Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 14:59:00.508 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:38628 10 6452 1 2025-08-24 14:59:37.368 00:00:10.361 TCP 23.104.0.1:59336 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:00:00.753 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55836 10 6452 1 2025-08-24 15:00:37.766 00:00:10.368 TCP 23.104.0.1:55736 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:01:00.962 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:38690 12 6556 1 2025-08-24 14:57:16.837 00:05:00.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 15:01:38.173 00:00:10.365 TCP 23.104.0.1:45916 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:02:01.201 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47036 10 6452 1 2025-08-24 14:58:16.836 00:05:00.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 15:02:50.626 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 15:02:38.580 00:00:10.363 TCP 23.104.0.1:53994 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:02:50.655 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 15:03:01.417 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57858 10 6452 1 2025-08-24 15:03:38.981 00:00:10.327 TCP 23.104.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:04:01.631 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39674 10 6452 1 2025-08-24 15:04:39.348 00:00:10.360 TCP 23.104.0.1:35038 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:05:01.801 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48566 10 6452 1 2025-08-24 15:05:39.749 00:00:10.400 TCP 23.104.0.1:49396 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:06:02.053 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33872 10 6452 1 2025-08-24 15:06:40.200 00:00:10.362 TCP 23.104.0.1:33810 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:07:02.292 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60740 10 6452 1 2025-08-24 15:03:16.844 00:05:00.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 15:07:50.697 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 15:07:50.552 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 15:07:40.600 00:00:10.327 TCP 23.104.0.1:49820 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:08:02.469 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50112 10 6452 1 2025-08-24 15:04:16.842 00:05:00.235 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 15:08:40.965 00:00:10.370 TCP 23.104.0.1:44236 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:09:02.688 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40162 10 6452 1 2025-08-24 15:09:41.377 00:00:10.367 TCP 23.104.0.1:50208 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:10:02.906 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33352 10 6452 1 2025-08-24 15:10:41.782 00:00:10.369 TCP 23.104.0.1:37162 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:11:03.122 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46680 10 6452 1 2025-08-24 15:11:42.190 00:00:10.371 TCP 23.104.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:12:03.340 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:55162 10 6452 1 2025-08-24 15:12:50.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 15:12:51.020 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 15:12:42.599 00:00:10.363 TCP 23.104.0.1:51940 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:13:03.587 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41218 10 6452 1 2025-08-24 15:09:16.852 00:05:00.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 15:13:43.000 00:00:10.379 TCP 23.104.0.1:55632 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:14:03.757 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42876 10 6452 1 2025-08-24 15:10:16.850 00:05:00.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 15:14:43.429 00:00:10.366 TCP 23.104.0.1:42938 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:15:03.962 00:00:10.418 TCP 1.101.0.1:3000 -> 22.102.0.1:50098 10 6452 1 2025-08-24 15:15:43.833 00:00:10.392 TCP 23.104.0.1:34798 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:16:04.416 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34900 10 6452 1 2025-08-24 15:16:44.260 00:00:10.368 TCP 23.104.0.1:51664 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:17:04.632 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55120 10 6452 1 2025-08-24 15:17:50.735 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 15:17:50.790 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 15:17:44.665 00:00:10.367 TCP 23.104.0.1:41196 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:18:04.806 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48426 10 6452 1 2025-08-24 15:18:45.105 00:00:10.365 TCP 23.104.0.1:53212 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:19:05.023 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55554 10 6452 1 2025-08-24 15:15:16.853 00:05:00.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 15:19:45.518 00:00:10.321 TCP 23.104.0.1:59864 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:20:05.239 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55804 10 6452 1 2025-08-24 15:16:16.853 00:05:00.228 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 15:20:45.878 00:00:10.365 TCP 23.104.0.1:60920 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:21:05.451 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:59354 10 6452 1 2025-08-24 15:21:46.285 00:00:10.360 TCP 23.104.0.1:41436 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:22:05.744 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-08-24 15:22:50.963 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 15:22:51.046 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 15:22:46.685 00:00:10.372 TCP 23.104.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:23:05.956 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:54098 10 6452 1 2025-08-24 15:23:47.106 00:00:10.361 TCP 23.104.0.1:37644 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:24:06.155 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53178 10 6452 1 2025-08-24 15:24:47.506 00:00:10.364 TCP 23.104.0.1:34608 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:25:06.366 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60626 10 6452 1 2025-08-24 15:21:16.857 00:05:00.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 15:25:47.910 00:00:10.333 TCP 23.104.0.1:37270 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:26:06.582 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55734 10 6452 1 2025-08-24 15:22:16.866 00:05:00.217 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 15:26:48.279 00:00:10.363 TCP 23.104.0.1:41608 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:27:06.757 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48626 10 6452 1 2025-08-24 15:27:51.121 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 15:27:51.072 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 15:27:48.681 00:00:10.364 TCP 23.104.0.1:50412 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:28:06.968 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60804 10 6452 1 2025-08-24 15:28:49.100 00:00:10.365 TCP 23.104.0.1:52358 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:29:07.199 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53170 10 6452 1 2025-08-24 15:29:49.501 00:00:10.414 TCP 23.104.0.1:49582 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:30:07.416 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43324 10 6452 1 2025-08-24 15:30:49.958 00:00:10.365 TCP 23.104.0.1:38654 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:31:07.637 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46916 10 6452 1 2025-08-24 15:27:16.869 00:05:00.215 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 15:31:50.363 00:00:10.369 TCP 23.104.0.1:43058 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:32:07.866 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57950 10 6452 1 2025-08-24 15:28:16.867 00:05:00.219 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 15:32:51.526 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 15:32:51.295 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 15:32:50.778 00:00:10.367 TCP 23.104.0.1:53696 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:33:08.050 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42202 10 6452 1 2025-08-24 15:33:51.181 00:00:10.365 TCP 23.104.0.1:52426 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:34:08.277 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36120 10 6452 1 2025-08-24 15:34:51.592 00:00:10.365 TCP 23.104.0.1:42478 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:35:08.455 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60462 10 6452 1 2025-08-24 15:35:52.002 00:00:10.359 TCP 23.104.0.1:40276 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:36:08.629 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53336 10 6452 1 2025-08-24 15:36:52.405 00:00:10.367 TCP 23.104.0.1:46388 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:37:08.844 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43704 10 6452 1 2025-08-24 15:33:16.871 00:05:00.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 15:37:51.286 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 15:37:51.443 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 15:37:52.829 00:00:10.360 TCP 23.104.0.1:52522 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:38:09.080 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44868 10 6452 1 2025-08-24 15:34:16.869 00:05:00.218 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 15:38:53.224 00:00:10.363 TCP 23.104.0.1:57640 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:39:09.292 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43380 11 6492 1 2025-08-24 15:39:53.628 00:00:10.326 TCP 23.104.0.1:40284 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:40:09.503 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60908 10 6452 1 2025-08-24 15:40:53.996 00:00:10.369 TCP 23.104.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:41:09.718 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:33874 12 10367 1 2025-08-24 15:41:54.406 00:00:10.450 TCP 23.104.0.1:59206 -> 1.101.0.1:3000 15 1926 1 2025-08-24 15:42:09.915 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:57616 10 6452 1 2025-08-24 15:42:51.507 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 15:42:51.467 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 15:42:54.900 00:00:10.370 TCP 23.104.0.1:36044 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:39:16.882 00:05:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 15:43:10.098 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56700 10 6452 1 2025-08-24 15:43:55.313 00:00:10.363 TCP 23.104.0.1:43526 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:40:16.881 00:05:00.207 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 15:44:10.323 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40834 10 6452 1 2025-08-24 15:44:55.716 00:00:10.373 TCP 23.104.0.1:44548 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:45:10.536 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56358 10 6452 1 2025-08-24 15:45:56.136 00:00:10.366 TCP 23.104.0.1:57250 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:46:10.746 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35748 10 6452 1 2025-08-24 15:46:56.542 00:00:10.369 TCP 23.104.0.1:40066 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:47:10.963 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:44952 10 6452 1 2025-08-24 15:47:51.574 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 15:47:51.366 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 15:47:56.958 00:00:10.363 TCP 23.104.0.1:51230 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:48:11.152 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60180 10 6452 1 2025-08-24 15:48:57.361 00:00:10.368 TCP 23.104.0.1:47394 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:45:16.885 00:05:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 15:49:11.334 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47472 10 6452 1 2025-08-24 15:49:57.770 00:00:10.372 TCP 23.104.0.1:47482 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:46:16.884 00:05:00.207 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 15:50:11.544 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50798 10 6452 1 2025-08-24 15:50:58.178 00:00:10.325 TCP 23.104.0.1:41636 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:51:11.770 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46314 10 6452 1 2025-08-24 15:51:58.542 00:00:10.324 TCP 23.104.0.1:40706 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:52:11.989 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33504 10 6452 1 2025-08-24 15:52:51.652 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 15:52:51.638 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 15:52:58.903 00:00:10.369 TCP 23.104.0.1:48078 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:53:12.214 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58170 10 6452 1 2025-08-24 15:53:59.309 00:00:10.368 TCP 23.104.0.1:33610 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:54:12.419 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50254 10 6452 1 2025-08-24 15:54:59.718 00:00:10.372 TCP 23.104.0.1:36552 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:51:16.888 00:05:00.203 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 15:55:12.588 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43222 10 6452 1 2025-08-24 15:56:00.130 00:00:10.323 TCP 23.104.0.1:50330 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:52:16.885 00:05:00.208 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 15:56:12.761 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37014 10 6452 1 2025-08-24 15:57:00.484 00:00:10.366 TCP 23.104.0.1:48522 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:57:12.980 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58390 10 6452 1 2025-08-24 15:57:51.671 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 15:57:51.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 15:58:00.889 00:00:10.370 TCP 23.104.0.1:48296 -> 1.101.0.1:3000 11 1507 1 2025-08-24 15:58:13.219 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43468 10 6452 1 Summary: total flows: 163, total bytes: 501319, total packets: 1570, avg bps: 1093, avg pps: 0, avg bpp: 319 Time window: 2025-08-24 14:57:16 - 2025-08-24 15:58:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0010s Wall: 0.0017s flows/second: 96906.0 Runtime: 0.0017s