Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 01:58:57.183 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55672 10 6452 1 2025-08-13 01:59:19.590 00:00:10.363 TCP 23.104.0.1:43032 -> 1.101.0.1:3000 11 1507 1 2025-08-13 01:59:57.353 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45016 10 6452 1 2025-08-13 01:56:10.464 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 02:00:19.988 00:00:10.368 TCP 23.104.0.1:56358 -> 1.101.0.1:3000 11 1507 1 2025-08-13 01:57:10.466 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 02:00:57.566 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44656 10 6452 1 2025-08-13 02:01:20.389 00:00:10.367 TCP 23.104.0.1:35640 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:01:57.776 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50098 10 6452 1 2025-08-13 02:02:17.317 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 02:02:17.398 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 02:02:20.795 00:00:10.342 TCP 23.104.0.1:35414 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:02:58.001 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48644 10 6452 1 2025-08-13 02:03:21.177 00:00:10.365 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:03:58.216 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40002 10 6452 1 2025-08-13 02:04:21.581 00:00:10.362 TCP 23.104.0.1:47690 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:04:58.393 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43726 10 6452 1 2025-08-13 02:05:21.985 00:00:10.375 TCP 23.104.0.1:33724 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:05:58.611 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53150 10 6452 1 2025-08-13 02:02:10.464 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 02:06:22.406 00:00:10.364 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:03:10.467 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 02:06:58.822 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49084 10 6452 1 2025-08-13 02:07:17.425 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 02:07:17.241 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 02:07:22.813 00:00:10.370 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:07:59.008 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:41932 10 6452 1 2025-08-13 02:08:23.221 00:00:10.363 TCP 23.104.0.1:38814 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:08:59.257 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52492 10 6452 1 2025-08-13 02:09:23.623 00:00:10.324 TCP 23.104.0.1:55870 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:09:59.430 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43592 10 6452 1 2025-08-13 02:10:23.989 00:00:10.365 TCP 23.104.0.1:49460 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:10:59.651 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34718 10 6452 1 2025-08-13 02:11:24.391 00:00:10.362 TCP 23.104.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:11:59.817 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60938 10 6452 1 2025-08-13 02:08:10.464 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 02:12:17.580 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 02:12:17.429 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 02:12:24.804 00:00:10.366 TCP 23.104.0.1:40282 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:09:10.469 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 02:12:59.998 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33182 10 6452 1 2025-08-13 02:13:25.210 00:00:10.363 TCP 23.104.0.1:43694 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:14:00.225 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52444 10 6452 1 2025-08-13 02:14:25.615 00:00:10.361 TCP 23.104.0.1:50254 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:15:00.435 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36746 10 6452 1 2025-08-13 02:15:26.028 00:00:10.360 TCP 23.104.0.1:43574 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:16:00.646 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53158 10 6452 1 2025-08-13 02:16:26.430 00:00:10.322 TCP 23.104.0.1:52314 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:17:00.859 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36390 10 6452 1 2025-08-13 02:17:17.586 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 02:17:17.553 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 02:17:26.794 00:00:10.364 TCP 23.104.0.1:38334 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:18:01.091 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37066 10 6452 1 2025-08-13 02:14:10.466 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 02:18:27.197 00:00:10.362 TCP 23.104.0.1:47178 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:19:01.304 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56722 10 6452 1 2025-08-13 02:15:10.470 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 02:19:27.594 00:00:10.367 TCP 23.104.0.1:53028 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:20:01.474 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42958 10 6452 1 2025-08-13 02:20:27.999 00:00:10.357 TCP 23.104.0.1:58124 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:21:01.687 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46124 10 6452 1 2025-08-13 02:21:28.402 00:00:10.323 TCP 23.104.0.1:45148 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:22:01.859 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58066 10 6452 1 2025-08-13 02:22:17.805 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 02:22:17.664 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 02:22:28.763 00:00:10.368 TCP 23.104.0.1:56800 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:23:02.088 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39828 10 6452 1 2025-08-13 02:23:29.171 00:00:10.370 TCP 23.104.0.1:43502 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:20:10.467 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 02:24:02.298 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40094 10 6452 1 2025-08-13 02:24:29.575 00:00:10.367 TCP 23.104.0.1:54544 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:21:10.470 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 02:25:02.472 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-08-13 02:25:29.976 00:00:10.364 TCP 23.104.0.1:47272 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:26:02.683 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56594 10 6452 1 2025-08-13 02:26:30.377 00:00:10.363 TCP 23.104.0.1:35806 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:27:02.896 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:58476 10 6452 1 2025-08-13 02:27:17.751 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 02:27:17.740 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 02:27:30.779 00:00:10.371 TCP 23.104.0.1:46496 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:28:03.091 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47810 10 6452 1 2025-08-13 02:28:31.181 00:00:10.366 TCP 23.104.0.1:46552 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:29:03.307 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44336 10 6452 1 2025-08-13 02:29:31.587 00:00:10.365 TCP 23.104.0.1:35490 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:30:03.520 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:34348 10 6452 1 2025-08-13 02:26:10.470 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 02:30:31.994 00:00:10.389 TCP 23.104.0.1:45410 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:31:03.713 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53772 10 6452 1 2025-08-13 02:27:10.474 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 02:31:32.420 00:00:10.361 TCP 23.104.0.1:60946 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:32:03.932 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40428 10 6452 1 2025-08-13 02:32:17.726 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 02:32:17.722 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 02:32:32.819 00:00:10.328 TCP 23.104.0.1:38198 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:33:04.150 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39010 10 6452 1 2025-08-13 02:33:33.186 00:00:10.361 TCP 23.104.0.1:45494 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:34:04.318 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54660 10 6452 1 2025-08-13 02:34:33.588 00:00:10.361 TCP 23.104.0.1:45258 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:35:04.530 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53332 10 6452 1 2025-08-13 02:35:33.989 00:00:10.364 TCP 23.104.0.1:43704 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:32:10.474 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 02:36:04.742 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41556 10 6452 1 2025-08-13 02:36:34.393 00:00:10.369 TCP 23.104.0.1:45632 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:33:10.472 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 02:37:04.912 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:42322 10 6452 1 2025-08-13 02:37:17.890 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 02:37:17.972 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 02:37:34.820 00:00:10.326 TCP 23.104.0.1:59306 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:38:05.105 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47034 10 6452 1 2025-08-13 02:38:35.183 00:00:10.359 TCP 23.104.0.1:53744 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:39:05.325 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40452 10 6452 1 2025-08-13 02:39:35.580 00:00:10.366 TCP 23.104.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:40:05.546 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40032 10 6452 1 2025-08-13 02:40:35.986 00:00:10.366 TCP 23.104.0.1:41830 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:41:05.725 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33396 10 6452 1 2025-08-13 02:41:36.394 00:00:10.367 TCP 23.104.0.1:41622 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:38:10.472 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 02:42:05.940 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:42076 10 6452 1 2025-08-13 02:42:18.279 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 02:42:18.011 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 02:42:36.799 00:00:10.363 TCP 23.104.0.1:43442 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:39:10.474 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 02:43:06.181 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60968 10 6452 1 2025-08-13 02:43:37.203 00:00:10.370 TCP 23.104.0.1:58306 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:44:06.353 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53228 10 6452 1 2025-08-13 02:44:37.610 00:00:10.366 TCP 23.104.0.1:40086 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:45:06.567 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36770 10 6452 1 2025-08-13 02:45:38.016 00:00:10.357 TCP 23.104.0.1:55822 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:46:06.782 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46784 10 6452 1 2025-08-13 02:46:38.414 00:00:10.365 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:47:18.270 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 02:47:07.007 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50346 10 6452 1 2025-08-13 02:47:18.226 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 02:47:38.818 00:00:10.324 TCP 23.104.0.1:43554 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:44:10.473 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 02:48:07.231 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60044 10 6452 1 2025-08-13 02:48:39.179 00:00:10.358 TCP 23.104.0.1:53576 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:45:10.477 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 02:49:07.447 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35820 10 6452 1 2025-08-13 02:49:39.576 00:00:10.428 TCP 23.104.0.1:54842 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:50:07.676 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52408 10 6452 1 2025-08-13 02:50:40.030 00:00:10.368 TCP 23.104.0.1:57618 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:51:07.853 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45366 10 6452 1 2025-08-13 02:51:40.433 00:00:10.367 TCP 23.104.0.1:59226 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:52:08.088 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48528 10 6452 1 2025-08-13 02:52:18.151 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 02:52:18.488 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 02:52:40.843 00:00:10.332 TCP 23.104.0.1:48360 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:53:08.303 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40102 10 6452 1 2025-08-13 02:53:41.215 00:00:10.356 TCP 23.104.0.1:33896 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:50:10.475 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 02:54:08.515 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52208 10 6452 1 2025-08-13 02:54:41.614 00:00:10.438 TCP 23.104.0.1:59394 -> 1.101.0.1:3000 15 1926 1 2025-08-13 02:51:10.477 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 02:55:08.735 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:33454 12 10365 1 2025-08-13 02:55:42.103 00:00:10.371 TCP 23.104.0.1:44796 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:56:08.939 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:41942 10 6452 1 2025-08-13 02:56:42.508 00:00:10.367 TCP 23.104.0.1:54982 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:57:09.189 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58258 10 6452 1 2025-08-13 02:57:18.180 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 02:57:18.417 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 02:57:42.923 00:00:10.376 TCP 23.104.0.1:49944 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:58:09.409 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34868 10 6452 1 Summary: total flows: 163, total bytes: 501173, total packets: 1567, avg bps: 1075, avg pps: 0, avg bpp: 319 Time window: 2025-08-13 01:56:10 - 2025-08-13 02:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0017s User: 0.0026s Wall: 0.0027s flows/second: 59730.2 Runtime: 0.0027s