Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 05:59:03.598 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35596 10 6452 1 2025-09-03 05:59:28.061 00:00:10.373 TCP 23.104.0.1:37092 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:00:03.812 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6452 1 2025-09-03 06:00:28.470 00:00:10.369 TCP 23.104.0.1:60442 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:01:04.034 00:00:10.881 TCP 1.101.0.1:3000 -> 22.102.0.1:54652 10 6452 1 2025-09-03 06:01:28.878 00:00:10.370 TCP 23.104.0.1:34922 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:02:04.954 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:43216 12 6556 1 2025-09-03 06:02:28.942 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 06:02:28.736 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 06:02:29.284 00:00:10.325 TCP 23.104.0.1:54648 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:03:05.197 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:39564 12 10367 1 2025-09-03 05:59:22.759 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 06:03:29.646 00:00:10.441 TCP 23.104.0.1:33244 -> 1.101.0.1:3000 15 1926 1 2025-09-03 06:04:05.447 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46858 10 6452 1 2025-09-03 06:00:22.757 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 06:04:30.130 00:00:10.360 TCP 23.104.0.1:57958 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:05:05.666 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45558 10 6452 1 2025-09-03 06:05:30.530 00:00:10.369 TCP 23.104.0.1:32972 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:06:05.889 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48050 10 6452 1 2025-09-03 06:06:30.939 00:00:10.374 TCP 23.104.0.1:39510 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:07:06.097 00:00:10.602 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6452 1 2025-09-03 06:07:29.006 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 06:07:28.967 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 06:07:31.348 00:00:10.362 TCP 23.104.0.1:43886 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:08:06.738 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39214 10 6452 1 2025-09-03 06:08:31.749 00:00:10.380 TCP 23.104.0.1:57892 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:09:06.909 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39150 10 6452 1 2025-09-03 06:05:22.759 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 06:09:32.168 00:00:10.380 TCP 23.104.0.1:54064 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:10:07.124 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43266 10 6452 1 2025-09-03 06:06:22.757 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 06:10:32.587 00:00:10.365 TCP 23.104.0.1:40470 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:11:07.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45812 10 6452 1 2025-09-03 06:11:32.991 00:00:10.367 TCP 23.104.0.1:39690 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:12:07.556 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-09-03 06:12:29.390 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 06:12:29.319 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 06:12:33.391 00:00:10.366 TCP 23.104.0.1:45334 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:13:07.777 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46568 10 6452 1 2025-09-03 06:13:33.792 00:00:10.333 TCP 23.104.0.1:39474 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:14:07.992 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39176 10 6452 1 2025-09-03 06:14:34.167 00:00:10.367 TCP 23.104.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:15:08.223 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50478 10 6452 1 2025-09-03 06:11:22.762 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 06:15:34.571 00:00:10.362 TCP 23.104.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:16:08.433 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38136 10 6452 1 2025-09-03 06:12:22.759 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 06:16:34.979 00:00:10.368 TCP 23.104.0.1:38096 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:17:08.649 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43442 10 6452 1 2025-09-03 06:17:29.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 06:17:29.261 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 06:17:35.387 00:00:10.365 TCP 23.104.0.1:34902 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:18:08.867 00:00:10.346 TCP 1.101.0.1:3000 -> 22.102.0.1:41880 13 13935 1 2025-09-03 06:18:35.788 00:00:10.442 TCP 23.104.0.1:60326 -> 1.101.0.1:3000 15 1926 1 2025-09-03 06:19:09.252 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36608 10 6452 1 2025-09-03 06:19:36.277 00:00:10.365 TCP 23.104.0.1:60002 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:20:09.467 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58374 10 6452 1 2025-09-03 06:20:36.686 00:00:10.368 TCP 23.104.0.1:57566 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:21:09.642 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37538 10 6452 1 2025-09-03 06:17:22.762 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 06:21:37.107 00:00:10.320 TCP 23.104.0.1:41364 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:22:09.878 00:00:10.925 TCP 1.101.0.1:3000 -> 22.102.0.1:47410 10 6452 1 2025-09-03 06:18:22.760 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 06:22:29.250 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 06:22:29.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 06:22:37.463 00:00:10.365 TCP 23.104.0.1:56160 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:23:10.853 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45714 10 6452 1 2025-09-03 06:23:37.871 00:00:10.362 TCP 23.104.0.1:50880 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:24:11.077 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38556 10 6452 1 2025-09-03 06:24:38.272 00:00:10.361 TCP 23.104.0.1:35360 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:25:11.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48058 10 6452 1 2025-09-03 06:25:38.677 00:00:10.370 TCP 23.104.0.1:59982 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:26:11.510 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46410 10 6452 1 2025-09-03 06:26:39.104 00:00:10.364 TCP 23.104.0.1:53460 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:27:11.729 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47804 10 6452 1 2025-09-03 06:23:22.763 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 06:27:29.396 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 06:27:29.613 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 06:27:39.504 00:00:10.376 TCP 23.104.0.1:46736 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:28:11.944 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51594 10 6452 1 2025-09-03 06:24:22.762 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 06:28:39.917 00:00:10.381 TCP 23.104.0.1:60414 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:29:12.174 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56476 10 6452 1 2025-09-03 06:29:40.335 00:00:10.362 TCP 23.104.0.1:44118 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:30:12.392 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53884 10 6452 1 2025-09-03 06:30:40.737 00:00:10.318 TCP 23.104.0.1:47770 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:31:12.609 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43718 10 6452 1 2025-09-03 06:31:41.102 00:00:10.360 TCP 23.104.0.1:48706 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:32:12.815 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54510 10 6452 1 2025-09-03 06:32:29.528 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 06:32:29.577 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 06:32:41.504 00:00:10.320 TCP 23.104.0.1:55944 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:33:13.027 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:33870 10 6452 1 2025-09-03 06:29:22.765 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 06:33:41.863 00:00:10.369 TCP 23.104.0.1:38900 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:34:13.266 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39672 10 6452 1 2025-09-03 06:30:22.763 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 06:34:42.272 00:00:10.370 TCP 23.104.0.1:39460 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:35:13.479 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48016 10 6452 1 2025-09-03 06:35:42.683 00:00:10.368 TCP 23.104.0.1:32844 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:36:13.703 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51156 10 6452 1 2025-09-03 06:36:43.107 00:00:10.359 TCP 23.104.0.1:42288 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:37:13.880 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-09-03 06:37:29.774 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 06:37:29.477 00:00:00.008 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 06:37:43.502 00:00:10.362 TCP 23.104.0.1:57422 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:38:14.102 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49414 10 6452 1 2025-09-03 06:38:43.904 00:00:10.370 TCP 23.104.0.1:34040 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:35:22.765 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 06:39:14.317 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36682 10 6452 1 2025-09-03 06:39:44.317 00:00:10.363 TCP 23.104.0.1:55010 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:36:22.763 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 06:40:14.540 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57408 10 6452 1 2025-09-03 06:40:44.723 00:00:10.369 TCP 23.104.0.1:43292 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:41:14.717 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42946 10 6452 1 2025-09-03 06:41:45.133 00:00:10.379 TCP 23.104.0.1:46524 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:42:14.934 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:58168 10 6452 1 2025-09-03 06:42:29.552 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 06:42:29.770 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 06:42:45.554 00:00:10.364 TCP 23.104.0.1:51186 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:43:15.185 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56156 10 6452 1 2025-09-03 06:43:45.951 00:00:10.374 TCP 23.104.0.1:57446 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:44:15.422 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43014 10 6452 1 2025-09-03 06:44:46.364 00:00:10.368 TCP 23.104.0.1:57300 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:45:15.639 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36736 10 6452 1 2025-09-03 06:41:22.767 00:05:00.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 06:45:46.771 00:00:10.379 TCP 23.104.0.1:57212 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:46:15.811 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37904 10 6452 1 2025-09-03 06:42:22.765 00:05:00.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 06:46:47.188 00:00:10.363 TCP 23.104.0.1:34258 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:47:15.984 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51270 10 6452 1 2025-09-03 06:47:29.697 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 06:47:29.909 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 06:47:47.590 00:00:10.437 TCP 23.104.0.1:59502 -> 1.101.0.1:3000 15 1926 1 2025-09-03 06:48:16.227 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:47318 12 10365 1 2025-09-03 06:48:48.101 00:00:10.384 TCP 23.104.0.1:47924 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:49:16.434 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35460 10 6452 1 2025-09-03 06:49:48.525 00:00:10.371 TCP 23.104.0.1:59986 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:50:16.652 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52682 10 6452 1 2025-09-03 06:50:48.936 00:00:10.383 TCP 23.104.0.1:56382 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:47:22.768 00:05:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 06:51:16.862 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49968 10 6452 1 2025-09-03 06:51:49.373 00:00:11.602 TCP 23.104.0.1:47408 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:48:22.766 00:05:00.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 06:52:30.048 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 06:52:29.946 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 06:52:17.038 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53364 10 6452 1 2025-09-03 06:52:51.026 00:00:10.369 TCP 23.104.0.1:55662 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:53:17.254 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49610 10 6452 1 2025-09-03 06:53:51.434 00:00:10.363 TCP 23.104.0.1:35018 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:54:17.468 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49432 10 6452 1 2025-09-03 06:54:51.834 00:00:10.346 TCP 23.104.0.1:59844 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:55:17.642 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50398 10 6452 1 2025-09-03 06:55:52.222 00:00:10.364 TCP 23.104.0.1:38540 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:56:17.814 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42510 10 6452 1 2025-09-03 06:56:52.627 00:00:10.363 TCP 23.104.0.1:60872 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:53:22.771 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 06:57:18.062 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:33016 10 6452 1 2025-09-03 06:57:30.363 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 06:57:30.159 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 06:57:53.029 00:00:10.371 TCP 23.104.0.1:37924 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:54:22.769 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 06:58:18.319 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41244 10 6452 1 Summary: total flows: 163, total bytes: 513513, total packets: 1582, avg bps: 1134, avg pps: 0, avg bpp: 324 Time window: 2025-09-03 05:59:03 - 2025-09-03 06:59:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0010s Wall: 0.0022s flows/second: 74947.6 Runtime: 0.0022s