Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 22:58:53.653 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52556 10 6452 1 2025-08-16 22:59:09.217 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 22:59:09.389 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 22:59:23.955 00:00:10.365 TCP 23.104.0.1:38710 -> 1.101.0.1:3000 11 1507 1 2025-08-16 22:59:53.868 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58110 10 6452 1 2025-08-16 22:56:12.330 00:05:00.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 23:00:24.357 00:00:10.364 TCP 23.104.0.1:36994 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:00:54.086 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54346 10 6452 1 2025-08-16 23:01:24.769 00:00:10.366 TCP 23.104.0.1:57940 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:01:54.261 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60478 10 6452 1 2025-08-16 23:02:25.170 00:00:10.336 TCP 23.104.0.1:49478 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:02:54.472 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54208 10 6452 1 2025-08-16 22:59:12.338 00:05:00.874 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 23:03:25.546 00:00:10.371 TCP 23.104.0.1:53368 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:03:54.651 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47098 10 6452 1 2025-08-16 23:04:09.162 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 23:04:09.286 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 23:04:25.959 00:00:10.365 TCP 23.104.0.1:35772 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:04:54.857 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54940 10 6452 1 2025-08-16 23:05:26.363 00:00:10.320 TCP 23.104.0.1:37456 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:05:55.099 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:45736 10 6452 1 2025-08-16 23:02:12.335 00:05:00.879 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 23:06:26.722 00:00:10.378 TCP 23.104.0.1:35784 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:06:55.291 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:48492 10 6452 1 2025-08-16 23:07:27.132 00:00:10.336 TCP 23.104.0.1:50490 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:07:55.559 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58822 10 6452 1 2025-08-16 23:08:27.511 00:00:10.362 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:08:55.731 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48550 10 6452 1 2025-08-16 23:09:09.320 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 23:09:09.384 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 23:05:12.343 00:05:00.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 23:09:27.914 00:00:10.369 TCP 23.104.0.1:55828 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:09:55.949 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47684 10 6452 1 2025-08-16 23:10:28.325 00:00:10.365 TCP 23.104.0.1:51234 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:10:56.177 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52966 10 6452 1 2025-08-16 23:11:28.729 00:00:10.332 TCP 23.104.0.1:37776 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:11:56.392 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50932 10 6452 1 2025-08-16 23:08:12.336 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 23:12:29.109 00:00:10.361 TCP 23.104.0.1:58962 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:12:56.604 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35954 10 6452 1 2025-08-16 23:13:29.511 00:00:10.367 TCP 23.104.0.1:39850 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:14:09.458 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 23:14:09.266 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 23:13:56.828 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49408 10 6452 1 2025-08-16 23:14:29.919 00:00:10.369 TCP 23.104.0.1:53516 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:14:57.066 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49564 10 6452 1 2025-08-16 23:11:12.340 00:05:00.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 23:15:30.324 00:00:10.381 TCP 23.104.0.1:55528 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:15:57.280 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36162 10 6452 1 2025-08-16 23:16:30.741 00:00:10.368 TCP 23.104.0.1:42400 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:16:57.488 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-08-16 23:17:31.140 00:00:10.367 TCP 23.104.0.1:45278 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:17:57.660 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44418 10 6452 1 2025-08-16 23:14:12.339 00:05:00.879 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 23:18:31.545 00:00:10.326 TCP 23.104.0.1:44356 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:19:09.641 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 23:18:57.880 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42070 10 6452 1 2025-08-16 23:19:09.507 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 23:19:31.903 00:00:10.366 TCP 23.104.0.1:46364 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:19:58.078 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60116 10 6452 1 2025-08-16 23:20:32.302 00:00:10.367 TCP 23.104.0.1:41162 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:20:58.298 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53062 10 6452 1 2025-08-16 23:17:12.343 00:05:00.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 23:21:32.708 00:00:10.367 TCP 23.104.0.1:55246 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:21:58.514 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54910 10 6452 1 2025-08-16 23:22:33.113 00:00:10.366 TCP 23.104.0.1:48968 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:22:58.725 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33390 10 6452 1 2025-08-16 23:23:33.516 00:00:10.374 TCP 23.104.0.1:44588 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:23:58.941 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59812 10 6452 1 2025-08-16 23:24:09.812 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 23:24:09.811 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 23:20:12.341 00:05:00.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 23:24:33.921 00:00:10.345 TCP 23.104.0.1:45064 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:24:59.179 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40510 10 6452 1 2025-08-16 23:25:34.305 00:00:10.321 TCP 23.104.0.1:41458 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:25:59.395 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52766 10 6452 1 2025-08-16 23:26:34.664 00:00:10.365 TCP 23.104.0.1:54422 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:26:59.605 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51314 10 6452 1 2025-08-16 23:23:12.345 00:05:00.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 23:27:35.095 00:00:10.367 TCP 23.104.0.1:60942 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:27:59.783 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48536 10 6452 1 2025-08-16 23:28:35.500 00:00:10.366 TCP 23.104.0.1:52332 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:29:09.737 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 23:29:09.749 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 23:28:59.960 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40668 10 6452 1 2025-08-16 23:29:35.909 00:00:10.368 TCP 23.104.0.1:42678 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:30:00.143 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47396 10 6452 1 2025-08-16 23:26:12.344 00:05:00.879 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 23:30:36.314 00:00:10.364 TCP 23.104.0.1:46562 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:31:00.356 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54864 10 6452 1 2025-08-16 23:31:36.717 00:00:10.367 TCP 23.104.0.1:43086 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:32:00.569 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33290 10 6452 1 2025-08-16 23:32:37.125 00:00:10.373 TCP 23.104.0.1:39028 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:33:00.774 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52172 10 6452 1 2025-08-16 23:29:12.347 00:05:00.874 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 23:33:37.535 00:00:10.366 TCP 23.104.0.1:60548 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:34:09.850 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 23:34:00.990 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42514 10 6452 1 2025-08-16 23:34:09.963 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 23:34:37.939 00:00:10.372 TCP 23.104.0.1:45058 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:35:01.210 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45570 10 6452 1 2025-08-16 23:35:38.352 00:00:10.372 TCP 23.104.0.1:46862 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:36:01.378 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59100 10 6452 1 2025-08-16 23:32:12.347 00:05:00.878 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 23:36:38.760 00:00:10.396 TCP 23.104.0.1:48762 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:37:01.551 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34390 10 6452 1 2025-08-16 23:37:39.202 00:00:10.366 TCP 23.104.0.1:35818 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:38:01.727 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35460 10 6452 1 2025-08-16 23:38:39.610 00:00:10.635 TCP 23.104.0.1:50412 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:39:09.940 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 23:39:10.159 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 23:35:12.350 00:05:00.873 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 23:39:01.944 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:33952 10 6452 1 2025-08-16 23:39:40.280 00:00:10.323 TCP 23.104.0.1:39914 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:40:02.183 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:51092 10 6452 1 2025-08-16 23:40:40.642 00:00:10.390 TCP 23.104.0.1:43718 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:41:02.350 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60174 10 6452 1 2025-08-16 23:41:41.090 00:00:10.369 TCP 23.104.0.1:44826 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:42:02.530 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54258 10 6452 1 2025-08-16 23:38:12.349 00:05:00.877 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 23:42:41.493 00:00:10.364 TCP 23.104.0.1:44904 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:43:02.743 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37282 10 6452 1 2025-08-16 23:43:41.894 00:00:10.378 TCP 23.104.0.1:56758 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:44:09.890 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 23:44:10.065 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 23:44:02.961 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48440 10 6452 1 2025-08-16 23:44:42.309 00:00:10.365 TCP 23.104.0.1:41872 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:41:12.350 00:05:00.872 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 23:45:03.180 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35766 10 6452 1 2025-08-16 23:45:42.711 00:00:10.341 TCP 23.104.0.1:41340 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:46:03.352 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56236 10 6452 1 2025-08-16 23:46:43.100 00:00:10.375 TCP 23.104.0.1:39334 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:47:03.521 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34174 10 6452 1 2025-08-16 23:47:43.510 00:00:10.369 TCP 23.104.0.1:43154 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:44:12.348 00:05:00.877 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 23:48:03.740 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54204 10 6452 1 2025-08-16 23:48:43.915 00:00:10.344 TCP 23.104.0.1:40088 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:49:10.020 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 23:49:10.037 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 23:49:03.953 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34450 10 6452 1 2025-08-16 23:49:44.299 00:00:10.368 TCP 23.104.0.1:58986 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:50:04.178 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48440 10 6452 1 2025-08-16 23:50:44.707 00:00:10.365 TCP 23.104.0.1:34118 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:47:12.352 00:05:00.872 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 23:51:04.390 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57578 10 6452 1 2025-08-16 23:51:45.114 00:00:10.364 TCP 23.104.0.1:51612 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:52:04.601 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42936 10 6452 1 2025-08-16 23:52:45.519 00:00:10.323 TCP 23.104.0.1:45260 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:53:04.813 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38660 10 6452 1 2025-08-16 23:53:45.883 00:00:10.335 TCP 23.104.0.1:38646 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:54:10.107 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 23:54:10.150 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 23:54:04.988 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:37298 10 6452 1 2025-08-16 23:50:12.351 00:05:00.877 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 23:54:46.258 00:00:10.360 TCP 23.104.0.1:58502 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:55:05.193 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35926 10 6452 1 2025-08-16 23:55:46.661 00:00:10.321 TCP 23.104.0.1:60964 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:56:05.407 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40402 10 6452 1 2025-08-16 23:56:47.024 00:00:10.324 TCP 23.104.0.1:49698 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:57:05.581 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53984 10 6452 1 2025-08-16 23:53:12.352 00:05:00.872 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 23:57:47.383 00:00:10.341 TCP 23.104.0.1:42180 -> 1.101.0.1:3000 11 1507 1 2025-08-16 23:58:05.758 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60790 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1067, avg pps: 0, avg bpp: 318 Time window: 2025-08-16 22:56:12 - 2025-08-16 23:58:15 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0014s Wall: 0.0027s flows/second: 61004.0 Runtime: 0.0027s