Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 18:59:12.007 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41974 10 6452 1 2025-08-20 18:59:40.411 00:00:10.366 TCP 23.104.0.1:34076 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:00:12.223 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41318 10 6452 1 2025-08-20 19:00:40.821 00:00:10.359 TCP 23.104.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:00:59.784 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 19:00:59.950 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 18:57:14.094 00:05:00.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 19:01:12.397 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41790 10 6452 1 2025-08-20 19:01:41.214 00:00:10.364 TCP 23.104.0.1:44206 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:02:12.607 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41118 10 6452 1 2025-08-20 19:02:41.615 00:00:10.364 TCP 23.104.0.1:42854 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:03:12.778 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46770 10 6452 1 2025-08-20 19:03:42.016 00:00:10.364 TCP 23.104.0.1:37542 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:00:14.093 00:05:00.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 19:04:12.992 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43634 10 6452 1 2025-08-20 19:04:42.418 00:00:10.373 TCP 23.104.0.1:58122 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:05:13.215 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49440 10 6452 1 2025-08-20 19:05:42.821 00:00:10.365 TCP 23.104.0.1:53758 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:05:59.964 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 19:05:59.913 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 19:06:13.386 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48550 10 6452 1 2025-08-20 19:06:43.226 00:00:10.371 TCP 23.104.0.1:57408 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:03:14.098 00:05:00.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 19:07:13.605 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48282 10 6452 1 2025-08-20 19:07:43.639 00:00:10.370 TCP 23.104.0.1:39580 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:08:13.815 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53498 10 6452 1 2025-08-20 19:08:44.054 00:00:10.366 TCP 23.104.0.1:41202 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:09:14.043 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33364 10 6452 1 2025-08-20 19:09:44.459 00:00:10.327 TCP 23.104.0.1:45074 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:06:14.097 00:05:00.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 19:10:14.256 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56126 10 6452 1 2025-08-20 19:10:44.831 00:00:10.333 TCP 23.104.0.1:54154 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:11:00.181 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 19:11:00.216 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 19:11:14.467 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48252 10 6452 1 2025-08-20 19:11:45.203 00:00:10.364 TCP 23.104.0.1:33722 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:12:14.640 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37120 10 6452 1 2025-08-20 19:12:45.605 00:00:10.362 TCP 23.104.0.1:39974 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:09:14.114 00:05:00.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 19:13:14.859 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43730 10 6452 1 2025-08-20 19:13:46.011 00:00:10.317 TCP 23.104.0.1:41212 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:14:15.089 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41058 10 6452 1 2025-08-20 19:14:46.368 00:00:10.414 TCP 23.104.0.1:45036 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:15:15.299 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50592 10 6452 1 2025-08-20 19:16:00.303 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 19:15:46.823 00:00:10.363 TCP 23.104.0.1:56742 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:16:00.178 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 19:12:14.113 00:05:00.977 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 19:16:15.470 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51258 10 6452 1 2025-08-20 19:16:47.226 00:00:10.368 TCP 23.104.0.1:35270 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:17:15.644 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36930 10 6452 1 2025-08-20 19:17:47.630 00:00:10.365 TCP 23.104.0.1:49108 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:18:15.868 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57236 10 6452 1 2025-08-20 19:18:48.029 00:00:10.362 TCP 23.104.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:15:14.115 00:05:00.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 19:19:16.098 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51566 10 6452 1 2025-08-20 19:19:48.432 00:00:10.368 TCP 23.104.0.1:58828 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:20:16.313 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59246 10 6452 1 2025-08-20 19:21:00.333 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 19:20:48.853 00:00:10.343 TCP 23.104.0.1:48148 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:21:00.330 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 19:21:16.519 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35376 10 6452 1 2025-08-20 19:21:49.237 00:00:10.363 TCP 23.104.0.1:48980 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:18:14.113 00:05:00.978 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 19:22:16.738 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42474 10 6452 1 2025-08-20 19:22:49.636 00:00:10.366 TCP 23.104.0.1:36868 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:23:16.951 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45198 10 6452 1 2025-08-20 19:23:50.049 00:00:10.476 TCP 23.104.0.1:36002 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:24:17.189 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34124 10 6452 1 2025-08-20 19:24:50.575 00:00:10.365 TCP 23.104.0.1:43336 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:21:14.115 00:05:00.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 19:25:17.418 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60526 10 6452 1 2025-08-20 19:26:00.346 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 19:25:50.979 00:00:10.331 TCP 23.104.0.1:43644 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:26:00.463 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 19:26:17.630 00:00:10.569 TCP 1.101.0.1:3000 -> 22.102.0.1:42418 10 6452 1 2025-08-20 19:26:51.349 00:00:10.365 TCP 23.104.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:27:18.238 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60138 10 6452 1 2025-08-20 19:27:51.757 00:00:10.335 TCP 23.104.0.1:53688 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:24:14.123 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 19:28:18.454 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39952 10 6452 1 2025-08-20 19:28:52.138 00:00:10.365 TCP 23.104.0.1:48088 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:29:18.668 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59184 10 6452 1 2025-08-20 19:29:52.542 00:00:10.914 TCP 23.104.0.1:42942 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:30:18.883 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48982 10 6452 1 2025-08-20 19:31:00.478 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 19:31:00.496 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 19:30:53.512 00:00:10.370 TCP 23.104.0.1:53976 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:27:14.125 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 19:31:19.077 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50268 10 6452 1 2025-08-20 19:31:53.925 00:00:10.365 TCP 23.104.0.1:49668 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:32:19.296 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60766 10 6452 1 2025-08-20 19:32:54.361 00:00:10.323 TCP 23.104.0.1:54728 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:33:19.505 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47938 10 6452 1 2025-08-20 19:33:54.726 00:00:10.363 TCP 23.104.0.1:40584 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:30:14.128 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 19:34:19.721 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-08-20 19:34:55.130 00:00:10.364 TCP 23.104.0.1:38276 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:35:19.934 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59112 10 6452 1 2025-08-20 19:36:00.724 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 19:36:00.802 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 19:35:55.533 00:00:10.366 TCP 23.104.0.1:59064 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:36:20.170 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54424 10 6452 1 2025-08-20 19:36:55.942 00:00:10.334 TCP 23.104.0.1:60636 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:33:14.129 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 19:37:20.380 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35534 10 6452 1 2025-08-20 19:37:56.316 00:00:10.368 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:38:20.603 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41766 10 6452 1 2025-08-20 19:38:56.717 00:00:10.378 TCP 23.104.0.1:60298 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:39:20.813 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48150 10 6452 1 2025-08-20 19:39:57.130 00:00:10.368 TCP 23.104.0.1:33230 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:36:14.128 00:05:00.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 19:40:21.030 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39454 10 6452 1 2025-08-20 19:41:00.570 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 19:41:00.816 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 19:40:57.536 00:00:10.364 TCP 23.104.0.1:55728 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:41:21.208 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51684 10 6452 1 2025-08-20 19:41:57.935 00:00:10.344 TCP 23.104.0.1:42116 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:42:21.421 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50000 10 6452 1 2025-08-20 19:42:58.314 00:00:10.381 TCP 23.104.0.1:39316 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:39:14.129 00:05:00.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 19:43:21.596 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43564 10 6452 1 2025-08-20 19:43:58.721 00:00:10.371 TCP 23.104.0.1:45980 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:44:21.770 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33936 10 6452 1 2025-08-20 19:44:59.130 00:00:10.368 TCP 23.104.0.1:58184 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:45:21.993 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55954 10 6452 1 2025-08-20 19:46:00.859 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 19:46:00.680 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 19:45:59.538 00:00:10.326 TCP 23.104.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:42:14.128 00:05:00.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 19:46:22.214 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39164 10 6452 1 2025-08-20 19:46:59.906 00:00:10.374 TCP 23.104.0.1:57658 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:47:22.386 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35394 10 6452 1 2025-08-20 19:48:00.314 00:00:10.364 TCP 23.104.0.1:48056 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:48:22.597 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36732 10 6452 1 2025-08-20 19:49:00.712 00:00:10.360 TCP 23.104.0.1:43134 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:45:14.130 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 19:49:22.767 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59530 10 6452 1 2025-08-20 19:50:01.112 00:00:10.364 TCP 23.104.0.1:59840 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:50:22.979 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:60256 14 14280 1 2025-08-20 19:51:00.892 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 19:51:00.789 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 19:51:01.519 00:00:10.513 TCP 23.104.0.1:38436 -> 1.101.0.1:3000 17 2241 1 2025-08-20 19:51:23.270 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53010 10 6452 1 2025-08-20 19:52:02.099 00:00:10.401 TCP 23.104.0.1:51490 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:48:14.128 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 19:52:23.483 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33606 10 6452 1 2025-08-20 19:53:02.504 00:00:10.366 TCP 23.104.0.1:52616 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:53:23.708 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40628 10 6452 1 2025-08-20 19:54:02.905 00:00:10.368 TCP 23.104.0.1:47618 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:54:23.922 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55502 10 6452 1 2025-08-20 19:51:14.131 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 19:55:03.306 00:00:10.326 TCP 23.104.0.1:48922 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:55:24.141 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53302 10 6452 1 2025-08-20 19:56:01.256 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 19:56:01.299 00:00:00.014 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 19:56:03.675 00:00:10.371 TCP 23.104.0.1:41704 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:56:24.351 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43512 10 6452 1 2025-08-20 19:57:04.099 00:00:10.333 TCP 23.104.0.1:48918 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:57:24.531 00:00:10.469 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 10 6452 1 2025-08-20 19:54:14.129 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 19:58:04.474 00:00:10.678 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:58:25.068 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35150 10 6452 1 Summary: total flows: 163, total bytes: 505403, total packets: 1571, avg bps: 1086, avg pps: 0, avg bpp: 321 Time window: 2025-08-20 18:57:14 - 2025-08-20 19:59:15 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0018s User: 0.0027s Wall: 0.0022s flows/second: 73292.4 Runtime: 0.0022s