Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 13:58:52.001 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41440 10 6452 1 2025-08-03 13:58:54.285 00:00:10.324 TCP 23.104.0.1:40110 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:59:52.210 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54442 10 6452 1 2025-08-03 13:59:54.648 00:00:10.370 TCP 23.104.0.1:57166 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:00:55.083 00:00:10.328 TCP 23.104.0.1:35870 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:00:52.435 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36510 10 6452 1 2025-08-03 14:01:52.642 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58584 10 6452 1 2025-08-03 14:01:55.452 00:00:10.362 TCP 23.104.0.1:58992 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:02:42.866 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 14:02:42.740 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 14:02:52.812 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57750 10 6452 1 2025-08-03 14:02:55.851 00:00:10.381 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:59:05.762 00:06:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 14:03:53.040 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44284 10 6452 1 2025-08-03 14:03:56.272 00:00:10.324 TCP 23.104.0.1:60706 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:59:05.765 00:06:00.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 14:04:53.251 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38470 10 6452 1 2025-08-03 14:04:56.631 00:00:10.367 TCP 23.104.0.1:37040 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:05:53.426 00:00:10.369 TCP 1.101.0.1:3000 -> 22.102.0.1:33794 10 6452 1 2025-08-03 14:05:57.036 00:00:10.368 TCP 23.104.0.1:47188 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:06:53.835 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51478 10 6452 1 2025-08-03 14:06:57.440 00:00:10.371 TCP 23.104.0.1:44368 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:07:43.147 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 14:07:42.772 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 14:07:54.074 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52476 10 6452 1 2025-08-03 14:07:57.847 00:00:10.374 TCP 23.104.0.1:60852 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:08:54.293 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33090 10 6452 1 2025-08-03 14:08:58.258 00:00:10.370 TCP 23.104.0.1:58650 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:09:54.516 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44146 10 6452 1 2025-08-03 14:09:58.675 00:00:10.373 TCP 23.104.0.1:57834 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:10:54.733 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46974 10 6452 1 2025-08-03 14:06:05.766 00:06:00.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 14:06:05.768 00:06:00.169 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 14:10:59.105 00:00:10.361 TCP 23.104.0.1:33456 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:11:54.958 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:41300 12 6556 1 2025-08-03 14:11:59.502 00:00:10.365 TCP 23.104.0.1:58544 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:12:43.127 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 14:12:43.164 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 14:12:55.195 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35470 10 6452 1 2025-08-03 14:12:59.906 00:00:10.326 TCP 23.104.0.1:41694 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:13:55.408 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51306 10 6452 1 2025-08-03 14:14:00.271 00:00:10.364 TCP 23.104.0.1:34218 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:14:55.588 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52034 10 6452 1 2025-08-03 14:15:00.671 00:00:10.365 TCP 23.104.0.1:49610 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:15:55.810 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53334 10 6452 1 2025-08-03 14:16:01.105 00:00:10.361 TCP 23.104.0.1:45602 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:16:56.038 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:50746 10 6452 1 2025-08-03 14:17:01.505 00:00:10.370 TCP 23.104.0.1:51426 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:17:43.364 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 14:17:43.373 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 14:17:56.245 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55790 10 6452 1 2025-08-03 14:13:05.769 00:06:00.173 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 14:13:05.771 00:06:00.169 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 14:18:01.911 00:00:10.367 TCP 23.104.0.1:49490 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:18:56.456 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45878 10 6452 1 2025-08-03 14:19:02.316 00:00:10.371 TCP 23.104.0.1:55790 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:19:56.671 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53956 10 6452 1 2025-08-03 14:20:02.727 00:00:10.375 TCP 23.104.0.1:34534 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:20:56.892 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36880 10 6452 1 2025-08-03 14:21:03.150 00:00:10.327 TCP 23.104.0.1:60340 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:21:57.108 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57456 10 6452 1 2025-08-03 14:22:03.516 00:00:10.326 TCP 23.104.0.1:55698 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:22:43.313 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 14:22:43.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 14:22:57.315 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40762 10 6452 1 2025-08-03 14:23:03.883 00:00:10.373 TCP 23.104.0.1:60046 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:23:57.528 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50516 10 6452 1 2025-08-03 14:24:04.297 00:00:10.368 TCP 23.104.0.1:41938 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:20:05.771 00:06:00.173 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 14:20:05.774 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 14:24:57.738 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57778 10 6452 1 2025-08-03 14:25:04.702 00:00:10.371 TCP 23.104.0.1:38096 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:25:57.951 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54326 12 6556 1 2025-08-03 14:26:05.110 00:00:10.326 TCP 23.104.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:26:58.182 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44230 10 6452 1 2025-08-03 14:27:05.476 00:00:10.362 TCP 23.104.0.1:38200 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:27:43.943 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 14:27:43.654 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 14:27:58.395 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55304 10 6452 1 2025-08-03 14:28:05.874 00:00:10.383 TCP 23.104.0.1:57314 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:28:58.610 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42378 10 6452 1 2025-08-03 14:29:06.293 00:00:10.367 TCP 23.104.0.1:45176 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:29:58.820 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38550 10 6452 1 2025-08-03 14:30:06.710 00:00:10.392 TCP 23.104.0.1:45222 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:30:59.039 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39586 10 6452 1 2025-08-03 14:31:07.140 00:00:10.366 TCP 23.104.0.1:43508 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:27:05.776 00:06:00.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 14:27:05.772 00:06:00.173 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 14:31:59.258 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56652 10 6452 1 2025-08-03 14:32:07.543 00:00:10.366 TCP 23.104.0.1:34114 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:32:43.612 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 14:32:43.610 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 14:32:59.444 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:33626 10 6452 1 2025-08-03 14:33:07.951 00:00:10.369 TCP 23.104.0.1:46066 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:33:59.610 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59354 10 6452 1 2025-08-03 14:34:08.356 00:00:10.362 TCP 23.104.0.1:36732 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:34:59.781 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54308 10 6452 1 2025-08-03 14:35:08.756 00:00:10.383 TCP 23.104.0.1:37386 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:35:59.988 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6452 1 2025-08-03 14:36:09.186 00:00:10.360 TCP 23.104.0.1:55244 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:37:00.214 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47326 10 6452 1 2025-08-03 14:37:09.585 00:00:10.364 TCP 23.104.0.1:57856 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:37:43.630 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 14:37:43.635 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 14:38:00.429 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51226 10 6452 1 2025-08-03 14:38:09.993 00:00:10.367 TCP 23.104.0.1:39430 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:34:05.773 00:06:00.173 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 14:34:05.776 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 14:39:00.642 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51548 10 6452 1 2025-08-03 14:39:10.397 00:00:10.370 TCP 23.104.0.1:47648 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:40:00.858 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57756 10 6452 1 2025-08-03 14:40:10.808 00:00:10.367 TCP 23.104.0.1:59434 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:41:01.087 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37238 10 6452 1 2025-08-03 14:41:11.211 00:00:10.363 TCP 23.104.0.1:60202 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:42:01.309 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33694 10 6452 1 2025-08-03 14:42:11.615 00:00:10.325 TCP 23.104.0.1:50200 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:42:43.737 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 14:42:43.810 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 14:43:01.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40368 10 6452 1 2025-08-03 14:43:11.982 00:00:10.368 TCP 23.104.0.1:52670 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:44:01.735 00:00:10.327 TCP 1.101.0.1:3000 -> 22.102.0.1:36464 10 6452 1 2025-08-03 14:44:12.385 00:00:10.363 TCP 23.104.0.1:42156 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:45:02.104 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35874 10 6452 1 2025-08-03 14:45:12.790 00:00:10.416 TCP 23.104.0.1:59082 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:41:05.778 00:06:00.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 14:41:05.775 00:06:00.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 14:46:02.325 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41162 10 6452 1 2025-08-03 14:46:13.245 00:00:10.365 TCP 23.104.0.1:40956 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:47:02.534 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38058 10 6452 1 2025-08-03 14:47:13.651 00:00:10.367 TCP 23.104.0.1:58846 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:47:43.736 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 14:47:44.010 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 14:48:02.707 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49956 10 6452 1 2025-08-03 14:48:14.057 00:00:10.365 TCP 23.104.0.1:41518 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:49:02.926 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:59326 10 6452 1 2025-08-03 14:49:14.459 00:00:10.368 TCP 23.104.0.1:51594 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:50:03.170 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34924 10 6452 1 2025-08-03 14:50:14.889 00:00:10.343 TCP 23.104.0.1:35328 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:51:03.385 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49212 10 6452 1 2025-08-03 14:51:15.273 00:00:10.365 TCP 23.104.0.1:43600 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:52:03.593 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45000 10 6452 1 2025-08-03 14:52:15.679 00:00:10.369 TCP 23.104.0.1:49546 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:52:43.982 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 14:52:43.855 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 14:48:05.777 00:06:00.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 14:48:05.779 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 14:53:03.811 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57280 10 6452 1 2025-08-03 14:53:16.127 00:00:10.365 TCP 23.104.0.1:38714 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:54:03.985 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:32894 10 6452 1 2025-08-03 14:54:16.540 00:00:10.365 TCP 23.104.0.1:44008 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:55:04.223 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39924 10 6452 1 2025-08-03 14:55:16.940 00:00:10.375 TCP 23.104.0.1:33298 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:56:04.441 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:44358 10 6452 1 2025-08-03 14:56:17.355 00:00:10.363 TCP 23.104.0.1:55072 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:57:04.647 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52770 10 6452 1 2025-08-03 14:57:17.758 00:00:10.368 TCP 23.104.0.1:53092 -> 1.101.0.1:3000 11 1507 1 2025-08-03 14:57:44.172 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 14:57:44.116 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 14:58:04.868 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42204 10 6452 1 2025-08-03 14:58:18.171 00:00:10.362 TCP 23.104.0.1:33742 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 497572, total packets: 1560, avg bps: 1112, avg pps: 0, avg bpp: 318 Time window: 2025-08-03 13:58:52 - 2025-08-03 14:58:28 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0033s User: 0.0008s Wall: 0.0022s flows/second: 72074.8 Runtime: 0.0022s