Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 03:58:55.079 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44658 10 6452 1 2025-08-20 03:55:13.786 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 03:59:30.262 00:00:10.324 TCP 23.104.0.1:55642 -> 1.101.0.1:3000 11 1507 1 2025-08-20 03:59:55.293 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39276 10 6452 1 2025-08-20 03:56:13.789 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 04:00:41.877 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 04:00:30.625 00:00:10.326 TCP 23.104.0.1:35342 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:00:41.663 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 04:00:55.510 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57826 10 6452 1 2025-08-20 04:01:30.987 00:00:10.369 TCP 23.104.0.1:58758 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:01:55.728 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43882 10 6452 1 2025-08-20 04:02:31.390 00:00:10.325 TCP 23.104.0.1:37486 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:02:55.938 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:49890 10 6452 1 2025-08-20 04:03:31.750 00:00:10.398 TCP 23.104.0.1:53954 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:03:56.173 00:00:10.318 TCP 1.101.0.1:3000 -> 22.102.0.1:51638 10 6452 1 2025-08-20 04:04:32.171 00:00:10.666 TCP 23.104.0.1:34364 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:04:56.531 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53714 10 6452 1 2025-08-20 04:01:13.788 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 04:05:41.967 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 04:05:41.904 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 04:05:32.876 00:00:10.364 TCP 23.104.0.1:57482 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:05:56.744 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57464 10 6452 1 2025-08-20 04:02:13.790 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 04:06:33.276 00:00:10.361 TCP 23.104.0.1:38054 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:06:56.959 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49424 10 6452 1 2025-08-20 04:07:33.679 00:00:10.319 TCP 23.104.0.1:55470 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:07:57.177 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51520 10 6452 1 2025-08-20 04:08:34.055 00:00:10.364 TCP 23.104.0.1:38096 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:08:57.349 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57834 10 6452 1 2025-08-20 04:09:34.458 00:00:10.321 TCP 23.104.0.1:51284 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:09:57.564 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51984 10 6452 1 2025-08-20 04:10:42.015 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 04:10:34.821 00:00:10.363 TCP 23.104.0.1:42206 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:10:41.987 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 04:10:57.747 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47954 10 6452 1 2025-08-20 04:07:13.790 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 04:11:35.221 00:00:10.326 TCP 23.104.0.1:34674 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:11:57.963 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57902 12 6556 1 2025-08-20 04:08:13.794 00:05:00.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 04:12:35.588 00:00:10.365 TCP 23.104.0.1:58042 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:12:58.206 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33220 10 6452 1 2025-08-20 04:13:35.998 00:00:10.363 TCP 23.104.0.1:39580 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:13:58.381 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57988 10 6452 1 2025-08-20 04:14:36.397 00:00:10.328 TCP 23.104.0.1:58086 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:14:58.600 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38188 10 6452 1 2025-08-20 04:15:42.081 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 04:15:42.035 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 04:15:36.763 00:00:10.379 TCP 23.104.0.1:46662 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:15:58.812 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55412 10 6452 1 2025-08-20 04:16:37.179 00:00:10.367 TCP 23.104.0.1:59138 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:16:59.066 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35510 10 6452 1 2025-08-20 04:13:13.793 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 04:17:37.582 00:00:10.364 TCP 23.104.0.1:38036 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:17:59.279 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37482 10 6452 1 2025-08-20 04:14:13.797 00:05:00.958 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 04:18:37.980 00:00:10.371 TCP 23.104.0.1:43630 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:18:59.498 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56318 10 6452 1 2025-08-20 04:19:38.389 00:00:10.368 TCP 23.104.0.1:50112 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:19:59.712 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51874 10 6452 1 2025-08-20 04:20:42.448 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 04:20:42.447 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 04:20:38.796 00:00:10.584 TCP 23.104.0.1:38874 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:20:59.924 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44096 10 6452 1 2025-08-20 04:21:39.423 00:00:10.367 TCP 23.104.0.1:42406 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:22:00.135 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6452 1 2025-08-20 04:22:39.824 00:00:10.395 TCP 23.104.0.1:60246 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:23:00.345 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57554 10 6452 1 2025-08-20 04:19:13.795 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 04:23:40.255 00:00:10.362 TCP 23.104.0.1:33158 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:24:00.559 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41754 10 6452 1 2025-08-20 04:20:13.797 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 04:24:40.652 00:00:10.367 TCP 23.104.0.1:43070 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:25:00.772 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39432 10 6452 1 2025-08-20 04:25:42.333 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 04:25:42.301 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 04:25:41.084 00:00:10.365 TCP 23.104.0.1:45106 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:26:00.985 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49966 10 6452 1 2025-08-20 04:26:41.492 00:00:10.366 TCP 23.104.0.1:48314 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:27:01.215 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36856 10 6452 1 2025-08-20 04:27:41.892 00:00:10.368 TCP 23.104.0.1:51986 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:28:01.391 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43970 10 6452 1 2025-08-20 04:28:42.298 00:00:10.336 TCP 23.104.0.1:37580 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:29:01.609 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47480 10 6452 1 2025-08-20 04:25:13.795 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 04:29:42.663 00:00:10.372 TCP 23.104.0.1:45884 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:30:01.821 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55664 10 6452 1 2025-08-20 04:26:13.797 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 04:30:42.387 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 04:30:42.503 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 04:30:43.106 00:00:10.363 TCP 23.104.0.1:35358 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:31:01.994 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38466 10 6452 1 2025-08-20 04:31:43.518 00:00:10.332 TCP 23.104.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:32:02.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38926 10 6452 1 2025-08-20 04:32:43.888 00:00:10.381 TCP 23.104.0.1:60800 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:33:02.430 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33316 10 6452 1 2025-08-20 04:33:44.310 00:00:10.367 TCP 23.104.0.1:39136 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:34:02.649 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:44868 10 6452 1 2025-08-20 04:34:44.715 00:00:10.377 TCP 23.104.0.1:58700 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:35:02.890 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58472 10 6452 1 2025-08-20 04:31:13.797 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 04:35:42.514 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 04:35:42.738 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 04:35:45.130 00:00:10.361 TCP 23.104.0.1:49940 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:32:13.800 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 04:36:03.115 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42102 10 6452 1 2025-08-20 04:36:45.537 00:00:10.329 TCP 23.104.0.1:57214 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:37:03.328 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53622 10 6452 1 2025-08-20 04:37:45.899 00:00:10.363 TCP 23.104.0.1:35694 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:38:03.546 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39054 10 6452 1 2025-08-20 04:38:46.308 00:00:10.359 TCP 23.104.0.1:50292 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:39:03.755 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48786 10 6452 1 2025-08-20 04:39:46.703 00:00:10.393 TCP 23.104.0.1:32848 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:40:03.973 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:38256 10 6452 1 2025-08-20 04:40:43.153 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 04:40:43.067 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 04:40:47.111 00:00:10.369 TCP 23.104.0.1:52836 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:41:04.174 00:00:10.124 TCP 1.101.0.1:3000 -> 22.102.0.1:55500 10 6452 1 2025-08-20 04:37:13.798 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 04:41:47.518 00:00:10.364 TCP 23.104.0.1:56510 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:42:04.334 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49922 10 6452 1 2025-08-20 04:38:13.802 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 04:42:47.922 00:00:10.580 TCP 23.104.0.1:44380 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:43:04.540 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52672 10 6452 1 2025-08-20 04:43:48.559 00:00:10.362 TCP 23.104.0.1:37388 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:44:04.755 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58002 10 6452 1 2025-08-20 04:44:48.960 00:00:10.341 TCP 23.104.0.1:53554 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:45:04.967 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:44070 10 6452 1 2025-08-20 04:45:42.769 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 04:45:42.614 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 04:45:49.377 00:00:10.369 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:46:05.216 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51602 10 6452 1 2025-08-20 04:46:49.787 00:00:10.378 TCP 23.104.0.1:38354 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:43:13.800 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 04:47:05.395 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52488 10 6452 1 2025-08-20 04:47:50.218 00:00:10.364 TCP 23.104.0.1:38166 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:48:05.565 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39106 10 6452 1 2025-08-20 04:44:13.803 00:05:00.958 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 04:48:50.627 00:00:10.360 TCP 23.104.0.1:40856 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:49:05.774 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54302 10 6452 1 2025-08-20 04:49:51.026 00:00:10.368 TCP 23.104.0.1:40626 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:50:05.948 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40640 10 6452 1 2025-08-20 04:50:42.953 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 04:50:42.697 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 04:50:51.435 00:00:10.367 TCP 23.104.0.1:58316 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:51:06.178 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52390 10 6452 1 2025-08-20 04:51:51.840 00:00:10.387 TCP 23.104.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:52:06.392 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38074 10 6452 1 2025-08-20 04:52:52.266 00:00:10.368 TCP 23.104.0.1:54946 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:49:13.801 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 04:53:06.613 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49548 10 6452 1 2025-08-20 04:53:52.672 00:00:10.373 TCP 23.104.0.1:60842 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:54:06.824 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51610 10 6452 1 2025-08-20 04:50:13.804 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 04:54:53.107 00:00:10.361 TCP 23.104.0.1:33522 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:55:07.003 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53232 10 6452 1 2025-08-20 04:55:42.748 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 04:55:42.955 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 04:55:53.503 00:00:10.370 TCP 23.104.0.1:45500 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:56:07.221 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38742 10 6452 1 2025-08-20 04:56:53.908 00:00:10.367 TCP 23.104.0.1:32834 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:57:07.441 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38902 10 6452 1 2025-08-20 04:57:54.311 00:00:10.327 TCP 23.104.0.1:40054 -> 1.101.0.1:3000 11 1507 1 2025-08-20 04:58:07.653 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39570 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1050, avg pps: 0, avg bpp: 317 Time window: 2025-08-20 03:55:13 - 2025-08-20 04:58:17 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0023s User: 0.0023s Wall: 0.0022s flows/second: 74360.6 Runtime: 0.0022s