Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 03:58:59.111 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55212 10 6452 1 2025-09-02 03:59:25.706 00:00:10.379 TCP 23.104.0.1:53198 -> 1.101.0.1:3000 11 1507 1 2025-09-02 03:59:59.325 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53448 10 6452 1 2025-09-02 03:55:22.277 00:06:00.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 04:00:26.142 00:00:10.330 TCP 23.104.0.1:33034 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:00:59.499 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55378 10 6452 1 2025-09-02 04:01:26.508 00:00:10.368 TCP 23.104.0.1:51244 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:01:57.749 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:01:57.800 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 04:01:59.709 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53054 10 6452 1 2025-09-02 04:02:26.913 00:00:10.376 TCP 23.104.0.1:43226 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:02:59.947 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44478 10 6452 1 2025-09-02 04:03:27.327 00:00:10.371 TCP 23.104.0.1:47242 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:04:00.176 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52848 10 6452 1 2025-09-02 03:59:22.285 00:06:00.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 04:04:27.737 00:00:10.370 TCP 23.104.0.1:37296 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:05:00.396 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35198 10 6452 1 2025-09-02 04:05:28.145 00:00:10.361 TCP 23.104.0.1:34402 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:06:00.614 00:00:10.540 TCP 1.101.0.1:3000 -> 22.102.0.1:52880 10 6452 1 2025-09-02 04:06:28.554 00:00:10.744 TCP 23.104.0.1:46578 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:06:57.760 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 04:06:57.791 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:07:01.191 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55284 10 6452 1 2025-09-02 04:02:22.282 00:06:00.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 04:07:29.335 00:00:10.366 TCP 23.104.0.1:43128 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:08:01.369 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45498 10 6452 1 2025-09-02 04:08:29.740 00:00:10.369 TCP 23.104.0.1:58362 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:09:01.588 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36564 10 6452 1 2025-09-02 04:09:30.143 00:00:10.371 TCP 23.104.0.1:53050 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:10:01.803 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:46568 10 6452 1 2025-09-02 04:10:30.554 00:00:10.318 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:11:01.971 00:00:10.576 TCP 1.101.0.1:3000 -> 22.102.0.1:57662 10 6452 1 2025-09-02 04:06:22.286 00:06:00.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 04:11:30.911 00:00:10.322 TCP 23.104.0.1:50786 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:11:57.725 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:11:57.676 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 04:12:02.580 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42304 10 6452 1 2025-09-02 04:12:31.274 00:00:10.358 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:13:02.803 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50382 10 6452 1 2025-09-02 04:13:31.672 00:00:10.371 TCP 23.104.0.1:57810 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:14:03.038 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51268 10 6452 1 2025-09-02 04:09:22.283 00:06:00.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 04:14:32.110 00:00:10.320 TCP 23.104.0.1:47972 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:15:03.251 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:34818 10 6452 1 2025-09-02 04:15:32.466 00:00:10.969 TCP 23.104.0.1:42476 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:16:03.495 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38258 10 6452 1 2025-09-02 04:16:33.475 00:00:10.326 TCP 23.104.0.1:60696 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:16:58.013 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 04:16:58.027 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:17:03.713 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:43554 10 6452 1 2025-09-02 04:17:33.838 00:00:10.390 TCP 23.104.0.1:46026 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:18:03.902 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59458 10 6452 1 2025-09-02 04:13:22.287 00:06:00.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 04:18:34.271 00:00:10.319 TCP 23.104.0.1:36034 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:19:04.120 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59816 10 6452 1 2025-09-02 04:19:34.630 00:00:10.373 TCP 23.104.0.1:43958 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:20:04.330 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50136 10 6452 1 2025-09-02 04:20:35.064 00:00:10.364 TCP 23.104.0.1:60094 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:21:04.547 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51296 10 6452 1 2025-09-02 04:16:22.285 00:06:00.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 04:21:35.472 00:00:10.360 TCP 23.104.0.1:41540 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:21:58.686 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 04:21:58.406 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:22:04.767 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47936 10 6452 1 2025-09-02 04:22:35.878 00:00:10.363 TCP 23.104.0.1:43166 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:23:04.980 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:47912 10 6452 1 2025-09-02 04:23:36.278 00:00:10.328 TCP 23.104.0.1:43076 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:24:05.242 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48454 10 6452 1 2025-09-02 04:24:36.648 00:00:10.371 TCP 23.104.0.1:54166 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:25:05.451 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36240 10 6452 1 2025-09-02 04:20:22.287 00:06:00.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 04:25:37.070 00:00:10.365 TCP 23.104.0.1:38974 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:26:05.629 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50386 10 6452 1 2025-09-02 04:26:37.471 00:00:10.369 TCP 23.104.0.1:36638 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:26:58.196 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:26:58.003 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 04:27:05.804 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34436 10 6452 1 2025-09-02 04:27:37.878 00:00:10.394 TCP 23.104.0.1:48614 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:28:06.038 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37964 10 6452 1 2025-09-02 04:23:22.285 00:06:00.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 04:28:38.317 00:00:10.328 TCP 23.104.0.1:60584 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:29:06.288 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41468 10 6452 1 2025-09-02 04:29:38.681 00:00:10.381 TCP 23.104.0.1:59598 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:30:06.511 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38832 10 6452 1 2025-09-02 04:30:39.120 00:00:10.367 TCP 23.104.0.1:45176 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:31:06.730 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36108 10 6452 1 2025-09-02 04:31:39.532 00:00:10.367 TCP 23.104.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:31:58.339 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 04:31:58.409 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:32:06.952 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47926 10 6452 1 2025-09-02 04:27:22.288 00:06:00.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 04:32:39.939 00:00:10.374 TCP 23.104.0.1:59044 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:33:07.189 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59880 10 6452 1 2025-09-02 04:33:40.354 00:00:10.367 TCP 23.104.0.1:38448 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:34:07.412 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49208 10 6452 1 2025-09-02 04:34:40.758 00:00:10.386 TCP 23.104.0.1:46476 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:35:07.634 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53702 10 6452 1 2025-09-02 04:30:22.286 00:06:00.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 04:35:41.181 00:00:10.366 TCP 23.104.0.1:45130 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:36:07.811 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53194 10 6452 1 2025-09-02 04:36:41.588 00:00:10.367 TCP 23.104.0.1:55480 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:36:58.334 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:36:58.773 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 04:37:08.043 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58850 10 6452 1 2025-09-02 04:37:41.999 00:00:10.363 TCP 23.104.0.1:59490 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:38:08.255 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57232 10 6452 1 2025-09-02 04:38:42.400 00:00:10.378 TCP 23.104.0.1:60436 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:39:08.430 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40636 10 6452 1 2025-09-02 04:34:22.289 00:06:00.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 04:39:42.814 00:00:10.373 TCP 23.104.0.1:40046 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:40:08.648 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56338 10 6452 1 2025-09-02 04:40:43.220 00:00:10.366 TCP 23.104.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:41:08.866 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40508 10 6452 1 2025-09-02 04:41:43.629 00:00:10.364 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:41:58.594 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 04:41:58.615 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:42:09.089 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33188 10 6452 1 2025-09-02 04:37:22.288 00:06:00.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 04:42:44.033 00:00:10.360 TCP 23.104.0.1:60388 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:43:09.303 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51694 10 6452 1 2025-09-02 04:43:44.436 00:00:10.361 TCP 23.104.0.1:40314 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:44:09.516 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34564 10 6452 1 2025-09-02 04:44:44.839 00:00:10.349 TCP 23.104.0.1:51532 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:45:09.731 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45878 10 6452 1 2025-09-02 04:45:45.229 00:00:10.368 TCP 23.104.0.1:52672 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:46:09.950 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51782 10 6452 1 2025-09-02 04:41:22.293 00:06:00.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 04:46:45.638 00:00:10.321 TCP 23.104.0.1:42114 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:46:58.568 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:46:58.590 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 04:47:10.176 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48216 10 6452 1 2025-09-02 04:47:45.995 00:00:10.457 TCP 23.104.0.1:51240 -> 1.101.0.1:3000 15 1926 1 2025-09-02 04:48:10.386 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46764 12 10367 1 2025-09-02 04:48:46.492 00:00:10.364 TCP 23.104.0.1:46166 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:49:10.620 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42924 10 6452 1 2025-09-02 04:44:22.290 00:06:00.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 04:49:46.894 00:00:10.339 TCP 23.104.0.1:56272 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:50:10.832 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52474 10 6452 1 2025-09-02 04:50:47.275 00:00:10.368 TCP 23.104.0.1:60388 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:51:11.076 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50350 10 6452 1 2025-09-02 04:51:58.777 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 04:51:47.689 00:00:10.407 TCP 23.104.0.1:40402 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:51:58.738 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:52:11.293 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55808 10 6452 1 2025-09-02 04:52:48.136 00:00:10.370 TCP 23.104.0.1:60274 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:53:11.503 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58788 10 6452 1 2025-09-02 04:48:22.293 00:06:00.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 04:53:48.545 00:00:10.362 TCP 23.104.0.1:53566 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:54:11.718 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57376 10 6452 1 2025-09-02 04:54:48.946 00:00:10.375 TCP 23.104.0.1:45834 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:55:11.942 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60076 10 6452 1 2025-09-02 04:55:49.358 00:00:10.362 TCP 23.104.0.1:40218 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:56:12.175 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58166 10 6452 1 2025-09-02 04:51:22.293 00:06:00.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 04:56:58.524 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 04:56:49.761 00:00:10.335 TCP 23.104.0.1:50668 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:56:58.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 04:57:12.388 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40406 10 6452 1 2025-09-02 04:57:50.139 00:00:10.377 TCP 23.104.0.1:50462 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:58:12.601 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42448 10 6452 1 Summary: total flows: 160, total bytes: 501052, total packets: 1565, avg bps: 1060, avg pps: 0, avg bpp: 320 Time window: 2025-09-02 03:55:22 - 2025-09-02 04:58:22 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0029s User: 0.0015s Wall: 0.0027s flows/second: 59126.8 Runtime: 0.0027s