Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-10 13:59:25.665 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35696 10 6452 1 2025-08-10 13:59:35.011 00:00:10.340 TCP 23.104.0.1:60580 -> 1.101.0.1:3000 12 1559 1 2025-08-10 13:55:09.162 00:06:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 14:00:25.835 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45614 10 6452 1 2025-08-10 14:00:35.419 00:00:10.364 TCP 23.104.0.1:55910 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:01:05.188 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 14:01:04.957 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 14:01:26.069 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39444 10 6452 1 2025-08-10 14:01:35.821 00:00:10.326 TCP 23.104.0.1:58864 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:02:26.283 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34724 10 6452 1 2025-08-10 14:02:36.186 00:00:10.366 TCP 23.104.0.1:54622 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:03:26.463 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43136 10 6452 1 2025-08-10 14:03:36.591 00:00:10.324 TCP 23.104.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:04:26.682 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36510 10 6452 1 2025-08-10 14:04:36.953 00:00:10.326 TCP 23.104.0.1:57110 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:00:09.162 00:06:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 14:05:26.895 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35026 10 6452 1 2025-08-10 14:05:37.318 00:00:10.324 TCP 23.104.0.1:42248 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:06:05.032 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 14:06:04.965 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 14:06:27.110 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48766 10 6452 1 2025-08-10 14:06:37.683 00:00:10.363 TCP 23.104.0.1:43142 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:02:09.166 00:06:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 14:07:27.285 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59218 10 6452 1 2025-08-10 14:07:38.108 00:00:10.378 TCP 23.104.0.1:47694 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:08:27.461 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48310 10 6452 1 2025-08-10 14:08:38.527 00:00:10.328 TCP 23.104.0.1:46390 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:09:27.643 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48500 10 6452 1 2025-08-10 14:09:38.885 00:00:10.346 TCP 23.104.0.1:36230 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:10:27.853 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59442 10 6452 1 2025-08-10 14:10:39.269 00:00:10.328 TCP 23.104.0.1:35518 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:11:05.470 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 14:11:05.282 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 14:11:28.079 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56122 10 6452 1 2025-08-10 14:11:39.631 00:00:10.327 TCP 23.104.0.1:50008 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:07:09.166 00:06:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 14:12:28.293 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:44546 10 6452 1 2025-08-10 14:12:40.005 00:00:10.368 TCP 23.104.0.1:43428 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:13:28.462 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38176 10 6452 1 2025-08-10 14:13:40.408 00:00:10.335 TCP 23.104.0.1:39804 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:09:09.168 00:06:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 14:14:28.676 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54892 10 6452 1 2025-08-10 14:14:40.781 00:00:10.326 TCP 23.104.0.1:48886 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:15:28.850 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50562 10 6452 1 2025-08-10 14:15:41.142 00:00:10.371 TCP 23.104.0.1:41260 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:16:05.380 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 14:16:05.326 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 14:16:29.081 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47460 10 6452 1 2025-08-10 14:16:41.551 00:00:10.367 TCP 23.104.0.1:40620 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:17:29.292 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44604 10 6452 1 2025-08-10 14:17:41.958 00:00:10.371 TCP 23.104.0.1:38064 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:18:29.469 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52948 10 6452 1 2025-08-10 14:18:42.365 00:00:10.318 TCP 23.104.0.1:53970 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:14:09.165 00:06:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 14:19:29.681 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35348 12 10367 1 2025-08-10 14:19:42.725 00:00:10.442 TCP 23.104.0.1:50830 -> 1.101.0.1:3000 15 1926 1 2025-08-10 14:20:29.926 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53190 10 6452 1 2025-08-10 14:20:43.204 00:00:10.368 TCP 23.104.0.1:37084 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:21:05.819 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 14:21:05.542 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 14:16:09.169 00:06:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 14:21:30.103 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48706 12 6556 1 2025-08-10 14:21:43.609 00:00:10.365 TCP 23.104.0.1:38704 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:22:30.311 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52200 10 6452 1 2025-08-10 14:22:44.012 00:00:10.372 TCP 23.104.0.1:59196 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:23:30.526 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40674 10 6452 1 2025-08-10 14:23:44.414 00:00:10.362 TCP 23.104.0.1:57034 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:24:30.692 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:54256 12 10367 1 2025-08-10 14:24:44.817 00:00:10.529 TCP 23.104.0.1:54324 -> 1.101.0.1:3000 15 1926 1 2025-08-10 14:25:30.928 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:47806 10 6452 1 2025-08-10 14:25:45.384 00:00:10.324 TCP 23.104.0.1:42458 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:26:05.469 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 14:26:05.673 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 14:21:09.167 00:06:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 14:26:31.165 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44612 10 6452 1 2025-08-10 14:26:45.753 00:00:10.389 TCP 23.104.0.1:58418 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:27:31.376 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51284 10 6452 1 2025-08-10 14:27:46.183 00:00:10.511 TCP 23.104.0.1:47568 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:23:09.169 00:06:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 14:28:31.589 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37300 10 6452 1 2025-08-10 14:28:46.738 00:00:10.409 TCP 23.104.0.1:45888 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:29:31.797 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44946 10 6452 1 2025-08-10 14:29:47.185 00:00:10.368 TCP 23.104.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:30:32.011 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42996 10 6452 1 2025-08-10 14:30:47.593 00:00:10.380 TCP 23.104.0.1:41622 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:31:05.781 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 14:31:05.572 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 14:31:32.224 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55358 10 6452 1 2025-08-10 14:31:48.004 00:00:10.369 TCP 23.104.0.1:37904 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:32:32.394 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45550 10 6452 1 2025-08-10 14:32:48.413 00:00:10.362 TCP 23.104.0.1:39032 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:28:09.170 00:06:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 14:33:32.608 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45494 10 6452 1 2025-08-10 14:33:48.815 00:00:10.369 TCP 23.104.0.1:57488 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:34:32.822 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51938 10 6452 1 2025-08-10 14:34:49.221 00:00:10.325 TCP 23.104.0.1:60934 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:30:09.170 00:06:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 14:35:33.039 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50640 10 6452 1 2025-08-10 14:36:05.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 14:35:49.582 00:00:10.369 TCP 23.104.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:36:05.541 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 14:36:33.252 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43660 10 6452 1 2025-08-10 14:36:49.992 00:00:10.376 TCP 23.104.0.1:47312 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:37:33.461 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35268 10 6452 1 2025-08-10 14:37:50.400 00:00:10.327 TCP 23.104.0.1:44100 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:38:33.672 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39318 10 6452 1 2025-08-10 14:38:50.766 00:00:10.370 TCP 23.104.0.1:33270 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:39:33.886 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41532 10 6452 1 2025-08-10 14:39:51.177 00:00:10.329 TCP 23.104.0.1:55658 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:35:09.170 00:06:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 14:40:34.106 00:00:10.409 TCP 1.101.0.1:3000 -> 22.102.0.1:41086 10 6452 1 2025-08-10 14:40:51.544 00:00:10.370 TCP 23.104.0.1:55390 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:41:05.788 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 14:41:05.733 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 14:41:34.555 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36468 10 6452 1 2025-08-10 14:41:51.955 00:00:10.329 TCP 23.104.0.1:36444 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:37:09.175 00:06:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 14:42:34.767 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41244 10 6452 1 2025-08-10 14:42:52.321 00:00:10.364 TCP 23.104.0.1:36554 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:43:34.990 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39682 10 6452 1 2025-08-10 14:43:52.721 00:00:10.374 TCP 23.104.0.1:43956 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:44:35.234 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47204 10 6452 1 2025-08-10 14:44:53.131 00:00:10.362 TCP 23.104.0.1:46334 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:45:35.453 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44044 10 6452 1 2025-08-10 14:46:06.226 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 14:45:53.539 00:00:10.455 TCP 23.104.0.1:53338 -> 1.101.0.1:3000 13 1611 1 2025-08-10 14:46:05.922 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 14:46:35.676 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53978 10 6452 1 2025-08-10 14:46:54.034 00:00:10.323 TCP 23.104.0.1:53002 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:42:09.172 00:06:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 14:47:35.890 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48076 10 6452 1 2025-08-10 14:47:54.404 00:00:10.321 TCP 23.104.0.1:57776 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:48:36.116 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51090 10 6452 1 2025-08-10 14:48:54.762 00:00:10.332 TCP 23.104.0.1:47966 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:44:09.176 00:06:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 14:49:36.331 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44078 10 6452 1 2025-08-10 14:49:55.133 00:00:10.375 TCP 23.104.0.1:55494 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:50:36.547 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47546 10 6452 1 2025-08-10 14:51:06.055 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 14:51:06.106 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 14:50:55.558 00:00:10.359 TCP 23.104.0.1:44388 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:51:36.772 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41240 10 6452 1 2025-08-10 14:51:55.957 00:00:10.329 TCP 23.104.0.1:53674 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:52:36.986 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36950 10 6452 1 2025-08-10 14:52:56.321 00:00:10.422 TCP 23.104.0.1:57356 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:53:37.164 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:40718 11 6504 1 2025-08-10 14:49:09.175 00:06:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 14:53:56.786 00:00:10.388 TCP 23.104.0.1:60946 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:54:37.431 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56410 10 6452 1 2025-08-10 14:54:57.209 00:00:10.367 TCP 23.104.0.1:34630 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:55:37.638 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35458 10 6452 1 2025-08-10 14:56:06.263 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 14:56:06.036 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 14:55:57.612 00:00:10.371 TCP 23.104.0.1:54244 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:51:09.177 00:06:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 14:56:37.848 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:42622 10 6452 1 2025-08-10 14:56:58.020 00:00:10.363 TCP 23.104.0.1:40200 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:57:38.081 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45862 10 6452 1 2025-08-10 14:57:58.419 00:00:10.369 TCP 23.104.0.1:40978 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:58:38.254 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46958 10 6452 1 Summary: total flows: 160, total bytes: 505698, total packets: 1577, avg bps: 1059, avg pps: 0, avg bpp: 320 Time window: 2025-08-10 13:55:09 - 2025-08-10 14:58:48 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0031s User: 0.0016s Wall: 0.0029s flows/second: 56064.2 Runtime: 0.0029s