Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 09:58:54.642 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60858 10 6452 1 2025-08-12 09:59:12.756 00:00:10.390 TCP 23.104.0.1:37544 -> 1.101.0.1:3000 11 1507 1 2025-08-12 09:59:54.858 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53322 10 6452 1 2025-08-12 10:00:13.183 00:00:10.364 TCP 23.104.0.1:33128 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:00:55.088 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46106 10 6452 1 2025-08-12 10:01:13.580 00:00:10.369 TCP 23.104.0.1:43928 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:01:57.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 10:01:58.045 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 10:01:55.296 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54054 10 6452 1 2025-08-12 10:02:13.986 00:00:10.370 TCP 23.104.0.1:36082 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:02:55.515 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 10 6452 1 2025-08-12 09:58:10.093 00:06:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 10:03:14.396 00:00:10.332 TCP 23.104.0.1:53308 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:03:55.729 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34490 10 6452 1 2025-08-12 10:04:14.775 00:00:10.371 TCP 23.104.0.1:59800 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:04:55.942 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:48672 10 6452 1 2025-08-12 10:00:10.091 00:06:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 10:05:15.189 00:00:10.369 TCP 23.104.0.1:49928 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:05:56.188 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35112 10 6452 1 2025-08-12 10:06:15.598 00:00:10.372 TCP 23.104.0.1:44904 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:06:58.258 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 10:06:57.851 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 10:06:56.412 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35844 10 6452 1 2025-08-12 10:07:16.012 00:00:10.363 TCP 23.104.0.1:45482 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:07:56.626 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53844 10 6452 1 2025-08-12 10:08:16.410 00:00:10.368 TCP 23.104.0.1:39352 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:08:56.836 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52572 10 6452 1 2025-08-12 10:09:16.813 00:00:10.329 TCP 23.104.0.1:37632 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:09:57.074 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:55844 12 10367 1 2025-08-12 10:05:10.103 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 10:10:17.180 00:00:10.402 TCP 23.104.0.1:40426 -> 1.101.0.1:3000 15 1926 1 2025-08-12 10:10:57.272 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38228 10 6452 1 2025-08-12 10:11:17.619 00:00:10.364 TCP 23.104.0.1:50500 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:11:58.395 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 10:11:58.313 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 10:11:57.492 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45732 10 6452 1 2025-08-12 10:07:10.102 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 10:12:18.031 00:00:10.362 TCP 23.104.0.1:47348 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:12:57.663 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37904 10 6452 1 2025-08-12 10:13:18.435 00:00:10.323 TCP 23.104.0.1:58628 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:13:57.900 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51738 10 6452 1 2025-08-12 10:14:18.796 00:00:10.368 TCP 23.104.0.1:35406 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:14:58.128 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49154 10 6452 1 2025-08-12 10:15:19.204 00:00:10.363 TCP 23.104.0.1:38404 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:15:58.346 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60624 10 6452 1 2025-08-12 10:16:19.606 00:00:10.366 TCP 23.104.0.1:40764 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:16:58.277 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 10:16:58.095 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 10:12:10.108 00:06:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 10:16:58.557 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44612 10 6452 1 2025-08-12 10:17:20.010 00:00:10.340 TCP 23.104.0.1:52636 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:17:58.771 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34282 10 6452 1 2025-08-12 10:18:20.388 00:00:10.369 TCP 23.104.0.1:51930 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:14:10.105 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 10:18:58.985 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60080 10 6452 1 2025-08-12 10:19:20.796 00:00:10.367 TCP 23.104.0.1:44934 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:19:59.206 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43310 10 6452 1 2025-08-12 10:20:21.202 00:00:10.375 TCP 23.104.0.1:55710 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:20:59.428 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41628 10 6452 1 2025-08-12 10:21:21.612 00:00:10.330 TCP 23.104.0.1:48068 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:21:58.587 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 10:21:58.390 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 10:21:59.643 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38984 10 6452 1 2025-08-12 10:22:21.979 00:00:10.336 TCP 23.104.0.1:46842 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:22:59.861 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41352 10 6452 1 2025-08-12 10:23:22.353 00:00:10.324 TCP 23.104.0.1:46490 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:19:10.108 00:06:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 10:24:00.083 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57934 10 6452 1 2025-08-12 10:24:22.715 00:00:10.380 TCP 23.104.0.1:55236 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:25:00.305 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32800 10 6452 1 2025-08-12 10:25:23.131 00:00:10.323 TCP 23.104.0.1:36150 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:26:00.521 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53496 10 6452 1 2025-08-12 10:21:10.106 00:06:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 10:26:23.487 00:00:12.724 TCP 23.104.0.1:49862 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:26:58.655 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 10:26:58.706 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 10:27:00.696 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44440 10 6452 1 2025-08-12 10:27:26.252 00:00:10.322 TCP 23.104.0.1:45104 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:28:00.907 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34706 10 6452 1 2025-08-12 10:28:26.611 00:00:10.322 TCP 23.104.0.1:39826 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:29:01.118 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55016 10 6452 1 2025-08-12 10:29:26.972 00:00:10.378 TCP 23.104.0.1:34798 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:30:01.333 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57710 10 6452 1 2025-08-12 10:30:27.386 00:00:10.371 TCP 23.104.0.1:35318 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:26:10.110 00:06:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 10:31:01.549 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41562 10 6452 1 2025-08-12 10:31:27.792 00:00:10.373 TCP 23.104.0.1:48176 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:31:58.485 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 10:31:58.790 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 10:32:01.719 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40842 10 6452 1 2025-08-12 10:32:28.202 00:00:10.324 TCP 23.104.0.1:54064 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:28:10.107 00:06:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 10:33:01.934 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:34536 10 6452 1 2025-08-12 10:33:28.563 00:00:10.358 TCP 23.104.0.1:32844 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:34:02.130 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42336 10 6452 1 2025-08-12 10:34:28.957 00:00:10.322 TCP 23.104.0.1:40196 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:35:02.343 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58260 10 6452 1 2025-08-12 10:35:29.328 00:00:10.381 TCP 23.104.0.1:33612 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:36:02.515 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35954 10 6452 1 2025-08-12 10:36:29.746 00:00:10.396 TCP 23.104.0.1:57880 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:36:58.826 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 10:36:58.757 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 10:37:02.727 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49322 10 6452 1 2025-08-12 10:37:30.187 00:00:10.344 TCP 23.104.0.1:48068 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:33:10.112 00:06:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 10:38:02.900 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45376 10 6452 1 2025-08-12 10:38:30.575 00:00:10.366 TCP 23.104.0.1:42258 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:39:03.128 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53994 10 6452 1 2025-08-12 10:39:30.982 00:00:10.366 TCP 23.104.0.1:57032 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:35:10.111 00:06:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 10:40:03.361 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33294 10 6452 1 2025-08-12 10:40:31.387 00:00:10.362 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:41:03.539 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54946 10 6452 1 2025-08-12 10:41:31.790 00:00:10.321 TCP 23.104.0.1:38388 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:41:58.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 10:41:58.905 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 10:42:03.745 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41686 10 6452 1 2025-08-12 10:42:32.149 00:00:10.322 TCP 23.104.0.1:35384 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:43:03.960 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43840 10 6452 1 2025-08-12 10:43:32.510 00:00:10.367 TCP 23.104.0.1:60146 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:44:04.196 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53870 10 6452 1 2025-08-12 10:44:32.920 00:00:10.347 TCP 23.104.0.1:60752 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:40:10.115 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 10:45:04.370 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57934 10 6452 1 2025-08-12 10:45:33.303 00:00:10.321 TCP 23.104.0.1:42126 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:46:04.582 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41742 10 6452 1 2025-08-12 10:46:33.665 00:00:10.363 TCP 23.104.0.1:59050 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:46:58.740 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 10:46:58.703 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 10:42:10.113 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 10:47:04.793 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42972 10 6452 1 2025-08-12 10:47:34.095 00:00:10.366 TCP 23.104.0.1:38984 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:48:05.027 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47188 10 6452 1 2025-08-12 10:48:34.498 00:00:10.372 TCP 23.104.0.1:41916 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:49:05.238 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55226 10 6452 1 2025-08-12 10:49:34.909 00:00:10.361 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:50:05.407 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58274 10 6452 1 2025-08-12 10:50:35.307 00:00:10.342 TCP 23.104.0.1:57646 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:51:05.617 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53270 10 6452 1 2025-08-12 10:51:35.686 00:00:10.370 TCP 23.104.0.1:44948 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:51:59.043 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 10:51:58.966 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 10:47:10.117 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 10:52:05.830 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55584 10 6452 1 2025-08-12 10:52:36.106 00:00:10.373 TCP 23.104.0.1:59820 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:53:06.073 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46288 10 6452 1 2025-08-12 10:53:36.516 00:00:10.365 TCP 23.104.0.1:46318 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:49:10.115 00:06:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 10:54:06.254 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44098 10 6452 1 2025-08-12 10:54:36.914 00:00:10.391 TCP 23.104.0.1:43352 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:55:06.472 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46888 10 6452 1 2025-08-12 10:55:37.337 00:00:10.366 TCP 23.104.0.1:43640 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:56:06.690 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:49746 10 6452 1 2025-08-12 10:56:37.746 00:00:10.330 TCP 23.104.0.1:33562 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:56:59.359 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 10:56:59.527 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 10:57:06.873 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38884 10 6452 1 2025-08-12 10:57:38.108 00:00:10.360 TCP 23.104.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-08-12 10:58:07.095 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59948 10 6452 1 2025-08-12 10:58:38.505 00:00:10.369 TCP 23.104.0.1:36886 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 501698, total packets: 1562, avg bps: 1103, avg pps: 0, avg bpp: 321 Time window: 2025-08-12 09:58:10 - 2025-08-12 10:58:48 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0034s User: 0.0017s Wall: 0.0026s flows/second: 61749.0 Runtime: 0.0026s