Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 04:58:42.121 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49892 10 6452 1 2025-08-13 04:59:31.355 00:00:10.364 TCP 23.104.0.1:37136 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:59:42.331 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45382 10 6452 1 2025-08-13 04:56:10.531 00:05:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 05:00:31.761 00:00:10.385 TCP 23.104.0.1:37170 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:00:42.562 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53180 10 6452 1 2025-08-13 04:57:10.536 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 05:01:32.185 00:00:10.326 TCP 23.104.0.1:44814 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:01:42.776 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59008 10 6452 1 2025-08-13 05:02:20.919 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 05:02:20.889 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 05:02:32.548 00:00:10.364 TCP 23.104.0.1:44764 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:02:42.996 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46870 10 6452 1 2025-08-13 05:03:32.949 00:00:10.362 TCP 23.104.0.1:50548 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:03:43.209 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39270 10 6452 1 2025-08-13 05:04:33.355 00:00:10.363 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:04:43.390 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48064 10 6452 1 2025-08-13 05:05:33.753 00:00:10.387 TCP 23.104.0.1:54476 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:05:43.617 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36958 10 6452 1 2025-08-13 05:02:10.537 00:05:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 05:06:34.173 00:00:10.368 TCP 23.104.0.1:50890 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:06:43.825 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46382 10 6452 1 2025-08-13 05:03:10.539 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 05:07:20.796 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 05:07:20.967 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 05:07:34.578 00:00:10.363 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:07:44.055 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49206 10 6452 1 2025-08-13 05:08:34.980 00:00:10.365 TCP 23.104.0.1:36898 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:08:44.266 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55022 10 6452 1 2025-08-13 05:09:35.387 00:00:10.328 TCP 23.104.0.1:33642 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:09:44.477 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46314 10 6452 1 2025-08-13 05:10:35.750 00:00:10.382 TCP 23.104.0.1:46164 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:10:44.686 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53048 10 6452 1 2025-08-13 05:11:36.174 00:00:10.365 TCP 23.104.0.1:39622 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:11:44.900 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41050 10 6452 1 2025-08-13 05:08:10.539 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 05:12:20.975 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 05:12:20.983 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 05:12:36.578 00:00:10.363 TCP 23.104.0.1:33096 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:12:45.108 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46552 10 6452 1 2025-08-13 05:09:10.541 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 05:13:36.980 00:00:10.364 TCP 23.104.0.1:49170 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:13:45.280 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53722 10 6452 1 2025-08-13 05:14:37.389 00:00:10.364 TCP 23.104.0.1:36442 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:14:45.493 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37526 10 6452 1 2025-08-13 05:15:37.804 00:00:10.338 TCP 23.104.0.1:45116 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:15:45.706 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51794 10 6452 1 2025-08-13 05:16:38.190 00:00:10.328 TCP 23.104.0.1:37516 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:16:45.920 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56240 10 6452 1 2025-08-13 05:17:20.965 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 05:17:21.177 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 05:17:38.555 00:00:10.319 TCP 23.104.0.1:43976 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:17:46.133 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52816 10 6452 1 2025-08-13 05:14:10.541 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 05:18:38.915 00:00:10.390 TCP 23.104.0.1:55740 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:18:46.348 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53274 10 6452 1 2025-08-13 05:15:10.544 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 05:19:39.345 00:00:10.366 TCP 23.104.0.1:42034 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:19:46.563 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47806 10 6452 1 2025-08-13 05:20:39.753 00:00:10.400 TCP 23.104.0.1:57434 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:20:46.779 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51524 10 6452 1 2025-08-13 05:21:40.206 00:00:10.364 TCP 23.104.0.1:38598 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:21:46.951 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:45786 10 6452 1 2025-08-13 05:22:21.298 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 05:22:21.229 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 05:22:40.607 00:00:10.363 TCP 23.104.0.1:55146 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:22:47.140 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39988 10 6452 1 2025-08-13 05:23:41.011 00:00:10.370 TCP 23.104.0.1:53060 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:23:47.352 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45318 10 6452 1 2025-08-13 05:20:10.542 00:05:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 05:24:41.423 00:00:10.368 TCP 23.104.0.1:51644 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:24:47.523 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37698 10 6452 1 2025-08-13 05:21:10.546 00:05:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 05:25:41.828 00:00:10.348 TCP 23.104.0.1:59884 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:25:47.701 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54530 10 6452 1 2025-08-13 05:26:42.215 00:00:10.365 TCP 23.104.0.1:36454 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:26:47.928 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:39978 10 6452 1 2025-08-13 05:27:21.550 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 05:27:21.450 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 05:27:42.619 00:00:10.378 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:27:48.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43614 10 6452 1 2025-08-13 05:28:43.023 00:00:10.365 TCP 23.104.0.1:44862 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:28:48.329 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58544 10 6452 1 2025-08-13 05:29:43.428 00:00:10.376 TCP 23.104.0.1:60252 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:29:48.497 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37530 10 6452 1 2025-08-13 05:26:10.543 00:05:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 05:30:43.846 00:00:10.349 TCP 23.104.0.1:37154 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:30:48.709 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57258 10 6452 1 2025-08-13 05:27:10.547 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 05:31:44.231 00:00:11.303 TCP 23.104.0.1:52086 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:31:48.923 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47028 10 6452 1 2025-08-13 05:32:21.496 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 05:32:21.601 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 05:32:45.568 00:00:10.365 TCP 23.104.0.1:36062 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:32:49.135 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57028 10 6452 1 2025-08-13 05:33:45.971 00:00:10.369 TCP 23.104.0.1:46326 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:33:49.350 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51792 10 6452 1 2025-08-13 05:34:46.376 00:00:10.326 TCP 23.104.0.1:45636 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:34:49.518 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40378 10 6452 1 2025-08-13 05:35:49.690 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44624 10 6452 1 2025-08-13 05:35:46.742 00:00:10.367 TCP 23.104.0.1:41626 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:32:10.546 00:05:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 05:36:47.149 00:00:10.372 TCP 23.104.0.1:60520 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:36:49.905 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:32828 10 6452 1 2025-08-13 05:33:10.549 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 05:37:21.622 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 05:37:21.494 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 05:37:47.565 00:00:10.377 TCP 23.104.0.1:59506 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:37:50.086 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39090 10 6452 1 2025-08-13 05:38:50.301 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:36948 10 6452 1 2025-08-13 05:38:47.972 00:00:10.384 TCP 23.104.0.1:52580 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:39:48.396 00:00:10.366 TCP 23.104.0.1:56818 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:39:50.488 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33066 10 6452 1 2025-08-13 05:40:48.816 00:00:10.363 TCP 23.104.0.1:60342 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:40:50.703 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58920 10 6452 1 2025-08-13 05:41:50.923 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:48180 10 6452 1 2025-08-13 05:41:49.236 00:00:10.336 TCP 23.104.0.1:54248 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:38:10.547 00:05:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 05:42:22.134 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 05:42:22.108 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 05:42:49.615 00:00:10.361 TCP 23.104.0.1:57530 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:42:51.173 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56016 10 6452 1 2025-08-13 05:39:10.549 00:05:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 05:43:51.395 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37364 10 6452 1 2025-08-13 05:43:50.019 00:00:10.361 TCP 23.104.0.1:39438 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:44:50.419 00:00:10.372 TCP 23.104.0.1:33652 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:44:51.624 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45140 10 6452 1 2025-08-13 05:45:51.799 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50914 10 6452 1 2025-08-13 05:45:50.823 00:00:10.367 TCP 23.104.0.1:33074 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:46:51.229 00:00:10.373 TCP 23.104.0.1:34320 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:46:52.016 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56194 10 6452 1 2025-08-13 05:47:21.568 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 05:47:21.774 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 05:47:51.635 00:00:10.327 TCP 23.104.0.1:47732 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:47:52.189 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36450 10 6452 1 2025-08-13 05:44:10.552 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 05:48:52.403 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44308 10 6452 1 2025-08-13 05:48:51.997 00:00:10.328 TCP 23.104.0.1:50270 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:45:10.557 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 05:49:52.364 00:00:10.362 TCP 23.104.0.1:41850 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:49:52.611 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49366 10 6452 1 2025-08-13 05:50:52.766 00:00:10.377 TCP 23.104.0.1:58472 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:50:52.835 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43770 10 6452 1 2025-08-13 05:51:53.182 00:00:10.374 TCP 23.104.0.1:57170 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:51:53.077 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54432 10 6452 1 2025-08-13 05:52:21.908 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 05:52:21.912 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 05:52:53.591 00:00:10.362 TCP 23.104.0.1:56166 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:52:53.302 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53602 10 6452 1 2025-08-13 05:53:53.472 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 10 6452 1 2025-08-13 05:53:54.000 00:00:10.374 TCP 23.104.0.1:42090 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:50:10.554 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 05:54:53.682 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34514 10 6452 1 2025-08-13 05:54:54.407 00:00:10.379 TCP 23.104.0.1:45962 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:51:10.556 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 05:55:54.821 00:00:10.367 TCP 23.104.0.1:50990 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:55:53.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48818 10 6452 1 2025-08-13 05:56:55.224 00:00:10.367 TCP 23.104.0.1:33628 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:56:54.114 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37078 10 6452 1 2025-08-13 05:57:21.910 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 05:57:22.031 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 05:57:55.628 00:00:10.365 TCP 23.104.0.1:57640 -> 1.101.0.1:3000 11 1507 1 2025-08-13 05:57:54.343 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34122 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1069, avg pps: 0, avg bpp: 318 Time window: 2025-08-13 04:56:10 - 2025-08-13 05:58:05 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0009s User: 0.0037s Wall: 0.0019s flows/second: 85118.5 Runtime: 0.0019s