Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 03:58:53.714 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36054 10 6452 1 2025-08-04 03:59:40.311 00:00:10.363 TCP 23.104.0.1:37568 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:59:53.924 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41322 10 6452 1 2025-08-04 04:00:40.717 00:00:10.335 TCP 23.104.0.1:47036 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:00:54.160 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38886 10 6452 1 2025-08-04 04:01:41.114 00:00:10.366 TCP 23.104.0.1:40644 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:01:54.391 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40978 10 6452 1 2025-08-04 04:02:41.517 00:00:10.373 TCP 23.104.0.1:47570 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:02:59.842 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 04:02:59.864 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 04:02:54.596 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35276 10 6452 1 2025-08-04 03:58:06.058 00:06:00.256 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 03:58:06.060 00:06:00.251 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 04:03:41.929 00:00:10.379 TCP 23.104.0.1:51174 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:03:54.811 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36046 10 6452 1 2025-08-04 04:04:42.351 00:00:10.360 TCP 23.104.0.1:47298 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:04:55.039 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37904 10 6452 1 2025-08-04 04:05:42.751 00:00:10.388 TCP 23.104.0.1:39672 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:05:55.254 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42474 10 6452 1 2025-08-04 04:06:43.176 00:00:10.363 TCP 23.104.0.1:46978 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:06:55.462 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49866 10 6452 1 2025-08-04 04:07:59.806 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 04:07:43.582 00:00:16.520 TCP 23.104.0.1:36820 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:07:59.872 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 04:07:55.677 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58210 10 6452 1 2025-08-04 04:08:50.151 00:00:10.371 TCP 23.104.0.1:33866 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:08:55.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48496 10 6452 1 2025-08-04 04:09:50.558 00:00:10.370 TCP 23.104.0.1:60730 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:05:06.070 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-04 04:09:56.118 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49262 10 6452 1 2025-08-04 04:05:06.072 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-04 04:10:50.967 00:00:10.380 TCP 23.104.0.1:42316 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:10:56.330 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35810 10 6452 1 2025-08-04 04:11:51.387 00:00:10.360 TCP 23.104.0.1:52230 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:11:06.313 00:01:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 3 194 1 2025-08-04 04:11:06.316 00:01:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 3 175 1 2025-08-04 04:11:56.505 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40886 10 6452 1 2025-08-04 04:13:00.395 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 04:13:00.389 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 04:12:51.791 00:00:10.378 TCP 23.104.0.1:41060 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:12:56.722 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43330 10 6452 1 2025-08-04 04:13:52.212 00:00:10.369 TCP 23.104.0.1:56510 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:13:56.949 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:39510 10 6452 1 2025-08-04 04:14:52.625 00:00:10.359 TCP 23.104.0.1:42634 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:14:57.183 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40162 10 6452 1 2025-08-04 04:15:53.025 00:00:10.364 TCP 23.104.0.1:53884 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:15:57.396 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59248 10 6452 1 2025-08-04 04:13:06.076 00:04:00.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 04:16:53.423 00:00:10.374 TCP 23.104.0.1:44034 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:13:06.073 00:04:00.243 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 04:16:57.605 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55682 10 6452 1 2025-08-04 04:18:00.269 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 04:18:00.108 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 04:17:53.833 00:00:10.386 TCP 23.104.0.1:47292 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:17:57.811 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43682 10 6452 1 2025-08-04 04:18:54.256 00:00:10.412 TCP 23.104.0.1:33190 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:18:57.981 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60718 10 6452 1 2025-08-04 04:19:54.707 00:00:10.378 TCP 23.104.0.1:58418 -> 1.101.0.1:3000 12 1559 1 2025-08-04 04:19:58.214 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-08-04 04:20:55.110 00:00:10.372 TCP 23.104.0.1:52218 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:20:58.424 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58282 10 6452 1 2025-08-04 04:18:06.074 00:04:00.243 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 04:21:55.517 00:00:10.368 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:18:06.076 00:04:00.238 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 04:21:58.633 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46526 10 6452 1 2025-08-04 04:23:00.267 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 04:23:00.434 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 04:22:55.923 00:00:10.352 TCP 23.104.0.1:49528 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:22:58.862 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52008 10 6452 1 2025-08-04 04:23:56.312 00:00:10.329 TCP 23.104.0.1:33482 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:23:59.036 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56986 10 6452 1 2025-08-04 04:24:59.256 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43380 10 6452 1 2025-08-04 04:24:56.693 00:00:10.365 TCP 23.104.0.1:39702 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:25:57.108 00:00:10.370 TCP 23.104.0.1:52950 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:25:59.437 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33246 10 6452 1 2025-08-04 04:26:57.514 00:00:10.361 TCP 23.104.0.1:37160 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:26:59.650 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47564 10 6452 1 2025-08-04 04:28:00.204 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 04:23:06.079 00:06:00.245 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 04:28:00.370 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 04:23:06.081 00:06:00.240 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 04:27:57.917 00:00:10.381 TCP 23.104.0.1:59408 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:27:59.864 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59740 10 6452 1 2025-08-04 04:28:58.337 00:00:10.326 TCP 23.104.0.1:47040 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:29:00.088 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42714 10 6452 1 2025-08-04 04:30:00.299 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49774 10 6452 1 2025-08-04 04:29:58.700 00:00:10.333 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:30:59.093 00:00:10.358 TCP 23.104.0.1:59178 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:31:00.514 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60330 10 6452 1 2025-08-04 04:31:59.492 00:00:10.377 TCP 23.104.0.1:60190 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:32:00.727 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55754 10 6452 1 2025-08-04 04:33:00.398 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 04:33:00.519 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 04:32:59.913 00:00:10.326 TCP 23.104.0.1:32780 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:33:00.951 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:55332 12 6556 1 2025-08-04 04:34:01.195 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53748 10 6452 1 2025-08-04 04:34:00.276 00:00:10.365 TCP 23.104.0.1:44398 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:30:06.079 00:06:00.246 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 04:30:06.081 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 04:35:01.379 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34136 10 6452 1 2025-08-04 04:35:00.683 00:00:10.331 TCP 23.104.0.1:39934 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:36:01.063 00:00:10.369 TCP 23.104.0.1:42998 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:36:01.600 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34482 10 6452 1 2025-08-04 04:37:01.812 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32892 10 6452 1 2025-08-04 04:37:01.479 00:00:10.363 TCP 23.104.0.1:41676 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:38:00.665 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 04:38:00.718 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 04:38:01.882 00:00:10.349 TCP 23.104.0.1:45614 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:38:02.035 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48088 10 6452 1 2025-08-04 04:39:02.273 00:00:10.359 TCP 23.104.0.1:57776 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:39:02.247 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:37502 10 6452 1 2025-08-04 04:40:02.691 00:00:10.363 TCP 23.104.0.1:50678 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:40:02.495 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35050 10 6452 1 2025-08-04 04:41:02.714 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:54288 10 6452 1 2025-08-04 04:41:03.104 00:00:10.365 TCP 23.104.0.1:48908 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:37:06.080 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-04 04:37:06.082 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-04 04:42:02.907 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:33508 10 6452 1 2025-08-04 04:42:03.506 00:00:10.362 TCP 23.104.0.1:49044 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:43:00.553 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 04:43:00.482 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 04:43:03.904 00:00:10.329 TCP 23.104.0.1:60848 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:43:03.097 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47836 10 6452 1 2025-08-04 04:43:06.326 00:01:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 3 194 1 2025-08-04 04:43:06.328 00:01:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 3 175 1 2025-08-04 04:44:03.271 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48800 10 6452 1 2025-08-04 04:44:04.275 00:00:10.325 TCP 23.104.0.1:41532 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:45:04.640 00:00:10.326 TCP 23.104.0.1:47524 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:45:03.489 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57986 10 6452 1 2025-08-04 04:46:03.657 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36878 10 6452 1 2025-08-04 04:46:05.016 00:00:10.363 TCP 23.104.0.1:45810 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:47:05.419 00:00:10.366 TCP 23.104.0.1:48978 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:47:03.828 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44976 10 6452 1 2025-08-04 04:48:00.799 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 04:48:00.804 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 04:48:04.001 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39948 10 6452 1 2025-08-04 04:48:05.820 00:00:10.362 TCP 23.104.0.1:51540 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:45:06.084 00:04:00.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 04:45:06.083 00:04:00.247 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 04:49:04.227 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57348 10 6452 1 2025-08-04 04:49:06.225 00:00:10.360 TCP 23.104.0.1:54722 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:50:06.624 00:00:10.364 TCP 23.104.0.1:37252 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:50:04.441 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48690 10 6452 1 2025-08-04 04:51:04.653 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33622 10 6452 1 2025-08-04 04:51:07.030 00:00:10.368 TCP 23.104.0.1:59626 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:52:04.869 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42608 10 6452 1 2025-08-04 04:52:07.434 00:00:10.367 TCP 23.104.0.1:38822 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:53:00.838 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 04:53:00.746 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 04:53:05.091 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42384 10 6452 1 2025-08-04 04:53:07.839 00:00:10.393 TCP 23.104.0.1:35856 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:50:06.084 00:04:00.247 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 04:50:06.086 00:04:00.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 04:54:05.264 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41218 10 6452 1 2025-08-04 04:54:08.269 00:00:10.375 TCP 23.104.0.1:36684 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:55:05.483 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41436 10 6452 1 2025-08-04 04:55:08.680 00:00:10.363 TCP 23.104.0.1:60458 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:56:05.697 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57386 10 6452 1 2025-08-04 04:56:09.092 00:00:10.362 TCP 23.104.0.1:40810 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:57:05.916 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:43146 10 6452 1 2025-08-04 04:57:09.488 00:00:10.371 TCP 23.104.0.1:39076 -> 1.101.0.1:3000 11 1507 1 2025-08-04 04:58:01.128 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 04:58:01.051 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 04:58:06.097 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46768 10 6452 1 2025-08-04 04:58:09.894 00:00:10.366 TCP 23.104.0.1:36622 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 165, total bytes: 496259, total packets: 1552, avg bps: 1098, avg pps: 0, avg bpp: 319 Time window: 2025-08-04 03:58:06 - 2025-08-04 04:58:20 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0022s User: 0.0022s Wall: 0.0019s flows/second: 87436.5 Runtime: 0.0019s