Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 16:59:07.012 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41492 10 6452 1 2025-08-14 16:59:24.446 00:00:10.364 TCP 23.104.0.1:54394 -> 1.101.0.1:3000 11 1507 1 2025-08-14 16:56:11.277 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 17:00:07.227 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:39724 10 6452 1 2025-08-14 17:00:24.853 00:00:10.378 TCP 23.104.0.1:39544 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:01:07.397 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35204 10 6452 1 2025-08-14 17:01:25.269 00:00:10.367 TCP 23.104.0.1:34408 -> 1.101.0.1:3000 12 1559 1 2025-08-14 17:02:07.611 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:51802 10 6452 1 2025-08-14 17:02:25.672 00:00:10.378 TCP 23.104.0.1:45640 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:03:04.214 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 17:03:03.925 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 17:03:07.778 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:60782 11 6504 1 2025-08-14 17:03:26.124 00:00:10.382 TCP 23.104.0.1:47940 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:00:11.276 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 17:04:08.068 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56570 10 6452 1 2025-08-14 17:04:26.545 00:00:10.328 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:05:08.290 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:55392 12 10367 1 2025-08-14 17:05:26.915 00:00:10.454 TCP 23.104.0.1:37666 -> 1.101.0.1:3000 15 1926 1 2025-08-14 17:02:11.278 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 17:06:08.534 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43578 10 6452 1 2025-08-14 17:06:27.413 00:00:10.363 TCP 23.104.0.1:56186 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:07:08.750 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52022 10 6452 1 2025-08-14 17:07:27.817 00:00:10.329 TCP 23.104.0.1:39784 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:08:04.060 00:00:00.055 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 17:08:04.464 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 17:08:08.967 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:40844 10 6452 1 2025-08-14 17:08:28.180 00:00:10.364 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:09:09.198 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55668 10 6452 1 2025-08-14 17:09:28.586 00:00:10.320 TCP 23.104.0.1:50532 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:06:11.276 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 17:10:09.414 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37448 10 6452 1 2025-08-14 17:10:28.949 00:00:10.371 TCP 23.104.0.1:45138 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:11:09.636 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34982 10 6452 1 2025-08-14 17:11:29.359 00:00:10.366 TCP 23.104.0.1:40196 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:08:11.282 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 17:12:09.852 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58752 10 6452 1 2025-08-14 17:12:29.772 00:00:10.330 TCP 23.104.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:13:04.340 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 17:13:04.688 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 17:13:10.038 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41014 10 6452 1 2025-08-14 17:13:30.136 00:00:10.370 TCP 23.104.0.1:60798 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:14:10.252 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:48548 10 6452 1 2025-08-14 17:14:30.547 00:00:10.325 TCP 23.104.0.1:48526 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:15:10.498 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:55176 12 10365 1 2025-08-14 17:15:30.909 00:00:10.441 TCP 23.104.0.1:47206 -> 1.101.0.1:3000 15 1926 1 2025-08-14 17:12:11.280 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 17:16:10.755 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35436 10 6452 1 2025-08-14 17:16:31.384 00:00:10.370 TCP 23.104.0.1:42598 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:17:10.972 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42616 10 6452 1 2025-08-14 17:17:31.793 00:00:10.365 TCP 23.104.0.1:40500 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:18:04.638 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 17:18:04.462 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 17:14:11.288 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 17:18:11.207 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37670 10 6452 1 2025-08-14 17:18:32.198 00:00:10.373 TCP 23.104.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:19:11.411 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44692 10 6452 1 2025-08-14 17:19:32.610 00:00:10.366 TCP 23.104.0.1:35970 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:20:11.622 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55418 10 6452 1 2025-08-14 17:20:33.013 00:00:10.364 TCP 23.104.0.1:60866 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:21:11.796 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58640 10 6452 1 2025-08-14 17:21:33.417 00:00:10.364 TCP 23.104.0.1:44126 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:18:11.287 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 17:22:12.004 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57294 10 6452 1 2025-08-14 17:22:33.819 00:00:10.364 TCP 23.104.0.1:37236 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:23:04.759 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 17:23:04.682 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 17:23:12.234 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47404 10 6452 1 2025-08-14 17:23:34.219 00:00:10.324 TCP 23.104.0.1:51868 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:20:11.290 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 17:24:12.447 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37114 10 6452 1 2025-08-14 17:24:34.582 00:00:10.362 TCP 23.104.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:25:12.663 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41128 12 6556 1 2025-08-14 17:25:34.980 00:00:10.322 TCP 23.104.0.1:55158 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:26:12.877 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47606 10 6452 1 2025-08-14 17:26:35.343 00:00:10.321 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:27:13.107 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52384 10 6452 1 2025-08-14 17:27:35.705 00:00:10.363 TCP 23.104.0.1:32948 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:28:04.638 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 17:28:04.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 17:24:11.288 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 17:28:13.279 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54708 10 6452 1 2025-08-14 17:28:36.108 00:00:10.361 TCP 23.104.0.1:47524 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:29:13.493 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47206 10 6452 1 2025-08-14 17:29:36.510 00:00:10.367 TCP 23.104.0.1:46168 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:26:11.290 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 17:30:13.673 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37236 10 6452 1 2025-08-14 17:30:36.913 00:00:10.397 TCP 23.104.0.1:45554 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:31:13.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34196 10 6452 1 2025-08-14 17:31:37.354 00:00:10.371 TCP 23.104.0.1:35844 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:32:14.116 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46558 10 6452 1 2025-08-14 17:32:37.776 00:00:10.372 TCP 23.104.0.1:39768 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:33:04.887 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 17:33:04.917 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 17:33:14.327 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43900 10 6452 1 2025-08-14 17:33:38.187 00:00:10.372 TCP 23.104.0.1:34770 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:30:11.288 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 17:34:14.541 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33894 10 6452 1 2025-08-14 17:34:38.597 00:00:10.365 TCP 23.104.0.1:33556 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:35:14.757 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6452 1 2025-08-14 17:35:39.000 00:00:10.367 TCP 23.104.0.1:42152 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:32:11.292 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 17:36:14.969 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41312 10 6452 1 2025-08-14 17:36:39.403 00:00:10.356 TCP 23.104.0.1:60992 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:37:15.148 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41432 10 6452 1 2025-08-14 17:37:39.800 00:00:10.335 TCP 23.104.0.1:48224 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:38:04.969 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 17:38:04.900 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 17:38:15.363 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53362 10 6452 1 2025-08-14 17:38:40.175 00:00:10.369 TCP 23.104.0.1:38972 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:39:15.541 00:00:10.397 TCP 1.101.0.1:3000 -> 22.102.0.1:40596 10 6452 1 2025-08-14 17:39:40.581 00:00:10.367 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:36:11.291 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 17:40:15.979 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:49334 10 6452 1 2025-08-14 17:40:40.989 00:00:10.372 TCP 23.104.0.1:49930 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:41:16.228 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41834 10 6452 1 2025-08-14 17:41:41.397 00:00:10.368 TCP 23.104.0.1:34472 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:38:11.294 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 17:42:16.446 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47096 10 6452 1 2025-08-14 17:42:41.800 00:00:10.370 TCP 23.104.0.1:58408 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:43:04.625 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 17:43:04.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 17:43:16.619 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49748 10 6452 1 2025-08-14 17:43:42.203 00:00:10.369 TCP 23.104.0.1:44356 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:44:16.836 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57434 10 6452 1 2025-08-14 17:44:42.612 00:00:10.368 TCP 23.104.0.1:36922 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:45:17.081 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36670 10 6452 1 2025-08-14 17:45:43.019 00:00:10.326 TCP 23.104.0.1:37522 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:42:11.291 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 17:46:17.255 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42970 10 6452 1 2025-08-14 17:46:43.381 00:00:10.331 TCP 23.104.0.1:50018 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:47:17.466 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56128 10 6452 1 2025-08-14 17:47:43.752 00:00:10.330 TCP 23.104.0.1:33664 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:48:05.169 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 17:48:05.186 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 17:44:11.294 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 17:48:17.639 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51374 10 6452 1 2025-08-14 17:48:44.122 00:00:10.326 TCP 23.104.0.1:39592 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:49:17.848 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36934 10 6452 1 2025-08-14 17:49:44.487 00:00:10.322 TCP 23.104.0.1:39306 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:50:18.071 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:36098 10 6452 1 2025-08-14 17:50:44.847 00:00:10.378 TCP 23.104.0.1:35086 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:51:18.237 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59244 10 6452 1 2025-08-14 17:51:45.264 00:00:10.323 TCP 23.104.0.1:37008 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:48:11.293 00:05:00.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 17:52:18.448 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56428 10 6452 1 2025-08-14 17:52:45.628 00:00:10.369 TCP 23.104.0.1:60232 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:53:05.007 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 17:53:05.178 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 17:53:18.660 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59658 10 6452 1 2025-08-14 17:53:46.064 00:00:10.364 TCP 23.104.0.1:50392 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:50:11.296 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 17:54:18.876 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45964 10 6452 1 2025-08-14 17:54:46.462 00:00:10.363 TCP 23.104.0.1:59544 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:55:19.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56300 10 6452 1 2025-08-14 17:55:46.861 00:00:10.371 TCP 23.104.0.1:38984 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:56:19.313 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57480 10 6452 1 2025-08-14 17:56:47.277 00:00:10.367 TCP 23.104.0.1:46524 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:57:19.524 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:50670 10 6452 1 2025-08-14 17:57:47.679 00:00:10.366 TCP 23.104.0.1:60258 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:58:05.313 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 17:58:05.055 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 17:54:11.292 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 17:58:19.691 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40338 10 6452 1 Summary: total flows: 163, total bytes: 505715, total packets: 1577, avg bps: 1070, avg pps: 0, avg bpp: 320 Time window: 2025-08-14 16:56:11 - 2025-08-14 17:59:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0034s User: 0.0011s Wall: 0.0025s flows/second: 65460.7 Runtime: 0.0025s