Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 14:58:49.661 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51430 10 6452 1 2025-08-02 14:59:35.780 00:00:10.365 TCP 23.104.0.1:53852 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:59:49.873 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50604 10 6452 1 2025-08-02 15:00:36.186 00:00:10.336 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:00:50.106 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44540 10 6452 1 2025-08-02 15:01:36.562 00:00:10.364 TCP 23.104.0.1:34766 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:01:50.327 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54586 10 6452 1 2025-08-02 15:02:15.084 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 15:02:15.234 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 15:02:36.965 00:00:10.372 TCP 23.104.0.1:39172 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:02:50.546 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60302 10 6452 1 2025-08-02 15:03:37.378 00:00:10.365 TCP 23.104.0.1:51556 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:03:50.769 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56254 10 6452 1 2025-08-02 15:04:37.779 00:00:10.366 TCP 23.104.0.1:42870 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:00:05.234 00:06:00.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 15:04:50.981 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55892 10 6452 1 2025-08-02 15:00:05.232 00:06:00.136 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 15:05:38.185 00:00:10.361 TCP 23.104.0.1:37676 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:05:51.205 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57124 10 6452 1 2025-08-02 15:06:38.588 00:00:10.365 TCP 23.104.0.1:44182 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:06:51.416 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-08-02 15:07:15.242 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 15:07:15.477 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 15:07:38.992 00:00:10.367 TCP 23.104.0.1:51472 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:07:51.633 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41976 10 6452 1 2025-08-02 15:08:39.397 00:00:10.363 TCP 23.104.0.1:34182 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:08:51.846 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48618 10 6452 1 2025-08-02 15:09:39.802 00:00:10.366 TCP 23.104.0.1:38584 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:09:52.026 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40914 10 6452 1 2025-08-02 15:10:40.206 00:00:10.326 TCP 23.104.0.1:45972 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:10:52.246 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59888 10 6452 1 2025-08-02 15:11:40.565 00:00:10.364 TCP 23.104.0.1:45614 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:07:05.234 00:06:00.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 15:07:05.231 00:06:00.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 15:11:52.456 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33426 10 6452 1 2025-08-02 15:12:15.163 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 15:12:15.379 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 15:12:40.968 00:00:10.387 TCP 23.104.0.1:39294 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:12:52.665 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45164 10 6452 1 2025-08-02 15:13:41.396 00:00:10.366 TCP 23.104.0.1:52402 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:13:52.878 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33834 10 6452 1 2025-08-02 15:14:41.802 00:00:10.369 TCP 23.104.0.1:39138 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:14:53.111 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46890 10 6452 1 2025-08-02 15:15:42.211 00:00:10.361 TCP 23.104.0.1:51676 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:15:53.283 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37198 10 6452 1 2025-08-02 15:16:42.612 00:00:10.362 TCP 23.104.0.1:45926 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:16:53.496 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46502 10 6452 1 2025-08-02 15:17:16.194 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 15:17:16.010 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 15:17:43.017 00:00:10.367 TCP 23.104.0.1:37608 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:17:53.666 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48338 10 6452 1 2025-08-02 15:18:43.423 00:00:10.363 TCP 23.104.0.1:43622 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:18:53.881 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38982 10 6452 1 2025-08-02 15:14:05.233 00:06:00.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 15:14:05.236 00:06:00.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 15:19:43.827 00:00:10.366 TCP 23.104.0.1:47306 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:19:54.102 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48368 10 6452 1 2025-08-02 15:20:44.228 00:00:10.363 TCP 23.104.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:20:54.316 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39878 10 6452 1 2025-08-02 15:21:44.632 00:00:10.360 TCP 23.104.0.1:48416 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:21:54.529 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39716 10 6452 1 2025-08-02 15:22:15.694 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 15:22:15.781 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 15:22:45.034 00:00:10.368 TCP 23.104.0.1:40582 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:22:54.764 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47278 10 6452 1 2025-08-02 15:23:45.439 00:00:10.365 TCP 23.104.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:23:54.973 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:44374 10 6452 1 2025-08-02 15:24:45.842 00:00:10.386 TCP 23.104.0.1:33230 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:24:55.210 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55142 10 6452 1 2025-08-02 15:25:46.271 00:00:10.363 TCP 23.104.0.1:38382 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:21:05.236 00:06:00.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 15:25:55.419 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57820 10 6452 1 2025-08-02 15:21:05.233 00:06:00.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 15:26:46.676 00:00:10.382 TCP 23.104.0.1:45430 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:26:55.591 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 6452 1 2025-08-02 15:27:16.083 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 15:27:16.227 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 15:27:47.105 00:00:10.322 TCP 23.104.0.1:45428 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:27:55.810 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38618 10 6452 1 2025-08-02 15:28:47.470 00:00:10.445 TCP 23.104.0.1:57178 -> 1.101.0.1:3000 15 1926 1 2025-08-02 15:28:56.035 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:56284 12 10367 1 2025-08-02 15:29:47.952 00:00:10.366 TCP 23.104.0.1:41372 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:29:56.280 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57554 10 6452 1 2025-08-02 15:30:48.355 00:00:10.376 TCP 23.104.0.1:38268 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:30:56.494 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34198 10 6452 1 2025-08-02 15:31:48.775 00:00:10.380 TCP 23.104.0.1:38200 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:31:56.671 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40492 10 6452 1 2025-08-02 15:32:15.991 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 15:32:16.142 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 15:32:49.195 00:00:10.359 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:28:05.234 00:06:00.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 15:28:05.237 00:06:00.138 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 15:32:56.843 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35168 10 6452 1 2025-08-02 15:33:49.592 00:00:10.363 TCP 23.104.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:33:57.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40476 10 6452 1 2025-08-02 15:34:49.994 00:00:10.323 TCP 23.104.0.1:58970 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:34:57.294 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56420 10 6452 1 2025-08-02 15:35:50.356 00:00:10.365 TCP 23.104.0.1:40206 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:35:57.485 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35604 10 6452 1 2025-08-02 15:36:50.759 00:00:10.374 TCP 23.104.0.1:50180 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:36:57.688 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59626 10 6452 1 2025-08-02 15:37:16.065 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 15:37:15.874 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 15:37:51.170 00:00:10.361 TCP 23.104.0.1:43276 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:37:57.901 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:57344 10 6452 1 2025-08-02 15:38:51.572 00:00:10.320 TCP 23.104.0.1:42370 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:38:58.108 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43958 10 6452 1 2025-08-02 15:35:05.247 00:06:00.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 15:39:51.930 00:00:10.381 TCP 23.104.0.1:51242 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:35:05.246 00:06:00.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 15:39:58.331 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39462 10 6452 1 2025-08-02 15:40:52.362 00:00:10.369 TCP 23.104.0.1:33372 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:40:58.554 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53782 10 6452 1 2025-08-02 15:41:52.769 00:00:10.366 TCP 23.104.0.1:33010 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:41:58.771 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43906 10 6452 1 2025-08-02 15:42:16.012 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 15:42:16.179 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 15:42:53.186 00:00:10.361 TCP 23.104.0.1:45672 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:42:58.987 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36364 10 6452 1 2025-08-02 15:43:53.591 00:00:10.361 TCP 23.104.0.1:41354 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:43:59.201 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52566 10 6452 1 2025-08-02 15:44:53.994 00:00:10.368 TCP 23.104.0.1:57300 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:44:59.417 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57894 10 6452 1 2025-08-02 15:45:54.393 00:00:10.368 TCP 23.104.0.1:40526 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:45:59.631 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:39778 10 6452 1 2025-08-02 15:46:54.796 00:00:10.373 TCP 23.104.0.1:44176 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:42:05.248 00:06:00.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 15:42:05.247 00:06:00.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 15:46:59.800 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49972 10 6452 1 2025-08-02 15:47:16.131 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 15:47:16.188 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 15:47:55.216 00:00:10.367 TCP 23.104.0.1:38866 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:47:59.973 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52102 10 6452 1 2025-08-02 15:48:55.620 00:00:10.364 TCP 23.104.0.1:34724 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:49:00.207 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55766 10 6452 1 2025-08-02 15:49:56.024 00:00:10.370 TCP 23.104.0.1:42056 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:50:00.419 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33524 10 6452 1 2025-08-02 15:50:56.428 00:00:10.373 TCP 23.104.0.1:46656 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:51:00.632 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60004 10 6452 1 2025-08-02 15:52:00.846 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44278 10 6452 1 2025-08-02 15:51:56.838 00:00:10.353 TCP 23.104.0.1:38572 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:52:16.665 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 15:52:16.589 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 15:53:01.037 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36250 10 6452 1 2025-08-02 15:52:57.229 00:00:10.364 TCP 23.104.0.1:59540 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:49:05.248 00:06:00.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 15:49:05.249 00:06:00.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 15:53:57.632 00:00:10.493 TCP 23.104.0.1:37010 -> 1.101.0.1:3000 15 1926 1 2025-08-02 15:54:01.249 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:33986 12 10367 1 2025-08-02 15:55:01.497 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36914 10 6452 1 2025-08-02 15:54:58.162 00:00:10.324 TCP 23.104.0.1:43202 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:55:58.523 00:00:10.367 TCP 23.104.0.1:56990 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:56:01.666 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56680 10 6452 1 2025-08-02 15:56:58.926 00:00:10.387 TCP 23.104.0.1:48952 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:57:16.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 15:57:01.838 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34434 10 6452 1 2025-08-02 15:57:16.165 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 15:57:59.350 00:00:10.361 TCP 23.104.0.1:38804 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:58:02.068 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44958 10 6452 1 Summary: total flows: 159, total bytes: 504525, total packets: 1557, avg bps: 1132, avg pps: 0, avg bpp: 324 Time window: 2025-08-02 14:58:49 - 2025-08-02 15:58:12 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0036s User: 0.0012s Wall: 0.0029s flows/second: 55169.9 Runtime: 0.0029s