Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 02:59:13.385 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40640 10 6452 1 2025-08-23 02:59:18.363 00:00:10.366 TCP 23.104.0.1:57090 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:00:13.554 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50326 10 6452 1 2025-08-23 03:00:18.769 00:00:10.372 TCP 23.104.0.1:57082 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:01:13.762 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60118 10 6452 1 2025-08-23 03:01:19.182 00:00:10.323 TCP 23.104.0.1:54834 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:02:07.417 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 03:02:07.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 03:02:13.974 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48394 10 6452 1 2025-08-23 03:02:19.547 00:00:10.365 TCP 23.104.0.1:60340 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:59:15.716 00:05:00.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 03:03:14.205 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54292 10 6452 1 2025-08-23 03:03:19.946 00:00:10.328 TCP 23.104.0.1:43022 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:00:15.713 00:05:00.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 03:04:14.379 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53576 10 6452 1 2025-08-23 03:04:20.312 00:00:10.366 TCP 23.104.0.1:53896 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:05:14.591 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43362 10 6452 1 2025-08-23 03:05:20.722 00:00:10.325 TCP 23.104.0.1:33864 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:06:14.759 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39324 10 6452 1 2025-08-23 03:06:21.105 00:00:10.367 TCP 23.104.0.1:52026 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:07:07.574 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 03:07:07.507 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 03:07:14.970 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35436 10 6452 1 2025-08-23 03:07:21.507 00:00:10.367 TCP 23.104.0.1:60944 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:08:15.153 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53134 10 6452 1 2025-08-23 03:08:21.911 00:00:10.372 TCP 23.104.0.1:54930 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:05:15.719 00:05:00.549 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 03:09:15.366 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54480 10 6452 1 2025-08-23 03:09:22.324 00:00:10.363 TCP 23.104.0.1:35724 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:06:15.715 00:05:00.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 03:10:15.540 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53704 10 6452 1 2025-08-23 03:10:22.729 00:00:10.320 TCP 23.104.0.1:51448 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:11:15.757 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40850 10 6452 1 2025-08-23 03:11:23.109 00:00:10.364 TCP 23.104.0.1:44078 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:12:07.478 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 03:12:07.496 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 03:12:15.982 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47844 10 6452 1 2025-08-23 03:12:23.508 00:00:10.364 TCP 23.104.0.1:53138 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:13:16.171 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33326 10 6452 1 2025-08-23 03:13:23.914 00:00:10.361 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:14:16.387 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52848 10 6452 1 2025-08-23 03:14:24.316 00:00:10.360 TCP 23.104.0.1:54932 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:11:15.719 00:05:00.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 03:15:16.559 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44044 10 6452 1 2025-08-23 03:15:24.715 00:00:10.373 TCP 23.104.0.1:44516 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:12:15.715 00:05:00.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 03:16:16.776 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44408 10 6452 1 2025-08-23 03:16:25.128 00:00:10.323 TCP 23.104.0.1:60630 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:17:07.656 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 03:17:07.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 03:17:16.985 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41614 10 6452 1 2025-08-23 03:17:25.491 00:00:10.365 TCP 23.104.0.1:37378 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:18:17.202 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37192 10 6452 1 2025-08-23 03:18:25.898 00:00:10.371 TCP 23.104.0.1:51282 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:19:17.372 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57632 10 6452 1 2025-08-23 03:19:26.332 00:00:10.366 TCP 23.104.0.1:42998 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:20:17.586 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50594 10 6452 1 2025-08-23 03:20:26.736 00:00:10.333 TCP 23.104.0.1:43820 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:17:15.720 00:05:00.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 03:21:17.803 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60102 10 6452 1 2025-08-23 03:21:27.139 00:00:10.324 TCP 23.104.0.1:38510 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:22:07.865 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 03:22:07.778 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 03:18:15.728 00:05:00.549 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 03:22:18.012 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36118 10 6452 1 2025-08-23 03:22:27.503 00:00:10.361 TCP 23.104.0.1:40602 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:23:18.195 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50352 11 6775 1 2025-08-23 03:23:27.902 00:00:10.373 TCP 23.104.0.1:47498 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:24:18.409 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58704 10 6452 1 2025-08-23 03:24:28.315 00:00:10.377 TCP 23.104.0.1:55290 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:25:18.625 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39312 10 6452 1 2025-08-23 03:25:28.735 00:00:10.369 TCP 23.104.0.1:42408 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:26:18.794 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60154 10 6452 1 2025-08-23 03:26:29.140 00:00:10.327 TCP 23.104.0.1:40264 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:27:08.176 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 03:27:07.791 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 03:23:15.736 00:05:00.538 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 03:27:19.005 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58650 10 6452 1 2025-08-23 03:27:29.504 00:00:10.368 TCP 23.104.0.1:45156 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:24:15.730 00:05:00.549 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 03:28:19.210 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39034 10 6452 1 2025-08-23 03:28:29.910 00:00:10.367 TCP 23.104.0.1:32880 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:29:19.429 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42628 10 6452 1 2025-08-23 03:29:30.311 00:00:10.329 TCP 23.104.0.1:53850 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:30:19.641 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59826 10 6452 1 2025-08-23 03:30:30.676 00:00:10.368 TCP 23.104.0.1:41724 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:31:19.869 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46008 10 6452 1 2025-08-23 03:31:31.106 00:00:10.322 TCP 23.104.0.1:42752 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:32:07.977 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 03:32:07.979 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 03:32:20.053 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41610 10 6452 1 2025-08-23 03:32:31.471 00:00:10.370 TCP 23.104.0.1:46032 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:29:15.731 00:05:00.545 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 03:33:20.269 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59460 10 6452 1 2025-08-23 03:33:31.887 00:00:10.384 TCP 23.104.0.1:48198 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:30:15.729 00:05:00.551 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 03:34:20.494 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56298 10 6452 1 2025-08-23 03:34:32.304 00:00:10.367 TCP 23.104.0.1:42194 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:35:20.666 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40608 10 6452 1 2025-08-23 03:35:32.710 00:00:10.320 TCP 23.104.0.1:34160 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:36:20.879 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51118 10 6452 1 2025-08-23 03:36:33.096 00:00:10.367 TCP 23.104.0.1:55132 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:37:07.767 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 03:37:08.040 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 03:37:21.105 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:53150 10 6452 1 2025-08-23 03:37:33.505 00:00:10.362 TCP 23.104.0.1:44066 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:38:21.350 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56234 10 6452 1 2025-08-23 03:38:33.905 00:00:10.370 TCP 23.104.0.1:46256 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:35:15.732 00:05:00.545 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 03:39:21.569 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55218 10 6452 1 2025-08-23 03:39:34.310 00:00:10.372 TCP 23.104.0.1:46060 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:36:15.730 00:05:00.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 03:40:21.738 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59866 10 6452 1 2025-08-23 03:40:34.717 00:00:10.380 TCP 23.104.0.1:35364 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:41:21.960 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:52808 10 6452 1 2025-08-23 03:41:35.134 00:00:10.365 TCP 23.104.0.1:53962 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:42:08.240 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 03:42:08.173 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 03:42:22.146 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55934 10 6452 1 2025-08-23 03:42:35.536 00:00:10.330 TCP 23.104.0.1:45730 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:43:22.365 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38148 10 6452 1 2025-08-23 03:43:35.905 00:00:10.361 TCP 23.104.0.1:34520 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:44:22.569 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51656 10 6452 1 2025-08-23 03:44:36.304 00:00:10.365 TCP 23.104.0.1:44550 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:41:15.748 00:05:00.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 03:45:22.741 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47988 10 6452 1 2025-08-23 03:45:36.708 00:00:10.359 TCP 23.104.0.1:56140 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:42:15.746 00:05:00.535 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 03:46:22.959 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6452 1 2025-08-23 03:46:37.109 00:00:10.366 TCP 23.104.0.1:49190 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:47:08.237 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 03:47:08.367 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 03:47:23.185 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60314 10 6452 1 2025-08-23 03:47:37.515 00:00:10.367 TCP 23.104.0.1:55666 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:48:23.398 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58076 10 6452 1 2025-08-23 03:48:37.922 00:00:10.356 TCP 23.104.0.1:39954 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:49:23.612 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57706 10 6452 1 2025-08-23 03:49:38.328 00:00:10.363 TCP 23.104.0.1:37904 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:50:23.826 00:00:10.425 TCP 1.101.0.1:3000 -> 22.102.0.1:37114 10 6452 1 2025-08-23 03:50:38.735 00:00:10.324 TCP 23.104.0.1:42576 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:47:15.754 00:05:00.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 03:51:24.289 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44368 10 6452 1 2025-08-23 03:51:39.106 00:00:10.373 TCP 23.104.0.1:53220 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:52:08.951 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 03:52:08.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 03:48:15.751 00:05:00.532 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 03:52:24.502 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60314 10 6452 1 2025-08-23 03:52:39.515 00:00:10.364 TCP 23.104.0.1:47360 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:53:24.677 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57392 10 6452 1 2025-08-23 03:53:39.920 00:00:10.372 TCP 23.104.0.1:56474 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:54:24.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49066 10 6452 1 2025-08-23 03:54:40.353 00:00:13.813 TCP 23.104.0.1:52762 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:55:25.112 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46040 10 6452 1 2025-08-23 03:55:44.263 00:00:10.358 TCP 23.104.0.1:47142 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:56:25.322 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37382 10 6452 1 2025-08-23 03:56:44.663 00:00:10.325 TCP 23.104.0.1:47448 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:57:08.328 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 03:57:08.487 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 03:53:15.754 00:05:00.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 03:57:25.537 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39060 10 6452 1 2025-08-23 03:57:45.028 00:00:10.362 TCP 23.104.0.1:57832 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:54:15.752 00:05:00.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 03:58:25.751 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55576 10 6452 1 Summary: total flows: 163, total bytes: 497164, total packets: 1562, avg bps: 1103, avg pps: 0, avg bpp: 318 Time window: 2025-08-23 02:59:13 - 2025-08-23 03:59:16 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0015s Wall: 0.0047s flows/second: 34658.4 Runtime: 0.0047s