Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 09:58:47.173 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41110 10 6452 1 2025-08-13 09:59:35.991 00:00:10.327 TCP 23.104.0.1:37900 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:59:47.394 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44244 10 6452 1 2025-08-13 09:56:10.636 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 10:00:36.351 00:00:10.361 TCP 23.104.0.1:58224 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:00:47.611 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52714 10 6452 1 2025-08-13 09:57:10.640 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 10:01:36.754 00:00:10.392 TCP 23.104.0.1:53734 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:01:47.825 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55730 10 6452 1 2025-08-13 10:02:26.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 10:02:26.979 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 10:02:37.186 00:00:10.365 TCP 23.104.0.1:43780 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:02:48.058 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50984 10 6452 1 2025-08-13 10:03:37.587 00:00:10.369 TCP 23.104.0.1:33732 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:03:48.273 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48182 10 6452 1 2025-08-13 10:04:37.996 00:00:10.336 TCP 23.104.0.1:47506 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:04:48.487 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60530 10 6452 1 2025-08-13 10:05:38.377 00:00:10.361 TCP 23.104.0.1:37328 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:05:48.698 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42054 10 6452 1 2025-08-13 10:02:10.638 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 10:06:38.780 00:00:10.368 TCP 23.104.0.1:39738 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:06:48.911 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:59288 10 6452 1 2025-08-13 10:03:10.641 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 10:07:26.830 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 10:07:26.764 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 10:07:39.189 00:00:10.369 TCP 23.104.0.1:42686 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:07:49.096 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41488 10 6452 1 2025-08-13 10:08:39.592 00:00:10.365 TCP 23.104.0.1:50858 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:08:49.312 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47356 10 6452 1 2025-08-13 10:09:39.991 00:00:10.325 TCP 23.104.0.1:45016 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:09:49.521 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33966 10 6452 1 2025-08-13 10:10:40.355 00:00:10.367 TCP 23.104.0.1:39420 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:10:49.691 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55740 10 6452 1 2025-08-13 10:11:40.762 00:00:10.337 TCP 23.104.0.1:34428 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:11:49.895 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33902 10 6452 1 2025-08-13 10:08:10.640 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 10:12:27.055 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 10:12:27.042 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 10:12:41.137 00:00:10.363 TCP 23.104.0.1:47310 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:12:50.113 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-08-13 10:09:10.642 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 10:13:41.535 00:00:10.325 TCP 23.104.0.1:56192 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:13:50.286 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49034 10 6452 1 2025-08-13 10:14:41.893 00:00:10.371 TCP 23.104.0.1:53894 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:14:50.463 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44130 10 6452 1 2025-08-13 10:15:42.304 00:00:10.372 TCP 23.104.0.1:44242 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:15:50.686 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43912 10 6452 1 2025-08-13 10:16:42.713 00:00:10.359 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:16:50.898 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58944 10 6452 1 2025-08-13 10:17:27.434 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 10:17:27.352 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 10:17:43.110 00:00:10.365 TCP 23.104.0.1:42198 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:17:51.071 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56004 10 6452 1 2025-08-13 10:14:10.640 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 10:18:43.513 00:00:10.366 TCP 23.104.0.1:43196 -> 1.101.0.1:3000 12 1559 1 2025-08-13 10:18:51.285 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40458 10 6452 1 2025-08-13 10:15:10.644 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 10:19:43.928 00:00:10.343 TCP 23.104.0.1:45732 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:19:51.457 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39552 10 6452 1 2025-08-13 10:20:44.311 00:00:10.364 TCP 23.104.0.1:44916 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:20:51.673 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59444 10 6452 1 2025-08-13 10:21:44.716 00:00:10.374 TCP 23.104.0.1:43924 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:21:51.881 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45406 10 6452 1 2025-08-13 10:22:27.092 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 10:22:27.230 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 10:22:45.129 00:00:10.368 TCP 23.104.0.1:45698 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:22:52.107 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37410 10 6452 1 2025-08-13 10:23:45.538 00:00:10.362 TCP 23.104.0.1:59194 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:23:52.317 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52272 10 6452 1 2025-08-13 10:20:10.642 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 10:24:45.941 00:00:10.367 TCP 23.104.0.1:35134 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:24:52.534 00:00:10.433 TCP 1.101.0.1:3000 -> 22.102.0.1:52176 10 6452 1 2025-08-13 10:21:10.645 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 10:25:46.348 00:00:10.369 TCP 23.104.0.1:44224 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:25:53.009 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36306 10 6452 1 2025-08-13 10:26:46.751 00:00:10.391 TCP 23.104.0.1:51882 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:26:53.181 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50962 10 6452 1 2025-08-13 10:27:27.543 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 10:27:27.563 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 10:27:47.178 00:00:10.369 TCP 23.104.0.1:46676 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:27:53.393 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:39342 10 6452 1 2025-08-13 10:28:47.581 00:00:10.336 TCP 23.104.0.1:50078 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:28:53.584 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50788 10 6452 1 2025-08-13 10:29:47.946 00:00:10.327 TCP 23.104.0.1:50130 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:29:53.790 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36840 10 6452 1 2025-08-13 10:26:10.654 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 10:30:48.315 00:00:10.380 TCP 23.104.0.1:38204 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:30:53.964 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59592 10 6452 1 2025-08-13 10:27:10.656 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 10:31:48.736 00:00:10.368 TCP 23.104.0.1:52512 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:31:54.219 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58378 10 6452 1 2025-08-13 10:32:27.513 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 10:32:27.508 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 10:32:49.143 00:00:10.363 TCP 23.104.0.1:36922 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:32:54.432 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54134 10 6452 1 2025-08-13 10:33:49.549 00:00:10.338 TCP 23.104.0.1:47866 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:33:54.648 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48258 10 6452 1 2025-08-13 10:34:49.924 00:00:10.385 TCP 23.104.0.1:34524 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:34:54.860 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51908 10 6452 1 2025-08-13 10:35:50.346 00:00:10.369 TCP 23.104.0.1:37666 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:35:55.086 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37438 10 6452 1 2025-08-13 10:32:10.654 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 10:36:50.757 00:00:10.388 TCP 23.104.0.1:43752 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:36:55.312 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37060 10 6452 1 2025-08-13 10:33:10.656 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 10:37:27.300 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 10:37:27.568 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 10:37:51.182 00:00:10.370 TCP 23.104.0.1:47916 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:37:55.529 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55040 10 6452 1 2025-08-13 10:38:51.591 00:00:10.367 TCP 23.104.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:38:55.742 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38928 10 6452 1 2025-08-13 10:39:55.960 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:32876 10 6452 1 2025-08-13 10:39:52.009 00:00:10.364 TCP 23.104.0.1:54354 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:40:56.187 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-08-13 10:40:52.408 00:00:10.385 TCP 23.104.0.1:48834 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:41:56.399 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41744 10 6452 1 2025-08-13 10:41:52.827 00:00:10.364 TCP 23.104.0.1:36062 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:38:10.654 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 10:42:27.753 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 10:42:27.586 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 10:42:56.615 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55820 10 6452 1 2025-08-13 10:42:53.224 00:00:10.362 TCP 23.104.0.1:51396 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:39:10.658 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 10:43:53.625 00:00:10.328 TCP 23.104.0.1:53662 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:43:56.833 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51130 10 6452 1 2025-08-13 10:44:53.994 00:00:10.369 TCP 23.104.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:44:57.065 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35410 10 6452 1 2025-08-13 10:45:54.398 00:00:10.370 TCP 23.104.0.1:36348 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:45:57.284 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55076 10 6452 1 2025-08-13 10:46:54.805 00:00:10.369 TCP 23.104.0.1:44860 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:46:57.494 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38348 10 6452 1 2025-08-13 10:47:27.673 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 10:47:27.513 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 10:47:55.210 00:00:10.320 TCP 23.104.0.1:59332 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:47:57.706 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53366 10 6452 1 2025-08-13 10:44:10.656 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 10:48:57.916 00:00:12.025 TCP 1.101.0.1:3000 -> 22.102.0.1:46860 10 6452 1 2025-08-13 10:48:55.568 00:00:14.494 TCP 23.104.0.1:49058 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:45:10.658 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 10:50:00.125 00:00:10.362 TCP 23.104.0.1:56488 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:49:59.993 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57960 10 6452 1 2025-08-13 10:51:00.210 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53594 10 6452 1 2025-08-13 10:51:00.528 00:00:10.365 TCP 23.104.0.1:51990 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:52:00.934 00:00:10.562 TCP 23.104.0.1:56874 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:52:00.422 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37490 10 6452 1 2025-08-13 10:52:27.885 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 10:52:28.061 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 10:53:00.644 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41358 10 6452 1 2025-08-13 10:53:01.534 00:00:10.365 TCP 23.104.0.1:35512 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:54:00.828 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51746 10 6452 1 2025-08-13 10:50:10.658 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 10:54:01.941 00:00:10.370 TCP 23.104.0.1:42374 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:55:01.067 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:57082 12 10365 1 2025-08-13 10:51:10.659 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 10:55:02.348 00:00:10.399 TCP 23.104.0.1:43568 -> 1.101.0.1:3000 15 1926 1 2025-08-13 10:56:01.313 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45668 10 6452 1 2025-08-13 10:56:02.787 00:00:10.324 TCP 23.104.0.1:57858 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:57:01.533 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58982 10 6452 1 2025-08-13 10:57:03.150 00:00:10.361 TCP 23.104.0.1:49022 -> 1.101.0.1:3000 11 1507 1 2025-08-13 10:57:27.947 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 10:57:27.838 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 10:58:01.743 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58564 10 6452 1 2025-08-13 10:58:03.551 00:00:10.358 TCP 23.104.0.1:56252 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 501225, total packets: 1568, avg bps: 1076, avg pps: 0, avg bpp: 319 Time window: 2025-08-13 09:56:10 - 2025-08-13 10:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0008s Wall: 0.0026s flows/second: 61904.3 Runtime: 0.0027s