Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 01:58:48.541 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52842 10 6452 1 2025-08-02 01:59:22.721 00:00:10.369 TCP 23.104.0.1:52242 -> 1.101.0.1:3000 11 1507 1 2025-08-02 01:59:48.755 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53450 10 6452 1 2025-08-02 02:00:23.130 00:00:10.363 TCP 23.104.0.1:33514 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:00:48.970 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48920 10 6452 1 2025-08-02 02:01:23.530 00:00:10.369 TCP 23.104.0.1:47680 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:01:59.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:01:49.191 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46470 10 6452 1 2025-08-02 02:01:59.591 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 01:57:04.917 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 01:57:04.900 00:06:00.021 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 02:02:23.945 00:00:10.331 TCP 23.104.0.1:36800 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:02:49.405 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36014 10 6452 1 2025-08-02 02:03:24.312 00:00:10.328 TCP 23.104.0.1:58326 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:03:49.629 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38092 10 6452 1 2025-08-02 02:04:24.678 00:00:10.369 TCP 23.104.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:04:49.800 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40998 10 6452 1 2025-08-02 02:05:25.104 00:00:10.369 TCP 23.104.0.1:34034 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:05:50.027 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36618 10 6452 1 2025-08-02 02:06:25.515 00:00:10.368 TCP 23.104.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:06:50.252 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:42452 10 6452 1 2025-08-02 02:06:59.703 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 02:06:59.769 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:07:25.923 00:00:10.341 TCP 23.104.0.1:43694 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:07:50.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55572 10 6452 1 2025-08-02 02:08:26.301 00:00:10.363 TCP 23.104.0.1:45372 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:08:50.646 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2025-08-02 02:04:04.919 00:06:00.006 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 02:04:04.900 00:06:00.026 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 02:09:26.700 00:00:10.363 TCP 23.104.0.1:40306 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:09:50.865 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52322 11 6492 1 2025-08-02 02:10:27.110 00:00:10.366 TCP 23.104.0.1:59464 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:10:51.099 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49882 10 6452 1 2025-08-02 02:11:27.515 00:00:10.342 TCP 23.104.0.1:45278 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:12:00.091 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:11:59.944 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 02:11:51.316 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60824 10 6452 1 2025-08-02 02:12:27.898 00:00:10.390 TCP 23.104.0.1:37052 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:12:51.495 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41792 10 6452 1 2025-08-02 02:13:28.330 00:00:10.364 TCP 23.104.0.1:46858 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:13:51.705 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58526 10 6452 1 2025-08-02 02:14:28.732 00:00:10.323 TCP 23.104.0.1:46506 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:14:51.924 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56326 10 6452 1 2025-08-02 02:15:29.111 00:00:10.370 TCP 23.104.0.1:60328 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:15:52.104 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43068 10 6452 1 2025-08-02 02:11:04.904 00:06:00.024 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 02:11:04.925 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 02:16:29.516 00:00:10.422 TCP 23.104.0.1:51846 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:16:59.898 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 02:16:59.680 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:16:52.276 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36268 10 6452 1 2025-08-02 02:17:29.977 00:00:10.373 TCP 23.104.0.1:38588 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:17:52.455 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60918 10 6452 1 2025-08-02 02:18:30.389 00:00:10.447 TCP 23.104.0.1:58684 -> 1.101.0.1:3000 15 1926 1 2025-08-02 02:18:52.623 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59658 12 10367 1 2025-08-02 02:19:30.871 00:00:10.367 TCP 23.104.0.1:35988 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:19:52.861 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36632 10 6452 1 2025-08-02 02:20:31.275 00:00:10.322 TCP 23.104.0.1:58376 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:20:53.089 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56538 10 6452 1 2025-08-02 02:21:31.635 00:00:10.321 TCP 23.104.0.1:36030 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:22:00.239 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:22:00.236 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 02:21:53.303 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56104 10 6452 1 2025-08-02 02:22:31.996 00:00:10.360 TCP 23.104.0.1:33176 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:18:04.926 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 02:22:53.528 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37890 10 6452 1 2025-08-02 02:18:04.907 00:06:00.024 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 02:23:32.401 00:00:10.368 TCP 23.104.0.1:47292 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:23:53.704 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55322 10 6452 1 2025-08-02 02:24:32.805 00:00:10.338 TCP 23.104.0.1:48268 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:24:53.879 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48156 10 6452 1 2025-08-02 02:25:33.187 00:00:10.364 TCP 23.104.0.1:56022 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:25:54.111 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48682 10 6452 1 2025-08-02 02:26:33.589 00:00:10.328 TCP 23.104.0.1:57992 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:27:01.536 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:27:01.322 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 02:26:54.326 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55438 10 6452 1 2025-08-02 02:27:33.953 00:00:10.366 TCP 23.104.0.1:50408 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:27:54.542 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44854 10 6452 1 2025-08-02 02:28:34.362 00:00:10.376 TCP 23.104.0.1:59768 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:28:54.755 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53748 10 6452 1 2025-08-02 02:29:34.782 00:00:10.367 TCP 23.104.0.1:38790 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:29:54.971 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49644 10 6452 1 2025-08-02 02:25:04.917 00:06:00.030 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 02:25:04.939 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 02:30:35.185 00:00:10.367 TCP 23.104.0.1:57452 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:30:55.203 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40820 10 6452 1 2025-08-02 02:31:35.589 00:00:10.364 TCP 23.104.0.1:36448 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:32:00.323 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:32:00.367 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 02:31:55.421 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44574 10 6452 1 2025-08-02 02:32:35.987 00:00:10.360 TCP 23.104.0.1:36380 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:32:55.634 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48732 10 6452 1 2025-08-02 02:33:36.391 00:00:10.364 TCP 23.104.0.1:43142 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:33:55.859 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55324 10 6452 1 2025-08-02 02:34:36.795 00:00:10.369 TCP 23.104.0.1:43168 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:34:56.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42706 10 6452 1 2025-08-02 02:35:37.194 00:00:10.362 TCP 23.104.0.1:45418 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:35:56.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43206 10 6452 1 2025-08-02 02:36:37.595 00:00:10.368 TCP 23.104.0.1:52526 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:37:00.144 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 02:37:00.495 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:36:56.516 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47962 10 6452 1 2025-08-02 02:32:04.917 00:06:00.031 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 02:32:04.944 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 02:37:38.004 00:00:10.362 TCP 23.104.0.1:40904 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:37:56.734 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33534 10 6452 1 2025-08-02 02:38:38.404 00:00:10.326 TCP 23.104.0.1:39716 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:38:56.951 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39552 10 6452 1 2025-08-02 02:39:38.769 00:00:10.370 TCP 23.104.0.1:36202 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:39:57.178 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46664 10 6452 1 2025-08-02 02:40:39.179 00:00:10.362 TCP 23.104.0.1:48674 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:40:57.394 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54124 10 6452 1 2025-08-02 02:41:39.580 00:00:10.368 TCP 23.104.0.1:59362 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:42:00.556 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 02:42:00.372 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:41:57.603 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55288 10 6452 1 2025-08-02 02:42:39.987 00:00:10.336 TCP 23.104.0.1:49866 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:42:57.811 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43836 10 6452 1 2025-08-02 02:43:40.358 00:00:10.360 TCP 23.104.0.1:55160 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:39:04.921 00:06:00.030 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 02:39:04.946 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 02:43:58.035 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53806 10 6452 1 2025-08-02 02:44:40.758 00:00:10.371 TCP 23.104.0.1:39534 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:44:58.263 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51954 10 6452 1 2025-08-02 02:45:41.163 00:00:10.365 TCP 23.104.0.1:33906 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:45:58.504 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46214 10 6452 1 2025-08-02 02:46:41.569 00:00:10.321 TCP 23.104.0.1:59190 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:47:00.618 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 02:47:00.624 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:46:58.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44674 10 6452 1 2025-08-02 02:47:41.931 00:00:10.385 TCP 23.104.0.1:40648 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:47:58.930 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:32972 10 6452 1 2025-08-02 02:48:42.352 00:00:10.437 TCP 23.104.0.1:43356 -> 1.101.0.1:3000 15 1926 1 2025-08-02 02:48:59.170 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:56852 12 10367 1 2025-08-02 02:49:42.831 00:00:10.356 TCP 23.104.0.1:40602 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:49:59.372 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-08-02 02:50:43.223 00:00:10.327 TCP 23.104.0.1:57852 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:46:04.924 00:06:00.030 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 02:46:04.949 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 02:50:59.590 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36546 10 6452 1 2025-08-02 02:51:43.585 00:00:10.365 TCP 23.104.0.1:57580 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:52:00.550 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:52:00.352 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 02:51:59.809 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47192 10 6452 1 2025-08-02 02:52:43.995 00:00:10.364 TCP 23.104.0.1:45670 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:52:59.983 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48236 10 6452 1 2025-08-02 02:53:44.400 00:00:10.365 TCP 23.104.0.1:47184 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:54:00.217 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40876 10 6452 1 2025-08-02 02:54:44.804 00:00:10.365 TCP 23.104.0.1:42260 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:55:00.432 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51918 10 6452 1 2025-08-02 02:55:45.209 00:00:10.368 TCP 23.104.0.1:59764 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:56:00.653 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41760 10 6452 1 2025-08-02 02:56:45.618 00:00:10.385 TCP 23.104.0.1:39194 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:57:00.934 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 02:57:00.736 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 02:57:00.864 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43814 10 6452 1 2025-08-02 02:57:46.053 00:00:10.371 TCP 23.104.0.1:34652 -> 1.101.0.1:3000 11 1507 1 2025-08-02 02:53:04.925 00:06:00.031 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 02:53:04.952 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 02:58:01.090 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55560 10 6452 1 Summary: total flows: 161, total bytes: 503011, total packets: 1523, avg bps: 1081, avg pps: 0, avg bpp: 330 Time window: 2025-08-02 01:57:04 - 2025-08-02 02:59:04 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0033s User: 0.0017s Wall: 0.0028s flows/second: 56509.0 Runtime: 0.0029s