Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 18:58:46.964 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:58236 10 6452 1 2025-08-13 18:59:04.359 00:00:10.362 TCP 23.104.0.1:33478 -> 1.101.0.1:3000 11 1507 1 2025-08-13 18:59:47.259 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:43432 10 6452 1 2025-08-13 18:56:10.815 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 19:00:04.758 00:00:10.388 TCP 23.104.0.1:34860 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:00:47.500 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45822 10 6452 1 2025-08-13 18:57:10.818 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 19:01:05.174 00:00:10.325 TCP 23.104.0.1:56590 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:01:47.725 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35194 10 6452 1 2025-08-13 19:02:05.541 00:00:10.366 TCP 23.104.0.1:60908 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:02:37.653 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 19:02:37.580 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 19:02:47.933 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:42210 10 6452 1 2025-08-13 19:03:05.944 00:00:10.332 TCP 23.104.0.1:57660 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:03:48.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49508 10 6452 1 2025-08-13 19:04:06.314 00:00:10.323 TCP 23.104.0.1:45236 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:04:48.337 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43440 10 6452 1 2025-08-13 19:05:06.674 00:00:10.521 TCP 23.104.0.1:47346 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:05:48.554 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50444 10 6452 1 2025-08-13 19:02:10.818 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 19:06:07.232 00:00:10.367 TCP 23.104.0.1:56582 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:06:48.764 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60274 10 6452 1 2025-08-13 19:03:10.820 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 19:07:07.642 00:00:10.364 TCP 23.104.0.1:51266 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:07:37.823 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 19:07:37.977 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 19:07:48.938 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:48370 10 6452 1 2025-08-13 19:08:08.060 00:00:10.367 TCP 23.104.0.1:45362 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:08:49.191 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47936 10 6452 1 2025-08-13 19:09:08.467 00:00:10.367 TCP 23.104.0.1:45894 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:09:49.413 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37096 10 6452 1 2025-08-13 19:10:08.869 00:00:10.364 TCP 23.104.0.1:60904 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:10:49.627 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53106 10 6452 1 2025-08-13 19:11:09.271 00:00:10.364 TCP 23.104.0.1:49210 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:11:49.846 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38668 10 6452 1 2025-08-13 19:08:10.821 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 19:12:09.674 00:00:10.362 TCP 23.104.0.1:59126 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:12:37.960 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 19:12:37.855 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 19:12:50.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43596 10 6452 1 2025-08-13 19:09:10.823 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 19:13:10.116 00:00:10.323 TCP 23.104.0.1:48406 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:13:50.294 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57598 10 6452 1 2025-08-13 19:14:10.477 00:00:10.367 TCP 23.104.0.1:33818 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:14:50.509 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51716 10 6452 1 2025-08-13 19:15:10.886 00:00:10.376 TCP 23.104.0.1:39876 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:15:50.681 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37566 10 6452 1 2025-08-13 19:16:11.304 00:00:10.334 TCP 23.104.0.1:33210 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:16:50.854 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53812 10 6452 1 2025-08-13 19:17:11.678 00:00:10.370 TCP 23.104.0.1:41476 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:17:38.168 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 19:17:37.945 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 19:17:51.089 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45010 10 6452 1 2025-08-13 19:14:10.823 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 19:18:12.111 00:00:10.365 TCP 23.104.0.1:45212 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:18:51.299 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49660 10 6452 1 2025-08-13 19:15:10.825 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 19:19:12.516 00:00:10.332 TCP 23.104.0.1:38272 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:19:51.516 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37856 10 6452 1 2025-08-13 19:20:12.875 00:00:10.341 TCP 23.104.0.1:45668 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:20:51.738 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49288 10 6452 1 2025-08-13 19:21:13.260 00:00:10.366 TCP 23.104.0.1:46820 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:21:51.916 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46042 10 6452 1 2025-08-13 19:22:13.664 00:00:10.371 TCP 23.104.0.1:47074 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:22:38.142 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 19:22:38.198 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 19:22:52.129 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47652 10 6452 1 2025-08-13 19:23:14.101 00:00:10.588 TCP 23.104.0.1:56518 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:23:52.345 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48610 10 6452 1 2025-08-13 19:20:10.824 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 19:24:14.727 00:00:10.373 TCP 23.104.0.1:38546 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:24:52.558 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35686 10 6452 1 2025-08-13 19:21:10.826 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 19:25:15.133 00:00:10.365 TCP 23.104.0.1:39664 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:25:52.788 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35812 10 6452 1 2025-08-13 19:26:15.536 00:00:10.362 TCP 23.104.0.1:35044 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:26:52.999 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48242 10 6452 1 2025-08-13 19:27:15.945 00:00:10.732 TCP 23.104.0.1:32960 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:27:38.159 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 19:27:38.090 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 19:27:53.237 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33726 10 6452 1 2025-08-13 19:28:16.712 00:00:10.376 TCP 23.104.0.1:59618 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:28:53.455 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:53684 10 6452 1 2025-08-13 19:29:17.124 00:00:10.366 TCP 23.104.0.1:58840 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:29:53.637 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36202 10 6452 1 2025-08-13 19:26:10.825 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 19:30:17.525 00:00:10.369 TCP 23.104.0.1:54242 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:30:53.849 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:49086 10 6452 1 2025-08-13 19:27:10.827 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 19:31:17.931 00:00:10.392 TCP 23.104.0.1:53744 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:31:54.066 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55146 10 6452 1 2025-08-13 19:32:18.361 00:00:10.367 TCP 23.104.0.1:52868 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:32:38.519 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 19:32:38.472 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 19:32:54.279 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33740 10 6452 1 2025-08-13 19:33:18.762 00:00:10.332 TCP 23.104.0.1:54842 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:33:54.498 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43314 10 6452 1 2025-08-13 19:34:19.135 00:00:14.336 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:34:54.709 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60728 10 6452 1 2025-08-13 19:35:23.515 00:00:10.366 TCP 23.104.0.1:45696 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:35:54.927 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57720 10 6452 1 2025-08-13 19:32:10.826 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 19:36:23.920 00:00:10.387 TCP 23.104.0.1:40918 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:36:55.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42438 10 6452 1 2025-08-13 19:33:10.828 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 19:37:24.345 00:00:10.360 TCP 23.104.0.1:47772 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:37:38.365 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 19:37:38.544 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 19:37:55.341 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37630 10 6452 1 2025-08-13 19:38:24.744 00:00:10.318 TCP 23.104.0.1:44978 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:38:55.557 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56022 10 6452 1 2025-08-13 19:39:25.108 00:00:10.365 TCP 23.104.0.1:38446 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:39:55.777 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53714 10 6452 1 2025-08-13 19:40:25.512 00:00:10.363 TCP 23.104.0.1:46130 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:40:55.993 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44142 10 6452 1 2025-08-13 19:41:25.916 00:00:10.379 TCP 23.104.0.1:54720 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:41:56.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46564 10 6452 1 2025-08-13 19:38:10.831 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 19:42:26.334 00:00:10.364 TCP 23.104.0.1:44894 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:42:38.491 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 19:42:38.374 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 19:42:56.428 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49488 10 6452 1 2025-08-13 19:39:10.832 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 19:43:26.735 00:00:10.370 TCP 23.104.0.1:48060 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:43:56.639 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34704 10 6452 1 2025-08-13 19:44:27.144 00:00:10.324 TCP 23.104.0.1:59100 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:44:56.850 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40374 10 6452 1 2025-08-13 19:45:27.511 00:00:10.362 TCP 23.104.0.1:46982 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:45:57.080 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-08-13 19:46:27.918 00:00:10.338 TCP 23.104.0.1:43850 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:46:57.291 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:43106 10 6452 1 2025-08-13 19:47:38.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 19:47:28.290 00:00:10.366 TCP 23.104.0.1:56014 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:47:38.559 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 19:47:57.527 00:00:10.682 TCP 1.101.0.1:3000 -> 22.102.0.1:41492 10 6452 1 2025-08-13 19:44:10.839 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 19:48:28.694 00:00:10.363 TCP 23.104.0.1:54250 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:45:10.841 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 19:48:58.247 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55560 10 6452 1 2025-08-13 19:49:29.116 00:00:10.364 TCP 23.104.0.1:41474 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:49:58.463 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44762 10 6452 1 2025-08-13 19:50:29.518 00:00:10.330 TCP 23.104.0.1:54420 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:50:58.643 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48282 10 6452 1 2025-08-13 19:51:29.889 00:00:10.334 TCP 23.104.0.1:43422 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:51:58.874 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60950 10 6452 1 2025-08-13 19:52:38.667 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 19:52:38.711 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 19:52:30.261 00:00:10.374 TCP 23.104.0.1:42506 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:52:59.096 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38148 10 6452 1 2025-08-13 19:53:30.669 00:00:10.370 TCP 23.104.0.1:56706 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:53:59.317 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37212 10 6452 1 2025-08-13 19:50:10.839 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 19:54:31.095 00:00:10.360 TCP 23.104.0.1:52702 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:54:59.538 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-08-13 19:51:10.843 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 19:55:31.495 00:00:10.362 TCP 23.104.0.1:43268 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:55:59.753 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:45874 10 6452 1 2025-08-13 19:56:31.895 00:00:10.381 TCP 23.104.0.1:49814 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:56:59.921 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60102 10 6452 1 2025-08-13 19:57:39.500 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 19:57:38.751 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 19:57:32.313 00:00:10.367 TCP 23.104.0.1:56810 -> 1.101.0.1:3000 11 1507 1 2025-08-13 19:58:00.103 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40100 10 6452 1 2025-08-13 19:58:32.718 00:00:10.375 TCP 23.104.0.1:41018 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1062, avg pps: 0, avg bpp: 317 Time window: 2025-08-13 18:56:10 - 2025-08-13 19:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0023s User: 0.0023s Wall: 0.0028s flows/second: 57847.6 Runtime: 0.0029s