Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-08 22:58:52.991 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53420 10 6452 1 2025-08-08 22:59:09.575 00:00:10.380 TCP 23.104.0.1:33912 -> 1.101.0.1:3000 11 1507 1 2025-08-08 22:59:53.174 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35918 10 6452 1 2025-08-08 22:56:08.319 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-08 23:00:17.830 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-08 23:00:18.260 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-08 23:00:09.989 00:00:10.372 TCP 23.104.0.1:40234 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:00:53.396 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55458 10 6452 1 2025-08-08 22:57:08.322 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-08 23:01:10.394 00:00:10.325 TCP 23.104.0.1:45214 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:01:53.615 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58684 10 6452 1 2025-08-08 23:02:10.758 00:00:10.378 TCP 23.104.0.1:48112 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:02:53.830 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58322 10 6452 1 2025-08-08 23:03:11.169 00:00:10.363 TCP 23.104.0.1:33746 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:03:54.072 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35992 10 6452 1 2025-08-08 23:04:11.581 00:00:10.365 TCP 23.104.0.1:46630 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:04:54.293 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41508 10 6452 1 2025-08-08 23:05:18.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-08 23:05:18.303 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-08 23:05:11.991 00:00:10.369 TCP 23.104.0.1:52680 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:05:54.467 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47380 10 6452 1 2025-08-08 23:02:08.320 00:05:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-08 23:06:12.395 00:00:10.324 TCP 23.104.0.1:59434 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:06:54.641 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40502 10 6452 1 2025-08-08 23:03:08.323 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-08 23:07:12.757 00:00:10.378 TCP 23.104.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:07:54.857 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46966 10 6452 1 2025-08-08 23:08:13.175 00:00:10.366 TCP 23.104.0.1:58968 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:08:55.043 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37822 10 6452 1 2025-08-08 23:09:13.580 00:00:10.366 TCP 23.104.0.1:46490 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:09:55.251 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45360 10 6452 1 2025-08-08 23:10:18.395 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-08 23:10:18.306 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-08 23:10:13.983 00:00:10.362 TCP 23.104.0.1:54504 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:10:55.462 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59172 10 6452 1 2025-08-08 23:11:14.388 00:00:10.331 TCP 23.104.0.1:36268 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:11:55.636 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48904 10 6452 1 2025-08-08 23:08:08.322 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-08 23:12:14.762 00:00:10.376 TCP 23.104.0.1:43768 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:12:55.807 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58442 10 6452 1 2025-08-08 23:09:08.324 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-08 23:13:15.177 00:00:10.368 TCP 23.104.0.1:47502 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:13:56.037 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 10 6452 1 2025-08-08 23:14:15.583 00:00:10.364 TCP 23.104.0.1:54794 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:14:56.244 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42122 10 6452 1 2025-08-08 23:15:18.307 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-08 23:15:18.459 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-08 23:15:15.989 00:00:10.326 TCP 23.104.0.1:39774 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:15:56.418 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39368 10 6452 1 2025-08-08 23:16:16.353 00:00:10.370 TCP 23.104.0.1:55538 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:16:56.593 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54724 10 6452 1 2025-08-08 23:17:16.765 00:00:10.378 TCP 23.104.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:17:56.806 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60458 10 6452 1 2025-08-08 23:14:08.324 00:05:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-08 23:18:17.184 00:00:10.373 TCP 23.104.0.1:49690 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:15:08.327 00:05:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-08 23:18:57.040 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53136 10 6452 1 2025-08-08 23:19:17.599 00:00:10.370 TCP 23.104.0.1:56136 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:19:57.250 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42994 10 6452 1 2025-08-08 23:20:18.588 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-08 23:20:18.731 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-08 23:20:18.003 00:00:10.361 TCP 23.104.0.1:55474 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:20:57.468 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36820 10 6452 1 2025-08-08 23:21:18.406 00:00:10.363 TCP 23.104.0.1:33080 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:21:57.643 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48290 10 6452 1 2025-08-08 23:22:18.806 00:00:10.365 TCP 23.104.0.1:57774 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:22:57.855 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37028 10 6452 1 2025-08-08 23:23:19.212 00:00:10.372 TCP 23.104.0.1:59044 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:23:58.080 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38572 10 6452 1 2025-08-08 23:20:08.324 00:05:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-08 23:24:19.625 00:00:10.366 TCP 23.104.0.1:46324 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:21:08.328 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-08 23:24:58.293 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:43270 10 6452 1 2025-08-08 23:25:18.676 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-08 23:25:18.631 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-08 23:25:20.030 00:00:10.372 TCP 23.104.0.1:41904 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:25:58.495 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40990 10 6452 1 2025-08-08 23:26:20.435 00:00:10.332 TCP 23.104.0.1:59560 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:26:58.714 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38788 10 6452 1 2025-08-08 23:27:20.804 00:00:10.339 TCP 23.104.0.1:55068 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:27:58.930 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:33736 10 6452 1 2025-08-08 23:28:21.177 00:00:10.365 TCP 23.104.0.1:59650 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:28:59.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39946 10 6452 1 2025-08-08 23:29:21.578 00:00:10.325 TCP 23.104.0.1:35888 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:29:59.343 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6452 1 2025-08-08 23:26:08.325 00:05:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-08 23:30:18.764 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-08 23:30:18.635 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-08 23:30:21.941 00:00:10.381 TCP 23.104.0.1:40038 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:30:59.516 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49012 10 6452 1 2025-08-08 23:27:08.328 00:05:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-08 23:31:22.354 00:00:10.364 TCP 23.104.0.1:58504 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:31:59.690 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59472 10 6452 1 2025-08-08 23:32:22.757 00:00:10.375 TCP 23.104.0.1:37408 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:32:59.906 00:00:10.528 TCP 1.101.0.1:3000 -> 22.102.0.1:53764 10 6452 1 2025-08-08 23:33:23.163 00:00:10.366 TCP 23.104.0.1:47382 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:34:00.471 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60408 10 6452 1 2025-08-08 23:34:23.569 00:00:10.361 TCP 23.104.0.1:59844 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:35:00.639 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38800 10 6452 1 2025-08-08 23:35:18.732 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-08 23:35:18.834 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-08 23:35:23.971 00:00:10.368 TCP 23.104.0.1:57352 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:36:00.855 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52160 10 6452 1 2025-08-08 23:32:08.329 00:05:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-08 23:36:24.377 00:00:10.368 TCP 23.104.0.1:47616 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:33:08.333 00:05:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-08 23:37:01.086 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44096 10 6452 1 2025-08-08 23:37:24.777 00:00:10.369 TCP 23.104.0.1:44380 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:38:01.300 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49262 10 6452 1 2025-08-08 23:38:25.182 00:00:10.367 TCP 23.104.0.1:57050 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:39:01.519 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:60536 12 10367 1 2025-08-08 23:39:25.585 00:00:10.439 TCP 23.104.0.1:44158 -> 1.101.0.1:3000 15 1926 1 2025-08-08 23:40:01.755 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33032 10 6452 1 2025-08-08 23:40:20.272 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-08 23:40:20.163 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-08 23:40:26.091 00:00:10.362 TCP 23.104.0.1:43520 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:41:01.969 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43944 10 6452 1 2025-08-08 23:41:26.492 00:00:10.371 TCP 23.104.0.1:33544 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:38:08.333 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-08 23:42:02.199 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49390 10 6452 1 2025-08-08 23:42:26.904 00:00:10.370 TCP 23.104.0.1:35676 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:39:08.335 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-08 23:43:02.416 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48440 10 6452 1 2025-08-08 23:43:27.311 00:00:10.366 TCP 23.104.0.1:44410 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:44:02.592 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6452 1 2025-08-08 23:44:27.719 00:00:10.377 TCP 23.104.0.1:60660 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:45:02.807 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39280 10 6452 1 2025-08-08 23:45:18.886 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-08 23:45:18.916 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-08 23:45:28.143 00:00:10.365 TCP 23.104.0.1:50380 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:46:03.035 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52318 10 6452 1 2025-08-08 23:46:28.544 00:00:10.367 TCP 23.104.0.1:41468 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:47:03.261 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37360 10 6452 1 2025-08-08 23:47:28.946 00:00:10.372 TCP 23.104.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:44:08.334 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-08 23:48:03.473 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59022 10 6452 1 2025-08-08 23:48:29.359 00:00:10.348 TCP 23.104.0.1:55802 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:45:08.336 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-08 23:49:03.692 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36192 10 6452 1 2025-08-08 23:49:29.754 00:00:10.347 TCP 23.104.0.1:59080 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:50:03.900 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38664 10 6452 1 2025-08-08 23:50:18.975 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-08 23:50:19.238 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-08 23:50:30.145 00:00:10.326 TCP 23.104.0.1:50672 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:51:04.116 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55700 10 6452 1 2025-08-08 23:51:30.511 00:00:10.371 TCP 23.104.0.1:45718 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:52:04.341 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60376 10 6452 1 2025-08-08 23:52:30.922 00:00:10.391 TCP 23.104.0.1:60328 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:53:04.551 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51876 10 6452 1 2025-08-08 23:53:31.342 00:00:10.315 TCP 23.104.0.1:46214 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:50:08.334 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-08 23:54:04.771 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53852 10 6452 1 2025-08-08 23:54:31.696 00:00:10.368 TCP 23.104.0.1:41728 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:51:08.338 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-08 23:55:04.985 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40056 10 6452 1 2025-08-08 23:55:19.184 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-08 23:55:19.364 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-08 23:55:32.103 00:00:10.364 TCP 23.104.0.1:38946 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:56:05.212 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60420 10 6452 1 2025-08-08 23:56:32.511 00:00:10.374 TCP 23.104.0.1:53388 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:57:05.432 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46932 10 6452 1 2025-08-08 23:57:32.922 00:00:10.395 TCP 23.104.0.1:45094 -> 1.101.0.1:3000 11 1507 1 2025-08-08 23:58:05.645 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51794 10 6452 1 2025-08-08 23:58:33.353 00:00:10.369 TCP 23.104.0.1:52962 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1070, avg pps: 0, avg bpp: 318 Time window: 2025-08-08 22:56:08 - 2025-08-08 23:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0008s Wall: 0.0023s flows/second: 70449.2 Runtime: 0.0023s