Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 22:58:50.181 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41406 10 6452 1 2025-08-03 22:59:36.553 00:00:10.374 TCP 23.104.0.1:52364 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:59:50.353 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60520 10 6452 1 2025-08-03 23:00:36.969 00:00:10.372 TCP 23.104.0.1:34444 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:00:50.563 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33120 10 6452 1 2025-08-03 23:01:37.381 00:00:10.364 TCP 23.104.0.1:57972 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:01:50.775 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35828 10 6452 1 2025-08-03 22:58:05.934 00:05:00.217 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 23:02:37.792 00:00:10.363 TCP 23.104.0.1:36720 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:02:53.790 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 23:02:53.699 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:02:50.990 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40416 10 6452 1 2025-08-03 22:59:05.938 00:05:00.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 23:03:38.197 00:00:10.365 TCP 23.104.0.1:55076 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:03:51.212 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59292 10 6452 1 2025-08-03 23:04:38.596 00:00:10.363 TCP 23.104.0.1:37796 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:04:51.427 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48510 10 6452 1 2025-08-03 23:05:39.007 00:00:10.329 TCP 23.104.0.1:37140 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:05:51.640 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49828 10 6452 1 2025-08-03 23:06:39.373 00:00:10.364 TCP 23.104.0.1:38538 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:06:51.852 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50014 10 6452 1 2025-08-03 23:07:39.773 00:00:10.369 TCP 23.104.0.1:44848 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:07:53.975 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:07:54.091 00:00:00.049 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 23:07:52.040 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48032 10 6452 1 2025-08-03 23:04:05.937 00:05:00.218 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 23:08:40.179 00:00:10.362 TCP 23.104.0.1:54420 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:08:52.263 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55612 10 6452 1 2025-08-03 23:05:05.939 00:05:00.213 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 23:09:40.581 00:00:10.366 TCP 23.104.0.1:36710 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:09:52.473 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56038 10 6452 1 2025-08-03 23:10:40.986 00:00:10.370 TCP 23.104.0.1:39224 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:10:52.646 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35756 10 6452 1 2025-08-03 23:11:41.389 00:00:10.370 TCP 23.104.0.1:45270 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:11:52.862 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53550 10 6452 1 2025-08-03 23:12:54.169 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:12:54.216 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 23:12:41.796 00:00:10.363 TCP 23.104.0.1:60418 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:12:53.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53584 10 6452 1 2025-08-03 23:13:42.199 00:00:10.325 TCP 23.104.0.1:55452 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:13:53.309 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57096 10 6452 1 2025-08-03 23:10:05.939 00:05:00.217 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 23:14:42.559 00:00:10.362 TCP 23.104.0.1:56310 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:11:05.941 00:05:00.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 23:14:53.521 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54120 10 6452 1 2025-08-03 23:15:42.958 00:00:10.383 TCP 23.104.0.1:56766 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:15:53.734 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57510 10 6452 1 2025-08-03 23:16:43.381 00:00:10.364 TCP 23.104.0.1:57274 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:16:53.949 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50384 10 6452 1 2025-08-03 23:17:55.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:17:55.214 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 23:17:43.787 00:00:10.366 TCP 23.104.0.1:36026 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:17:54.181 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33500 10 6452 1 2025-08-03 23:18:44.184 00:00:10.360 TCP 23.104.0.1:37376 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:18:54.397 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45954 10 6452 1 2025-08-03 23:19:44.583 00:00:10.363 TCP 23.104.0.1:38584 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:19:54.614 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 10 6452 1 2025-08-03 23:16:05.941 00:05:00.215 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 23:20:44.985 00:00:10.365 TCP 23.104.0.1:55946 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:17:05.945 00:05:00.208 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 23:20:54.828 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49878 10 6452 1 2025-08-03 23:21:45.388 00:00:10.365 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:21:55.054 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-08-03 23:22:54.374 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:22:45.802 00:00:10.364 TCP 23.104.0.1:45902 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:22:53.978 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 23:22:55.264 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58390 10 6452 1 2025-08-03 23:23:46.204 00:00:10.372 TCP 23.104.0.1:38918 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:23:55.481 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58086 10 6452 1 2025-08-03 23:24:46.617 00:00:10.366 TCP 23.104.0.1:45652 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:24:55.691 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56434 10 6452 1 2025-08-03 23:25:47.021 00:00:10.365 TCP 23.104.0.1:50530 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:25:55.873 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57164 10 6452 1 2025-08-03 23:22:05.946 00:05:00.213 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 23:26:47.426 00:00:10.367 TCP 23.104.0.1:40436 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:26:56.110 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47518 10 6452 1 2025-08-03 23:23:05.949 00:05:00.208 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 23:27:54.369 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:27:54.337 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 23:27:47.835 00:00:10.390 TCP 23.104.0.1:40020 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:27:56.325 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41472 10 6452 1 2025-08-03 23:28:48.262 00:00:10.365 TCP 23.104.0.1:43000 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:28:56.539 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50656 10 6452 1 2025-08-03 23:29:48.668 00:00:10.367 TCP 23.104.0.1:53196 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:29:56.712 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 10 6452 1 2025-08-03 23:30:49.102 00:00:10.370 TCP 23.104.0.1:53348 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:30:56.938 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57322 10 6452 1 2025-08-03 23:31:49.514 00:00:10.371 TCP 23.104.0.1:60004 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:28:05.947 00:05:00.222 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 23:31:57.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55118 10 6452 1 2025-08-03 23:32:54.152 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:32:54.412 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 23:32:49.936 00:00:10.373 TCP 23.104.0.1:38020 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:29:05.951 00:05:00.216 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 23:32:57.397 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39168 10 6452 1 2025-08-03 23:33:50.347 00:00:10.437 TCP 23.104.0.1:50024 -> 1.101.0.1:3000 15 1926 1 2025-08-03 23:33:57.606 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:41168 12 10365 1 2025-08-03 23:34:50.824 00:00:10.365 TCP 23.104.0.1:33090 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:34:57.807 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45628 10 6452 1 2025-08-03 23:35:51.230 00:00:10.364 TCP 23.104.0.1:47028 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:35:58.033 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59390 10 6452 1 2025-08-03 23:36:51.640 00:00:10.374 TCP 23.104.0.1:37900 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:36:58.206 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52542 10 6452 1 2025-08-03 23:37:54.650 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:37:54.813 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 23:37:52.060 00:00:10.325 TCP 23.104.0.1:51076 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:34:05.949 00:05:00.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 23:37:58.417 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47952 10 6452 1 2025-08-03 23:38:52.422 00:00:10.370 TCP 23.104.0.1:51228 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:35:05.951 00:05:00.217 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 23:38:58.644 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55516 10 6452 1 2025-08-03 23:39:52.831 00:00:10.392 TCP 23.104.0.1:54174 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:39:58.819 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40228 10 6452 1 2025-08-03 23:40:53.271 00:00:10.380 TCP 23.104.0.1:35726 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:40:59.044 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57804 10 6452 1 2025-08-03 23:41:53.684 00:00:10.368 TCP 23.104.0.1:55918 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:41:59.265 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49240 10 6452 1 2025-08-03 23:42:54.672 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:42:54.596 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 23:42:54.107 00:00:10.364 TCP 23.104.0.1:60872 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:42:59.479 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33338 10 6452 1 2025-08-03 23:43:54.506 00:00:10.362 TCP 23.104.0.1:54484 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:40:05.949 00:05:00.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 23:43:59.689 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60500 10 6452 1 2025-08-03 23:44:54.909 00:00:10.362 TCP 23.104.0.1:52396 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:41:05.952 00:05:00.217 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 23:44:59.903 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55326 10 6452 1 2025-08-03 23:45:55.312 00:00:10.371 TCP 23.104.0.1:35236 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:46:00.116 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2025-08-03 23:46:55.724 00:00:10.389 TCP 23.104.0.1:51744 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:47:00.290 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56120 10 6452 1 2025-08-03 23:47:54.445 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:47:54.507 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 23:47:56.141 00:00:10.323 TCP 23.104.0.1:53156 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:48:00.505 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57618 10 6452 1 2025-08-03 23:48:56.504 00:00:10.360 TCP 23.104.0.1:56782 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:49:00.721 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42268 10 6452 1 2025-08-03 23:46:05.950 00:05:00.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 23:49:56.905 00:00:10.372 TCP 23.104.0.1:36526 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:50:00.936 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:35496 10 6452 1 2025-08-03 23:47:05.952 00:05:00.234 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 23:50:57.317 00:00:10.356 TCP 23.104.0.1:51366 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:51:01.181 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41874 10 6452 1 2025-08-03 23:52:01.388 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60470 10 6452 1 2025-08-03 23:51:57.715 00:00:10.379 TCP 23.104.0.1:51794 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:52:54.747 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 23:52:54.558 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:53:01.600 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40720 10 6452 1 2025-08-03 23:52:58.132 00:00:10.363 TCP 23.104.0.1:41990 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:53:58.536 00:00:10.365 TCP 23.104.0.1:40898 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:54:01.818 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44750 10 6452 1 2025-08-03 23:54:58.939 00:00:10.383 TCP 23.104.0.1:59688 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:55:02.066 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49162 10 6452 1 2025-08-03 23:55:59.359 00:00:10.360 TCP 23.104.0.1:41878 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:52:05.953 00:05:00.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 23:56:02.275 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60964 10 6452 1 2025-08-03 23:53:05.957 00:05:00.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 23:56:59.759 00:00:10.380 TCP 23.104.0.1:39276 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:57:02.447 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37778 10 6452 1 2025-08-03 23:57:54.975 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 23:57:55.047 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:58:00.180 00:00:10.361 TCP 23.104.0.1:34366 -> 1.101.0.1:3000 11 1507 1 2025-08-03 23:58:02.664 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52770 10 6452 1 Summary: total flows: 163, total bytes: 501173, total packets: 1567, avg bps: 1111, avg pps: 0, avg bpp: 319 Time window: 2025-08-03 22:58:05 - 2025-08-03 23:58:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0009s Wall: 0.0015s flows/second: 111565.2 Runtime: 0.0015s