Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 23:58:54.784 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49280 10 6452 1 2025-08-13 23:59:09.886 00:00:10.382 TCP 23.104.0.1:50172 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:59:54.991 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51422 10 6452 1 2025-08-13 23:56:10.933 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 00:00:10.304 00:00:10.362 TCP 23.104.0.1:42014 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:00:55.212 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53180 10 6452 1 2025-08-13 23:57:10.935 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 00:01:10.741 00:00:10.362 TCP 23.104.0.1:49656 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:01:55.384 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33438 10 6452 1 2025-08-14 00:02:11.143 00:00:10.370 TCP 23.104.0.1:47366 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:02:43.702 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 00:02:43.785 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 00:02:55.611 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47728 10 6452 1 2025-08-14 00:03:11.556 00:00:10.362 TCP 23.104.0.1:41992 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:03:55.827 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36700 10 6452 1 2025-08-14 00:04:11.957 00:00:10.364 TCP 23.104.0.1:34030 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:04:56.067 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39464 10 6452 1 2025-08-14 00:05:12.359 00:00:10.318 TCP 23.104.0.1:46304 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:05:56.281 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37444 10 6452 1 2025-08-14 00:02:10.939 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 00:06:12.720 00:00:10.376 TCP 23.104.0.1:38604 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:06:56.461 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52502 10 6452 1 2025-08-14 00:03:10.942 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 00:07:13.137 00:00:10.362 TCP 23.104.0.1:51418 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:07:43.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 00:07:43.785 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 00:07:56.637 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44220 10 6452 1 2025-08-14 00:08:13.539 00:00:10.461 TCP 23.104.0.1:50430 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:08:56.860 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43554 10 6452 1 2025-08-14 00:09:14.035 00:00:10.363 TCP 23.104.0.1:38646 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:09:57.091 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56922 10 6452 1 2025-08-14 00:10:14.434 00:00:10.366 TCP 23.104.0.1:36850 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:10:57.325 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57624 10 6452 1 2025-08-14 00:11:14.840 00:00:10.394 TCP 23.104.0.1:55560 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:11:57.551 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47918 10 6452 1 2025-08-14 00:08:10.940 00:05:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 00:12:15.269 00:00:10.370 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:12:43.858 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 00:12:43.759 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 00:12:57.762 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44634 10 6452 1 2025-08-14 00:09:10.944 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 00:13:15.674 00:00:10.333 TCP 23.104.0.1:36902 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:13:57.971 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54588 10 6452 1 2025-08-14 00:14:16.055 00:00:10.367 TCP 23.104.0.1:51748 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:14:58.204 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43722 10 6452 1 2025-08-14 00:15:16.460 00:00:10.369 TCP 23.104.0.1:40794 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:15:58.407 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39746 10 6452 1 2025-08-14 00:16:16.869 00:00:10.330 TCP 23.104.0.1:43306 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:16:58.618 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35106 10 6452 1 2025-08-14 00:17:17.234 00:00:10.332 TCP 23.104.0.1:56618 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:17:43.925 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 00:17:44.198 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 00:17:58.788 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37912 10 6452 1 2025-08-14 00:14:10.941 00:05:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 00:18:17.601 00:00:10.368 TCP 23.104.0.1:35606 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:18:58.999 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60198 10 6452 1 2025-08-14 00:15:10.944 00:05:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 00:19:18.014 00:00:10.365 TCP 23.104.0.1:48692 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:19:59.211 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47472 10 6452 1 2025-08-14 00:20:18.413 00:00:10.374 TCP 23.104.0.1:59222 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:20:59.424 00:00:10.412 TCP 1.101.0.1:3000 -> 22.102.0.1:35390 10 6452 1 2025-08-14 00:21:18.831 00:00:10.373 TCP 23.104.0.1:59760 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:21:59.875 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58850 10 6452 1 2025-08-14 00:22:19.243 00:00:10.363 TCP 23.104.0.1:33052 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:22:44.581 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 00:22:44.091 00:00:00.053 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 00:23:00.107 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43594 10 6452 1 2025-08-14 00:23:19.652 00:00:10.328 TCP 23.104.0.1:39246 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:24:00.328 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41358 10 6452 1 2025-08-14 00:20:10.942 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 00:24:20.020 00:00:10.374 TCP 23.104.0.1:44864 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:25:00.546 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35056 10 6452 1 2025-08-14 00:21:10.946 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 00:25:20.433 00:00:10.368 TCP 23.104.0.1:33304 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:26:00.758 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49130 10 6452 1 2025-08-14 00:26:20.833 00:00:10.354 TCP 23.104.0.1:39970 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:27:00.970 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:47280 10 6452 1 2025-08-14 00:27:21.234 00:00:10.333 TCP 23.104.0.1:56434 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:27:44.165 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 00:27:43.992 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 00:28:01.169 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48578 10 6452 1 2025-08-14 00:28:21.626 00:00:10.368 TCP 23.104.0.1:52440 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:29:01.381 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33678 10 6452 1 2025-08-14 00:29:22.029 00:00:10.368 TCP 23.104.0.1:46020 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:30:01.599 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36784 10 6452 1 2025-08-14 00:26:10.947 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 00:30:22.437 00:00:10.372 TCP 23.104.0.1:40586 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:31:01.811 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46350 10 6452 1 2025-08-14 00:27:10.949 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 00:31:22.842 00:00:10.392 TCP 23.104.0.1:50734 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:32:02.027 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38454 10 6452 1 2025-08-14 00:32:23.268 00:00:10.363 TCP 23.104.0.1:55070 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:32:44.311 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 00:32:44.374 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 00:33:02.240 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:49058 10 6452 1 2025-08-14 00:33:23.672 00:00:10.375 TCP 23.104.0.1:33674 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:34:02.430 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:41136 10 6452 1 2025-08-14 00:34:24.105 00:00:10.361 TCP 23.104.0.1:46738 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:35:02.594 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-08-14 00:35:24.509 00:00:10.364 TCP 23.104.0.1:54952 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:32:10.947 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 00:36:02.810 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45042 10 6452 1 2025-08-14 00:36:24.910 00:00:10.368 TCP 23.104.0.1:51900 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:33:10.951 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 00:37:02.993 00:00:11.020 TCP 1.101.0.1:3000 -> 22.102.0.1:34988 10 6452 1 2025-08-14 00:37:25.312 00:00:10.359 TCP 23.104.0.1:47160 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:37:44.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 00:37:44.405 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 00:38:04.080 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34100 12 6556 1 2025-08-14 00:38:25.709 00:00:10.362 TCP 23.104.0.1:36328 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:39:04.293 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46622 10 6452 1 2025-08-14 00:39:26.116 00:00:10.361 TCP 23.104.0.1:39802 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:40:04.511 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44646 10 6452 1 2025-08-14 00:40:26.515 00:00:10.411 TCP 23.104.0.1:46548 -> 1.101.0.1:3000 15 1926 1 2025-08-14 00:41:04.732 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52584 12 10365 1 2025-08-14 00:41:26.964 00:00:10.341 TCP 23.104.0.1:55914 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:38:10.949 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 00:42:04.969 00:00:10.382 TCP 1.101.0.1:3000 -> 22.102.0.1:60080 10 6452 1 2025-08-14 00:42:27.345 00:00:10.365 TCP 23.104.0.1:44536 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:42:44.700 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 00:42:44.645 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 00:43:05.388 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33866 10 6452 1 2025-08-14 00:39:10.951 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 00:43:27.750 00:00:10.323 TCP 23.104.0.1:36418 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:44:05.607 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35634 10 6452 1 2025-08-14 00:44:28.114 00:00:10.366 TCP 23.104.0.1:43784 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:45:05.833 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41420 10 6452 1 2025-08-14 00:45:28.515 00:00:10.324 TCP 23.104.0.1:59748 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:46:06.093 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57110 10 6452 1 2025-08-14 00:46:28.881 00:00:10.391 TCP 23.104.0.1:35046 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:47:06.310 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51218 10 6452 1 2025-08-14 00:47:29.315 00:00:10.361 TCP 23.104.0.1:58442 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:47:44.766 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 00:47:44.490 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 00:44:10.951 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 00:48:06.530 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48574 10 6452 1 2025-08-14 00:48:29.748 00:00:10.348 TCP 23.104.0.1:36600 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:45:10.953 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 00:49:06.705 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52002 10 6452 1 2025-08-14 00:49:30.160 00:00:10.365 TCP 23.104.0.1:59454 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:50:06.921 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39198 10 6452 1 2025-08-14 00:50:30.562 00:00:10.365 TCP 23.104.0.1:46548 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:51:07.099 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51630 10 6452 1 2025-08-14 00:51:30.967 00:00:10.386 TCP 23.104.0.1:55918 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:52:07.314 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48186 10 6452 1 2025-08-14 00:52:31.390 00:00:10.367 TCP 23.104.0.1:44486 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:52:44.561 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 00:52:44.725 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 00:53:07.545 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58754 10 6452 1 2025-08-14 00:53:31.794 00:00:10.346 TCP 23.104.0.1:51692 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:50:10.952 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 00:54:07.766 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40184 10 6452 1 2025-08-14 00:54:32.182 00:00:10.325 TCP 23.104.0.1:44762 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:51:10.954 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 00:55:08.005 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49874 10 6452 1 2025-08-14 00:55:32.547 00:00:10.362 TCP 23.104.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:56:08.225 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36858 10 6452 1 2025-08-14 00:56:32.947 00:00:10.367 TCP 23.104.0.1:37328 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:57:08.453 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60842 10 6452 1 2025-08-14 00:57:44.863 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 00:57:45.064 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 00:57:33.349 00:00:10.328 TCP 23.104.0.1:42850 -> 1.101.0.1:3000 11 1507 1 2025-08-14 00:58:08.675 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34794 10 6452 1 2025-08-14 00:58:33.713 00:00:10.380 TCP 23.104.0.1:45760 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502784, total packets: 1580, avg bps: 1071, avg pps: 0, avg bpp: 318 Time window: 2025-08-13 23:56:10 - 2025-08-14 00:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0020s Wall: 0.0024s flows/second: 68855.4 Runtime: 0.0024s