Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 13:59:16.483 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45042 10 6452 1 2025-08-01 13:59:28.282 00:00:10.374 TCP 23.104.0.1:56552 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:00:16.700 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57030 10 6452 1 2025-08-01 14:00:28.692 00:00:10.369 TCP 23.104.0.1:54610 -> 1.101.0.1:3000 11 1507 1 2025-08-01 13:56:04.601 00:06:00.018 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 13:56:04.615 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 14:01:16.871 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46264 10 6452 1 2025-08-01 14:01:29.115 00:00:10.402 TCP 23.104.0.1:53064 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:01:45.202 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 14:01:45.147 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 14:02:17.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2025-08-01 14:02:29.584 00:00:10.380 TCP 23.104.0.1:47416 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:03:17.300 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49172 10 6452 1 2025-08-01 14:03:30.004 00:00:10.320 TCP 23.104.0.1:48446 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:04:17.515 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43810 10 6452 1 2025-08-01 14:04:30.365 00:00:10.361 TCP 23.104.0.1:52788 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:05:17.685 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47944 10 6452 1 2025-08-01 14:05:30.764 00:00:10.335 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:06:17.897 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36832 10 6452 1 2025-08-01 14:06:45.401 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 14:06:31.136 00:00:10.363 TCP 23.104.0.1:53592 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:06:45.411 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 14:07:18.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49024 10 6452 1 2025-08-01 14:07:31.535 00:00:10.369 TCP 23.104.0.1:43442 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:03:04.602 00:06:00.022 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 14:03:04.615 00:06:00.006 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 14:08:18.323 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46606 10 6452 1 2025-08-01 14:08:31.939 00:00:10.371 TCP 23.104.0.1:60762 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:09:18.533 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40008 10 6452 1 2025-08-01 14:09:32.350 00:00:10.358 TCP 23.104.0.1:48878 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:10:18.706 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37216 10 6452 1 2025-08-01 14:10:32.751 00:00:10.382 TCP 23.104.0.1:45060 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:11:18.880 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37368 10 6452 1 2025-08-01 14:11:46.351 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 14:11:45.786 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 14:11:33.172 00:00:10.366 TCP 23.104.0.1:46486 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:12:19.100 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56590 10 6452 1 2025-08-01 14:12:33.575 00:00:10.371 TCP 23.104.0.1:37714 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:13:19.310 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37438 10 6452 1 2025-08-01 14:13:33.985 00:00:10.328 TCP 23.104.0.1:34028 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:14:19.536 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55166 10 6452 1 2025-08-01 14:14:34.349 00:00:10.366 TCP 23.104.0.1:38662 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:10:04.605 00:06:00.020 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 14:10:04.621 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 14:15:19.762 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51978 10 6452 1 2025-08-01 14:15:34.753 00:00:10.359 TCP 23.104.0.1:36162 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:16:19.976 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42568 10 6452 1 2025-08-01 14:16:45.586 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 14:16:45.639 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 14:16:35.153 00:00:10.370 TCP 23.104.0.1:34356 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:17:20.219 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44158 10 6452 1 2025-08-01 14:17:35.553 00:00:10.365 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:18:20.434 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45658 10 6452 1 2025-08-01 14:18:35.960 00:00:10.368 TCP 23.104.0.1:60584 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:19:20.598 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44912 10 6452 1 2025-08-01 14:19:36.363 00:00:10.322 TCP 23.104.0.1:50612 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:20:20.809 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33704 10 6452 1 2025-08-01 14:20:36.726 00:00:10.374 TCP 23.104.0.1:60206 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:21:21.035 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58166 10 6452 1 2025-08-01 14:21:45.793 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 14:21:45.553 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 14:21:37.140 00:00:10.367 TCP 23.104.0.1:34326 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:17:04.606 00:06:00.021 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 14:17:04.623 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 14:22:21.205 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51366 10 6452 1 2025-08-01 14:22:37.552 00:00:10.360 TCP 23.104.0.1:49606 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:23:21.414 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50798 10 6452 1 2025-08-01 14:23:37.950 00:00:10.524 TCP 23.104.0.1:54256 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:24:21.629 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42422 10 6452 1 2025-08-01 14:24:38.516 00:00:10.362 TCP 23.104.0.1:41938 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:25:21.841 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50278 10 6452 1 2025-08-01 14:25:38.915 00:00:10.385 TCP 23.104.0.1:48128 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:26:22.009 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41916 10 6452 1 2025-08-01 14:26:45.661 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 14:26:45.540 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 14:26:39.337 00:00:10.361 TCP 23.104.0.1:56186 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:27:22.225 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33914 10 6452 1 2025-08-01 14:27:39.740 00:00:10.364 TCP 23.104.0.1:41004 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:28:22.432 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36596 10 6452 1 2025-08-01 14:28:40.143 00:00:10.362 TCP 23.104.0.1:59876 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:24:04.625 00:06:00.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 14:24:04.608 00:06:00.028 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 14:29:22.652 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60070 10 6452 1 2025-08-01 14:29:40.547 00:00:10.334 TCP 23.104.0.1:49962 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:30:22.862 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54696 10 6452 1 2025-08-01 14:30:40.919 00:00:10.397 TCP 23.104.0.1:46936 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:31:23.085 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58612 10 6452 1 2025-08-01 14:31:45.884 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 14:31:46.212 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 14:31:41.364 00:00:10.373 TCP 23.104.0.1:34584 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:32:23.297 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35494 10 6452 1 2025-08-01 14:32:41.787 00:00:10.361 TCP 23.104.0.1:57040 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:33:23.518 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45472 10 6452 1 2025-08-01 14:33:42.189 00:00:10.367 TCP 23.104.0.1:40934 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:34:23.739 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57284 10 6452 1 2025-08-01 14:34:42.589 00:00:10.323 TCP 23.104.0.1:46934 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:35:23.958 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55034 10 6452 1 2025-08-01 14:35:42.952 00:00:10.368 TCP 23.104.0.1:41774 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:31:04.611 00:06:00.025 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 14:31:04.633 00:06:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 14:36:24.189 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36490 10 6452 1 2025-08-01 14:36:45.990 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 14:36:45.849 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 14:36:43.359 00:00:10.325 TCP 23.104.0.1:55794 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:37:24.398 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33400 10 6452 1 2025-08-01 14:37:43.723 00:00:10.373 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 12 1559 1 2025-08-01 14:38:24.605 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54210 10 6452 1 2025-08-01 14:38:44.134 00:00:10.366 TCP 23.104.0.1:58238 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:39:24.779 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51100 10 6452 1 2025-08-01 14:39:44.540 00:00:10.367 TCP 23.104.0.1:42256 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:40:24.995 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56894 10 6452 1 2025-08-01 14:40:44.947 00:00:10.366 TCP 23.104.0.1:38972 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:41:25.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33238 10 6452 1 2025-08-01 14:41:45.932 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 14:41:46.082 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 14:41:45.357 00:00:10.367 TCP 23.104.0.1:39624 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:42:25.431 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49944 10 6452 1 2025-08-01 14:42:45.759 00:00:10.377 TCP 23.104.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:38:04.634 00:06:00.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 14:38:04.612 00:06:00.032 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 14:43:25.653 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36958 10 6452 1 2025-08-01 14:43:46.177 00:00:10.363 TCP 23.104.0.1:57498 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:44:25.866 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50152 10 6452 1 2025-08-01 14:44:46.574 00:00:10.363 TCP 23.104.0.1:51124 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:45:26.083 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59202 10 6452 1 2025-08-01 14:45:46.972 00:00:10.367 TCP 23.104.0.1:49612 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:46:26.302 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48576 10 6452 1 2025-08-01 14:46:46.139 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 14:46:46.155 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 14:46:47.373 00:00:10.325 TCP 23.104.0.1:54834 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:47:26.528 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48834 10 6452 1 2025-08-01 14:47:47.738 00:00:10.368 TCP 23.104.0.1:44878 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:48:26.743 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53248 10 6452 1 2025-08-01 14:48:48.145 00:00:10.366 TCP 23.104.0.1:58978 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:49:26.953 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55036 10 6452 1 2025-08-01 14:49:48.547 00:00:10.321 TCP 23.104.0.1:52362 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:45:04.615 00:06:00.032 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 14:45:04.642 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 14:50:27.171 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37638 10 6452 1 2025-08-01 14:50:48.907 00:00:10.365 TCP 23.104.0.1:49462 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:51:27.347 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40906 10 6452 1 2025-08-01 14:51:46.232 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 14:51:46.199 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 14:51:49.308 00:00:10.322 TCP 23.104.0.1:36414 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:52:27.552 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35952 10 6452 1 2025-08-01 14:52:49.671 00:00:10.327 TCP 23.104.0.1:35624 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:53:27.769 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48334 12 10367 1 2025-08-01 14:53:50.041 00:00:10.440 TCP 23.104.0.1:50936 -> 1.101.0.1:3000 15 1926 1 2025-08-01 14:54:28.008 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57556 10 6452 1 2025-08-01 14:54:50.531 00:00:10.322 TCP 23.104.0.1:57562 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:55:28.228 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51582 10 6452 1 2025-08-01 14:55:50.891 00:00:10.380 TCP 23.104.0.1:54998 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:56:28.440 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46832 10 6452 1 2025-08-01 14:56:46.455 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 14:56:46.774 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 14:52:04.617 00:06:00.031 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 14:56:51.305 00:00:10.361 TCP 23.104.0.1:45902 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:52:04.645 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 14:57:28.656 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32880 10 6452 1 2025-08-01 14:57:51.709 00:00:10.363 TCP 23.104.0.1:51098 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:58:28.868 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:57978 12 10365 1 Summary: total flows: 161, total bytes: 502602, total packets: 1519, avg bps: 1070, avg pps: 0, avg bpp: 330 Time window: 2025-08-01 13:56:04 - 2025-08-01 14:58:39 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0018s User: 0.0027s Wall: 0.0027s flows/second: 60433.4 Runtime: 0.0027s