Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 14:59:01.036 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54410 10 6438 1 2025-07-20 14:59:11.909 00:00:10.364 TCP 23.104.0.1:58228 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:00:01.251 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51910 10 6438 1 2025-07-20 15:00:12.314 00:00:10.364 TCP 23.104.0.1:35672 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:00:59.770 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 15:00:59.806 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 15:01:01.458 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46712 10 6438 1 2025-07-20 15:01:12.718 00:00:10.372 TCP 23.104.0.1:44122 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:02:01.633 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48770 10 6438 1 2025-07-20 15:02:13.122 00:00:10.377 TCP 23.104.0.1:36326 -> 1.101.0.1:3000 11 1507 1 2025-07-20 14:57:58.541 00:06:00.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 15:03:01.854 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34952 10 6438 1 2025-07-20 15:03:13.535 00:00:10.370 TCP 23.104.0.1:48014 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:04:02.090 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48640 10 6438 1 2025-07-20 15:04:13.947 00:00:10.368 TCP 23.104.0.1:54838 -> 1.101.0.1:3000 11 1507 1 2025-07-20 14:59:58.540 00:06:00.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 15:05:02.299 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34678 10 6438 1 2025-07-20 15:05:14.356 00:00:10.364 TCP 23.104.0.1:41674 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:05:59.610 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 15:05:59.982 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 15:06:02.514 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35348 10 6438 1 2025-07-20 15:06:14.760 00:00:10.373 TCP 23.104.0.1:53558 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:07:02.734 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46998 10 6438 1 2025-07-20 15:07:15.171 00:00:10.325 TCP 23.104.0.1:32784 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:08:02.953 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:43422 10 6438 1 2025-07-20 15:08:15.534 00:00:10.366 TCP 23.104.0.1:50180 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:09:03.191 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52480 10 6438 1 2025-07-20 15:09:15.936 00:00:10.388 TCP 23.104.0.1:48646 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:04:58.543 00:06:00.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 15:10:03.412 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43258 10 6438 1 2025-07-20 15:10:16.351 00:00:10.332 TCP 23.104.0.1:33762 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:10:59.930 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 15:11:00.018 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 15:11:03.625 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48758 10 6438 1 2025-07-20 15:11:16.714 00:00:10.360 TCP 23.104.0.1:60922 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:06:58.540 00:06:00.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 15:12:03.836 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36480 10 6438 1 2025-07-20 15:12:17.107 00:00:10.364 TCP 23.104.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:13:04.081 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54552 12 10350 1 2025-07-20 15:13:17.516 00:00:10.440 TCP 23.104.0.1:60642 -> 1.101.0.1:3000 15 1925 1 2025-07-20 15:14:04.319 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45522 10 6438 1 2025-07-20 15:14:17.992 00:00:10.371 TCP 23.104.0.1:54374 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:15:04.525 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54566 10 6438 1 2025-07-20 15:15:18.404 00:00:10.364 TCP 23.104.0.1:52188 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:16:00.179 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 15:16:00.093 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 15:16:04.694 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37120 10 6438 1 2025-07-20 15:16:18.806 00:00:10.370 TCP 23.104.0.1:44532 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:11:58.552 00:06:00.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 15:17:04.905 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41348 10 6438 1 2025-07-20 15:17:19.216 00:00:10.375 TCP 23.104.0.1:50686 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:18:05.122 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46608 10 6438 1 2025-07-20 15:18:19.628 00:00:10.320 TCP 23.104.0.1:44436 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:13:58.549 00:06:00.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 15:19:05.293 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6438 1 2025-07-20 15:19:19.984 00:00:10.369 TCP 23.104.0.1:58512 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:20:05.509 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48668 10 6438 1 2025-07-20 15:20:20.393 00:00:10.366 TCP 23.104.0.1:54890 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:21:00.380 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 15:21:00.263 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 15:21:05.685 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46514 10 6438 1 2025-07-20 15:21:20.799 00:00:10.347 TCP 23.104.0.1:45874 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:22:05.901 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41210 10 6438 1 2025-07-20 15:22:21.182 00:00:10.365 TCP 23.104.0.1:48844 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:23:06.088 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57316 10 6438 1 2025-07-20 15:23:21.585 00:00:10.330 TCP 23.104.0.1:52254 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:18:58.553 00:06:00.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 15:24:06.295 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33586 10 6438 1 2025-07-20 15:24:21.959 00:00:10.325 TCP 23.104.0.1:56136 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:25:06.509 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50408 10 6438 1 2025-07-20 15:25:22.326 00:00:10.361 TCP 23.104.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:26:00.180 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 15:25:59.908 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 15:20:58.550 00:06:00.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 15:26:06.720 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60198 10 6438 1 2025-07-20 15:26:22.729 00:00:10.364 TCP 23.104.0.1:54348 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:27:06.929 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56072 10 6438 1 2025-07-20 15:27:23.129 00:00:10.363 TCP 23.104.0.1:43258 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:28:07.169 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48966 12 10352 1 2025-07-20 15:28:23.535 00:00:10.394 TCP 23.104.0.1:35062 -> 1.101.0.1:3000 15 1925 1 2025-07-20 15:29:07.407 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58474 10 6438 1 2025-07-20 15:29:23.965 00:00:10.363 TCP 23.104.0.1:36074 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:30:07.621 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43172 10 6438 1 2025-07-20 15:30:24.378 00:00:10.365 TCP 23.104.0.1:47816 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:31:00.411 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 15:31:00.277 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 15:25:58.555 00:06:00.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 15:31:07.838 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37312 10 6438 1 2025-07-20 15:31:24.782 00:00:10.367 TCP 23.104.0.1:42034 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:32:08.075 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41980 10 6438 1 2025-07-20 15:32:25.194 00:00:10.362 TCP 23.104.0.1:53292 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:27:58.552 00:06:00.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 15:33:08.248 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37668 10 6438 1 2025-07-20 15:33:25.593 00:00:10.419 TCP 23.104.0.1:41442 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:34:08.461 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34372 10 6438 1 2025-07-20 15:34:26.058 00:00:10.371 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:35:08.669 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42804 10 6438 1 2025-07-20 15:35:26.468 00:00:10.362 TCP 23.104.0.1:36540 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:36:00.311 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 15:36:00.394 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 15:36:08.886 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48720 10 6438 1 2025-07-20 15:36:26.870 00:00:10.369 TCP 23.104.0.1:44772 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:37:09.112 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48570 10 6438 1 2025-07-20 15:37:27.286 00:00:10.357 TCP 23.104.0.1:60452 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:32:58.557 00:06:00.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 15:38:09.343 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60500 10 6438 1 2025-07-20 15:38:27.680 00:00:10.369 TCP 23.104.0.1:34174 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:39:09.562 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45080 10 6438 1 2025-07-20 15:39:28.098 00:00:10.362 TCP 23.104.0.1:56086 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:34:58.555 00:06:00.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 15:40:09.776 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48510 10 6438 1 2025-07-20 15:40:28.498 00:00:10.362 TCP 23.104.0.1:55234 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:41:00.613 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 15:41:00.681 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 15:41:09.987 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37524 10 6438 1 2025-07-20 15:41:28.903 00:00:10.364 TCP 23.104.0.1:33466 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:42:10.212 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32890 10 6438 1 2025-07-20 15:42:29.305 00:00:10.368 TCP 23.104.0.1:42020 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:43:10.432 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47254 10 6438 1 2025-07-20 15:43:29.708 00:00:10.381 TCP 23.104.0.1:40836 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:44:10.649 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48052 10 6438 1 2025-07-20 15:44:30.132 00:00:10.365 TCP 23.104.0.1:51204 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:39:58.564 00:06:00.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 15:45:10.869 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39280 10 6438 1 2025-07-20 15:45:30.538 00:00:10.369 TCP 23.104.0.1:43098 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:46:00.837 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 15:46:00.628 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 15:46:11.099 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52344 10 6438 1 2025-07-20 15:46:30.939 00:00:10.371 TCP 23.104.0.1:45786 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:41:58.561 00:06:00.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 15:47:11.271 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48026 10 6438 1 2025-07-20 15:47:31.349 00:00:10.325 TCP 23.104.0.1:57296 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:48:11.484 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50178 10 6438 1 2025-07-20 15:48:31.712 00:00:10.386 TCP 23.104.0.1:60424 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:49:11.696 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40828 10 6438 1 2025-07-20 15:49:32.127 00:00:10.362 TCP 23.104.0.1:50334 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:50:11.905 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44574 10 6438 1 2025-07-20 15:50:32.527 00:00:10.320 TCP 23.104.0.1:36812 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:51:00.779 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 15:51:00.918 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 15:51:12.118 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59340 10 6438 1 2025-07-20 15:51:32.889 00:00:10.365 TCP 23.104.0.1:53642 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:46:58.566 00:06:00.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 15:52:12.332 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54850 10 6438 1 2025-07-20 15:52:33.295 00:00:10.367 TCP 23.104.0.1:59578 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:53:12.539 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37394 10 6438 1 2025-07-20 15:53:33.693 00:00:10.371 TCP 23.104.0.1:44028 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:48:58.564 00:06:00.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 15:54:12.753 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59180 10 6438 1 2025-07-20 15:54:34.116 00:00:10.324 TCP 23.104.0.1:52210 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:55:12.965 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40066 12 6542 1 2025-07-20 15:55:34.480 00:00:10.344 TCP 23.104.0.1:37282 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:56:00.992 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 15:56:00.895 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 15:56:13.183 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52584 10 6438 1 2025-07-20 15:56:34.862 00:00:10.374 TCP 23.104.0.1:34688 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:57:13.394 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56658 10 6438 1 2025-07-20 15:57:35.275 00:00:10.324 TCP 23.104.0.1:35384 -> 1.101.0.1:3000 11 1507 1 2025-07-20 15:58:13.610 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39798 10 6438 1 2025-07-20 15:58:35.637 00:00:10.377 TCP 23.104.0.1:38970 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 505290, total packets: 1570, avg bps: 1108, avg pps: 0, avg bpp: 321 Time window: 2025-07-20 14:57:58 - 2025-07-20 15:58:46 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0027s User: 0.0018s Wall: 0.0023s flows/second: 69056.3 Runtime: 0.0023s