Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-31 12:58:44.024 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54140 10 6452 1 2025-07-31 12:59:07.154 00:00:10.365 TCP 23.104.0.1:40510 -> 1.101.0.1:3000 11 1507 1 2025-07-31 12:59:44.249 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34862 10 6452 1 2025-07-31 13:00:07.555 00:00:10.364 TCP 23.104.0.1:47770 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:00:44.431 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42620 10 6452 1 2025-07-31 12:56:03.931 00:06:00.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 13:01:15.063 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 13:01:15.211 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 13:01:07.956 00:00:10.367 TCP 23.104.0.1:59082 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:01:44.643 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:56270 10 6452 1 2025-07-31 13:02:08.368 00:00:10.365 TCP 23.104.0.1:54386 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:02:44.811 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59618 10 6452 1 2025-07-31 13:03:08.769 00:00:10.378 TCP 23.104.0.1:37090 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:03:45.042 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41756 10 6452 1 2025-07-31 13:04:09.179 00:00:10.367 TCP 23.104.0.1:43924 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:04:45.253 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44698 10 6452 1 2025-07-31 13:00:03.935 00:06:00.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 13:05:09.583 00:00:10.325 TCP 23.104.0.1:40200 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:05:45.467 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44382 10 6452 1 2025-07-31 13:06:15.422 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 13:06:15.228 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 13:06:09.946 00:00:10.368 TCP 23.104.0.1:42098 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:06:45.676 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45250 10 6452 1 2025-07-31 13:03:03.932 00:05:00.068 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 13:07:10.356 00:00:10.368 TCP 23.104.0.1:54116 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:07:45.892 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 10 6452 1 2025-07-31 13:08:10.765 00:00:10.371 TCP 23.104.0.1:42858 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:08:46.115 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50444 10 6452 1 2025-07-31 13:09:11.172 00:00:10.356 TCP 23.104.0.1:33642 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:09:46.321 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44300 10 6452 1 2025-07-31 13:10:11.566 00:00:10.365 TCP 23.104.0.1:52874 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:10:46.496 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45304 10 6452 1 2025-07-31 13:11:15.296 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 13:11:15.381 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 13:11:11.970 00:00:10.368 TCP 23.104.0.1:56518 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:11:46.707 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45850 10 6452 1 2025-07-31 13:07:03.937 00:06:00.062 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 13:12:12.378 00:00:10.358 TCP 23.104.0.1:53544 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:12:46.918 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40802 10 6452 1 2025-07-31 13:09:03.933 00:05:00.069 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 13:13:12.782 00:00:10.444 TCP 23.104.0.1:41610 -> 1.101.0.1:3000 15 1926 1 2025-07-31 13:13:47.129 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:52292 12 10367 1 2025-07-31 13:14:13.268 00:00:10.321 TCP 23.104.0.1:53242 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:14:47.332 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34450 10 6452 1 2025-07-31 13:15:13.625 00:00:10.361 TCP 23.104.0.1:44444 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:15:47.506 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39510 10 6452 1 2025-07-31 13:16:15.411 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 13:16:15.502 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 13:16:14.032 00:00:10.364 TCP 23.104.0.1:56252 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:16:47.717 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50086 10 6452 1 2025-07-31 13:17:14.437 00:00:10.363 TCP 23.104.0.1:60724 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:17:47.943 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58530 10 6452 1 2025-07-31 13:14:03.936 00:05:00.064 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-31 13:18:14.843 00:00:10.388 TCP 23.104.0.1:34090 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:18:48.173 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36510 10 6452 1 2025-07-31 13:15:03.933 00:05:00.068 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 13:19:15.270 00:00:10.371 TCP 23.104.0.1:59662 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:19:48.389 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51484 10 6452 1 2025-07-31 13:20:15.676 00:00:10.370 TCP 23.104.0.1:60124 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:20:48.603 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42584 10 6452 1 2025-07-31 13:21:15.638 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 13:21:15.605 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 13:21:16.107 00:00:10.364 TCP 23.104.0.1:33878 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:21:48.821 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58436 10 6452 1 2025-07-31 13:22:16.511 00:00:10.362 TCP 23.104.0.1:40564 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:22:49.067 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49314 10 6452 1 2025-07-31 13:23:16.914 00:00:10.381 TCP 23.104.0.1:54222 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:23:49.281 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33556 10 6452 1 2025-07-31 13:20:03.940 00:05:00.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-31 13:24:17.335 00:00:10.330 TCP 23.104.0.1:51704 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:24:49.491 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47204 10 6452 1 2025-07-31 13:21:03.938 00:05:00.066 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 13:25:17.702 00:00:10.367 TCP 23.104.0.1:46732 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:25:49.706 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44032 10 6452 1 2025-07-31 13:26:15.695 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 13:26:15.706 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 13:26:18.112 00:00:10.327 TCP 23.104.0.1:37730 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:26:49.924 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:37184 10 6452 1 2025-07-31 13:27:18.472 00:00:10.368 TCP 23.104.0.1:47802 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:27:50.130 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51264 10 6452 1 2025-07-31 13:28:18.878 00:00:10.373 TCP 23.104.0.1:43968 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:28:50.344 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60414 10 6452 1 2025-07-31 13:29:19.291 00:00:10.360 TCP 23.104.0.1:33232 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:29:50.564 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:41376 10 6452 1 2025-07-31 13:26:03.941 00:05:00.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-31 13:30:19.706 00:00:10.370 TCP 23.104.0.1:47022 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:30:50.769 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47266 10 6452 1 2025-07-31 13:27:03.938 00:05:00.066 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 13:31:15.786 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 13:31:15.743 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 13:31:20.116 00:00:10.322 TCP 23.104.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:31:50.982 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:56436 10 6452 1 2025-07-31 13:32:20.478 00:00:10.367 TCP 23.104.0.1:41482 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:32:51.217 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45596 10 6452 1 2025-07-31 13:33:20.881 00:00:10.395 TCP 23.104.0.1:60950 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:33:51.442 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41532 10 6452 1 2025-07-31 13:34:21.314 00:00:10.366 TCP 23.104.0.1:60668 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:34:51.653 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39542 10 6452 1 2025-07-31 13:35:21.715 00:00:10.361 TCP 23.104.0.1:34860 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:35:51.870 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46140 10 6452 1 2025-07-31 13:32:03.942 00:05:00.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-31 13:36:15.893 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 13:36:15.721 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 13:36:22.114 00:00:10.360 TCP 23.104.0.1:41510 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:36:52.095 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40142 10 6452 1 2025-07-31 13:33:03.939 00:05:00.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 13:37:22.513 00:00:10.361 TCP 23.104.0.1:34006 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:37:52.305 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35370 10 6452 1 2025-07-31 13:38:22.916 00:00:10.381 TCP 23.104.0.1:39890 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:38:52.515 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54312 10 6452 1 2025-07-31 13:39:23.337 00:00:10.373 TCP 23.104.0.1:54338 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:39:52.729 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41390 10 6452 1 2025-07-31 13:40:23.748 00:00:10.319 TCP 23.104.0.1:58164 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:40:52.944 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:32844 10 6452 1 2025-07-31 13:41:16.002 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 13:41:15.980 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 13:41:24.107 00:00:10.363 TCP 23.104.0.1:40318 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:38:03.943 00:05:00.084 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-31 13:41:53.175 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54504 10 6452 1 2025-07-31 13:42:24.505 00:00:10.360 TCP 23.104.0.1:56212 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:39:03.942 00:05:00.089 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 13:42:53.390 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37176 10 6452 1 2025-07-31 13:43:24.905 00:00:10.366 TCP 23.104.0.1:36712 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:43:53.574 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39460 10 6452 1 2025-07-31 13:44:25.308 00:00:10.367 TCP 23.104.0.1:36568 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:44:53.745 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36332 10 6452 1 2025-07-31 13:45:25.718 00:00:10.369 TCP 23.104.0.1:47428 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:45:53.915 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41696 10 6452 1 2025-07-31 13:46:15.964 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 13:46:15.903 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 13:46:26.129 00:00:10.362 TCP 23.104.0.1:44310 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:46:54.125 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 10 6452 1 2025-07-31 13:47:26.535 00:00:10.365 TCP 23.104.0.1:50334 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:47:54.350 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56828 10 6452 1 2025-07-31 13:44:03.948 00:05:00.082 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-31 13:48:26.939 00:00:10.449 TCP 23.104.0.1:37418 -> 1.101.0.1:3000 15 1926 1 2025-07-31 13:48:54.561 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36526 12 10367 1 2025-07-31 13:45:03.945 00:05:00.089 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 13:49:27.433 00:00:10.366 TCP 23.104.0.1:56236 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:49:54.797 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56802 10 6452 1 2025-07-31 13:50:27.835 00:00:10.387 TCP 23.104.0.1:44984 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:50:55.016 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48004 10 6452 1 2025-07-31 13:51:15.824 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 13:51:16.111 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 13:51:28.260 00:00:10.330 TCP 23.104.0.1:44452 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:51:55.228 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51196 10 6452 1 2025-07-31 13:52:28.628 00:00:10.366 TCP 23.104.0.1:50692 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:52:55.468 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59294 10 6452 1 2025-07-31 13:53:29.052 00:00:10.359 TCP 23.104.0.1:37894 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:53:55.695 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51376 10 6452 1 2025-07-31 13:50:03.949 00:05:00.085 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-31 13:54:29.451 00:00:10.365 TCP 23.104.0.1:55286 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:54:55.904 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51774 10 6452 1 2025-07-31 13:51:03.946 00:05:00.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 13:55:29.867 00:00:10.388 TCP 23.104.0.1:34128 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:55:56.109 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48308 10 6452 1 2025-07-31 13:56:16.340 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 13:56:16.291 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 13:56:30.302 00:00:10.374 TCP 23.104.0.1:55938 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:56:56.279 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41312 10 6452 1 2025-07-31 13:57:30.718 00:00:10.369 TCP 23.104.0.1:38714 -> 1.101.0.1:3000 11 1507 1 2025-07-31 13:57:56.451 00:00:10.254 TCP 1.101.0.1:3000 -> 22.102.0.1:37932 10 6452 1 2025-07-31 13:58:31.125 00:00:10.322 TCP 23.104.0.1:44262 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 506647, total packets: 1578, avg bps: 1078, avg pps: 0, avg bpp: 321 Time window: 2025-07-31 12:56:03 - 2025-07-31 13:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0011s User: 0.0032s Wall: 0.0022s flows/second: 73727.1 Runtime: 0.0022s