Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 16:58:45.130 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-08-20 16:58:51.789 00:00:10.373 TCP 23.104.0.1:33438 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:59:45.357 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57946 10 6452 1 2025-08-20 16:59:52.202 00:00:10.356 TCP 23.104.0.1:51562 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:00:45.527 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36140 10 6452 1 2025-08-20 17:00:57.403 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 17:00:57.274 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 17:00:52.610 00:00:10.364 TCP 23.104.0.1:55808 -> 1.101.0.1:3000 11 1507 1 2025-08-20 16:57:14.065 00:05:00.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 17:01:45.745 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38094 10 6452 1 2025-08-20 17:01:53.012 00:00:10.366 TCP 23.104.0.1:43174 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:02:45.960 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52182 10 6452 1 2025-08-20 17:02:53.412 00:00:10.369 TCP 23.104.0.1:54666 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:03:46.193 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46436 10 6452 1 2025-08-20 17:03:53.823 00:00:10.324 TCP 23.104.0.1:39700 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:00:14.064 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 17:04:46.402 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57682 10 6452 1 2025-08-20 17:04:54.187 00:00:10.376 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:05:46.574 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33404 10 6452 1 2025-08-20 17:05:57.725 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 17:05:57.812 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 17:05:54.618 00:00:10.331 TCP 23.104.0.1:45118 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:06:46.801 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55394 10 6452 1 2025-08-20 17:06:54.985 00:00:10.325 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:03:14.067 00:05:00.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 17:07:47.014 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49932 10 6452 1 2025-08-20 17:07:55.352 00:00:10.366 TCP 23.104.0.1:60466 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:08:47.200 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54752 10 6452 1 2025-08-20 17:08:55.757 00:00:10.448 TCP 23.104.0.1:47268 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:09:47.446 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47392 10 6452 1 2025-08-20 17:09:56.244 00:00:10.321 TCP 23.104.0.1:55030 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:06:14.065 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 17:10:47.671 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56640 10 6452 1 2025-08-20 17:10:57.601 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 17:10:57.739 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 17:10:56.605 00:00:10.367 TCP 23.104.0.1:44840 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:11:47.892 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50486 10 6452 1 2025-08-20 17:11:57.009 00:00:10.419 TCP 23.104.0.1:52046 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:12:48.115 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60048 10 6452 1 2025-08-20 17:12:57.466 00:00:10.320 TCP 23.104.0.1:34238 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:09:14.068 00:05:00.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 17:13:48.338 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45920 10 6452 1 2025-08-20 17:13:57.827 00:00:10.347 TCP 23.104.0.1:35218 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:14:48.558 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39570 10 6452 1 2025-08-20 17:14:58.213 00:00:10.367 TCP 23.104.0.1:58188 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:15:58.028 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 17:15:48.778 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59334 10 6452 1 2025-08-20 17:15:57.952 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 17:15:58.621 00:00:10.358 TCP 23.104.0.1:39916 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:12:14.067 00:05:00.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 17:16:48.998 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39722 10 6452 1 2025-08-20 17:16:59.021 00:00:10.369 TCP 23.104.0.1:33914 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:17:49.219 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46142 10 6452 1 2025-08-20 17:17:59.432 00:00:10.365 TCP 23.104.0.1:36926 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:18:49.435 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32916 10 6452 1 2025-08-20 17:18:59.843 00:00:10.338 TCP 23.104.0.1:52610 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:15:14.071 00:05:00.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 17:19:49.660 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48542 10 6452 1 2025-08-20 17:20:00.222 00:00:10.365 TCP 23.104.0.1:34154 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:20:57.964 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 17:20:57.648 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 17:20:49.894 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43064 10 6452 1 2025-08-20 17:21:00.626 00:00:10.365 TCP 23.104.0.1:33548 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:21:50.110 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58042 10 6452 1 2025-08-20 17:22:01.033 00:00:10.367 TCP 23.104.0.1:59858 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:18:14.068 00:05:00.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 17:22:50.321 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45418 10 6452 1 2025-08-20 17:23:01.442 00:00:10.325 TCP 23.104.0.1:37438 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:23:50.510 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53840 10 6452 1 2025-08-20 17:24:01.808 00:00:10.378 TCP 23.104.0.1:36686 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:24:50.723 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46348 10 6452 1 2025-08-20 17:21:14.073 00:05:00.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 17:25:02.222 00:00:10.364 TCP 23.104.0.1:33442 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:25:57.988 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 17:25:50.940 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:55302 10 6452 1 2025-08-20 17:25:58.050 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 17:26:02.632 00:00:10.328 TCP 23.104.0.1:35088 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:26:51.135 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47398 10 6452 1 2025-08-20 17:27:03.002 00:00:10.324 TCP 23.104.0.1:50612 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:27:51.310 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37148 10 6452 1 2025-08-20 17:24:14.069 00:05:00.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 17:28:03.361 00:00:10.377 TCP 23.104.0.1:52452 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:28:51.528 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52384 10 6452 1 2025-08-20 17:29:03.783 00:00:10.370 TCP 23.104.0.1:37672 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:29:51.742 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38702 10 6452 1 2025-08-20 17:30:04.194 00:00:10.366 TCP 23.104.0.1:56482 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:30:58.182 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 17:30:57.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 17:30:51.913 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:60414 10 6452 1 2025-08-20 17:31:04.595 00:00:10.325 TCP 23.104.0.1:57368 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:27:14.077 00:05:00.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 17:31:52.107 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-08-20 17:32:04.953 00:00:10.369 TCP 23.104.0.1:59718 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:32:52.322 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50366 10 6452 1 2025-08-20 17:33:05.367 00:00:10.526 TCP 23.104.0.1:44874 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:33:52.535 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43480 10 6452 1 2025-08-20 17:30:14.075 00:05:00.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 17:34:05.925 00:00:10.347 TCP 23.104.0.1:54404 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:34:52.709 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50432 10 6452 1 2025-08-20 17:35:06.311 00:00:10.365 TCP 23.104.0.1:32906 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:35:58.333 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 17:35:58.220 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 17:35:52.887 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40090 10 6452 1 2025-08-20 17:36:06.720 00:00:10.381 TCP 23.104.0.1:39654 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:36:53.111 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48518 10 6452 1 2025-08-20 17:33:14.078 00:05:00.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 17:37:07.139 00:00:10.369 TCP 23.104.0.1:42776 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:37:53.330 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33254 10 6452 1 2025-08-20 17:38:07.546 00:00:10.369 TCP 23.104.0.1:54298 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:38:53.543 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55276 10 6452 1 2025-08-20 17:39:07.953 00:00:10.369 TCP 23.104.0.1:47286 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:39:53.785 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34122 10 6452 1 2025-08-20 17:36:14.076 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 17:40:08.359 00:00:10.318 TCP 23.104.0.1:42108 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:40:58.261 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 17:40:58.323 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 17:40:54.004 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38930 10 6452 1 2025-08-20 17:41:08.712 00:00:10.374 TCP 23.104.0.1:56402 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:41:54.227 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55490 10 6452 1 2025-08-20 17:42:09.130 00:00:10.368 TCP 23.104.0.1:53356 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:42:54.445 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41262 10 6452 1 2025-08-20 17:39:14.080 00:05:00.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 17:43:09.538 00:00:10.361 TCP 23.104.0.1:55466 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:43:54.614 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39226 10 6452 1 2025-08-20 17:44:09.935 00:00:10.380 TCP 23.104.0.1:47126 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:44:54.836 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33908 10 6452 1 2025-08-20 17:45:10.355 00:00:10.361 TCP 23.104.0.1:49410 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:45:58.137 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 17:45:58.533 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 17:45:55.089 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49738 10 6452 1 2025-08-20 17:42:14.079 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 17:46:10.757 00:00:10.386 TCP 23.104.0.1:47740 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:46:55.301 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58996 10 6452 1 2025-08-20 17:47:11.176 00:00:10.381 TCP 23.104.0.1:51620 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:47:55.470 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52370 10 6452 1 2025-08-20 17:48:11.602 00:00:10.363 TCP 23.104.0.1:40866 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:48:55.642 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42898 10 6452 1 2025-08-20 17:45:14.082 00:05:00.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 17:49:12.005 00:00:10.364 TCP 23.104.0.1:60948 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:49:55.855 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33726 10 6452 1 2025-08-20 17:50:12.413 00:00:10.363 TCP 23.104.0.1:49218 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:50:58.538 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 17:50:58.413 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 17:50:56.085 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33296 10 6452 1 2025-08-20 17:51:12.820 00:00:10.618 TCP 23.104.0.1:36500 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:51:56.262 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45536 10 6452 1 2025-08-20 17:48:14.079 00:05:00.990 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 17:52:13.478 00:00:10.368 TCP 23.104.0.1:46568 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:52:56.438 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54582 10 6452 1 2025-08-20 17:53:13.885 00:00:10.383 TCP 23.104.0.1:53718 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:53:56.664 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:37676 10 6452 1 2025-08-20 17:54:14.308 00:00:10.361 TCP 23.104.0.1:45554 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:54:56.834 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52568 10 6452 1 2025-08-20 17:51:14.083 00:05:00.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 17:55:14.708 00:00:10.378 TCP 23.104.0.1:33044 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:55:58.467 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 17:55:58.657 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 17:55:57.065 00:00:10.711 TCP 1.101.0.1:3000 -> 22.102.0.1:47376 10 6452 1 2025-08-20 17:56:15.122 00:00:10.371 TCP 23.104.0.1:55396 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:56:57.805 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58004 10 6452 1 2025-08-20 17:57:15.527 00:00:10.363 TCP 23.104.0.1:54672 -> 1.101.0.1:3000 11 1507 1 2025-08-20 17:57:57.972 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57136 10 6452 1 2025-08-20 17:54:14.083 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 17:58:15.932 00:00:10.382 TCP 23.104.0.1:59306 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1071, avg pps: 0, avg bpp: 317 Time window: 2025-08-20 16:57:14 - 2025-08-20 17:59:15 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0019s Wall: 0.0028s flows/second: 58968.4 Runtime: 0.0028s