Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 13:59:05.731 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38796 10 6452 1 2025-08-23 13:59:26.942 00:00:10.339 TCP 23.104.0.1:59638 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:00:05.916 00:00:10.810 TCP 1.101.0.1:3000 -> 22.102.0.1:55450 10 6452 1 2025-08-23 13:55:16.519 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-08-23 14:00:27.322 00:00:10.322 TCP 23.104.0.1:35980 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:01:06.774 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35296 10 6452 1 2025-08-23 14:00:16.094 00:01:00.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 4 246 1 2025-08-23 14:01:27.680 00:00:10.371 TCP 23.104.0.1:47482 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:02:20.403 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 14:02:06.987 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56922 10 6452 1 2025-08-23 14:02:20.595 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 14:02:28.107 00:00:10.364 TCP 23.104.0.1:48252 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:02:16.093 00:01:00.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 4 246 1 2025-08-23 14:03:07.227 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47236 10 6452 1 2025-08-23 14:03:28.508 00:00:10.333 TCP 23.104.0.1:51060 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:04:07.447 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40646 10 6452 1 2025-08-23 14:04:28.874 00:00:10.365 TCP 23.104.0.1:58292 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:05:07.655 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56344 10 6452 1 2025-08-23 14:05:29.275 00:00:10.367 TCP 23.104.0.1:49450 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:02:16.095 00:04:00.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-23 14:06:07.876 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56758 10 6452 1 2025-08-23 14:06:29.679 00:00:10.359 TCP 23.104.0.1:49086 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:07:08.110 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52152 11 6504 1 2025-08-23 14:07:20.864 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 14:07:20.945 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 14:07:30.101 00:00:10.326 TCP 23.104.0.1:42662 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:04:16.097 00:04:00.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-23 14:08:08.335 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 10 6452 1 2025-08-23 14:08:30.464 00:00:10.366 TCP 23.104.0.1:47618 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:09:08.547 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54372 10 6452 1 2025-08-23 14:09:30.865 00:00:10.363 TCP 23.104.0.1:33630 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:10:08.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32858 10 6452 1 2025-08-23 14:10:31.271 00:00:10.362 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:07:16.099 00:04:00.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-23 14:11:08.988 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:43660 10 6452 1 2025-08-23 14:11:31.682 00:00:10.367 TCP 23.104.0.1:39776 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:12:20.779 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 14:12:09.175 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48102 10 6452 1 2025-08-23 14:12:20.816 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 14:12:32.102 00:00:10.367 TCP 23.104.0.1:46956 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:09:16.097 00:04:00.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-23 14:13:09.397 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36360 10 6452 1 2025-08-23 14:13:32.507 00:00:10.368 TCP 23.104.0.1:57878 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:14:09.608 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44254 10 6452 1 2025-08-23 14:14:32.917 00:00:10.382 TCP 23.104.0.1:49250 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:15:09.779 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 10 6452 1 2025-08-23 14:15:33.344 00:00:10.366 TCP 23.104.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:12:16.114 00:04:00.409 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-23 14:16:09.994 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50150 10 6452 1 2025-08-23 14:16:33.754 00:00:10.374 TCP 23.104.0.1:32952 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:17:10.223 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39778 10 6452 1 2025-08-23 14:17:21.054 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 14:17:20.823 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 14:17:34.167 00:00:10.364 TCP 23.104.0.1:60546 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:14:16.111 00:04:00.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-23 14:18:10.440 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56162 10 6452 1 2025-08-23 14:18:34.574 00:00:10.374 TCP 23.104.0.1:43272 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:19:10.652 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43980 10 6452 1 2025-08-23 14:19:35.005 00:00:10.360 TCP 23.104.0.1:52282 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:20:10.867 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37942 10 6452 1 2025-08-23 14:20:35.406 00:00:10.367 TCP 23.104.0.1:48968 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:21:11.094 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56128 10 6452 1 2025-08-23 14:21:35.807 00:00:10.385 TCP 23.104.0.1:35676 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:22:20.791 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 14:22:11.309 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49160 10 6452 1 2025-08-23 14:17:16.115 00:06:00.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-23 14:22:21.056 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 14:22:36.224 00:00:10.321 TCP 23.104.0.1:41744 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:23:11.519 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41524 10 6452 1 2025-08-23 14:23:36.586 00:00:10.362 TCP 23.104.0.1:60192 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:19:16.113 00:06:00.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-23 14:24:11.733 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44512 10 6452 1 2025-08-23 14:24:36.989 00:00:10.368 TCP 23.104.0.1:36566 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:25:11.904 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38714 10 6452 1 2025-08-23 14:25:37.393 00:00:10.367 TCP 23.104.0.1:44048 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:26:12.119 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60450 10 6452 1 2025-08-23 14:26:37.796 00:00:10.363 TCP 23.104.0.1:33246 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:27:21.656 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 14:27:21.378 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 14:27:12.284 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35952 10 6452 1 2025-08-23 14:27:38.199 00:00:10.365 TCP 23.104.0.1:48870 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:24:16.117 00:04:00.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-23 14:28:12.502 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40900 10 6452 1 2025-08-23 14:28:38.601 00:00:10.359 TCP 23.104.0.1:58440 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:29:12.716 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48772 10 6452 1 2025-08-23 14:29:39.000 00:00:10.330 TCP 23.104.0.1:41688 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:30:12.923 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48124 10 6452 1 2025-08-23 14:30:39.365 00:00:10.361 TCP 23.104.0.1:35080 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:26:16.115 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-23 14:31:13.132 00:00:10.537 TCP 1.101.0.1:3000 -> 22.102.0.1:52474 12 10367 1 2025-08-23 14:31:39.775 00:00:10.447 TCP 23.104.0.1:54236 -> 1.101.0.1:3000 15 1926 1 2025-08-23 14:32:21.293 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 14:32:21.110 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 14:32:13.733 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56032 10 6452 1 2025-08-23 14:32:40.266 00:00:10.367 TCP 23.104.0.1:44460 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:29:16.119 00:04:00.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-23 14:33:13.946 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50320 10 6452 1 2025-08-23 14:33:40.669 00:00:10.366 TCP 23.104.0.1:49432 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:34:14.171 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50854 10 6452 1 2025-08-23 14:34:41.098 00:00:10.366 TCP 23.104.0.1:35118 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:32:16.531 00:03:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 421 1 2025-08-23 14:35:14.381 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58754 10 6452 1 2025-08-23 14:35:41.502 00:00:10.368 TCP 23.104.0.1:38064 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:36:14.595 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56184 10 6452 1 2025-08-23 14:36:41.908 00:00:10.326 TCP 23.104.0.1:51182 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:37:21.414 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 14:37:21.195 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 14:37:14.808 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:32786 10 6452 1 2025-08-23 14:37:42.275 00:00:10.328 TCP 23.104.0.1:56718 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:34:16.119 00:04:00.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-23 14:38:14.982 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:58336 10 6452 1 2025-08-23 14:38:42.645 00:00:10.361 TCP 23.104.0.1:60256 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:39:15.166 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54128 10 6452 1 2025-08-23 14:39:43.054 00:00:10.367 TCP 23.104.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:36:16.116 00:04:00.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-23 14:40:15.387 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42998 10 6452 1 2025-08-23 14:40:43.459 00:00:10.367 TCP 23.104.0.1:42644 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:41:15.596 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59602 10 6452 1 2025-08-23 14:41:43.862 00:00:10.373 TCP 23.104.0.1:42616 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:42:21.583 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 14:42:21.543 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 14:42:15.775 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39488 10 6452 1 2025-08-23 14:42:44.278 00:00:10.366 TCP 23.104.0.1:43390 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:39:16.119 00:04:00.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-23 14:43:15.988 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37750 10 6452 1 2025-08-23 14:43:44.683 00:00:10.364 TCP 23.104.0.1:55142 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:44:16.209 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43056 10 6452 1 2025-08-23 14:44:45.111 00:00:10.331 TCP 23.104.0.1:59606 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:41:16.118 00:04:00.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-23 14:45:16.428 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60724 10 6452 1 2025-08-23 14:45:45.487 00:00:10.327 TCP 23.104.0.1:59254 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:46:16.658 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:59662 12 10365 1 2025-08-23 14:46:45.848 00:00:10.458 TCP 23.104.0.1:41978 -> 1.101.0.1:3000 15 1926 1 2025-08-23 14:47:22.181 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 14:47:22.435 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 14:47:16.905 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46416 10 6452 1 2025-08-23 14:47:46.345 00:00:10.322 TCP 23.104.0.1:32804 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:44:16.120 00:04:00.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-23 14:48:17.122 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42282 10 6452 1 2025-08-23 14:48:46.704 00:00:10.365 TCP 23.104.0.1:54402 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:49:17.332 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41178 10 6452 1 2025-08-23 14:49:47.111 00:00:10.356 TCP 23.104.0.1:52630 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:46:16.118 00:04:00.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-23 14:50:17.547 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34916 10 6452 1 2025-08-23 14:50:47.506 00:00:10.365 TCP 23.104.0.1:41710 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:51:17.713 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47854 10 6452 1 2025-08-23 14:51:47.912 00:00:10.321 TCP 23.104.0.1:33114 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:52:21.637 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 14:52:21.400 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 14:52:17.928 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:55588 10 6452 1 2025-08-23 14:52:48.272 00:00:10.365 TCP 23.104.0.1:58060 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:53:18.125 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47764 10 6452 1 2025-08-23 14:53:48.673 00:00:10.332 TCP 23.104.0.1:53908 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:49:16.121 00:06:00.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-23 14:54:18.331 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43468 10 6452 1 2025-08-23 14:54:49.041 00:00:10.368 TCP 23.104.0.1:36144 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:55:18.541 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54482 10 6452 1 2025-08-23 14:55:49.446 00:00:10.362 TCP 23.104.0.1:53412 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:51:16.119 00:06:00.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-23 14:56:18.754 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:52626 10 6452 1 2025-08-23 14:56:49.842 00:00:10.441 TCP 23.104.0.1:46092 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:57:21.721 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 14:57:21.955 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 14:57:18.939 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:44604 10 6452 1 2025-08-23 14:57:50.328 00:00:10.367 TCP 23.104.0.1:36612 -> 1.101.0.1:3000 11 1507 1 2025-08-23 14:58:19.173 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41484 10 6452 1 Summary: total flows: 166, total bytes: 505365, total packets: 1571, avg bps: 1065, avg pps: 0, avg bpp: 321 Time window: 2025-08-23 13:55:16 - 2025-08-23 14:58:29 Total flows processed: 166, passed: 166, Blocks skipped: 0, Bytes read: 17328 Sys: 0.0024s User: 0.0012s Wall: 0.0016s flows/second: 106820.3 Runtime: 0.0016s