Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 08:58:59.431 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42728 10 6452 1 2025-08-20 08:55:13.870 00:05:00.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 08:59:32.550 00:00:10.364 TCP 23.104.0.1:48322 -> 1.101.0.1:3000 11 1507 1 2025-08-20 08:59:59.656 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42562 10 6452 1 2025-08-20 08:56:13.871 00:05:00.969 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 09:00:32.954 00:00:10.361 TCP 23.104.0.1:54088 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:00:47.900 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 09:00:47.894 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 09:00:59.883 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37610 10 6452 1 2025-08-20 09:01:33.359 00:00:10.364 TCP 23.104.0.1:47850 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:02:00.111 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-08-20 09:02:33.772 00:00:10.370 TCP 23.104.0.1:35198 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:03:00.325 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55756 10 6452 1 2025-08-20 09:03:34.183 00:00:10.372 TCP 23.104.0.1:37024 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:04:00.552 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57148 10 6452 1 2025-08-20 09:04:34.591 00:00:10.363 TCP 23.104.0.1:49332 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:05:00.767 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39298 10 6452 1 2025-08-20 09:01:13.871 00:05:00.977 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 09:05:34.994 00:00:10.366 TCP 23.104.0.1:42634 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:05:48.109 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 09:05:47.881 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 09:06:00.941 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6452 1 2025-08-20 09:02:13.874 00:05:00.972 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 09:06:35.398 00:00:10.336 TCP 23.104.0.1:49786 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:07:01.189 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50324 10 6452 1 2025-08-20 09:07:35.774 00:00:10.368 TCP 23.104.0.1:51160 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:08:01.413 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:40036 10 6452 1 2025-08-20 09:08:36.184 00:00:10.365 TCP 23.104.0.1:40878 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:09:01.597 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45450 10 6452 1 2025-08-20 09:09:36.586 00:00:10.361 TCP 23.104.0.1:35948 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:10:01.810 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56304 10 6452 1 2025-08-20 09:10:36.988 00:00:10.321 TCP 23.104.0.1:49476 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:10:48.055 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 09:10:48.183 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 09:11:02.034 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52646 10 6452 1 2025-08-20 09:07:13.877 00:05:00.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 09:11:37.351 00:00:10.364 TCP 23.104.0.1:44228 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:08:13.880 00:05:00.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 09:12:02.242 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33366 10 6452 1 2025-08-20 09:12:37.753 00:00:10.326 TCP 23.104.0.1:42442 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:13:02.422 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50008 10 6452 1 2025-08-20 09:13:38.140 00:00:10.368 TCP 23.104.0.1:43652 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:14:02.634 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35778 10 6452 1 2025-08-20 09:14:38.542 00:00:10.326 TCP 23.104.0.1:37246 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:15:02.813 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:49950 10 6452 1 2025-08-20 09:15:48.332 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 09:15:48.090 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 09:15:38.903 00:00:10.366 TCP 23.104.0.1:34858 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:16:02.972 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36512 10 6452 1 2025-08-20 09:16:39.309 00:00:10.367 TCP 23.104.0.1:60420 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:17:03.155 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51624 10 6452 1 2025-08-20 09:13:13.878 00:05:00.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 09:17:39.715 00:00:10.378 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:18:03.376 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59948 10 6452 1 2025-08-20 09:14:13.879 00:05:00.969 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 09:18:40.131 00:00:10.365 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:19:03.546 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34446 10 6452 1 2025-08-20 09:19:40.536 00:00:10.361 TCP 23.104.0.1:45890 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:20:03.763 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34748 10 6452 1 2025-08-20 09:20:48.295 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 09:20:40.940 00:00:10.374 TCP 23.104.0.1:33346 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:20:48.297 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 09:21:03.975 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:45820 10 6452 1 2025-08-20 09:21:41.352 00:00:10.370 TCP 23.104.0.1:53808 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:22:04.208 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57788 10 6452 1 2025-08-20 09:22:41.757 00:00:10.382 TCP 23.104.0.1:42416 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:23:04.384 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37938 10 6452 1 2025-08-20 09:19:13.883 00:05:00.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 09:23:42.176 00:00:10.370 TCP 23.104.0.1:57848 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:24:04.599 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46014 10 6452 1 2025-08-20 09:20:13.885 00:05:00.966 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 09:24:42.585 00:00:10.365 TCP 23.104.0.1:52504 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:25:04.809 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60964 10 6452 1 2025-08-20 09:25:48.328 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 09:25:48.503 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 09:25:42.991 00:00:10.363 TCP 23.104.0.1:50188 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:26:05.039 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60290 10 6452 1 2025-08-20 09:26:43.390 00:00:10.368 TCP 23.104.0.1:37010 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:27:05.253 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49786 10 6452 1 2025-08-20 09:27:43.800 00:00:10.366 TCP 23.104.0.1:40420 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:28:05.481 00:00:10.445 TCP 1.101.0.1:3000 -> 22.102.0.1:34244 10 6452 1 2025-08-20 09:28:44.226 00:00:10.365 TCP 23.104.0.1:38060 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:29:05.963 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39344 10 6452 1 2025-08-20 09:25:13.885 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 09:29:44.629 00:00:10.332 TCP 23.104.0.1:37112 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:26:13.887 00:05:00.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 09:30:06.181 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37080 10 6452 1 2025-08-20 09:30:48.741 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 09:30:48.373 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 09:30:44.994 00:00:10.370 TCP 23.104.0.1:47540 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:31:06.391 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47898 10 6452 1 2025-08-20 09:31:45.401 00:00:10.364 TCP 23.104.0.1:58220 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:32:06.564 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34350 10 6452 1 2025-08-20 09:32:45.810 00:00:10.366 TCP 23.104.0.1:58762 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:33:06.774 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35688 10 6452 1 2025-08-20 09:33:46.218 00:00:10.382 TCP 23.104.0.1:42288 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:34:06.989 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34150 10 6452 1 2025-08-20 09:34:46.639 00:00:10.367 TCP 23.104.0.1:38412 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:31:13.886 00:05:00.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 09:35:07.218 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44318 10 6452 1 2025-08-20 09:35:48.698 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 09:35:48.709 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 09:35:47.063 00:00:10.362 TCP 23.104.0.1:40118 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:32:13.888 00:05:00.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 09:36:07.392 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50880 10 6452 1 2025-08-20 09:36:47.458 00:00:10.368 TCP 23.104.0.1:47282 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:37:07.606 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51120 10 6452 1 2025-08-20 09:37:47.868 00:00:10.369 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:38:07.822 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38374 10 6452 1 2025-08-20 09:38:48.281 00:00:10.362 TCP 23.104.0.1:35248 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:39:08.058 00:00:10.503 TCP 1.101.0.1:3000 -> 22.102.0.1:60096 10 6452 1 2025-08-20 09:39:48.685 00:00:10.342 TCP 23.104.0.1:37450 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:40:08.600 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:48482 10 6452 1 2025-08-20 09:40:48.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 09:40:48.684 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 09:40:49.056 00:00:10.328 TCP 23.104.0.1:52712 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:37:13.886 00:05:00.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 09:41:08.767 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55588 10 6452 1 2025-08-20 09:41:49.424 00:00:10.363 TCP 23.104.0.1:60712 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:38:13.889 00:05:00.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 09:42:08.941 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39032 10 6452 1 2025-08-20 09:42:49.824 00:00:10.363 TCP 23.104.0.1:58822 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:43:09.179 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54998 10 6452 1 2025-08-20 09:43:50.226 00:00:10.367 TCP 23.104.0.1:57250 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:44:09.391 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37582 10 6452 1 2025-08-20 09:44:50.633 00:00:10.366 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:45:09.606 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56632 10 6452 1 2025-08-20 09:45:48.959 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 09:45:48.936 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 09:45:51.032 00:00:10.372 TCP 23.104.0.1:33010 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:46:09.818 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:32958 10 6452 1 2025-08-20 09:46:51.441 00:00:10.367 TCP 23.104.0.1:54020 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:43:13.886 00:05:00.972 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 09:47:09.998 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40956 10 6452 1 2025-08-20 09:47:51.848 00:00:10.377 TCP 23.104.0.1:40434 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:44:13.889 00:05:00.966 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 09:48:10.220 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53240 10 6452 1 2025-08-20 09:48:52.262 00:00:10.374 TCP 23.104.0.1:45550 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:49:10.397 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59278 10 6452 1 2025-08-20 09:49:52.678 00:00:10.382 TCP 23.104.0.1:51358 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:50:10.612 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50216 10 6452 1 2025-08-20 09:50:48.884 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 09:50:48.758 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 09:50:53.107 00:00:10.369 TCP 23.104.0.1:42182 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:51:10.783 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42270 10 6452 1 2025-08-20 09:51:53.511 00:00:11.056 TCP 23.104.0.1:41564 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:52:10.994 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44464 10 6452 1 2025-08-20 09:52:54.605 00:00:10.364 TCP 23.104.0.1:54492 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:49:13.887 00:05:00.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 09:53:11.216 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46800 10 6452 1 2025-08-20 09:53:55.010 00:00:10.716 TCP 23.104.0.1:50520 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:50:13.890 00:05:00.966 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 09:54:11.432 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51210 10 6452 1 2025-08-20 09:54:55.771 00:00:10.473 TCP 23.104.0.1:58470 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:55:11.606 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55806 10 6452 1 2025-08-20 09:55:48.744 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 09:55:49.028 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 09:55:56.285 00:00:10.369 TCP 23.104.0.1:59372 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:56:11.819 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44314 10 6452 1 2025-08-20 09:56:56.696 00:00:10.325 TCP 23.104.0.1:56814 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:57:12.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35970 10 6452 1 2025-08-20 09:57:57.092 00:00:10.365 TCP 23.104.0.1:37770 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:58:12.253 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42828 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1049, avg pps: 0, avg bpp: 318 Time window: 2025-08-20 08:55:13 - 2025-08-20 09:58:22 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0010s Wall: 0.0022s flows/second: 75427.1 Runtime: 0.0022s