Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 09:59:13.632 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48862 10 6452 1 2025-08-23 09:59:37.392 00:00:10.323 TCP 23.104.0.1:52416 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:00:13.845 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:32874 11 6504 1 2025-08-23 10:00:37.750 00:00:10.324 TCP 23.104.0.1:44918 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:01:14.124 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44404 10 6452 1 2025-08-23 10:01:38.117 00:00:10.377 TCP 23.104.0.1:56830 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:02:15.682 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 10:02:15.518 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 10:02:14.342 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42016 10 6452 1 2025-08-23 10:02:38.533 00:00:10.363 TCP 23.104.0.1:41554 -> 1.101.0.1:3000 11 1507 1 2025-08-23 09:59:15.904 00:05:00.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 10:03:14.552 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36306 10 6452 1 2025-08-23 10:03:38.927 00:00:10.339 TCP 23.104.0.1:43988 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:00:15.903 00:05:00.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 10:04:14.719 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52676 10 6452 1 2025-08-23 10:04:39.316 00:00:10.362 TCP 23.104.0.1:37370 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:05:14.935 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:49754 10 6452 1 2025-08-23 10:05:39.719 00:00:10.376 TCP 23.104.0.1:58966 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:06:15.137 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44972 10 6452 1 2025-08-23 10:06:40.134 00:00:10.330 TCP 23.104.0.1:33654 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:07:15.665 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 10:07:15.771 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 10:07:15.351 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38806 10 6452 1 2025-08-23 10:07:40.506 00:00:10.364 TCP 23.104.0.1:51354 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:08:15.565 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58144 10 6452 1 2025-08-23 10:08:40.910 00:00:10.363 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:05:15.906 00:05:00.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 10:09:15.775 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46530 10 6452 1 2025-08-23 10:09:41.315 00:00:10.362 TCP 23.104.0.1:35484 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:06:15.904 00:05:00.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 10:10:15.988 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44024 10 6452 1 2025-08-23 10:10:41.713 00:00:10.370 TCP 23.104.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:11:16.213 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52482 10 6452 1 2025-08-23 10:11:42.128 00:00:10.379 TCP 23.104.0.1:43364 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:12:15.966 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 10:12:16.021 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 10:12:16.389 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37754 10 6452 1 2025-08-23 10:12:42.526 00:00:10.363 TCP 23.104.0.1:46704 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:13:16.604 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39346 10 6452 1 2025-08-23 10:13:42.927 00:00:10.379 TCP 23.104.0.1:48712 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:14:16.821 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47890 10 6452 1 2025-08-23 10:14:43.347 00:00:10.368 TCP 23.104.0.1:37512 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:11:15.907 00:05:00.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 10:15:17.059 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59720 10 6452 1 2025-08-23 10:15:43.751 00:00:10.365 TCP 23.104.0.1:37336 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:12:15.916 00:05:00.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 10:16:17.281 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51062 10 6452 1 2025-08-23 10:16:44.150 00:00:10.366 TCP 23.104.0.1:45756 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:17:16.056 00:00:00.052 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 10:17:15.834 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 10:17:17.495 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59860 10 6452 1 2025-08-23 10:17:44.551 00:00:10.363 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:18:17.709 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51512 10 6452 1 2025-08-23 10:18:44.950 00:00:10.375 TCP 23.104.0.1:55860 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:19:17.881 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50406 10 6452 1 2025-08-23 10:19:45.369 00:00:10.377 TCP 23.104.0.1:35938 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:20:18.086 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38662 10 6452 1 2025-08-23 10:20:45.787 00:00:10.381 TCP 23.104.0.1:36464 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:17:15.923 00:05:00.516 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 10:21:18.295 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36662 10 6452 1 2025-08-23 10:21:46.195 00:00:10.373 TCP 23.104.0.1:40066 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:22:16.310 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 10:22:16.375 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 10:18:15.917 00:05:00.526 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 10:22:18.466 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37658 10 6452 1 2025-08-23 10:22:46.605 00:00:10.364 TCP 23.104.0.1:33770 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:23:18.687 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38752 10 6452 1 2025-08-23 10:23:47.004 00:00:10.321 TCP 23.104.0.1:37622 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:24:18.859 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43168 10 6452 1 2025-08-23 10:24:47.360 00:00:10.323 TCP 23.104.0.1:60172 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:25:19.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59798 10 6452 1 2025-08-23 10:25:47.724 00:00:10.367 TCP 23.104.0.1:50666 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:26:19.295 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55128 10 6452 1 2025-08-23 10:26:48.126 00:00:10.362 TCP 23.104.0.1:38202 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:27:16.128 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 10:27:16.254 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 10:23:15.925 00:05:00.518 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 10:27:19.506 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41942 10 6452 1 2025-08-23 10:27:48.537 00:00:10.373 TCP 23.104.0.1:38288 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:24:15.920 00:05:00.524 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 10:28:19.721 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60344 10 6452 1 2025-08-23 10:28:48.945 00:00:10.374 TCP 23.104.0.1:33774 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:29:19.897 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53926 10 6452 1 2025-08-23 10:29:49.355 00:00:10.367 TCP 23.104.0.1:35826 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:30:20.111 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50234 10 6452 1 2025-08-23 10:30:49.761 00:00:10.373 TCP 23.104.0.1:54624 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:31:20.317 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60936 10 6452 1 2025-08-23 10:31:50.170 00:00:10.361 TCP 23.104.0.1:42064 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:32:16.286 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 10:32:16.561 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 10:32:20.490 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48216 10 6452 1 2025-08-23 10:32:50.572 00:00:10.371 TCP 23.104.0.1:48148 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:29:15.929 00:05:00.513 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 10:33:20.702 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-08-23 10:33:50.986 00:00:10.363 TCP 23.104.0.1:56042 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:30:15.928 00:05:00.518 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 10:34:20.912 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:42240 10 6452 1 2025-08-23 10:34:51.387 00:00:10.366 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:35:21.153 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56478 10 6452 1 2025-08-23 10:35:51.798 00:00:10.364 TCP 23.104.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:36:21.363 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39754 10 6452 1 2025-08-23 10:36:52.205 00:00:10.370 TCP 23.104.0.1:49490 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:37:16.578 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 10:37:16.589 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 10:37:21.582 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41692 10 6452 1 2025-08-23 10:37:52.612 00:00:10.331 TCP 23.104.0.1:46128 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:38:21.754 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:52984 10 6452 1 2025-08-23 10:38:52.991 00:00:10.328 TCP 23.104.0.1:47292 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:35:15.931 00:05:00.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 10:39:21.945 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49334 10 6452 1 2025-08-23 10:39:53.356 00:00:10.326 TCP 23.104.0.1:49460 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:36:15.929 00:05:00.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 10:40:22.174 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49176 11 6492 1 2025-08-23 10:40:53.722 00:00:10.368 TCP 23.104.0.1:42760 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:41:22.390 00:00:10.357 TCP 1.101.0.1:3000 -> 22.102.0.1:42452 10 6452 1 2025-08-23 10:41:54.129 00:00:10.365 TCP 23.104.0.1:44194 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:42:16.813 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 10:42:16.770 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 10:42:22.797 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57802 10 6452 1 2025-08-23 10:42:54.531 00:00:10.324 TCP 23.104.0.1:59674 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:43:23.010 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45898 10 6452 1 2025-08-23 10:43:54.892 00:00:10.332 TCP 23.104.0.1:35384 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:44:23.179 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50454 10 6452 1 2025-08-23 10:44:55.259 00:00:10.319 TCP 23.104.0.1:60694 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:41:15.933 00:05:00.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 10:45:23.350 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45318 10 6452 1 2025-08-23 10:45:55.617 00:00:10.369 TCP 23.104.0.1:57176 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:42:15.932 00:05:00.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 10:46:23.559 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59808 10 6452 1 2025-08-23 10:46:56.028 00:00:10.551 TCP 23.104.0.1:50872 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:47:16.752 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 10:47:16.575 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 10:47:23.771 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-08-23 10:47:56.623 00:00:10.363 TCP 23.104.0.1:48106 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:48:23.987 00:00:10.600 TCP 1.101.0.1:3000 -> 22.102.0.1:53740 10 6452 1 2025-08-23 10:48:57.027 00:00:10.368 TCP 23.104.0.1:45370 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:49:24.633 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47036 10 6452 1 2025-08-23 10:49:57.431 00:00:10.363 TCP 23.104.0.1:35148 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:50:24.847 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43230 10 6452 1 2025-08-23 10:50:57.832 00:00:10.378 TCP 23.104.0.1:58384 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:47:15.934 00:05:00.513 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 10:51:25.088 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6452 1 2025-08-23 10:51:58.249 00:00:10.362 TCP 23.104.0.1:47648 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:52:16.772 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 10:52:16.806 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 10:48:15.932 00:05:00.519 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 10:52:25.301 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42236 10 6452 1 2025-08-23 10:52:58.658 00:00:10.359 TCP 23.104.0.1:40592 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:53:25.523 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49060 10 6452 1 2025-08-23 10:53:59.057 00:00:10.362 TCP 23.104.0.1:33158 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:54:25.731 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:45286 10 6452 1 2025-08-23 10:54:59.464 00:00:10.365 TCP 23.104.0.1:36924 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:55:25.899 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41512 10 6452 1 2025-08-23 10:55:59.867 00:00:10.366 TCP 23.104.0.1:59338 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:56:26.085 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49772 10 6452 1 2025-08-23 10:57:00.272 00:00:10.360 TCP 23.104.0.1:52836 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:57:16.830 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 10:57:16.893 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 10:53:15.944 00:05:00.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 10:57:26.298 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50558 10 6452 1 2025-08-23 10:58:00.673 00:00:10.322 TCP 23.104.0.1:37000 -> 1.101.0.1:3000 11 1507 1 2025-08-23 10:54:15.941 00:05:00.510 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 10:58:26.506 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53884 10 6452 1 Summary: total flows: 163, total bytes: 496933, total packets: 1563, avg bps: 1103, avg pps: 0, avg bpp: 317 Time window: 2025-08-23 09:59:13 - 2025-08-23 10:59:16 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0008s Wall: 0.0021s flows/second: 76345.2 Runtime: 0.0021s