Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-24 17:59:00.007 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48920 10 6438 1 2025-07-24 17:58:57.351 00:00:10.322 TCP 23.104.0.1:45292 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:00:00.228 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40148 10 6438 1 2025-07-24 17:59:57.720 00:00:10.324 TCP 23.104.0.1:45104 -> 1.101.0.1:3000 11 1507 1 2025-07-24 17:56:00.491 00:06:00.178 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 18:01:00.474 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 10 6438 1 2025-07-24 18:00:58.110 00:00:10.363 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:01:58.511 00:00:10.362 TCP 23.104.0.1:38376 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:02:00.692 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53904 10 6438 1 2025-07-24 18:02:58.622 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 18:02:58.548 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 17:58:00.488 00:06:00.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 18:02:58.912 00:00:10.336 TCP 23.104.0.1:39504 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:03:00.905 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37218 10 6438 1 2025-07-24 18:04:01.125 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36920 10 6438 1 2025-07-24 18:03:59.296 00:00:10.361 TCP 23.104.0.1:48304 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:05:01.338 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:42380 10 6438 1 2025-07-24 18:04:59.695 00:00:10.365 TCP 23.104.0.1:55796 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:06:01.507 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33034 10 6438 1 2025-07-24 18:06:00.110 00:00:10.364 TCP 23.104.0.1:43148 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:07:01.724 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35768 10 6438 1 2025-07-24 18:07:00.514 00:00:10.369 TCP 23.104.0.1:35256 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:07:58.971 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 18:07:58.993 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 18:03:00.491 00:06:00.177 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 18:08:00.917 00:00:10.370 TCP 23.104.0.1:47298 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:08:01.892 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40858 10 6438 1 2025-07-24 18:09:01.328 00:00:10.365 TCP 23.104.0.1:44316 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:09:02.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6438 1 2025-07-24 18:05:00.488 00:06:00.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 18:10:02.325 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46254 10 6438 1 2025-07-24 18:10:01.734 00:00:10.365 TCP 23.104.0.1:52220 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:11:02.532 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33550 10 6438 1 2025-07-24 18:11:02.138 00:00:10.362 TCP 23.104.0.1:44048 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:12:02.541 00:00:10.363 TCP 23.104.0.1:42634 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:12:02.741 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54090 10 6438 1 2025-07-24 18:12:59.087 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 18:12:59.110 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 18:13:02.949 00:00:10.368 TCP 23.104.0.1:34048 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:13:02.915 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57886 10 6438 1 2025-07-24 18:14:03.358 00:00:10.422 TCP 23.104.0.1:53290 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:14:03.097 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35122 10 6438 1 2025-07-24 18:10:00.492 00:06:00.177 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 18:15:03.817 00:00:10.332 TCP 23.104.0.1:57998 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:15:03.318 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6438 1 2025-07-24 18:16:03.534 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50938 10 6438 1 2025-07-24 18:16:04.184 00:00:10.362 TCP 23.104.0.1:56586 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:12:00.490 00:06:00.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 18:17:03.747 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45642 10 6438 1 2025-07-24 18:17:04.586 00:00:10.363 TCP 23.104.0.1:52230 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:17:59.273 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 18:17:59.267 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 18:18:03.963 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45154 12 6542 1 2025-07-24 18:18:04.990 00:00:10.367 TCP 23.104.0.1:50142 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:19:04.187 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56114 10 6438 1 2025-07-24 18:19:05.394 00:00:10.429 TCP 23.104.0.1:50388 -> 1.101.0.1:3000 12 1559 1 2025-07-24 18:20:04.402 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48980 10 6438 1 2025-07-24 18:20:05.861 00:00:10.368 TCP 23.104.0.1:43702 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:21:06.271 00:00:10.363 TCP 23.104.0.1:39074 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:21:04.621 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55550 10 6438 1 2025-07-24 18:17:00.495 00:06:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 18:22:04.794 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37650 10 6438 1 2025-07-24 18:22:06.671 00:00:10.328 TCP 23.104.0.1:53502 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:22:59.419 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 18:22:59.262 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 18:23:05.009 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 12 10352 1 2025-07-24 18:23:07.051 00:00:10.445 TCP 23.104.0.1:55632 -> 1.101.0.1:3000 15 1925 1 2025-07-24 18:19:00.492 00:06:00.181 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 18:24:05.252 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:50842 10 6438 1 2025-07-24 18:24:07.535 00:00:10.364 TCP 23.104.0.1:41320 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:25:05.511 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40308 10 6438 1 2025-07-24 18:25:07.934 00:00:10.394 TCP 23.104.0.1:60140 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:26:05.727 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48850 10 6438 1 2025-07-24 18:26:08.364 00:00:10.367 TCP 23.104.0.1:60016 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:27:05.899 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60568 10 6438 1 2025-07-24 18:27:08.772 00:00:10.370 TCP 23.104.0.1:54338 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:27:59.397 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 18:27:59.467 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 18:28:06.110 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53836 10 6438 1 2025-07-24 18:28:09.177 00:00:10.374 TCP 23.104.0.1:54752 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:24:00.497 00:06:00.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 18:29:06.280 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48024 10 6438 1 2025-07-24 18:29:09.583 00:00:10.369 TCP 23.104.0.1:55606 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:30:06.495 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46618 10 6438 1 2025-07-24 18:30:09.991 00:00:10.375 TCP 23.104.0.1:45446 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:26:00.493 00:06:00.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 18:31:06.711 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43222 10 6438 1 2025-07-24 18:31:10.394 00:00:10.362 TCP 23.104.0.1:52044 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:32:06.932 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37688 10 6438 1 2025-07-24 18:32:10.799 00:00:10.372 TCP 23.104.0.1:36134 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:32:59.435 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 18:32:59.636 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 18:33:11.198 00:00:10.364 TCP 23.104.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:33:07.168 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36054 10 6438 1 2025-07-24 18:34:11.600 00:00:10.372 TCP 23.104.0.1:52562 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:34:07.378 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47434 10 6438 1 2025-07-24 18:35:07.590 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49238 10 6438 1 2025-07-24 18:35:12.009 00:00:10.363 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:31:00.498 00:06:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 18:36:07.800 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44828 10 6438 1 2025-07-24 18:36:12.407 00:00:10.373 TCP 23.104.0.1:48884 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:37:08.026 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34678 10 6438 1 2025-07-24 18:37:12.817 00:00:10.366 TCP 23.104.0.1:53008 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:37:59.679 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 18:33:00.498 00:06:00.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 18:37:59.694 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 18:38:08.239 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33474 10 6438 1 2025-07-24 18:38:13.217 00:00:10.363 TCP 23.104.0.1:48264 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:39:08.450 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35162 10 6438 1 2025-07-24 18:39:13.624 00:00:10.324 TCP 23.104.0.1:33458 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:40:08.660 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47602 10 6438 1 2025-07-24 18:40:13.990 00:00:10.374 TCP 23.104.0.1:39958 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:41:08.872 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48082 10 6438 1 2025-07-24 18:41:14.400 00:00:10.379 TCP 23.104.0.1:39240 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:42:09.108 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60800 10 6438 1 2025-07-24 18:42:14.816 00:00:10.370 TCP 23.104.0.1:54086 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:42:59.865 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 18:42:59.874 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 18:38:00.502 00:06:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 18:43:09.320 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55142 10 6438 1 2025-07-24 18:43:15.221 00:00:10.363 TCP 23.104.0.1:38090 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:44:09.541 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59502 10 6438 1 2025-07-24 18:44:15.622 00:00:10.372 TCP 23.104.0.1:42522 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:40:00.500 00:06:00.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 18:45:09.712 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41684 10 6438 1 2025-07-24 18:45:16.032 00:00:10.367 TCP 23.104.0.1:45306 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:46:09.925 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38862 10 6438 1 2025-07-24 18:46:16.435 00:00:10.367 TCP 23.104.0.1:46642 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:47:10.134 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:48062 10 6438 1 2025-07-24 18:47:16.841 00:00:10.384 TCP 23.104.0.1:33088 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:47:59.949 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 18:47:59.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 18:48:10.327 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44006 10 6438 1 2025-07-24 18:48:17.263 00:00:10.361 TCP 23.104.0.1:54124 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:49:10.535 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41916 10 6438 1 2025-07-24 18:49:17.661 00:00:10.370 TCP 23.104.0.1:56228 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:45:00.509 00:06:00.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 18:50:10.753 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53592 10 6438 1 2025-07-24 18:50:18.090 00:00:10.370 TCP 23.104.0.1:55372 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:51:10.932 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54678 10 6438 1 2025-07-24 18:51:18.499 00:00:10.362 TCP 23.104.0.1:54164 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:47:00.507 00:06:00.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 18:52:11.159 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55830 10 6438 1 2025-07-24 18:52:18.900 00:00:10.371 TCP 23.104.0.1:53320 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:52:59.899 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 18:52:59.824 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 18:53:11.371 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42390 10 6438 1 2025-07-24 18:53:19.307 00:00:10.376 TCP 23.104.0.1:48782 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:54:11.591 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33688 10 6438 1 2025-07-24 18:54:19.726 00:00:10.368 TCP 23.104.0.1:36090 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:55:11.812 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42710 10 6438 1 2025-07-24 18:55:20.130 00:00:10.324 TCP 23.104.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:56:12.027 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6438 1 2025-07-24 18:56:20.495 00:00:10.368 TCP 23.104.0.1:34852 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:52:00.512 00:06:00.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 18:57:12.243 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33060 10 6438 1 2025-07-24 18:57:20.902 00:00:10.364 TCP 23.104.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:58:00.089 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 18:57:59.955 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 18:58:12.455 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53712 10 6438 1 2025-07-24 18:58:21.307 00:00:10.365 TCP 23.104.0.1:36156 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 501873, total packets: 1579, avg bps: 1070, avg pps: 0, avg bpp: 317 Time window: 2025-07-24 17:56:00 - 2025-07-24 18:58:31 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0027s User: 0.0018s Wall: 0.0021s flows/second: 76850.2 Runtime: 0.0021s