Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 04:58:54.466 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:55490 12 10365 1 2025-08-03 04:59:17.007 00:00:10.436 TCP 23.104.0.1:45888 -> 1.101.0.1:3000 15 1926 1 2025-08-03 04:59:54.709 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59420 10 6452 1 2025-08-03 05:00:17.486 00:00:10.371 TCP 23.104.0.1:34684 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:00:54.930 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:50592 10 6452 1 2025-08-03 05:01:17.896 00:00:10.328 TCP 23.104.0.1:34482 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:01:55.129 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47710 10 6452 1 2025-08-03 05:02:18.264 00:00:10.364 TCP 23.104.0.1:54002 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:02:32.077 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 05:02:32.443 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 05:02:55.346 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58258 10 6452 1 2025-08-03 05:03:18.669 00:00:10.365 TCP 23.104.0.1:57816 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:03:55.556 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45816 10 6452 1 2025-08-03 05:04:19.098 00:00:10.363 TCP 23.104.0.1:45404 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:04:55.768 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54002 10 6452 1 2025-08-03 05:00:05.577 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 05:00:05.580 00:06:00.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 05:05:19.494 00:00:10.323 TCP 23.104.0.1:34024 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:05:55.987 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55448 10 6452 1 2025-08-03 05:06:19.875 00:00:10.328 TCP 23.104.0.1:34524 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:06:56.211 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46694 10 6452 1 2025-08-03 05:07:20.245 00:00:10.360 TCP 23.104.0.1:59064 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:07:32.170 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 05:07:32.232 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 05:07:56.426 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57958 10 6452 1 2025-08-03 05:08:20.643 00:00:10.365 TCP 23.104.0.1:37232 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:08:56.598 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37370 10 6452 1 2025-08-03 05:09:21.051 00:00:10.369 TCP 23.104.0.1:49364 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:09:56.809 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39686 10 6452 1 2025-08-03 05:10:21.458 00:00:10.367 TCP 23.104.0.1:34168 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:10:57.025 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56266 10 6452 1 2025-08-03 05:11:21.857 00:00:10.329 TCP 23.104.0.1:45994 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:07:05.582 00:06:00.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 05:07:05.580 00:06:00.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 05:11:57.238 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56298 10 6452 1 2025-08-03 05:12:32.326 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 05:12:22.222 00:00:10.362 TCP 23.104.0.1:41984 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:12:32.416 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 05:12:57.449 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46228 10 6452 1 2025-08-03 05:13:22.631 00:00:10.360 TCP 23.104.0.1:35904 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:13:57.670 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36438 10 6452 1 2025-08-03 05:14:23.028 00:00:10.365 TCP 23.104.0.1:46886 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:14:57.891 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44236 10 6452 1 2025-08-03 05:15:23.435 00:00:10.318 TCP 23.104.0.1:42248 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:15:58.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35200 10 6452 1 2025-08-03 05:16:23.790 00:00:10.365 TCP 23.104.0.1:46050 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:16:58.297 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47052 10 6452 1 2025-08-03 05:17:32.404 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 05:17:24.198 00:00:10.364 TCP 23.104.0.1:35620 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:17:32.320 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 05:17:58.512 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49396 10 6452 1 2025-08-03 05:18:24.594 00:00:10.335 TCP 23.104.0.1:54222 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:14:05.584 00:06:00.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 05:14:05.586 00:06:00.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 05:18:58.733 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52216 10 6452 1 2025-08-03 05:19:24.968 00:00:10.377 TCP 23.104.0.1:56716 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:19:58.950 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55580 10 6452 1 2025-08-03 05:20:25.385 00:00:10.375 TCP 23.104.0.1:38616 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:20:59.183 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49752 10 6452 1 2025-08-03 05:21:25.796 00:00:10.360 TCP 23.104.0.1:37434 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:21:59.405 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60534 10 6452 1 2025-08-03 05:22:26.195 00:00:10.361 TCP 23.104.0.1:43814 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:22:32.548 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 05:22:32.502 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 05:22:59.627 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58518 10 6452 1 2025-08-03 05:23:26.590 00:00:10.367 TCP 23.104.0.1:36724 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:23:59.855 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34914 10 6452 1 2025-08-03 05:24:26.998 00:00:10.325 TCP 23.104.0.1:39116 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:25:00.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40344 10 6452 1 2025-08-03 05:25:27.370 00:00:10.328 TCP 23.104.0.1:45628 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:21:05.584 00:06:00.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 05:21:05.587 00:06:00.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 05:26:00.292 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:58182 11 6504 1 2025-08-03 05:26:27.738 00:00:10.367 TCP 23.104.0.1:54050 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:27:00.562 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40218 10 6452 1 2025-08-03 05:27:32.725 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 05:27:32.595 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 05:27:28.143 00:00:10.364 TCP 23.104.0.1:46808 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:28:00.774 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54932 10 6452 1 2025-08-03 05:28:28.549 00:00:10.377 TCP 23.104.0.1:56220 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:29:00.986 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39098 10 6452 1 2025-08-03 05:29:28.969 00:00:10.371 TCP 23.104.0.1:47308 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:30:01.209 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53460 10 6452 1 2025-08-03 05:30:29.378 00:00:10.322 TCP 23.104.0.1:48502 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:31:01.425 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37958 10 6452 1 2025-08-03 05:31:29.740 00:00:10.364 TCP 23.104.0.1:53104 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:32:01.642 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33930 10 6452 1 2025-08-03 05:32:32.485 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 05:32:32.761 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 05:32:30.141 00:00:10.330 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:28:05.589 00:06:00.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 05:28:05.590 00:06:00.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 05:33:01.858 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56550 10 6452 1 2025-08-03 05:33:30.510 00:00:10.365 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:34:02.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36220 10 6452 1 2025-08-03 05:34:30.913 00:00:10.322 TCP 23.104.0.1:56552 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:35:02.299 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33268 10 6452 1 2025-08-03 05:35:31.279 00:00:10.320 TCP 23.104.0.1:35614 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:36:02.506 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34128 10 6452 1 2025-08-03 05:36:31.643 00:00:10.367 TCP 23.104.0.1:40526 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:37:02.716 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57350 10 6452 1 2025-08-03 05:37:33.010 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 05:37:33.271 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 05:37:32.060 00:00:10.342 TCP 23.104.0.1:59782 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:38:02.929 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33496 10 6452 1 2025-08-03 05:38:32.456 00:00:10.441 TCP 23.104.0.1:50258 -> 1.101.0.1:3000 15 1926 1 2025-08-03 05:39:03.137 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:34414 12 10367 1 2025-08-03 05:39:32.937 00:00:10.437 TCP 23.104.0.1:36988 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:35:05.592 00:06:00.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 05:35:05.591 00:06:00.127 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 05:40:03.340 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41170 10 6452 1 2025-08-03 05:40:33.413 00:00:10.365 TCP 23.104.0.1:53414 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:41:03.553 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56430 10 6452 1 2025-08-03 05:41:33.820 00:00:10.330 TCP 23.104.0.1:60206 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:42:03.767 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44714 10 6452 1 2025-08-03 05:42:32.716 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 05:42:32.927 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 05:42:34.189 00:00:10.367 TCP 23.104.0.1:39774 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:43:03.934 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:55532 10 6452 1 2025-08-03 05:43:34.595 00:00:10.360 TCP 23.104.0.1:46528 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:44:04.127 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36670 10 6452 1 2025-08-03 05:44:34.991 00:00:10.364 TCP 23.104.0.1:56894 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:45:04.343 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45740 10 6452 1 2025-08-03 05:45:35.390 00:00:10.367 TCP 23.104.0.1:41690 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:46:04.517 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49180 10 6452 1 2025-08-03 05:46:35.802 00:00:10.416 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:42:05.590 00:06:00.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 05:42:05.593 00:06:00.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 05:47:04.691 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59352 10 6452 1 2025-08-03 05:47:32.905 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 05:47:33.016 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 05:47:36.259 00:00:10.366 TCP 23.104.0.1:40604 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:48:04.863 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:60238 10 6452 1 2025-08-03 05:48:36.665 00:00:10.360 TCP 23.104.0.1:34668 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:49:05.116 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58218 10 6452 1 2025-08-03 05:49:37.085 00:00:10.371 TCP 23.104.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:50:05.343 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35222 10 6452 1 2025-08-03 05:50:37.494 00:00:10.380 TCP 23.104.0.1:36236 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:51:05.588 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53814 10 6452 1 2025-08-03 05:51:37.930 00:00:10.380 TCP 23.104.0.1:35874 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:52:05.804 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37792 10 6452 1 2025-08-03 05:52:33.029 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 05:52:33.052 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 05:52:38.356 00:00:10.367 TCP 23.104.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:53:06.034 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50830 10 6452 1 2025-08-03 05:53:38.765 00:00:10.331 TCP 23.104.0.1:40612 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:49:05.594 00:06:00.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 05:49:05.597 00:06:00.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 05:54:06.248 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60242 10 6452 1 2025-08-03 05:54:39.134 00:00:10.364 TCP 23.104.0.1:53466 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:55:06.460 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54146 10 6452 1 2025-08-03 05:55:39.541 00:00:10.322 TCP 23.104.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:56:06.678 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54104 10 6452 1 2025-08-03 05:56:39.901 00:00:10.397 TCP 23.104.0.1:34592 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:57:06.890 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52146 10 6452 1 2025-08-03 05:57:33.098 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 05:57:33.334 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 05:57:40.333 00:00:10.331 TCP 23.104.0.1:47206 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:58:07.109 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6452 1 2025-08-03 05:58:40.699 00:00:10.370 TCP 23.104.0.1:54026 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 506082, total packets: 1569, avg bps: 1125, avg pps: 0, avg bpp: 322 Time window: 2025-08-03 04:58:54 - 2025-08-03 05:58:51 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0027s User: 0.0014s Wall: 0.0019s flows/second: 86391.4 Runtime: 0.0019s