Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 16:58:51.601 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32820 10 6452 1 2025-08-12 16:59:26.465 00:00:10.374 TCP 23.104.0.1:43034 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:59:51.813 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55884 10 6452 1 2025-08-12 16:56:10.237 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 17:00:26.876 00:00:10.325 TCP 23.104.0.1:47888 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:00:52.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45534 10 6452 1 2025-08-12 16:57:10.240 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 17:01:27.235 00:00:10.370 TCP 23.104.0.1:48780 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:02:06.505 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 17:01:52.239 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37284 10 6452 1 2025-08-12 17:02:06.396 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 17:02:27.644 00:00:10.369 TCP 23.104.0.1:49990 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:02:52.454 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33364 10 6452 1 2025-08-12 17:03:28.057 00:00:10.379 TCP 23.104.0.1:57574 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:03:52.626 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43392 10 6452 1 2025-08-12 17:04:28.478 00:00:10.370 TCP 23.104.0.1:40298 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:04:52.846 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54088 10 6452 1 2025-08-12 17:05:28.881 00:00:10.377 TCP 23.104.0.1:55964 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:05:53.085 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52410 10 6452 1 2025-08-12 17:02:10.238 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 17:06:29.301 00:00:10.327 TCP 23.104.0.1:33120 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:07:06.584 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 17:06:53.259 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33958 10 6452 1 2025-08-12 17:07:06.678 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 17:03:10.241 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 17:07:29.665 00:00:10.362 TCP 23.104.0.1:53860 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:07:53.471 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45292 10 6452 1 2025-08-12 17:08:30.093 00:00:10.369 TCP 23.104.0.1:48646 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:08:53.683 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36084 10 6452 1 2025-08-12 17:09:30.502 00:00:10.367 TCP 23.104.0.1:55472 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:09:53.907 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:36422 10 6452 1 2025-08-12 17:10:30.907 00:00:10.324 TCP 23.104.0.1:37868 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:10:54.090 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51634 10 6452 1 2025-08-12 17:11:31.270 00:00:10.360 TCP 23.104.0.1:49644 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:12:06.532 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 17:11:54.313 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42254 10 6452 1 2025-08-12 17:12:06.650 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 17:08:10.240 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 17:12:31.669 00:00:10.325 TCP 23.104.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:12:54.523 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60326 10 6452 1 2025-08-12 17:09:10.242 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 17:13:32.035 00:00:10.326 TCP 23.104.0.1:59526 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:13:54.743 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40636 10 6452 1 2025-08-12 17:14:32.406 00:00:10.383 TCP 23.104.0.1:38808 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:14:54.914 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:40560 10 6452 1 2025-08-12 17:15:32.826 00:00:10.362 TCP 23.104.0.1:46186 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:15:55.116 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57714 10 6452 1 2025-08-12 17:16:33.223 00:00:10.367 TCP 23.104.0.1:44692 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:16:55.302 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47550 10 6452 1 2025-08-12 17:17:06.808 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 17:17:06.823 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 17:17:33.628 00:00:10.365 TCP 23.104.0.1:39020 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:17:55.479 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32770 10 6452 1 2025-08-12 17:14:10.241 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 17:18:34.035 00:00:13.163 TCP 23.104.0.1:51804 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:18:55.653 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42852 10 6452 1 2025-08-12 17:15:10.244 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 17:19:37.238 00:00:10.358 TCP 23.104.0.1:38152 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:19:55.877 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37310 10 6452 1 2025-08-12 17:20:37.638 00:00:10.329 TCP 23.104.0.1:39686 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:20:56.105 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56576 10 6452 1 2025-08-12 17:21:38.008 00:00:10.322 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:21:56.312 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44702 10 6452 1 2025-08-12 17:22:06.717 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 17:22:06.983 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 17:22:38.373 00:00:10.363 TCP 23.104.0.1:34614 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:22:56.534 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:40464 10 6452 1 2025-08-12 17:23:38.770 00:00:10.372 TCP 23.104.0.1:59724 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:23:56.729 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44494 10 6452 1 2025-08-12 17:20:10.245 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 17:24:39.174 00:00:10.359 TCP 23.104.0.1:54152 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:21:10.247 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 17:24:56.974 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34744 10 6452 1 2025-08-12 17:25:39.571 00:00:10.360 TCP 23.104.0.1:41154 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:25:57.214 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36540 10 6452 1 2025-08-12 17:26:39.971 00:00:10.368 TCP 23.104.0.1:41300 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:27:06.806 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 17:27:06.933 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 17:26:57.430 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35860 10 6452 1 2025-08-12 17:27:40.372 00:00:10.323 TCP 23.104.0.1:40578 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:27:57.644 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59106 10 6452 1 2025-08-12 17:28:40.737 00:00:10.368 TCP 23.104.0.1:33728 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:28:57.815 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55856 10 6452 1 2025-08-12 17:29:41.143 00:00:10.320 TCP 23.104.0.1:37646 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:29:58.039 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60526 10 6452 1 2025-08-12 17:26:10.247 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 17:30:41.506 00:00:10.364 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:27:10.249 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 17:30:58.256 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50452 10 6452 1 2025-08-12 17:31:41.906 00:00:10.367 TCP 23.104.0.1:56000 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:32:06.973 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 17:32:06.868 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 17:31:58.476 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55574 10 6452 1 2025-08-12 17:32:42.310 00:00:10.321 TCP 23.104.0.1:49614 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:32:58.694 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43158 10 6452 1 2025-08-12 17:33:42.669 00:00:10.333 TCP 23.104.0.1:43092 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:33:58.905 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43586 10 6452 1 2025-08-12 17:34:43.038 00:00:10.339 TCP 23.104.0.1:58478 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:34:59.126 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49850 10 6452 1 2025-08-12 17:35:43.417 00:00:10.381 TCP 23.104.0.1:33548 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:35:59.336 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-08-12 17:32:10.248 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 17:36:43.835 00:00:10.384 TCP 23.104.0.1:33928 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:36:59.503 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41616 10 6452 1 2025-08-12 17:37:07.167 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 17:37:07.283 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 17:33:10.251 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 17:37:44.265 00:00:10.367 TCP 23.104.0.1:51600 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:37:59.715 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59554 10 6452 1 2025-08-12 17:38:44.668 00:00:10.367 TCP 23.104.0.1:46796 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:38:59.927 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37320 10 6452 1 2025-08-12 17:39:45.102 00:00:10.367 TCP 23.104.0.1:50932 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:40:00.167 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53054 10 6452 1 2025-08-12 17:40:45.507 00:00:10.327 TCP 23.104.0.1:36594 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:41:00.382 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38788 10 6452 1 2025-08-12 17:41:45.874 00:00:10.361 TCP 23.104.0.1:53362 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:42:07.278 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 17:38:10.252 00:05:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 17:42:00.598 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40184 10 6452 1 2025-08-12 17:42:07.249 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 17:42:46.273 00:00:10.336 TCP 23.104.0.1:57710 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:39:10.254 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 17:43:00.771 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56916 10 6452 1 2025-08-12 17:43:46.649 00:00:10.367 TCP 23.104.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:44:00.946 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58082 10 6452 1 2025-08-12 17:44:47.050 00:00:10.443 TCP 23.104.0.1:41426 -> 1.101.0.1:3000 15 1926 1 2025-08-12 17:45:01.171 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:39296 12 10367 1 2025-08-12 17:45:47.529 00:00:17.321 TCP 23.104.0.1:44858 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:46:01.375 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36264 10 6452 1 2025-08-12 17:46:54.906 00:00:10.322 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:47:01.590 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54604 10 6452 1 2025-08-12 17:47:07.499 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 17:47:07.153 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 17:47:55.268 00:00:10.376 TCP 23.104.0.1:48970 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:48:01.762 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45284 10 6452 1 2025-08-12 17:44:10.253 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 17:48:55.691 00:00:10.369 TCP 23.104.0.1:38930 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:45:10.257 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 17:49:01.992 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58596 10 6452 1 2025-08-12 17:49:56.107 00:00:10.365 TCP 23.104.0.1:34928 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:50:02.227 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32850 10 6452 1 2025-08-12 17:50:56.510 00:00:10.364 TCP 23.104.0.1:43614 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:51:02.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60264 10 6452 1 2025-08-12 17:52:07.686 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 17:52:07.502 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 17:51:56.925 00:00:10.439 TCP 23.104.0.1:38350 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:52:02.656 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6452 1 2025-08-12 17:52:57.403 00:00:10.364 TCP 23.104.0.1:36742 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:53:02.874 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51920 10 6452 1 2025-08-12 17:50:10.254 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 17:53:57.802 00:00:10.391 TCP 23.104.0.1:45514 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:54:03.101 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38110 10 6452 1 2025-08-12 17:51:10.256 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 17:54:58.230 00:00:10.441 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 15 1926 1 2025-08-12 17:55:03.317 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:43632 12 10365 1 2025-08-12 17:55:58.706 00:00:10.320 TCP 23.104.0.1:44818 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:56:03.555 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55242 10 6452 1 2025-08-12 17:57:07.239 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 17:57:07.599 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 17:56:59.089 00:00:10.367 TCP 23.104.0.1:50496 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:57:03.767 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36406 10 6452 1 2025-08-12 17:57:59.495 00:00:10.369 TCP 23.104.0.1:44762 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:58:03.990 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32896 10 6452 1 Summary: total flows: 163, total bytes: 505507, total packets: 1573, avg bps: 1085, avg pps: 0, avg bpp: 321 Time window: 2025-08-12 16:56:10 - 2025-08-12 17:58:14 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0000s Wall: 0.0026s flows/second: 62647.4 Runtime: 0.0026s