Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 06:59:01.343 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38974 10 6452 1 2025-08-02 06:59:22.881 00:00:10.390 TCP 23.104.0.1:44362 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:00:01.511 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:57716 10 6452 1 2025-08-02 07:00:23.306 00:00:10.323 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:01:01.720 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45080 10 6452 1 2025-08-02 07:01:23.668 00:00:10.364 TCP 23.104.0.1:37158 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:02:05.653 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 06:57:05.083 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 07:02:05.791 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 06:57:05.047 00:06:00.040 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 07:02:01.925 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44892 10 6452 1 2025-08-02 07:02:24.100 00:00:10.365 TCP 23.104.0.1:51278 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:03:02.144 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48688 10 6452 1 2025-08-02 07:03:24.507 00:00:10.374 TCP 23.104.0.1:43024 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:04:02.356 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55254 10 6452 1 2025-08-02 07:04:24.928 00:00:10.396 TCP 23.104.0.1:42374 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:05:02.564 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55634 10 6452 1 2025-08-02 07:05:25.364 00:00:10.363 TCP 23.104.0.1:54034 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:06:02.738 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 6452 1 2025-08-02 07:06:25.768 00:00:10.371 TCP 23.104.0.1:60534 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:07:05.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 07:07:05.693 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 07:07:02.948 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47548 10 6452 1 2025-08-02 07:07:26.175 00:00:10.366 TCP 23.104.0.1:56478 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:08:03.176 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57794 10 6452 1 2025-08-02 07:08:26.576 00:00:10.367 TCP 23.104.0.1:39022 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:04:05.055 00:06:00.033 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 07:04:05.084 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 07:09:03.388 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50214 10 6452 1 2025-08-02 07:09:26.983 00:00:10.369 TCP 23.104.0.1:53004 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:10:03.560 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32790 10 6452 1 2025-08-02 07:10:27.392 00:00:10.364 TCP 23.104.0.1:56334 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:11:03.771 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-08-02 07:11:27.788 00:00:10.370 TCP 23.104.0.1:37620 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:12:05.795 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 07:12:05.805 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 07:12:03.998 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47444 10 6452 1 2025-08-02 07:12:28.197 00:00:10.322 TCP 23.104.0.1:54174 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:13:04.216 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53354 10 6452 1 2025-08-02 07:13:28.558 00:00:10.367 TCP 23.104.0.1:56076 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:14:04.427 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52840 10 6452 1 2025-08-02 07:14:28.963 00:00:10.374 TCP 23.104.0.1:60840 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:15:04.639 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57140 10 6452 1 2025-08-02 07:15:29.379 00:00:10.365 TCP 23.104.0.1:41706 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:11:05.085 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 07:11:05.056 00:06:00.032 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 07:16:04.852 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47450 10 6452 1 2025-08-02 07:16:29.787 00:00:10.371 TCP 23.104.0.1:52930 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:17:05.970 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 07:17:06.023 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 07:17:05.090 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59478 10 6452 1 2025-08-02 07:17:30.207 00:00:10.370 TCP 23.104.0.1:45416 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:18:05.299 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48964 10 6452 1 2025-08-02 07:18:30.614 00:00:10.364 TCP 23.104.0.1:59096 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:19:05.511 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36090 10 6452 1 2025-08-02 07:19:31.019 00:00:10.365 TCP 23.104.0.1:48204 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:20:05.723 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56460 10 6452 1 2025-08-02 07:20:31.416 00:00:10.369 TCP 23.104.0.1:37388 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:21:05.940 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45184 10 6452 1 2025-08-02 07:21:31.826 00:00:10.320 TCP 23.104.0.1:53470 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:22:06.002 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 07:22:05.908 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 07:22:06.186 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46556 10 6452 1 2025-08-02 07:22:32.182 00:00:10.367 TCP 23.104.0.1:39074 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:18:05.061 00:06:00.037 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 07:18:05.087 00:06:00.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 07:23:06.405 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49738 10 6452 1 2025-08-02 07:23:32.580 00:00:10.381 TCP 23.104.0.1:50334 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:24:06.622 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58226 10 6452 1 2025-08-02 07:24:32.983 00:00:10.366 TCP 23.104.0.1:49378 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:25:06.831 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6452 1 2025-08-02 07:25:33.389 00:00:10.365 TCP 23.104.0.1:60576 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:26:07.066 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57962 10 6452 1 2025-08-02 07:26:33.788 00:00:10.416 TCP 23.104.0.1:56604 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:27:06.238 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 07:27:05.887 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 07:27:07.243 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60030 10 6452 1 2025-08-02 07:27:34.241 00:00:10.368 TCP 23.104.0.1:38660 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:28:07.457 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59560 10 6452 1 2025-08-02 07:28:34.645 00:00:10.326 TCP 23.104.0.1:57308 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:29:07.674 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48872 10 6452 1 2025-08-02 07:29:35.014 00:00:10.373 TCP 23.104.0.1:47332 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:25:05.095 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 07:25:05.062 00:06:00.037 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 07:30:07.889 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43780 10 6452 1 2025-08-02 07:30:35.427 00:00:10.363 TCP 23.104.0.1:36728 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:31:08.108 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57324 10 6452 1 2025-08-02 07:31:35.829 00:00:10.354 TCP 23.104.0.1:37264 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:32:06.259 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 07:32:06.296 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 07:32:08.314 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45968 10 6452 1 2025-08-02 07:32:36.226 00:00:10.375 TCP 23.104.0.1:41806 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:33:08.528 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38152 10 6452 1 2025-08-02 07:33:36.642 00:00:10.459 TCP 23.104.0.1:52804 -> 1.101.0.1:3000 15 1926 1 2025-08-02 07:34:08.708 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:33380 12 10367 1 2025-08-02 07:34:37.141 00:00:10.362 TCP 23.104.0.1:55508 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:35:08.946 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6452 1 2025-08-02 07:35:37.543 00:00:10.367 TCP 23.104.0.1:57442 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:36:09.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54422 10 6452 1 2025-08-02 07:36:37.946 00:00:10.371 TCP 23.104.0.1:44670 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:32:05.098 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 07:37:06.325 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 07:37:06.604 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 07:32:05.067 00:06:00.039 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 07:37:09.392 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40694 10 6452 1 2025-08-02 07:37:38.356 00:00:10.364 TCP 23.104.0.1:37106 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:38:09.606 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50258 10 6452 1 2025-08-02 07:38:38.766 00:00:10.374 TCP 23.104.0.1:47306 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:39:09.780 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60608 10 6452 1 2025-08-02 07:39:39.178 00:00:10.366 TCP 23.104.0.1:40724 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:40:09.991 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56990 10 6452 1 2025-08-02 07:40:39.579 00:00:10.365 TCP 23.104.0.1:50248 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:41:10.213 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60202 10 6452 1 2025-08-02 07:41:39.982 00:00:10.383 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:42:06.828 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 07:42:06.691 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 07:42:10.427 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47396 10 6452 1 2025-08-02 07:42:40.393 00:00:10.362 TCP 23.104.0.1:57192 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:43:10.642 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48706 10 6452 1 2025-08-02 07:43:40.796 00:00:10.366 TCP 23.104.0.1:45704 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:39:05.071 00:06:00.036 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 07:39:05.103 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 07:44:10.857 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51300 10 6452 1 2025-08-02 07:44:41.199 00:00:10.363 TCP 23.104.0.1:34650 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:45:11.086 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39412 10 6452 1 2025-08-02 07:45:41.603 00:00:10.363 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:46:11.265 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33740 10 6452 1 2025-08-02 07:46:42.006 00:00:10.365 TCP 23.104.0.1:44080 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:47:06.444 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 07:47:06.598 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 07:47:11.484 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38056 10 6452 1 2025-08-02 07:47:42.412 00:00:10.333 TCP 23.104.0.1:40314 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:48:11.705 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46318 10 6452 1 2025-08-02 07:48:42.785 00:00:10.437 TCP 23.104.0.1:38422 -> 1.101.0.1:3000 15 1926 1 2025-08-02 07:49:11.922 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35416 12 10367 1 2025-08-02 07:49:43.263 00:00:10.327 TCP 23.104.0.1:34442 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:50:12.164 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42818 10 6452 1 2025-08-02 07:50:43.630 00:00:10.327 TCP 23.104.0.1:57590 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:46:05.076 00:06:00.032 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 07:46:05.104 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 07:51:12.372 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33518 10 6452 1 2025-08-02 07:51:43.996 00:00:10.360 TCP 23.104.0.1:47998 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:52:06.763 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 07:52:06.676 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 07:52:12.595 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60328 10 6452 1 2025-08-02 07:52:44.393 00:00:10.365 TCP 23.104.0.1:42104 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:53:12.803 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42450 10 6452 1 2025-08-02 07:53:44.799 00:00:10.345 TCP 23.104.0.1:47434 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:54:13.014 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35100 10 6452 1 2025-08-02 07:54:45.183 00:00:10.361 TCP 23.104.0.1:52106 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:55:13.193 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42506 10 6452 1 2025-08-02 07:55:45.581 00:00:10.363 TCP 23.104.0.1:35844 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:56:13.405 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45122 10 6452 1 2025-08-02 07:56:45.986 00:00:10.328 TCP 23.104.0.1:33712 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:57:06.469 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 07:57:06.735 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 07:57:13.615 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47188 10 6452 1 2025-08-02 07:57:46.356 00:00:10.369 TCP 23.104.0.1:47572 -> 1.101.0.1:3000 11 1507 1 2025-08-02 07:53:05.105 00:06:00.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-02 07:53:05.077 00:06:00.039 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 07:58:13.786 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42308 10 6452 1 Summary: total flows: 161, total bytes: 502971, total packets: 1522, avg bps: 1081, avg pps: 0, avg bpp: 330 Time window: 2025-08-02 06:57:05 - 2025-08-02 07:59:05 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0039s User: 0.0010s Wall: 0.0030s flows/second: 54061.6 Runtime: 0.0030s