Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 13:58:44.215 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44024 10 6452 1 2025-09-01 13:59:17.933 00:00:10.383 TCP 23.104.0.1:33560 -> 1.101.0.1:3000 11 1507 1 2025-09-01 13:59:44.385 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39020 10 6452 1 2025-09-01 14:00:18.360 00:00:10.322 TCP 23.104.0.1:35732 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:00:44.595 00:00:10.361 TCP 1.101.0.1:3000 -> 22.102.0.1:51056 10 6452 1 2025-09-01 13:57:21.988 00:05:00.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 14:01:18.726 00:00:10.374 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:01:40.892 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 14:01:40.602 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 14:01:44.997 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41986 10 6452 1 2025-09-01 14:02:19.138 00:00:10.366 TCP 23.104.0.1:49256 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:02:45.221 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36252 10 6452 1 2025-09-01 14:03:19.544 00:00:10.366 TCP 23.104.0.1:46804 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:03:45.443 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53442 10 6452 1 2025-09-01 14:00:21.987 00:05:00.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 14:04:19.951 00:00:10.374 TCP 23.104.0.1:44488 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:04:45.669 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56520 10 6452 1 2025-09-01 14:05:20.366 00:00:10.364 TCP 23.104.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:05:45.886 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 10 6452 1 2025-09-01 14:06:20.768 00:00:10.376 TCP 23.104.0.1:49794 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:06:40.819 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 14:06:40.972 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 14:06:46.110 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58346 10 6452 1 2025-09-01 14:03:21.990 00:05:00.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 14:07:21.182 00:00:10.377 TCP 23.104.0.1:41932 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:07:46.336 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45238 10 6452 1 2025-09-01 14:08:21.591 00:00:10.366 TCP 23.104.0.1:55764 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:08:46.554 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45644 10 6452 1 2025-09-01 14:09:21.993 00:00:10.364 TCP 23.104.0.1:56448 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:09:46.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48388 10 6452 1 2025-09-01 14:06:21.988 00:05:00.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 14:10:22.391 00:00:10.364 TCP 23.104.0.1:49052 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:10:46.990 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50654 10 6452 1 2025-09-01 14:11:22.796 00:00:10.368 TCP 23.104.0.1:46704 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:11:41.079 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 14:11:40.962 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 14:11:47.222 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37188 10 6452 1 2025-09-01 14:12:23.204 00:00:10.329 TCP 23.104.0.1:45022 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:12:47.433 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35646 10 6452 1 2025-09-01 14:09:21.991 00:05:00.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 14:13:23.565 00:00:10.364 TCP 23.104.0.1:54940 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:13:47.657 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:36422 10 6452 1 2025-09-01 14:14:23.967 00:00:10.375 TCP 23.104.0.1:56478 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:14:47.839 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38942 10 6452 1 2025-09-01 14:15:24.382 00:00:10.323 TCP 23.104.0.1:34748 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:15:48.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55018 10 6452 1 2025-09-01 14:12:21.989 00:05:00.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 14:16:41.161 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 14:16:24.752 00:00:10.381 TCP 23.104.0.1:47604 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:16:41.249 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 14:16:48.309 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53916 10 6452 1 2025-09-01 14:17:25.172 00:00:10.443 TCP 23.104.0.1:59424 -> 1.101.0.1:3000 15 1926 1 2025-09-01 14:17:48.537 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:49196 12 10367 1 2025-09-01 14:18:25.655 00:00:10.369 TCP 23.104.0.1:51986 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:18:48.796 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46158 10 6452 1 2025-09-01 14:15:21.992 00:05:00.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 14:19:26.087 00:00:10.367 TCP 23.104.0.1:59762 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:19:49.006 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42010 10 6452 1 2025-09-01 14:20:26.491 00:00:10.362 TCP 23.104.0.1:51186 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:20:49.228 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56536 10 6452 1 2025-09-01 14:21:41.133 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 14:21:26.896 00:00:10.375 TCP 23.104.0.1:42548 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:21:40.937 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 14:21:49.411 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50586 10 6452 1 2025-09-01 14:18:21.990 00:05:00.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 14:22:27.303 00:00:10.326 TCP 23.104.0.1:46218 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:22:49.628 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59064 10 6452 1 2025-09-01 14:23:27.664 00:00:10.368 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:23:49.804 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58378 10 6452 1 2025-09-01 14:24:28.088 00:00:10.328 TCP 23.104.0.1:34398 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:24:50.043 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41708 10 6452 1 2025-09-01 14:21:21.995 00:05:00.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 14:25:28.456 00:00:10.326 TCP 23.104.0.1:36570 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:25:50.262 00:00:10.587 TCP 1.101.0.1:3000 -> 22.102.0.1:43158 11 6504 1 2025-09-01 14:26:41.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 14:26:28.820 00:00:10.368 TCP 23.104.0.1:60234 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:26:42.025 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 14:26:50.895 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48820 10 6452 1 2025-09-01 14:27:29.221 00:00:10.367 TCP 23.104.0.1:41768 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:27:51.122 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38696 10 6452 1 2025-09-01 14:24:21.993 00:05:00.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 14:28:29.624 00:00:10.368 TCP 23.104.0.1:42836 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:28:51.292 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55890 10 6452 1 2025-09-01 14:29:30.032 00:00:10.371 TCP 23.104.0.1:60214 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:29:51.502 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43302 10 6452 1 2025-09-01 14:30:30.441 00:00:10.369 TCP 23.104.0.1:42464 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:30:51.720 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57082 10 6452 1 2025-09-01 14:31:41.412 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 14:31:30.848 00:00:10.387 TCP 23.104.0.1:35846 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:31:41.350 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 14:31:51.933 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:46010 10 6452 1 2025-09-01 14:27:22.002 00:06:00.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 14:32:31.274 00:00:10.370 TCP 23.104.0.1:48916 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:32:52.176 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57052 10 6452 1 2025-09-01 14:33:31.682 00:00:10.374 TCP 23.104.0.1:60046 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:33:52.400 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58798 10 6452 1 2025-09-01 14:34:32.103 00:00:10.363 TCP 23.104.0.1:56010 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:34:52.622 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33772 10 6452 1 2025-09-01 14:30:22.000 00:06:00.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-01 14:35:32.501 00:00:10.363 TCP 23.104.0.1:33492 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:35:52.837 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53364 10 6452 1 2025-09-01 14:36:41.461 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 14:36:41.495 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 14:36:32.900 00:00:10.376 TCP 23.104.0.1:59024 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:36:53.073 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53504 10 6452 1 2025-09-01 14:37:33.308 00:00:10.344 TCP 23.104.0.1:51410 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:37:53.284 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46416 10 6452 1 2025-09-01 14:38:33.688 00:00:10.366 TCP 23.104.0.1:53900 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:38:53.501 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53874 10 6452 1 2025-09-01 14:34:22.004 00:06:00.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 14:39:34.100 00:00:10.323 TCP 23.104.0.1:46264 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:39:53.703 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58844 10 6452 1 2025-09-01 14:40:34.463 00:00:10.325 TCP 23.104.0.1:55700 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:40:53.916 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46920 10 6452 1 2025-09-01 14:41:41.724 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 14:41:41.720 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 14:41:34.825 00:00:10.327 TCP 23.104.0.1:45334 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:41:54.124 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36632 10 6452 1 2025-09-01 14:37:22.010 00:06:00.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-01 14:42:35.187 00:00:10.364 TCP 23.104.0.1:33934 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:42:54.339 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41626 10 6452 1 2025-09-01 14:43:35.587 00:00:10.423 TCP 23.104.0.1:48844 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:43:54.508 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38408 10 6452 1 2025-09-01 14:44:36.064 00:00:10.365 TCP 23.104.0.1:56184 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:44:54.735 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46370 10 6452 1 2025-09-01 14:45:36.469 00:00:10.360 TCP 23.104.0.1:49340 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:45:54.950 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:40370 10 6452 1 2025-09-01 14:41:22.030 00:06:00.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 14:46:41.820 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 14:46:41.735 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 14:46:36.867 00:00:11.022 TCP 23.104.0.1:49640 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:46:55.199 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34230 12 6556 1 2025-09-01 14:47:37.931 00:00:10.365 TCP 23.104.0.1:54704 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:47:55.415 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51180 10 6452 1 2025-09-01 14:48:38.333 00:00:10.364 TCP 23.104.0.1:50606 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:48:55.633 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:60782 10 6452 1 2025-09-01 14:44:22.032 00:06:00.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-01 14:49:38.735 00:00:10.370 TCP 23.104.0.1:36568 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:49:55.876 00:00:10.703 TCP 1.101.0.1:3000 -> 22.102.0.1:37758 10 6452 1 2025-09-01 14:50:39.145 00:00:10.322 TCP 23.104.0.1:35106 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:50:56.623 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:44610 10 6452 1 2025-09-01 14:51:41.967 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 14:51:41.688 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 14:51:39.504 00:00:10.365 TCP 23.104.0.1:40404 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:51:56.828 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58100 10 6452 1 2025-09-01 14:52:39.906 00:00:10.362 TCP 23.104.0.1:57760 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:52:57.002 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-09-01 14:48:22.041 00:06:00.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 14:53:40.307 00:00:10.369 TCP 23.104.0.1:32846 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:53:57.231 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53468 10 6452 1 2025-09-01 14:54:40.711 00:00:10.376 TCP 23.104.0.1:42594 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:54:57.445 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43226 10 6452 1 2025-09-01 14:55:41.117 00:00:10.366 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:55:57.661 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55322 10 6452 1 2025-09-01 14:51:22.045 00:06:00.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-01 14:56:41.835 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 14:56:42.031 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 14:56:41.526 00:00:10.366 TCP 23.104.0.1:60232 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:56:57.879 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:34196 10 6452 1 2025-09-01 14:57:41.928 00:00:10.392 TCP 23.104.0.1:51930 -> 1.101.0.1:3000 11 1507 1 2025-09-01 14:57:58.079 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35136 10 6452 1 Summary: total flows: 161, total bytes: 500839, total packets: 1562, avg bps: 1098, avg pps: 0, avg bpp: 320 Time window: 2025-09-01 13:57:21 - 2025-09-01 14:58:08 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0020s User: 0.0020s Wall: 0.0021s flows/second: 76632.2 Runtime: 0.0021s