Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 03:58:46.218 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42320 10 6452 1 2025-08-16 03:59:46.414 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-08-16 03:59:42.009 00:00:10.365 TCP 23.104.0.1:53928 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:56:11.935 00:05:00.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 04:00:46.590 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33890 10 6452 1 2025-08-16 04:00:42.413 00:00:10.369 TCP 23.104.0.1:43766 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:01:42.820 00:00:10.367 TCP 23.104.0.1:39446 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:01:46.805 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44708 10 6452 1 2025-08-16 04:02:43.228 00:00:10.376 TCP 23.104.0.1:53106 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:02:46.970 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:38596 10 6452 1 2025-08-16 04:03:46.384 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 04:03:46.424 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 04:03:43.639 00:00:10.367 TCP 23.104.0.1:38820 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:03:47.206 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39938 10 6452 1 2025-08-16 04:00:11.932 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 04:04:44.060 00:00:10.324 TCP 23.104.0.1:56824 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:04:47.425 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58136 10 6452 1 2025-08-16 04:05:44.427 00:00:10.363 TCP 23.104.0.1:57950 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:05:47.594 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54908 10 6452 1 2025-08-16 04:02:11.935 00:05:00.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 04:06:44.827 00:00:10.355 TCP 23.104.0.1:60522 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:06:47.812 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45792 10 6452 1 2025-08-16 04:07:45.216 00:00:10.337 TCP 23.104.0.1:41678 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:07:48.033 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33218 10 6452 1 2025-08-16 04:08:46.477 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 04:08:46.340 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 04:08:45.591 00:00:10.365 TCP 23.104.0.1:39506 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:08:48.246 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53500 10 6452 1 2025-08-16 04:09:45.997 00:00:10.364 TCP 23.104.0.1:40328 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:09:48.460 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34870 10 6452 1 2025-08-16 04:06:11.934 00:05:00.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 04:10:46.397 00:00:10.324 TCP 23.104.0.1:38962 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:10:48.629 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46978 10 6452 1 2025-08-16 04:11:46.762 00:00:10.380 TCP 23.104.0.1:43534 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:11:48.799 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60182 10 6452 1 2025-08-16 04:08:11.939 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 04:12:47.177 00:00:10.364 TCP 23.104.0.1:48732 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:12:49.008 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46634 10 6452 1 2025-08-16 04:13:46.769 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 04:13:46.700 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 04:13:49.224 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59064 10 6452 1 2025-08-16 04:13:47.580 00:00:10.360 TCP 23.104.0.1:55396 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:14:47.977 00:00:10.329 TCP 23.104.0.1:49136 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:14:49.395 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53172 10 6452 1 2025-08-16 04:15:48.344 00:00:10.367 TCP 23.104.0.1:52582 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:15:49.612 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55684 10 6452 1 2025-08-16 04:12:11.938 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 04:16:48.744 00:00:10.399 TCP 23.104.0.1:57158 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:16:49.823 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51504 10 6452 1 2025-08-16 04:17:50.063 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59326 10 6452 1 2025-08-16 04:17:49.181 00:00:10.364 TCP 23.104.0.1:38874 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:14:11.940 00:05:00.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 04:18:46.572 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 04:18:46.386 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 04:18:50.270 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42878 10 6452 1 2025-08-16 04:18:49.580 00:00:10.318 TCP 23.104.0.1:47898 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:19:49.941 00:00:10.382 TCP 23.104.0.1:42582 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:19:50.486 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52682 10 6452 1 2025-08-16 04:20:50.699 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36066 10 6452 1 2025-08-16 04:20:50.363 00:00:10.328 TCP 23.104.0.1:36020 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:21:50.879 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48484 10 6452 1 2025-08-16 04:21:50.732 00:00:10.367 TCP 23.104.0.1:50710 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:18:11.939 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 04:22:51.134 00:00:10.324 TCP 23.104.0.1:34438 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:22:51.100 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60028 10 6452 1 2025-08-16 04:23:46.655 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 04:23:46.607 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 04:23:51.315 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45134 10 6452 1 2025-08-16 04:23:51.494 00:00:10.368 TCP 23.104.0.1:44730 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:20:11.940 00:05:00.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 04:24:51.484 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44070 10 6452 1 2025-08-16 04:24:51.912 00:00:10.384 TCP 23.104.0.1:39988 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:25:51.699 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47742 10 6452 1 2025-08-16 04:25:52.340 00:00:10.372 TCP 23.104.0.1:42678 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:26:52.748 00:00:10.367 TCP 23.104.0.1:42168 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:26:51.912 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42062 12 6556 1 2025-08-16 04:27:53.166 00:00:10.365 TCP 23.104.0.1:52800 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:27:52.144 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40922 10 6452 1 2025-08-16 04:24:11.939 00:05:00.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 04:28:46.870 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 04:28:47.001 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 04:28:53.578 00:00:10.366 TCP 23.104.0.1:46552 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:28:52.315 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52902 10 6452 1 2025-08-16 04:29:53.989 00:00:10.362 TCP 23.104.0.1:34446 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:29:52.528 00:00:10.266 TCP 1.101.0.1:3000 -> 22.102.0.1:60522 10 6452 1 2025-08-16 04:26:11.942 00:05:00.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 04:30:52.835 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51582 10 6452 1 2025-08-16 04:30:54.397 00:00:10.372 TCP 23.104.0.1:37050 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:31:54.803 00:00:10.336 TCP 23.104.0.1:35234 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:31:53.017 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36624 10 6452 1 2025-08-16 04:32:55.175 00:00:10.360 TCP 23.104.0.1:57458 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:32:53.228 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57628 10 6452 1 2025-08-16 04:33:46.796 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 04:33:46.815 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 04:33:55.576 00:00:10.366 TCP 23.104.0.1:54104 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:33:53.438 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34694 10 6452 1 2025-08-16 04:30:11.940 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 04:34:55.981 00:00:10.365 TCP 23.104.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:34:53.652 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46922 10 6452 1 2025-08-16 04:35:56.389 00:00:10.361 TCP 23.104.0.1:41870 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:35:53.865 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52062 10 6452 1 2025-08-16 04:32:11.942 00:05:00.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 04:36:54.086 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41050 10 6452 1 2025-08-16 04:36:56.788 00:00:10.363 TCP 23.104.0.1:32822 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:37:54.299 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43356 10 6452 1 2025-08-16 04:37:57.186 00:00:10.365 TCP 23.104.0.1:46270 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:38:47.441 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 04:38:47.185 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 04:38:54.476 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35156 10 6452 1 2025-08-16 04:38:57.589 00:00:10.362 TCP 23.104.0.1:52556 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:39:54.691 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36372 10 6452 1 2025-08-16 04:39:57.992 00:00:10.361 TCP 23.104.0.1:59460 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:36:11.941 00:05:00.870 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 04:40:54.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54206 10 6452 1 2025-08-16 04:40:58.398 00:00:10.329 TCP 23.104.0.1:57870 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:41:55.113 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37064 10 6452 1 2025-08-16 04:41:58.767 00:00:10.332 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:38:11.944 00:05:00.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 04:42:55.327 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51832 10 6452 1 2025-08-16 04:42:59.139 00:00:10.327 TCP 23.104.0.1:42824 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:43:47.222 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 04:43:47.358 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 04:43:55.542 00:00:10.422 TCP 1.101.0.1:3000 -> 22.102.0.1:55074 10 6452 1 2025-08-16 04:43:59.500 00:00:10.363 TCP 23.104.0.1:46954 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:44:56.001 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37370 10 6452 1 2025-08-16 04:44:59.903 00:00:10.364 TCP 23.104.0.1:45952 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:45:56.226 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41406 10 6452 1 2025-08-16 04:46:00.308 00:00:10.325 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:42:11.946 00:05:00.866 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 04:46:56.466 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33354 10 6452 1 2025-08-16 04:47:00.673 00:00:10.373 TCP 23.104.0.1:55994 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:47:56.679 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55402 10 6452 1 2025-08-16 04:48:01.101 00:00:10.366 TCP 23.104.0.1:33914 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:44:11.949 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 04:48:47.243 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 04:48:47.433 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 04:49:01.506 00:00:10.324 TCP 23.104.0.1:52386 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:48:56.899 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35012 10 6452 1 2025-08-16 04:49:57.113 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49674 10 6452 1 2025-08-16 04:50:01.867 00:00:10.433 TCP 23.104.0.1:54976 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:50:57.330 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38650 10 6452 1 2025-08-16 04:51:02.357 00:00:10.326 TCP 23.104.0.1:46980 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:51:57.544 00:00:10.454 TCP 1.101.0.1:3000 -> 22.102.0.1:34764 10 6452 1 2025-08-16 04:52:02.721 00:00:10.704 TCP 23.104.0.1:52544 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:48:11.949 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 04:52:58.045 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36384 10 6452 1 2025-08-16 04:53:03.463 00:00:10.324 TCP 23.104.0.1:54450 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:53:47.428 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 04:53:47.191 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 04:53:58.215 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36320 10 6452 1 2025-08-16 04:54:03.822 00:00:10.363 TCP 23.104.0.1:44582 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:50:11.951 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 04:54:58.389 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36082 10 6452 1 2025-08-16 04:55:04.227 00:00:10.322 TCP 23.104.0.1:40856 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:55:58.597 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41918 10 6452 1 2025-08-16 04:56:04.590 00:00:10.364 TCP 23.104.0.1:39416 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:56:58.817 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59740 10 6452 1 2025-08-16 04:57:04.988 00:00:10.373 TCP 23.104.0.1:54466 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:57:59.035 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53588 10 6452 1 2025-08-16 04:54:11.950 00:05:00.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 04:58:05.400 00:00:10.318 TCP 23.104.0.1:36116 -> 1.101.0.1:3000 11 1507 1 2025-08-16 04:58:47.441 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 04:58:47.449 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1051, avg pps: 0, avg bpp: 317 Time window: 2025-08-16 03:56:11 - 2025-08-16 04:59:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0019s Wall: 0.0021s flows/second: 76601.9 Runtime: 0.0021s