Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 15:59:31.389 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43180 10 6452 1 2025-08-20 15:59:28.308 00:00:10.367 TCP 23.104.0.1:53918 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:55:14.036 00:06:00.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-20 16:00:31.616 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42746 10 6452 1 2025-08-20 16:00:28.712 00:00:10.374 TCP 23.104.0.1:39012 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:00:56.319 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 16:00:56.086 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 16:01:29.125 00:00:10.361 TCP 23.104.0.1:49476 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:01:31.824 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53566 10 6452 1 2025-08-20 16:02:29.532 00:00:10.320 TCP 23.104.0.1:56136 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:02:32.060 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51238 10 6452 1 2025-08-20 16:03:29.890 00:00:10.375 TCP 23.104.0.1:34412 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:03:32.230 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50598 10 6452 1 2025-08-20 15:59:14.043 00:06:00.951 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-20 16:04:30.299 00:00:10.363 TCP 23.104.0.1:49178 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:04:32.400 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39714 10 6452 1 2025-08-20 16:05:30.702 00:00:10.327 TCP 23.104.0.1:43134 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:05:32.572 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51964 10 6452 1 2025-08-20 16:05:56.279 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 16:05:56.257 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 16:06:31.102 00:00:10.364 TCP 23.104.0.1:41682 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:06:32.791 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55162 10 6452 1 2025-08-20 16:02:14.047 00:06:00.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-20 16:07:31.508 00:00:10.362 TCP 23.104.0.1:53282 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:07:33.024 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-08-20 16:08:33.238 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49340 10 6452 1 2025-08-20 16:08:31.910 00:00:10.363 TCP 23.104.0.1:54628 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:09:33.415 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58032 10 6452 1 2025-08-20 16:09:32.314 00:00:10.327 TCP 23.104.0.1:40676 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:06:14.044 00:05:00.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 16:10:32.675 00:00:10.379 TCP 23.104.0.1:40256 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:10:33.633 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39864 10 6452 1 2025-08-20 16:10:56.377 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 16:10:56.409 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 16:11:33.098 00:00:10.366 TCP 23.104.0.1:47720 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:11:33.842 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-08-20 16:12:33.503 00:00:10.368 TCP 23.104.0.1:36244 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:12:34.088 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48472 10 6452 1 2025-08-20 16:09:14.048 00:05:00.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 16:13:33.907 00:00:10.324 TCP 23.104.0.1:45496 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:13:34.306 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45766 10 6452 1 2025-08-20 16:14:34.534 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51936 10 6452 1 2025-08-20 16:14:34.272 00:00:10.320 TCP 23.104.0.1:44014 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:15:34.748 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43452 10 6452 1 2025-08-20 16:15:34.634 00:00:10.366 TCP 23.104.0.1:54474 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:15:56.338 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 16:15:56.437 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 16:12:14.050 00:05:00.953 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 16:16:34.960 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44452 10 6452 1 2025-08-20 16:16:35.036 00:00:10.366 TCP 23.104.0.1:49022 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:17:35.180 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44236 10 6452 1 2025-08-20 16:17:35.440 00:00:10.380 TCP 23.104.0.1:53054 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:18:35.394 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53400 10 6452 1 2025-08-20 16:18:35.863 00:00:10.333 TCP 23.104.0.1:37158 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:15:14.055 00:05:00.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 16:19:36.233 00:00:10.362 TCP 23.104.0.1:57756 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:19:35.609 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39672 10 6452 1 2025-08-20 16:20:35.820 00:00:10.804 TCP 1.101.0.1:3000 -> 22.102.0.1:44744 12 10365 1 2025-08-20 16:20:36.630 00:00:10.440 TCP 23.104.0.1:44270 -> 1.101.0.1:3000 15 1926 1 2025-08-20 16:20:56.720 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 16:20:56.781 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 16:21:36.663 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51360 10 6452 1 2025-08-20 16:21:37.106 00:00:10.373 TCP 23.104.0.1:42940 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:18:14.052 00:05:00.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 16:22:36.878 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33704 10 6452 1 2025-08-20 16:22:37.515 00:00:10.361 TCP 23.104.0.1:54606 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:23:37.097 00:00:10.877 TCP 1.101.0.1:3000 -> 22.102.0.1:42470 10 6452 1 2025-08-20 16:23:37.914 00:00:10.368 TCP 23.104.0.1:50506 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:24:38.014 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41530 10 6452 1 2025-08-20 16:24:38.312 00:00:10.322 TCP 23.104.0.1:58586 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:21:14.055 00:05:00.978 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 16:25:38.669 00:00:10.325 TCP 23.104.0.1:48824 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:25:38.235 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54416 10 6452 1 2025-08-20 16:25:56.750 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 16:25:56.831 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 16:26:39.029 00:00:10.322 TCP 23.104.0.1:52198 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:26:38.405 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43270 10 6452 1 2025-08-20 16:27:39.391 00:00:10.362 TCP 23.104.0.1:59484 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:27:38.576 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34642 10 6452 1 2025-08-20 16:24:14.053 00:05:00.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 16:28:39.791 00:00:10.371 TCP 23.104.0.1:48266 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:28:38.785 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32980 10 6452 1 2025-08-20 16:29:39.001 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:34408 10 6452 1 2025-08-20 16:29:40.198 00:00:10.365 TCP 23.104.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:30:39.183 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49732 10 6452 1 2025-08-20 16:30:40.602 00:00:10.367 TCP 23.104.0.1:33554 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:30:57.482 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 16:30:57.349 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 16:27:14.055 00:05:00.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 16:31:39.399 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45590 10 6452 1 2025-08-20 16:31:41.012 00:00:10.361 TCP 23.104.0.1:58266 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:32:39.608 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47600 10 6452 1 2025-08-20 16:32:41.409 00:00:10.322 TCP 23.104.0.1:58142 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:33:39.823 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42372 10 6452 1 2025-08-20 16:33:41.765 00:00:10.379 TCP 23.104.0.1:44878 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:30:14.053 00:05:00.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 16:34:40.069 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58936 10 6452 1 2025-08-20 16:34:42.183 00:00:10.364 TCP 23.104.0.1:55290 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:35:40.280 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48720 10 6452 1 2025-08-20 16:35:56.973 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 16:35:42.587 00:00:10.376 TCP 23.104.0.1:38306 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:35:57.029 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 16:36:40.453 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35318 10 6452 1 2025-08-20 16:36:43.007 00:00:10.328 TCP 23.104.0.1:60474 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:33:14.056 00:05:00.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 16:37:40.671 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54878 10 6452 1 2025-08-20 16:37:43.372 00:00:10.360 TCP 23.104.0.1:42730 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:38:40.884 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:48714 10 6452 1 2025-08-20 16:38:43.775 00:00:10.384 TCP 23.104.0.1:39084 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:39:41.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49212 10 6452 1 2025-08-20 16:39:44.192 00:00:10.323 TCP 23.104.0.1:58290 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:36:14.055 00:05:00.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 16:40:41.302 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:44424 11 6504 1 2025-08-20 16:40:44.559 00:00:10.370 TCP 23.104.0.1:59432 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:40:56.995 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 16:40:56.991 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 16:41:41.573 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 10 6452 1 2025-08-20 16:41:44.966 00:00:10.338 TCP 23.104.0.1:49868 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:42:41.788 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43334 10 6452 1 2025-08-20 16:42:45.356 00:00:10.365 TCP 23.104.0.1:43406 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:39:14.058 00:05:00.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 16:43:42.005 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57762 10 6452 1 2025-08-20 16:43:45.762 00:00:10.377 TCP 23.104.0.1:44124 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:44:42.211 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38430 10 6452 1 2025-08-20 16:44:46.175 00:00:10.368 TCP 23.104.0.1:52972 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:45:42.421 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35378 10 6452 1 2025-08-20 16:45:46.578 00:00:10.363 TCP 23.104.0.1:34986 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:45:57.242 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 16:45:57.037 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 16:42:14.060 00:05:00.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 16:46:42.633 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40988 10 6452 1 2025-08-20 16:46:46.980 00:00:10.371 TCP 23.104.0.1:49838 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:47:42.843 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37378 10 6452 1 2025-08-20 16:47:47.394 00:00:10.367 TCP 23.104.0.1:37638 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:48:43.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48936 10 6452 1 2025-08-20 16:48:47.799 00:00:10.330 TCP 23.104.0.1:34470 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:45:14.064 00:05:00.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 16:49:43.291 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37264 10 6452 1 2025-08-20 16:49:48.169 00:00:10.371 TCP 23.104.0.1:34028 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:50:43.465 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56520 10 6452 1 2025-08-20 16:50:57.376 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 16:50:48.572 00:00:10.365 TCP 23.104.0.1:47352 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:50:57.186 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 16:51:43.674 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35206 10 6452 1 2025-08-20 16:51:48.975 00:00:10.373 TCP 23.104.0.1:55780 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:48:14.061 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 16:52:43.888 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38104 10 6452 1 2025-08-20 16:52:49.390 00:00:10.368 TCP 23.104.0.1:34388 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:53:44.111 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33680 10 6452 1 2025-08-20 16:53:49.798 00:00:10.338 TCP 23.104.0.1:36574 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:54:44.326 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:58952 10 6452 1 2025-08-20 16:54:50.177 00:00:10.363 TCP 23.104.0.1:34794 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:51:14.064 00:05:00.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 16:55:44.492 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41834 10 6452 1 2025-08-20 16:55:57.405 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 16:55:57.177 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 16:55:50.576 00:00:10.360 TCP 23.104.0.1:58208 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:56:44.704 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44500 10 6452 1 2025-08-20 16:56:50.982 00:00:10.365 TCP 23.104.0.1:37908 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:57:44.921 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49882 10 6452 1 2025-08-20 16:57:51.386 00:00:10.361 TCP 23.104.0.1:45010 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:54:14.062 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 495142, total packets: 1564, avg bps: 1031, avg pps: 0, avg bpp: 316 Time window: 2025-08-20 15:55:14 - 2025-08-20 16:59:15 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0034s User: 0.0011s Wall: 0.0021s flows/second: 75809.1 Runtime: 0.0022s