Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-29 14:59:06.346 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48098 10 6452 1 2025-08-29 14:59:04.258 00:00:10.370 TCP 23.104.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:00:06.565 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44488 10 6452 1 2025-08-29 15:00:15.423 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 15:00:15.370 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 15:00:04.662 00:00:10.361 TCP 23.104.0.1:52720 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:55:20.515 00:06:00.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 15:01:05.088 00:00:10.328 TCP 23.104.0.1:44764 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:01:06.789 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45214 10 6452 1 2025-08-29 15:02:05.461 00:00:10.396 TCP 23.104.0.1:54968 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:02:07.012 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37480 10 6452 1 2025-08-29 15:03:05.867 00:00:10.320 TCP 23.104.0.1:45528 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:03:07.234 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41734 10 6452 1 2025-08-29 15:04:06.233 00:00:10.369 TCP 23.104.0.1:36858 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:04:07.460 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48572 10 6452 1 2025-08-29 15:05:15.351 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 15:05:06.636 00:00:10.332 TCP 23.104.0.1:56298 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:05:15.520 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 15:00:20.518 00:06:00.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 15:05:07.681 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50244 10 6452 1 2025-08-29 15:06:07.907 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33724 10 6452 1 2025-08-29 15:06:07.000 00:00:10.370 TCP 23.104.0.1:44722 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:07:07.405 00:00:10.371 TCP 23.104.0.1:59210 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:07:08.133 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:34580 10 6452 1 2025-08-29 15:02:20.517 00:06:00.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 15:08:07.811 00:00:10.372 TCP 23.104.0.1:39116 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:08:08.359 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38846 10 6452 1 2025-08-29 15:09:08.575 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42546 10 6452 1 2025-08-29 15:09:08.219 00:00:10.318 TCP 23.104.0.1:41512 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:10:15.578 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 15:10:08.798 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52268 10 6452 1 2025-08-29 15:10:15.592 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 15:10:08.579 00:00:10.365 TCP 23.104.0.1:53418 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:11:08.985 00:00:10.325 TCP 23.104.0.1:55566 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:11:08.975 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38950 10 6452 1 2025-08-29 15:07:20.521 00:06:00.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 15:12:09.351 00:00:10.368 TCP 23.104.0.1:45856 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:12:09.208 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55252 10 6452 1 2025-08-29 15:13:09.758 00:00:10.379 TCP 23.104.0.1:50238 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:13:09.382 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53548 10 6452 1 2025-08-29 15:14:10.174 00:00:10.366 TCP 23.104.0.1:41486 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:14:09.592 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35864 10 6452 1 2025-08-29 15:09:20.519 00:06:00.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 15:15:15.709 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 15:15:15.717 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 15:15:10.580 00:00:10.365 TCP 23.104.0.1:58218 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:15:09.771 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50836 10 6452 1 2025-08-29 15:16:10.979 00:00:10.322 TCP 23.104.0.1:55162 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:16:09.988 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36050 10 6452 1 2025-08-29 15:17:10.213 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51626 10 6452 1 2025-08-29 15:17:11.340 00:00:10.333 TCP 23.104.0.1:51104 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:18:10.392 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50212 10 6452 1 2025-08-29 15:18:11.713 00:00:10.362 TCP 23.104.0.1:57818 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:19:10.604 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:35338 10 6452 1 2025-08-29 15:14:20.523 00:06:00.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 15:19:12.117 00:00:10.375 TCP 23.104.0.1:47084 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:20:15.901 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 15:20:15.941 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 15:20:10.777 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58564 10 6452 1 2025-08-29 15:20:12.531 00:00:10.369 TCP 23.104.0.1:60512 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:21:11.000 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45786 10 6452 1 2025-08-29 15:16:20.521 00:06:00.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 15:21:12.938 00:00:10.376 TCP 23.104.0.1:46210 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:22:11.226 00:00:10.667 TCP 1.101.0.1:3000 -> 22.102.0.1:53208 10 6452 1 2025-08-29 15:22:13.355 00:00:10.325 TCP 23.104.0.1:58792 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:23:11.936 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:57142 10 6452 1 2025-08-29 15:23:13.719 00:00:10.375 TCP 23.104.0.1:43662 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:24:14.134 00:00:10.368 TCP 23.104.0.1:40706 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:24:12.168 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52774 10 6452 1 2025-08-29 15:25:15.909 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 15:25:15.850 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 15:25:12.380 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53040 10 6452 1 2025-08-29 15:25:14.542 00:00:10.369 TCP 23.104.0.1:38712 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:21:20.531 00:06:00.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 15:26:14.949 00:00:10.366 TCP 23.104.0.1:49072 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:26:12.603 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49260 10 6452 1 2025-08-29 15:27:12.778 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40684 10 6452 1 2025-08-29 15:27:15.353 00:00:10.359 TCP 23.104.0.1:56448 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:28:15.749 00:00:10.393 TCP 23.104.0.1:44876 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:23:20.525 00:06:00.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 15:28:12.995 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51886 10 6452 1 2025-08-29 15:29:16.183 00:00:10.365 TCP 23.104.0.1:44708 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:29:13.232 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42784 10 6452 1 2025-08-29 15:30:15.656 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 15:30:15.680 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 15:30:16.584 00:00:10.362 TCP 23.104.0.1:37446 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:30:13.405 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33322 10 6452 1 2025-08-29 15:31:13.623 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36792 10 6452 1 2025-08-29 15:31:16.987 00:00:10.331 TCP 23.104.0.1:45312 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:32:13.832 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53608 10 6452 1 2025-08-29 15:32:17.351 00:00:10.371 TCP 23.104.0.1:49536 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:28:20.531 00:06:00.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 15:33:14.027 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53544 10 6452 1 2025-08-29 15:33:17.760 00:00:10.392 TCP 23.104.0.1:34964 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:34:14.239 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58976 10 6452 1 2025-08-29 15:34:18.178 00:00:10.370 TCP 23.104.0.1:54594 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:35:15.801 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 15:35:15.924 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 15:30:20.528 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 15:35:14.454 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47590 10 6452 1 2025-08-29 15:35:18.580 00:00:10.369 TCP 23.104.0.1:36836 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:36:14.668 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46238 10 6452 1 2025-08-29 15:36:18.989 00:00:10.367 TCP 23.104.0.1:46174 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:37:14.873 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43826 12 10367 1 2025-08-29 15:37:19.402 00:00:10.438 TCP 23.104.0.1:47210 -> 1.101.0.1:3000 15 1926 1 2025-08-29 15:38:15.088 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35714 10 6452 1 2025-08-29 15:38:19.881 00:00:10.389 TCP 23.104.0.1:58978 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:39:15.310 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40310 10 6452 1 2025-08-29 15:39:20.312 00:00:10.321 TCP 23.104.0.1:38768 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:40:16.159 00:00:00.009 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 15:40:16.213 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 15:35:20.534 00:06:00.153 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 15:40:15.529 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47792 10 6452 1 2025-08-29 15:40:20.678 00:00:10.368 TCP 23.104.0.1:47294 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:41:15.752 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41466 10 6452 1 2025-08-29 15:41:21.107 00:00:10.366 TCP 23.104.0.1:40602 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:37:20.554 00:06:00.137 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 15:42:15.969 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:46884 10 6452 1 2025-08-29 15:42:21.511 00:00:10.325 TCP 23.104.0.1:42402 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:43:16.220 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53378 10 6452 1 2025-08-29 15:43:21.876 00:00:10.381 TCP 23.104.0.1:43872 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:44:16.447 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52588 10 6452 1 2025-08-29 15:44:22.296 00:00:10.371 TCP 23.104.0.1:55716 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:45:16.337 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 15:45:16.160 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 15:45:16.683 00:00:10.537 TCP 1.101.0.1:3000 -> 22.102.0.1:37396 10 6452 1 2025-08-29 15:45:22.702 00:00:10.368 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:46:17.277 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39698 10 6452 1 2025-08-29 15:46:23.109 00:00:10.368 TCP 23.104.0.1:49114 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:42:20.547 00:06:00.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 15:47:17.447 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41076 10 6452 1 2025-08-29 15:47:23.516 00:00:10.363 TCP 23.104.0.1:54320 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:48:17.677 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:51902 10 6452 1 2025-08-29 15:48:23.915 00:00:10.377 TCP 23.104.0.1:42246 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:44:20.542 00:06:00.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 15:49:17.867 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36494 10 6452 1 2025-08-29 15:49:24.331 00:00:10.363 TCP 23.104.0.1:37254 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:50:15.996 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 15:50:16.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 15:50:18.088 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46412 10 6452 1 2025-08-29 15:50:24.744 00:00:10.365 TCP 23.104.0.1:43238 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:51:18.258 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46930 10 6452 1 2025-08-29 15:51:25.148 00:00:10.357 TCP 23.104.0.1:49478 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:52:18.472 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37982 10 6452 1 2025-08-29 15:52:25.545 00:00:10.372 TCP 23.104.0.1:37670 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:53:18.643 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33796 10 6452 1 2025-08-29 15:53:25.958 00:00:10.371 TCP 23.104.0.1:60440 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:49:20.544 00:06:00.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 15:54:18.852 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47038 10 6452 1 2025-08-29 15:54:26.367 00:00:10.326 TCP 23.104.0.1:34324 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:55:16.387 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 15:55:16.136 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 15:55:19.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36860 10 6452 1 2025-08-29 15:55:26.731 00:00:10.371 TCP 23.104.0.1:46344 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:51:20.541 00:06:00.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 15:56:19.298 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57890 10 6452 1 2025-08-29 15:56:27.137 00:00:10.327 TCP 23.104.0.1:49392 -> 1.101.0.1:3000 11 1507 1 2025-08-29 15:57:19.513 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:44086 13 10407 1 2025-08-29 15:57:27.496 00:00:10.444 TCP 23.104.0.1:42358 -> 1.101.0.1:3000 15 1926 1 2025-08-29 15:58:19.770 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34062 10 6452 1 2025-08-29 15:58:27.981 00:00:10.377 TCP 23.104.0.1:43300 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 506933, total packets: 1583, avg bps: 1067, avg pps: 0, avg bpp: 320 Time window: 2025-08-29 14:55:20 - 2025-08-29 15:58:38 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0036s User: 0.0009s Wall: 0.0026s flows/second: 62335.7 Runtime: 0.0026s