Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 19:58:46.092 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45720 10 6452 1 2025-08-14 19:59:39.591 00:00:10.358 TCP 23.104.0.1:39142 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:59:46.273 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35296 10 6452 1 2025-08-14 19:56:11.322 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 20:00:39.994 00:00:10.329 TCP 23.104.0.1:43818 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:00:46.485 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54750 10 6452 1 2025-08-14 20:01:40.368 00:00:10.364 TCP 23.104.0.1:34572 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:01:46.694 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35230 10 6452 1 2025-08-14 20:02:40.772 00:00:10.324 TCP 23.104.0.1:42916 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:02:46.908 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44646 10 6452 1 2025-08-14 20:03:07.525 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 20:03:07.873 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 20:03:41.136 00:00:10.368 TCP 23.104.0.1:41110 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:03:47.122 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33756 10 6452 1 2025-08-14 20:00:11.320 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 20:04:41.540 00:00:10.370 TCP 23.104.0.1:55288 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:04:47.336 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32908 10 6452 1 2025-08-14 20:05:41.942 00:00:10.372 TCP 23.104.0.1:45346 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:05:47.550 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58158 10 6452 1 2025-08-14 20:02:11.323 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 20:06:42.352 00:00:10.337 TCP 23.104.0.1:58088 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:06:47.764 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36034 10 6452 1 2025-08-14 20:07:42.734 00:00:10.364 TCP 23.104.0.1:51336 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:07:47.976 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53186 10 6452 1 2025-08-14 20:08:08.120 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 20:08:08.035 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 20:08:43.138 00:00:10.362 TCP 23.104.0.1:42862 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:08:48.210 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46914 10 6452 1 2025-08-14 20:09:43.541 00:00:10.363 TCP 23.104.0.1:33366 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:09:48.422 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37468 11 6492 1 2025-08-14 20:06:11.322 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 20:10:43.946 00:00:10.338 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:10:48.632 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55100 10 6452 1 2025-08-14 20:11:44.320 00:00:10.326 TCP 23.104.0.1:38298 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:11:48.848 00:00:10.503 TCP 1.101.0.1:3000 -> 22.102.0.1:47618 10 6452 1 2025-08-14 20:08:11.328 00:05:00.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 20:12:44.692 00:00:10.369 TCP 23.104.0.1:49838 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:12:49.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40006 10 6452 1 2025-08-14 20:13:07.902 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 20:13:08.062 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 20:13:45.106 00:00:10.378 TCP 23.104.0.1:42676 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:13:49.607 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40168 10 6452 1 2025-08-14 20:14:45.520 00:00:10.367 TCP 23.104.0.1:49622 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:14:49.838 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6452 1 2025-08-14 20:15:45.925 00:00:10.393 TCP 23.104.0.1:55996 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:15:50.074 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37634 10 6452 1 2025-08-14 20:12:11.327 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 20:16:46.354 00:00:10.368 TCP 23.104.0.1:34506 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:16:50.286 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53140 10 6452 1 2025-08-14 20:17:46.757 00:00:10.377 TCP 23.104.0.1:59502 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:17:50.461 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36334 10 6452 1 2025-08-14 20:18:08.093 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 20:18:08.011 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 20:14:11.329 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 20:18:47.168 00:00:10.367 TCP 23.104.0.1:35584 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:18:50.697 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50884 10 6452 1 2025-08-14 20:19:50.909 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41318 10 6452 1 2025-08-14 20:19:47.570 00:00:10.330 TCP 23.104.0.1:56226 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:20:47.936 00:00:10.458 TCP 23.104.0.1:46522 -> 1.101.0.1:3000 15 1926 1 2025-08-14 20:20:51.124 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42818 12 10365 1 2025-08-14 20:21:51.368 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40770 10 6452 1 2025-08-14 20:21:48.433 00:00:10.366 TCP 23.104.0.1:49566 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:18:11.328 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 20:22:51.583 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35760 10 6452 1 2025-08-14 20:22:48.834 00:00:10.391 TCP 23.104.0.1:55134 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:23:08.157 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 20:23:08.287 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 20:23:49.261 00:00:10.361 TCP 23.104.0.1:57340 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:23:51.791 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40256 10 6452 1 2025-08-14 20:20:11.330 00:05:00.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 20:24:49.659 00:00:10.448 TCP 23.104.0.1:60974 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:24:52.005 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54812 10 6452 1 2025-08-14 20:25:50.142 00:00:10.441 TCP 23.104.0.1:52378 -> 1.101.0.1:3000 15 1926 1 2025-08-14 20:25:52.223 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:40200 12 10365 1 2025-08-14 20:26:50.624 00:00:10.323 TCP 23.104.0.1:54596 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:26:52.466 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59910 11 6504 1 2025-08-14 20:27:50.987 00:00:10.364 TCP 23.104.0.1:51942 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:27:52.690 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34052 10 6452 1 2025-08-14 20:28:08.193 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 20:28:08.344 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 20:24:11.331 00:05:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 20:28:51.386 00:00:10.365 TCP 23.104.0.1:46324 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:28:52.901 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47868 10 6452 1 2025-08-14 20:29:53.120 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41618 10 6452 1 2025-08-14 20:29:51.788 00:00:10.375 TCP 23.104.0.1:45262 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:26:11.337 00:05:00.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 20:30:52.196 00:00:10.361 TCP 23.104.0.1:43948 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:30:53.288 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51042 10 6452 1 2025-08-14 20:31:52.596 00:00:10.366 TCP 23.104.0.1:48090 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:31:53.491 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56576 10 6452 1 2025-08-14 20:32:53.010 00:00:10.365 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:32:53.666 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38694 10 6452 1 2025-08-14 20:33:08.424 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 20:33:08.406 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 20:33:53.879 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:47102 12 6568 1 2025-08-14 20:33:53.421 00:00:10.368 TCP 23.104.0.1:58768 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:30:11.334 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 20:34:54.121 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47516 10 6452 1 2025-08-14 20:34:53.825 00:00:10.367 TCP 23.104.0.1:55038 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:35:54.230 00:00:10.373 TCP 23.104.0.1:43670 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:35:54.330 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49460 10 6452 1 2025-08-14 20:32:11.337 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 20:36:54.508 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:58006 10 6452 1 2025-08-14 20:36:54.643 00:00:10.364 TCP 23.104.0.1:53440 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:37:54.697 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37690 10 6452 1 2025-08-14 20:37:55.054 00:00:10.328 TCP 23.104.0.1:52584 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:38:08.364 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 20:38:08.457 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 20:38:55.418 00:00:10.338 TCP 23.104.0.1:50936 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:38:54.879 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59208 10 6452 1 2025-08-14 20:39:55.076 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:48716 11 6492 1 2025-08-14 20:39:55.793 00:00:10.362 TCP 23.104.0.1:43920 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:36:11.336 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 20:40:55.289 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51916 10 6452 1 2025-08-14 20:40:56.199 00:00:10.364 TCP 23.104.0.1:43436 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:41:55.502 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53924 10 6452 1 2025-08-14 20:41:56.602 00:00:10.369 TCP 23.104.0.1:50012 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:38:11.338 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 20:42:55.722 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34628 10 6452 1 2025-08-14 20:43:08.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 20:43:08.824 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 20:42:57.008 00:00:10.367 TCP 23.104.0.1:34236 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:43:55.935 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:60746 10 6452 1 2025-08-14 20:43:57.412 00:00:10.369 TCP 23.104.0.1:55888 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:44:56.185 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48894 10 6452 1 2025-08-14 20:44:57.822 00:00:10.364 TCP 23.104.0.1:45938 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:45:56.407 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35994 10 6452 1 2025-08-14 20:45:58.223 00:00:10.368 TCP 23.104.0.1:46462 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:42:11.338 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 20:46:56.634 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45886 10 6452 1 2025-08-14 20:46:58.629 00:00:10.366 TCP 23.104.0.1:60610 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:47:56.858 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50902 10 6452 1 2025-08-14 20:48:08.564 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 20:48:08.746 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 20:47:59.055 00:00:10.366 TCP 23.104.0.1:36394 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:44:11.341 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 20:48:57.087 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39456 10 6452 1 2025-08-14 20:48:59.455 00:00:10.363 TCP 23.104.0.1:50282 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:49:59.855 00:00:10.369 TCP 23.104.0.1:48570 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:49:57.310 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59416 10 6452 1 2025-08-14 20:51:00.264 00:00:10.320 TCP 23.104.0.1:39648 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:50:57.533 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53710 10 6452 1 2025-08-14 20:52:00.624 00:00:10.321 TCP 23.104.0.1:47962 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:51:57.752 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37040 10 6452 1 2025-08-14 20:48:11.339 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 20:52:57.966 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37560 10 6452 1 2025-08-14 20:53:08.790 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 20:53:00.991 00:00:10.320 TCP 23.104.0.1:48438 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:53:08.725 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 20:53:58.198 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38002 10 6452 1 2025-08-14 20:54:01.352 00:00:10.363 TCP 23.104.0.1:56996 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:50:11.342 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 20:54:58.420 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46482 10 6452 1 2025-08-14 20:55:01.757 00:00:10.384 TCP 23.104.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:55:58.647 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43158 10 6452 1 2025-08-14 20:56:02.178 00:00:10.366 TCP 23.104.0.1:48296 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:56:58.867 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37820 10 6452 1 2025-08-14 20:57:02.581 00:00:10.326 TCP 23.104.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:57:59.099 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35824 10 6452 1 2025-08-14 20:58:08.836 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 20:58:08.931 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 20:54:11.340 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 20:58:02.945 00:00:10.373 TCP 23.104.0.1:45982 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505753, total packets: 1578, avg bps: 1070, avg pps: 0, avg bpp: 320 Time window: 2025-08-14 19:56:11 - 2025-08-14 20:59:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0017s Wall: 0.0024s flows/second: 68483.6 Runtime: 0.0024s