Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 02:59:00.913 00:00:10.331 TCP 23.104.0.1:51940 -> 1.101.0.1:3000 11 1507 1 2025-09-02 02:59:40.528 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40718 10 6452 1 2025-09-02 03:00:01.282 00:00:10.363 TCP 23.104.0.1:39940 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:00:40.705 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41508 10 6452 1 2025-09-02 03:01:01.677 00:00:10.329 TCP 23.104.0.1:34946 -> 1.101.0.1:3000 11 1507 1 2025-09-02 02:56:22.263 00:06:00.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 03:01:40.921 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33702 10 6452 1 2025-09-02 03:01:56.500 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 03:01:56.347 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 03:02:02.052 00:00:10.325 TCP 23.104.0.1:43866 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:02:41.133 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40762 10 6452 1 2025-09-02 03:03:02.418 00:00:10.375 TCP 23.104.0.1:33724 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:03:41.339 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36210 10 6452 1 2025-09-02 03:04:02.833 00:00:10.388 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2025-09-02 02:59:22.261 00:06:00.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 03:04:41.558 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44428 10 6452 1 2025-09-02 03:05:03.253 00:00:10.376 TCP 23.104.0.1:53690 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:05:41.764 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38874 10 6452 1 2025-09-02 03:06:03.675 00:00:10.372 TCP 23.104.0.1:52942 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:06:56.802 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 03:06:41.978 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46380 10 6452 1 2025-09-02 03:06:56.704 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 03:07:04.109 00:00:10.369 TCP 23.104.0.1:32928 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:07:42.199 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52992 10 6452 1 2025-09-02 03:08:04.517 00:00:10.367 TCP 23.104.0.1:33770 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:03:22.264 00:06:00.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 03:08:42.412 00:00:10.578 TCP 1.101.0.1:3000 -> 22.102.0.1:55124 10 6452 1 2025-09-02 03:09:04.926 00:00:10.433 TCP 23.104.0.1:44930 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:09:43.033 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55916 10 6452 1 2025-09-02 03:10:05.396 00:00:10.365 TCP 23.104.0.1:39762 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:10:43.250 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59412 10 6452 1 2025-09-02 03:11:05.803 00:00:10.367 TCP 23.104.0.1:43736 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:06:22.266 00:06:00.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 03:11:43.469 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46850 10 6452 1 2025-09-02 03:11:56.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 03:11:56.751 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 03:12:06.212 00:00:10.363 TCP 23.104.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:12:43.692 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:43490 12 10365 1 2025-09-02 03:13:06.613 00:00:10.440 TCP 23.104.0.1:35908 -> 1.101.0.1:3000 15 1926 1 2025-09-02 03:13:43.939 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40860 10 6452 1 2025-09-02 03:14:07.107 00:00:10.363 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:14:44.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39358 10 6452 1 2025-09-02 03:15:07.513 00:00:10.362 TCP 23.104.0.1:43410 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:10:22.268 00:06:00.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 03:15:44.401 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55902 10 6452 1 2025-09-02 03:16:07.917 00:00:10.365 TCP 23.104.0.1:38216 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:16:44.616 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49876 10 6452 1 2025-09-02 03:16:56.654 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 03:16:56.499 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 03:17:08.323 00:00:10.364 TCP 23.104.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:17:44.837 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59902 10 6452 1 2025-09-02 03:18:08.733 00:00:10.374 TCP 23.104.0.1:45894 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:13:22.267 00:06:00.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 03:18:45.011 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48988 10 6452 1 2025-09-02 03:19:09.145 00:00:10.327 TCP 23.104.0.1:59776 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:19:45.224 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:60004 10 6452 1 2025-09-02 03:20:09.508 00:00:10.367 TCP 23.104.0.1:44012 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:20:45.395 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-09-02 03:21:09.913 00:00:10.366 TCP 23.104.0.1:58010 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:21:45.618 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42940 10 6452 1 2025-09-02 03:21:57.116 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 03:21:57.173 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 03:22:10.319 00:00:10.361 TCP 23.104.0.1:45706 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:17:22.270 00:06:00.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 03:22:45.834 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44696 10 6452 1 2025-09-02 03:23:10.721 00:00:10.375 TCP 23.104.0.1:54908 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:23:46.007 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55366 10 6452 1 2025-09-02 03:24:11.132 00:00:10.390 TCP 23.104.0.1:52242 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:24:46.226 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6452 1 2025-09-02 03:25:11.559 00:00:10.367 TCP 23.104.0.1:39544 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:20:22.269 00:06:00.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 03:25:46.472 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48800 10 6452 1 2025-09-02 03:26:11.965 00:00:10.369 TCP 23.104.0.1:48106 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:26:46.687 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37414 10 6452 1 2025-09-02 03:26:57.013 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 03:26:57.039 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 03:27:12.377 00:00:10.361 TCP 23.104.0.1:57780 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:27:46.902 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43236 10 6452 1 2025-09-02 03:28:12.777 00:00:10.362 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:28:47.118 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51418 10 6452 1 2025-09-02 03:29:13.175 00:00:10.362 TCP 23.104.0.1:40858 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:24:22.272 00:06:00.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 03:29:47.333 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46656 10 6452 1 2025-09-02 03:30:13.578 00:00:10.362 TCP 23.104.0.1:47256 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:30:47.544 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57088 10 6452 1 2025-09-02 03:31:13.981 00:00:10.375 TCP 23.104.0.1:42266 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:31:57.098 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 03:31:57.023 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 03:31:47.758 00:00:15.416 TCP 1.101.0.1:3000 -> 22.102.0.1:36430 10 6452 1 2025-09-02 03:32:14.399 00:00:10.363 TCP 23.104.0.1:56256 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:27:22.269 00:06:00.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 03:32:53.214 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52178 10 6452 1 2025-09-02 03:33:14.799 00:00:10.362 TCP 23.104.0.1:49472 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:33:53.435 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50474 10 6452 1 2025-09-02 03:34:15.203 00:00:10.362 TCP 23.104.0.1:47604 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:34:53.650 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33706 10 6452 1 2025-09-02 03:35:15.607 00:00:10.364 TCP 23.104.0.1:56910 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:35:53.870 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41224 10 6452 1 2025-09-02 03:36:16.012 00:00:10.367 TCP 23.104.0.1:33626 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:31:22.272 00:06:00.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 03:36:57.144 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 03:36:57.300 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 03:36:54.105 00:00:10.506 TCP 1.101.0.1:3000 -> 22.102.0.1:56556 10 6452 1 2025-09-02 03:37:16.430 00:00:10.368 TCP 23.104.0.1:53234 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:37:54.649 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57428 10 6452 1 2025-09-02 03:38:16.838 00:00:10.347 TCP 23.104.0.1:45208 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:38:54.874 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43830 10 6452 1 2025-09-02 03:34:22.272 00:06:00.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 03:39:17.222 00:00:10.329 TCP 23.104.0.1:35488 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:39:55.095 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56996 10 6452 1 2025-09-02 03:40:17.583 00:00:10.365 TCP 23.104.0.1:56616 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:40:55.306 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45028 12 6556 1 2025-09-02 03:41:17.987 00:00:10.367 TCP 23.104.0.1:56346 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:41:57.135 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 03:41:57.280 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 03:41:55.521 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6452 1 2025-09-02 03:42:18.394 00:00:10.368 TCP 23.104.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:42:55.733 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42782 10 6452 1 2025-09-02 03:38:22.275 00:06:00.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 03:43:18.794 00:00:10.365 TCP 23.104.0.1:48150 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:43:55.940 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:56464 10 6452 1 2025-09-02 03:44:19.199 00:00:10.367 TCP 23.104.0.1:43796 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:44:56.129 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42154 10 6452 1 2025-09-02 03:45:19.604 00:00:10.361 TCP 23.104.0.1:39628 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:45:56.345 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43488 10 6452 1 2025-09-02 03:41:22.273 00:06:00.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 03:46:20.003 00:00:10.371 TCP 23.104.0.1:43182 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:46:57.448 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 03:46:57.450 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 03:46:56.561 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54638 10 6452 1 2025-09-02 03:47:20.414 00:00:10.363 TCP 23.104.0.1:57666 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:47:56.772 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58320 10 6452 1 2025-09-02 03:48:20.818 00:00:10.324 TCP 23.104.0.1:49972 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:48:56.983 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54556 10 6452 1 2025-09-02 03:49:21.176 00:00:10.374 TCP 23.104.0.1:34224 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:49:57.214 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44808 10 6452 1 2025-09-02 03:45:22.276 00:06:00.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 03:50:21.590 00:00:10.375 TCP 23.104.0.1:56980 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:50:57.429 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43812 10 6452 1 2025-09-02 03:51:22.007 00:00:10.835 TCP 23.104.0.1:38414 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:51:57.688 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 03:51:57.578 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 03:51:57.639 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54278 10 6452 1 2025-09-02 03:52:22.891 00:00:10.376 TCP 23.104.0.1:41462 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:52:57.810 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34692 10 6452 1 2025-09-02 03:48:22.275 00:06:00.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 03:53:23.307 00:00:10.369 TCP 23.104.0.1:56904 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:53:58.028 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:46500 10 6452 1 2025-09-02 03:54:23.712 00:00:10.372 TCP 23.104.0.1:56482 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:54:58.227 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35462 10 6452 1 2025-09-02 03:55:24.124 00:00:10.362 TCP 23.104.0.1:33132 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:55:58.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37814 10 6452 1 2025-09-02 03:56:24.524 00:00:10.324 TCP 23.104.0.1:59308 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:56:57.711 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 03:56:57.550 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 03:56:58.654 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60948 10 6452 1 2025-09-02 03:52:22.277 00:06:00.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 03:57:24.891 00:00:10.371 TCP 23.104.0.1:43670 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:57:58.864 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:40464 10 6452 1 2025-09-02 03:58:25.304 00:00:10.364 TCP 23.104.0.1:56036 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 496209, total packets: 1568, avg bps: 1063, avg pps: 0, avg bpp: 316 Time window: 2025-09-02 02:56:22 - 2025-09-02 03:58:35 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0016s User: 0.0031s Wall: 0.0040s flows/second: 39910.1 Runtime: 0.0040s