Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 14:59:36.760 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43546 10 6452 1 2025-08-14 14:59:36.465 00:00:10.326 TCP 23.104.0.1:47374 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:56:11.242 00:05:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 15:00:36.979 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53192 10 6452 1 2025-08-14 15:00:36.831 00:00:10.371 TCP 23.104.0.1:45814 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:01:37.210 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50288 10 6452 1 2025-08-14 15:01:37.239 00:00:10.361 TCP 23.104.0.1:56088 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:02:37.423 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50056 10 6452 1 2025-08-14 15:02:37.638 00:00:10.324 TCP 23.104.0.1:34860 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:03:01.921 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 15:03:02.029 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 15:03:37.632 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48758 10 6452 1 2025-08-14 15:03:38.006 00:00:10.370 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:00:11.241 00:05:00.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 15:04:38.408 00:00:10.377 TCP 23.104.0.1:39542 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:04:37.806 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34172 10 6452 1 2025-08-14 15:05:38.823 00:00:10.365 TCP 23.104.0.1:53688 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:05:38.031 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44474 10 6452 1 2025-08-14 15:02:11.243 00:05:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 15:06:39.220 00:00:10.365 TCP 23.104.0.1:59890 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:06:38.200 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39610 10 6452 1 2025-08-14 15:07:39.627 00:00:10.383 TCP 23.104.0.1:33104 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:07:38.419 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58372 10 6452 1 2025-08-14 15:08:01.833 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 15:08:01.806 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 15:08:38.596 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37252 10 6452 1 2025-08-14 15:08:40.051 00:00:10.369 TCP 23.104.0.1:42464 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:09:38.808 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58416 10 6452 1 2025-08-14 15:09:40.457 00:00:10.331 TCP 23.104.0.1:40690 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:06:11.243 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 15:10:40.829 00:00:10.393 TCP 23.104.0.1:37168 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:10:39.044 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40106 10 6452 1 2025-08-14 15:11:39.254 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35852 10 6452 1 2025-08-14 15:11:41.260 00:00:10.369 TCP 23.104.0.1:39932 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:08:11.245 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 15:12:39.426 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35578 10 6452 1 2025-08-14 15:12:41.669 00:00:10.331 TCP 23.104.0.1:36254 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:13:01.829 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 15:13:01.845 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 15:13:39.642 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55386 10 6452 1 2025-08-14 15:13:42.046 00:00:10.375 TCP 23.104.0.1:42424 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:14:39.855 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46854 10 6452 1 2025-08-14 15:14:42.456 00:00:10.371 TCP 23.104.0.1:45064 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:15:40.028 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48256 10 6452 1 2025-08-14 15:15:42.869 00:00:10.366 TCP 23.104.0.1:53682 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:12:11.242 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 15:16:40.197 00:00:10.633 TCP 1.101.0.1:3000 -> 22.102.0.1:60332 10 6452 1 2025-08-14 15:16:43.280 00:00:10.326 TCP 23.104.0.1:60808 -> 1.101.0.1:3000 12 1559 1 2025-08-14 15:17:40.870 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37812 10 6452 1 2025-08-14 15:17:43.646 00:00:10.366 TCP 23.104.0.1:47080 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:18:01.929 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 15:18:02.067 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 15:14:11.246 00:05:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 15:18:41.094 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51780 10 6452 1 2025-08-14 15:18:44.058 00:00:10.328 TCP 23.104.0.1:50050 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:19:41.268 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49500 10 6452 1 2025-08-14 15:19:44.422 00:00:10.658 TCP 23.104.0.1:36824 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:20:41.487 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:42234 12 10367 1 2025-08-14 15:20:45.114 00:00:10.440 TCP 23.104.0.1:37724 -> 1.101.0.1:3000 15 1926 1 2025-08-14 15:21:41.688 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46608 10 6452 1 2025-08-14 15:21:45.596 00:00:10.363 TCP 23.104.0.1:44888 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:18:11.246 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 15:22:41.858 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56452 10 6452 1 2025-08-14 15:22:45.998 00:00:10.361 TCP 23.104.0.1:33604 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:23:02.376 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 15:23:02.183 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 15:23:46.399 00:00:10.363 TCP 23.104.0.1:49254 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:23:42.093 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50904 10 6452 1 2025-08-14 15:20:11.247 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 15:24:42.309 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50248 10 6452 1 2025-08-14 15:24:46.800 00:00:10.371 TCP 23.104.0.1:34304 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:25:42.529 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42060 12 10365 1 2025-08-14 15:25:47.206 00:00:10.448 TCP 23.104.0.1:45012 -> 1.101.0.1:3000 15 1926 1 2025-08-14 15:26:42.769 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33138 10 6452 1 2025-08-14 15:26:47.691 00:00:10.366 TCP 23.104.0.1:35332 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:27:42.988 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41192 10 6452 1 2025-08-14 15:27:48.107 00:00:10.367 TCP 23.104.0.1:56546 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:28:02.360 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 15:28:02.486 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 15:24:11.245 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 15:28:43.216 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39088 10 6452 1 2025-08-14 15:28:48.518 00:00:10.364 TCP 23.104.0.1:48486 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:29:43.433 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57982 10 6452 1 2025-08-14 15:29:48.921 00:00:10.379 TCP 23.104.0.1:52864 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:26:11.247 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 15:30:43.641 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42558 10 6452 1 2025-08-14 15:30:49.334 00:00:10.366 TCP 23.104.0.1:47252 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:31:43.817 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60662 10 6452 1 2025-08-14 15:31:49.741 00:00:10.527 TCP 23.104.0.1:46886 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:32:44.042 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35568 10 6452 1 2025-08-14 15:32:50.305 00:00:10.363 TCP 23.104.0.1:33764 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:33:02.409 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 15:33:02.264 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 15:33:44.267 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36654 10 6452 1 2025-08-14 15:33:50.705 00:00:10.371 TCP 23.104.0.1:41172 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:30:11.247 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 15:34:44.443 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44610 10 6452 1 2025-08-14 15:34:51.112 00:00:10.363 TCP 23.104.0.1:55154 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:35:44.671 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50882 10 6452 1 2025-08-14 15:35:51.510 00:00:10.366 TCP 23.104.0.1:57758 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:32:11.250 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 15:36:44.899 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46992 10 6452 1 2025-08-14 15:36:51.916 00:00:10.330 TCP 23.104.0.1:56602 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:37:45.119 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42258 10 6452 1 2025-08-14 15:38:02.227 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 15:37:52.289 00:00:10.364 TCP 23.104.0.1:60942 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:38:02.478 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 15:38:45.329 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34218 10 6452 1 2025-08-14 15:38:52.692 00:00:10.364 TCP 23.104.0.1:33032 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:39:45.540 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:41858 10 6452 1 2025-08-14 15:39:53.107 00:00:10.330 TCP 23.104.0.1:57382 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:36:11.249 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 15:40:45.814 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49900 10 6452 1 2025-08-14 15:40:53.474 00:00:10.371 TCP 23.104.0.1:48750 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:41:46.041 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37544 10 6452 1 2025-08-14 15:41:53.890 00:00:10.333 TCP 23.104.0.1:53234 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:38:11.250 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 15:42:46.250 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39420 10 6452 1 2025-08-14 15:43:02.333 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 15:42:54.265 00:00:10.343 TCP 23.104.0.1:33464 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:43:02.625 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 15:43:46.473 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59450 10 6452 1 2025-08-14 15:43:54.648 00:00:10.340 TCP 23.104.0.1:43462 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:44:46.687 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39242 10 6452 1 2025-08-14 15:44:55.028 00:00:10.367 TCP 23.104.0.1:44502 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:45:46.899 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:35270 11 6504 1 2025-08-14 15:45:55.433 00:00:10.365 TCP 23.104.0.1:51446 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:42:11.249 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 15:46:47.153 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42430 10 6452 1 2025-08-14 15:46:55.834 00:00:10.389 TCP 23.104.0.1:49828 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:47:47.370 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60956 10 6452 1 2025-08-14 15:48:03.032 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 15:47:56.258 00:00:10.322 TCP 23.104.0.1:34186 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:48:03.659 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 15:44:11.252 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 15:48:47.579 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52820 10 6452 1 2025-08-14 15:48:56.617 00:00:10.361 TCP 23.104.0.1:48626 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:49:47.792 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52200 10 6452 1 2025-08-14 15:49:57.021 00:00:10.364 TCP 23.104.0.1:47374 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:50:47.961 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49288 10 6452 1 2025-08-14 15:50:57.429 00:00:10.369 TCP 23.104.0.1:45212 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:51:48.189 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55400 10 6452 1 2025-08-14 15:51:57.837 00:00:10.392 TCP 23.104.0.1:53936 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:48:11.251 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 15:52:48.402 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53222 10 6452 1 2025-08-14 15:53:02.743 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 15:53:02.888 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 15:52:58.267 00:00:10.363 TCP 23.104.0.1:50608 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:53:48.618 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45348 10 6452 1 2025-08-14 15:53:58.667 00:00:10.372 TCP 23.104.0.1:55970 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:50:11.254 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 15:54:48.834 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41580 10 6452 1 2025-08-14 15:54:59.106 00:00:10.330 TCP 23.104.0.1:41884 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:55:49.071 00:00:10.466 TCP 1.101.0.1:3000 -> 22.102.0.1:45306 10 6452 1 2025-08-14 15:55:59.472 00:00:10.323 TCP 23.104.0.1:40698 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:56:49.580 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56272 10 6452 1 2025-08-14 15:56:59.835 00:00:10.398 TCP 23.104.0.1:59480 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:57:49.796 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59600 10 6452 1 2025-08-14 15:58:02.797 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 15:58:02.994 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 15:58:00.271 00:00:10.361 TCP 23.104.0.1:55244 -> 1.101.0.1:3000 11 1507 1 2025-08-14 15:54:11.254 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 499159, total packets: 1565, avg bps: 1056, avg pps: 0, avg bpp: 318 Time window: 2025-08-14 14:56:11 - 2025-08-14 15:59:12 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0035s User: 0.0009s Wall: 0.0021s flows/second: 76345.8 Runtime: 0.0021s