Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 02:58:47.526 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41396 10 6452 1 2025-08-01 02:59:03.384 00:00:10.362 TCP 23.104.0.1:57632 -> 1.101.0.1:3000 11 1507 1 2025-08-01 02:59:47.749 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58742 10 6452 1 2025-08-01 03:00:03.785 00:00:10.321 TCP 23.104.0.1:49510 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:00:47.960 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59764 10 6452 1 2025-08-01 03:01:04.147 00:00:10.324 TCP 23.104.0.1:60940 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:01:32.319 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 03:01:32.230 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 03:01:48.181 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47716 10 6452 1 2025-08-01 03:02:04.511 00:00:10.375 TCP 23.104.0.1:38196 -> 1.101.0.1:3000 11 1507 1 2025-08-01 02:58:04.341 00:06:00.007 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 03:02:48.391 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60310 10 6452 1 2025-08-01 02:58:04.336 00:06:00.015 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 03:03:04.925 00:00:10.345 TCP 23.104.0.1:52030 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:03:48.601 00:00:10.293 TCP 1.101.0.1:3000 -> 22.102.0.1:34620 10 6452 1 2025-08-01 03:04:05.314 00:00:10.317 TCP 23.104.0.1:49788 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:04:48.935 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:41590 10 6452 1 2025-08-01 03:05:05.681 00:00:10.370 TCP 23.104.0.1:32840 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:05:49.172 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49052 10 6452 1 2025-08-01 03:06:06.106 00:00:10.325 TCP 23.104.0.1:38960 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:06:31.732 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 03:06:32.356 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 03:06:49.385 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34296 10 6452 1 2025-08-01 03:07:06.473 00:00:10.365 TCP 23.104.0.1:33902 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:07:49.596 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34090 10 6452 1 2025-08-01 03:08:06.873 00:00:10.324 TCP 23.104.0.1:55992 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:08:49.807 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58496 10 6452 1 2025-08-01 03:09:07.234 00:00:10.364 TCP 23.104.0.1:41580 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:09:50.027 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51390 10 6452 1 2025-08-01 03:05:04.348 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 03:05:04.340 00:06:00.012 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 03:10:07.635 00:00:10.368 TCP 23.104.0.1:59206 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:10:50.240 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54316 10 6452 1 2025-08-01 03:11:08.050 00:00:10.374 TCP 23.104.0.1:42182 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:11:32.030 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 03:11:32.205 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 03:11:50.463 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41838 10 6452 1 2025-08-01 03:12:08.466 00:00:10.359 TCP 23.104.0.1:48458 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:12:50.673 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:42796 10 6452 1 2025-08-01 03:13:08.860 00:00:10.368 TCP 23.104.0.1:51926 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:13:50.840 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37138 10 6452 1 2025-08-01 03:14:09.264 00:00:10.365 TCP 23.104.0.1:35480 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:14:51.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56734 10 6452 1 2025-08-01 03:15:09.670 00:00:10.368 TCP 23.104.0.1:48858 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:15:51.298 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51252 10 6452 1 2025-08-01 03:16:10.104 00:00:10.368 TCP 23.104.0.1:49024 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:16:32.210 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 03:16:32.004 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 03:12:04.349 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 03:16:51.522 00:00:12.455 TCP 1.101.0.1:3000 -> 22.102.0.1:53732 10 6452 1 2025-08-01 03:12:04.342 00:06:00.012 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 03:17:10.509 00:00:10.366 TCP 23.104.0.1:37914 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:17:54.039 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35916 10 6452 1 2025-08-01 03:18:10.913 00:00:10.361 TCP 23.104.0.1:58042 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:18:54.260 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60242 10 6452 1 2025-08-01 03:19:11.311 00:00:10.367 TCP 23.104.0.1:32846 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:19:54.478 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40672 10 6452 1 2025-08-01 03:20:11.715 00:00:10.360 TCP 23.104.0.1:38252 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:20:54.692 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46058 10 6452 1 2025-08-01 03:21:12.113 00:00:10.361 TCP 23.104.0.1:45022 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:21:32.749 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 03:21:32.318 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 03:21:54.904 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60852 10 6452 1 2025-08-01 03:22:12.513 00:00:10.370 TCP 23.104.0.1:42222 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:22:55.120 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53322 10 6452 1 2025-08-01 03:23:12.923 00:00:10.388 TCP 23.104.0.1:42254 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:23:55.333 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41876 10 6452 1 2025-08-01 03:19:04.347 00:06:00.022 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 03:19:04.362 00:06:00.006 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 757 1 2025-08-01 03:24:13.341 00:00:10.363 TCP 23.104.0.1:37164 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:24:55.551 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36990 10 6452 1 2025-08-01 03:25:13.740 00:00:10.366 TCP 23.104.0.1:37172 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:25:55.763 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53632 10 6452 1 2025-08-01 03:26:14.149 00:00:10.359 TCP 23.104.0.1:41142 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:26:32.322 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 03:26:32.327 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 03:26:55.979 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58774 10 6452 1 2025-08-01 03:27:14.548 00:00:10.325 TCP 23.104.0.1:45922 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:27:56.215 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56454 10 6452 1 2025-08-01 03:28:14.911 00:00:10.367 TCP 23.104.0.1:46174 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:28:56.428 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40772 10 6452 1 2025-08-01 03:29:15.325 00:00:10.324 TCP 23.104.0.1:33470 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:29:56.646 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:51196 11 6504 1 2025-08-01 03:30:15.687 00:00:10.370 TCP 23.104.0.1:56404 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:26:04.369 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 03:26:04.361 00:06:00.010 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 03:30:56.918 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43082 10 6452 1 2025-08-01 03:31:16.111 00:00:10.376 TCP 23.104.0.1:45754 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:31:32.655 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 03:31:32.585 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 03:31:57.132 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57064 10 6452 1 2025-08-01 03:32:16.526 00:00:10.374 TCP 23.104.0.1:41956 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:32:57.342 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33404 10 6452 1 2025-08-01 03:33:16.942 00:00:10.379 TCP 23.104.0.1:36804 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:33:57.556 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44178 10 6452 1 2025-08-01 03:34:17.361 00:00:10.363 TCP 23.104.0.1:57258 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:34:57.765 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55888 10 6452 1 2025-08-01 03:35:17.760 00:00:10.337 TCP 23.104.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:35:57.939 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:58396 10 6452 1 2025-08-01 03:36:32.642 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 03:36:18.137 00:00:10.364 TCP 23.104.0.1:42430 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:36:32.613 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 03:36:58.186 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49986 10 6452 1 2025-08-01 03:37:18.542 00:00:10.363 TCP 23.104.0.1:46606 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:33:04.369 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 03:33:04.363 00:06:00.010 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 03:37:58.396 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6452 1 2025-08-01 03:38:18.948 00:00:10.440 TCP 23.104.0.1:45326 -> 1.101.0.1:3000 15 1926 1 2025-08-01 03:38:58.609 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:44842 12 10367 1 2025-08-01 03:39:19.425 00:00:10.363 TCP 23.104.0.1:36690 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:39:58.807 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43872 10 6452 1 2025-08-01 03:40:19.828 00:00:10.351 TCP 23.104.0.1:40178 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:40:59.025 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41516 10 6452 1 2025-08-01 03:41:20.220 00:00:10.362 TCP 23.104.0.1:47246 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:41:32.746 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 03:41:32.813 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 03:41:59.262 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41934 10 6452 1 2025-08-01 03:42:20.626 00:00:10.364 TCP 23.104.0.1:37962 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:42:59.481 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38512 10 6452 1 2025-08-01 03:43:21.033 00:00:10.373 TCP 23.104.0.1:51006 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:43:59.697 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39896 10 6452 1 2025-08-01 03:44:21.456 00:00:10.361 TCP 23.104.0.1:56352 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:40:04.372 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 03:40:04.363 00:06:00.010 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 03:44:59.912 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36016 10 6452 1 2025-08-01 03:45:21.863 00:00:10.368 TCP 23.104.0.1:56716 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:46:00.092 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47972 10 6452 1 2025-08-01 03:46:32.848 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 03:46:32.905 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 03:46:22.273 00:00:10.366 TCP 23.104.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:47:00.301 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39834 10 6452 1 2025-08-01 03:47:22.676 00:00:10.372 TCP 23.104.0.1:42010 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:48:00.515 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48142 10 6452 1 2025-08-01 03:48:23.129 00:00:10.438 TCP 23.104.0.1:44316 -> 1.101.0.1:3000 15 1926 1 2025-08-01 03:49:00.726 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51964 12 10367 1 2025-08-01 03:49:23.607 00:00:10.361 TCP 23.104.0.1:52294 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:50:00.967 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40342 10 6452 1 2025-08-01 03:50:24.011 00:00:10.364 TCP 23.104.0.1:52434 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:51:01.205 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37600 10 6452 1 2025-08-01 03:51:33.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 03:51:33.197 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 03:51:24.410 00:00:10.359 TCP 23.104.0.1:52698 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:47:04.374 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 03:47:04.365 00:06:00.013 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 03:52:01.423 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49434 10 6452 1 2025-08-01 03:52:24.812 00:00:10.358 TCP 23.104.0.1:37290 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:53:01.639 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45170 10 6452 1 2025-08-01 03:53:25.208 00:00:10.365 TCP 23.104.0.1:44974 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:54:01.810 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-08-01 03:54:25.609 00:00:10.364 TCP 23.104.0.1:56378 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:55:02.038 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40656 10 6452 1 2025-08-01 03:55:26.009 00:00:10.366 TCP 23.104.0.1:48326 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:56:02.251 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50314 10 6452 1 2025-08-01 03:56:26.413 00:00:10.368 TCP 23.104.0.1:46068 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:56:32.798 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 03:56:33.294 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 03:57:02.460 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35300 10 6452 1 2025-08-01 03:57:26.821 00:00:10.360 TCP 23.104.0.1:54326 -> 1.101.0.1:3000 11 1507 1 2025-08-01 03:58:02.636 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53232 10 6452 1 2025-08-01 03:58:27.217 00:00:10.437 TCP 23.104.0.1:57314 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 160, total bytes: 503851, total packets: 1522, avg bps: 1109, avg pps: 0, avg bpp: 331 Time window: 2025-08-01 02:58:04 - 2025-08-01 03:58:37 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0032s User: 0.0008s Wall: 0.0017s flows/second: 95924.6 Runtime: 0.0017s