:33746 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:44:17.388 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-10-04 02:45:02.788 00:00:10.369 TCP 23.104.0.1:57000 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:45:17.616 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43086 10 6452 1 2025-10-04 02:46:03.194 00:00:10.371 TCP 23.104.0.1:49062 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:46:17.833 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50392 10 6452 1 2025-10-04 02:47:03.603 00:00:10.378 TCP 23.104.0.1:45480 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:47:18.071 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34830 10 6452 1 2025-10-04 02:47:27.943 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 02:47:27.834 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 02:48:04.021 00:00:10.374 TCP 23.104.0.1:43204 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:48:18.247 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33016 10 6452 1 2025-10-04 02:44:37.349 00:05:01.913 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 02:49:04.435 00:00:10.367 TCP 23.104.0.1:43414 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:49:18.462 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47634 10 6452 1 2025-10-04 02:45:37.350 00:05:01.909 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 02:50:04.837 00:00:10.435 TCP 23.104.0.1:48920 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:50:18.679 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60134 10 6452 1 2025-10-04 02:51:05.310 00:00:10.356 TCP 23.104.0.1:44134 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:51:18.851 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38030 10 6452 1 2025-10-04 02:52:05.706 00:00:10.363 TCP 23.104.0.1:54096 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:52:27.864 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 02:52:27.883 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 02:52:19.080 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:36564 10 6452 1 2025-10-04 02:53:06.109 00:00:10.363 TCP 23.104.0.1:53678 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:53:19.323 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58596 10 6452 1 2025-10-04 02:54:06.517 00:00:10.369 TCP 23.104.0.1:41352 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:54:19.536 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41470 10 6452 1 2025-10-04 02:50:37.348 00:05:01.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 02:55:06.926 00:00:10.384 TCP 23.104.0.1:41826 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:55:19.743 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55684 10 6452 1 2025-10-04 02:51:37.352 00:05:01.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 02:56:07.345 00:00:10.370 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:56:19.961 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37198 10 6452 1 2025-10-04 02:57:07.758 00:00:10.385 TCP 23.104.0.1:48834 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:57:27.825 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 02:57:20.183 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:55370 10 6452 1 2025-10-04 02:57:27.891 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 02:58:08.198 00:00:10.372 TCP 23.104.0.1:33514 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:58:20.355 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42222 10 6452 1 Summary: total flows: 163, total bytes: 496893, total packets: 1562, avg bps: 1070, avg pps: 0, avg bpp: 318 Time window: 2025-10-04 01:56:37 - 2025-10-04 02:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0010s Wall: 0.0017s flows/second: 97779.1 Runtime: 0.0017s