Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 05:58:48.493 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39472 10 6452 1 2025-08-02 05:58:58.748 00:00:10.324 TCP 23.104.0.1:40736 -> 1.101.0.1:3000 11 1507 1 2025-08-02 05:59:48.707 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:48720 10 6452 1 2025-08-02 05:59:59.113 00:00:10.330 TCP 23.104.0.1:51658 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:00:48.927 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44140 10 6452 1 2025-08-02 06:00:59.488 00:00:10.372 TCP 23.104.0.1:33122 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:01:49.161 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54420 10 6452 1 2025-08-02 06:02:04.499 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:02:04.533 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:01:59.904 00:00:10.371 TCP 23.104.0.1:55298 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:02:49.375 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54020 10 6452 1 2025-08-02 06:03:00.309 00:00:10.362 TCP 23.104.0.1:37520 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:03:49.590 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41052 10 6452 1 2025-08-02 06:00:04.986 00:05:00.081 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 06:00:04.983 00:05:00.086 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 06:04:00.706 00:00:10.369 TCP 23.104.0.1:47420 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:04:49.813 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36220 10 6452 1 2025-08-02 06:05:01.109 00:00:10.364 TCP 23.104.0.1:36492 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:05:49.985 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45770 10 6452 1 2025-08-02 06:06:01.512 00:00:10.363 TCP 23.104.0.1:33164 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:06:50.213 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51120 10 6452 1 2025-08-02 06:07:04.545 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:07:04.614 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:07:01.918 00:00:10.379 TCP 23.104.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:07:50.442 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:40348 11 6504 1 2025-08-02 06:08:02.336 00:00:10.364 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:08:50.710 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60294 10 6452 1 2025-08-02 06:09:02.739 00:00:10.360 TCP 23.104.0.1:34248 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:09:50.939 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39196 10 6452 1 2025-08-02 06:06:04.987 00:05:00.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 06:06:04.984 00:05:00.086 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 06:10:03.138 00:00:10.361 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:10:51.182 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51628 10 6452 1 2025-08-02 06:11:03.535 00:00:10.327 TCP 23.104.0.1:35146 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:11:51.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39256 10 6452 1 2025-08-02 06:12:04.578 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:12:04.700 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:12:03.900 00:00:10.376 TCP 23.104.0.1:45894 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:12:51.608 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41268 10 6452 1 2025-08-02 06:13:04.313 00:00:10.324 TCP 23.104.0.1:42864 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:13:51.822 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50006 10 6452 1 2025-08-02 06:14:04.675 00:00:10.325 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:14:52.048 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45616 10 6452 1 2025-08-02 06:15:05.042 00:00:10.366 TCP 23.104.0.1:51468 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:15:52.264 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49064 10 6452 1 2025-08-02 06:12:04.986 00:05:00.085 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 06:12:04.989 00:05:00.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 06:16:05.447 00:00:10.365 TCP 23.104.0.1:57068 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:17:04.909 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:16:52.479 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39898 10 6452 1 2025-08-02 06:17:04.738 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:17:05.850 00:00:10.383 TCP 23.104.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:17:52.682 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44706 10 6452 1 2025-08-02 06:18:06.271 00:00:10.323 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:18:52.901 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:46646 10 6452 1 2025-08-02 06:19:06.633 00:00:10.376 TCP 23.104.0.1:52562 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:19:53.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53694 10 6452 1 2025-08-02 06:20:07.054 00:00:10.367 TCP 23.104.0.1:60856 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:20:53.300 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49268 10 6452 1 2025-08-02 06:21:07.458 00:00:10.362 TCP 23.104.0.1:33504 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:22:04.984 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:18:04.989 00:05:00.086 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 06:21:53.514 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54056 10 6452 1 2025-08-02 06:18:04.991 00:05:00.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 06:22:04.869 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:22:07.861 00:00:10.335 TCP 23.104.0.1:38058 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:22:53.722 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59976 10 6452 1 2025-08-02 06:23:08.229 00:00:10.370 TCP 23.104.0.1:33312 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:23:53.938 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:36556 10 6452 1 2025-08-02 06:24:08.636 00:00:10.361 TCP 23.104.0.1:46528 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:24:54.139 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53418 10 6452 1 2025-08-02 06:25:09.032 00:00:10.364 TCP 23.104.0.1:34032 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:25:54.312 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35000 10 6452 1 2025-08-02 06:26:09.434 00:00:10.366 TCP 23.104.0.1:51986 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:26:54.526 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58574 10 6452 1 2025-08-02 06:27:05.388 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:27:05.502 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:27:09.838 00:00:10.389 TCP 23.104.0.1:44532 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:24:04.996 00:05:00.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 06:24:04.994 00:05:00.084 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 06:27:54.738 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41574 10 6452 1 2025-08-02 06:28:10.270 00:00:10.321 TCP 23.104.0.1:32872 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:28:54.950 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48984 10 6452 1 2025-08-02 06:29:10.630 00:00:10.367 TCP 23.104.0.1:54064 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:29:55.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42332 10 6452 1 2025-08-02 06:30:11.036 00:00:10.358 TCP 23.104.0.1:54058 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:30:55.396 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50950 10 6452 1 2025-08-02 06:31:11.435 00:00:10.371 TCP 23.104.0.1:42840 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:32:04.979 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:31:55.601 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34888 10 6452 1 2025-08-02 06:32:05.124 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:32:11.843 00:00:10.388 TCP 23.104.0.1:42600 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:32:55.815 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47882 10 6452 1 2025-08-02 06:33:12.284 00:00:10.327 TCP 23.104.0.1:57296 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:30:04.996 00:05:00.086 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-02 06:33:56.041 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43056 10 6452 1 2025-08-02 06:30:04.998 00:05:00.081 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-02 06:34:12.671 00:00:10.361 TCP 23.104.0.1:38790 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:34:56.267 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42692 10 6452 1 2025-08-02 06:35:13.091 00:00:10.395 TCP 23.104.0.1:33122 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:35:56.440 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60474 10 6452 1 2025-08-02 06:36:13.511 00:00:10.365 TCP 23.104.0.1:41238 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:37:05.264 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:36:56.647 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35174 10 6452 1 2025-08-02 06:37:05.201 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:37:13.910 00:00:10.323 TCP 23.104.0.1:46698 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:37:56.862 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46014 10 6452 1 2025-08-02 06:38:14.272 00:00:10.362 TCP 23.104.0.1:34964 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:38:57.091 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49622 10 6452 1 2025-08-02 06:39:14.672 00:00:10.365 TCP 23.104.0.1:45574 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:39:57.305 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33222 10 6452 1 2025-08-02 06:40:15.100 00:00:10.328 TCP 23.104.0.1:41986 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:36:05.000 00:06:00.084 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 06:36:05.002 00:06:00.079 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 06:40:57.475 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53524 10 6452 1 2025-08-02 06:41:15.465 00:00:10.333 TCP 23.104.0.1:53900 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:42:05.349 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:42:05.354 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:41:57.689 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49094 10 6452 1 2025-08-02 06:42:15.836 00:00:10.402 TCP 23.104.0.1:54332 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:42:57.903 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59882 10 6452 1 2025-08-02 06:43:16.272 00:00:10.318 TCP 23.104.0.1:35410 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:43:58.119 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45686 10 6452 1 2025-08-02 06:44:16.628 00:00:10.604 TCP 23.104.0.1:48704 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:44:58.346 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34032 10 6452 1 2025-08-02 06:45:17.267 00:00:10.364 TCP 23.104.0.1:60200 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:45:58.569 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53492 10 6452 1 2025-08-02 06:46:17.674 00:00:10.367 TCP 23.104.0.1:55208 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:47:05.227 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:47:05.381 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:46:58.783 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38312 10 6452 1 2025-08-02 06:47:18.105 00:00:10.324 TCP 23.104.0.1:33514 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:43:05.001 00:06:00.084 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 06:43:05.004 00:06:00.078 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 06:47:59.001 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37504 10 6452 1 2025-08-02 06:48:18.469 00:00:10.365 TCP 23.104.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:48:59.212 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40724 10 6452 1 2025-08-02 06:49:18.876 00:00:10.380 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:49:59.425 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:42048 10 6452 1 2025-08-02 06:50:19.297 00:00:10.369 TCP 23.104.0.1:36362 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:50:59.610 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49270 10 6452 1 2025-08-02 06:51:19.707 00:00:10.325 TCP 23.104.0.1:43592 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:52:05.931 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:52:06.062 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:51:59.824 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46464 10 6452 1 2025-08-02 06:52:20.092 00:00:10.361 TCP 23.104.0.1:46226 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:53:00.046 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38214 10 6452 1 2025-08-02 06:53:20.492 00:00:10.363 TCP 23.104.0.1:33220 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:54:00.285 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41352 10 6452 1 2025-08-02 06:54:20.900 00:00:10.365 TCP 23.104.0.1:54846 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:50:05.007 00:06:00.076 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 06:50:05.005 00:06:00.082 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 06:55:00.500 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46784 10 6452 1 2025-08-02 06:55:21.303 00:00:10.367 TCP 23.104.0.1:34446 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:56:00.713 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43200 10 6452 1 2025-08-02 06:56:21.709 00:00:10.364 TCP 23.104.0.1:53262 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:57:05.751 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:57:05.796 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:57:00.928 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48168 10 6452 1 2025-08-02 06:57:22.112 00:00:10.364 TCP 23.104.0.1:60092 -> 1.101.0.1:3000 11 1507 1 2025-08-02 06:58:01.130 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51096 10 6452 1 2025-08-02 06:58:22.517 00:00:10.324 TCP 23.104.0.1:53742 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 497662, total packets: 1561, avg bps: 1110, avg pps: 0, avg bpp: 318 Time window: 2025-08-02 05:58:48 - 2025-08-02 06:58:32 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0035s User: 0.0012s Wall: 0.0034s flows/second: 46967.4 Runtime: 0.0035s