Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 04:59:30.759 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48736 10 6452 1 2025-08-02 04:59:34.780 00:00:10.359 TCP 23.104.0.1:41416 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:00:30.980 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:40094 10 6452 1 2025-08-02 05:00:35.176 00:00:10.322 TCP 23.104.0.1:48368 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:01:31.219 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58564 10 6452 1 2025-08-02 05:01:35.538 00:00:10.362 TCP 23.104.0.1:59392 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:02:03.342 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 05:02:03.030 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 05:02:31.437 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59086 10 6452 1 2025-08-02 05:02:35.948 00:00:10.368 TCP 23.104.0.1:40276 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:03:31.653 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54578 10 6452 1 2025-08-02 05:03:36.358 00:00:10.370 TCP 23.104.0.1:54486 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:00:04.968 00:05:00.081 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 05:00:04.971 00:05:00.076 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 05:04:31.826 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52444 10 6452 1 2025-08-02 05:04:36.782 00:00:10.369 TCP 23.104.0.1:55126 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:05:32.042 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57220 10 6452 1 2025-08-02 05:05:37.202 00:00:10.367 TCP 23.104.0.1:51398 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:06:32.255 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36878 10 6452 1 2025-08-02 05:06:37.610 00:00:10.361 TCP 23.104.0.1:34700 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:07:03.780 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 05:07:03.500 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 05:07:32.473 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41474 10 6452 1 2025-08-02 05:07:38.034 00:00:10.366 TCP 23.104.0.1:35256 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:08:32.654 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47802 10 6452 1 2025-08-02 05:08:38.441 00:00:10.361 TCP 23.104.0.1:56492 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:09:32.872 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56008 10 6452 1 2025-08-02 05:09:38.843 00:00:10.443 TCP 23.104.0.1:36564 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:06:04.973 00:05:00.075 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 05:06:04.969 00:05:00.081 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 05:10:33.081 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:55188 10 6452 1 2025-08-02 05:10:39.326 00:00:10.326 TCP 23.104.0.1:50600 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:11:33.284 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34388 10 6452 1 2025-08-02 05:11:39.687 00:00:10.364 TCP 23.104.0.1:46598 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:12:03.373 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 05:12:03.305 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 05:12:33.503 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35070 10 6452 1 2025-08-02 05:12:40.105 00:00:10.328 TCP 23.104.0.1:51370 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:13:33.712 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56116 10 6452 1 2025-08-02 05:13:40.470 00:00:10.322 TCP 23.104.0.1:53164 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:14:33.927 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34756 10 6452 1 2025-08-02 05:14:40.829 00:00:10.368 TCP 23.104.0.1:38028 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:15:34.160 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45498 10 6452 1 2025-08-02 05:15:41.240 00:00:10.365 TCP 23.104.0.1:60430 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:12:04.973 00:05:00.076 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 05:12:04.972 00:05:00.081 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 05:16:34.372 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55364 10 6452 1 2025-08-02 05:16:41.644 00:00:10.322 TCP 23.104.0.1:42980 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:17:03.518 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 05:17:03.552 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 05:17:34.585 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49556 10 6452 1 2025-08-02 05:17:42.005 00:00:10.358 TCP 23.104.0.1:58694 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:18:34.796 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47736 10 6452 1 2025-08-02 05:18:42.402 00:00:10.365 TCP 23.104.0.1:36682 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:19:35.013 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38902 10 6452 1 2025-08-02 05:19:42.806 00:00:10.370 TCP 23.104.0.1:52896 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:20:35.236 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33930 10 6452 1 2025-08-02 05:20:43.216 00:00:10.364 TCP 23.104.0.1:44892 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:21:35.445 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48448 10 6452 1 2025-08-02 05:21:43.621 00:00:10.361 TCP 23.104.0.1:46722 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:22:03.722 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 05:18:04.974 00:05:00.080 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 05:22:03.297 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 05:18:04.975 00:05:00.075 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 05:22:35.652 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56270 10 6452 1 2025-08-02 05:22:44.023 00:00:10.363 TCP 23.104.0.1:42516 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:23:35.869 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60324 10 6452 1 2025-08-02 05:23:44.422 00:00:10.364 TCP 23.104.0.1:53150 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:24:36.088 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41916 10 6452 1 2025-08-02 05:24:44.823 00:00:10.367 TCP 23.104.0.1:40106 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:25:36.303 00:00:15.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56786 11 6504 1 2025-08-02 05:25:45.229 00:00:10.362 TCP 23.104.0.1:49048 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:26:41.540 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60820 10 6452 1 2025-08-02 05:26:45.636 00:00:10.368 TCP 23.104.0.1:46512 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:27:03.662 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 05:27:03.426 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 05:27:41.763 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39756 10 6452 1 2025-08-02 05:27:46.038 00:00:10.324 TCP 23.104.0.1:58190 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:24:04.975 00:05:00.078 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 05:24:04.978 00:05:00.073 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 05:28:41.972 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58062 10 6452 1 2025-08-02 05:28:46.403 00:00:10.388 TCP 23.104.0.1:56742 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:29:42.208 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58230 10 6452 1 2025-08-02 05:29:46.833 00:00:10.385 TCP 23.104.0.1:53850 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:30:42.424 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52628 10 6452 1 2025-08-02 05:30:47.255 00:00:10.363 TCP 23.104.0.1:59804 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:31:42.638 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38986 10 6452 1 2025-08-02 05:31:47.661 00:00:10.364 TCP 23.104.0.1:55254 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:32:03.993 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 05:32:04.019 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 05:32:42.848 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36578 10 6452 1 2025-08-02 05:32:48.088 00:00:10.361 TCP 23.104.0.1:54702 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:33:43.078 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:44220 14 14280 1 2025-08-02 05:33:48.488 00:00:10.513 TCP 23.104.0.1:38418 -> 1.101.0.1:3000 17 2241 1 2025-08-02 05:30:04.977 00:05:00.079 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 05:30:04.979 00:05:00.073 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 05:34:43.352 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35364 10 6452 1 2025-08-02 05:34:49.049 00:00:10.375 TCP 23.104.0.1:35346 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:35:43.530 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55060 10 6452 1 2025-08-02 05:35:49.459 00:00:10.366 TCP 23.104.0.1:57826 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:36:43.741 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35964 10 6452 1 2025-08-02 05:36:49.860 00:00:10.373 TCP 23.104.0.1:60344 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:37:03.854 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 05:37:03.926 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 05:37:43.957 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41302 10 6452 1 2025-08-02 05:37:50.272 00:00:10.363 TCP 23.104.0.1:51928 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:38:44.174 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41524 10 6452 1 2025-08-02 05:38:50.676 00:00:10.367 TCP 23.104.0.1:59208 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:39:44.389 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32820 10 6452 1 2025-08-02 05:39:51.112 00:00:10.364 TCP 23.104.0.1:59230 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:36:04.982 00:05:00.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 05:36:04.981 00:05:00.085 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 05:40:44.598 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48626 10 6452 1 2025-08-02 05:40:51.515 00:00:10.361 TCP 23.104.0.1:57482 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:41:44.808 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46728 10 6452 1 2025-08-02 05:42:03.930 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 05:41:51.919 00:00:10.382 TCP 23.104.0.1:33580 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:42:04.355 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 05:42:45.036 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-08-02 05:42:52.337 00:00:10.366 TCP 23.104.0.1:36528 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:43:45.243 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37556 10 6452 1 2025-08-02 05:43:52.739 00:00:10.370 TCP 23.104.0.1:39962 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:44:45.468 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33042 10 6452 1 2025-08-02 05:44:53.144 00:00:10.371 TCP 23.104.0.1:45978 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:45:45.682 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34012 10 6452 1 2025-08-02 05:42:04.981 00:05:00.085 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 05:42:04.983 00:05:00.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 05:45:53.550 00:00:10.318 TCP 23.104.0.1:40160 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:46:45.890 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33270 10 6452 1 2025-08-02 05:47:04.133 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 05:47:04.085 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 05:46:53.905 00:00:10.366 TCP 23.104.0.1:40974 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:47:46.108 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41604 10 6452 1 2025-08-02 05:47:54.306 00:00:10.363 TCP 23.104.0.1:48238 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:48:46.325 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37910 10 6452 1 2025-08-02 05:48:54.707 00:00:10.381 TCP 23.104.0.1:45472 -> 1.101.0.1:3000 12 1559 1 2025-08-02 05:49:46.545 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60424 10 6452 1 2025-08-02 05:49:55.119 00:00:10.365 TCP 23.104.0.1:34356 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:50:46.770 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55394 10 6452 1 2025-08-02 05:50:55.528 00:00:10.361 TCP 23.104.0.1:32798 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:51:46.986 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38590 10 6452 1 2025-08-02 05:48:04.983 00:05:00.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 05:51:55.927 00:00:10.342 TCP 23.104.0.1:45978 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:52:04.372 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 05:52:04.244 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 05:48:04.982 00:05:00.087 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 05:52:47.209 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40112 10 6452 1 2025-08-02 05:52:56.312 00:00:10.325 TCP 23.104.0.1:59286 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:53:47.422 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:49240 12 10365 1 2025-08-02 05:53:56.676 00:00:10.398 TCP 23.104.0.1:55062 -> 1.101.0.1:3000 15 1926 1 2025-08-02 05:54:47.665 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38238 10 6452 1 2025-08-02 05:54:57.115 00:00:10.362 TCP 23.104.0.1:42334 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:55:47.881 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41860 10 6452 1 2025-08-02 05:55:57.516 00:00:10.368 TCP 23.104.0.1:36630 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:57:04.275 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 05:56:48.100 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60980 10 6452 1 2025-08-02 05:57:04.334 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 05:56:57.922 00:00:10.388 TCP 23.104.0.1:41642 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:54:04.985 00:05:00.081 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 05:57:48.317 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40536 10 6452 1 2025-08-02 05:54:04.983 00:05:00.086 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 05:57:58.347 00:00:10.364 TCP 23.104.0.1:47504 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503387, total packets: 1569, avg bps: 1126, avg pps: 0, avg bpp: 320 Time window: 2025-08-02 04:59:30 - 2025-08-02 05:59:05 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0032s User: 0.0016s Wall: 0.0027s flows/second: 59038.8 Runtime: 0.0028s