Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 17:58:43.356 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34188 10 6452 1 2025-08-03 17:59:31.533 00:00:10.363 TCP 23.104.0.1:39790 -> 1.101.0.1:3000 11 1507 1 2025-08-03 17:59:43.569 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43008 10 6452 1 2025-08-03 18:00:31.936 00:00:10.394 TCP 23.104.0.1:46764 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:00:43.783 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6452 1 2025-08-03 18:01:32.372 00:00:10.367 TCP 23.104.0.1:52214 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:01:44.006 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36524 10 6452 1 2025-08-03 17:58:05.830 00:05:00.212 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 18:02:32.779 00:00:10.367 TCP 23.104.0.1:45062 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:02:47.632 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 18:02:47.858 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 18:02:44.223 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40558 12 6556 1 2025-08-03 17:59:05.832 00:05:00.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 18:03:33.199 00:00:10.442 TCP 23.104.0.1:33226 -> 1.101.0.1:3000 15 1926 1 2025-08-03 18:03:44.437 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52136 12 10365 1 2025-08-03 18:04:33.685 00:00:10.369 TCP 23.104.0.1:42124 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:04:44.674 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39728 10 6452 1 2025-08-03 18:05:34.107 00:00:10.367 TCP 23.104.0.1:51932 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:05:44.889 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42202 10 6452 1 2025-08-03 18:06:34.513 00:00:10.331 TCP 23.104.0.1:51618 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:06:45.116 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45490 10 6452 1 2025-08-03 18:07:34.878 00:00:10.368 TCP 23.104.0.1:58740 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:07:47.793 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 18:07:47.878 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 18:07:45.331 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37656 10 6452 1 2025-08-03 18:04:05.830 00:05:00.213 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 18:08:35.284 00:00:10.374 TCP 23.104.0.1:55680 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:08:45.545 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39122 10 6452 1 2025-08-03 18:05:05.835 00:05:00.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 18:09:35.697 00:00:10.369 TCP 23.104.0.1:36370 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:09:45.751 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-08-03 18:10:36.114 00:00:10.364 TCP 23.104.0.1:48380 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:10:45.967 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47174 10 6452 1 2025-08-03 18:11:36.517 00:00:10.326 TCP 23.104.0.1:53200 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:11:46.180 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36980 10 6452 1 2025-08-03 18:12:48.325 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 18:12:36.884 00:00:10.374 TCP 23.104.0.1:53372 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:12:48.296 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 18:12:46.405 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59830 10 6452 1 2025-08-03 18:13:37.298 00:00:10.365 TCP 23.104.0.1:60066 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:13:46.617 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37594 10 6452 1 2025-08-03 18:10:05.831 00:05:00.214 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 18:14:37.701 00:00:10.365 TCP 23.104.0.1:42564 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:14:46.827 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52132 10 6452 1 2025-08-03 18:11:05.835 00:05:00.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 18:15:38.107 00:00:10.364 TCP 23.104.0.1:34858 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:15:47.073 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53606 10 6452 1 2025-08-03 18:16:38.509 00:00:10.366 TCP 23.104.0.1:56046 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:16:47.286 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41894 10 6452 1 2025-08-03 18:17:48.104 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 18:17:38.916 00:00:10.371 TCP 23.104.0.1:45348 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:17:47.969 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 18:17:47.505 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57660 10 6452 1 2025-08-03 18:18:39.331 00:00:10.363 TCP 23.104.0.1:43530 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:18:47.718 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57308 10 6452 1 2025-08-03 18:19:39.732 00:00:10.371 TCP 23.104.0.1:59418 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:19:47.894 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:47756 10 6452 1 2025-08-03 18:16:05.835 00:05:00.214 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 18:20:40.141 00:00:10.365 TCP 23.104.0.1:46996 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:20:48.112 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36040 10 6452 1 2025-08-03 18:17:05.837 00:05:00.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 18:21:40.545 00:00:10.359 TCP 23.104.0.1:37290 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:21:48.324 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51552 10 6452 1 2025-08-03 18:22:47.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 18:22:40.942 00:00:10.381 TCP 23.104.0.1:45938 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:22:48.245 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 18:22:48.542 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34954 10 6452 1 2025-08-03 18:23:41.351 00:00:10.323 TCP 23.104.0.1:42362 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:23:48.755 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39128 10 6452 1 2025-08-03 18:24:41.713 00:00:10.370 TCP 23.104.0.1:40514 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:24:48.969 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43288 10 6452 1 2025-08-03 18:25:42.121 00:00:10.336 TCP 23.104.0.1:44868 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:25:49.197 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41996 10 6452 1 2025-08-03 18:22:05.837 00:05:00.215 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 18:26:42.493 00:00:10.363 TCP 23.104.0.1:45902 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:26:49.410 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52158 10 6452 1 2025-08-03 18:23:05.840 00:05:00.209 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 18:27:48.425 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 18:27:48.491 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 18:27:42.896 00:00:10.380 TCP 23.104.0.1:48610 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:27:49.620 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58232 10 6452 1 2025-08-03 18:28:43.314 00:00:10.330 TCP 23.104.0.1:48854 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:28:49.832 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36850 10 6452 1 2025-08-03 18:29:43.686 00:00:10.368 TCP 23.104.0.1:40884 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:29:50.008 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40682 10 6452 1 2025-08-03 18:30:44.103 00:00:10.373 TCP 23.104.0.1:52950 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:30:50.220 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48136 10 6452 1 2025-08-03 18:31:44.511 00:00:10.365 TCP 23.104.0.1:38600 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:31:50.432 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46580 10 6452 1 2025-08-03 18:28:05.844 00:05:00.209 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 18:32:48.631 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 18:32:48.378 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 18:32:44.913 00:00:10.365 TCP 23.104.0.1:35326 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:32:50.649 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45376 10 6452 1 2025-08-03 18:29:05.848 00:05:00.204 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 18:33:45.313 00:00:10.365 TCP 23.104.0.1:50236 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:33:50.868 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37160 10 6452 1 2025-08-03 18:34:45.719 00:00:10.369 TCP 23.104.0.1:60450 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:34:51.104 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41996 10 6452 1 2025-08-03 18:35:46.130 00:00:10.417 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:35:51.317 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:34138 10 6452 1 2025-08-03 18:36:46.584 00:00:10.327 TCP 23.104.0.1:36960 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:36:51.489 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57564 10 6452 1 2025-08-03 18:37:48.669 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 18:37:48.821 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 18:37:51.698 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57424 10 6452 1 2025-08-03 18:37:46.958 00:00:10.365 TCP 23.104.0.1:43234 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:34:05.845 00:05:00.210 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 18:38:47.357 00:00:10.360 TCP 23.104.0.1:51766 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:35:05.849 00:05:00.204 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 18:38:51.913 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44678 10 6452 1 2025-08-03 18:39:47.758 00:00:10.371 TCP 23.104.0.1:45634 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:39:52.126 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57446 10 6452 1 2025-08-03 18:40:48.178 00:00:10.318 TCP 23.104.0.1:45552 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:40:52.350 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46512 10 6452 1 2025-08-03 18:41:48.536 00:00:10.367 TCP 23.104.0.1:45520 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:41:52.522 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34742 10 6452 1 2025-08-03 18:42:48.468 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 18:42:48.415 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 18:42:48.943 00:00:10.377 TCP 23.104.0.1:46502 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:42:52.756 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35262 10 6452 1 2025-08-03 18:43:49.364 00:00:10.365 TCP 23.104.0.1:56668 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:43:52.964 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33508 10 6452 1 2025-08-03 18:40:05.847 00:05:00.210 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 18:44:53.176 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37322 10 6452 1 2025-08-03 18:44:49.765 00:00:10.373 TCP 23.104.0.1:54246 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:41:05.851 00:05:00.204 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 18:45:50.177 00:00:10.364 TCP 23.104.0.1:41746 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:45:53.390 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58738 10 6452 1 2025-08-03 18:46:50.580 00:00:10.368 TCP 23.104.0.1:41720 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:46:53.617 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42740 10 6452 1 2025-08-03 18:47:48.733 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 18:47:48.641 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 18:47:50.985 00:00:10.369 TCP 23.104.0.1:52876 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:47:53.826 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39172 10 6452 1 2025-08-03 18:48:51.391 00:00:10.362 TCP 23.104.0.1:40806 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:48:54.048 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41522 10 6452 1 2025-08-03 18:49:51.801 00:00:10.362 TCP 23.104.0.1:45044 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:49:54.261 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53692 10 6452 1 2025-08-03 18:46:05.849 00:05:00.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 18:50:54.473 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44740 10 6452 1 2025-08-03 18:50:52.211 00:00:10.324 TCP 23.104.0.1:48912 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:47:05.851 00:05:00.211 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 18:51:52.575 00:00:10.372 TCP 23.104.0.1:34618 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:51:54.690 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59000 10 6452 1 2025-08-03 18:52:48.606 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 18:52:48.741 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 18:52:52.979 00:00:10.363 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:52:54.904 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34446 10 6452 1 2025-08-03 18:53:55.122 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56834 10 6452 1 2025-08-03 18:53:53.385 00:00:10.362 TCP 23.104.0.1:58862 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:54:55.335 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35984 10 6452 1 2025-08-03 18:54:53.785 00:00:10.360 TCP 23.104.0.1:44696 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:52:05.850 00:05:00.215 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 18:55:54.187 00:00:14.553 TCP 23.104.0.1:41816 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:55:55.562 00:00:13.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52298 10 6452 1 2025-08-03 18:56:58.738 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56926 10 6452 1 2025-08-03 18:53:05.852 00:05:00.211 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 18:56:58.778 00:00:10.326 TCP 23.104.0.1:50026 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:57:48.722 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 18:57:48.797 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 18:57:59.142 00:00:10.367 TCP 23.104.0.1:38128 -> 1.101.0.1:3000 11 1507 1 2025-08-03 18:57:58.979 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:47298 10 6452 1 Summary: total flows: 163, total bytes: 501277, total packets: 1569, avg bps: 1112, avg pps: 0, avg bpp: 319 Time window: 2025-08-03 17:58:05 - 2025-08-03 18:58:09 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0008s Wall: 0.0028s flows/second: 57398.3 Runtime: 0.0029s