Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 10:59:12.614 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:50644 12 10367 1 2025-08-03 10:59:42.014 00:00:10.359 TCP 23.104.0.1:48710 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:00:12.826 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47494 10 6452 1 2025-08-03 11:00:42.414 00:00:10.362 TCP 23.104.0.1:36844 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:01:13.066 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40962 10 6452 1 2025-08-03 11:01:42.814 00:00:10.367 TCP 23.104.0.1:48582 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:57:05.692 00:06:00.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 10:57:05.695 00:06:00.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 11:02:13.296 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59190 10 6452 1 2025-08-03 11:02:39.167 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 11:02:39.444 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 11:02:43.238 00:00:10.355 TCP 23.104.0.1:42026 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:03:13.471 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44810 10 6452 1 2025-08-03 11:03:43.635 00:00:10.371 TCP 23.104.0.1:36498 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:04:13.682 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41418 10 6452 1 2025-08-03 11:04:44.036 00:00:10.416 TCP 23.104.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:05:13.851 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42286 10 6452 1 2025-08-03 11:05:44.492 00:00:10.372 TCP 23.104.0.1:56676 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:06:14.048 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43276 10 6452 1 2025-08-03 11:06:44.899 00:00:10.367 TCP 23.104.0.1:59980 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:07:14.222 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49528 10 6452 1 2025-08-03 11:07:39.746 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 11:07:39.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 11:07:45.300 00:00:10.363 TCP 23.104.0.1:57296 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:08:14.435 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:39352 10 6452 1 2025-08-03 11:08:45.703 00:00:10.367 TCP 23.104.0.1:59458 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:04:05.694 00:06:00.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 11:04:05.696 00:06:00.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 11:09:14.641 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54934 10 6452 1 2025-08-03 11:09:46.113 00:00:10.367 TCP 23.104.0.1:41330 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:10:14.853 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59706 10 6452 1 2025-08-03 11:10:46.521 00:00:10.370 TCP 23.104.0.1:55636 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:11:15.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53578 10 6452 1 2025-08-03 11:11:46.933 00:00:10.339 TCP 23.104.0.1:34536 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:12:15.293 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34524 10 6452 1 2025-08-03 11:12:39.506 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 11:12:39.265 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 11:12:47.307 00:00:10.364 TCP 23.104.0.1:60936 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:13:15.508 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45022 10 6452 1 2025-08-03 11:13:47.712 00:00:10.328 TCP 23.104.0.1:60540 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:14:15.680 00:00:10.663 TCP 1.101.0.1:3000 -> 22.102.0.1:57236 10 6452 1 2025-08-03 11:14:48.101 00:00:10.368 TCP 23.104.0.1:54926 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:15:16.382 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46020 10 6452 1 2025-08-03 11:15:48.506 00:00:10.364 TCP 23.104.0.1:51918 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:11:05.699 00:06:00.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 11:11:05.696 00:06:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 11:16:16.557 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60432 10 6452 1 2025-08-03 11:16:48.907 00:00:10.376 TCP 23.104.0.1:53060 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:17:16.774 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35432 10 6452 1 2025-08-03 11:17:39.614 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 11:17:39.745 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 11:17:49.317 00:00:10.365 TCP 23.104.0.1:43560 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:18:16.993 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40004 10 6452 1 2025-08-03 11:18:49.715 00:00:10.377 TCP 23.104.0.1:55724 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:19:17.215 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60856 10 6452 1 2025-08-03 11:19:50.131 00:00:10.368 TCP 23.104.0.1:34160 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:20:17.438 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41922 10 6452 1 2025-08-03 11:20:50.537 00:00:10.368 TCP 23.104.0.1:36608 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:21:17.616 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:49630 10 6452 1 2025-08-03 11:21:50.944 00:00:10.369 TCP 23.104.0.1:49902 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:22:17.810 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45024 10 6452 1 2025-08-03 11:22:39.853 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 11:22:39.642 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 11:22:51.351 00:00:10.361 TCP 23.104.0.1:54666 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:18:05.699 00:06:00.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 11:18:05.697 00:06:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 11:23:18.033 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47588 10 6452 1 2025-08-03 11:23:51.752 00:00:10.383 TCP 23.104.0.1:52554 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:24:18.243 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:51472 10 6452 1 2025-08-03 11:24:52.175 00:00:10.374 TCP 23.104.0.1:54154 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:25:18.416 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50292 10 6452 1 2025-08-03 11:25:52.590 00:00:10.366 TCP 23.104.0.1:38198 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:26:18.585 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49536 10 6452 1 2025-08-03 11:26:52.992 00:00:10.323 TCP 23.104.0.1:49126 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:27:18.802 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49830 10 6452 1 2025-08-03 11:27:39.611 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 11:27:39.611 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 11:27:53.355 00:00:10.367 TCP 23.104.0.1:50736 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:28:19.031 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43936 10 6452 1 2025-08-03 11:28:53.759 00:00:10.377 TCP 23.104.0.1:35768 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:29:19.245 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42098 10 6452 1 2025-08-03 11:25:05.700 00:06:00.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 11:25:05.703 00:06:00.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 11:29:54.176 00:00:10.322 TCP 23.104.0.1:37776 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:30:19.459 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35518 10 6452 1 2025-08-03 11:30:54.538 00:00:10.363 TCP 23.104.0.1:49462 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:31:19.679 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36676 10 6452 1 2025-08-03 11:31:54.941 00:00:10.367 TCP 23.104.0.1:40530 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:32:19.891 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49496 10 6452 1 2025-08-03 11:32:39.701 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 11:32:39.790 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 11:32:55.348 00:00:10.364 TCP 23.104.0.1:33760 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:33:20.103 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39664 10 6452 1 2025-08-03 11:33:55.748 00:00:10.379 TCP 23.104.0.1:47040 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:34:20.313 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34568 10 6452 1 2025-08-03 11:34:56.169 00:00:10.367 TCP 23.104.0.1:50942 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:35:20.526 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40906 12 6556 1 2025-08-03 11:35:56.572 00:00:10.361 TCP 23.104.0.1:58418 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:36:20.743 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57302 10 6452 1 2025-08-03 11:32:05.704 00:06:00.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 11:32:05.701 00:06:00.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 11:36:56.970 00:00:10.381 TCP 23.104.0.1:60056 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:37:20.960 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35426 10 6452 1 2025-08-03 11:37:40.306 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 11:37:40.238 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 11:37:57.383 00:00:10.366 TCP 23.104.0.1:41670 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:38:21.188 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38522 10 6452 1 2025-08-03 11:38:57.790 00:00:10.364 TCP 23.104.0.1:50594 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:39:21.361 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35356 10 6452 1 2025-08-03 11:39:58.191 00:00:10.363 TCP 23.104.0.1:39612 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:40:21.538 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59192 10 6452 1 2025-08-03 11:40:58.593 00:00:10.365 TCP 23.104.0.1:44124 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:41:21.710 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38736 10 6452 1 2025-08-03 11:41:58.997 00:00:10.364 TCP 23.104.0.1:38646 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:42:21.923 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56846 10 6452 1 2025-08-03 11:42:40.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 11:42:40.226 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 11:42:59.402 00:00:10.358 TCP 23.104.0.1:35432 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:43:22.144 00:00:10.269 TCP 1.101.0.1:3000 -> 22.102.0.1:55098 10 6452 1 2025-08-03 11:39:05.702 00:06:00.177 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 11:39:05.704 00:06:00.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 11:43:59.803 00:00:10.357 TCP 23.104.0.1:36714 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:44:22.455 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42528 10 6452 1 2025-08-03 11:45:00.199 00:00:10.320 TCP 23.104.0.1:36698 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:45:22.698 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58182 10 6452 1 2025-08-03 11:46:00.556 00:00:10.367 TCP 23.104.0.1:46992 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:46:22.907 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36198 10 6452 1 2025-08-03 11:47:00.958 00:00:10.366 TCP 23.104.0.1:46986 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:47:23.114 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57784 10 6452 1 2025-08-03 11:47:40.162 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 11:47:40.193 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 11:48:01.362 00:00:10.364 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:48:23.337 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46510 10 6452 1 2025-08-03 11:49:01.764 00:00:10.385 TCP 23.104.0.1:50500 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:49:23.507 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47132 10 6452 1 2025-08-03 11:50:02.184 00:00:10.326 TCP 23.104.0.1:56160 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:50:23.717 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38090 10 6452 1 2025-08-03 11:46:05.704 00:06:00.178 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 11:46:05.707 00:06:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 11:51:02.550 00:00:10.366 TCP 23.104.0.1:48374 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:51:23.930 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:35266 10 6452 1 2025-08-03 11:52:02.960 00:00:10.382 TCP 23.104.0.1:44166 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:52:24.129 00:00:10.941 TCP 1.101.0.1:3000 -> 22.102.0.1:59894 10 6452 1 2025-08-03 11:52:40.375 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 11:52:40.459 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 11:53:03.379 00:00:10.325 TCP 23.104.0.1:47544 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:53:25.110 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57094 10 6452 1 2025-08-03 11:54:03.749 00:00:10.391 TCP 23.104.0.1:39008 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:54:25.335 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42252 10 6452 1 2025-08-03 11:55:04.180 00:00:10.364 TCP 23.104.0.1:60646 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:55:25.546 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43512 10 6452 1 2025-08-03 11:56:04.579 00:00:10.360 TCP 23.104.0.1:37646 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:56:25.760 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52124 10 6452 1 2025-08-03 11:57:04.976 00:00:10.366 TCP 23.104.0.1:57796 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:57:25.971 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39416 10 6452 1 2025-08-03 11:57:40.409 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 11:57:40.644 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 11:53:05.709 00:06:00.172 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 11:53:05.708 00:06:00.177 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 11:58:05.383 00:00:10.330 TCP 23.104.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:58:26.208 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45782 10 6452 1 Summary: total flows: 161, total bytes: 501598, total packets: 1577, avg bps: 1078, avg pps: 0, avg bpp: 318 Time window: 2025-08-03 10:57:05 - 2025-08-03 11:59:05 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0036s User: 0.0012s Wall: 0.0022s flows/second: 74427.7 Runtime: 0.0022s