Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 19:59:05.096 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:56994 11 6504 1 2025-09-01 19:59:07.863 00:00:10.323 TCP 23.104.0.1:52228 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:00:05.372 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50244 10 6452 1 2025-09-01 20:00:08.227 00:00:10.363 TCP 23.104.0.1:44414 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:01:05.553 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39002 10 6452 1 2025-09-01 20:01:08.625 00:00:10.368 TCP 23.104.0.1:33706 -> 1.101.0.1:3000 11 1507 1 2025-09-01 19:56:22.138 00:06:00.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 20:01:48.250 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 20:01:48.189 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 20:02:05.777 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59184 10 6452 1 2025-09-01 20:02:09.036 00:00:10.326 TCP 23.104.0.1:57872 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:03:06.005 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58284 12 10365 1 2025-09-01 20:03:09.399 00:00:10.436 TCP 23.104.0.1:52050 -> 1.101.0.1:3000 15 1926 1 2025-09-01 20:04:06.245 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47310 10 6452 1 2025-09-01 20:04:09.874 00:00:10.385 TCP 23.104.0.1:55572 -> 1.101.0.1:3000 11 1507 1 2025-09-01 19:59:22.135 00:06:00.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-01 20:05:06.475 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:58538 10 6452 1 2025-09-01 20:05:10.288 00:00:10.369 TCP 23.104.0.1:52682 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:06:06.676 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47098 10 6452 1 2025-09-01 20:06:10.695 00:00:10.360 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:06:48.056 00:00:00.049 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 20:06:48.363 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 20:07:11.104 00:00:10.317 TCP 23.104.0.1:49760 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:07:06.852 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51394 10 6452 1 2025-09-01 20:08:11.462 00:00:10.360 TCP 23.104.0.1:45708 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:08:07.083 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48480 10 6452 1 2025-09-01 20:03:22.139 00:06:00.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 20:09:07.298 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45558 10 6452 1 2025-09-01 20:09:11.862 00:00:10.377 TCP 23.104.0.1:39832 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:10:07.504 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52762 10 6452 1 2025-09-01 20:10:12.288 00:00:10.324 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:11:07.718 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:36922 10 6452 1 2025-09-01 20:11:12.651 00:00:10.363 TCP 23.104.0.1:56284 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:06:22.138 00:06:00.579 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-01 20:11:47.921 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 20:11:48.377 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 20:12:07.915 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51986 10 6452 1 2025-09-01 20:12:13.063 00:00:10.367 TCP 23.104.0.1:39984 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:13:08.130 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50756 10 6452 1 2025-09-01 20:13:13.466 00:00:10.363 TCP 23.104.0.1:34550 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:14:08.300 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49550 10 6452 1 2025-09-01 20:14:13.865 00:00:10.380 TCP 23.104.0.1:56300 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:15:08.521 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60552 10 6452 1 2025-09-01 20:15:14.283 00:00:10.370 TCP 23.104.0.1:49374 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:10:22.141 00:06:00.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 20:16:08.731 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34252 10 6452 1 2025-09-01 20:16:14.690 00:00:10.368 TCP 23.104.0.1:42324 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:16:48.375 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 20:16:48.475 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 20:17:08.945 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43776 10 6452 1 2025-09-01 20:17:15.109 00:00:10.366 TCP 23.104.0.1:57182 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:18:09.181 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36044 10 6452 1 2025-09-01 20:18:15.513 00:00:10.364 TCP 23.104.0.1:51132 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:13:22.140 00:06:00.578 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-01 20:19:09.396 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52238 10 6452 1 2025-09-01 20:19:15.909 00:00:10.375 TCP 23.104.0.1:46488 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:20:09.616 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44456 10 6452 1 2025-09-01 20:20:16.316 00:00:10.371 TCP 23.104.0.1:34726 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:21:09.840 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33158 10 6452 1 2025-09-01 20:21:16.723 00:00:10.519 TCP 23.104.0.1:57498 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:21:48.368 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 20:21:48.418 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 20:22:10.076 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47200 10 6452 1 2025-09-01 20:17:22.145 00:06:00.573 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 20:22:17.284 00:00:10.360 TCP 23.104.0.1:48676 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:23:10.297 00:00:12.155 TCP 1.101.0.1:3000 -> 22.102.0.1:37448 10 6452 1 2025-09-01 20:23:17.687 00:00:10.746 TCP 23.104.0.1:34484 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:24:12.494 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47788 10 6452 1 2025-09-01 20:24:18.469 00:00:10.366 TCP 23.104.0.1:60986 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:20:22.142 00:06:00.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-01 20:25:12.717 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:38702 10 6452 1 2025-09-01 20:25:18.873 00:00:10.366 TCP 23.104.0.1:58558 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:26:12.898 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:60910 10 6452 1 2025-09-01 20:26:19.280 00:00:10.362 TCP 23.104.0.1:57684 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:26:48.771 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 20:26:48.743 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 20:27:13.090 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53126 10 6452 1 2025-09-01 20:27:19.681 00:00:10.362 TCP 23.104.0.1:49824 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:28:13.305 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40372 10 6452 1 2025-09-01 20:28:20.103 00:00:10.363 TCP 23.104.0.1:54650 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:24:22.145 00:06:00.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 20:29:13.520 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58394 10 6452 1 2025-09-01 20:29:20.500 00:00:10.326 TCP 23.104.0.1:36716 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:30:13.740 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37180 10 6452 1 2025-09-01 20:30:20.859 00:00:10.378 TCP 23.104.0.1:49068 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:31:13.911 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34818 10 6452 1 2025-09-01 20:31:21.285 00:00:10.366 TCP 23.104.0.1:33072 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:31:48.831 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 20:31:48.794 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 20:32:14.124 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59502 10 6452 1 2025-09-01 20:27:22.144 00:06:00.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-01 20:32:21.685 00:00:10.325 TCP 23.104.0.1:45116 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:33:14.339 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54828 10 6452 1 2025-09-01 20:33:22.056 00:00:10.323 TCP 23.104.0.1:53390 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:34:14.561 00:00:10.344 TCP 1.101.0.1:3000 -> 22.102.0.1:41204 10 6452 1 2025-09-01 20:34:22.422 00:00:10.363 TCP 23.104.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:35:14.944 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41440 10 6452 1 2025-09-01 20:35:22.822 00:00:10.364 TCP 23.104.0.1:52314 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:36:15.185 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34864 10 6452 1 2025-09-01 20:31:22.148 00:06:00.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 20:36:23.224 00:00:10.363 TCP 23.104.0.1:33638 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:36:48.866 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 20:36:48.773 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 20:37:15.404 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50556 10 6452 1 2025-09-01 20:37:23.629 00:00:10.745 TCP 23.104.0.1:42726 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:38:15.630 00:00:10.303 TCP 1.101.0.1:3000 -> 22.102.0.1:59582 12 10367 1 2025-09-01 20:38:24.410 00:00:10.441 TCP 23.104.0.1:57122 -> 1.101.0.1:3000 15 1926 1 2025-09-01 20:39:15.975 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:41204 10 6452 1 2025-09-01 20:34:22.145 00:06:00.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-01 20:39:24.893 00:00:10.375 TCP 23.104.0.1:37132 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:40:16.215 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:58488 10 6452 1 2025-09-01 20:40:25.311 00:00:10.364 TCP 23.104.0.1:60466 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:41:16.403 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57200 10 6452 1 2025-09-01 20:41:25.714 00:00:10.382 TCP 23.104.0.1:52160 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:41:48.920 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 20:41:48.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 20:42:16.619 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35308 10 6452 1 2025-09-01 20:42:26.131 00:00:10.370 TCP 23.104.0.1:53352 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:38:22.148 00:06:00.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 20:43:16.843 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56136 10 6452 1 2025-09-01 20:43:26.537 00:00:10.365 TCP 23.104.0.1:50170 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:44:17.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60914 10 6452 1 2025-09-01 20:44:26.941 00:00:10.395 TCP 23.104.0.1:59108 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:45:17.291 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42252 10 6452 1 2025-09-01 20:45:27.378 00:00:10.371 TCP 23.104.0.1:53152 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:41:22.146 00:06:00.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-01 20:46:17.460 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38536 10 6452 1 2025-09-01 20:46:27.789 00:00:10.366 TCP 23.104.0.1:53820 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:46:48.986 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 20:46:48.907 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 20:47:17.674 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56004 10 6452 1 2025-09-01 20:47:28.194 00:00:10.370 TCP 23.104.0.1:38242 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:48:17.844 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33412 10 6452 1 2025-09-01 20:48:28.594 00:00:10.326 TCP 23.104.0.1:35924 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:49:18.076 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40062 10 6452 1 2025-09-01 20:49:28.958 00:00:10.882 TCP 23.104.0.1:46212 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:45:22.150 00:06:00.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 20:50:18.287 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46508 10 6452 1 2025-09-01 20:50:29.879 00:00:10.390 TCP 23.104.0.1:32998 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:51:18.497 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53984 10 6452 1 2025-09-01 20:51:30.307 00:00:10.364 TCP 23.104.0.1:55390 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:51:49.107 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 20:51:49.136 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 20:52:18.679 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45306 10 6452 1 2025-09-01 20:52:30.709 00:00:10.363 TCP 23.104.0.1:50998 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:48:22.147 00:06:00.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-01 20:53:18.898 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39364 10 6452 1 2025-09-01 20:53:31.112 00:00:10.365 TCP 23.104.0.1:47778 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:54:19.118 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49130 10 6452 1 2025-09-01 20:54:31.519 00:00:10.366 TCP 23.104.0.1:40458 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:55:19.331 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34570 10 6452 1 2025-09-01 20:55:31.924 00:00:10.395 TCP 23.104.0.1:59498 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:56:19.506 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47436 10 6452 1 2025-09-01 20:56:32.360 00:00:10.364 TCP 23.104.0.1:36706 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:56:49.435 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 20:56:49.475 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 20:52:22.151 00:06:00.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-01 20:57:19.721 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44680 10 6452 1 2025-09-01 20:57:32.765 00:00:10.327 TCP 23.104.0.1:45132 -> 1.101.0.1:3000 11 1507 1 2025-09-01 20:58:19.934 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57916 10 6452 1 2025-09-01 20:58:33.134 00:00:10.318 TCP 23.104.0.1:46904 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 506943, total packets: 1583, avg bps: 1083, avg pps: 0, avg bpp: 320 Time window: 2025-09-01 19:56:22 - 2025-09-01 20:58:43 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0040s User: 0.0008s Wall: 0.0029s flows/second: 55537.7 Runtime: 0.0029s