Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-06 19:58:54.418 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:42252 10 6452 1 2025-08-06 19:59:16.906 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 19:59:17.199 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 19:59:24.997 00:00:10.359 TCP 23.104.0.1:53890 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:59:54.583 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41470 10 6452 1 2025-08-06 20:00:25.394 00:00:10.372 TCP 23.104.0.1:42410 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:00:54.789 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52112 10 6452 1 2025-08-06 20:01:25.804 00:00:10.359 TCP 23.104.0.1:38340 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:01:55.001 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48338 10 6452 1 2025-08-06 20:02:26.205 00:00:10.370 TCP 23.104.0.1:33992 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:02:55.213 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39640 10 6452 1 2025-08-06 19:59:07.293 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 20:03:26.610 00:00:10.363 TCP 23.104.0.1:34912 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:03:55.383 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39406 10 6452 1 2025-08-06 20:00:07.290 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 20:04:16.871 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 20:04:16.946 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 20:04:27.018 00:00:10.369 TCP 23.104.0.1:60448 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:04:55.596 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32928 10 6452 1 2025-08-06 20:05:27.423 00:00:10.365 TCP 23.104.0.1:53802 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:05:55.813 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40918 10 6452 1 2025-08-06 20:06:27.829 00:00:10.334 TCP 23.104.0.1:56554 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:06:56.073 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46908 10 6452 1 2025-08-06 20:07:28.202 00:00:10.366 TCP 23.104.0.1:39508 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:07:56.284 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54170 10 6452 1 2025-08-06 20:08:28.606 00:00:10.366 TCP 23.104.0.1:56836 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:08:56.501 00:00:10.422 TCP 1.101.0.1:3000 -> 22.102.0.1:42682 10 6452 1 2025-08-06 20:05:07.296 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 20:09:17.041 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 20:09:17.068 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 20:09:29.015 00:00:10.368 TCP 23.104.0.1:34798 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:09:56.967 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51602 10 6452 1 2025-08-06 20:06:07.294 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 20:10:29.424 00:00:10.365 TCP 23.104.0.1:59762 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:10:57.197 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53452 10 6452 1 2025-08-06 20:11:29.828 00:00:10.396 TCP 23.104.0.1:35080 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:11:57.373 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50236 10 6452 1 2025-08-06 20:12:30.262 00:00:10.364 TCP 23.104.0.1:44788 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:12:57.585 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33858 10 6452 1 2025-08-06 20:13:30.674 00:00:10.319 TCP 23.104.0.1:58876 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:13:57.771 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34884 10 6452 1 2025-08-06 20:14:16.936 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 20:14:17.108 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 20:14:31.034 00:00:10.369 TCP 23.104.0.1:33670 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:11:07.296 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 20:14:57.939 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:49516 10 6452 1 2025-08-06 20:15:31.439 00:00:10.362 TCP 23.104.0.1:39660 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:15:58.177 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46096 10 6452 1 2025-08-06 20:12:07.294 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 20:16:31.842 00:00:10.383 TCP 23.104.0.1:57072 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:16:58.388 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50678 10 6452 1 2025-08-06 20:17:32.273 00:00:10.319 TCP 23.104.0.1:53020 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:17:58.593 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54056 10 6452 1 2025-08-06 20:18:32.630 00:00:10.364 TCP 23.104.0.1:52236 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:18:58.772 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36292 10 6452 1 2025-08-06 20:19:17.018 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 20:19:17.198 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 20:19:33.034 00:00:10.328 TCP 23.104.0.1:41098 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:19:59.005 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 10 6452 1 2025-08-06 20:20:33.395 00:00:10.366 TCP 23.104.0.1:55776 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:20:59.202 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49888 10 6452 1 2025-08-06 20:17:07.298 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 20:21:33.797 00:00:10.370 TCP 23.104.0.1:46716 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:21:59.415 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33492 10 6452 1 2025-08-06 20:18:07.295 00:05:00.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 20:22:34.205 00:00:10.369 TCP 23.104.0.1:56016 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:22:59.628 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54992 10 6452 1 2025-08-06 20:23:34.609 00:00:10.366 TCP 23.104.0.1:52210 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:23:59.806 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:55564 11 6504 1 2025-08-06 20:24:17.317 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 20:24:17.397 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 20:24:35.019 00:00:10.338 TCP 23.104.0.1:48012 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:25:00.099 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41988 10 6452 1 2025-08-06 20:25:35.402 00:00:10.324 TCP 23.104.0.1:38812 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:26:00.312 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48360 10 6452 1 2025-08-06 20:26:35.765 00:00:10.372 TCP 23.104.0.1:37132 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:23:07.299 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 20:27:00.525 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:49902 10 6452 1 2025-08-06 20:27:36.178 00:00:10.325 TCP 23.104.0.1:32852 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:28:00.714 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41690 10 6452 1 2025-08-06 20:24:07.297 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 20:28:36.543 00:00:10.367 TCP 23.104.0.1:39760 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:29:00.890 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45950 10 6452 1 2025-08-06 20:29:17.637 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 20:29:17.430 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 20:29:36.946 00:00:10.365 TCP 23.104.0.1:56328 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:30:01.102 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:39492 10 6452 1 2025-08-06 20:30:37.354 00:00:10.362 TCP 23.104.0.1:45124 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:31:01.269 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41578 10 6452 1 2025-08-06 20:31:37.759 00:00:10.378 TCP 23.104.0.1:48514 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:32:01.482 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47890 10 6452 1 2025-08-06 20:32:38.179 00:00:10.365 TCP 23.104.0.1:49100 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:33:01.700 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58574 10 6452 1 2025-08-06 20:29:07.301 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 20:33:38.587 00:00:10.368 TCP 23.104.0.1:60468 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:30:07.298 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 20:34:01.915 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47382 10 6452 1 2025-08-06 20:34:17.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 20:34:17.670 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 20:34:38.993 00:00:10.396 TCP 23.104.0.1:36632 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:35:02.125 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52760 10 6452 1 2025-08-06 20:35:39.430 00:00:10.370 TCP 23.104.0.1:57262 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:36:02.345 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58398 10 6452 1 2025-08-06 20:36:39.835 00:00:10.397 TCP 23.104.0.1:56936 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:37:02.559 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39264 10 6452 1 2025-08-06 20:37:40.270 00:00:10.433 TCP 23.104.0.1:38436 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:38:02.775 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53328 10 6452 1 2025-08-06 20:38:40.755 00:00:10.396 TCP 23.104.0.1:36470 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:35:07.302 00:05:00.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 20:39:02.983 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:49760 10 6452 1 2025-08-06 20:39:17.714 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 20:39:17.349 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 20:39:41.193 00:00:10.650 TCP 23.104.0.1:40336 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:36:07.297 00:05:00.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 20:40:03.172 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51262 10 6452 1 2025-08-06 20:40:41.881 00:00:10.369 TCP 23.104.0.1:51722 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:41:03.384 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34466 10 6452 1 2025-08-06 20:41:42.298 00:00:12.043 TCP 23.104.0.1:36408 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:42:03.606 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59310 10 6452 1 2025-08-06 20:42:44.383 00:00:10.373 TCP 23.104.0.1:51950 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:43:03.815 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44696 10 6452 1 2025-08-06 20:43:44.794 00:00:10.360 TCP 23.104.0.1:45794 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:44:04.044 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46754 10 6452 1 2025-08-06 20:44:17.656 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 20:44:17.669 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 20:44:45.196 00:00:10.368 TCP 23.104.0.1:43882 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:41:07.304 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 20:45:04.251 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39626 10 6452 1 2025-08-06 20:45:45.605 00:00:10.322 TCP 23.104.0.1:46502 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:42:07.301 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 20:46:04.421 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53824 10 6452 1 2025-08-06 20:46:45.963 00:00:10.376 TCP 23.104.0.1:58526 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:47:04.642 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44528 10 6452 1 2025-08-06 20:47:46.379 00:00:10.365 TCP 23.104.0.1:51960 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:48:04.851 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53310 10 6452 1 2025-08-06 20:48:46.783 00:00:10.370 TCP 23.104.0.1:59376 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:49:05.036 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52382 10 6452 1 2025-08-06 20:49:17.943 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 20:49:17.981 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 20:49:47.193 00:00:10.322 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:50:05.249 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37614 10 6452 1 2025-08-06 20:50:47.553 00:00:10.361 TCP 23.104.0.1:53500 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:47:07.306 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 20:51:05.455 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52540 10 6452 1 2025-08-06 20:51:47.958 00:00:10.327 TCP 23.104.0.1:32950 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:48:07.304 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 20:52:05.668 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60610 10 6452 1 2025-08-06 20:52:48.322 00:00:10.330 TCP 23.104.0.1:43056 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:53:05.877 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48868 10 6452 1 2025-08-06 20:53:48.690 00:00:10.325 TCP 23.104.0.1:35062 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:54:06.096 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43758 10 6452 1 2025-08-06 20:54:18.041 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 20:54:17.848 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 20:54:49.067 00:00:10.329 TCP 23.104.0.1:40078 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:55:06.309 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48276 10 6452 1 2025-08-06 20:55:49.441 00:00:10.321 TCP 23.104.0.1:45020 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:56:06.524 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49626 10 6452 1 2025-08-06 20:56:49.801 00:00:10.373 TCP 23.104.0.1:55420 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:53:07.309 00:05:00.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 20:57:06.694 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56692 10 6452 1 2025-08-06 20:57:50.213 00:00:10.321 TCP 23.104.0.1:40828 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:54:07.307 00:05:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 20:58:06.912 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45888 10 6452 1 Summary: total flows: 163, total bytes: 496893, total packets: 1562, avg bps: 1100, avg pps: 0, avg bpp: 318 Time window: 2025-08-06 19:58:54 - 2025-08-06 20:59:08 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0022s Wall: 0.0029s flows/second: 56015.7 Runtime: 0.0029s