Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 00:58:58.178 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49698 10 6452 1 2025-08-03 00:59:39.876 00:00:10.390 TCP 23.104.0.1:56326 -> 1.101.0.1:3000 11 1507 1 2025-08-03 00:55:05.515 00:06:00.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 00:55:05.512 00:06:00.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 00:59:58.391 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52102 10 6452 1 2025-08-03 01:00:40.301 00:00:10.371 TCP 23.104.0.1:50176 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:00:58.630 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52912 10 6452 1 2025-08-03 01:01:40.708 00:00:10.361 TCP 23.104.0.1:39828 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:01:58.803 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:49330 10 6452 1 2025-08-03 01:02:27.254 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:02:27.431 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 01:02:41.110 00:00:10.361 TCP 23.104.0.1:38702 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:02:59.008 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47118 10 6452 1 2025-08-03 01:03:41.510 00:00:10.368 TCP 23.104.0.1:52030 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:03:59.232 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51234 10 6452 1 2025-08-03 01:04:41.915 00:00:10.358 TCP 23.104.0.1:39672 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:04:59.397 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33416 10 6452 1 2025-08-03 01:05:42.323 00:00:10.328 TCP 23.104.0.1:33122 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:05:59.610 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51964 12 6556 1 2025-08-03 01:06:42.688 00:00:10.328 TCP 23.104.0.1:38368 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:02:05.517 00:06:00.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 01:02:05.515 00:06:00.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 01:06:59.828 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38600 10 6452 1 2025-08-03 01:07:27.384 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 01:07:27.499 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:07:43.054 00:00:10.385 TCP 23.104.0.1:39262 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:08:00.075 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55532 10 6452 1 2025-08-03 01:08:43.474 00:00:10.320 TCP 23.104.0.1:59154 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:09:00.290 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35188 10 6452 1 2025-08-03 01:09:43.837 00:00:10.347 TCP 23.104.0.1:52534 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:10:00.504 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38618 10 6452 1 2025-08-03 01:10:44.223 00:00:10.363 TCP 23.104.0.1:58874 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:11:00.722 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40746 10 6452 1 2025-08-03 01:11:44.621 00:00:10.370 TCP 23.104.0.1:53956 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:12:00.940 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:48322 10 6452 1 2025-08-03 01:12:27.676 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:12:27.510 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 01:12:45.026 00:00:10.369 TCP 23.104.0.1:49372 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:13:01.132 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43228 10 6452 1 2025-08-03 01:13:45.436 00:00:10.363 TCP 23.104.0.1:60416 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:09:05.516 00:06:00.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 01:09:05.519 00:06:00.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 01:14:01.300 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39086 10 6452 1 2025-08-03 01:14:45.844 00:00:10.407 TCP 23.104.0.1:46762 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:15:01.527 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55226 10 6452 1 2025-08-03 01:15:46.292 00:00:10.364 TCP 23.104.0.1:37218 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:16:01.746 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37226 10 6452 1 2025-08-03 01:16:46.697 00:00:10.367 TCP 23.104.0.1:54208 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:17:01.918 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45754 10 6452 1 2025-08-03 01:17:27.707 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:17:27.592 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 01:17:47.107 00:00:10.361 TCP 23.104.0.1:33420 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:18:02.131 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56936 10 6452 1 2025-08-03 01:18:47.508 00:00:10.368 TCP 23.104.0.1:48524 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:19:02.338 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53940 10 6452 1 2025-08-03 01:19:47.916 00:00:10.376 TCP 23.104.0.1:32940 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:20:02.509 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49458 10 6452 1 2025-08-03 01:20:48.331 00:00:10.333 TCP 23.104.0.1:53970 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:16:05.520 00:06:00.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 01:16:05.518 00:06:00.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 01:21:02.724 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57592 10 6452 1 2025-08-03 01:21:48.702 00:00:10.368 TCP 23.104.0.1:57030 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:22:02.897 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35136 10 6452 1 2025-08-03 01:22:27.790 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 01:22:27.715 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:22:49.115 00:00:10.364 TCP 23.104.0.1:49768 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:23:03.115 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35518 10 6452 1 2025-08-03 01:23:49.520 00:00:10.366 TCP 23.104.0.1:46752 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:24:03.328 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50380 10 6452 1 2025-08-03 01:24:49.924 00:00:10.352 TCP 23.104.0.1:50536 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:25:03.547 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58664 10 6452 1 2025-08-03 01:25:50.315 00:00:10.371 TCP 23.104.0.1:51110 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:26:03.719 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59548 10 6452 1 2025-08-03 01:26:50.738 00:00:10.369 TCP 23.104.0.1:52574 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:27:03.935 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:41440 10 6452 1 2025-08-03 01:27:28.128 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:27:28.065 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 01:27:51.145 00:00:10.369 TCP 23.104.0.1:41938 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:23:05.520 00:06:00.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 01:23:05.519 00:06:00.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 01:28:04.124 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49098 10 6452 1 2025-08-03 01:28:51.551 00:00:10.366 TCP 23.104.0.1:56406 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:29:04.340 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44776 10 6452 1 2025-08-03 01:29:51.956 00:00:10.368 TCP 23.104.0.1:40296 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:30:04.548 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34930 10 6452 1 2025-08-03 01:30:52.361 00:00:10.323 TCP 23.104.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:31:04.764 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33340 10 6452 1 2025-08-03 01:31:52.720 00:00:10.380 TCP 23.104.0.1:45510 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:32:04.981 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:33942 10 6452 1 2025-08-03 01:32:27.810 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 01:32:28.027 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:32:53.136 00:00:10.367 TCP 23.104.0.1:54280 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:33:05.245 00:00:15.319 TCP 1.101.0.1:3000 -> 22.102.0.1:37072 10 6452 1 2025-08-03 01:33:53.543 00:00:10.361 TCP 23.104.0.1:60594 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:34:10.613 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45604 10 6452 1 2025-08-03 01:30:05.520 00:06:00.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 01:30:05.523 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 01:34:53.942 00:00:10.380 TCP 23.104.0.1:55190 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:35:10.829 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48154 10 6452 1 2025-08-03 01:35:54.357 00:00:10.363 TCP 23.104.0.1:49018 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:36:11.074 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34164 10 6452 1 2025-08-03 01:36:54.759 00:00:10.379 TCP 23.104.0.1:56184 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:37:11.293 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51808 10 6452 1 2025-08-03 01:37:27.846 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 01:37:28.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:37:55.179 00:00:10.362 TCP 23.104.0.1:58960 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:38:11.507 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50586 10 6452 1 2025-08-03 01:38:55.580 00:00:10.370 TCP 23.104.0.1:34306 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:39:11.724 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49776 10 6452 1 2025-08-03 01:39:55.990 00:00:10.389 TCP 23.104.0.1:39990 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:40:11.938 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:35736 10 6452 1 2025-08-03 01:40:56.457 00:00:10.323 TCP 23.104.0.1:55744 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:41:12.170 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48866 10 6452 1 2025-08-03 01:37:05.525 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 01:37:05.523 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 01:41:56.818 00:00:10.325 TCP 23.104.0.1:42142 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:42:12.382 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40954 10 6452 1 2025-08-03 01:42:28.229 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 01:42:28.046 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:42:57.183 00:00:10.368 TCP 23.104.0.1:46074 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:43:12.596 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54068 10 6452 1 2025-08-03 01:43:57.590 00:00:10.368 TCP 23.104.0.1:42044 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:44:12.809 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38232 10 6452 1 2025-08-03 01:44:57.998 00:00:10.324 TCP 23.104.0.1:40960 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:45:13.026 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45842 10 6452 1 2025-08-03 01:45:58.361 00:00:10.367 TCP 23.104.0.1:60060 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:46:13.236 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36210 10 6452 1 2025-08-03 01:46:58.761 00:00:10.368 TCP 23.104.0.1:56194 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:47:13.442 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39682 10 6452 1 2025-08-03 01:47:28.302 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:47:28.140 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 01:47:59.164 00:00:10.364 TCP 23.104.0.1:49400 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:48:13.655 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59162 10 6452 1 2025-08-03 01:44:05.528 00:06:00.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 01:44:05.526 00:06:00.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 01:48:59.567 00:00:10.367 TCP 23.104.0.1:40956 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:49:13.868 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44866 10 6452 1 2025-08-03 01:49:59.969 00:00:10.377 TCP 23.104.0.1:34386 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:50:14.095 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46506 10 6452 1 2025-08-03 01:51:00.382 00:00:10.363 TCP 23.104.0.1:33882 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:51:14.308 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39460 10 6452 1 2025-08-03 01:52:00.785 00:00:10.372 TCP 23.104.0.1:45782 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:52:14.546 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56336 10 6452 1 2025-08-03 01:52:28.234 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 01:52:28.166 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:53:01.193 00:00:10.356 TCP 23.104.0.1:46256 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:53:14.773 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54480 10 6452 1 2025-08-03 01:54:01.586 00:00:10.419 TCP 23.104.0.1:47872 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:54:14.982 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:45016 10 6452 1 2025-08-03 01:55:02.053 00:00:10.364 TCP 23.104.0.1:53816 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:55:15.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53716 10 6452 1 2025-08-03 01:51:05.530 00:06:00.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 01:51:05.527 00:06:00.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 01:56:02.452 00:00:10.323 TCP 23.104.0.1:49974 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:56:15.430 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40256 10 6452 1 2025-08-03 01:57:02.809 00:00:10.365 TCP 23.104.0.1:38894 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:57:15.642 00:00:10.270 TCP 1.101.0.1:3000 -> 22.102.0.1:39632 10 6452 1 2025-08-03 01:57:28.787 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:57:28.667 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 01:58:03.208 00:00:10.372 TCP 23.104.0.1:58520 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:58:15.949 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:54238 10 6452 1 Summary: total flows: 161, total bytes: 497683, total packets: 1575, avg bps: 1047, avg pps: 0, avg bpp: 315 Time window: 2025-08-03 00:55:05 - 2025-08-03 01:58:26 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0016s User: 0.0024s Wall: 0.0023s flows/second: 70122.8 Runtime: 0.0023s