Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 22:59:04.173 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60000 10 6452 1 2025-08-20 22:59:23.386 00:00:10.330 TCP 23.104.0.1:45612 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:00:04.384 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:35006 10 6452 1 2025-08-20 23:00:23.749 00:00:10.439 TCP 23.104.0.1:60060 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:01:04.861 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 23:01:04.846 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 23:01:04.647 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45288 10 6452 1 2025-08-20 22:57:14.191 00:05:00.953 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 23:01:24.228 00:00:10.366 TCP 23.104.0.1:36128 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:02:04.821 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34348 10 6452 1 2025-08-20 23:02:24.640 00:00:10.366 TCP 23.104.0.1:37110 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:03:05.042 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40386 10 6452 1 2025-08-20 23:03:25.058 00:00:10.365 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:00:14.191 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 23:04:05.215 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52834 10 6452 1 2025-08-20 23:04:25.462 00:00:10.363 TCP 23.104.0.1:33928 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:05:05.435 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:43100 11 6504 1 2025-08-20 23:05:25.868 00:00:10.365 TCP 23.104.0.1:59230 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:06:05.127 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 23:06:05.189 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 23:06:05.672 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:58656 11 6504 1 2025-08-20 23:06:26.277 00:00:10.362 TCP 23.104.0.1:40972 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:03:14.194 00:05:00.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 23:07:05.938 00:00:10.253 TCP 1.101.0.1:3000 -> 22.102.0.1:44592 11 6504 1 2025-08-20 23:07:26.681 00:00:10.371 TCP 23.104.0.1:42948 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:08:06.233 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35890 10 6452 1 2025-08-20 23:08:27.107 00:00:10.320 TCP 23.104.0.1:54032 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:09:06.400 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53598 10 6452 1 2025-08-20 23:09:27.468 00:00:10.363 TCP 23.104.0.1:42486 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:10:06.621 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:42758 10 6452 1 2025-08-20 23:06:14.192 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 23:10:27.873 00:00:10.364 TCP 23.104.0.1:41726 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:11:04.565 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 23:11:04.726 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 23:11:06.893 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54506 10 6452 1 2025-08-20 23:11:28.277 00:00:10.375 TCP 23.104.0.1:56046 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:12:07.110 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41056 10 6452 1 2025-08-20 23:12:28.693 00:00:10.369 TCP 23.104.0.1:52064 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:09:14.194 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 23:13:07.283 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42718 10 6452 1 2025-08-20 23:13:29.112 00:00:10.323 TCP 23.104.0.1:52432 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:14:07.498 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56954 10 6452 1 2025-08-20 23:14:29.474 00:00:10.320 TCP 23.104.0.1:33912 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:15:07.713 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33244 10 6452 1 2025-08-20 23:15:29.841 00:00:10.391 TCP 23.104.0.1:36520 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:16:04.928 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 23:16:04.904 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 23:12:14.192 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 23:16:07.924 00:00:10.862 TCP 1.101.0.1:3000 -> 22.102.0.1:42420 10 6452 1 2025-08-20 23:16:30.266 00:00:10.324 TCP 23.104.0.1:54060 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:17:08.824 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38434 10 6452 1 2025-08-20 23:17:30.626 00:00:10.364 TCP 23.104.0.1:52010 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:18:09.040 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33264 10 6452 1 2025-08-20 23:18:31.029 00:00:10.366 TCP 23.104.0.1:38238 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:15:14.195 00:05:00.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 23:19:09.251 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44290 10 6452 1 2025-08-20 23:19:31.434 00:00:10.361 TCP 23.104.0.1:44108 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:20:09.428 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43508 10 6452 1 2025-08-20 23:20:31.837 00:00:10.462 TCP 23.104.0.1:40142 -> 1.101.0.1:3000 15 1926 1 2025-08-20 23:21:05.036 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 23:21:04.869 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 23:21:09.600 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:46142 12 10365 1 2025-08-20 23:21:32.341 00:00:10.361 TCP 23.104.0.1:36428 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:18:14.193 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 23:22:09.852 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35424 10 6452 1 2025-08-20 23:22:32.743 00:00:10.364 TCP 23.104.0.1:46212 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:23:10.076 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53324 10 6452 1 2025-08-20 23:23:33.146 00:00:10.321 TCP 23.104.0.1:48232 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:24:10.284 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49514 10 6452 1 2025-08-20 23:24:33.507 00:00:10.371 TCP 23.104.0.1:41884 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:21:14.197 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 23:25:10.498 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51210 10 6452 1 2025-08-20 23:25:33.916 00:00:10.388 TCP 23.104.0.1:60848 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:26:05.103 00:00:00.050 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 23:26:05.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 23:26:10.705 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37622 10 6452 1 2025-08-20 23:26:34.341 00:00:10.369 TCP 23.104.0.1:46024 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:27:10.924 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:50526 10 6452 1 2025-08-20 23:27:34.758 00:00:10.380 TCP 23.104.0.1:46988 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:24:14.198 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 23:28:11.176 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41160 10 6452 1 2025-08-20 23:28:35.178 00:00:10.383 TCP 23.104.0.1:44570 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:29:11.392 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-08-20 23:29:35.599 00:00:10.375 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:30:11.562 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43850 10 6452 1 2025-08-20 23:30:36.011 00:00:10.362 TCP 23.104.0.1:41646 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:31:05.289 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 23:31:05.426 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 23:27:14.201 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 23:31:11.772 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59414 10 6452 1 2025-08-20 23:31:36.412 00:00:10.374 TCP 23.104.0.1:42536 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:32:11.985 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58064 10 6452 1 2025-08-20 23:32:36.820 00:00:10.387 TCP 23.104.0.1:36992 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:33:12.223 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51150 10 6452 1 2025-08-20 23:33:37.246 00:00:10.333 TCP 23.104.0.1:50294 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:30:14.198 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 23:34:12.451 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35878 10 6452 1 2025-08-20 23:34:37.614 00:00:10.376 TCP 23.104.0.1:34550 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:35:12.673 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:48058 10 6452 1 2025-08-20 23:35:38.021 00:00:10.439 TCP 23.104.0.1:51906 -> 1.101.0.1:3000 15 1926 1 2025-08-20 23:36:05.388 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 23:36:05.445 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 23:36:12.869 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39538 12 10367 1 2025-08-20 23:36:38.499 00:00:10.368 TCP 23.104.0.1:50558 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:33:14.202 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 23:37:13.089 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37548 10 6452 1 2025-08-20 23:37:38.904 00:00:10.370 TCP 23.104.0.1:39096 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:38:13.322 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55628 10 6452 1 2025-08-20 23:38:39.308 00:00:10.366 TCP 23.104.0.1:51386 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:39:13.498 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45410 10 6452 1 2025-08-20 23:39:39.713 00:00:10.327 TCP 23.104.0.1:46162 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:36:14.200 00:05:00.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 23:40:13.718 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45698 10 6452 1 2025-08-20 23:40:40.103 00:00:10.361 TCP 23.104.0.1:56206 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:41:05.450 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 23:41:05.612 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 23:41:13.929 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51610 10 6452 1 2025-08-20 23:41:40.505 00:00:10.371 TCP 23.104.0.1:38252 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:42:14.157 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47312 10 6452 1 2025-08-20 23:42:40.912 00:00:10.368 TCP 23.104.0.1:56486 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:39:14.204 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 23:43:14.383 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51608 10 6452 1 2025-08-20 23:43:41.315 00:00:10.366 TCP 23.104.0.1:54484 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:44:14.596 00:00:10.654 TCP 1.101.0.1:3000 -> 22.102.0.1:34332 10 6452 1 2025-08-20 23:44:41.720 00:00:10.372 TCP 23.104.0.1:36354 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:45:15.291 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38974 10 6452 1 2025-08-20 23:45:42.132 00:00:10.362 TCP 23.104.0.1:47502 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:46:05.740 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 23:46:05.768 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 23:42:14.204 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 23:46:15.507 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48264 10 6452 1 2025-08-20 23:46:42.534 00:00:10.366 TCP 23.104.0.1:42142 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:47:15.724 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:59692 10 6452 1 2025-08-20 23:47:42.940 00:00:10.377 TCP 23.104.0.1:59760 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:48:15.918 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40702 10 6452 1 2025-08-20 23:48:43.359 00:00:10.364 TCP 23.104.0.1:42826 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:45:14.207 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 23:49:16.131 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40106 10 6452 1 2025-08-20 23:49:43.765 00:00:10.367 TCP 23.104.0.1:58656 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:50:16.303 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47464 10 6452 1 2025-08-20 23:50:44.170 00:00:10.365 TCP 23.104.0.1:46894 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:51:05.607 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 23:51:05.718 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 23:51:16.519 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46722 10 6452 1 2025-08-20 23:51:44.577 00:00:10.328 TCP 23.104.0.1:56094 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:48:14.205 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 23:52:16.693 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33470 10 6452 1 2025-08-20 23:52:44.940 00:00:10.383 TCP 23.104.0.1:34990 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:53:16.903 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47450 10 6452 1 2025-08-20 23:53:45.361 00:00:10.338 TCP 23.104.0.1:48372 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:54:17.121 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33624 10 6452 1 2025-08-20 23:54:45.739 00:00:10.368 TCP 23.104.0.1:49978 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:51:14.208 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 23:55:17.289 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:52724 12 10367 1 2025-08-20 23:55:46.148 00:00:10.435 TCP 23.104.0.1:40232 -> 1.101.0.1:3000 15 1926 1 2025-08-20 23:56:06.025 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 23:56:06.063 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 23:56:17.492 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60662 10 6452 1 2025-08-20 23:56:46.623 00:00:10.528 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:57:17.706 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40048 10 6452 1 2025-08-20 23:57:47.187 00:00:10.367 TCP 23.104.0.1:47828 -> 1.101.0.1:3000 11 1507 1 2025-08-20 23:54:14.205 00:05:00.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 23:58:17.875 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57330 10 6452 1 Summary: total flows: 163, total bytes: 509997, total packets: 1582, avg bps: 1096, avg pps: 0, avg bpp: 322 Time window: 2025-08-20 22:57:14 - 2025-08-20 23:59:15 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0030s Wall: 0.0073s flows/second: 22464.8 Runtime: 0.0073s