Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-29 01:58:57.962 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39298 10 6452 1 2025-08-29 01:59:38.362 00:00:10.366 TCP 23.104.0.1:56450 -> 1.101.0.1:3000 11 1507 1 2025-08-29 01:59:59.631 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 01:59:59.498 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 01:59:58.194 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44794 10 6452 1 2025-08-29 02:00:38.767 00:00:10.328 TCP 23.104.0.1:44374 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:00:58.414 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46878 10 6452 1 2025-08-29 01:56:20.113 00:06:00.064 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 02:01:39.134 00:00:10.370 TCP 23.104.0.1:34388 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:01:58.635 00:00:10.279 TCP 1.101.0.1:3000 -> 22.102.0.1:50300 10 6452 1 2025-08-29 02:02:39.543 00:00:10.362 TCP 23.104.0.1:60210 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:02:58.964 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43100 10 6452 1 2025-08-29 01:58:20.111 00:06:00.070 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 02:03:39.944 00:00:10.371 TCP 23.104.0.1:44580 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:03:59.143 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57156 10 6452 1 2025-08-29 02:04:40.357 00:00:10.364 TCP 23.104.0.1:45354 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:04:59.640 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 02:04:59.892 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 02:04:59.353 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55576 10 6452 1 2025-08-29 02:05:40.766 00:00:10.373 TCP 23.104.0.1:59234 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:05:59.523 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38652 10 6452 1 2025-08-29 02:06:41.175 00:00:10.361 TCP 23.104.0.1:59564 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:06:59.741 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45884 10 6452 1 2025-08-29 02:07:41.581 00:00:10.383 TCP 23.104.0.1:33416 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:07:59.955 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51016 10 6452 1 2025-08-29 02:03:20.117 00:06:00.062 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 02:08:42.017 00:00:10.362 TCP 23.104.0.1:44940 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:09:00.135 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49732 10 6452 1 2025-08-29 02:09:42.418 00:00:10.366 TCP 23.104.0.1:58014 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:09:59.794 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 02:09:59.744 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 02:10:00.345 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32882 10 6452 1 2025-08-29 02:05:20.124 00:06:00.064 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 02:10:42.824 00:00:10.363 TCP 23.104.0.1:41948 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:11:00.561 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50124 10 6452 1 2025-08-29 02:11:43.221 00:00:10.364 TCP 23.104.0.1:46080 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:12:00.785 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51384 10 6452 1 2025-08-29 02:12:43.624 00:00:10.335 TCP 23.104.0.1:49776 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:13:00.995 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38832 10 6452 1 2025-08-29 02:13:44.000 00:00:10.365 TCP 23.104.0.1:59872 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:14:01.224 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54340 10 6452 1 2025-08-29 02:14:44.405 00:00:10.372 TCP 23.104.0.1:40252 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:14:59.984 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 02:14:59.912 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 02:15:01.450 00:00:10.331 TCP 1.101.0.1:3000 -> 22.102.0.1:59990 10 6452 1 2025-08-29 02:10:20.129 00:06:00.057 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 02:15:44.812 00:00:10.357 TCP 23.104.0.1:48116 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:16:01.822 00:00:10.540 TCP 1.101.0.1:3000 -> 22.102.0.1:60874 10 6452 1 2025-08-29 02:16:45.213 00:00:10.365 TCP 23.104.0.1:40136 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:17:02.406 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-08-29 02:12:20.128 00:06:00.062 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 02:17:45.619 00:00:10.378 TCP 23.104.0.1:35664 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:18:02.579 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-08-29 02:18:46.031 00:00:10.367 TCP 23.104.0.1:36710 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:19:02.791 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60126 10 6452 1 2025-08-29 02:19:46.436 00:00:10.368 TCP 23.104.0.1:59382 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:20:00.149 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 02:20:00.526 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 02:20:03.001 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60272 10 6452 1 2025-08-29 02:20:46.836 00:00:10.344 TCP 23.104.0.1:59858 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:21:03.176 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38924 10 6452 1 2025-08-29 02:21:47.220 00:00:10.368 TCP 23.104.0.1:36076 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:22:03.400 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44424 10 6452 1 2025-08-29 02:17:20.129 00:06:00.058 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 02:22:47.627 00:00:10.368 TCP 23.104.0.1:37720 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:23:03.616 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39726 10 6452 1 2025-08-29 02:23:48.035 00:00:10.325 TCP 23.104.0.1:39028 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:24:03.794 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57542 10 6452 1 2025-08-29 02:19:20.129 00:06:00.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 02:25:00.317 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 02:25:00.526 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 02:24:48.401 00:00:10.363 TCP 23.104.0.1:37618 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:25:04.009 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34182 10 6452 1 2025-08-29 02:25:48.801 00:00:10.944 TCP 23.104.0.1:56386 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:26:04.221 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57064 10 6452 1 2025-08-29 02:26:49.784 00:00:10.365 TCP 23.104.0.1:34732 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:27:04.430 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42974 10 6452 1 2025-08-29 02:27:50.184 00:00:10.386 TCP 23.104.0.1:49916 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:28:04.602 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54278 10 6452 1 2025-08-29 02:28:50.599 00:00:10.361 TCP 23.104.0.1:58404 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:29:04.786 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40090 10 6452 1 2025-08-29 02:24:20.132 00:06:00.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 02:30:00.390 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 02:29:51.001 00:00:10.365 TCP 23.104.0.1:51200 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:30:00.311 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 02:30:05.007 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58254 10 6452 1 2025-08-29 02:30:51.402 00:00:10.365 TCP 23.104.0.1:49876 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:31:05.184 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39082 10 6452 1 2025-08-29 02:26:20.130 00:06:00.081 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 02:31:51.806 00:00:10.408 TCP 23.104.0.1:48570 -> 1.101.0.1:3000 15 1926 1 2025-08-29 02:32:05.392 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:51210 12 10367 1 2025-08-29 02:32:52.256 00:00:10.362 TCP 23.104.0.1:54746 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:33:05.652 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54066 10 6452 1 2025-08-29 02:33:52.657 00:00:10.361 TCP 23.104.0.1:36660 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:34:05.872 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48208 10 6452 1 2025-08-29 02:35:00.509 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 02:35:00.241 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 02:34:53.058 00:00:10.330 TCP 23.104.0.1:54402 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:35:06.112 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40474 10 6452 1 2025-08-29 02:35:53.426 00:00:10.361 TCP 23.104.0.1:44016 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:36:06.331 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56930 10 6452 1 2025-08-29 02:31:20.133 00:06:00.078 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 02:36:53.824 00:00:10.368 TCP 23.104.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:37:06.545 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47892 10 6452 1 2025-08-29 02:37:54.230 00:00:10.365 TCP 23.104.0.1:41094 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:38:06.718 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39182 10 6452 1 2025-08-29 02:33:20.132 00:06:00.082 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 02:38:54.625 00:00:10.364 TCP 23.104.0.1:39120 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:39:06.940 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49094 10 6452 1 2025-08-29 02:40:00.455 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 02:40:00.413 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 02:39:55.028 00:00:10.369 TCP 23.104.0.1:56428 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:40:07.177 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38302 10 6452 1 2025-08-29 02:40:55.431 00:00:10.361 TCP 23.104.0.1:40778 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:41:07.394 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46872 10 6452 1 2025-08-29 02:41:55.825 00:00:10.366 TCP 23.104.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:42:07.608 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48266 10 6452 1 2025-08-29 02:42:56.227 00:00:10.364 TCP 23.104.0.1:46340 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:38:20.140 00:06:00.078 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 02:43:07.835 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55444 10 6452 1 2025-08-29 02:43:56.631 00:00:10.365 TCP 23.104.0.1:60468 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:44:08.071 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37334 10 6452 1 2025-08-29 02:45:00.522 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 02:45:00.751 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 02:44:57.029 00:00:10.364 TCP 23.104.0.1:39228 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:45:08.297 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48904 10 6452 1 2025-08-29 02:40:20.137 00:06:00.083 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 02:45:57.436 00:00:10.365 TCP 23.104.0.1:55942 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:46:08.474 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:44912 10 6452 1 2025-08-29 02:46:57.847 00:00:10.381 TCP 23.104.0.1:41910 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:47:08.659 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49286 10 6452 1 2025-08-29 02:47:58.298 00:00:10.361 TCP 23.104.0.1:59214 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:48:08.885 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59108 10 6452 1 2025-08-29 02:48:58.696 00:00:10.368 TCP 23.104.0.1:54296 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:49:09.118 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53528 10 6452 1 2025-08-29 02:50:00.807 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 02:50:00.759 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 02:49:59.110 00:00:10.327 TCP 23.104.0.1:48516 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:50:09.340 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35830 10 6452 1 2025-08-29 02:45:20.142 00:06:00.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 02:50:59.473 00:00:10.364 TCP 23.104.0.1:53466 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:51:09.561 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60034 10 6452 1 2025-08-29 02:51:59.872 00:00:10.365 TCP 23.104.0.1:46036 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:52:09.770 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34032 10 6452 1 2025-08-29 02:47:20.139 00:06:00.082 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 02:53:00.280 00:00:10.364 TCP 23.104.0.1:42548 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:53:09.943 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:50246 10 6452 1 2025-08-29 02:54:00.679 00:00:10.373 TCP 23.104.0.1:34172 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:54:10.129 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51918 10 6452 1 2025-08-29 02:55:00.793 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 02:55:00.732 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 02:55:01.112 00:00:10.323 TCP 23.104.0.1:35252 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:55:10.342 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41598 10 6452 1 2025-08-29 02:56:01.471 00:00:10.331 TCP 23.104.0.1:43820 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:56:10.563 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54804 10 6452 1 2025-08-29 02:57:01.840 00:00:10.392 TCP 23.104.0.1:42234 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:57:10.790 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48924 10 6452 1 2025-08-29 02:52:20.142 00:06:00.079 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 02:58:02.269 00:00:10.369 TCP 23.104.0.1:51972 -> 1.101.0.1:3000 11 1507 1 2025-08-29 02:58:11.026 00:00:10.375 TCP 1.101.0.1:3000 -> 22.102.0.1:59124 10 6452 1 Summary: total flows: 160, total bytes: 501052, total packets: 1565, avg bps: 1077, avg pps: 0, avg bpp: 320 Time window: 2025-08-29 01:56:20 - 2025-08-29 02:58:21 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0039s User: 0.0008s Wall: 0.0032s flows/second: 49428.3 Runtime: 0.0033s