Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 10:58:53.294 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42516 10 6452 1 2025-08-02 10:58:58.982 00:00:10.364 TCP 23.104.0.1:46000 -> 1.101.0.1:3000 11 1507 1 2025-08-02 10:55:05.141 00:06:00.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 10:59:53.504 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58988 10 6452 1 2025-08-02 10:55:05.138 00:06:00.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 10:59:59.386 00:00:10.376 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:00:53.714 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60692 10 6452 1 2025-08-02 11:00:59.802 00:00:10.365 TCP 23.104.0.1:37810 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:01:53.939 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-08-02 11:02:10.314 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:02:00.207 00:00:10.358 TCP 23.104.0.1:44364 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:02:10.456 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:02:54.176 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56044 10 6452 1 2025-08-02 11:03:00.605 00:00:10.361 TCP 23.104.0.1:47166 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:03:54.348 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-08-02 11:04:01.008 00:00:10.359 TCP 23.104.0.1:50510 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:04:54.565 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47212 10 6452 1 2025-08-02 11:05:01.408 00:00:10.368 TCP 23.104.0.1:58594 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:05:54.741 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51920 10 6452 1 2025-08-02 11:06:01.815 00:00:10.367 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:06:54.952 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40088 10 6452 1 2025-08-02 11:02:05.140 00:06:00.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:02:05.145 00:06:00.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:07:10.592 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:07:10.661 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:07:02.222 00:00:10.320 TCP 23.104.0.1:43636 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:07:55.183 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6452 1 2025-08-02 11:08:02.582 00:00:10.376 TCP 23.104.0.1:35208 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:08:55.404 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54084 10 6452 1 2025-08-02 11:09:03.000 00:00:10.363 TCP 23.104.0.1:44666 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:09:55.618 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58540 10 6452 1 2025-08-02 11:10:03.399 00:00:10.366 TCP 23.104.0.1:52022 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:10:55.831 00:00:10.326 TCP 1.101.0.1:3000 -> 22.102.0.1:55908 10 6452 1 2025-08-02 11:11:03.812 00:00:10.338 TCP 23.104.0.1:46112 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:11:56.199 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54548 10 6452 1 2025-08-02 11:12:10.596 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:12:10.466 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:12:04.189 00:00:10.366 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:12:56.374 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51724 10 6452 1 2025-08-02 11:13:04.593 00:00:10.372 TCP 23.104.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:09:05.146 00:06:00.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:13:56.585 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47960 10 6452 1 2025-08-02 11:09:05.143 00:06:00.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:14:05.003 00:00:10.365 TCP 23.104.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:14:56.812 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48080 10 6452 1 2025-08-02 11:15:05.408 00:00:10.363 TCP 23.104.0.1:50568 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:15:57.031 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39160 10 6452 1 2025-08-02 11:16:05.809 00:00:10.371 TCP 23.104.0.1:44030 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:17:11.101 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:16:57.245 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35184 10 6452 1 2025-08-02 11:17:11.124 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:17:06.215 00:00:10.364 TCP 23.104.0.1:38374 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:17:57.459 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48896 10 6452 1 2025-08-02 11:18:06.622 00:00:10.326 TCP 23.104.0.1:49054 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:18:57.673 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46484 10 6452 1 2025-08-02 11:19:06.989 00:00:10.374 TCP 23.104.0.1:52704 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:19:57.842 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44628 10 6452 1 2025-08-02 11:20:07.398 00:00:10.362 TCP 23.104.0.1:37174 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:16:05.146 00:06:00.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:16:05.148 00:06:00.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:20:58.070 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40280 10 6452 1 2025-08-02 11:21:07.798 00:00:10.368 TCP 23.104.0.1:39046 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:22:10.800 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:21:58.251 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38850 10 6452 1 2025-08-02 11:22:10.904 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:22:08.203 00:00:10.364 TCP 23.104.0.1:41058 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:22:58.457 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6452 1 2025-08-02 11:23:08.608 00:00:10.384 TCP 23.104.0.1:33094 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:23:58.665 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-08-02 11:24:09.044 00:00:10.360 TCP 23.104.0.1:48810 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:24:58.883 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56196 10 6452 1 2025-08-02 11:25:09.442 00:00:10.362 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:25:59.087 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44718 10 6452 1 2025-08-02 11:26:09.839 00:00:10.392 TCP 23.104.0.1:34618 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:27:10.985 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:26:59.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39232 10 6452 1 2025-08-02 11:27:10.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:27:10.276 00:00:10.325 TCP 23.104.0.1:33632 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:23:05.149 00:06:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:23:05.146 00:06:00.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:27:59.518 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58108 10 6452 1 2025-08-02 11:28:10.642 00:00:10.364 TCP 23.104.0.1:33004 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:28:59.734 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51238 10 6452 1 2025-08-02 11:29:11.058 00:00:10.373 TCP 23.104.0.1:48766 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:29:59.944 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35034 10 6452 1 2025-08-02 11:30:11.474 00:00:10.364 TCP 23.104.0.1:55154 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:31:00.178 00:00:10.414 TCP 1.101.0.1:3000 -> 22.102.0.1:42992 10 6452 1 2025-08-02 11:31:11.876 00:00:10.324 TCP 23.104.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:32:11.187 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:32:00.637 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36868 10 6452 1 2025-08-02 11:32:10.986 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:32:12.237 00:00:10.373 TCP 23.104.0.1:52570 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:33:00.869 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57180 10 6452 1 2025-08-02 11:33:12.652 00:00:10.368 TCP 23.104.0.1:49504 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:34:01.102 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57136 10 6452 1 2025-08-02 11:34:13.061 00:00:10.399 TCP 23.104.0.1:60690 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:30:05.151 00:06:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:30:05.148 00:06:00.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:35:01.319 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36542 10 6452 1 2025-08-02 11:35:13.498 00:00:10.371 TCP 23.104.0.1:57926 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:36:01.531 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53772 10 6452 1 2025-08-02 11:36:13.906 00:00:10.363 TCP 23.104.0.1:33100 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:37:11.768 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:37:01.701 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-08-02 11:37:11.934 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:37:14.308 00:00:10.379 TCP 23.104.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:38:01.880 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51226 10 6452 1 2025-08-02 11:38:14.719 00:00:10.379 TCP 23.104.0.1:50072 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:39:02.103 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33432 10 6452 1 2025-08-02 11:39:15.133 00:00:10.363 TCP 23.104.0.1:54262 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:40:02.315 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52332 10 6452 1 2025-08-02 11:40:15.535 00:00:10.378 TCP 23.104.0.1:59014 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:41:02.534 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45028 10 6452 1 2025-08-02 11:41:15.940 00:00:10.392 TCP 23.104.0.1:44366 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:37:05.158 00:06:00.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:37:05.161 00:06:00.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:42:11.346 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:42:11.127 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:42:02.750 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44048 10 6452 1 2025-08-02 11:42:16.380 00:00:10.371 TCP 23.104.0.1:43636 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:43:02.962 00:00:10.270 TCP 1.101.0.1:3000 -> 22.102.0.1:57142 10 6452 1 2025-08-02 11:43:16.790 00:00:10.366 TCP 23.104.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:44:03.269 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49510 10 6452 1 2025-08-02 11:44:17.196 00:00:10.372 TCP 23.104.0.1:49494 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:45:03.484 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-08-02 11:45:17.605 00:00:10.361 TCP 23.104.0.1:33944 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:46:03.692 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 10 6452 1 2025-08-02 11:46:18.009 00:00:10.366 TCP 23.104.0.1:55598 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:47:11.526 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:47:11.322 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:47:03.902 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58718 10 6452 1 2025-08-02 11:47:18.420 00:00:10.322 TCP 23.104.0.1:52006 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:48:04.119 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46050 10 6452 1 2025-08-02 11:48:18.777 00:00:10.374 TCP 23.104.0.1:43670 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:44:05.161 00:06:00.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:44:05.163 00:06:00.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:49:04.333 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53600 10 6452 1 2025-08-02 11:49:19.194 00:00:10.364 TCP 23.104.0.1:37732 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:50:04.548 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:47860 10 6452 1 2025-08-02 11:50:19.598 00:00:10.366 TCP 23.104.0.1:42616 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:51:04.739 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51080 10 6452 1 2025-08-02 11:51:20.005 00:00:10.319 TCP 23.104.0.1:46456 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:52:11.556 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:52:11.330 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:52:04.951 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:34560 10 6452 1 2025-08-02 11:52:20.363 00:00:10.373 TCP 23.104.0.1:56818 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:53:05.153 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49156 10 6452 1 2025-08-02 11:53:20.774 00:00:10.365 TCP 23.104.0.1:46388 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:54:05.365 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37168 10 6452 1 2025-08-02 11:54:21.177 00:00:10.370 TCP 23.104.0.1:50438 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:55:05.580 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48310 10 6452 1 2025-08-02 11:55:21.580 00:00:10.366 TCP 23.104.0.1:58074 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:51:05.164 00:06:00.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:51:05.161 00:06:00.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:56:05.795 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-08-02 11:56:21.986 00:00:10.368 TCP 23.104.0.1:54882 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:57:11.678 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:57:11.476 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:57:06.009 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33834 10 6452 1 2025-08-02 11:57:22.395 00:00:10.364 TCP 23.104.0.1:40424 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:58:06.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45386 10 6452 1 2025-08-02 11:58:22.800 00:00:10.364 TCP 23.104.0.1:50102 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499086, total packets: 1584, avg bps: 1048, avg pps: 0, avg bpp: 315 Time window: 2025-08-02 10:55:05 - 2025-08-02 11:58:33 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0026s User: 0.0017s Wall: 0.0023s flows/second: 71841.5 Runtime: 0.0023s