Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 14:58:59.868 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 14:58:59.772 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 14:59:09.302 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51944 10 6452 1 2025-08-16 14:59:08.580 00:00:10.328 TCP 23.104.0.1:56722 -> 1.101.0.1:3000 11 1507 1 2025-08-16 14:56:12.150 00:05:00.921 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 15:00:09.513 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48560 10 6452 1 2025-08-16 15:00:08.946 00:00:10.374 TCP 23.104.0.1:47686 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:01:09.734 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52990 10 6452 1 2025-08-16 15:01:09.360 00:00:10.368 TCP 23.104.0.1:50910 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:02:09.764 00:00:10.374 TCP 23.104.0.1:44310 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:02:09.965 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49536 10 6452 1 2025-08-16 14:59:12.155 00:05:00.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 15:03:10.175 00:00:10.364 TCP 23.104.0.1:35572 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:03:10.192 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38430 10 6452 1 2025-08-16 15:03:59.738 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 15:03:59.624 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 15:04:10.420 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-08-16 15:04:10.579 00:00:10.373 TCP 23.104.0.1:55308 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:05:10.650 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39554 10 6452 1 2025-08-16 15:05:10.996 00:00:10.372 TCP 23.104.0.1:52548 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:02:12.152 00:05:00.921 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 15:06:10.877 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41848 10 6452 1 2025-08-16 15:06:11.415 00:00:10.363 TCP 23.104.0.1:54540 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:07:11.103 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39016 10 6452 1 2025-08-16 15:07:11.817 00:00:10.364 TCP 23.104.0.1:41324 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:08:11.343 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6452 1 2025-08-16 15:08:12.223 00:00:10.364 TCP 23.104.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:08:59.594 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 15:08:59.757 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 15:05:12.156 00:05:00.919 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 15:09:11.518 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58226 10 6452 1 2025-08-16 15:09:12.635 00:00:10.370 TCP 23.104.0.1:36806 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:10:11.736 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38162 10 6452 1 2025-08-16 15:10:13.057 00:00:10.365 TCP 23.104.0.1:32988 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:11:13.461 00:00:10.326 TCP 23.104.0.1:44762 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:11:11.962 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57700 10 6452 1 2025-08-16 15:08:12.153 00:05:00.925 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 15:12:12.182 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55010 10 6452 1 2025-08-16 15:12:13.826 00:00:10.355 TCP 23.104.0.1:35346 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:13:12.403 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48558 10 6452 1 2025-08-16 15:13:14.224 00:00:10.362 TCP 23.104.0.1:37226 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:13:59.918 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 15:13:59.593 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 15:14:12.627 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38314 10 6452 1 2025-08-16 15:14:14.625 00:00:10.367 TCP 23.104.0.1:35502 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:11:12.159 00:05:00.917 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 15:15:15.034 00:00:10.369 TCP 23.104.0.1:35904 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:15:12.846 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51788 10 6452 1 2025-08-16 15:16:15.442 00:00:10.323 TCP 23.104.0.1:37874 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:16:13.086 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37860 10 6452 1 2025-08-16 15:17:13.303 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:48012 13 7489 1 2025-08-16 15:17:15.808 00:00:10.334 TCP 23.104.0.1:50978 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:14:12.156 00:05:00.924 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 15:18:16.180 00:00:10.366 TCP 23.104.0.1:47818 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:18:13.551 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53994 10 6452 1 2025-08-16 15:18:59.958 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 15:18:59.905 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 15:19:13.759 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39650 10 6452 1 2025-08-16 15:19:16.577 00:00:10.369 TCP 23.104.0.1:43182 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:20:13.935 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:49948 10 6452 1 2025-08-16 15:20:16.981 00:00:10.367 TCP 23.104.0.1:47752 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:17:12.160 00:05:00.918 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 15:21:14.186 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48704 10 6452 1 2025-08-16 15:21:17.384 00:00:10.363 TCP 23.104.0.1:45870 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:22:14.412 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38580 10 6452 1 2025-08-16 15:22:17.788 00:00:10.323 TCP 23.104.0.1:45856 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:23:14.624 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35548 10 6452 1 2025-08-16 15:23:18.149 00:00:10.366 TCP 23.104.0.1:38330 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:24:00.053 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 15:23:59.912 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 15:20:12.157 00:05:00.925 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 15:24:14.799 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53710 10 6452 1 2025-08-16 15:24:18.550 00:00:10.323 TCP 23.104.0.1:42236 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:25:14.984 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:41254 10 6452 1 2025-08-16 15:25:18.914 00:00:10.365 TCP 23.104.0.1:46794 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:26:15.272 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43522 10 6452 1 2025-08-16 15:26:19.314 00:00:10.325 TCP 23.104.0.1:51672 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:23:12.176 00:05:00.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 15:27:15.481 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40390 10 6452 1 2025-08-16 15:27:19.677 00:00:10.382 TCP 23.104.0.1:45306 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:28:15.664 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:36632 10 6452 1 2025-08-16 15:28:20.104 00:00:10.366 TCP 23.104.0.1:55696 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:29:00.142 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 15:29:00.028 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 15:29:15.876 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40564 10 6452 1 2025-08-16 15:29:20.508 00:00:10.385 TCP 23.104.0.1:42074 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:26:12.176 00:05:00.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 15:30:16.110 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58624 10 6452 1 2025-08-16 15:30:20.939 00:00:10.377 TCP 23.104.0.1:45056 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:31:16.325 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45444 10 6452 1 2025-08-16 15:31:21.357 00:00:10.347 TCP 23.104.0.1:51948 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:32:16.539 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35350 10 6452 1 2025-08-16 15:32:21.769 00:00:10.375 TCP 23.104.0.1:45684 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:29:12.181 00:05:00.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 15:33:16.753 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39318 10 6452 1 2025-08-16 15:33:22.179 00:00:10.366 TCP 23.104.0.1:44826 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:34:00.217 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 15:34:00.146 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 15:34:16.968 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36816 10 6452 1 2025-08-16 15:34:22.581 00:00:10.367 TCP 23.104.0.1:55792 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:35:17.178 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35534 10 6452 1 2025-08-16 15:35:22.988 00:00:10.365 TCP 23.104.0.1:43770 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:32:12.180 00:05:00.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 15:36:17.396 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58972 10 6452 1 2025-08-16 15:36:23.392 00:00:10.367 TCP 23.104.0.1:43898 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:37:17.620 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44758 10 6452 1 2025-08-16 15:37:23.805 00:00:10.372 TCP 23.104.0.1:48644 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:38:17.832 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39004 10 6452 1 2025-08-16 15:38:24.213 00:00:10.327 TCP 23.104.0.1:44692 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:39:00.136 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 15:39:00.348 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 15:35:12.184 00:05:00.899 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 15:39:18.076 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46144 10 6452 1 2025-08-16 15:39:24.576 00:00:10.366 TCP 23.104.0.1:40262 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:40:18.290 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37402 10 6452 1 2025-08-16 15:40:24.984 00:00:10.328 TCP 23.104.0.1:47240 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:41:18.505 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56222 10 6452 1 2025-08-16 15:41:25.350 00:00:10.358 TCP 23.104.0.1:53802 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:38:12.182 00:05:00.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 15:42:18.726 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37022 10 6452 1 2025-08-16 15:42:25.748 00:00:10.362 TCP 23.104.0.1:49426 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:43:18.950 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:54638 10 6452 1 2025-08-16 15:43:26.154 00:00:10.374 TCP 23.104.0.1:49460 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:44:00.357 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 15:44:00.439 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 15:44:19.147 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42316 10 6452 1 2025-08-16 15:44:26.572 00:00:10.365 TCP 23.104.0.1:55518 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:41:12.185 00:05:00.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 15:45:19.372 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57364 10 6452 1 2025-08-16 15:45:26.978 00:00:10.367 TCP 23.104.0.1:34280 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:46:19.583 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38392 10 6452 1 2025-08-16 15:46:27.388 00:00:10.322 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:47:19.794 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35034 10 6452 1 2025-08-16 15:47:27.749 00:00:10.343 TCP 23.104.0.1:51040 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:44:12.183 00:05:00.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 15:48:20.006 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51404 10 6452 1 2025-08-16 15:48:28.131 00:00:10.359 TCP 23.104.0.1:33778 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:49:00.525 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 15:49:00.586 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 15:49:20.229 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38176 10 6452 1 2025-08-16 15:49:28.528 00:00:10.365 TCP 23.104.0.1:59628 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:50:20.455 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49536 10 6452 1 2025-08-16 15:50:28.933 00:00:10.393 TCP 23.104.0.1:57532 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:47:12.189 00:05:00.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 15:51:20.713 00:00:10.263 TCP 1.101.0.1:3000 -> 22.102.0.1:45802 10 6452 1 2025-08-16 15:51:29.365 00:00:10.362 TCP 23.104.0.1:56234 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:52:21.063 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36164 10 6452 1 2025-08-16 15:52:29.766 00:00:10.377 TCP 23.104.0.1:59326 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:53:21.248 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46598 10 6452 1 2025-08-16 15:53:30.182 00:00:10.365 TCP 23.104.0.1:37988 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:54:00.584 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 15:54:00.641 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 15:50:12.191 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 15:54:21.479 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33614 10 6452 1 2025-08-16 15:54:30.587 00:00:10.379 TCP 23.104.0.1:52318 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:55:21.713 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53360 10 6452 1 2025-08-16 15:55:30.991 00:00:10.367 TCP 23.104.0.1:37556 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:56:21.890 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45390 10 6452 1 2025-08-16 15:56:31.394 00:00:10.361 TCP 23.104.0.1:39982 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:53:12.195 00:05:00.892 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 15:57:22.112 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-08-16 15:57:31.792 00:00:10.366 TCP 23.104.0.1:41690 -> 1.101.0.1:3000 11 1507 1 2025-08-16 15:58:22.344 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 10 6452 1 2025-08-16 15:58:32.195 00:00:10.417 TCP 23.104.0.1:51560 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 499385, total packets: 1575, avg bps: 1065, avg pps: 0, avg bpp: 317 Time window: 2025-08-16 14:56:12 - 2025-08-16 15:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0012s Wall: 0.0024s flows/second: 69579.8 Runtime: 0.0024s