Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 11:59:15.227 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35148 10 6452 1 2025-08-13 11:59:28.388 00:00:10.365 TCP 23.104.0.1:34042 -> 1.101.0.1:3000 11 1507 1 2025-08-13 11:56:10.672 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 12:00:15.403 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40994 10 6452 1 2025-08-13 12:00:28.793 00:00:10.362 TCP 23.104.0.1:45574 -> 1.101.0.1:3000 11 1507 1 2025-08-13 11:57:10.674 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 12:01:15.624 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46456 10 6452 1 2025-08-13 12:01:29.194 00:00:10.369 TCP 23.104.0.1:55172 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:02:15.836 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32996 10 6452 1 2025-08-13 12:02:29.399 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 12:02:29.155 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 12:02:29.596 00:00:10.359 TCP 23.104.0.1:50592 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:03:16.074 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37268 10 6452 1 2025-08-13 12:03:29.995 00:00:10.366 TCP 23.104.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:04:16.244 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56574 10 6452 1 2025-08-13 12:04:30.400 00:00:10.366 TCP 23.104.0.1:36902 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:05:16.459 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60272 10 6452 1 2025-08-13 12:05:30.812 00:00:10.423 TCP 23.104.0.1:53286 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:02:10.677 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 12:06:16.677 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48412 10 6452 1 2025-08-13 12:06:31.310 00:00:10.367 TCP 23.104.0.1:56058 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:03:10.680 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 12:07:29.403 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 12:07:16.889 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57282 10 6452 1 2025-08-13 12:07:29.325 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 12:07:31.721 00:00:10.366 TCP 23.104.0.1:41542 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:08:17.086 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33554 10 6452 1 2025-08-13 12:08:32.129 00:00:10.364 TCP 23.104.0.1:35534 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:09:17.263 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35670 10 6452 1 2025-08-13 12:09:32.527 00:00:10.364 TCP 23.104.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:10:17.446 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47786 10 6452 1 2025-08-13 12:10:32.930 00:00:10.380 TCP 23.104.0.1:34614 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:11:17.620 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46084 10 6452 1 2025-08-13 12:11:33.351 00:00:10.361 TCP 23.104.0.1:40274 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:08:10.679 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 12:12:29.314 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 12:12:17.833 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35374 10 6452 1 2025-08-13 12:12:29.450 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 12:12:33.752 00:00:10.368 TCP 23.104.0.1:45134 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:09:10.681 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 12:13:18.066 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59520 10 6452 1 2025-08-13 12:13:34.157 00:00:10.364 TCP 23.104.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:14:18.278 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43402 10 6452 1 2025-08-13 12:14:34.557 00:00:10.366 TCP 23.104.0.1:50462 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:15:18.452 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48548 10 6452 1 2025-08-13 12:15:34.960 00:00:10.366 TCP 23.104.0.1:43350 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:16:18.687 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57170 10 6452 1 2025-08-13 12:16:35.362 00:00:10.364 TCP 23.104.0.1:57774 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:17:29.578 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 12:17:18.897 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:60132 10 6452 1 2025-08-13 12:17:29.715 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 12:17:35.763 00:00:10.368 TCP 23.104.0.1:56138 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:14:10.679 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 12:18:19.092 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46218 10 6452 1 2025-08-13 12:18:36.170 00:00:10.367 TCP 23.104.0.1:38012 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:15:10.683 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 12:19:19.268 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46592 10 6452 1 2025-08-13 12:19:36.575 00:00:10.364 TCP 23.104.0.1:45754 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:20:19.490 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37032 10 6452 1 2025-08-13 12:20:36.976 00:00:10.368 TCP 23.104.0.1:33810 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:21:19.714 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39838 10 6452 1 2025-08-13 12:21:37.384 00:00:10.341 TCP 23.104.0.1:49514 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:22:29.724 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 12:22:19.889 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46256 10 6452 1 2025-08-13 12:22:29.479 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 12:22:37.767 00:00:10.376 TCP 23.104.0.1:38544 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:23:20.101 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39358 10 6452 1 2025-08-13 12:23:38.183 00:00:10.361 TCP 23.104.0.1:48014 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:20:10.680 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 12:24:20.316 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37580 10 6452 1 2025-08-13 12:24:38.590 00:00:10.371 TCP 23.104.0.1:35920 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:21:10.683 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 12:25:20.489 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39248 10 6452 1 2025-08-13 12:25:39.002 00:00:10.359 TCP 23.104.0.1:43634 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:26:20.698 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33042 10 6452 1 2025-08-13 12:26:39.408 00:00:10.323 TCP 23.104.0.1:47104 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:27:29.794 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 12:27:29.817 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 12:27:20.915 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55776 10 6452 1 2025-08-13 12:27:39.771 00:00:10.360 TCP 23.104.0.1:44310 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:28:21.126 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49536 10 6452 1 2025-08-13 12:28:40.170 00:00:10.371 TCP 23.104.0.1:54012 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:29:21.296 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39578 10 6452 1 2025-08-13 12:29:40.581 00:00:10.363 TCP 23.104.0.1:40256 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:26:10.689 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 12:30:21.511 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39020 10 6452 1 2025-08-13 12:30:40.981 00:00:15.587 TCP 23.104.0.1:47982 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:27:10.691 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 12:31:21.724 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48278 10 6452 1 2025-08-13 12:31:46.628 00:00:10.329 TCP 23.104.0.1:46232 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:32:29.892 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 12:32:29.809 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 12:32:21.954 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:55808 10 6452 1 2025-08-13 12:32:46.992 00:00:10.362 TCP 23.104.0.1:44430 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:33:22.204 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50954 10 6452 1 2025-08-13 12:33:47.400 00:00:10.319 TCP 23.104.0.1:59302 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:34:22.465 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51542 10 6452 1 2025-08-13 12:34:47.756 00:00:10.383 TCP 23.104.0.1:39568 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:35:22.685 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43212 10 6452 1 2025-08-13 12:35:48.185 00:00:10.325 TCP 23.104.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:32:10.690 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 12:36:22.858 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57762 10 6452 1 2025-08-13 12:36:48.553 00:00:10.360 TCP 23.104.0.1:56346 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:33:10.693 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 12:37:30.179 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 12:37:30.028 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 12:37:23.091 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35692 10 6452 1 2025-08-13 12:37:48.950 00:00:10.322 TCP 23.104.0.1:34498 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:38:23.308 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54586 10 6452 1 2025-08-13 12:38:49.311 00:00:10.362 TCP 23.104.0.1:41460 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:39:23.525 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43526 10 6452 1 2025-08-13 12:39:49.713 00:00:10.375 TCP 23.104.0.1:60172 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:40:23.693 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56122 10 6452 1 2025-08-13 12:40:50.128 00:00:10.366 TCP 23.104.0.1:54724 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:41:23.904 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59726 10 6452 1 2025-08-13 12:41:50.533 00:00:10.366 TCP 23.104.0.1:44744 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:38:10.690 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 12:42:30.122 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 12:42:30.169 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 12:42:24.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45502 10 6452 1 2025-08-13 12:42:50.932 00:00:10.382 TCP 23.104.0.1:33820 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:39:10.694 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 12:43:24.332 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57918 10 6452 1 2025-08-13 12:43:51.352 00:00:10.364 TCP 23.104.0.1:47946 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:44:24.544 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41512 10 6452 1 2025-08-13 12:44:51.755 00:00:10.382 TCP 23.104.0.1:48958 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:45:24.756 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53628 10 6452 1 2025-08-13 12:45:52.196 00:00:10.321 TCP 23.104.0.1:36442 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:46:24.931 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:59506 10 6452 1 2025-08-13 12:46:52.560 00:00:10.360 TCP 23.104.0.1:55430 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:47:30.190 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 12:47:30.300 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 12:47:25.173 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49318 10 6452 1 2025-08-13 12:47:52.963 00:00:10.325 TCP 23.104.0.1:48780 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:44:10.692 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 12:48:25.360 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54214 10 6452 1 2025-08-13 12:48:53.330 00:00:10.327 TCP 23.104.0.1:53054 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:45:10.695 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 12:49:25.531 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54218 10 6452 1 2025-08-13 12:49:53.697 00:00:10.444 TCP 23.104.0.1:53254 -> 1.101.0.1:3000 15 1926 1 2025-08-13 12:50:25.747 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52578 12 10367 1 2025-08-13 12:50:54.180 00:00:10.361 TCP 23.104.0.1:42586 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:51:25.988 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59510 10 6452 1 2025-08-13 12:51:54.576 00:00:10.361 TCP 23.104.0.1:49802 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:52:30.321 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 12:52:30.227 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 12:52:26.215 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44142 10 6452 1 2025-08-13 12:52:54.980 00:00:10.345 TCP 23.104.0.1:36474 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:53:26.388 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:45840 10 6452 1 2025-08-13 12:53:55.399 00:00:10.327 TCP 23.104.0.1:53324 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:50:10.694 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 12:54:26.581 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33088 10 6452 1 2025-08-13 12:54:55.771 00:00:10.368 TCP 23.104.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:51:10.696 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 12:55:26.800 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49444 10 6452 1 2025-08-13 12:55:56.180 00:00:10.362 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:56:26.984 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41208 10 6452 1 2025-08-13 12:56:56.581 00:00:10.364 TCP 23.104.0.1:51832 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:57:30.644 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 12:57:30.701 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 12:57:27.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60534 10 6452 1 2025-08-13 12:57:56.979 00:00:10.331 TCP 23.104.0.1:56698 -> 1.101.0.1:3000 11 1507 1 2025-08-13 12:58:27.421 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48966 10 6452 1 Summary: total flows: 163, total bytes: 501175, total packets: 1567, avg bps: 1070, avg pps: 0, avg bpp: 319 Time window: 2025-08-13 11:56:10 - 2025-08-13 12:58:37 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0011s Wall: 0.0037s flows/second: 44559.2 Runtime: 0.0037s