Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 18:58:51.934 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:49104 10 6452 1 2025-08-24 18:59:19.790 00:00:10.368 TCP 23.104.0.1:33552 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:59:52.168 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56686 10 6452 1 2025-08-24 19:00:20.205 00:00:10.929 TCP 23.104.0.1:45882 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:00:52.338 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34496 10 6452 1 2025-08-24 18:57:16.958 00:05:00.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 19:01:21.181 00:00:10.326 TCP 23.104.0.1:53488 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:01:52.552 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36268 10 6452 1 2025-08-24 18:58:16.955 00:05:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 19:02:21.541 00:00:10.369 TCP 23.104.0.1:48500 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:02:55.506 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 19:02:55.394 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 19:02:52.764 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50224 10 6452 1 2025-08-24 19:03:21.950 00:00:10.330 TCP 23.104.0.1:60010 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:03:52.975 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:39228 10 6452 1 2025-08-24 19:04:22.319 00:00:10.330 TCP 23.104.0.1:39102 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:04:53.174 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44996 10 6452 1 2025-08-24 19:05:22.687 00:00:10.371 TCP 23.104.0.1:35294 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:05:53.388 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:55578 10 6452 1 2025-08-24 19:06:23.129 00:00:10.367 TCP 23.104.0.1:48390 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:06:53.578 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44000 10 6452 1 2025-08-24 19:03:16.960 00:05:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 19:07:23.529 00:00:10.362 TCP 23.104.0.1:55090 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:07:55.429 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 19:07:55.497 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 19:07:53.794 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57208 10 6452 1 2025-08-24 19:04:16.956 00:05:00.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 19:08:23.930 00:00:10.376 TCP 23.104.0.1:55108 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:08:54.015 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50928 10 6452 1 2025-08-24 19:09:24.351 00:00:10.366 TCP 23.104.0.1:59024 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:09:54.229 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34250 10 6452 1 2025-08-24 19:10:24.750 00:00:10.324 TCP 23.104.0.1:53436 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:10:54.445 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40186 10 6452 1 2025-08-24 19:11:25.109 00:00:10.448 TCP 23.104.0.1:53450 -> 1.101.0.1:3000 16 1978 1 2025-08-24 19:11:54.674 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:39184 12 10365 1 2025-08-24 19:12:25.599 00:00:10.327 TCP 23.104.0.1:36536 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:12:55.432 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 19:12:55.509 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 19:12:54.927 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6452 1 2025-08-24 19:09:16.960 00:05:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 19:13:25.967 00:00:10.368 TCP 23.104.0.1:50316 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:13:55.162 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:44742 10 6452 1 2025-08-24 19:10:16.960 00:05:00.199 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 19:14:26.372 00:00:10.365 TCP 23.104.0.1:58194 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:14:55.344 00:00:10.378 TCP 1.101.0.1:3000 -> 22.102.0.1:41630 10 6452 1 2025-08-24 19:15:26.776 00:00:10.370 TCP 23.104.0.1:38660 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:15:55.756 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54426 10 6452 1 2025-08-24 19:16:27.186 00:00:10.365 TCP 23.104.0.1:45310 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:16:55.922 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39900 10 6452 1 2025-08-24 19:17:27.588 00:00:10.369 TCP 23.104.0.1:33728 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:17:55.767 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 19:17:55.857 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 19:17:56.133 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47050 10 6452 1 2025-08-24 19:18:28.000 00:00:10.325 TCP 23.104.0.1:33112 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:18:56.350 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54068 10 6452 1 2025-08-24 19:15:16.962 00:05:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 19:19:28.364 00:00:10.323 TCP 23.104.0.1:33528 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:19:56.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36860 10 6452 1 2025-08-24 19:16:16.960 00:05:00.203 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 19:20:28.717 00:00:10.378 TCP 23.104.0.1:49512 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:20:56.737 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50136 10 6452 1 2025-08-24 19:21:29.134 00:00:10.373 TCP 23.104.0.1:56988 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:21:56.916 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55372 10 6452 1 2025-08-24 19:22:29.535 00:00:10.369 TCP 23.104.0.1:44784 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:22:55.945 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 19:22:55.874 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 19:22:57.126 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41906 10 6452 1 2025-08-24 19:23:29.945 00:00:10.333 TCP 23.104.0.1:40228 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:23:57.300 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40158 10 6452 1 2025-08-24 19:24:30.321 00:00:10.366 TCP 23.104.0.1:53596 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:24:57.508 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57594 10 6452 1 2025-08-24 19:21:16.966 00:05:00.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 19:25:30.733 00:00:10.324 TCP 23.104.0.1:43088 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:25:57.679 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34716 10 6452 1 2025-08-24 19:22:16.971 00:05:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 19:26:31.106 00:00:18.434 TCP 23.104.0.1:40944 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:26:57.888 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47720 10 6452 1 2025-08-24 19:27:56.179 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 19:27:39.577 00:00:10.365 TCP 23.104.0.1:47214 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:27:56.239 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 19:27:58.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38096 10 6452 1 2025-08-24 19:28:39.979 00:00:10.382 TCP 23.104.0.1:57326 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:28:58.293 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57094 10 6452 1 2025-08-24 19:29:40.392 00:00:10.366 TCP 23.104.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:29:58.507 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35366 10 6452 1 2025-08-24 19:30:40.796 00:00:10.348 TCP 23.104.0.1:50250 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:30:58.721 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57082 10 6452 1 2025-08-24 19:27:16.974 00:05:00.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 19:31:41.184 00:00:10.319 TCP 23.104.0.1:39076 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:31:58.942 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:35022 10 6452 1 2025-08-24 19:28:16.973 00:05:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 19:32:41.539 00:00:10.364 TCP 23.104.0.1:58688 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:32:56.322 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 19:32:56.647 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 19:32:59.175 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50120 10 6452 1 2025-08-24 19:33:41.941 00:00:10.377 TCP 23.104.0.1:52582 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:33:59.386 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42260 10 6452 1 2025-08-24 19:34:42.357 00:00:10.364 TCP 23.104.0.1:39220 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:34:59.599 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32886 10 6452 1 2025-08-24 19:35:42.761 00:00:10.378 TCP 23.104.0.1:50292 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:35:59.817 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35774 10 6452 1 2025-08-24 19:36:43.176 00:00:10.321 TCP 23.104.0.1:58712 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:37:00.030 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43852 10 6452 1 2025-08-24 19:33:16.977 00:05:00.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 19:37:56.133 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 19:37:56.079 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 19:37:43.537 00:00:10.358 TCP 23.104.0.1:33868 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:38:00.248 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50268 10 6452 1 2025-08-24 19:34:16.973 00:05:00.196 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 19:38:43.934 00:00:10.380 TCP 23.104.0.1:40738 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:39:00.462 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45282 10 6452 1 2025-08-24 19:39:44.355 00:00:10.363 TCP 23.104.0.1:36770 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:40:00.675 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54548 10 6452 1 2025-08-24 19:40:44.761 00:00:10.383 TCP 23.104.0.1:49168 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:41:00.846 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46792 10 6452 1 2025-08-24 19:41:45.182 00:00:10.366 TCP 23.104.0.1:53302 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:42:01.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53526 10 6452 1 2025-08-24 19:42:56.222 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 19:42:45.585 00:00:10.368 TCP 23.104.0.1:43418 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:42:56.286 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 19:43:01.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45668 10 6452 1 2025-08-24 19:39:16.978 00:05:00.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 19:43:45.987 00:00:10.373 TCP 23.104.0.1:43040 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:44:01.505 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46526 10 6452 1 2025-08-24 19:40:16.976 00:05:00.196 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 19:44:46.400 00:00:10.373 TCP 23.104.0.1:40582 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:45:01.722 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:37674 10 6452 1 2025-08-24 19:45:46.806 00:00:10.337 TCP 23.104.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:46:01.927 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6452 1 2025-08-24 19:46:47.183 00:00:10.362 TCP 23.104.0.1:45640 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:47:02.142 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50638 10 6452 1 2025-08-24 19:47:56.365 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 19:47:56.190 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 19:47:47.585 00:00:10.366 TCP 23.104.0.1:51086 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:48:02.317 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36734 10 6452 1 2025-08-24 19:48:47.989 00:00:10.332 TCP 23.104.0.1:35128 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:49:02.526 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58548 10 6452 1 2025-08-24 19:45:16.979 00:05:00.194 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 19:49:48.363 00:00:10.368 TCP 23.104.0.1:35354 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:50:02.743 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43388 10 6452 1 2025-08-24 19:46:16.976 00:05:00.199 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 19:50:48.771 00:00:10.376 TCP 23.104.0.1:45818 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:51:02.958 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60432 12 6556 1 2025-08-24 19:51:49.185 00:00:10.331 TCP 23.104.0.1:36390 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:52:03.186 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54844 10 6452 1 2025-08-24 19:52:56.415 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 19:52:56.377 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 19:52:49.569 00:00:10.317 TCP 23.104.0.1:49622 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:53:03.398 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35782 10 6452 1 2025-08-24 19:53:49.937 00:00:10.377 TCP 23.104.0.1:60330 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:54:03.616 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60148 10 6452 1 2025-08-24 19:54:50.351 00:00:10.372 TCP 23.104.0.1:44372 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:55:03.828 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51754 10 6452 1 2025-08-24 19:51:16.981 00:05:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 19:55:50.769 00:00:10.373 TCP 23.104.0.1:53022 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:56:04.060 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42760 10 6452 1 2025-08-24 19:52:16.979 00:05:00.199 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 19:56:51.179 00:00:10.366 TCP 23.104.0.1:35408 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:57:04.274 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52398 10 6452 1 2025-08-24 19:57:56.597 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 19:57:56.628 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 19:57:51.583 00:00:10.362 TCP 23.104.0.1:36856 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:58:04.510 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58768 10 6452 1 Summary: total flows: 163, total bytes: 501329, total packets: 1570, avg bps: 1096, avg pps: 0, avg bpp: 319 Time window: 2025-08-24 18:57:16 - 2025-08-24 19:58:14 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0016s Wall: 0.0024s flows/second: 68428.7 Runtime: 0.0024s