Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 02:59:08.612 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-09-01 02:59:34.431 00:00:10.326 TCP 23.104.0.1:40254 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:00:08.820 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-09-01 03:00:34.798 00:00:10.365 TCP 23.104.0.1:52754 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:01:09.040 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:50726 10 6452 1 2025-09-01 02:57:21.791 00:05:00.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 03:01:27.501 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 03:01:27.366 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 03:01:35.200 00:00:10.358 TCP 23.104.0.1:39522 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:02:09.247 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36564 10 6452 1 2025-09-01 03:02:35.598 00:00:10.366 TCP 23.104.0.1:41300 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:03:09.419 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57476 10 6452 1 2025-09-01 03:03:36.008 00:00:10.368 TCP 23.104.0.1:43338 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:04:09.628 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39934 10 6452 1 2025-09-01 03:00:21.788 00:05:00.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 03:04:36.416 00:00:10.367 TCP 23.104.0.1:54652 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:05:09.838 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56766 10 6452 1 2025-09-01 03:05:36.821 00:00:10.367 TCP 23.104.0.1:32862 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:06:10.073 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52768 10 6452 1 2025-09-01 03:06:27.599 00:00:00.018 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 03:06:27.587 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 03:06:37.227 00:00:10.363 TCP 23.104.0.1:48342 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:07:10.293 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49900 10 6452 1 2025-09-01 03:03:21.792 00:05:00.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 03:07:37.629 00:00:10.448 TCP 23.104.0.1:53128 -> 1.101.0.1:3000 15 1926 1 2025-09-01 03:08:10.466 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41732 12 10367 1 2025-09-01 03:08:38.115 00:00:10.332 TCP 23.104.0.1:42358 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:09:10.709 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53322 10 6452 1 2025-09-01 03:09:38.483 00:00:10.368 TCP 23.104.0.1:58832 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:10:10.925 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41550 10 6452 1 2025-09-01 03:06:21.791 00:05:00.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 03:10:38.888 00:00:10.370 TCP 23.104.0.1:42926 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:11:11.133 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59024 10 6452 1 2025-09-01 03:11:28.035 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 03:11:28.081 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 03:11:39.297 00:00:10.328 TCP 23.104.0.1:44270 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:12:11.343 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33512 10 6452 1 2025-09-01 03:12:39.665 00:00:10.359 TCP 23.104.0.1:35126 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:13:11.553 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46306 10 6452 1 2025-09-01 03:09:21.795 00:05:00.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 03:13:40.092 00:00:10.360 TCP 23.104.0.1:41604 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:14:11.770 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55024 10 6452 1 2025-09-01 03:14:40.489 00:00:10.367 TCP 23.104.0.1:33068 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:15:11.981 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:48936 10 6452 1 2025-09-01 03:15:40.892 00:00:10.378 TCP 23.104.0.1:45794 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:12:21.792 00:05:00.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 03:16:12.174 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50182 10 6452 1 2025-09-01 03:16:27.815 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 03:16:27.854 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 03:16:41.306 00:00:10.366 TCP 23.104.0.1:44786 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:17:12.389 00:00:10.306 TCP 1.101.0.1:3000 -> 22.102.0.1:39180 10 6452 1 2025-09-01 03:17:41.706 00:00:10.475 TCP 23.104.0.1:39884 -> 1.101.0.1:3000 15 1926 1 2025-09-01 03:18:12.737 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:58112 12 10365 1 2025-09-01 03:18:42.224 00:00:10.373 TCP 23.104.0.1:37894 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:19:12.993 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:58270 10 6452 1 2025-09-01 03:15:21.796 00:05:00.573 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 03:19:42.636 00:00:10.738 TCP 23.104.0.1:37404 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:20:13.246 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43896 10 6452 1 2025-09-01 03:20:43.416 00:00:10.328 TCP 23.104.0.1:37534 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:21:13.472 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:45366 10 6452 1 2025-09-01 03:21:27.811 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 03:21:27.965 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 03:21:43.781 00:00:10.379 TCP 23.104.0.1:48190 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:22:13.731 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43656 10 6452 1 2025-09-01 03:18:21.794 00:05:00.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 03:22:44.214 00:00:10.361 TCP 23.104.0.1:44002 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:23:13.956 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37922 10 6452 1 2025-09-01 03:23:44.622 00:00:10.372 TCP 23.104.0.1:36280 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:24:14.182 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57900 10 6452 1 2025-09-01 03:24:45.033 00:00:10.364 TCP 23.104.0.1:55118 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:25:14.401 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58740 10 6452 1 2025-09-01 03:21:21.798 00:05:00.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 03:25:45.438 00:00:10.369 TCP 23.104.0.1:58262 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:26:14.614 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53152 10 6452 1 2025-09-01 03:26:27.698 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 03:26:28.088 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 03:26:45.842 00:00:10.387 TCP 23.104.0.1:54710 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:27:14.825 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42292 10 6452 1 2025-09-01 03:27:46.266 00:00:10.724 TCP 23.104.0.1:38956 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:28:15.068 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43198 10 6452 1 2025-09-01 03:24:21.795 00:05:00.579 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 03:28:47.027 00:00:10.364 TCP 23.104.0.1:44108 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:29:15.240 00:00:13.764 TCP 1.101.0.1:3000 -> 22.102.0.1:43362 10 6452 1 2025-09-01 03:29:47.427 00:00:10.366 TCP 23.104.0.1:34582 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:30:19.070 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36816 10 6452 1 2025-09-01 03:30:47.832 00:00:11.319 TCP 23.104.0.1:58664 -> 1.101.0.1:3000 13 1611 1 2025-09-01 03:27:21.800 00:05:00.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 03:31:27.871 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 03:31:19.281 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60160 10 6452 1 2025-09-01 03:31:29.006 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 03:31:49.189 00:00:10.323 TCP 23.104.0.1:59978 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:32:19.493 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37826 10 6452 1 2025-09-01 03:32:49.552 00:00:10.362 TCP 23.104.0.1:54054 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:33:19.709 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33080 10 6452 1 2025-09-01 03:33:49.953 00:00:10.373 TCP 23.104.0.1:33052 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:30:21.796 00:05:00.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 03:34:19.931 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53988 10 6452 1 2025-09-01 03:34:50.364 00:00:10.323 TCP 23.104.0.1:59212 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:35:20.165 00:00:10.367 TCP 1.101.0.1:3000 -> 22.102.0.1:33000 10 6452 1 2025-09-01 03:35:50.722 00:00:10.324 TCP 23.104.0.1:58476 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:36:20.570 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43238 10 6452 1 2025-09-01 03:36:28.262 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 03:36:28.193 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 03:36:51.102 00:00:10.331 TCP 23.104.0.1:34266 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:33:21.801 00:05:00.573 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 03:37:20.793 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46402 10 6452 1 2025-09-01 03:37:51.470 00:00:10.376 TCP 23.104.0.1:55900 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:38:21.010 00:00:10.538 TCP 1.101.0.1:3000 -> 22.102.0.1:40686 11 6504 1 2025-09-01 03:38:51.881 00:00:10.389 TCP 23.104.0.1:53860 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:39:21.587 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50284 10 6452 1 2025-09-01 03:39:52.312 00:00:10.376 TCP 23.104.0.1:49552 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:36:21.798 00:05:00.579 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 03:40:21.801 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51930 10 6452 1 2025-09-01 03:40:52.732 00:00:10.389 TCP 23.104.0.1:48310 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:41:28.273 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 03:41:28.326 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 03:41:22.067 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48762 10 6452 1 2025-09-01 03:41:53.198 00:00:10.326 TCP 23.104.0.1:43506 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:42:22.277 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42344 10 6452 1 2025-09-01 03:42:53.563 00:00:10.323 TCP 23.104.0.1:57502 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:39:21.802 00:05:00.572 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 03:43:22.492 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48942 10 6452 1 2025-09-01 03:43:53.932 00:00:10.374 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:44:22.703 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59130 10 6452 1 2025-09-01 03:44:54.344 00:00:10.369 TCP 23.104.0.1:52264 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:45:22.913 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48558 10 6452 1 2025-09-01 03:45:54.757 00:00:10.327 TCP 23.104.0.1:47458 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:42:21.802 00:05:00.576 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 03:46:28.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 03:46:28.629 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 03:46:23.125 00:00:10.303 TCP 1.101.0.1:3000 -> 22.102.0.1:47794 10 6452 1 2025-09-01 03:46:55.124 00:00:10.363 TCP 23.104.0.1:44028 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:47:23.471 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55630 10 6452 1 2025-09-01 03:47:55.526 00:00:10.364 TCP 23.104.0.1:42536 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:48:23.640 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54856 10 6452 1 2025-09-01 03:48:55.929 00:00:10.389 TCP 23.104.0.1:34180 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:45:21.805 00:05:00.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 03:49:23.856 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 10 6452 1 2025-09-01 03:49:56.355 00:00:10.359 TCP 23.104.0.1:45066 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:50:24.085 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39916 10 6452 1 2025-09-01 03:50:56.758 00:00:10.375 TCP 23.104.0.1:44896 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:51:28.384 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 03:51:28.509 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 03:51:24.297 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49316 10 6452 1 2025-09-01 03:51:57.168 00:00:10.362 TCP 23.104.0.1:43370 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:48:21.802 00:05:00.576 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 03:52:24.507 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50910 10 6452 1 2025-09-01 03:52:57.570 00:00:10.363 TCP 23.104.0.1:43020 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:53:24.732 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59096 10 6452 1 2025-09-01 03:53:57.984 00:00:10.368 TCP 23.104.0.1:48022 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:54:24.949 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54272 10 6452 1 2025-09-01 03:54:58.391 00:00:10.366 TCP 23.104.0.1:48334 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:51:21.810 00:05:00.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 03:55:25.178 00:00:10.611 TCP 1.101.0.1:3000 -> 22.102.0.1:35888 10 6452 1 2025-09-01 03:55:58.797 00:00:10.373 TCP 23.104.0.1:37552 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:56:28.746 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 03:56:28.748 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 03:56:25.829 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32928 10 6452 1 2025-09-01 03:56:59.208 00:00:10.365 TCP 23.104.0.1:57544 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:57:26.067 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55162 10 6452 1 2025-09-01 03:57:59.608 00:00:10.370 TCP 23.104.0.1:36776 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:54:21.807 00:05:00.574 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 03:58:26.273 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48830 10 6452 1 Summary: total flows: 163, total bytes: 505663, total packets: 1576, avg bps: 1087, avg pps: 0, avg bpp: 320 Time window: 2025-09-01 02:57:21 - 2025-09-01 03:59:22 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0019s User: 0.0028s Wall: 0.0031s flows/second: 52477.1 Runtime: 0.0031s