Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-30 18:58:42.645 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34344 10 6452 1 2025-08-30 18:55:21.199 00:04:00.309 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 18:59:29.634 00:00:10.371 TCP 23.104.0.1:54466 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:59:42.859 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55218 10 6452 1 2025-08-30 19:00:30.048 00:00:10.363 TCP 23.104.0.1:42530 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:00:48.917 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 19:00:48.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 19:00:43.087 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45704 10 6452 1 2025-08-30 19:00:21.202 00:01:00.307 TCP 179.1.22.22:39396 -> 179.1.22.1:179 4 246 1 2025-08-30 19:01:30.450 00:00:10.370 TCP 23.104.0.1:57734 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:01:43.298 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52064 10 6452 1 2025-08-30 18:58:21.200 00:04:00.312 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 19:02:30.855 00:00:10.335 TCP 23.104.0.1:51386 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:02:43.508 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46098 10 6452 1 2025-08-30 19:03:31.229 00:00:10.372 TCP 23.104.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:03:43.721 00:00:10.371 TCP 1.101.0.1:3000 -> 22.102.0.1:42992 10 6452 1 2025-08-30 19:04:31.639 00:00:10.370 TCP 23.104.0.1:33086 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:04:44.127 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47670 10 6452 1 2025-08-30 19:05:49.213 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 19:05:32.062 00:00:10.363 TCP 23.104.0.1:35980 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:05:49.265 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 19:05:44.342 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34718 10 6452 1 2025-08-30 19:02:21.203 00:04:00.309 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 19:06:32.466 00:00:10.365 TCP 23.104.0.1:42786 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:06:44.561 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44020 10 6452 1 2025-08-30 19:03:21.200 00:04:00.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 19:07:32.872 00:00:10.373 TCP 23.104.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:07:44.782 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58236 10 6452 1 2025-08-30 19:08:33.286 00:00:10.371 TCP 23.104.0.1:49806 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:08:44.998 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50450 10 6452 1 2025-08-30 19:09:33.698 00:00:11.621 TCP 23.104.0.1:49540 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:09:45.212 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:42800 10 6452 1 2025-08-30 19:10:35.372 00:00:10.374 TCP 23.104.0.1:46454 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:10:49.296 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 19:10:49.177 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 19:10:45.391 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46282 10 6452 1 2025-08-30 19:07:21.203 00:04:00.309 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 19:11:35.775 00:00:10.377 TCP 23.104.0.1:44910 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:11:45.609 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35852 10 6452 1 2025-08-30 19:08:21.201 00:04:00.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 19:12:36.191 00:00:10.397 TCP 23.104.0.1:48814 -> 1.101.0.1:3000 15 1926 1 2025-08-30 19:12:45.832 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:44346 12 10367 1 2025-08-30 19:13:36.630 00:00:10.363 TCP 23.104.0.1:40198 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:13:46.092 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37938 10 6452 1 2025-08-30 19:14:37.030 00:00:10.321 TCP 23.104.0.1:37252 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:14:46.315 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:37070 10 6452 1 2025-08-30 19:15:49.709 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 19:15:49.575 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 19:15:37.392 00:00:10.373 TCP 23.104.0.1:51920 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:15:46.524 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38110 10 6452 1 2025-08-30 19:12:21.205 00:04:00.312 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 19:16:37.804 00:00:10.342 TCP 23.104.0.1:54470 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:16:46.749 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43826 10 6452 1 2025-08-30 19:13:21.202 00:04:00.316 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 19:17:38.183 00:00:10.361 TCP 23.104.0.1:33292 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:17:46.967 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:51024 10 6452 1 2025-08-30 19:18:38.583 00:00:10.364 TCP 23.104.0.1:47860 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:18:47.168 00:00:10.719 TCP 1.101.0.1:3000 -> 22.102.0.1:60462 10 6452 1 2025-08-30 19:18:21.203 00:01:00.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 4 246 1 2025-08-30 19:19:38.989 00:00:10.364 TCP 23.104.0.1:33414 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:19:47.929 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:43616 10 6452 1 2025-08-30 19:20:49.480 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 19:20:39.390 00:00:10.362 TCP 23.104.0.1:42194 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:20:49.486 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 19:20:48.126 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38700 10 6452 1 2025-08-30 19:17:21.205 00:04:00.314 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 19:21:39.792 00:00:10.338 TCP 23.104.0.1:49182 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:21:48.338 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59376 10 6452 1 2025-08-30 19:22:40.164 00:00:10.370 TCP 23.104.0.1:52050 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:22:48.508 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56498 10 6452 1 2025-08-30 19:23:40.573 00:00:10.364 TCP 23.104.0.1:50886 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:23:48.720 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45382 10 6452 1 2025-08-30 19:20:21.203 00:04:00.319 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 19:24:40.977 00:00:10.368 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:24:48.927 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60710 10 6452 1 2025-08-30 19:25:49.574 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 19:25:49.474 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 19:25:41.381 00:00:10.370 TCP 23.104.0.1:55706 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:25:49.135 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44658 10 6452 1 2025-08-30 19:22:21.206 00:04:00.314 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 19:26:41.787 00:00:10.319 TCP 23.104.0.1:50190 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:26:49.347 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47462 10 6452 1 2025-08-30 19:27:42.154 00:00:10.363 TCP 23.104.0.1:60338 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:27:49.560 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34140 10 6452 1 2025-08-30 19:28:42.555 00:00:10.320 TCP 23.104.0.1:39940 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:28:49.737 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41296 12 6556 1 2025-08-30 19:25:21.203 00:04:00.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 19:29:42.910 00:00:10.414 TCP 23.104.0.1:57808 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:29:49.952 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34254 10 6452 1 2025-08-30 19:30:49.514 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 19:30:49.710 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 19:30:43.361 00:00:10.363 TCP 23.104.0.1:33066 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:30:50.180 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55976 10 6452 1 2025-08-30 19:27:21.208 00:04:00.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 19:31:43.777 00:00:10.368 TCP 23.104.0.1:44450 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:31:50.402 00:00:24.527 TCP 1.101.0.1:3000 -> 22.102.0.1:40384 10 6452 1 2025-08-30 19:32:44.182 00:00:10.364 TCP 23.104.0.1:48750 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:33:04.969 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:38858 10 6452 1 2025-08-30 19:32:21.208 00:01:00.314 TCP 179.1.22.22:39396 -> 179.1.22.1:179 4 246 1 2025-08-30 19:33:44.580 00:00:10.359 TCP 23.104.0.1:41864 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:34:05.209 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45206 10 6452 1 2025-08-30 19:30:21.206 00:04:00.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 19:34:44.981 00:00:10.369 TCP 23.104.0.1:38670 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:35:05.428 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:47206 10 6452 1 2025-08-30 19:35:49.781 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 19:35:49.724 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 19:35:45.385 00:00:10.371 TCP 23.104.0.1:39504 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:36:05.614 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50792 10 6452 1 2025-08-30 19:36:45.798 00:00:10.365 TCP 23.104.0.1:47892 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:37:05.821 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48034 10 6452 1 2025-08-30 19:37:46.204 00:00:10.450 TCP 23.104.0.1:39332 -> 1.101.0.1:3000 15 1926 1 2025-08-30 19:38:06.043 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 12 10365 1 2025-08-30 19:34:21.210 00:04:00.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 19:38:46.698 00:00:10.350 TCP 23.104.0.1:56030 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:39:06.289 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47968 10 6452 1 2025-08-30 19:35:21.207 00:04:00.321 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 19:39:47.114 00:00:10.365 TCP 23.104.0.1:43848 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:40:06.511 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60734 10 6452 1 2025-08-30 19:40:49.796 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 19:40:49.581 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 19:40:47.520 00:00:10.367 TCP 23.104.0.1:43422 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:41:06.689 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41482 10 6452 1 2025-08-30 19:41:47.931 00:00:10.378 TCP 23.104.0.1:33842 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:42:06.901 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54202 10 6452 1 2025-08-30 19:42:48.342 00:00:10.361 TCP 23.104.0.1:52698 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:43:07.113 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50278 10 6452 1 2025-08-30 19:39:21.210 00:04:00.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 19:43:48.743 00:00:10.366 TCP 23.104.0.1:59562 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:44:07.326 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42448 10 6452 1 2025-08-30 19:40:21.206 00:04:00.334 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 19:44:49.149 00:00:10.362 TCP 23.104.0.1:55302 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:45:07.541 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56912 10 6452 1 2025-08-30 19:45:49.826 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 19:45:49.690 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 19:45:49.550 00:00:10.571 TCP 23.104.0.1:42580 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:46:07.710 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34454 10 6452 1 2025-08-30 19:46:50.158 00:00:10.334 TCP 23.104.0.1:42794 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:47:07.924 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49988 10 6452 1 2025-08-30 19:47:50.530 00:00:10.364 TCP 23.104.0.1:54412 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:48:08.140 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57974 10 6452 1 2025-08-30 19:44:21.215 00:04:00.323 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 19:48:50.934 00:00:10.386 TCP 23.104.0.1:44854 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:49:08.363 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59212 10 6452 1 2025-08-30 19:45:21.215 00:04:00.327 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 19:49:51.356 00:00:10.329 TCP 23.104.0.1:33052 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:50:08.578 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40652 10 6452 1 2025-08-30 19:50:49.885 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 19:50:49.853 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 19:50:51.720 00:00:10.338 TCP 23.104.0.1:46560 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:51:08.791 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60668 10 6452 1 2025-08-30 19:50:21.214 00:01:00.327 TCP 179.1.22.1:179 -> 179.1.22.22:39396 4 246 1 2025-08-30 19:51:52.105 00:00:10.362 TCP 23.104.0.1:54862 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:52:08.961 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49730 10 6452 1 2025-08-30 19:52:52.503 00:00:10.366 TCP 23.104.0.1:45560 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:53:09.190 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50018 10 6452 1 2025-08-30 19:49:21.216 00:04:00.322 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 19:53:52.907 00:00:10.368 TCP 23.104.0.1:55496 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:54:09.437 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56886 10 6452 1 2025-08-30 19:54:53.310 00:00:10.364 TCP 23.104.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:55:09.662 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46246 10 6452 1 2025-08-30 19:55:50.165 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 19:55:50.188 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 19:55:53.712 00:00:10.640 TCP 23.104.0.1:43584 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:52:21.215 00:04:00.328 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 19:56:09.881 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52610 10 6452 1 2025-08-30 19:56:54.390 00:00:10.321 TCP 23.104.0.1:51256 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:57:10.117 00:00:10.787 TCP 1.101.0.1:3000 -> 22.102.0.1:39782 10 6452 1 2025-08-30 19:57:54.750 00:00:10.365 TCP 23.104.0.1:44404 -> 1.101.0.1:3000 11 1507 1 2025-08-30 19:54:21.217 00:04:00.322 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 19:58:10.940 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:56888 10 6452 1 Summary: total flows: 170, total bytes: 505980, total packets: 1581, avg bps: 1070, avg pps: 0, avg bpp: 320 Time window: 2025-08-30 18:55:21 - 2025-08-30 19:58:21 Total flows processed: 170, passed: 170, Blocks skipped: 0, Bytes read: 17744 Sys: 0.0037s User: 0.0007s Wall: 0.0023s flows/second: 74561.5 Runtime: 0.0023s