Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 01:59:05.185 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34690 10 6452 1 2025-08-28 01:59:30.701 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 01:59:30.732 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 01:59:35.807 00:00:10.368 TCP 23.104.0.1:34674 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:00:05.400 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54350 10 6452 1 2025-08-28 02:00:36.213 00:00:10.365 TCP 23.104.0.1:50150 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:01:05.565 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59446 10 6452 1 2025-08-28 01:56:19.272 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 02:01:36.614 00:00:10.690 TCP 23.104.0.1:52816 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:02:05.779 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47864 10 6452 1 2025-08-28 01:57:19.274 00:06:00.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 02:02:37.345 00:00:10.327 TCP 23.104.0.1:56478 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:03:05.991 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60112 10 6452 1 2025-08-28 02:03:37.707 00:00:10.369 TCP 23.104.0.1:40414 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:04:06.217 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53752 10 6452 1 2025-08-28 02:04:31.301 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 02:04:31.283 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 02:04:38.114 00:00:10.362 TCP 23.104.0.1:45338 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:05:06.436 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:51768 10 6452 1 2025-08-28 02:05:38.512 00:00:10.365 TCP 23.104.0.1:38748 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:06:06.603 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34644 10 6452 1 2025-08-28 02:06:38.914 00:00:10.450 TCP 23.104.0.1:37394 -> 1.101.0.1:3000 15 1926 1 2025-08-28 02:07:06.807 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:33228 12 10367 1 2025-08-28 02:07:39.405 00:00:10.370 TCP 23.104.0.1:44998 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:08:07.076 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38666 10 6452 1 2025-08-28 02:03:19.275 00:06:00.196 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 02:08:39.814 00:00:10.332 TCP 23.104.0.1:41444 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:09:07.285 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41094 10 6452 1 2025-08-28 02:04:19.279 00:06:00.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 02:09:31.025 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 02:09:31.486 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 02:09:40.181 00:00:10.367 TCP 23.104.0.1:37972 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:10:07.502 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44100 10 6452 1 2025-08-28 02:10:40.579 00:00:10.370 TCP 23.104.0.1:51158 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:11:07.717 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54342 10 6452 1 2025-08-28 02:11:40.988 00:00:10.371 TCP 23.104.0.1:34036 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:12:07.932 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:35698 10 6452 1 2025-08-28 02:12:41.393 00:00:10.320 TCP 23.104.0.1:43670 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:13:08.130 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48122 10 6452 1 2025-08-28 02:13:41.752 00:00:10.373 TCP 23.104.0.1:48620 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:14:08.303 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46680 10 6452 1 2025-08-28 02:14:30.736 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 02:14:30.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 02:14:42.164 00:00:10.364 TCP 23.104.0.1:54824 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:15:08.515 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43966 10 6452 1 2025-08-28 02:10:19.275 00:06:00.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 02:15:42.564 00:00:10.358 TCP 23.104.0.1:54498 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:16:08.680 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32940 10 6452 1 2025-08-28 02:11:19.279 00:06:00.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 02:16:42.958 00:00:10.365 TCP 23.104.0.1:45520 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:17:08.896 00:00:12.521 TCP 1.101.0.1:3000 -> 22.102.0.1:45004 10 6452 1 2025-08-28 02:17:43.360 00:00:10.385 TCP 23.104.0.1:36396 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:18:11.469 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59486 10 6452 1 2025-08-28 02:18:43.792 00:00:10.372 TCP 23.104.0.1:59358 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:19:11.682 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35104 10 6452 1 2025-08-28 02:19:30.957 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 02:19:30.964 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 02:19:44.202 00:00:10.364 TCP 23.104.0.1:44522 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:20:11.893 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42368 10 6452 1 2025-08-28 02:20:44.603 00:00:10.371 TCP 23.104.0.1:42290 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:21:12.114 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39066 10 6452 1 2025-08-28 02:21:45.009 00:00:10.361 TCP 23.104.0.1:33070 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:17:19.281 00:06:00.199 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 02:22:12.323 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40326 10 6452 1 2025-08-28 02:22:45.412 00:00:10.367 TCP 23.104.0.1:34032 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:18:19.284 00:06:00.194 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 02:23:12.536 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45806 10 6452 1 2025-08-28 02:23:45.818 00:00:10.360 TCP 23.104.0.1:53774 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:24:12.757 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45066 10 6452 1 2025-08-28 02:24:31.236 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 02:24:31.211 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 02:24:46.217 00:00:10.326 TCP 23.104.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:25:12.982 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37520 10 6452 1 2025-08-28 02:25:46.578 00:00:10.331 TCP 23.104.0.1:38822 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:26:13.227 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51624 10 6452 1 2025-08-28 02:26:46.950 00:00:10.326 TCP 23.104.0.1:49682 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:27:13.444 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51654 10 6452 1 2025-08-28 02:27:47.313 00:00:10.371 TCP 23.104.0.1:37262 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:28:13.665 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52772 10 6452 1 2025-08-28 02:28:47.723 00:00:10.368 TCP 23.104.0.1:44060 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:24:19.284 00:06:00.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 02:29:13.886 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57028 10 6452 1 2025-08-28 02:29:31.329 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 02:29:31.110 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 02:29:48.127 00:00:10.367 TCP 23.104.0.1:57984 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:25:19.286 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 02:30:14.113 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49570 10 6452 1 2025-08-28 02:30:48.533 00:00:10.325 TCP 23.104.0.1:37046 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:31:14.333 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43326 10 6452 1 2025-08-28 02:31:48.896 00:00:10.324 TCP 23.104.0.1:54002 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:32:14.559 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53844 10 6452 1 2025-08-28 02:32:49.261 00:00:10.329 TCP 23.104.0.1:46968 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:33:14.775 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45546 10 6452 1 2025-08-28 02:33:49.627 00:00:10.364 TCP 23.104.0.1:49722 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:34:15.040 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55310 10 6452 1 2025-08-28 02:34:31.072 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 02:34:31.379 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 02:34:50.030 00:00:10.361 TCP 23.104.0.1:43118 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:35:15.223 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37700 10 6452 1 2025-08-28 02:35:50.430 00:00:10.363 TCP 23.104.0.1:59844 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:31:19.293 00:06:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 02:36:15.443 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55364 10 6452 1 2025-08-28 02:36:50.835 00:00:10.390 TCP 23.104.0.1:50774 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:32:19.295 00:06:00.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 02:37:15.658 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40174 10 6452 1 2025-08-28 02:37:51.263 00:00:10.368 TCP 23.104.0.1:51494 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:38:15.843 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43692 10 6452 1 2025-08-28 02:38:51.670 00:00:10.460 TCP 23.104.0.1:34028 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:39:16.087 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:44204 10 6452 1 2025-08-28 02:39:32.220 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 02:39:32.642 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 02:39:52.170 00:00:10.366 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:40:16.347 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44788 10 6452 1 2025-08-28 02:40:52.575 00:00:10.373 TCP 23.104.0.1:34702 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:41:16.561 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:58262 10 6452 1 2025-08-28 02:41:52.985 00:00:10.362 TCP 23.104.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:42:16.740 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 10 6452 1 2025-08-28 02:42:53.387 00:00:10.324 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:38:19.295 00:06:00.200 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 02:43:16.913 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44712 10 6452 1 2025-08-28 02:43:53.750 00:00:10.378 TCP 23.104.0.1:54876 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:39:19.298 00:06:00.194 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 02:44:31.746 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 02:44:17.134 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50144 10 6452 1 2025-08-28 02:44:31.631 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 02:44:54.167 00:00:10.366 TCP 23.104.0.1:59862 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:45:17.344 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45884 10 6452 1 2025-08-28 02:45:54.572 00:00:10.325 TCP 23.104.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:46:17.516 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37658 10 6452 1 2025-08-28 02:46:54.935 00:00:10.381 TCP 23.104.0.1:55660 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:47:17.694 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54376 10 6452 1 2025-08-28 02:47:55.354 00:00:10.369 TCP 23.104.0.1:54460 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:48:17.904 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50138 10 6452 1 2025-08-28 02:48:55.768 00:00:10.366 TCP 23.104.0.1:36986 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:49:31.609 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 02:49:18.118 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44098 10 6452 1 2025-08-28 02:49:31.432 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 02:49:56.176 00:00:10.662 TCP 23.104.0.1:36748 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:45:19.298 00:06:00.199 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 02:50:18.296 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39020 10 6452 1 2025-08-28 02:50:56.880 00:00:10.365 TCP 23.104.0.1:54260 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:46:19.310 00:06:00.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 02:51:18.507 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:50848 10 6452 1 2025-08-28 02:51:57.284 00:00:10.365 TCP 23.104.0.1:39658 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:52:18.673 00:00:23.241 TCP 1.101.0.1:3000 -> 22.102.0.1:50076 10 6452 1 2025-08-28 02:52:57.681 00:00:10.426 TCP 23.104.0.1:52880 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:53:31.953 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58060 10 6452 1 2025-08-28 02:53:58.146 00:00:10.366 TCP 23.104.0.1:54660 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:54:31.712 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 02:54:31.927 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 02:54:32.181 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60502 10 6452 1 2025-08-28 02:54:58.550 00:00:10.365 TCP 23.104.0.1:41480 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:55:32.399 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39802 10 6452 1 2025-08-28 02:55:58.956 00:00:10.363 TCP 23.104.0.1:43196 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:56:32.614 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52024 10 6452 1 2025-08-28 02:56:59.355 00:00:10.368 TCP 23.104.0.1:35218 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:52:19.317 00:06:00.182 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 02:57:32.818 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51814 10 6452 1 2025-08-28 02:57:59.767 00:00:10.366 TCP 23.104.0.1:44250 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:53:19.319 00:06:00.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 02:58:33.037 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45242 10 6452 1 Summary: total flows: 161, total bytes: 501913, total packets: 1579, avg bps: 1062, avg pps: 0, avg bpp: 317 Time window: 2025-08-28 01:56:19 - 2025-08-28 02:59:19 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0035s User: 0.0012s Wall: 0.0022s flows/second: 72455.3 Runtime: 0.0022s