Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 05:59:07.322 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43430 10 6452 1 2025-08-03 05:59:41.110 00:00:10.370 TCP 23.104.0.1:58184 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:00:07.532 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60894 10 6452 1 2025-08-03 06:00:41.512 00:00:10.325 TCP 23.104.0.1:49786 -> 1.101.0.1:3000 11 1507 1 2025-08-03 05:56:05.594 00:06:00.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 05:56:05.598 00:06:00.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 06:01:07.749 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38386 10 6452 1 2025-08-03 06:01:41.875 00:00:10.324 TCP 23.104.0.1:42068 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:02:07.923 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38278 10 6452 1 2025-08-03 06:02:33.211 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 06:02:33.197 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 06:02:42.240 00:00:10.365 TCP 23.104.0.1:47814 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:03:08.137 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47830 12 6556 1 2025-08-03 06:03:42.641 00:00:10.371 TCP 23.104.0.1:59256 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:04:08.348 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51952 10 6452 1 2025-08-03 06:04:43.058 00:00:10.368 TCP 23.104.0.1:46876 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:05:08.560 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44858 10 6452 1 2025-08-03 06:05:43.462 00:00:10.359 TCP 23.104.0.1:52046 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:06:08.800 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49326 10 6452 1 2025-08-03 06:06:43.861 00:00:10.369 TCP 23.104.0.1:56096 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:07:09.016 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 10 6452 1 2025-08-03 06:07:33.477 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 06:07:33.338 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 06:07:44.266 00:00:10.365 TCP 23.104.0.1:53272 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:03:05.601 00:06:00.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 06:03:05.599 00:06:00.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 06:08:09.223 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42308 10 6452 1 2025-08-03 06:08:44.668 00:00:10.366 TCP 23.104.0.1:42242 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:09:09.434 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33782 10 6452 1 2025-08-03 06:09:45.107 00:00:10.371 TCP 23.104.0.1:41582 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:10:09.606 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60026 10 6452 1 2025-08-03 06:10:45.524 00:00:10.371 TCP 23.104.0.1:53470 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:11:09.820 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39248 10 6452 1 2025-08-03 06:11:45.933 00:00:10.392 TCP 23.104.0.1:45816 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:12:09.988 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58198 10 6452 1 2025-08-03 06:12:33.389 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 06:12:33.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 06:12:46.363 00:00:10.362 TCP 23.104.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:13:10.210 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43284 10 6452 1 2025-08-03 06:13:46.762 00:00:10.377 TCP 23.104.0.1:45512 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:14:10.423 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6452 1 2025-08-03 06:10:05.598 00:06:00.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 06:14:47.171 00:00:10.364 TCP 23.104.0.1:34762 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:10:05.601 00:06:00.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 06:15:10.637 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60908 10 6452 1 2025-08-03 06:15:47.577 00:00:10.361 TCP 23.104.0.1:33998 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:16:10.850 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:56334 10 6452 1 2025-08-03 06:16:47.981 00:00:10.368 TCP 23.104.0.1:36282 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:17:11.092 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55746 10 6452 1 2025-08-03 06:17:33.683 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 06:17:33.598 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 06:17:48.388 00:00:10.365 TCP 23.104.0.1:34810 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:18:11.303 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:60946 10 6452 1 2025-08-03 06:18:48.802 00:00:10.367 TCP 23.104.0.1:59878 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:19:11.586 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36414 10 6452 1 2025-08-03 06:19:49.205 00:00:10.370 TCP 23.104.0.1:46852 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:20:11.759 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53322 10 6452 1 2025-08-03 06:20:49.608 00:00:10.368 TCP 23.104.0.1:51800 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:21:11.971 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:50848 10 6452 1 2025-08-03 06:21:50.016 00:00:10.361 TCP 23.104.0.1:45728 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:17:05.602 00:06:00.132 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 06:17:05.603 00:06:00.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 06:22:12.160 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38856 10 6452 1 2025-08-03 06:22:33.854 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 06:22:33.766 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 06:22:50.417 00:00:10.368 TCP 23.104.0.1:47680 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:23:12.379 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57726 10 6452 1 2025-08-03 06:23:50.818 00:00:10.365 TCP 23.104.0.1:46454 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:24:12.592 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40768 10 6452 1 2025-08-03 06:24:51.221 00:00:10.370 TCP 23.104.0.1:59812 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:25:12.805 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56104 10 6452 1 2025-08-03 06:25:51.632 00:00:10.369 TCP 23.104.0.1:38084 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:26:13.036 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48908 10 6452 1 2025-08-03 06:26:52.047 00:00:10.369 TCP 23.104.0.1:51570 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:27:13.251 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47162 10 6452 1 2025-08-03 06:27:33.832 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 06:27:33.882 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 06:27:52.455 00:00:10.360 TCP 23.104.0.1:60134 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:28:13.461 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46026 10 6452 1 2025-08-03 06:24:05.605 00:06:00.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 06:24:05.607 00:06:00.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 06:28:52.856 00:00:10.378 TCP 23.104.0.1:49758 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:29:13.630 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53388 10 6452 1 2025-08-03 06:29:53.274 00:00:10.322 TCP 23.104.0.1:44162 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:30:13.848 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38884 10 6452 1 2025-08-03 06:30:53.636 00:00:10.365 TCP 23.104.0.1:35724 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:31:14.087 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60738 10 6452 1 2025-08-03 06:31:54.049 00:00:10.365 TCP 23.104.0.1:40536 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:32:14.294 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50008 10 6452 1 2025-08-03 06:32:33.977 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 06:32:33.737 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 06:32:54.450 00:00:10.561 TCP 23.104.0.1:48246 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:33:14.518 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37792 10 6452 1 2025-08-03 06:33:55.061 00:00:10.445 TCP 23.104.0.1:39888 -> 1.101.0.1:3000 15 1926 1 2025-08-03 06:34:14.735 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 12 10365 1 2025-08-03 06:34:55.546 00:00:10.320 TCP 23.104.0.1:33670 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:35:14.936 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:34456 10 6452 1 2025-08-03 06:31:05.606 00:06:00.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 06:35:55.905 00:00:10.365 TCP 23.104.0.1:35084 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:31:05.608 00:06:00.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 06:36:15.172 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:43370 10 6452 1 2025-08-03 06:36:56.312 00:00:10.362 TCP 23.104.0.1:48996 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:37:15.357 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56346 10 6452 1 2025-08-03 06:37:33.984 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 06:37:33.935 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 06:37:56.718 00:00:10.374 TCP 23.104.0.1:43254 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:38:15.570 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:39626 10 6452 1 2025-08-03 06:38:57.130 00:00:10.359 TCP 23.104.0.1:34386 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:39:15.755 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49240 10 6452 1 2025-08-03 06:39:57.531 00:00:10.362 TCP 23.104.0.1:35354 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:40:15.967 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35708 10 6452 1 2025-08-03 06:40:57.935 00:00:10.353 TCP 23.104.0.1:40348 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:41:16.196 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46180 10 6452 1 2025-08-03 06:41:58.348 00:00:10.324 TCP 23.104.0.1:38452 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:42:16.368 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56580 10 6452 1 2025-08-03 06:42:34.199 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 06:42:34.257 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 06:38:05.607 00:06:00.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 06:38:05.609 00:06:00.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 06:42:58.718 00:00:10.338 TCP 23.104.0.1:44366 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:43:16.537 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57986 10 6452 1 2025-08-03 06:43:59.108 00:00:10.368 TCP 23.104.0.1:57092 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:44:16.748 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48676 10 6452 1 2025-08-03 06:44:59.517 00:00:10.367 TCP 23.104.0.1:44458 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:45:16.963 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48882 10 6452 1 2025-08-03 06:45:59.919 00:00:10.384 TCP 23.104.0.1:46616 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:46:17.179 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55714 10 6452 1 2025-08-03 06:47:00.343 00:00:10.367 TCP 23.104.0.1:49206 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:47:17.387 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54546 10 6452 1 2025-08-03 06:47:34.140 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 06:47:34.228 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 06:48:00.765 00:00:10.330 TCP 23.104.0.1:39920 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:48:17.606 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49768 10 6452 1 2025-08-03 06:49:01.145 00:00:10.365 TCP 23.104.0.1:44614 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:49:17.818 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41880 10 6452 1 2025-08-03 06:45:05.608 00:06:00.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 06:45:05.612 00:06:00.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 06:50:01.551 00:00:10.373 TCP 23.104.0.1:43900 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:50:18.039 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41852 10 6452 1 2025-08-03 06:51:01.961 00:00:10.367 TCP 23.104.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:51:18.250 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52848 10 6452 1 2025-08-03 06:52:02.374 00:00:10.329 TCP 23.104.0.1:36266 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:52:18.463 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35118 10 6452 1 2025-08-03 06:52:35.666 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 06:52:35.523 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 06:53:02.746 00:00:10.366 TCP 23.104.0.1:33576 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:53:18.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38208 10 6452 1 2025-08-03 06:54:03.152 00:00:10.362 TCP 23.104.0.1:54402 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:54:18.883 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46820 10 6452 1 2025-08-03 06:55:03.549 00:00:10.364 TCP 23.104.0.1:35718 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:55:19.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-08-03 06:56:03.954 00:00:10.365 TCP 23.104.0.1:34120 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:56:19.328 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39746 10 6452 1 2025-08-03 06:52:05.611 00:06:00.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 06:52:05.613 00:06:00.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 06:57:04.353 00:00:10.364 TCP 23.104.0.1:57270 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:57:19.536 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45668 10 6452 1 2025-08-03 06:57:34.279 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 06:57:34.628 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 06:58:04.752 00:00:10.333 TCP 23.104.0.1:36454 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:58:19.767 00:00:10.275 TCP 1.101.0.1:3000 -> 22.102.0.1:45604 10 6452 1 Summary: total flows: 161, total bytes: 502015, total packets: 1581, avg bps: 1072, avg pps: 0, avg bpp: 317 Time window: 2025-08-03 05:56:05 - 2025-08-03 06:58:30 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0008s User: 0.0024s Wall: 0.0018s flows/second: 90702.9 Runtime: 0.0018s