Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 04:59:10.485 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45364 10 6452 1 2025-08-09 04:59:36.492 00:00:10.323 TCP 23.104.0.1:53822 -> 1.101.0.1:3000 11 1507 1 2025-08-09 04:56:08.460 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 05:00:10.695 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46834 10 6452 1 2025-08-09 05:00:25.105 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 05:00:25.421 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 05:00:36.855 00:00:10.376 TCP 23.104.0.1:35190 -> 1.101.0.1:3000 11 1507 1 2025-08-09 04:57:08.463 00:05:00.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 05:01:10.909 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-08-09 05:01:37.271 00:00:10.363 TCP 23.104.0.1:50170 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:02:11.125 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51304 10 6452 1 2025-08-09 05:02:37.673 00:00:10.374 TCP 23.104.0.1:48980 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:03:11.343 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48890 10 6452 1 2025-08-09 05:03:38.104 00:00:10.439 TCP 23.104.0.1:50762 -> 1.101.0.1:3000 15 1926 1 2025-08-09 05:04:11.549 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:45660 12 10367 1 2025-08-09 05:04:38.578 00:00:10.373 TCP 23.104.0.1:34986 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:05:11.754 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52036 10 6452 1 2025-08-09 05:05:25.593 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 05:05:25.246 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 05:05:38.992 00:00:10.366 TCP 23.104.0.1:56138 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:02:08.466 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 05:06:11.967 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44598 10 6452 1 2025-08-09 05:06:39.398 00:00:10.322 TCP 23.104.0.1:49364 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:03:08.469 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 05:07:12.198 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51456 10 6452 1 2025-08-09 05:07:39.759 00:00:10.373 TCP 23.104.0.1:42808 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:08:12.414 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:37024 10 6452 1 2025-08-09 05:08:40.168 00:00:10.370 TCP 23.104.0.1:32834 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:09:12.612 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33910 10 6452 1 2025-08-09 05:09:40.574 00:00:10.348 TCP 23.104.0.1:43070 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:10:25.363 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 05:10:12.821 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 10 6452 1 2025-08-09 05:10:25.579 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 05:10:40.964 00:00:10.372 TCP 23.104.0.1:47738 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:11:13.041 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53210 10 6452 1 2025-08-09 05:11:41.382 00:00:10.367 TCP 23.104.0.1:38230 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:08:08.470 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 05:12:13.268 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59298 10 6452 1 2025-08-09 05:12:41.783 00:00:10.362 TCP 23.104.0.1:39380 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:09:08.472 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 05:13:13.506 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60298 10 6452 1 2025-08-09 05:13:42.185 00:00:10.363 TCP 23.104.0.1:43204 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:14:13.721 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39822 10 6452 1 2025-08-09 05:14:42.592 00:00:10.361 TCP 23.104.0.1:43998 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:15:25.812 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 05:15:13.936 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34504 10 6452 1 2025-08-09 05:15:25.749 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 05:15:42.996 00:00:10.326 TCP 23.104.0.1:34660 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:16:14.175 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55618 10 6452 1 2025-08-09 05:16:43.364 00:00:10.361 TCP 23.104.0.1:32976 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:17:14.387 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33054 10 6452 1 2025-08-09 05:17:43.766 00:00:10.372 TCP 23.104.0.1:39860 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:14:08.478 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 05:18:14.563 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51384 10 6452 1 2025-08-09 05:18:44.177 00:00:10.366 TCP 23.104.0.1:34106 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:15:08.481 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 05:19:14.731 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55900 10 6452 1 2025-08-09 05:19:44.585 00:00:10.328 TCP 23.104.0.1:50562 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:20:25.814 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 05:20:14.902 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:45024 10 6452 1 2025-08-09 05:20:26.261 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 05:20:44.955 00:00:10.362 TCP 23.104.0.1:50092 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:21:15.090 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47108 10 6452 1 2025-08-09 05:21:45.357 00:00:10.325 TCP 23.104.0.1:43752 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:22:15.263 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53750 10 6452 1 2025-08-09 05:22:45.718 00:00:10.322 TCP 23.104.0.1:41146 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:23:15.486 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32822 10 6452 1 2025-08-09 05:23:46.103 00:00:10.367 TCP 23.104.0.1:53280 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:20:08.481 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 05:24:15.704 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50846 10 6452 1 2025-08-09 05:24:46.506 00:00:10.364 TCP 23.104.0.1:41876 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:21:08.483 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 05:25:15.914 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47772 10 6452 1 2025-08-09 05:25:26.171 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 05:25:25.799 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 05:25:46.910 00:00:10.368 TCP 23.104.0.1:40564 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:26:16.127 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38100 10 6452 1 2025-08-09 05:26:47.316 00:00:10.366 TCP 23.104.0.1:48688 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:27:16.342 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:33358 10 6452 1 2025-08-09 05:27:47.725 00:00:10.384 TCP 23.104.0.1:40288 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:28:16.512 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41988 10 6452 1 2025-08-09 05:28:48.153 00:00:10.371 TCP 23.104.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:29:16.721 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52878 10 6452 1 2025-08-09 05:29:48.558 00:00:10.326 TCP 23.104.0.1:47958 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:26:08.483 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 05:30:26.193 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 05:30:26.212 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 05:30:16.927 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36874 10 6452 1 2025-08-09 05:30:48.916 00:00:10.325 TCP 23.104.0.1:43516 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:27:08.486 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 05:31:17.149 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38032 10 6452 1 2025-08-09 05:31:49.276 00:00:10.370 TCP 23.104.0.1:51012 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:32:17.362 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48290 10 6452 1 2025-08-09 05:32:49.690 00:00:10.365 TCP 23.104.0.1:33066 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:33:17.572 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49996 10 6452 1 2025-08-09 05:33:50.111 00:00:10.434 TCP 23.104.0.1:57864 -> 1.101.0.1:3000 15 1926 1 2025-08-09 05:34:17.783 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55552 12 10367 1 2025-08-09 05:34:50.582 00:00:10.370 TCP 23.104.0.1:54142 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:35:26.022 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 05:35:26.067 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 05:35:18.031 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60636 10 6452 1 2025-08-09 05:35:50.993 00:00:10.319 TCP 23.104.0.1:53192 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:32:08.484 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 05:36:18.246 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:57006 10 6452 1 2025-08-09 05:36:51.349 00:00:10.367 TCP 23.104.0.1:55210 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:33:08.487 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 05:37:18.412 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46466 10 6452 1 2025-08-09 05:37:51.754 00:00:10.377 TCP 23.104.0.1:45732 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:38:18.637 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36918 10 6452 1 2025-08-09 05:38:52.171 00:00:10.317 TCP 23.104.0.1:56240 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:39:18.809 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40746 10 6452 1 2025-08-09 05:39:52.527 00:00:10.323 TCP 23.104.0.1:36128 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:40:26.284 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 05:40:26.431 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 05:40:18.978 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36172 10 6452 1 2025-08-09 05:40:52.892 00:00:10.380 TCP 23.104.0.1:39702 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:41:19.202 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60638 10 6452 1 2025-08-09 05:41:53.309 00:00:10.364 TCP 23.104.0.1:43550 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:38:08.485 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 05:42:19.375 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53906 10 6452 1 2025-08-09 05:42:53.715 00:00:10.329 TCP 23.104.0.1:60418 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:39:08.487 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 05:43:19.586 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60468 10 6452 1 2025-08-09 05:43:54.106 00:00:10.361 TCP 23.104.0.1:49640 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:44:19.796 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36178 10 6452 1 2025-08-09 05:44:54.509 00:00:10.361 TCP 23.104.0.1:33176 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:45:26.327 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 05:45:26.292 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 05:45:20.007 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42800 10 6452 1 2025-08-09 05:45:54.908 00:00:10.364 TCP 23.104.0.1:39012 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:46:20.216 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43622 10 6452 1 2025-08-09 05:46:55.311 00:00:10.371 TCP 23.104.0.1:59614 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:47:20.431 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53202 10 6452 1 2025-08-09 05:47:55.716 00:00:10.322 TCP 23.104.0.1:49080 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:44:08.488 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 05:48:20.645 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39580 10 6452 1 2025-08-09 05:48:56.099 00:00:10.367 TCP 23.104.0.1:48550 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:45:08.492 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 05:49:20.848 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55958 10 6452 1 2025-08-09 05:49:56.501 00:00:10.365 TCP 23.104.0.1:41540 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:50:26.255 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 05:50:26.513 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 05:50:21.023 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34000 10 6452 1 2025-08-09 05:50:56.912 00:00:10.380 TCP 23.104.0.1:35810 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:51:21.255 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:36444 10 6452 1 2025-08-09 05:51:57.333 00:00:10.329 TCP 23.104.0.1:40776 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:52:21.499 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36150 10 6452 1 2025-08-09 05:52:57.704 00:00:10.362 TCP 23.104.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:53:21.715 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55060 10 6452 1 2025-08-09 05:50:08.492 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 05:53:58.107 00:00:10.364 TCP 23.104.0.1:49662 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:54:21.933 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48690 10 6452 1 2025-08-09 05:51:08.494 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 05:54:58.514 00:00:10.369 TCP 23.104.0.1:42358 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:55:26.938 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 05:55:27.197 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 05:55:22.174 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-08-09 05:55:58.925 00:00:10.352 TCP 23.104.0.1:53816 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:56:22.392 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56578 10 6452 1 2025-08-09 05:56:59.327 00:00:10.373 TCP 23.104.0.1:43534 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:57:22.604 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49478 10 6452 1 2025-08-09 05:57:59.733 00:00:10.373 TCP 23.104.0.1:50230 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:58:22.780 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40116 10 6452 1 Summary: total flows: 163, total bytes: 505509, total packets: 1573, avg bps: 1080, avg pps: 0, avg bpp: 321 Time window: 2025-08-09 04:56:08 - 2025-08-09 05:58:32 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0008s Wall: 0.0023s flows/second: 70409.0 Runtime: 0.0023s