Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 02:58:53.944 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44738 10 6438 1 2025-07-25 02:59:34.251 00:00:10.363 TCP 23.104.0.1:54886 -> 1.101.0.1:3000 11 1507 1 2025-07-25 02:55:00.659 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 02:59:54.177 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35780 10 6438 1 2025-07-25 03:00:34.658 00:00:10.329 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:00:54.387 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33188 10 6438 1 2025-07-25 03:01:35.025 00:00:10.358 TCP 23.104.0.1:45438 -> 1.101.0.1:3000 11 1507 1 2025-07-25 02:57:00.656 00:06:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 03:01:54.601 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58178 10 6438 1 2025-07-25 03:02:35.421 00:00:10.363 TCP 23.104.0.1:53694 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:02:54.813 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56684 10 6438 1 2025-07-25 03:03:09.827 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 03:03:09.670 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 03:03:35.821 00:00:10.365 TCP 23.104.0.1:47750 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:03:55.036 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42958 10 6438 1 2025-07-25 03:04:36.225 00:00:10.364 TCP 23.104.0.1:39200 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:04:55.255 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47112 10 6438 1 2025-07-25 03:05:36.628 00:00:10.358 TCP 23.104.0.1:58224 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:05:55.477 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40490 10 6438 1 2025-07-25 03:06:37.026 00:00:10.363 TCP 23.104.0.1:54758 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:02:00.659 00:06:00.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 03:06:55.657 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34260 10 6438 1 2025-07-25 03:07:37.428 00:00:10.362 TCP 23.104.0.1:39368 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:07:55.870 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49598 10 6438 1 2025-07-25 03:08:09.813 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 03:08:09.737 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 03:08:37.833 00:00:10.396 TCP 23.104.0.1:59972 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:04:00.658 00:06:00.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 03:08:56.097 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37230 10 6438 1 2025-07-25 03:09:38.266 00:00:10.329 TCP 23.104.0.1:52004 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:09:56.312 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6438 1 2025-07-25 03:10:38.636 00:00:10.322 TCP 23.104.0.1:50444 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:10:56.492 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35058 10 6438 1 2025-07-25 03:11:39.001 00:00:10.324 TCP 23.104.0.1:47282 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:11:56.671 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57128 10 6438 1 2025-07-25 03:12:39.365 00:00:10.360 TCP 23.104.0.1:34624 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:13:10.088 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 03:12:56.888 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56180 10 6438 1 2025-07-25 03:13:09.694 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 03:13:39.767 00:00:10.380 TCP 23.104.0.1:45428 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:09:00.660 00:06:00.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 03:13:57.106 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37974 10 6438 1 2025-07-25 03:14:40.185 00:00:10.368 TCP 23.104.0.1:39488 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:14:57.317 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42506 10 6438 1 2025-07-25 03:15:40.593 00:00:10.383 TCP 23.104.0.1:60634 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:11:00.664 00:06:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 03:15:57.493 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33138 10 6438 1 2025-07-25 03:16:41.026 00:00:10.360 TCP 23.104.0.1:36370 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:16:57.707 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50584 10 6438 1 2025-07-25 03:17:41.430 00:00:10.368 TCP 23.104.0.1:36134 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:17:57.915 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34820 10 6438 1 2025-07-25 03:18:09.986 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 03:18:10.234 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 03:18:41.836 00:00:10.395 TCP 23.104.0.1:36102 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:18:58.134 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57680 10 6438 1 2025-07-25 03:19:42.269 00:00:10.359 TCP 23.104.0.1:60590 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:19:58.349 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51294 10 6438 1 2025-07-25 03:20:42.669 00:00:10.363 TCP 23.104.0.1:60424 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:16:00.667 00:06:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 03:20:58.555 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6438 1 2025-07-25 03:21:43.099 00:00:10.414 TCP 23.104.0.1:36950 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:21:58.770 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46582 10 6438 1 2025-07-25 03:22:43.554 00:00:10.363 TCP 23.104.0.1:48564 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:18:00.665 00:06:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 03:22:58.980 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50372 10 6438 1 2025-07-25 03:23:10.165 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 03:23:10.305 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 03:23:43.955 00:00:10.367 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:23:59.206 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41734 10 6438 1 2025-07-25 03:24:44.364 00:00:10.323 TCP 23.104.0.1:59208 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:24:59.417 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42898 10 6438 1 2025-07-25 03:25:44.728 00:00:10.378 TCP 23.104.0.1:37428 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:25:59.636 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45350 10 6438 1 2025-07-25 03:26:45.145 00:00:10.362 TCP 23.104.0.1:33644 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:26:59.850 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44542 10 6438 1 2025-07-25 03:27:45.547 00:00:10.369 TCP 23.104.0.1:57930 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:23:00.669 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 03:28:00.086 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50444 10 6438 1 2025-07-25 03:28:10.432 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 03:28:10.261 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 03:28:45.952 00:00:10.365 TCP 23.104.0.1:57052 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:29:00.305 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43018 10 6438 1 2025-07-25 03:29:46.362 00:00:10.367 TCP 23.104.0.1:60526 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:25:00.666 00:06:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 03:30:00.513 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50396 10 6438 1 2025-07-25 03:30:46.765 00:00:10.371 TCP 23.104.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:31:00.726 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:42682 10 6438 1 2025-07-25 03:31:47.171 00:00:10.368 TCP 23.104.0.1:40694 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:32:00.932 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55768 10 6438 1 2025-07-25 03:32:47.580 00:00:10.368 TCP 23.104.0.1:55142 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:33:10.495 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 03:33:01.167 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57812 10 6438 1 2025-07-25 03:33:10.383 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 03:33:47.985 00:00:10.376 TCP 23.104.0.1:35832 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:34:01.381 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49376 10 6438 1 2025-07-25 03:30:00.669 00:06:00.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 03:34:48.392 00:00:10.323 TCP 23.104.0.1:48254 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:35:01.594 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52566 11 6478 1 2025-07-25 03:35:48.756 00:00:10.375 TCP 23.104.0.1:40608 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:36:01.807 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50062 10 6438 1 2025-07-25 03:32:00.667 00:06:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 03:36:49.167 00:00:10.360 TCP 23.104.0.1:44472 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:37:02.034 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53830 10 6438 1 2025-07-25 03:37:49.570 00:00:10.359 TCP 23.104.0.1:50302 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:38:10.624 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 03:38:10.544 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 03:38:02.246 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41664 10 6438 1 2025-07-25 03:38:49.968 00:00:10.361 TCP 23.104.0.1:49650 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:39:02.459 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48296 10 6438 1 2025-07-25 03:39:50.370 00:00:10.367 TCP 23.104.0.1:60588 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:40:02.630 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40848 10 6438 1 2025-07-25 03:40:50.774 00:00:10.369 TCP 23.104.0.1:41614 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:41:02.842 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49926 10 6438 1 2025-07-25 03:41:51.179 00:00:10.325 TCP 23.104.0.1:34930 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:37:00.674 00:06:00.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 03:42:03.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52140 10 6438 1 2025-07-25 03:42:51.540 00:00:10.334 TCP 23.104.0.1:39980 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:43:10.421 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 03:43:10.691 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 03:43:03.302 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53404 10 6438 1 2025-07-25 03:39:00.672 00:06:00.172 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 03:43:51.915 00:00:10.323 TCP 23.104.0.1:40594 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:44:03.513 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55008 10 6438 1 2025-07-25 03:44:52.276 00:00:10.367 TCP 23.104.0.1:36612 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:45:03.729 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55994 10 6438 1 2025-07-25 03:45:52.682 00:00:10.325 TCP 23.104.0.1:39492 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:46:03.944 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6438 1 2025-07-25 03:46:53.057 00:00:10.367 TCP 23.104.0.1:39762 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:47:04.170 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58636 10 6438 1 2025-07-25 03:47:53.456 00:00:10.367 TCP 23.104.0.1:39830 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:48:10.744 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 03:48:10.768 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 03:48:04.381 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43060 10 6438 1 2025-07-25 03:44:00.680 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 03:48:53.861 00:00:10.371 TCP 23.104.0.1:41266 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:49:04.594 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48848 10 6438 1 2025-07-25 03:49:54.271 00:00:10.372 TCP 23.104.0.1:36270 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:50:04.772 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41594 10 6438 1 2025-07-25 03:46:00.678 00:06:00.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 03:50:54.725 00:00:10.378 TCP 23.104.0.1:49680 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:51:04.989 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37286 10 6438 1 2025-07-25 03:51:55.141 00:00:10.324 TCP 23.104.0.1:44100 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:52:05.214 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45554 10 6438 1 2025-07-25 03:53:10.685 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 03:52:55.504 00:00:10.327 TCP 23.104.0.1:48166 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:53:10.848 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 03:53:05.431 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40256 10 6438 1 2025-07-25 03:53:55.864 00:00:10.380 TCP 23.104.0.1:48594 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:54:05.640 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37148 10 6438 1 2025-07-25 03:54:56.281 00:00:10.363 TCP 23.104.0.1:34568 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:55:05.855 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42064 10 6438 1 2025-07-25 03:51:00.683 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 03:55:56.687 00:00:10.378 TCP 23.104.0.1:35070 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:56:06.085 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40830 10 6438 1 2025-07-25 03:56:57.118 00:00:10.361 TCP 23.104.0.1:38858 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:57:06.260 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58028 10 6438 1 2025-07-25 03:53:00.680 00:06:00.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 03:57:57.523 00:00:10.364 TCP 23.104.0.1:52166 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:58:10.907 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 03:58:10.994 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 03:58:06.482 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41828 10 6438 1 Summary: total flows: 161, total bytes: 496779, total packets: 1574, avg bps: 1034, avg pps: 0, avg bpp: 315 Time window: 2025-07-25 02:55:00 - 2025-07-25 03:59:00 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0010s User: 0.0031s Wall: 0.0022s flows/second: 74501.6 Runtime: 0.0022s