Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-07 14:59:00.983 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 10 6452 1 2025-08-07 14:59:10.503 00:00:10.327 TCP 23.104.0.1:60296 -> 1.101.0.1:3000 11 1507 1 2025-08-07 14:59:39.807 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 14:59:39.620 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 15:00:01.200 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:37292 10 6452 1 2025-08-07 15:00:10.867 00:00:10.361 TCP 23.104.0.1:56284 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:01:01.369 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60040 10 6452 1 2025-08-07 15:01:11.265 00:00:10.362 TCP 23.104.0.1:38418 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:02:01.578 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51350 10 6452 1 2025-08-07 15:02:11.670 00:00:10.364 TCP 23.104.0.1:34416 -> 1.101.0.1:3000 11 1507 1 2025-08-07 14:59:07.660 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 15:03:01.798 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44478 10 6452 1 2025-08-07 15:03:12.096 00:00:10.361 TCP 23.104.0.1:54240 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:00:07.658 00:05:00.866 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 15:04:02.024 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54842 10 6452 1 2025-08-07 15:04:12.499 00:00:10.366 TCP 23.104.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:04:40.163 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 15:04:40.027 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 15:05:02.252 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56352 10 6452 1 2025-08-07 15:05:12.902 00:00:10.327 TCP 23.104.0.1:33928 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:06:02.466 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49200 10 6452 1 2025-08-07 15:06:13.267 00:00:10.368 TCP 23.104.0.1:59902 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:07:02.638 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57982 10 6452 1 2025-08-07 15:07:13.670 00:00:10.372 TCP 23.104.0.1:43074 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:08:02.817 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58876 10 6452 1 2025-08-07 15:08:14.102 00:00:10.328 TCP 23.104.0.1:33138 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:05:07.661 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 15:09:03.039 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51194 10 6452 1 2025-08-07 15:09:14.476 00:00:10.371 TCP 23.104.0.1:54016 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:09:40.009 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 15:09:39.955 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 15:06:07.660 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 15:10:03.251 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42894 10 6452 1 2025-08-07 15:10:14.888 00:00:10.332 TCP 23.104.0.1:42160 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:11:03.470 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57000 10 6452 1 2025-08-07 15:11:15.262 00:00:10.368 TCP 23.104.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:12:03.701 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:50452 10 6452 1 2025-08-07 15:12:15.665 00:00:10.328 TCP 23.104.0.1:45244 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:13:03.897 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52354 10 6452 1 2025-08-07 15:13:16.031 00:00:10.359 TCP 23.104.0.1:36772 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:14:04.079 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52036 10 6452 1 2025-08-07 15:14:16.427 00:00:10.363 TCP 23.104.0.1:39418 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:14:39.874 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 15:14:39.992 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 15:11:07.664 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 15:15:04.290 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34812 10 6452 1 2025-08-07 15:15:16.829 00:00:10.359 TCP 23.104.0.1:41454 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:12:07.661 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 15:16:04.461 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6452 1 2025-08-07 15:16:17.227 00:00:10.366 TCP 23.104.0.1:40182 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:17:04.674 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59172 10 6452 1 2025-08-07 15:17:17.630 00:00:10.361 TCP 23.104.0.1:33936 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:18:04.885 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51422 10 6452 1 2025-08-07 15:18:18.030 00:00:10.326 TCP 23.104.0.1:58378 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:19:05.121 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49308 10 6452 1 2025-08-07 15:19:18.389 00:00:10.325 TCP 23.104.0.1:36820 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:19:40.128 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 15:19:40.175 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 15:20:05.328 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52934 10 6452 1 2025-08-07 15:20:18.750 00:00:10.326 TCP 23.104.0.1:51384 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:17:07.665 00:05:00.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 15:21:05.543 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58416 10 6452 1 2025-08-07 15:21:19.113 00:00:10.363 TCP 23.104.0.1:42622 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:18:07.663 00:05:00.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 15:22:05.751 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59078 10 6452 1 2025-08-07 15:22:19.524 00:00:10.366 TCP 23.104.0.1:48540 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:23:05.965 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59350 10 6452 1 2025-08-07 15:23:19.936 00:00:10.385 TCP 23.104.0.1:47502 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:24:06.194 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54370 10 6452 1 2025-08-07 15:24:20.366 00:00:10.364 TCP 23.104.0.1:34994 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:24:40.313 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 15:24:40.132 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 15:25:06.402 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56384 10 6452 1 2025-08-07 15:25:20.769 00:00:10.332 TCP 23.104.0.1:51458 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:26:06.579 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35226 10 6452 1 2025-08-07 15:26:21.141 00:00:10.370 TCP 23.104.0.1:33526 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:23:07.667 00:05:00.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 15:27:06.806 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:45406 10 6452 1 2025-08-07 15:27:21.551 00:00:10.361 TCP 23.104.0.1:36712 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:24:07.665 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 15:28:07.079 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38560 10 6452 1 2025-08-07 15:28:21.962 00:00:10.367 TCP 23.104.0.1:37204 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:29:07.293 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56664 10 6452 1 2025-08-07 15:29:22.366 00:00:10.368 TCP 23.104.0.1:53488 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:29:40.144 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 15:29:40.436 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 15:30:07.508 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59320 10 6452 1 2025-08-07 15:30:22.804 00:00:10.363 TCP 23.104.0.1:37920 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:31:07.720 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39074 10 6452 1 2025-08-07 15:31:23.206 00:00:10.362 TCP 23.104.0.1:38512 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:32:07.935 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:36512 10 6452 1 2025-08-07 15:32:23.605 00:00:10.333 TCP 23.104.0.1:50886 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:29:07.673 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 15:33:08.173 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59368 10 6452 1 2025-08-07 15:33:23.969 00:00:10.330 TCP 23.104.0.1:55954 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:30:07.670 00:05:00.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 15:34:08.344 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51616 10 6452 1 2025-08-07 15:34:24.335 00:00:10.361 TCP 23.104.0.1:54650 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:34:40.335 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 15:34:40.379 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 15:35:08.567 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47154 10 6452 1 2025-08-07 15:35:24.733 00:00:10.369 TCP 23.104.0.1:48108 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:36:08.745 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51904 10 6452 1 2025-08-07 15:36:25.137 00:00:10.333 TCP 23.104.0.1:40892 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:37:08.960 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:41202 12 6556 1 2025-08-07 15:37:25.513 00:00:10.368 TCP 23.104.0.1:38416 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:38:09.199 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52734 10 6452 1 2025-08-07 15:38:25.922 00:00:10.383 TCP 23.104.0.1:59194 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:35:07.677 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 15:39:09.433 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40352 10 6452 1 2025-08-07 15:39:26.344 00:00:10.321 TCP 23.104.0.1:57606 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:39:40.464 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 15:39:40.270 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 15:36:07.675 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 15:40:09.669 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50220 10 6452 1 2025-08-07 15:40:26.706 00:00:10.322 TCP 23.104.0.1:38674 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:41:09.884 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51500 10 6452 1 2025-08-07 15:41:27.090 00:00:10.322 TCP 23.104.0.1:51078 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:42:10.103 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48954 10 6452 1 2025-08-07 15:42:27.453 00:00:10.324 TCP 23.104.0.1:53980 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:43:10.322 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59800 10 6452 1 2025-08-07 15:43:27.821 00:00:10.327 TCP 23.104.0.1:35418 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:44:10.542 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44072 10 6452 1 2025-08-07 15:44:40.610 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 15:44:28.185 00:00:10.371 TCP 23.104.0.1:44654 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:44:40.675 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 15:41:07.680 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 15:45:10.752 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59846 10 6452 1 2025-08-07 15:45:28.597 00:00:10.367 TCP 23.104.0.1:40132 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:42:07.678 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 15:46:10.966 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60488 10 6452 1 2025-08-07 15:46:29.006 00:00:10.359 TCP 23.104.0.1:51462 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:47:11.192 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40890 10 6452 1 2025-08-07 15:47:29.413 00:00:10.369 TCP 23.104.0.1:38448 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:48:11.417 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35250 10 6452 1 2025-08-07 15:48:29.823 00:00:10.366 TCP 23.104.0.1:49572 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:49:11.626 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46552 10 6452 1 2025-08-07 15:49:40.687 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 15:49:30.225 00:00:10.366 TCP 23.104.0.1:55448 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:49:40.747 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 15:50:11.843 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40290 10 6452 1 2025-08-07 15:50:30.628 00:00:10.369 TCP 23.104.0.1:33978 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:47:07.681 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 15:51:12.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44898 10 6452 1 2025-08-07 15:51:31.032 00:00:10.329 TCP 23.104.0.1:39970 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:48:07.679 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 15:52:12.290 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58416 10 6452 1 2025-08-07 15:52:31.401 00:00:10.330 TCP 23.104.0.1:56714 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:53:12.504 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34620 10 6452 1 2025-08-07 15:53:31.765 00:00:10.346 TCP 23.104.0.1:46536 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:54:12.679 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40982 10 6452 1 2025-08-07 15:54:40.729 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 15:54:40.834 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 15:54:32.143 00:00:10.372 TCP 23.104.0.1:38820 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:55:12.892 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51124 10 6452 1 2025-08-07 15:55:32.553 00:00:10.347 TCP 23.104.0.1:35686 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:56:13.110 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42190 10 6452 1 2025-08-07 15:56:32.917 00:00:10.399 TCP 23.104.0.1:57234 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:53:07.683 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 15:57:13.284 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40704 10 6452 1 2025-08-07 15:57:33.381 00:00:10.372 TCP 23.104.0.1:54536 -> 1.101.0.1:3000 11 1507 1 2025-08-07 15:54:07.681 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 15:58:13.498 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58374 10 6452 1 2025-08-07 15:58:33.781 00:00:10.372 TCP 23.104.0.1:57490 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1105, avg pps: 0, avg bpp: 316 Time window: 2025-08-07 14:59:00 - 2025-08-07 15:59:08 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0045s User: 0.0009s Wall: 0.0025s flows/second: 66718.3 Runtime: 0.0025s