Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 07:58:47.474 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60110 10 6438 1 2025-07-23 07:59:15.986 00:00:10.325 TCP 23.104.0.1:54864 -> 1.101.0.1:3000 11 1507 1 2025-07-23 07:59:47.684 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47246 10 6438 1 2025-07-23 08:00:16.360 00:00:10.361 TCP 23.104.0.1:50662 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:00:47.898 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60088 10 6438 1 2025-07-23 08:01:16.760 00:00:10.372 TCP 23.104.0.1:55892 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:01:48.082 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50116 10 6438 1 2025-07-23 07:56:59.785 00:06:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 07:56:59.784 00:06:00.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 08:02:17.950 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 08:02:17.898 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 08:02:17.172 00:00:10.367 TCP 23.104.0.1:48422 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:02:48.250 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53266 10 6438 1 2025-07-23 08:03:17.586 00:00:10.362 TCP 23.104.0.1:51160 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:03:48.462 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44074 10 6438 1 2025-07-23 08:04:17.991 00:00:10.328 TCP 23.104.0.1:34988 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:04:48.640 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37728 10 6438 1 2025-07-23 08:05:18.363 00:00:10.321 TCP 23.104.0.1:48674 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:05:48.852 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33066 10 6438 1 2025-07-23 08:06:18.717 00:00:10.328 TCP 23.104.0.1:34922 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:06:49.043 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38582 10 6438 1 2025-07-23 08:07:18.030 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 08:07:17.979 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 08:07:19.105 00:00:10.365 TCP 23.104.0.1:56660 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:07:49.267 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54500 10 6438 1 2025-07-23 08:08:19.525 00:00:10.372 TCP 23.104.0.1:43302 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:03:59.784 00:06:00.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 08:08:49.438 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41122 10 6438 1 2025-07-23 08:03:59.788 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 08:09:19.935 00:00:10.338 TCP 23.104.0.1:43350 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:09:49.647 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37970 10 6438 1 2025-07-23 08:10:20.316 00:00:10.365 TCP 23.104.0.1:37768 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:10:49.859 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45524 10 6438 1 2025-07-23 08:11:20.717 00:00:10.370 TCP 23.104.0.1:38902 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:11:50.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38314 10 6438 1 2025-07-23 08:12:18.111 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 08:12:18.139 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 08:12:21.126 00:00:10.364 TCP 23.104.0.1:49086 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:12:50.298 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41886 10 6438 1 2025-07-23 08:13:21.528 00:00:10.373 TCP 23.104.0.1:56810 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:13:50.512 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48598 10 6438 1 2025-07-23 08:14:21.938 00:00:10.331 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:14:50.721 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57128 10 6438 1 2025-07-23 08:15:22.312 00:00:10.324 TCP 23.104.0.1:41464 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:10:59.786 00:06:00.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 08:15:50.898 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34270 10 6438 1 2025-07-23 08:10:59.787 00:06:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 08:16:22.677 00:00:10.370 TCP 23.104.0.1:33298 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:16:51.111 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39554 10 6438 1 2025-07-23 08:17:18.456 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 08:17:18.393 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 08:17:23.109 00:00:10.365 TCP 23.104.0.1:42152 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:17:51.328 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58434 10 6438 1 2025-07-23 08:18:23.512 00:00:10.370 TCP 23.104.0.1:40380 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:18:51.548 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54812 10 6438 1 2025-07-23 08:19:23.924 00:00:10.328 TCP 23.104.0.1:38714 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:19:51.761 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40560 10 6438 1 2025-07-23 08:20:24.296 00:00:10.372 TCP 23.104.0.1:38004 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:20:51.979 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:32934 10 6438 1 2025-07-23 08:21:24.720 00:00:10.383 TCP 23.104.0.1:54734 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:21:52.204 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43416 10 6438 1 2025-07-23 08:22:18.085 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 08:22:18.428 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 08:22:25.140 00:00:10.370 TCP 23.104.0.1:53128 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:17:59.787 00:06:00.200 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 08:17:59.790 00:06:00.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 08:22:52.416 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59536 10 6438 1 2025-07-23 08:23:25.552 00:00:10.320 TCP 23.104.0.1:38236 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:23:52.626 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54318 10 6438 1 2025-07-23 08:24:25.910 00:00:10.329 TCP 23.104.0.1:40316 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:24:52.855 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38642 10 6438 1 2025-07-23 08:25:26.273 00:00:10.322 TCP 23.104.0.1:37504 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:25:53.040 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46144 10 6438 1 2025-07-23 08:26:26.638 00:00:10.325 TCP 23.104.0.1:51990 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:26:53.257 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6438 1 2025-07-23 08:27:18.701 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 08:27:18.644 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 08:27:27.006 00:00:10.364 TCP 23.104.0.1:36404 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:27:53.474 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34874 10 6438 1 2025-07-23 08:28:27.409 00:00:10.365 TCP 23.104.0.1:51794 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:28:53.681 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57488 10 6438 1 2025-07-23 08:29:27.815 00:00:10.372 TCP 23.104.0.1:36266 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:24:59.790 00:06:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 08:24:59.791 00:06:00.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 08:29:53.892 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48718 10 6438 1 2025-07-23 08:30:28.220 00:00:10.368 TCP 23.104.0.1:50012 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:30:54.109 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46852 10 6438 1 2025-07-23 08:31:28.628 00:00:10.328 TCP 23.104.0.1:52824 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:31:54.286 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:38414 10 6438 1 2025-07-23 08:32:18.642 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 08:32:18.552 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 08:32:29.001 00:00:10.368 TCP 23.104.0.1:43218 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:32:54.539 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51214 10 6438 1 2025-07-23 08:33:29.402 00:00:10.372 TCP 23.104.0.1:47330 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:33:54.755 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:43478 10 6438 1 2025-07-23 08:34:29.810 00:00:10.375 TCP 23.104.0.1:52812 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:34:54.948 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60866 10 6438 1 2025-07-23 08:35:30.214 00:00:10.372 TCP 23.104.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:35:55.168 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33308 10 6438 1 2025-07-23 08:36:30.626 00:00:10.333 TCP 23.104.0.1:44696 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:31:59.792 00:06:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 08:31:59.796 00:06:00.196 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 08:36:55.382 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42944 10 6438 1 2025-07-23 08:37:18.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 08:37:18.739 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 08:37:30.999 00:00:10.369 TCP 23.104.0.1:36804 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:37:55.594 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56216 10 6438 1 2025-07-23 08:38:31.412 00:00:10.340 TCP 23.104.0.1:36952 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:38:55.761 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34496 10 6438 1 2025-07-23 08:39:31.779 00:00:10.362 TCP 23.104.0.1:54924 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:39:55.977 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48478 10 6438 1 2025-07-23 08:40:32.179 00:00:10.364 TCP 23.104.0.1:50486 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:40:56.212 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51812 10 6438 1 2025-07-23 08:41:32.584 00:00:10.325 TCP 23.104.0.1:42994 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:41:56.425 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33566 10 6438 1 2025-07-23 08:42:18.674 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 08:42:18.618 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 08:42:32.946 00:00:10.372 TCP 23.104.0.1:38064 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:42:56.651 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34890 10 6438 1 2025-07-23 08:43:33.357 00:00:10.365 TCP 23.104.0.1:46480 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:38:59.794 00:06:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 08:38:59.796 00:06:00.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 08:43:56.870 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60486 10 6438 1 2025-07-23 08:44:33.765 00:00:10.362 TCP 23.104.0.1:48594 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:44:57.103 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48420 10 6438 1 2025-07-23 08:45:34.167 00:00:10.364 TCP 23.104.0.1:55892 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:45:57.275 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45772 10 6438 1 2025-07-23 08:46:34.573 00:00:10.364 TCP 23.104.0.1:51772 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:46:57.443 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60778 10 6438 1 2025-07-23 08:47:18.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 08:47:18.849 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 08:47:34.977 00:00:10.363 TCP 23.104.0.1:36640 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:47:57.655 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42112 10 6438 1 2025-07-23 08:48:35.379 00:00:10.370 TCP 23.104.0.1:51650 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:48:57.871 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52384 12 6530 1 2025-07-23 08:49:35.784 00:00:10.379 TCP 23.104.0.1:43382 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:49:58.066 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:58072 10 6438 1 2025-07-23 08:50:36.199 00:00:10.365 TCP 23.104.0.1:47912 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:45:59.795 00:06:00.205 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 08:45:59.796 00:06:00.200 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 08:50:58.298 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49698 10 6438 1 2025-07-23 08:51:36.604 00:00:10.367 TCP 23.104.0.1:54496 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:51:58.503 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33478 10 6438 1 2025-07-23 08:52:19.287 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 08:52:19.363 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 08:52:37.007 00:00:10.368 TCP 23.104.0.1:53172 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:52:58.685 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:43880 10 6438 1 2025-07-23 08:53:37.412 00:00:10.366 TCP 23.104.0.1:59558 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:53:58.892 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51138 10 6438 1 2025-07-23 08:54:37.815 00:00:10.368 TCP 23.104.0.1:46646 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:54:59.107 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:45500 10 6438 1 2025-07-23 08:55:38.218 00:00:10.365 TCP 23.104.0.1:40306 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:55:59.277 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56028 10 6438 1 2025-07-23 08:56:38.620 00:00:10.364 TCP 23.104.0.1:49040 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:52:59.795 00:05:00.205 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 08:56:59.487 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38484 10 6438 1 2025-07-23 08:57:19.046 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 08:57:18.868 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 08:57:39.024 00:00:10.335 TCP 23.104.0.1:36818 -> 1.101.0.1:3000 11 1507 1 2025-07-23 08:52:59.797 00:06:00.199 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 08:57:59.705 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45108 12 10352 1 2025-07-23 08:58:39.405 00:00:10.463 TCP 23.104.0.1:44106 -> 1.101.0.1:3000 15 1925 1 Summary: total flows: 162, total bytes: 502547, total packets: 1590, avg bps: 1080, avg pps: 0, avg bpp: 316 Time window: 2025-07-23 07:56:59 - 2025-07-23 08:58:59 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0040s User: 0.0030s Wall: 0.0022s flows/second: 73632.1 Runtime: 0.0022s