Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 12:58:42.845 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-08-16 12:58:57.233 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 12:58:57.164 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 12:54:12.120 00:06:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 12:59:19.862 00:00:10.366 TCP 23.104.0.1:35032 -> 1.101.0.1:3000 11 1507 1 2025-08-16 12:59:43.032 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48456 10 6452 1 2025-08-16 13:00:20.266 00:00:10.357 TCP 23.104.0.1:33728 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:00:43.244 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35186 10 6452 1 2025-08-16 13:01:20.662 00:00:10.365 TCP 23.104.0.1:50964 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:01:43.460 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41800 10 6452 1 2025-08-16 12:57:12.120 00:06:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 13:02:21.093 00:00:10.370 TCP 23.104.0.1:34346 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:02:43.672 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40034 10 6452 1 2025-08-16 13:03:21.495 00:00:10.367 TCP 23.104.0.1:58812 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:03:43.890 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51956 10 6452 1 2025-08-16 13:03:56.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 13:03:57.229 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 13:04:21.900 00:00:10.418 TCP 23.104.0.1:40356 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:04:44.080 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36576 10 6452 1 2025-08-16 13:05:22.356 00:00:10.395 TCP 23.104.0.1:39824 -> 1.101.0.1:3000 15 1926 1 2025-08-16 13:05:44.294 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 12 10367 1 2025-08-16 13:01:12.123 00:06:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 13:06:22.788 00:00:10.371 TCP 23.104.0.1:55504 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:06:44.535 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48656 10 6452 1 2025-08-16 13:07:23.213 00:00:10.364 TCP 23.104.0.1:43634 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:07:44.746 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47544 10 6452 1 2025-08-16 13:08:23.617 00:00:10.362 TCP 23.104.0.1:55610 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:08:44.956 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51528 10 6452 1 2025-08-16 13:08:57.272 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 13:08:57.547 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 13:04:12.121 00:06:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 13:09:24.018 00:00:10.378 TCP 23.104.0.1:58172 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:09:45.178 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58128 10 6452 1 2025-08-16 13:10:24.432 00:00:10.380 TCP 23.104.0.1:37520 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:10:45.385 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55166 10 6452 1 2025-08-16 13:11:24.853 00:00:10.375 TCP 23.104.0.1:43370 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:11:45.600 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53352 10 6452 1 2025-08-16 13:12:25.267 00:00:10.423 TCP 23.104.0.1:50918 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:12:45.820 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36244 10 6452 1 2025-08-16 13:08:12.124 00:06:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 13:13:25.734 00:00:10.371 TCP 23.104.0.1:42568 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:13:46.046 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57134 10 6452 1 2025-08-16 13:13:57.431 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 13:13:57.371 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 13:14:26.140 00:00:10.320 TCP 23.104.0.1:37132 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:14:46.260 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6452 1 2025-08-16 13:15:26.502 00:00:10.376 TCP 23.104.0.1:37928 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:15:46.436 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60978 10 6452 1 2025-08-16 13:11:12.121 00:06:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 13:16:26.906 00:00:10.365 TCP 23.104.0.1:40010 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:16:46.673 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44958 10 6452 1 2025-08-16 13:17:27.309 00:00:10.365 TCP 23.104.0.1:42610 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:17:46.889 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42898 10 6452 1 2025-08-16 13:18:27.710 00:00:10.371 TCP 23.104.0.1:33032 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:18:47.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49312 10 6452 1 2025-08-16 13:18:57.491 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 13:18:57.619 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 13:19:28.114 00:00:10.372 TCP 23.104.0.1:51868 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:19:47.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55462 10 6452 1 2025-08-16 13:15:12.125 00:06:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 13:20:28.521 00:00:10.360 TCP 23.104.0.1:41390 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:20:47.510 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35884 10 6452 1 2025-08-16 13:21:28.916 00:00:10.382 TCP 23.104.0.1:55556 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:21:47.679 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37716 10 6452 1 2025-08-16 13:22:29.336 00:00:10.369 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:22:47.890 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60010 10 6452 1 2025-08-16 13:18:12.124 00:06:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 13:23:29.741 00:00:10.365 TCP 23.104.0.1:45184 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:23:48.105 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49328 10 6452 1 2025-08-16 13:23:57.866 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 13:23:57.685 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 13:24:30.146 00:00:10.363 TCP 23.104.0.1:60144 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:24:48.327 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-08-16 13:25:30.553 00:00:10.373 TCP 23.104.0.1:42604 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:25:48.549 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47434 12 6556 1 2025-08-16 13:26:30.961 00:00:10.365 TCP 23.104.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:26:48.765 00:00:10.341 TCP 1.101.0.1:3000 -> 22.102.0.1:55460 10 6452 1 2025-08-16 13:22:12.126 00:06:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 13:27:31.368 00:00:10.367 TCP 23.104.0.1:43890 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:27:49.145 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35980 10 6452 1 2025-08-16 13:28:31.773 00:00:10.369 TCP 23.104.0.1:48142 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:28:49.359 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38090 10 6452 1 2025-08-16 13:28:57.703 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 13:28:57.694 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 13:29:32.180 00:00:10.326 TCP 23.104.0.1:41590 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:29:49.567 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41002 10 6452 1 2025-08-16 13:25:12.123 00:06:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 13:30:32.547 00:00:10.323 TCP 23.104.0.1:45168 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:30:49.778 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38374 10 6452 1 2025-08-16 13:31:32.907 00:00:10.367 TCP 23.104.0.1:58914 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:31:49.990 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51684 10 6452 1 2025-08-16 13:32:33.312 00:00:10.369 TCP 23.104.0.1:58848 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:32:50.209 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-08-16 13:29:12.127 00:05:00.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 13:33:33.714 00:00:10.378 TCP 23.104.0.1:55096 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:33:50.381 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35332 10 6452 1 2025-08-16 13:33:57.587 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 13:33:57.758 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 13:34:34.132 00:00:10.363 TCP 23.104.0.1:40606 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:34:50.553 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39756 10 6452 1 2025-08-16 13:35:34.536 00:00:10.372 TCP 23.104.0.1:36768 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:35:50.765 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36956 10 6452 1 2025-08-16 13:32:12.125 00:05:00.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 13:36:34.947 00:00:10.338 TCP 23.104.0.1:58844 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:36:50.933 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59188 10 6452 1 2025-08-16 13:37:35.339 00:00:10.380 TCP 23.104.0.1:56764 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:37:51.171 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37190 10 6452 1 2025-08-16 13:38:35.776 00:00:10.363 TCP 23.104.0.1:53726 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:38:57.810 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 13:38:51.342 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35254 10 6452 1 2025-08-16 13:38:57.837 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 13:35:12.127 00:05:00.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 13:39:36.178 00:00:10.370 TCP 23.104.0.1:52430 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:39:51.559 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44844 10 6452 1 2025-08-16 13:40:36.590 00:00:10.364 TCP 23.104.0.1:56964 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:40:51.779 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45122 10 6452 1 2025-08-16 13:41:36.989 00:00:10.367 TCP 23.104.0.1:52200 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:41:51.992 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39120 10 6452 1 2025-08-16 13:38:12.127 00:05:00.911 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 13:42:37.398 00:00:10.361 TCP 23.104.0.1:34734 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:42:52.213 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57928 10 6452 1 2025-08-16 13:43:37.798 00:00:10.335 TCP 23.104.0.1:47134 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:43:57.892 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 13:43:57.825 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 13:43:52.441 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55972 10 6452 1 2025-08-16 13:44:38.172 00:00:10.369 TCP 23.104.0.1:33242 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:44:52.653 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49380 10 6452 1 2025-08-16 13:41:12.135 00:05:00.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 13:45:38.579 00:00:10.364 TCP 23.104.0.1:55922 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:45:52.862 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50862 10 6452 1 2025-08-16 13:46:38.983 00:00:10.370 TCP 23.104.0.1:59578 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:46:53.088 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56306 10 6452 1 2025-08-16 13:47:39.392 00:00:10.370 TCP 23.104.0.1:40168 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:47:53.300 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50086 10 6452 1 2025-08-16 13:44:12.133 00:05:00.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 13:48:39.794 00:00:10.361 TCP 23.104.0.1:39076 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:48:58.110 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 13:48:58.156 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 13:48:53.468 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45620 10 6452 1 2025-08-16 13:49:40.194 00:00:10.373 TCP 23.104.0.1:58058 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:49:53.691 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54054 10 6452 1 2025-08-16 13:50:40.605 00:00:10.327 TCP 23.104.0.1:60918 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:50:53.908 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34412 10 6452 1 2025-08-16 13:47:12.137 00:05:00.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 13:51:40.970 00:00:10.365 TCP 23.104.0.1:35732 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:51:54.131 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44212 10 6452 1 2025-08-16 13:52:41.375 00:00:10.368 TCP 23.104.0.1:57542 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:52:54.347 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57788 10 6452 1 2025-08-16 13:53:41.787 00:00:10.360 TCP 23.104.0.1:60050 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:53:58.054 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 13:53:58.386 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 13:53:54.565 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45274 10 6452 1 2025-08-16 13:50:12.135 00:05:00.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 13:54:42.185 00:00:10.371 TCP 23.104.0.1:52114 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:54:54.773 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34080 10 6452 1 2025-08-16 13:55:42.593 00:00:10.365 TCP 23.104.0.1:59262 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:55:54.989 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:51810 10 6452 1 2025-08-16 13:56:42.998 00:00:10.369 TCP 23.104.0.1:45448 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:56:55.175 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59790 10 6452 1 2025-08-16 13:53:12.138 00:05:00.902 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 13:57:43.407 00:00:10.368 TCP 23.104.0.1:60476 -> 1.101.0.1:3000 11 1507 1 2025-08-16 13:57:55.382 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53806 10 6452 1 Summary: total flows: 162, total bytes: 501771, total packets: 1577, avg bps: 1045, avg pps: 0, avg bpp: 318 Time window: 2025-08-16 12:54:12 - 2025-08-16 13:58:13 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0038s User: 0.0010s Wall: 0.0023s flows/second: 71052.7 Runtime: 0.0023s