Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-10 06:58:50.009 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 10 6452 1 2025-08-10 06:59:41.077 00:00:10.320 TCP 23.104.0.1:37196 -> 1.101.0.1:3000 11 1507 1 2025-08-10 06:59:50.222 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37410 10 6452 1 2025-08-10 06:55:09.036 00:06:00.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 07:00:41.433 00:00:10.380 TCP 23.104.0.1:44808 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:00:56.720 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 07:00:56.662 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 07:00:50.437 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45326 10 6452 1 2025-08-10 07:01:41.855 00:00:10.376 TCP 23.104.0.1:56048 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:01:50.610 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34318 10 6452 1 2025-08-10 07:02:42.276 00:00:10.363 TCP 23.104.0.1:37526 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:02:50.819 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50610 10 6452 1 2025-08-10 07:03:42.676 00:00:10.366 TCP 23.104.0.1:56260 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:03:50.990 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44386 10 6452 1 2025-08-10 07:04:43.107 00:00:10.364 TCP 23.104.0.1:55672 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:04:51.216 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54782 10 6452 1 2025-08-10 07:00:09.036 00:06:00.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 07:05:56.785 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 07:05:43.508 00:00:10.366 TCP 23.104.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:05:56.798 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 07:05:51.435 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41356 10 6452 1 2025-08-10 07:06:43.912 00:00:10.361 TCP 23.104.0.1:33756 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:06:51.661 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60428 10 6452 1 2025-08-10 07:02:09.039 00:06:00.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 07:07:44.311 00:00:10.334 TCP 23.104.0.1:53788 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:07:51.832 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:52562 10 6452 1 2025-08-10 07:08:44.688 00:00:10.364 TCP 23.104.0.1:58988 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:08:52.005 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39088 10 6452 1 2025-08-10 07:09:45.104 00:00:10.335 TCP 23.104.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:09:52.215 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49578 10 6452 1 2025-08-10 07:10:57.149 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 07:10:45.492 00:00:10.370 TCP 23.104.0.1:43694 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:10:56.989 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 07:10:52.430 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45336 10 6452 1 2025-08-10 07:11:45.901 00:00:10.374 TCP 23.104.0.1:54574 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:11:52.644 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50928 10 6452 1 2025-08-10 07:07:09.041 00:06:00.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 07:12:46.312 00:00:10.364 TCP 23.104.0.1:34384 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:12:52.853 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59548 10 6452 1 2025-08-10 07:13:46.714 00:00:10.361 TCP 23.104.0.1:41264 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:13:53.036 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57958 10 6452 1 2025-08-10 07:09:09.044 00:06:00.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 07:14:47.113 00:00:10.365 TCP 23.104.0.1:53406 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:14:53.204 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47022 10 6452 1 2025-08-10 07:15:57.136 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 07:15:56.918 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 07:15:47.511 00:00:10.374 TCP 23.104.0.1:36926 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:15:53.384 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42866 10 6452 1 2025-08-10 07:16:47.922 00:00:10.336 TCP 23.104.0.1:36570 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:16:53.557 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60216 10 6452 1 2025-08-10 07:17:48.299 00:00:10.367 TCP 23.104.0.1:57358 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:17:53.781 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40900 10 6452 1 2025-08-10 07:18:48.701 00:00:10.366 TCP 23.104.0.1:53872 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:18:53.957 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60550 12 6556 1 2025-08-10 07:14:09.040 00:06:00.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 07:19:49.107 00:00:10.361 TCP 23.104.0.1:41326 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:19:54.196 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51988 10 6452 1 2025-08-10 07:20:57.166 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 07:20:57.053 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 07:20:49.508 00:00:10.369 TCP 23.104.0.1:40980 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:20:54.370 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56660 10 6452 1 2025-08-10 07:16:09.045 00:06:00.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 07:21:49.922 00:00:10.339 TCP 23.104.0.1:59306 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:21:54.582 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38074 10 6452 1 2025-08-10 07:22:50.304 00:00:10.364 TCP 23.104.0.1:38012 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:22:54.796 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45706 10 6452 1 2025-08-10 07:23:50.707 00:00:10.366 TCP 23.104.0.1:36522 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:23:55.004 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43360 10 6452 1 2025-08-10 07:24:51.109 00:00:10.369 TCP 23.104.0.1:51238 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:24:55.185 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:45232 10 6452 1 2025-08-10 07:25:56.907 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 07:25:57.498 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 07:25:51.512 00:00:10.368 TCP 23.104.0.1:51406 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:25:55.356 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36792 10 6452 1 2025-08-10 07:21:09.043 00:06:00.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 07:26:55.572 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45056 10 6452 1 2025-08-10 07:26:51.920 00:00:10.373 TCP 23.104.0.1:37030 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:27:52.331 00:00:10.365 TCP 23.104.0.1:49630 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:27:55.781 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56456 10 6452 1 2025-08-10 07:23:09.046 00:06:00.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 07:28:55.995 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47728 10 6452 1 2025-08-10 07:28:52.735 00:00:10.368 TCP 23.104.0.1:55212 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:29:53.139 00:00:10.360 TCP 23.104.0.1:55828 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:29:56.215 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40716 10 6452 1 2025-08-10 07:30:57.334 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 07:30:56.380 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36540 10 6452 1 2025-08-10 07:30:57.538 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 07:30:53.537 00:00:10.367 TCP 23.104.0.1:48274 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:31:53.947 00:00:10.369 TCP 23.104.0.1:41408 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:31:56.597 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41480 10 6452 1 2025-08-10 07:32:54.358 00:00:10.363 TCP 23.104.0.1:54940 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:32:56.769 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43830 10 6452 1 2025-08-10 07:28:09.044 00:06:00.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 07:33:54.763 00:00:10.329 TCP 23.104.0.1:42982 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:33:56.987 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:37422 10 6452 1 2025-08-10 07:34:55.131 00:00:10.327 TCP 23.104.0.1:60938 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:30:09.048 00:06:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 07:34:57.234 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59126 10 6452 1 2025-08-10 07:35:57.532 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 07:35:57.503 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 07:35:55.500 00:00:10.372 TCP 23.104.0.1:38680 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:35:57.458 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47618 10 6452 1 2025-08-10 07:36:55.915 00:00:10.364 TCP 23.104.0.1:58912 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:36:57.630 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36160 10 6452 1 2025-08-10 07:37:56.318 00:00:10.326 TCP 23.104.0.1:50882 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:37:57.803 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51830 10 6452 1 2025-08-10 07:38:56.694 00:00:10.521 TCP 23.104.0.1:42500 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:38:57.970 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47962 10 6452 1 2025-08-10 07:39:57.245 00:00:10.360 TCP 23.104.0.1:56404 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:39:58.199 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:38162 10 6452 1 2025-08-10 07:35:09.046 00:06:00.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 07:40:57.516 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 07:40:57.470 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 07:40:58.444 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41420 10 6452 1 2025-08-10 07:40:57.644 00:00:10.364 TCP 23.104.0.1:39018 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:41:58.058 00:00:10.369 TCP 23.104.0.1:51802 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:37:09.049 00:06:00.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 07:41:58.661 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51132 10 6452 1 2025-08-10 07:42:58.466 00:00:10.362 TCP 23.104.0.1:50312 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:42:58.876 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-08-10 07:43:59.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38316 10 6452 1 2025-08-10 07:43:58.863 00:00:10.369 TCP 23.104.0.1:41086 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:44:59.301 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60386 10 6452 1 2025-08-10 07:44:59.272 00:00:10.329 TCP 23.104.0.1:53808 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:45:57.418 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 07:45:57.453 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 07:45:59.639 00:00:10.366 TCP 23.104.0.1:48358 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:45:59.518 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6452 1 2025-08-10 07:47:00.049 00:00:10.362 TCP 23.104.0.1:60450 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:46:59.733 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47774 10 6452 1 2025-08-10 07:42:09.047 00:06:00.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 07:48:00.450 00:00:10.333 TCP 23.104.0.1:51626 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:47:59.899 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:42674 10 6452 1 2025-08-10 07:49:00.180 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33482 10 6452 1 2025-08-10 07:44:09.050 00:06:00.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 07:49:00.811 00:00:10.331 TCP 23.104.0.1:59378 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:50:00.369 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34396 10 6452 1 2025-08-10 07:50:01.182 00:00:10.368 TCP 23.104.0.1:44460 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:50:57.820 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 07:50:57.897 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 07:51:01.590 00:00:10.359 TCP 23.104.0.1:37602 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:51:00.537 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39326 10 6452 1 2025-08-10 07:52:00.712 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59202 10 6452 1 2025-08-10 07:52:01.989 00:00:10.326 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:53:00.929 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:51382 10 6452 1 2025-08-10 07:53:02.363 00:00:10.332 TCP 23.104.0.1:42644 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:54:01.129 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52244 10 6452 1 2025-08-10 07:49:09.051 00:06:00.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 07:54:02.734 00:00:10.371 TCP 23.104.0.1:42436 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:55:01.301 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38878 10 6452 1 2025-08-10 07:55:03.143 00:00:10.364 TCP 23.104.0.1:41712 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:55:57.848 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 07:55:57.776 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 07:56:01.516 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58508 10 6452 1 2025-08-10 07:51:09.053 00:06:00.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 07:56:03.555 00:00:10.437 TCP 23.104.0.1:40962 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:57:01.730 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53498 10 6452 1 2025-08-10 07:57:04.033 00:00:10.367 TCP 23.104.0.1:43316 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:58:04.438 00:00:10.318 TCP 23.104.0.1:58406 -> 1.101.0.1:3000 11 1507 1 2025-08-10 07:58:01.943 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:33714 10 6452 1 Summary: total flows: 160, total bytes: 496822, total packets: 1561, avg bps: 1049, avg pps: 0, avg bpp: 318 Time window: 2025-08-10 06:55:09 - 2025-08-10 07:58:14 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0031s User: 0.0016s Wall: 0.0032s flows/second: 50438.8 Runtime: 0.0032s