Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 13:58:44.507 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:36378 10 6452 1 2025-08-13 13:59:21.267 00:00:10.370 TCP 23.104.0.1:49190 -> 1.101.0.1:3000 11 1507 1 2025-08-13 13:59:44.695 00:00:10.433 TCP 1.101.0.1:3000 -> 22.102.0.1:48594 10 6452 1 2025-08-13 13:56:10.719 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 14:00:21.677 00:00:10.382 TCP 23.104.0.1:35620 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:00:45.164 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57910 10 6452 1 2025-08-13 13:57:10.723 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 14:01:22.113 00:00:10.329 TCP 23.104.0.1:53492 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:01:45.380 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54802 10 6452 1 2025-08-13 14:02:31.714 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 14:02:31.513 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 14:02:22.485 00:00:10.319 TCP 23.104.0.1:38004 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:02:45.592 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38448 10 6452 1 2025-08-13 14:03:22.847 00:00:10.388 TCP 23.104.0.1:51464 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:03:45.825 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:58786 12 6544 1 2025-08-13 14:04:23.283 00:00:10.386 TCP 23.104.0.1:49318 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:04:46.068 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-08-13 14:05:23.713 00:00:10.361 TCP 23.104.0.1:47544 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:05:46.284 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47972 10 6452 1 2025-08-13 14:02:10.722 00:05:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 14:06:24.114 00:00:10.320 TCP 23.104.0.1:54726 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:06:46.500 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47684 10 6452 1 2025-08-13 14:03:10.726 00:05:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 14:07:32.104 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 14:07:32.171 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 14:07:24.474 00:00:10.361 TCP 23.104.0.1:59466 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:07:46.713 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47652 10 6452 1 2025-08-13 14:08:24.875 00:00:10.325 TCP 23.104.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:08:46.927 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54990 10 6452 1 2025-08-13 14:09:25.237 00:00:10.329 TCP 23.104.0.1:42920 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:09:47.135 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 12 10367 1 2025-08-13 14:10:25.606 00:00:10.440 TCP 23.104.0.1:43102 -> 1.101.0.1:3000 15 1926 1 2025-08-13 14:10:47.337 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60678 10 6452 1 2025-08-13 14:11:26.104 00:00:10.367 TCP 23.104.0.1:53924 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:11:47.551 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60552 10 6452 1 2025-08-13 14:08:10.724 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 14:12:31.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 14:12:32.071 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 14:12:26.509 00:00:10.811 TCP 23.104.0.1:35168 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:12:47.721 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40178 10 6452 1 2025-08-13 14:09:10.726 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 14:13:27.362 00:00:10.325 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:13:47.932 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44180 10 6452 1 2025-08-13 14:14:27.728 00:00:10.364 TCP 23.104.0.1:53644 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:14:48.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39398 10 6452 1 2025-08-13 14:15:28.131 00:00:10.370 TCP 23.104.0.1:54082 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:15:48.386 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37700 10 6452 1 2025-08-13 14:16:28.540 00:00:10.360 TCP 23.104.0.1:37050 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:16:48.593 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47060 10 6452 1 2025-08-13 14:17:31.836 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 14:17:32.044 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 14:17:28.939 00:00:10.373 TCP 23.104.0.1:49656 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:17:48.801 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40134 10 6452 1 2025-08-13 14:14:10.726 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 14:18:29.347 00:00:10.321 TCP 23.104.0.1:59842 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:18:48.973 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43770 10 6452 1 2025-08-13 14:15:10.729 00:05:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 14:19:29.709 00:00:10.319 TCP 23.104.0.1:54192 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:19:49.209 00:00:10.566 TCP 1.101.0.1:3000 -> 22.102.0.1:55502 10 6452 1 2025-08-13 14:20:30.100 00:00:10.359 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:20:49.817 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43336 10 6452 1 2025-08-13 14:21:30.497 00:00:10.363 TCP 23.104.0.1:60016 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:21:50.039 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56454 10 6452 1 2025-08-13 14:22:32.164 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 14:22:32.124 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 14:22:30.899 00:00:10.332 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:22:50.229 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 10 6452 1 2025-08-13 14:23:31.270 00:00:10.360 TCP 23.104.0.1:47184 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:23:50.463 00:00:10.525 TCP 1.101.0.1:3000 -> 22.102.0.1:56872 10 6452 1 2025-08-13 14:20:10.729 00:05:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 14:24:31.671 00:00:10.323 TCP 23.104.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:24:51.041 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32896 10 6452 1 2025-08-13 14:21:10.733 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 14:25:32.036 00:00:10.366 TCP 23.104.0.1:34562 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:25:51.256 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37292 10 6452 1 2025-08-13 14:26:32.441 00:00:10.368 TCP 23.104.0.1:57564 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:26:51.478 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33902 10 6452 1 2025-08-13 14:27:32.207 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 14:27:32.015 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 14:27:32.852 00:00:10.380 TCP 23.104.0.1:54140 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:27:51.698 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:52980 10 6452 1 2025-08-13 14:28:33.268 00:00:10.360 TCP 23.104.0.1:54258 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:28:51.941 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:44252 10 6452 1 2025-08-13 14:29:33.670 00:00:10.376 TCP 23.104.0.1:37500 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:29:52.186 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49488 10 6452 1 2025-08-13 14:26:10.729 00:05:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 14:30:34.110 00:00:10.323 TCP 23.104.0.1:36856 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:30:52.402 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42250 10 6452 1 2025-08-13 14:27:10.733 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 14:31:34.471 00:00:10.367 TCP 23.104.0.1:52364 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:31:52.624 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41600 10 6452 1 2025-08-13 14:32:32.641 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 14:32:32.343 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 14:32:34.882 00:00:10.388 TCP 23.104.0.1:41998 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:32:52.848 00:00:11.526 TCP 1.101.0.1:3000 -> 22.102.0.1:33274 10 6452 1 2025-08-13 14:33:35.308 00:00:10.325 TCP 23.104.0.1:60048 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:33:54.411 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45964 10 6452 1 2025-08-13 14:34:35.694 00:00:10.373 TCP 23.104.0.1:42950 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:34:54.630 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44918 10 6452 1 2025-08-13 14:35:36.114 00:00:10.365 TCP 23.104.0.1:36968 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:35:54.850 00:00:10.732 TCP 1.101.0.1:3000 -> 22.102.0.1:45992 10 6452 1 2025-08-13 14:32:10.732 00:05:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 14:36:36.527 00:00:10.367 TCP 23.104.0.1:35570 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:36:55.618 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44478 10 6452 1 2025-08-13 14:33:10.733 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 14:37:32.312 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 14:37:32.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 14:37:36.936 00:00:10.375 TCP 23.104.0.1:58060 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:37:55.834 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35000 10 6452 1 2025-08-13 14:38:37.357 00:00:10.374 TCP 23.104.0.1:37452 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:38:56.085 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39862 10 6452 1 2025-08-13 14:39:37.764 00:00:10.372 TCP 23.104.0.1:58418 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:39:56.257 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43472 10 6452 1 2025-08-13 14:40:38.175 00:00:10.330 TCP 23.104.0.1:34362 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:40:56.466 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43586 10 6452 1 2025-08-13 14:41:38.541 00:00:11.064 TCP 23.104.0.1:34050 -> 1.101.0.1:3000 13 1611 1 2025-08-13 14:41:56.634 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53644 10 6452 1 2025-08-13 14:38:10.732 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 14:42:32.524 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 14:42:32.487 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 14:42:39.643 00:00:10.331 TCP 23.104.0.1:58124 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:42:56.809 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34650 10 6452 1 2025-08-13 14:39:10.735 00:05:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 14:43:40.012 00:00:10.366 TCP 23.104.0.1:55942 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:43:57.039 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38078 10 6452 1 2025-08-13 14:44:40.416 00:00:10.318 TCP 23.104.0.1:60360 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:44:57.259 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41098 10 6452 1 2025-08-13 14:45:40.777 00:00:10.367 TCP 23.104.0.1:35572 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:45:57.475 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45628 10 6452 1 2025-08-13 14:46:41.180 00:00:10.363 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:46:57.692 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36510 10 6452 1 2025-08-13 14:47:32.485 00:00:00.016 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 14:47:32.597 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 14:47:41.583 00:00:10.369 TCP 23.104.0.1:40988 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:47:57.905 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50596 10 6452 1 2025-08-13 14:44:10.733 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 14:48:41.989 00:00:10.385 TCP 23.104.0.1:58324 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:48:58.117 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33822 10 6452 1 2025-08-13 14:45:10.736 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 14:49:42.405 00:00:10.443 TCP 23.104.0.1:42996 -> 1.101.0.1:3000 15 1926 1 2025-08-13 14:49:58.326 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:33374 12 10367 1 2025-08-13 14:50:42.885 00:00:10.373 TCP 23.104.0.1:37016 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:50:58.566 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46710 10 6452 1 2025-08-13 14:51:43.299 00:00:10.373 TCP 23.104.0.1:45106 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:51:58.780 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40192 10 6452 1 2025-08-13 14:52:32.610 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 14:52:32.809 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 14:52:43.702 00:00:10.326 TCP 23.104.0.1:55762 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:52:59.008 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41744 10 6452 1 2025-08-13 14:53:44.087 00:00:10.373 TCP 23.104.0.1:44572 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:53:59.248 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37940 10 6452 1 2025-08-13 14:50:10.735 00:05:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 14:54:44.494 00:00:10.324 TCP 23.104.0.1:36796 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:54:59.475 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39750 10 6452 1 2025-08-13 14:51:10.736 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 14:55:44.857 00:00:10.340 TCP 23.104.0.1:56184 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:55:59.709 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45538 10 6452 1 2025-08-13 14:56:45.231 00:00:10.331 TCP 23.104.0.1:47648 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:56:59.928 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52230 10 6452 1 2025-08-13 14:57:33.199 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 14:57:32.837 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 14:57:45.600 00:00:10.416 TCP 23.104.0.1:45548 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:58:00.168 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53148 10 6452 1 Summary: total flows: 163, total bytes: 505705, total packets: 1577, avg bps: 1087, avg pps: 0, avg bpp: 320 Time window: 2025-08-13 13:56:10 - 2025-08-13 14:58:10 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0011s User: 0.0032s Wall: 0.0021s flows/second: 77875.8 Runtime: 0.0021s