Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 07:58:44.466 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44852 10 6452 1 2025-08-04 07:59:22.801 00:00:10.365 TCP 23.104.0.1:49944 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:59:44.650 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59016 10 6452 1 2025-08-04 08:00:23.203 00:00:10.363 TCP 23.104.0.1:37176 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:00:44.870 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43742 10 6452 1 2025-08-04 07:57:06.141 00:04:00.273 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 07:57:06.137 00:04:00.278 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 08:01:23.606 00:00:10.364 TCP 23.104.0.1:56906 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:01:45.070 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:56786 10 6452 1 2025-08-04 08:02:24.009 00:00:10.320 TCP 23.104.0.1:46290 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:02:45.244 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34206 10 6452 1 2025-08-04 08:03:04.687 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 08:03:04.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 08:03:24.367 00:00:10.442 TCP 23.104.0.1:43642 -> 1.101.0.1:3000 15 1926 1 2025-08-04 08:03:45.463 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53170 12 10367 1 2025-08-04 08:04:24.845 00:00:10.381 TCP 23.104.0.1:49880 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:04:45.702 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36874 10 6452 1 2025-08-04 08:05:25.266 00:00:10.372 TCP 23.104.0.1:34642 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:05:45.914 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42158 10 6452 1 2025-08-04 08:02:06.139 00:04:00.278 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 08:02:06.140 00:04:00.274 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 08:06:25.684 00:00:10.419 TCP 23.104.0.1:48156 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:06:46.095 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56584 10 6452 1 2025-08-04 08:07:26.144 00:00:10.324 TCP 23.104.0.1:35372 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:07:46.307 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-08-04 08:08:04.818 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 08:08:04.904 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 08:08:26.507 00:00:10.360 TCP 23.104.0.1:43560 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:08:46.523 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44012 10 6452 1 2025-08-04 08:09:26.906 00:00:10.380 TCP 23.104.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:09:46.704 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55258 10 6452 1 2025-08-04 08:10:27.334 00:00:10.326 TCP 23.104.0.1:39898 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:10:46.875 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51684 10 6452 1 2025-08-04 08:07:06.140 00:04:00.277 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 08:07:06.142 00:04:00.272 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 08:11:27.696 00:00:10.365 TCP 23.104.0.1:33438 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:11:47.103 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55602 10 6452 1 2025-08-04 08:12:28.109 00:00:10.325 TCP 23.104.0.1:45008 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:12:47.313 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53194 10 6452 1 2025-08-04 08:13:05.382 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 08:13:05.664 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 08:13:28.474 00:00:10.331 TCP 23.104.0.1:36304 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:13:47.493 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57816 10 6452 1 2025-08-04 08:14:28.843 00:00:10.385 TCP 23.104.0.1:38490 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:14:47.704 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39080 10 6452 1 2025-08-04 08:15:29.264 00:00:10.365 TCP 23.104.0.1:57058 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:15:47.917 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42386 10 6452 1 2025-08-04 08:12:06.144 00:04:00.275 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 08:12:06.143 00:04:00.280 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 08:16:29.672 00:00:10.323 TCP 23.104.0.1:34274 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:16:48.124 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54346 10 6452 1 2025-08-04 08:17:30.056 00:00:10.321 TCP 23.104.0.1:52600 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:17:48.336 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57416 10 6452 1 2025-08-04 08:18:04.887 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 08:18:04.830 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 08:18:30.416 00:00:10.323 TCP 23.104.0.1:51342 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:18:48.556 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43976 11 6492 1 2025-08-04 08:19:30.778 00:00:10.370 TCP 23.104.0.1:47474 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:19:48.779 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43622 10 6452 1 2025-08-04 08:20:31.187 00:00:10.326 TCP 23.104.0.1:42332 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:20:48.989 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41246 10 6452 1 2025-08-04 08:21:31.550 00:00:10.367 TCP 23.104.0.1:55998 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:21:49.218 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50658 10 6452 1 2025-08-04 08:17:06.141 00:06:00.282 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 08:17:06.144 00:06:00.277 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 08:22:31.958 00:00:10.365 TCP 23.104.0.1:52186 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:22:49.399 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48112 10 6452 1 2025-08-04 08:23:04.948 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 08:23:05.007 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 08:23:32.365 00:00:10.366 TCP 23.104.0.1:50824 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:23:49.618 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41618 12 6556 1 2025-08-04 08:24:32.771 00:00:10.371 TCP 23.104.0.1:39218 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:24:49.834 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38636 10 6452 1 2025-08-04 08:25:33.182 00:00:10.366 TCP 23.104.0.1:49498 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:25:50.088 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49768 10 6452 1 2025-08-04 08:26:33.586 00:00:10.375 TCP 23.104.0.1:49086 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:26:50.306 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44836 10 6452 1 2025-08-04 08:27:34.002 00:00:10.365 TCP 23.104.0.1:38210 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:27:50.528 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46914 10 6452 1 2025-08-04 08:24:06.147 00:04:00.275 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 08:28:05.017 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 08:28:04.943 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 08:28:34.403 00:00:10.442 TCP 23.104.0.1:58820 -> 1.101.0.1:3000 15 1926 1 2025-08-04 08:28:50.739 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37184 12 10367 1 2025-08-04 08:24:06.144 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-04 08:29:34.883 00:00:10.374 TCP 23.104.0.1:33986 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:29:50.979 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50304 10 6452 1 2025-08-04 08:30:35.293 00:00:10.373 TCP 23.104.0.1:42098 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:30:51.207 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34102 10 6452 1 2025-08-04 08:31:35.699 00:00:10.368 TCP 23.104.0.1:54820 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:31:51.426 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42094 12 6556 1 2025-08-04 08:32:36.111 00:00:10.363 TCP 23.104.0.1:50496 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:32:51.642 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56078 10 6452 1 2025-08-04 08:33:05.274 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 08:29:06.146 00:04:00.276 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 08:33:05.191 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 08:30:06.425 00:03:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 421 1 2025-08-04 08:33:36.514 00:00:10.440 TCP 23.104.0.1:43090 -> 1.101.0.1:3000 15 1926 1 2025-08-04 08:33:51.811 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:49980 12 10367 1 2025-08-04 08:34:36.994 00:00:10.365 TCP 23.104.0.1:53832 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:34:52.009 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-08-04 08:35:37.395 00:00:10.370 TCP 23.104.0.1:52170 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:35:52.221 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41180 10 6452 1 2025-08-04 08:36:37.799 00:00:10.340 TCP 23.104.0.1:37364 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:36:52.436 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42358 10 6452 1 2025-08-04 08:37:38.180 00:00:10.366 TCP 23.104.0.1:52500 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:34:06.149 00:04:00.277 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 08:38:05.412 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 08:37:52.650 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48160 10 6452 1 2025-08-04 08:38:05.319 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 08:34:06.147 00:04:00.282 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 08:38:38.588 00:00:10.398 TCP 23.104.0.1:40786 -> 1.101.0.1:3000 15 1926 1 2025-08-04 08:38:52.863 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:59392 12 10365 1 2025-08-04 08:39:39.026 00:00:10.325 TCP 23.104.0.1:57482 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:39:53.111 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41530 10 6452 1 2025-08-04 08:40:39.393 00:00:10.373 TCP 23.104.0.1:40352 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:40:53.282 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44212 10 6452 1 2025-08-04 08:41:39.807 00:00:10.374 TCP 23.104.0.1:41808 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:41:53.501 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53294 10 6452 1 2025-08-04 08:42:40.223 00:00:10.363 TCP 23.104.0.1:42866 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:43:05.551 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 08:42:53.676 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50050 10 6452 1 2025-08-04 08:39:06.147 00:04:00.282 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 08:43:05.567 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 08:39:06.148 00:04:00.278 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 08:43:40.626 00:00:10.362 TCP 23.104.0.1:44630 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:43:53.892 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36210 10 6452 1 2025-08-04 08:44:41.033 00:00:10.360 TCP 23.104.0.1:59416 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:44:54.112 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44736 10 6452 1 2025-08-04 08:45:41.427 00:00:10.374 TCP 23.104.0.1:41192 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:45:54.327 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36244 10 6452 1 2025-08-04 08:46:41.844 00:00:10.388 TCP 23.104.0.1:36440 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:46:54.539 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60512 10 6452 1 2025-08-04 08:47:42.267 00:00:10.372 TCP 23.104.0.1:45680 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:47:54.754 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35414 10 6452 1 2025-08-04 08:48:05.633 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 08:44:06.150 00:04:00.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 08:48:05.439 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 08:44:06.152 00:04:00.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 08:48:42.676 00:00:10.323 TCP 23.104.0.1:36196 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:48:54.975 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56698 10 6452 1 2025-08-04 08:49:43.050 00:00:10.320 TCP 23.104.0.1:47152 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:49:55.211 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41582 10 6452 1 2025-08-04 08:50:43.407 00:00:10.365 TCP 23.104.0.1:57912 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:50:55.430 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37666 10 6452 1 2025-08-04 08:51:43.810 00:00:10.363 TCP 23.104.0.1:33872 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:51:55.660 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34370 10 6452 1 2025-08-04 08:52:44.208 00:00:10.362 TCP 23.104.0.1:60920 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:52:55.888 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58860 10 6452 1 2025-08-04 08:53:05.502 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 08:49:06.152 00:04:00.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 08:53:05.827 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 08:49:06.154 00:04:00.284 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 08:53:44.611 00:00:10.380 TCP 23.104.0.1:46810 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:53:56.109 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48818 10 6452 1 2025-08-04 08:54:45.032 00:00:10.366 TCP 23.104.0.1:50166 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:54:56.283 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43844 10 6452 1 2025-08-04 08:55:45.441 00:00:10.363 TCP 23.104.0.1:36874 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:55:56.497 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37100 10 6452 1 2025-08-04 08:56:45.843 00:00:10.384 TCP 23.104.0.1:37040 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:56:56.671 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35350 10 6452 1 2025-08-04 08:57:46.268 00:00:10.365 TCP 23.104.0.1:54902 -> 1.101.0.1:3000 11 1507 1 2025-08-04 08:58:05.774 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 08:58:05.947 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 08:57:56.879 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50644 10 6452 1 Summary: total flows: 165, total bytes: 513685, total packets: 1578, avg bps: 1122, avg pps: 0, avg bpp: 325 Time window: 2025-08-04 07:57:06 - 2025-08-04 08:58:07 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0034s User: 0.0011s Wall: 0.0027s flows/second: 61609.6 Runtime: 0.0027s