Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 14:58:54.835 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39632 10 6452 1 2025-08-15 14:59:22.618 00:00:10.367 TCP 23.104.0.1:37832 -> 1.101.0.1:3000 11 1507 1 2025-08-15 14:59:55.080 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58602 10 6452 1 2025-08-15 14:56:11.691 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 15:00:23.021 00:00:10.369 TCP 23.104.0.1:48274 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:00:55.251 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39210 10 6452 1 2025-08-15 15:01:23.428 00:00:10.363 TCP 23.104.0.1:33352 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:01:55.470 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54376 10 6452 1 2025-08-15 15:02:23.828 00:00:10.320 TCP 23.104.0.1:41760 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:02:55.690 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50624 10 6452 1 2025-08-15 15:03:30.849 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 15:03:30.715 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 15:03:24.183 00:00:10.366 TCP 23.104.0.1:46430 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:03:55.899 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43922 10 6452 1 2025-08-15 15:00:11.689 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 15:04:24.586 00:00:10.368 TCP 23.104.0.1:49326 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:04:56.084 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56640 10 6452 1 2025-08-15 15:05:24.994 00:00:10.438 TCP 23.104.0.1:36750 -> 1.101.0.1:3000 15 1926 1 2025-08-15 15:05:56.255 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:44296 12 10365 1 2025-08-15 15:02:11.691 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 15:06:25.473 00:00:10.369 TCP 23.104.0.1:52690 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:06:56.499 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42580 10 6452 1 2025-08-15 15:07:25.880 00:00:10.351 TCP 23.104.0.1:34664 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:07:56.716 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35656 10 6452 1 2025-08-15 15:08:30.679 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 15:08:30.866 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 15:08:26.271 00:00:10.366 TCP 23.104.0.1:35148 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:08:56.927 00:00:10.451 TCP 1.101.0.1:3000 -> 22.102.0.1:33832 10 6452 1 2025-08-15 15:09:26.676 00:00:10.363 TCP 23.104.0.1:38672 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:09:57.418 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38694 10 6452 1 2025-08-15 15:06:11.692 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 15:10:27.100 00:00:10.382 TCP 23.104.0.1:59430 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:10:57.646 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:56076 10 6452 1 2025-08-15 15:11:27.519 00:00:10.366 TCP 23.104.0.1:51320 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:11:57.836 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:55502 10 6452 1 2025-08-15 15:08:11.695 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 15:12:27.923 00:00:10.384 TCP 23.104.0.1:44234 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:12:58.035 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49492 10 6452 1 2025-08-15 15:13:30.853 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 15:13:30.883 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 15:13:28.343 00:00:10.370 TCP 23.104.0.1:40018 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:13:58.247 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56386 10 6452 1 2025-08-15 15:14:28.751 00:00:10.364 TCP 23.104.0.1:42366 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:14:58.467 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40428 10 6452 1 2025-08-15 15:15:29.145 00:00:10.320 TCP 23.104.0.1:56076 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:15:58.683 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48956 10 6452 1 2025-08-15 15:12:11.694 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 15:16:29.504 00:00:10.366 TCP 23.104.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:16:58.917 00:00:10.409 TCP 1.101.0.1:3000 -> 22.102.0.1:44072 10 6452 1 2025-08-15 15:17:29.907 00:00:10.322 TCP 23.104.0.1:45528 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:17:59.363 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46614 10 6452 1 2025-08-15 15:14:11.697 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 15:18:30.934 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 15:18:30.974 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 15:18:30.269 00:00:10.364 TCP 23.104.0.1:57806 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:18:59.575 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51260 10 6452 1 2025-08-15 15:19:30.672 00:00:10.363 TCP 23.104.0.1:43728 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:19:59.791 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39740 10 6452 1 2025-08-15 15:20:31.098 00:00:10.327 TCP 23.104.0.1:40366 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:21:00.009 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41572 10 6452 1 2025-08-15 15:21:31.471 00:00:10.364 TCP 23.104.0.1:42684 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:22:00.193 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39716 10 6452 1 2025-08-15 15:18:11.694 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 15:22:31.878 00:00:10.391 TCP 23.104.0.1:44442 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:23:00.421 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38244 10 6452 1 2025-08-15 15:23:31.341 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 15:23:31.474 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 15:23:32.305 00:00:10.366 TCP 23.104.0.1:40948 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:24:00.640 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:38522 10 6452 1 2025-08-15 15:20:11.697 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 15:24:32.707 00:00:10.323 TCP 23.104.0.1:35828 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:25:00.873 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38404 10 6452 1 2025-08-15 15:25:33.094 00:00:10.329 TCP 23.104.0.1:38928 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:26:01.099 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:51842 10 6452 1 2025-08-15 15:26:33.465 00:00:10.365 TCP 23.104.0.1:38198 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:27:01.285 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:51094 10 6452 1 2025-08-15 15:27:33.871 00:00:10.365 TCP 23.104.0.1:38788 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:28:01.469 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47768 10 6452 1 2025-08-15 15:24:11.695 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 15:28:31.017 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 15:28:31.261 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 15:28:34.273 00:00:10.325 TCP 23.104.0.1:59854 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:29:01.682 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43380 10 6452 1 2025-08-15 15:29:34.631 00:00:10.362 TCP 23.104.0.1:54178 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:30:01.859 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:55278 10 6452 1 2025-08-15 15:26:11.698 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 15:30:35.031 00:00:10.361 TCP 23.104.0.1:56264 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:31:02.095 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55898 10 6452 1 2025-08-15 15:31:35.431 00:00:10.321 TCP 23.104.0.1:40974 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:32:02.308 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 10 6452 1 2025-08-15 15:32:35.791 00:00:10.343 TCP 23.104.0.1:38514 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:33:02.530 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37550 10 6452 1 2025-08-15 15:33:31.016 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 15:33:31.285 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 15:33:36.171 00:00:10.362 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:34:02.750 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57840 10 6452 1 2025-08-15 15:30:11.696 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 15:34:36.573 00:00:10.358 TCP 23.104.0.1:41214 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:35:02.973 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 10 6452 1 2025-08-15 15:35:36.972 00:00:10.364 TCP 23.104.0.1:57530 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:32:11.699 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 15:36:03.227 00:00:10.316 TCP 1.101.0.1:3000 -> 22.102.0.1:56758 10 6452 1 2025-08-15 15:36:37.379 00:00:10.385 TCP 23.104.0.1:42520 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:37:03.582 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51548 10 6452 1 2025-08-15 15:37:37.809 00:00:10.336 TCP 23.104.0.1:56302 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:38:03.795 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58888 10 6452 1 2025-08-15 15:38:31.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 15:38:31.546 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 15:38:38.189 00:00:10.361 TCP 23.104.0.1:54106 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:39:03.969 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:48924 10 6452 1 2025-08-15 15:39:38.590 00:00:10.367 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:36:11.699 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 15:40:04.218 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39604 10 6452 1 2025-08-15 15:40:38.995 00:00:10.364 TCP 23.104.0.1:43614 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:41:04.437 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35798 10 6452 1 2025-08-15 15:41:39.398 00:00:10.926 TCP 23.104.0.1:35018 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:42:04.615 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47898 10 6452 1 2025-08-15 15:38:11.704 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 15:42:40.362 00:00:10.464 TCP 23.104.0.1:56916 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:43:04.829 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45508 10 6452 1 2025-08-15 15:43:31.517 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 15:43:31.736 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 15:43:40.861 00:00:10.327 TCP 23.104.0.1:33988 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:44:05.067 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:47428 10 6452 1 2025-08-15 15:44:41.227 00:00:10.321 TCP 23.104.0.1:57688 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:45:05.232 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41470 10 6452 1 2025-08-15 15:45:41.584 00:00:10.325 TCP 23.104.0.1:53642 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:46:05.449 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52630 10 6452 1 2025-08-15 15:42:11.703 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 15:46:41.951 00:00:10.327 TCP 23.104.0.1:42956 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:47:05.659 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52244 10 6452 1 2025-08-15 15:47:42.314 00:00:10.367 TCP 23.104.0.1:36778 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:44:11.706 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 15:48:05.874 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36648 10 6452 1 2025-08-15 15:48:31.457 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 15:48:31.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 15:48:42.725 00:00:10.367 TCP 23.104.0.1:60016 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:49:06.108 00:00:10.291 TCP 1.101.0.1:3000 -> 22.102.0.1:58740 10 6452 1 2025-08-15 15:49:43.134 00:00:10.367 TCP 23.104.0.1:43226 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:50:06.442 00:00:10.526 TCP 1.101.0.1:3000 -> 22.102.0.1:44354 10 6452 1 2025-08-15 15:50:43.540 00:00:10.437 TCP 23.104.0.1:50526 -> 1.101.0.1:3000 15 1926 1 2025-08-15 15:51:07.003 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:51422 12 10367 1 2025-08-15 15:51:44.018 00:00:10.368 TCP 23.104.0.1:52940 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:48:11.705 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 15:52:07.208 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36536 10 6452 1 2025-08-15 15:52:44.421 00:00:10.372 TCP 23.104.0.1:41356 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:53:07.430 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45380 10 6452 1 2025-08-15 15:53:31.765 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 15:53:31.595 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 15:53:44.834 00:00:10.403 TCP 23.104.0.1:52290 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:50:11.707 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 15:54:07.639 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56824 10 6452 1 2025-08-15 15:54:45.273 00:00:10.368 TCP 23.104.0.1:45448 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:55:07.854 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43748 10 6452 1 2025-08-15 15:55:45.679 00:00:10.327 TCP 23.104.0.1:42878 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:56:08.080 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35590 10 6452 1 2025-08-15 15:56:46.059 00:00:10.646 TCP 23.104.0.1:47454 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:57:08.295 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51652 10 6452 1 2025-08-15 15:57:46.745 00:00:10.367 TCP 23.104.0.1:56866 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:54:11.709 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 15:58:08.510 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34712 10 6452 1 2025-08-15 15:58:31.838 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 15:58:32.004 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 505507, total packets: 1573, avg bps: 1069, avg pps: 0, avg bpp: 321 Time window: 2025-08-15 14:56:11 - 2025-08-15 15:59:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0024s User: 0.0024s Wall: 0.0021s flows/second: 79321.4 Runtime: 0.0021s