Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 12:58:55.304 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56900 10 6452 1 2025-08-12 12:59:35.909 00:00:10.368 TCP 23.104.0.1:34864 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:59:55.532 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58552 10 6452 1 2025-08-12 12:55:10.149 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-12 13:00:36.312 00:00:10.326 TCP 23.104.0.1:41346 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:00:55.759 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48170 10 6452 1 2025-08-12 13:01:36.672 00:00:10.370 TCP 23.104.0.1:42428 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:02:01.618 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 13:02:01.724 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 13:01:55.986 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50950 10 6452 1 2025-08-12 13:02:37.105 00:00:10.323 TCP 23.104.0.1:43434 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:02:56.216 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53980 10 6452 1 2025-08-12 13:03:37.467 00:00:10.361 TCP 23.104.0.1:34294 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:03:56.435 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60852 10 6452 1 2025-08-12 13:04:37.874 00:00:10.367 TCP 23.104.0.1:39134 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:04:56.660 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56010 10 6452 1 2025-08-12 13:00:10.153 00:06:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 13:05:38.280 00:00:10.362 TCP 23.104.0.1:54166 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:05:56.881 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-08-12 13:01:10.988 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-08-12 13:06:38.680 00:00:10.363 TCP 23.104.0.1:42944 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:07:01.798 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 13:07:01.708 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 13:06:57.108 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46996 10 6452 1 2025-08-12 13:07:39.106 00:00:10.361 TCP 23.104.0.1:52718 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:07:57.339 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39092 10 6452 1 2025-08-12 13:08:39.507 00:00:10.604 TCP 23.104.0.1:44972 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:08:57.552 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49854 10 6452 1 2025-08-12 13:09:40.147 00:00:10.442 TCP 23.104.0.1:48214 -> 1.101.0.1:3000 15 1926 1 2025-08-12 13:09:57.765 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:35220 12 10367 1 2025-08-12 13:10:40.629 00:00:10.327 TCP 23.104.0.1:55024 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:10:57.972 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:49138 10 6452 1 2025-08-12 13:11:40.995 00:00:10.323 TCP 23.104.0.1:46868 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:12:01.961 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 13:12:01.992 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 13:07:10.155 00:06:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 13:11:58.210 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54882 10 6452 1 2025-08-12 13:12:41.359 00:00:10.366 TCP 23.104.0.1:38598 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:12:58.421 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41946 10 6452 1 2025-08-12 13:08:10.151 00:06:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 13:13:41.771 00:00:10.369 TCP 23.104.0.1:42798 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:13:58.629 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34832 10 6452 1 2025-08-12 13:14:42.182 00:00:10.363 TCP 23.104.0.1:58736 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:14:58.804 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38236 10 6452 1 2025-08-12 13:15:42.587 00:00:10.365 TCP 23.104.0.1:40468 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:15:59.015 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33920 10 6452 1 2025-08-12 13:16:42.989 00:00:10.366 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:17:01.796 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 13:17:01.991 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 13:16:59.231 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59866 10 6452 1 2025-08-12 13:17:43.395 00:00:10.329 TCP 23.104.0.1:55374 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:17:59.445 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54634 10 6452 1 2025-08-12 13:18:43.754 00:00:11.578 TCP 23.104.0.1:43196 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:14:10.158 00:06:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 13:18:59.660 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43852 10 6452 1 2025-08-12 13:19:45.375 00:00:10.365 TCP 23.104.0.1:53502 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:15:10.157 00:06:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 13:19:59.869 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53262 10 6452 1 2025-08-12 13:20:45.779 00:00:10.366 TCP 23.104.0.1:33176 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:21:00.094 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60968 10 6452 1 2025-08-12 13:21:46.184 00:00:10.360 TCP 23.104.0.1:54598 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:22:02.027 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 13:22:01.983 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 13:22:00.308 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44646 10 6452 1 2025-08-12 13:22:46.582 00:00:10.363 TCP 23.104.0.1:48802 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:23:00.529 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53882 10 6452 1 2025-08-12 13:23:46.982 00:00:10.369 TCP 23.104.0.1:44546 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:24:00.738 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47896 10 6452 1 2025-08-12 13:24:47.386 00:00:10.374 TCP 23.104.0.1:53304 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:25:00.951 00:00:10.382 TCP 1.101.0.1:3000 -> 22.102.0.1:47760 10 6452 1 2025-08-12 13:25:47.800 00:00:10.361 TCP 23.104.0.1:57632 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:21:10.161 00:06:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 13:26:01.367 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 10 6452 1 2025-08-12 13:26:48.201 00:00:10.369 TCP 23.104.0.1:37184 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:27:02.502 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 13:27:02.735 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 13:27:01.586 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44656 10 6452 1 2025-08-12 13:22:10.158 00:06:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 13:27:48.606 00:00:10.366 TCP 23.104.0.1:47522 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:28:01.825 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40618 10 6452 1 2025-08-12 13:28:49.006 00:00:10.320 TCP 23.104.0.1:37280 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:29:02.069 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34204 10 6452 1 2025-08-12 13:29:49.360 00:00:10.324 TCP 23.104.0.1:34072 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:30:02.284 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34444 12 6556 1 2025-08-12 13:30:49.720 00:00:10.369 TCP 23.104.0.1:34224 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:31:02.513 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60122 10 6452 1 2025-08-12 13:31:50.124 00:00:10.368 TCP 23.104.0.1:35670 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:32:02.267 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 13:32:01.997 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 13:32:02.687 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34784 10 6452 1 2025-08-12 13:32:50.524 00:00:10.362 TCP 23.104.0.1:44938 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:28:10.161 00:06:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 13:33:02.902 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35922 10 6452 1 2025-08-12 13:33:50.921 00:00:10.391 TCP 23.104.0.1:53504 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:29:10.161 00:06:00.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 13:34:03.120 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36362 10 6452 1 2025-08-12 13:34:51.352 00:00:10.367 TCP 23.104.0.1:38628 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:35:03.290 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33710 10 6452 1 2025-08-12 13:35:51.757 00:00:10.386 TCP 23.104.0.1:39010 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:36:03.459 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43750 10 6452 1 2025-08-12 13:37:02.166 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 13:36:52.180 00:00:10.363 TCP 23.104.0.1:60680 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:37:02.374 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 13:37:03.629 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36832 10 6452 1 2025-08-12 13:37:52.579 00:00:10.332 TCP 23.104.0.1:43370 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:38:03.845 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52412 10 6452 1 2025-08-12 13:38:52.960 00:00:10.369 TCP 23.104.0.1:34972 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:39:04.076 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37380 10 6452 1 2025-08-12 13:39:53.367 00:00:10.369 TCP 23.104.0.1:46370 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:35:10.164 00:06:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 13:40:04.293 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-08-12 13:40:53.771 00:00:10.333 TCP 23.104.0.1:33588 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:36:10.161 00:06:00.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 13:41:04.509 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38224 10 6452 1 2025-08-12 13:42:02.482 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 13:42:02.399 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 13:41:54.140 00:00:10.366 TCP 23.104.0.1:47390 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:42:04.726 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53138 11 6504 1 2025-08-12 13:42:54.545 00:00:10.377 TCP 23.104.0.1:39338 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:43:04.958 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53072 10 6452 1 2025-08-12 13:43:54.962 00:00:10.368 TCP 23.104.0.1:48016 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:44:05.185 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54674 10 6452 1 2025-08-12 13:44:55.381 00:00:10.374 TCP 23.104.0.1:34984 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:45:05.400 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40088 10 6452 1 2025-08-12 13:45:55.789 00:00:10.382 TCP 23.104.0.1:59670 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:46:05.627 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53574 10 6452 1 2025-08-12 13:46:56.195 00:00:10.370 TCP 23.104.0.1:52772 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:47:02.553 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 13:47:02.553 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 13:42:10.165 00:06:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 13:47:05.847 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51040 10 6452 1 2025-08-12 13:47:56.603 00:00:10.366 TCP 23.104.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:43:10.163 00:06:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 13:48:06.085 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44902 10 6452 1 2025-08-12 13:48:57.012 00:00:10.322 TCP 23.104.0.1:45704 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:49:06.309 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34512 10 6452 1 2025-08-12 13:49:57.372 00:00:10.360 TCP 23.104.0.1:55234 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:50:06.528 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53766 10 6452 1 2025-08-12 13:50:57.769 00:00:10.373 TCP 23.104.0.1:44076 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:51:06.749 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39614 10 6452 1 2025-08-12 13:52:02.657 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 13:52:02.931 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 13:51:58.177 00:00:10.329 TCP 23.104.0.1:40654 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:52:06.969 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59898 10 6452 1 2025-08-12 13:52:58.544 00:00:10.364 TCP 23.104.0.1:41184 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:53:07.199 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33746 10 6452 1 2025-08-12 13:50:10.163 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 13:49:10.165 00:06:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 13:53:58.946 00:00:10.335 TCP 23.104.0.1:53628 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:54:07.425 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35704 10 6452 1 2025-08-12 13:54:59.320 00:00:10.365 TCP 23.104.0.1:34378 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:55:07.640 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51624 10 6452 1 2025-08-12 13:55:59.719 00:00:10.376 TCP 23.104.0.1:58326 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:56:07.829 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33194 10 6452 1 2025-08-12 13:57:02.658 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 13:57:02.735 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 13:57:00.133 00:00:10.362 TCP 23.104.0.1:32872 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:57:08.077 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36944 10 6452 1 2025-08-12 13:58:00.533 00:00:10.361 TCP 23.104.0.1:35470 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:58:08.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56586 10 6452 1 Summary: total flows: 160, total bytes: 500962, total packets: 1564, avg bps: 1057, avg pps: 0, avg bpp: 320 Time window: 2025-08-12 12:55:10 - 2025-08-12 13:58:18 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0032s User: 0.0008s Wall: 0.0020s flows/second: 79958.1 Runtime: 0.0020s