Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 14:59:26.470 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51118 10 6452 1 2025-08-12 14:59:34.178 00:00:10.368 TCP 23.104.0.1:50362 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:56:10.199 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 15:00:26.681 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54762 10 6452 1 2025-08-12 15:00:34.584 00:00:10.365 TCP 23.104.0.1:43480 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:57:10.201 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 15:01:26.902 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:55086 10 6452 1 2025-08-12 15:01:34.990 00:00:10.363 TCP 23.104.0.1:36872 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:02:04.030 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 15:02:03.864 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 15:02:27.076 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56898 10 6452 1 2025-08-12 15:02:35.390 00:00:10.366 TCP 23.104.0.1:60830 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:03:27.302 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41528 10 6452 1 2025-08-12 15:03:35.795 00:00:10.362 TCP 23.104.0.1:58372 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:04:27.522 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45478 10 6452 1 2025-08-12 15:04:36.205 00:00:10.366 TCP 23.104.0.1:41488 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:05:27.739 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:42456 10 6452 1 2025-08-12 15:05:36.609 00:00:10.365 TCP 23.104.0.1:58004 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:02:10.201 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 15:06:27.997 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43836 10 6452 1 2025-08-12 15:06:37.010 00:00:10.325 TCP 23.104.0.1:59318 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:07:03.899 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 15:07:03.940 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 15:03:10.203 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 15:07:28.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47662 10 6452 1 2025-08-12 15:07:37.372 00:00:10.366 TCP 23.104.0.1:47420 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:08:28.431 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39316 10 6452 1 2025-08-12 15:08:37.773 00:00:10.371 TCP 23.104.0.1:38802 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:09:28.599 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59338 10 6452 1 2025-08-12 15:09:38.190 00:00:10.360 TCP 23.104.0.1:52498 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:10:28.776 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39198 10 6452 1 2025-08-12 15:10:38.586 00:00:10.364 TCP 23.104.0.1:58296 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:11:28.949 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:60312 10 6452 1 2025-08-12 15:11:38.985 00:00:10.324 TCP 23.104.0.1:37988 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:12:04.403 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 15:12:04.331 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 15:08:10.202 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 15:12:29.137 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41310 10 6452 1 2025-08-12 15:12:39.347 00:00:10.362 TCP 23.104.0.1:51104 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:09:10.204 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 15:13:29.361 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34654 10 6452 1 2025-08-12 15:13:39.752 00:00:10.402 TCP 23.104.0.1:45280 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:14:29.572 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49544 10 6452 1 2025-08-12 15:14:40.193 00:00:10.378 TCP 23.104.0.1:52592 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:15:29.788 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44860 10 6452 1 2025-08-12 15:15:40.611 00:00:10.361 TCP 23.104.0.1:52114 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:16:29.962 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:60000 10 6452 1 2025-08-12 15:16:41.019 00:00:10.363 TCP 23.104.0.1:56570 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:17:04.299 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 15:17:04.247 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 15:17:30.144 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56674 10 6452 1 2025-08-12 15:17:41.432 00:00:10.337 TCP 23.104.0.1:32858 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:14:10.204 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 15:18:30.373 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41398 10 6452 1 2025-08-12 15:18:41.813 00:00:10.367 TCP 23.104.0.1:37336 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:15:10.206 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 15:19:30.546 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47462 10 6452 1 2025-08-12 15:19:42.223 00:00:10.363 TCP 23.104.0.1:38508 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:20:30.762 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51074 10 6452 1 2025-08-12 15:20:42.626 00:00:10.365 TCP 23.104.0.1:57234 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:21:30.937 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44886 10 6452 1 2025-08-12 15:21:43.025 00:00:10.365 TCP 23.104.0.1:60488 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:22:04.515 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 15:22:04.450 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 15:22:31.169 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38296 10 6452 1 2025-08-12 15:22:43.426 00:00:10.365 TCP 23.104.0.1:34124 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:23:31.378 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50382 10 6452 1 2025-08-12 15:23:43.827 00:00:10.323 TCP 23.104.0.1:57150 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:20:10.204 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 15:24:31.590 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49488 10 6452 1 2025-08-12 15:24:44.187 00:00:10.369 TCP 23.104.0.1:36338 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:21:10.207 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 15:25:31.807 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33190 10 6452 1 2025-08-12 15:25:44.611 00:00:10.327 TCP 23.104.0.1:57058 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:26:31.981 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39758 10 6452 1 2025-08-12 15:26:44.976 00:00:10.368 TCP 23.104.0.1:53664 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:27:04.635 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 15:27:04.530 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 15:27:32.207 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41368 10 6452 1 2025-08-12 15:27:45.385 00:00:10.372 TCP 23.104.0.1:32916 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:28:32.420 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58458 10 6452 1 2025-08-12 15:28:45.797 00:00:10.365 TCP 23.104.0.1:46676 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:29:32.602 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37738 10 6452 1 2025-08-12 15:29:46.202 00:00:10.370 TCP 23.104.0.1:48040 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:26:10.205 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 15:30:32.815 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49038 10 6452 1 2025-08-12 15:30:46.610 00:00:10.371 TCP 23.104.0.1:34518 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:27:10.209 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 15:31:33.030 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44852 10 6452 1 2025-08-12 15:31:47.020 00:00:10.368 TCP 23.104.0.1:37246 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:32:04.927 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 15:32:04.762 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 15:32:33.249 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53860 10 6452 1 2025-08-12 15:32:47.424 00:00:10.328 TCP 23.104.0.1:53136 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:33:33.457 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56258 10 6452 1 2025-08-12 15:33:47.788 00:00:10.369 TCP 23.104.0.1:45864 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:34:33.668 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53244 10 6452 1 2025-08-12 15:34:48.197 00:00:10.363 TCP 23.104.0.1:53754 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:35:33.879 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39766 10 6452 1 2025-08-12 15:35:48.595 00:00:10.367 TCP 23.104.0.1:47454 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:32:10.209 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 15:36:34.119 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43794 10 6452 1 2025-08-12 15:36:49.001 00:00:10.325 TCP 23.104.0.1:47330 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:37:04.750 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 15:37:04.716 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 15:33:10.211 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 15:37:34.325 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56714 10 6452 1 2025-08-12 15:37:49.363 00:00:10.328 TCP 23.104.0.1:45598 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:38:34.542 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50276 10 6452 1 2025-08-12 15:38:49.728 00:00:11.127 TCP 23.104.0.1:35182 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:39:34.754 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34882 10 6452 1 2025-08-12 15:39:50.921 00:00:10.697 TCP 23.104.0.1:50006 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:40:34.965 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38944 10 6452 1 2025-08-12 15:40:51.658 00:00:10.366 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:41:35.179 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50576 10 6452 1 2025-08-12 15:42:04.574 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 15:42:04.776 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 15:41:52.078 00:00:10.322 TCP 23.104.0.1:33274 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:38:10.209 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 15:42:35.359 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37560 10 6452 1 2025-08-12 15:42:52.437 00:00:10.364 TCP 23.104.0.1:52902 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:39:10.213 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 15:43:35.575 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59832 10 6452 1 2025-08-12 15:43:52.841 00:00:10.390 TCP 23.104.0.1:50160 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:44:35.744 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56338 10 6452 1 2025-08-12 15:44:53.272 00:00:10.323 TCP 23.104.0.1:59916 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:45:35.912 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43738 10 6452 1 2025-08-12 15:45:53.630 00:00:10.381 TCP 23.104.0.1:50716 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:46:36.124 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41188 10 6452 1 2025-08-12 15:46:54.053 00:00:10.364 TCP 23.104.0.1:49298 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:47:04.873 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 15:47:05.131 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 15:47:36.344 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37972 10 6452 1 2025-08-12 15:47:54.459 00:00:10.364 TCP 23.104.0.1:59942 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:44:10.214 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 15:48:36.516 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50200 10 6452 1 2025-08-12 15:48:54.856 00:00:10.336 TCP 23.104.0.1:40316 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:45:10.215 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 15:49:36.726 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55412 10 6452 1 2025-08-12 15:49:55.225 00:00:10.365 TCP 23.104.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:50:36.940 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:39866 10 6452 1 2025-08-12 15:50:55.631 00:00:10.361 TCP 23.104.0.1:45072 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:51:37.183 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40784 10 6452 1 2025-08-12 15:52:04.966 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 15:52:04.743 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 15:51:56.031 00:00:10.322 TCP 23.104.0.1:36714 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:52:37.397 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56790 10 6452 1 2025-08-12 15:52:56.391 00:00:10.362 TCP 23.104.0.1:48426 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:53:37.619 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47872 10 6452 1 2025-08-12 15:53:56.792 00:00:10.370 TCP 23.104.0.1:35794 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:50:10.215 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 15:54:37.789 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36450 10 6452 1 2025-08-12 15:54:57.198 00:00:10.370 TCP 23.104.0.1:52132 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:51:10.217 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 15:55:38.000 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50588 10 6452 1 2025-08-12 15:55:57.605 00:00:10.365 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:56:38.217 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-08-12 15:57:05.136 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 15:57:05.053 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 15:56:58.008 00:00:10.325 TCP 23.104.0.1:48780 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:57:38.394 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50204 10 6452 1 2025-08-12 15:57:58.371 00:00:10.324 TCP 23.104.0.1:45584 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:58:38.612 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54502 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1057, avg pps: 0, avg bpp: 318 Time window: 2025-08-12 14:56:10 - 2025-08-12 15:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0020s Wall: 0.0024s flows/second: 67891.9 Runtime: 0.0024s