Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 10:59:23.193 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:35672 10 6452 1 2025-08-04 10:59:35.839 00:00:10.390 TCP 23.104.0.1:37642 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:00:23.408 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54022 10 6452 1 2025-08-04 11:00:36.270 00:00:10.371 TCP 23.104.0.1:46724 -> 1.101.0.1:3000 11 1507 1 2025-08-04 10:57:06.200 00:04:00.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 10:57:06.204 00:04:00.300 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 11:01:23.622 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60312 10 6452 1 2025-08-04 11:01:36.682 00:00:10.377 TCP 23.104.0.1:47148 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:02:23.832 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40478 10 6452 1 2025-08-04 11:02:37.102 00:00:10.362 TCP 23.104.0.1:53080 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:03:08.169 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 11:03:08.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 11:03:24.066 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34996 10 6452 1 2025-08-04 11:03:37.500 00:00:10.368 TCP 23.104.0.1:45042 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:04:24.284 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48688 10 6452 1 2025-08-04 11:04:37.908 00:00:10.369 TCP 23.104.0.1:39924 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:05:24.458 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43824 10 6452 1 2025-08-04 11:05:38.314 00:00:10.375 TCP 23.104.0.1:36608 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:02:06.202 00:04:00.307 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 11:02:06.204 00:04:00.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 11:06:24.675 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46412 10 6452 1 2025-08-04 11:06:38.738 00:00:10.369 TCP 23.104.0.1:55662 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:07:24.894 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58800 10 6452 1 2025-08-04 11:07:39.143 00:00:10.370 TCP 23.104.0.1:39772 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:07:06.205 00:01:00.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 4 246 1 2025-08-04 11:07:06.207 00:01:00.301 TCP 179.1.22.22:39396 -> 179.1.22.1:179 4 246 1 2025-08-04 11:08:08.453 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 11:08:08.317 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 11:08:25.090 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33550 10 6452 1 2025-08-04 11:08:39.547 00:00:10.368 TCP 23.104.0.1:43896 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:09:25.330 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36058 10 6452 1 2025-08-04 11:09:39.945 00:00:10.371 TCP 23.104.0.1:51066 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:10:25.540 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56448 10 6452 1 2025-08-04 11:10:40.354 00:00:10.367 TCP 23.104.0.1:57668 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:11:25.753 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48906 10 6452 1 2025-08-04 11:11:40.754 00:00:10.331 TCP 23.104.0.1:48060 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:12:25.966 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43414 10 6452 1 2025-08-04 11:12:41.124 00:00:10.364 TCP 23.104.0.1:50850 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:09:06.207 00:04:00.303 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 11:09:06.205 00:04:00.308 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 11:13:08.626 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 11:13:08.576 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 11:13:26.140 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58702 10 6452 1 2025-08-04 11:13:41.529 00:00:10.387 TCP 23.104.0.1:60004 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:14:26.351 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41978 10 6452 1 2025-08-04 11:14:41.968 00:00:10.371 TCP 23.104.0.1:34136 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:15:26.575 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58470 10 6452 1 2025-08-04 11:15:42.387 00:00:10.326 TCP 23.104.0.1:46240 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:16:26.794 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45476 10 6452 1 2025-08-04 11:16:42.755 00:00:10.344 TCP 23.104.0.1:33398 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:17:27.005 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41114 10 6452 1 2025-08-04 11:17:43.139 00:00:10.365 TCP 23.104.0.1:36346 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:14:06.206 00:04:00.308 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 11:18:08.571 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 11:14:06.208 00:04:00.303 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 11:18:08.686 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 11:18:27.183 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53428 10 6452 1 2025-08-04 11:18:43.543 00:00:10.322 TCP 23.104.0.1:34596 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:19:27.396 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38730 10 6452 1 2025-08-04 11:19:43.903 00:00:10.364 TCP 23.104.0.1:48552 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:20:27.616 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40544 10 6452 1 2025-08-04 11:20:44.302 00:00:10.554 TCP 23.104.0.1:41822 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:21:27.835 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50060 10 6452 1 2025-08-04 11:21:44.894 00:00:10.370 TCP 23.104.0.1:50822 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:22:28.080 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44514 10 6452 1 2025-08-04 11:22:45.300 00:00:10.324 TCP 23.104.0.1:36066 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:19:06.208 00:04:00.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 11:19:06.209 00:04:00.311 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 11:23:08.830 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 11:23:08.594 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 11:23:28.302 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:40442 13 13935 1 2025-08-04 11:23:45.664 00:00:10.443 TCP 23.104.0.1:48742 -> 1.101.0.1:3000 15 1926 1 2025-08-04 11:24:28.548 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48994 10 6452 1 2025-08-04 11:24:46.143 00:00:10.366 TCP 23.104.0.1:43728 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:25:28.771 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58572 10 6452 1 2025-08-04 11:25:46.550 00:00:10.365 TCP 23.104.0.1:48384 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:26:28.997 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:47512 10 6452 1 2025-08-04 11:26:46.955 00:00:10.365 TCP 23.104.0.1:51576 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:27:29.253 00:00:10.302 TCP 1.101.0.1:3000 -> 22.102.0.1:42176 10 6452 1 2025-08-04 11:27:47.364 00:00:10.362 TCP 23.104.0.1:57558 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:24:06.207 00:04:00.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 11:24:06.209 00:04:00.310 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 11:28:08.778 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 11:28:08.602 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 11:28:29.593 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44458 12 10367 1 2025-08-04 11:28:47.766 00:00:10.465 TCP 23.104.0.1:49346 -> 1.101.0.1:3000 15 1926 1 2025-08-04 11:29:29.842 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-08-04 11:29:48.272 00:00:10.363 TCP 23.104.0.1:50734 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:30:30.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33364 10 6452 1 2025-08-04 11:30:48.676 00:00:10.326 TCP 23.104.0.1:50788 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:31:30.292 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35318 10 6452 1 2025-08-04 11:31:49.044 00:00:10.362 TCP 23.104.0.1:50984 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:32:30.463 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36624 10 6452 1 2025-08-04 11:32:49.452 00:00:10.359 TCP 23.104.0.1:39730 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:29:06.210 00:04:00.311 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 11:29:06.208 00:04:00.316 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 11:33:09.299 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 11:33:09.018 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 11:33:30.673 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48222 10 6452 1 2025-08-04 11:33:49.850 00:00:10.379 TCP 23.104.0.1:36156 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:34:30.882 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37310 10 6452 1 2025-08-04 11:34:50.266 00:00:10.375 TCP 23.104.0.1:33524 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:35:31.105 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43820 10 6452 1 2025-08-04 11:35:50.684 00:00:10.327 TCP 23.104.0.1:46346 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:36:31.319 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59708 10 6452 1 2025-08-04 11:36:51.057 00:00:13.555 TCP 23.104.0.1:33894 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:37:31.534 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-08-04 11:37:54.684 00:00:10.321 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:34:06.210 00:04:00.313 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 11:34:06.208 00:04:00.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 11:38:09.192 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 11:38:09.062 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 11:38:31.713 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 10 6452 1 2025-08-04 11:38:55.051 00:00:10.363 TCP 23.104.0.1:45780 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:39:31.883 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41242 10 6452 1 2025-08-04 11:39:55.455 00:00:10.359 TCP 23.104.0.1:56542 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:39:06.208 00:01:00.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 4 246 1 2025-08-04 11:40:32.101 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44094 10 6452 1 2025-08-04 11:40:55.855 00:00:10.378 TCP 23.104.0.1:60228 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:41:32.309 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43792 10 6452 1 2025-08-04 11:41:56.268 00:00:10.364 TCP 23.104.0.1:39418 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:42:32.527 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36536 10 6452 1 2025-08-04 11:43:08.821 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 11:42:56.667 00:00:10.366 TCP 23.104.0.1:37308 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:43:09.238 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 11:43:32.738 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34556 10 6452 1 2025-08-04 11:39:06.211 00:06:00.313 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 11:43:57.099 00:00:10.364 TCP 23.104.0.1:52902 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:44:32.948 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38928 10 6452 1 2025-08-04 11:41:06.210 00:04:00.317 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 11:44:57.509 00:00:10.333 TCP 23.104.0.1:52878 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:45:33.177 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51764 10 6452 1 2025-08-04 11:45:57.878 00:00:10.365 TCP 23.104.0.1:37988 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:46:33.346 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52186 10 6452 1 2025-08-04 11:46:58.285 00:00:10.362 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:47:33.558 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59436 10 6452 1 2025-08-04 11:48:09.089 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 11:47:58.688 00:00:10.362 TCP 23.104.0.1:54396 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:48:09.199 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 11:48:33.726 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47572 10 6452 1 2025-08-04 11:48:59.105 00:00:10.371 TCP 23.104.0.1:49734 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:49:33.900 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52842 10 6452 1 2025-08-04 11:46:06.212 00:04:00.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 11:46:06.215 00:04:00.310 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 11:49:59.515 00:00:10.365 TCP 23.104.0.1:42764 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:50:34.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59520 10 6452 1 2025-08-04 11:50:59.928 00:00:10.351 TCP 23.104.0.1:37962 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:51:34.325 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49528 10 6452 1 2025-08-04 11:52:00.316 00:00:10.364 TCP 23.104.0.1:46052 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:52:34.545 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56380 10 6452 1 2025-08-04 11:53:00.733 00:00:10.364 TCP 23.104.0.1:42296 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:53:08.968 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 11:53:09.316 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 11:53:34.763 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58972 10 6452 1 2025-08-04 11:54:01.139 00:00:10.364 TCP 23.104.0.1:54928 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:54:35.001 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56664 10 6452 1 2025-08-04 11:51:06.214 00:04:00.317 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 11:51:06.216 00:04:00.312 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 11:55:01.546 00:00:10.369 TCP 23.104.0.1:33246 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:55:35.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58978 10 6452 1 2025-08-04 11:56:01.959 00:00:10.324 TCP 23.104.0.1:41120 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:56:35.440 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47274 10 6452 1 2025-08-04 11:57:02.318 00:00:10.365 TCP 23.104.0.1:48370 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:57:35.651 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39904 10 6452 1 2025-08-04 11:58:09.450 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 11:58:09.473 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 11:58:02.727 00:00:10.333 TCP 23.104.0.1:51086 -> 1.101.0.1:3000 11 1507 1 2025-08-04 11:58:35.866 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55596 10 6452 1 Summary: total flows: 168, total bytes: 508831, total packets: 1570, avg bps: 1100, avg pps: 0, avg bpp: 324 Time window: 2025-08-04 10:57:06 - 2025-08-04 11:58:46 Total flows processed: 168, passed: 168, Blocks skipped: 0, Bytes read: 17536 Sys: 0.0057s User: 0.0019s Wall: 0.0030s flows/second: 55479.3 Runtime: 0.0031s