Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-17 08:59:02.399 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46210 10 6452 1 2025-08-17 08:59:20.958 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 08:59:21.211 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 08:59:29.938 00:00:10.374 TCP 23.104.0.1:52902 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:00:02.568 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55000 10 6452 1 2025-08-17 08:56:12.497 00:05:00.914 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 09:00:30.352 00:00:10.332 TCP 23.104.0.1:60694 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:01:02.778 00:00:10.666 TCP 1.101.0.1:3000 -> 22.102.0.1:49444 10 6452 1 2025-08-17 09:01:30.718 00:00:10.374 TCP 23.104.0.1:32902 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:02:03.479 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51048 10 6452 1 2025-08-17 09:02:31.128 00:00:10.325 TCP 23.104.0.1:58256 -> 1.101.0.1:3000 11 1507 1 2025-08-17 08:59:12.501 00:05:00.922 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 09:03:03.649 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33572 10 6452 1 2025-08-17 09:03:31.491 00:00:10.363 TCP 23.104.0.1:46224 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:04:03.826 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56414 10 6452 1 2025-08-17 09:04:21.319 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 09:04:21.269 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 09:04:31.900 00:00:10.334 TCP 23.104.0.1:35520 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:05:04.040 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-08-17 09:05:32.272 00:00:10.332 TCP 23.104.0.1:49514 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:06:04.216 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48458 10 6452 1 2025-08-17 09:02:12.498 00:05:00.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 09:06:32.647 00:00:10.373 TCP 23.104.0.1:37742 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:07:04.442 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53634 10 6452 1 2025-08-17 09:07:33.072 00:00:10.364 TCP 23.104.0.1:56612 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:08:04.661 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42456 10 6452 1 2025-08-17 09:08:33.482 00:00:10.364 TCP 23.104.0.1:44868 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:09:04.871 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33426 10 6452 1 2025-08-17 09:05:12.502 00:05:00.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 09:09:21.325 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 09:09:21.238 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 09:09:33.899 00:00:10.365 TCP 23.104.0.1:55140 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:10:05.071 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33980 10 6452 1 2025-08-17 09:10:34.307 00:00:10.363 TCP 23.104.0.1:50250 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:11:05.238 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46888 10 6452 1 2025-08-17 09:11:34.712 00:00:10.380 TCP 23.104.0.1:40642 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:12:05.458 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6452 1 2025-08-17 09:08:12.500 00:05:00.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 09:12:35.129 00:00:10.323 TCP 23.104.0.1:52526 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:13:05.677 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56326 10 6452 1 2025-08-17 09:13:35.503 00:00:10.327 TCP 23.104.0.1:33810 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:14:05.888 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49298 10 6452 1 2025-08-17 09:14:21.256 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 09:14:21.632 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 09:14:35.867 00:00:10.373 TCP 23.104.0.1:50824 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:15:06.104 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55346 10 6452 1 2025-08-17 09:11:12.504 00:05:00.923 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 09:15:36.282 00:00:10.325 TCP 23.104.0.1:47648 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:16:06.318 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36116 10 6452 1 2025-08-17 09:16:36.649 00:00:10.324 TCP 23.104.0.1:49968 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:17:06.539 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57904 10 6452 1 2025-08-17 09:17:37.013 00:00:10.361 TCP 23.104.0.1:56300 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:18:06.749 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47312 10 6452 1 2025-08-17 09:14:12.502 00:05:00.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 09:18:37.412 00:00:10.362 TCP 23.104.0.1:35294 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:19:21.780 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 09:19:06.963 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40834 10 6452 1 2025-08-17 09:19:21.363 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 09:19:37.814 00:00:10.368 TCP 23.104.0.1:60810 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:20:07.199 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46590 10 6452 1 2025-08-17 09:20:38.221 00:00:10.325 TCP 23.104.0.1:45080 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:17:12.505 00:05:00.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 09:21:07.372 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49978 10 6452 1 2025-08-17 09:21:38.588 00:00:10.367 TCP 23.104.0.1:43196 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:22:07.594 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32938 10 6452 1 2025-08-17 09:22:38.996 00:00:10.359 TCP 23.104.0.1:35188 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:23:07.820 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60532 10 6452 1 2025-08-17 09:23:39.392 00:00:10.364 TCP 23.104.0.1:42110 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:20:12.504 00:05:00.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 09:24:21.813 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 09:24:21.809 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 09:24:08.038 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40166 10 6452 1 2025-08-17 09:24:39.793 00:00:10.365 TCP 23.104.0.1:55174 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:25:08.254 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35452 12 10365 1 2025-08-17 09:25:40.196 00:00:10.437 TCP 23.104.0.1:55234 -> 1.101.0.1:3000 15 1926 1 2025-08-17 09:26:08.492 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 10 6452 1 2025-08-17 09:26:40.676 00:00:10.368 TCP 23.104.0.1:41506 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:23:12.507 00:05:00.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 09:27:08.714 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59532 10 6452 1 2025-08-17 09:27:41.109 00:00:10.362 TCP 23.104.0.1:49118 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:28:08.923 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:46768 10 6452 1 2025-08-17 09:28:41.512 00:00:10.332 TCP 23.104.0.1:49376 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:29:21.646 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 09:29:21.801 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 09:29:09.106 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:57990 10 6452 1 2025-08-17 09:29:41.882 00:00:10.331 TCP 23.104.0.1:43614 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:26:12.504 00:05:00.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 09:30:09.314 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:42262 10 6452 1 2025-08-17 09:30:42.257 00:00:10.382 TCP 23.104.0.1:49328 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:31:09.483 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50486 10 6452 1 2025-08-17 09:31:42.689 00:00:10.328 TCP 23.104.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:32:09.708 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43622 10 6452 1 2025-08-17 09:32:43.060 00:00:10.328 TCP 23.104.0.1:55640 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:29:12.507 00:05:00.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 09:33:09.920 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41592 10 6452 1 2025-08-17 09:33:43.426 00:00:10.367 TCP 23.104.0.1:49676 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:34:10.135 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48726 10 6452 1 2025-08-17 09:34:21.957 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 09:34:22.057 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 09:34:43.831 00:00:10.379 TCP 23.104.0.1:46404 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:35:10.312 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 12 10367 1 2025-08-17 09:35:44.245 00:00:10.442 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 15 1926 1 2025-08-17 09:32:12.508 00:05:00.928 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 09:36:10.556 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50754 10 6452 1 2025-08-17 09:36:44.723 00:00:10.373 TCP 23.104.0.1:40560 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:37:10.767 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52058 10 6452 1 2025-08-17 09:37:45.143 00:00:10.374 TCP 23.104.0.1:46178 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:38:10.977 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:35972 10 6452 1 2025-08-17 09:38:45.552 00:00:10.379 TCP 23.104.0.1:48560 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:35:12.509 00:05:00.923 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 09:39:11.216 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37050 10 6452 1 2025-08-17 09:39:22.179 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 09:39:22.186 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 09:39:45.962 00:00:10.366 TCP 23.104.0.1:51846 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:40:11.439 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51564 10 6452 1 2025-08-17 09:40:46.366 00:00:10.377 TCP 23.104.0.1:50948 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:41:11.653 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52168 10 6452 1 2025-08-17 09:41:46.787 00:00:10.363 TCP 23.104.0.1:41936 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:38:12.508 00:05:00.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 09:42:11.828 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44274 10 6452 1 2025-08-17 09:42:47.188 00:00:10.364 TCP 23.104.0.1:59944 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:43:11.997 00:00:10.363 TCP 1.101.0.1:3000 -> 22.102.0.1:38800 10 6452 1 2025-08-17 09:43:47.594 00:00:10.322 TCP 23.104.0.1:35086 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:44:21.878 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 09:44:12.400 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43816 10 6452 1 2025-08-17 09:44:22.029 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 09:44:47.957 00:00:10.372 TCP 23.104.0.1:45032 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:41:12.512 00:05:00.923 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 09:45:12.618 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53438 10 6452 1 2025-08-17 09:45:48.377 00:00:10.365 TCP 23.104.0.1:56670 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:46:12.832 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37852 10 6452 1 2025-08-17 09:46:48.782 00:00:10.368 TCP 23.104.0.1:58522 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:47:13.068 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36078 10 6452 1 2025-08-17 09:47:49.186 00:00:10.364 TCP 23.104.0.1:34532 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:44:12.510 00:05:00.928 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 09:48:13.279 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50184 10 6452 1 2025-08-17 09:48:49.589 00:00:10.365 TCP 23.104.0.1:47344 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:49:21.835 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 09:49:22.298 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 09:49:13.449 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56482 10 6452 1 2025-08-17 09:49:49.993 00:00:10.364 TCP 23.104.0.1:54644 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:50:13.660 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47762 10 6452 1 2025-08-17 09:50:50.399 00:00:10.366 TCP 23.104.0.1:48606 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:47:12.514 00:05:00.923 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 09:51:13.872 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:45510 10 6452 1 2025-08-17 09:51:50.804 00:00:10.364 TCP 23.104.0.1:39402 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:52:14.108 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59472 10 6452 1 2025-08-17 09:52:51.207 00:00:10.360 TCP 23.104.0.1:50572 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:53:14.319 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43100 10 6452 1 2025-08-17 09:53:51.610 00:00:10.363 TCP 23.104.0.1:58390 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:50:12.512 00:05:00.927 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 09:54:14.533 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34004 10 6452 1 2025-08-17 09:54:22.316 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 09:54:22.145 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 09:54:52.013 00:00:10.319 TCP 23.104.0.1:38068 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:55:14.741 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33648 10 6452 1 2025-08-17 09:55:52.371 00:00:10.366 TCP 23.104.0.1:56292 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:56:14.954 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35608 10 6452 1 2025-08-17 09:56:52.773 00:00:10.332 TCP 23.104.0.1:53572 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:53:12.515 00:05:00.922 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 09:57:15.180 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40546 10 6452 1 2025-08-17 09:57:53.138 00:00:10.368 TCP 23.104.0.1:52204 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:58:15.362 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60858 10 6452 1 Summary: total flows: 163, total bytes: 505507, total packets: 1573, avg bps: 1083, avg pps: 0, avg bpp: 321 Time window: 2025-08-17 08:56:12 - 2025-08-17 09:58:25 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0008s Wall: 0.0021s flows/second: 78827.6 Runtime: 0.0021s