Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 00:58:46.537 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53256 10 6452 1 2025-08-23 00:59:29.677 00:00:10.322 TCP 23.104.0.1:41546 -> 1.101.0.1:3000 11 1507 1 2025-08-23 00:59:46.704 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53692 10 6452 1 2025-08-23 01:00:30.054 00:00:10.357 TCP 23.104.0.1:33396 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:00:46.911 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42592 10 6452 1 2025-08-23 01:01:30.449 00:00:10.327 TCP 23.104.0.1:45850 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:01:47.121 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37790 11 6504 1 2025-08-23 01:02:04.943 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 01:02:04.750 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 01:02:30.816 00:00:10.367 TCP 23.104.0.1:51578 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:02:47.352 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50662 10 6452 1 2025-08-23 00:59:15.629 00:05:00.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 01:03:31.220 00:00:10.330 TCP 23.104.0.1:57138 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:03:47.563 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45388 11 6504 1 2025-08-23 01:00:15.627 00:05:00.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 01:04:31.585 00:00:10.367 TCP 23.104.0.1:34108 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:04:47.789 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33772 10 6452 1 2025-08-23 01:05:31.988 00:00:10.373 TCP 23.104.0.1:42722 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:05:48.036 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:45078 10 6452 1 2025-08-23 01:06:32.393 00:00:10.366 TCP 23.104.0.1:45422 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:06:48.304 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58458 10 6452 1 2025-08-23 01:07:05.060 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 01:07:04.985 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 01:07:32.801 00:00:10.363 TCP 23.104.0.1:44290 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:07:48.533 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32934 10 6452 1 2025-08-23 01:08:33.203 00:00:10.362 TCP 23.104.0.1:50550 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:08:48.751 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49398 10 6452 1 2025-08-23 01:05:15.631 00:05:00.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 01:09:33.600 00:00:10.363 TCP 23.104.0.1:32930 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:09:48.973 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:39834 10 6452 1 2025-08-23 01:06:15.628 00:05:00.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 01:10:34.001 00:00:10.321 TCP 23.104.0.1:37406 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:10:49.169 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57790 10 6452 1 2025-08-23 01:11:34.362 00:00:10.362 TCP 23.104.0.1:45322 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:12:04.843 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 01:11:49.382 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34006 10 6452 1 2025-08-23 01:12:05.235 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 01:12:34.762 00:00:10.382 TCP 23.104.0.1:37698 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:12:49.597 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50062 10 6452 1 2025-08-23 01:13:35.180 00:00:10.367 TCP 23.104.0.1:55204 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:13:49.764 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44700 10 6452 1 2025-08-23 01:14:35.583 00:00:10.362 TCP 23.104.0.1:49664 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:14:49.980 00:00:10.558 TCP 1.101.0.1:3000 -> 22.102.0.1:33702 10 6452 1 2025-08-23 01:11:15.635 00:05:00.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 01:15:35.985 00:00:10.424 TCP 23.104.0.1:45494 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:15:50.583 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54054 10 6452 1 2025-08-23 01:12:15.632 00:05:00.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 01:16:36.452 00:00:10.361 TCP 23.104.0.1:44890 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:16:50.794 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50194 11 6492 1 2025-08-23 01:17:05.461 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 01:17:05.450 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 01:17:36.856 00:00:10.386 TCP 23.104.0.1:37900 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:17:51.012 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38606 10 6452 1 2025-08-23 01:18:37.278 00:00:10.369 TCP 23.104.0.1:37736 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:18:51.224 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32854 10 6452 1 2025-08-23 01:19:37.689 00:00:10.362 TCP 23.104.0.1:42736 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:19:51.436 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49246 10 6452 1 2025-08-23 01:20:38.108 00:00:10.356 TCP 23.104.0.1:58862 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:20:51.645 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51376 10 6452 1 2025-08-23 01:17:15.651 00:05:00.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 01:21:38.507 00:00:10.367 TCP 23.104.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:22:05.182 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 01:22:05.471 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 01:21:51.859 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51870 10 6452 1 2025-08-23 01:18:15.648 00:05:00.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 01:22:38.915 00:00:10.376 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:22:52.081 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35398 10 6452 1 2025-08-23 01:23:39.338 00:00:10.365 TCP 23.104.0.1:53710 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:23:52.252 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51418 10 6452 1 2025-08-23 01:24:39.746 00:00:10.366 TCP 23.104.0.1:52808 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:24:52.467 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40682 10 6452 1 2025-08-23 01:25:40.154 00:00:10.526 TCP 23.104.0.1:36184 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:25:52.679 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35150 10 6452 1 2025-08-23 01:26:40.719 00:00:10.378 TCP 23.104.0.1:53290 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:27:05.223 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 01:27:05.414 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 01:26:52.895 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:35892 10 6452 1 2025-08-23 01:23:15.652 00:05:00.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 01:27:41.136 00:00:10.363 TCP 23.104.0.1:57734 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:27:53.092 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59304 10 6452 1 2025-08-23 01:24:15.650 00:05:00.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 01:28:41.541 00:00:10.323 TCP 23.104.0.1:39706 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:28:53.300 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33140 10 6452 1 2025-08-23 01:29:41.906 00:00:10.374 TCP 23.104.0.1:57548 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:29:53.518 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55052 10 6452 1 2025-08-23 01:30:42.318 00:00:10.362 TCP 23.104.0.1:45784 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:30:53.728 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35878 10 6452 1 2025-08-23 01:31:42.722 00:00:10.373 TCP 23.104.0.1:41590 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:31:53.956 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35266 10 6452 1 2025-08-23 01:32:05.525 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 01:32:05.523 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 01:32:43.136 00:00:10.360 TCP 23.104.0.1:47426 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:32:54.178 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46180 10 6452 1 2025-08-23 01:29:15.654 00:05:00.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 01:33:43.535 00:00:10.365 TCP 23.104.0.1:53698 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:33:54.396 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:37056 10 6452 1 2025-08-23 01:30:15.652 00:05:00.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 01:34:43.936 00:00:10.379 TCP 23.104.0.1:40736 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:34:54.582 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-08-23 01:35:44.351 00:00:10.367 TCP 23.104.0.1:56028 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:35:54.793 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59140 10 6452 1 2025-08-23 01:36:44.754 00:00:10.370 TCP 23.104.0.1:41900 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:37:05.713 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 01:36:55.004 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:47316 10 6452 1 2025-08-23 01:37:05.768 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 01:37:45.163 00:00:10.364 TCP 23.104.0.1:50328 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:37:55.187 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37422 10 6452 1 2025-08-23 01:38:45.565 00:00:10.331 TCP 23.104.0.1:47086 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:38:55.409 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33106 10 6452 1 2025-08-23 01:35:15.659 00:05:00.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 01:39:45.926 00:00:10.386 TCP 23.104.0.1:36538 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:39:55.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60610 10 6452 1 2025-08-23 01:36:15.657 00:05:00.578 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 01:40:46.358 00:00:10.363 TCP 23.104.0.1:40828 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:40:55.838 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46340 10 6452 1 2025-08-23 01:41:46.759 00:00:10.375 TCP 23.104.0.1:36270 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:42:05.986 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 01:41:56.077 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50562 10 6452 1 2025-08-23 01:42:05.912 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 01:42:47.173 00:00:10.378 TCP 23.104.0.1:35132 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:42:56.287 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40042 10 6452 1 2025-08-23 01:43:47.584 00:00:10.324 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:43:56.460 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58828 10 6452 1 2025-08-23 01:44:47.950 00:00:10.330 TCP 23.104.0.1:48510 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:44:56.675 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51054 10 6452 1 2025-08-23 01:41:15.661 00:05:00.572 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 01:45:48.317 00:00:10.396 TCP 23.104.0.1:55860 -> 1.101.0.1:3000 15 1926 1 2025-08-23 01:45:56.849 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:53746 12 10367 1 2025-08-23 01:42:15.659 00:05:00.578 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 01:46:48.749 00:00:10.381 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:47:05.922 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 01:47:05.919 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 01:46:57.100 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 10 6452 1 2025-08-23 01:47:49.169 00:00:10.371 TCP 23.104.0.1:59526 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:47:57.315 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33150 10 6452 1 2025-08-23 01:48:49.576 00:00:10.364 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:48:57.485 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45806 10 6452 1 2025-08-23 01:49:49.981 00:00:10.364 TCP 23.104.0.1:55198 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:49:57.698 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48444 10 6452 1 2025-08-23 01:50:50.386 00:00:10.365 TCP 23.104.0.1:38884 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:50:57.912 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:60980 12 10367 1 2025-08-23 01:47:15.662 00:05:00.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 01:51:50.796 00:00:10.444 TCP 23.104.0.1:47642 -> 1.101.0.1:3000 15 1926 1 2025-08-23 01:52:05.946 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 01:52:05.794 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 01:51:58.157 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33964 10 6452 1 2025-08-23 01:48:15.672 00:05:00.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 01:52:51.275 00:00:10.323 TCP 23.104.0.1:59976 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:52:58.329 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57456 10 6452 1 2025-08-23 01:53:51.639 00:00:10.367 TCP 23.104.0.1:53042 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:53:58.544 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60982 10 6452 1 2025-08-23 01:54:52.048 00:00:10.370 TCP 23.104.0.1:33508 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:54:58.758 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51912 10 6452 1 2025-08-23 01:55:52.456 00:00:10.368 TCP 23.104.0.1:39144 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:55:58.975 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:43652 10 6452 1 2025-08-23 01:57:06.838 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 01:57:06.950 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 01:56:52.861 00:00:10.372 TCP 23.104.0.1:42172 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:56:59.223 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56042 10 6452 1 2025-08-23 01:53:15.677 00:05:00.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 01:57:53.273 00:00:10.366 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:57:59.434 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54248 10 6452 1 2025-08-23 01:54:15.674 00:05:00.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 163, total bytes: 505653, total packets: 1576, avg bps: 1114, avg pps: 0, avg bpp: 320 Time window: 2025-08-23 00:58:46 - 2025-08-23 01:59:16 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0027s User: 0.0018s Wall: 0.0044s flows/second: 37281.7 Runtime: 0.0044s