Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 08:58:42.094 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39732 10 6452 1 2025-08-12 08:58:48.474 00:00:10.372 TCP 23.104.0.1:43138 -> 1.101.0.1:3000 11 1507 1 2025-08-12 08:59:42.308 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60098 10 6452 1 2025-08-12 08:59:48.888 00:00:10.402 TCP 23.104.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-08-12 08:55:10.076 00:06:00.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 09:00:42.522 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59118 10 6452 1 2025-08-12 09:00:49.334 00:00:10.370 TCP 23.104.0.1:57472 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:01:56.795 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 09:01:56.928 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 09:01:42.732 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55724 10 6452 1 2025-08-12 09:01:49.737 00:00:10.330 TCP 23.104.0.1:48980 -> 1.101.0.1:3000 11 1507 1 2025-08-12 08:57:10.076 00:06:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 09:02:42.945 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35390 10 6452 1 2025-08-12 09:02:50.109 00:00:10.325 TCP 23.104.0.1:44028 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:03:43.184 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51534 10 6452 1 2025-08-12 09:03:50.475 00:00:10.364 TCP 23.104.0.1:34102 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:04:43.400 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58854 10 6452 1 2025-08-12 09:04:50.876 00:00:10.374 TCP 23.104.0.1:47290 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:05:43.610 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42060 10 6452 1 2025-08-12 09:05:51.288 00:00:10.369 TCP 23.104.0.1:51328 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:06:43.787 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49528 10 6452 1 2025-08-12 09:06:56.941 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 09:06:57.031 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 09:06:51.694 00:00:10.365 TCP 23.104.0.1:44466 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:02:10.080 00:06:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 09:07:44.001 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36740 10 6452 1 2025-08-12 09:07:52.103 00:00:10.364 TCP 23.104.0.1:34752 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:08:44.219 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58608 10 6452 1 2025-08-12 09:08:52.510 00:00:10.368 TCP 23.104.0.1:48132 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:04:10.078 00:06:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 09:09:44.429 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46378 10 6452 1 2025-08-12 09:09:52.915 00:00:10.392 TCP 23.104.0.1:41508 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:10:44.645 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43682 10 6452 1 2025-08-12 09:10:53.344 00:00:10.368 TCP 23.104.0.1:55838 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:11:56.857 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 09:11:44.861 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59840 10 6452 1 2025-08-12 09:11:56.907 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 09:11:53.753 00:00:10.331 TCP 23.104.0.1:59748 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:12:45.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37518 10 6452 1 2025-08-12 09:12:54.124 00:00:10.327 TCP 23.104.0.1:42992 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:13:45.298 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36356 10 6452 1 2025-08-12 09:13:54.492 00:00:10.358 TCP 23.104.0.1:47552 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:09:10.081 00:06:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 09:14:45.472 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-08-12 09:14:54.890 00:00:10.370 TCP 23.104.0.1:33302 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:15:45.644 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38592 10 6452 1 2025-08-12 09:15:55.298 00:00:10.419 TCP 23.104.0.1:41186 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:11:10.079 00:06:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 09:16:45.823 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54242 10 6452 1 2025-08-12 09:16:57.046 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 09:16:57.156 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 09:16:55.758 00:00:10.374 TCP 23.104.0.1:36446 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:17:46.069 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40612 10 6452 1 2025-08-12 09:17:56.167 00:00:10.323 TCP 23.104.0.1:44530 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:18:46.282 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42466 10 6452 1 2025-08-12 09:18:56.523 00:00:10.364 TCP 23.104.0.1:35148 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:19:46.500 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50234 10 6452 1 2025-08-12 09:19:56.926 00:00:10.383 TCP 23.104.0.1:45968 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:20:46.724 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39770 10 6452 1 2025-08-12 09:20:57.345 00:00:10.368 TCP 23.104.0.1:49178 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:16:10.083 00:06:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 09:21:46.948 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:47448 10 6452 1 2025-08-12 09:21:57.362 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 09:21:57.611 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 09:21:57.748 00:00:10.377 TCP 23.104.0.1:52022 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:22:47.191 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49186 10 6452 1 2025-08-12 09:22:58.168 00:00:10.368 TCP 23.104.0.1:44368 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:18:10.081 00:06:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 09:23:47.402 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54330 10 6452 1 2025-08-12 09:23:58.572 00:00:10.325 TCP 23.104.0.1:44154 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:24:47.622 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42008 10 6452 1 2025-08-12 09:24:58.939 00:00:10.376 TCP 23.104.0.1:54732 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:25:47.838 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38956 10 6452 1 2025-08-12 09:25:59.356 00:00:10.325 TCP 23.104.0.1:43364 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:26:57.477 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 09:26:48.072 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:33094 10 6452 1 2025-08-12 09:26:57.257 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 09:26:59.720 00:00:10.366 TCP 23.104.0.1:45138 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:27:48.251 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43074 10 6452 1 2025-08-12 09:23:10.085 00:06:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 09:28:00.121 00:00:10.323 TCP 23.104.0.1:34362 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:28:48.467 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:33266 10 6452 1 2025-08-12 09:29:00.480 00:00:10.379 TCP 23.104.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:29:48.675 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45796 10 6452 1 2025-08-12 09:30:00.883 00:00:10.331 TCP 23.104.0.1:48842 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:25:10.082 00:06:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 09:30:48.883 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52404 10 6452 1 2025-08-12 09:31:01.248 00:00:10.331 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:31:57.373 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 09:31:49.079 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53818 10 6452 1 2025-08-12 09:31:57.236 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 09:32:01.632 00:00:10.340 TCP 23.104.0.1:54582 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:32:49.295 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34878 10 6452 1 2025-08-12 09:33:02.016 00:00:10.362 TCP 23.104.0.1:58832 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:33:49.468 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:59058 10 6452 1 2025-08-12 09:34:02.421 00:00:10.759 TCP 23.104.0.1:56480 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:34:49.675 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37472 10 6452 1 2025-08-12 09:30:10.086 00:06:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 09:35:03.220 00:00:10.323 TCP 23.104.0.1:52654 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:35:49.884 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60272 10 6452 1 2025-08-12 09:36:03.581 00:00:10.363 TCP 23.104.0.1:44566 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:36:57.584 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 09:36:50.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51868 10 6452 1 2025-08-12 09:36:57.464 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 09:32:10.083 00:06:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 09:37:03.983 00:00:10.375 TCP 23.104.0.1:43162 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:37:50.328 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40910 10 6452 1 2025-08-12 09:38:04.392 00:00:10.363 TCP 23.104.0.1:39398 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:38:50.541 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39478 10 6452 1 2025-08-12 09:39:04.797 00:00:10.367 TCP 23.104.0.1:33540 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:39:50.724 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:44928 12 10367 1 2025-08-12 09:40:05.205 00:00:10.443 TCP 23.104.0.1:35486 -> 1.101.0.1:3000 15 1926 1 2025-08-12 09:40:50.990 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33766 10 6452 1 2025-08-12 09:41:05.685 00:00:10.374 TCP 23.104.0.1:35732 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:41:57.724 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 09:41:57.615 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 09:41:51.172 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47712 10 6452 1 2025-08-12 09:37:10.091 00:06:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 09:42:06.102 00:00:10.324 TCP 23.104.0.1:41854 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:42:51.354 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47350 10 6452 1 2025-08-12 09:43:06.464 00:00:10.366 TCP 23.104.0.1:36364 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:43:51.569 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-08-12 09:39:10.086 00:06:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 09:44:06.868 00:00:10.323 TCP 23.104.0.1:41062 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:44:51.780 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58076 10 6452 1 2025-08-12 09:45:07.231 00:00:10.365 TCP 23.104.0.1:57636 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:45:51.993 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52198 10 6452 1 2025-08-12 09:46:07.634 00:00:10.369 TCP 23.104.0.1:43580 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:46:57.801 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 09:46:57.684 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 09:46:52.216 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37704 10 6452 1 2025-08-12 09:47:08.060 00:00:10.362 TCP 23.104.0.1:38888 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:47:52.433 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50182 10 6452 1 2025-08-12 09:48:08.467 00:00:10.367 TCP 23.104.0.1:37264 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:48:52.660 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50024 10 6452 1 2025-08-12 09:44:10.089 00:06:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 09:49:08.872 00:00:10.324 TCP 23.104.0.1:41856 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:49:52.883 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53906 10 6452 1 2025-08-12 09:50:09.237 00:00:10.367 TCP 23.104.0.1:57034 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:50:53.078 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45036 10 6452 1 2025-08-12 09:46:10.087 00:06:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 09:51:09.641 00:00:10.362 TCP 23.104.0.1:50280 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:51:57.950 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 09:51:57.903 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 09:51:53.290 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43426 10 6452 1 2025-08-12 09:52:10.050 00:00:10.365 TCP 23.104.0.1:34820 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:52:53.462 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57730 12 6556 1 2025-08-12 09:53:10.450 00:00:10.326 TCP 23.104.0.1:56112 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:53:53.672 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60344 10 6452 1 2025-08-12 09:54:10.816 00:00:10.369 TCP 23.104.0.1:37800 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:54:53.887 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52070 10 6452 1 2025-08-12 09:55:11.222 00:00:10.365 TCP 23.104.0.1:45946 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:55:54.075 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54410 10 6452 1 2025-08-12 09:51:10.091 00:06:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 09:56:11.633 00:00:10.325 TCP 23.104.0.1:56050 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:56:57.728 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 09:56:57.917 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 09:56:54.250 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36636 10 6452 1 2025-08-12 09:57:11.995 00:00:10.361 TCP 23.104.0.1:55006 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:57:54.429 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44696 10 6452 1 2025-08-12 09:53:10.089 00:06:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 09:58:12.396 00:00:10.322 TCP 23.104.0.1:34070 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503524, total packets: 1592, avg bps: 1048, avg pps: 0, avg bpp: 316 Time window: 2025-08-12 08:55:10 - 2025-08-12 09:59:10 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0025s User: 0.0012s Wall: 0.0014s flows/second: 115204.7 Runtime: 0.0014s