Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 05:59:19.232 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57632 10 6452 1 2025-08-04 05:59:34.630 00:00:10.363 TCP 23.104.0.1:41152 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:00:19.445 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39082 10 6452 1 2025-08-04 06:00:35.031 00:00:10.372 TCP 23.104.0.1:47026 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:01:19.621 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44222 10 6452 1 2025-08-04 06:01:35.443 00:00:10.362 TCP 23.104.0.1:60000 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:02:19.836 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40476 10 6452 1 2025-08-04 06:02:35.840 00:00:10.389 TCP 23.104.0.1:46960 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:03:02.224 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 05:59:06.105 00:04:00.259 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 06:03:02.243 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 05:59:06.102 00:04:00.264 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 06:03:20.072 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43602 10 6452 1 2025-08-04 06:03:36.284 00:00:10.387 TCP 23.104.0.1:46596 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:04:20.287 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-08-04 06:04:36.715 00:00:10.373 TCP 23.104.0.1:39560 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:05:20.460 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53302 10 6452 1 2025-08-04 06:05:37.125 00:00:10.367 TCP 23.104.0.1:52306 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:06:20.680 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60396 10 6452 1 2025-08-04 06:06:37.529 00:00:10.365 TCP 23.104.0.1:37746 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:07:20.850 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42524 10 6452 1 2025-08-04 06:07:37.932 00:00:10.386 TCP 23.104.0.1:44744 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:08:02.143 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 06:08:02.524 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 06:08:21.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41648 10 6452 1 2025-08-04 06:08:38.354 00:00:10.364 TCP 23.104.0.1:60784 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:04:06.106 00:06:00.263 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 06:04:06.103 00:06:00.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 06:09:21.292 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47898 10 6452 1 2025-08-04 06:09:38.752 00:00:10.609 TCP 23.104.0.1:48214 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:10:21.508 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40458 10 6452 1 2025-08-04 06:10:39.397 00:00:10.363 TCP 23.104.0.1:47014 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:11:21.720 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44658 10 6452 1 2025-08-04 06:11:39.799 00:00:10.366 TCP 23.104.0.1:48948 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:12:21.934 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:56232 10 6452 1 2025-08-04 06:12:40.206 00:00:10.364 TCP 23.104.0.1:44370 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:13:03.067 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 06:13:02.942 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 06:13:22.166 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41142 10 6452 1 2025-08-04 06:13:40.611 00:00:10.363 TCP 23.104.0.1:54312 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:14:22.383 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55746 10 6452 1 2025-08-04 06:14:41.013 00:00:10.367 TCP 23.104.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:15:22.559 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55972 10 6452 1 2025-08-04 06:15:41.418 00:00:10.323 TCP 23.104.0.1:48484 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:11:06.104 00:06:00.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 06:11:06.107 00:06:00.263 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 06:16:22.783 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59422 10 6452 1 2025-08-04 06:16:41.780 00:00:10.353 TCP 23.104.0.1:50840 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:17:23.006 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47034 10 6452 1 2025-08-04 06:17:42.169 00:00:10.367 TCP 23.104.0.1:59370 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:18:02.589 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 06:18:02.609 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 06:18:23.256 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47794 10 6452 1 2025-08-04 06:18:42.577 00:00:10.362 TCP 23.104.0.1:38204 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:19:23.465 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40230 10 6452 1 2025-08-04 06:19:42.973 00:00:10.377 TCP 23.104.0.1:54988 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:18:06.109 00:02:00.262 TCP 179.1.22.22:39396 -> 179.1.22.1:179 6 369 1 2025-08-04 06:18:06.106 00:02:00.267 TCP 179.1.22.1:179 -> 179.1.22.22:39396 6 369 1 2025-08-04 06:20:23.640 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37306 10 6452 1 2025-08-04 06:20:43.385 00:00:10.363 TCP 23.104.0.1:46670 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:21:23.850 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50214 10 6452 1 2025-08-04 06:21:43.787 00:00:10.363 TCP 23.104.0.1:49572 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:22:24.074 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58362 10 6452 1 2025-08-04 06:22:44.189 00:00:10.372 TCP 23.104.0.1:51496 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:23:03.394 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 06:23:03.544 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 06:23:24.286 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52108 10 6452 1 2025-08-04 06:23:44.600 00:00:10.370 TCP 23.104.0.1:52972 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:24:24.504 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45134 10 6452 1 2025-08-04 06:24:45.013 00:00:10.369 TCP 23.104.0.1:53472 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:21:06.106 00:04:00.267 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 06:21:06.109 00:04:00.262 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 06:25:24.719 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38034 10 6452 1 2025-08-04 06:25:45.421 00:00:10.372 TCP 23.104.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:26:24.926 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:53644 10 6452 1 2025-08-04 06:26:45.830 00:00:10.340 TCP 23.104.0.1:52046 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:27:25.113 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41586 10 6452 1 2025-08-04 06:27:46.211 00:00:10.360 TCP 23.104.0.1:52616 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:28:02.635 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 06:28:02.637 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 06:28:25.328 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60758 10 6452 1 2025-08-04 06:28:46.611 00:00:10.365 TCP 23.104.0.1:37868 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:29:25.519 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41260 10 6452 1 2025-08-04 06:29:47.015 00:00:10.364 TCP 23.104.0.1:47788 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:26:06.110 00:04:00.263 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 06:26:06.108 00:04:00.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 06:30:25.731 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 10 6452 1 2025-08-04 06:30:47.417 00:00:10.364 TCP 23.104.0.1:59276 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:31:25.906 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46448 10 6452 1 2025-08-04 06:31:47.821 00:00:10.367 TCP 23.104.0.1:59554 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:32:26.119 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40148 10 6452 1 2025-08-04 06:32:48.230 00:00:10.369 TCP 23.104.0.1:45554 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:33:02.865 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 06:33:02.763 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 06:33:26.333 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38746 10 6452 1 2025-08-04 06:33:48.635 00:00:10.367 TCP 23.104.0.1:53592 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:34:26.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52790 10 6452 1 2025-08-04 06:34:49.061 00:00:10.368 TCP 23.104.0.1:59526 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:31:06.110 00:04:00.265 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 06:31:06.108 00:04:00.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 06:35:26.749 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56124 10 6452 1 2025-08-04 06:35:49.486 00:00:10.380 TCP 23.104.0.1:55072 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:36:26.919 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49966 10 6452 1 2025-08-04 06:36:49.928 00:00:10.396 TCP 23.104.0.1:51082 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:37:27.130 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59786 10 6452 1 2025-08-04 06:37:50.360 00:00:10.325 TCP 23.104.0.1:51824 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:38:03.053 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 06:38:02.982 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 06:38:27.337 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49326 10 6452 1 2025-08-04 06:38:50.721 00:00:10.384 TCP 23.104.0.1:48544 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:39:27.507 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50832 10 6452 1 2025-08-04 06:39:51.129 00:00:10.363 TCP 23.104.0.1:56020 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:40:27.729 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53274 10 6452 1 2025-08-04 06:40:51.535 00:00:10.364 TCP 23.104.0.1:57548 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:36:06.108 00:06:00.271 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 06:36:06.111 00:06:00.266 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 06:41:27.942 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60270 10 6452 1 2025-08-04 06:41:51.941 00:00:10.369 TCP 23.104.0.1:36662 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:42:28.186 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57288 10 6452 1 2025-08-04 06:43:02.962 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 06:43:02.935 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 06:42:52.349 00:00:10.370 TCP 23.104.0.1:36756 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:43:28.426 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49106 10 6452 1 2025-08-04 06:43:52.755 00:00:10.391 TCP 23.104.0.1:39310 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:44:28.641 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47162 10 6452 1 2025-08-04 06:44:53.181 00:00:10.361 TCP 23.104.0.1:39550 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:45:28.854 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44184 10 6452 1 2025-08-04 06:45:53.580 00:00:10.361 TCP 23.104.0.1:37828 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:46:29.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45520 10 6452 1 2025-08-04 06:46:53.980 00:00:10.371 TCP 23.104.0.1:58658 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:47:29.293 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32856 10 6452 1 2025-08-04 06:47:54.392 00:00:10.371 TCP 23.104.0.1:47164 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:43:06.115 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-04 06:48:03.154 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 06:48:03.256 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 06:43:06.113 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-04 06:48:29.507 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57846 10 6452 1 2025-08-04 06:48:54.793 00:00:10.345 TCP 23.104.0.1:47090 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:49:29.731 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38150 10 6452 1 2025-08-04 06:49:55.177 00:00:10.365 TCP 23.104.0.1:36054 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:50:29.949 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50720 12 6556 1 2025-08-04 06:50:55.578 00:00:10.365 TCP 23.104.0.1:47928 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:51:30.186 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51538 10 6452 1 2025-08-04 06:49:06.381 00:03:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 421 1 2025-08-04 06:51:55.982 00:00:10.371 TCP 23.104.0.1:55266 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:49:06.377 00:03:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 440 1 2025-08-04 06:52:30.404 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58216 10 6452 1 2025-08-04 06:53:02.971 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 06:52:56.389 00:00:10.366 TCP 23.104.0.1:46466 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:53:03.100 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 06:53:30.578 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41568 10 6452 1 2025-08-04 06:53:56.818 00:00:10.367 TCP 23.104.0.1:36642 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:54:30.795 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40798 10 6452 1 2025-08-04 06:54:57.224 00:00:10.366 TCP 23.104.0.1:47974 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:55:30.964 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40504 10 6452 1 2025-08-04 06:55:57.630 00:00:10.314 TCP 23.104.0.1:50570 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:56:31.183 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40864 10 6452 1 2025-08-04 06:53:06.117 00:04:00.263 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 06:53:06.115 00:04:00.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 06:56:57.985 00:00:10.363 TCP 23.104.0.1:60058 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:57:31.406 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46042 10 6452 1 2025-08-04 06:58:03.186 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 06:58:03.372 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 06:57:58.395 00:00:10.374 TCP 23.104.0.1:33070 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:58:31.635 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48376 10 6452 1 Summary: total flows: 165, total bytes: 496699, total packets: 1559, avg bps: 1111, avg pps: 0, avg bpp: 318 Time window: 2025-08-04 05:59:06 - 2025-08-04 06:58:41 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0016s User: 0.0024s Wall: 0.0022s flows/second: 74327.2 Runtime: 0.0022s