Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 03:58:59.434 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39930 10 6452 1 2025-08-14 03:58:56.541 00:00:10.700 TCP 23.104.0.1:44758 -> 1.101.0.1:3000 11 1507 1 2025-08-14 03:59:57.323 00:00:10.365 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-08-14 03:59:59.665 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:51054 10 6452 1 2025-08-14 04:00:57.733 00:00:10.371 TCP 23.104.0.1:36086 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:00:59.954 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6452 1 2025-08-14 04:02:00.184 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51446 10 6452 1 2025-08-14 04:01:58.142 00:00:10.371 TCP 23.104.0.1:50272 -> 1.101.0.1:3000 11 1507 1 2025-08-14 03:57:11.797 00:05:59.251 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 04:02:48.535 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 04:02:48.625 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 04:02:58.546 00:00:10.367 TCP 23.104.0.1:34672 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:03:00.394 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45112 10 6452 1 2025-08-14 03:59:11.045 00:04:00.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 04:03:58.954 00:00:10.369 TCP 23.104.0.1:49528 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:03:11.797 00:01:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 3 194 1 2025-08-14 04:04:00.608 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41924 10 6452 1 2025-08-14 04:04:59.358 00:00:10.363 TCP 23.104.0.1:45812 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:05:00.831 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59484 10 6452 1 2025-08-14 04:05:59.755 00:00:10.342 TCP 23.104.0.1:56786 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:06:01.070 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60688 10 6452 1 2025-08-14 04:07:00.133 00:00:10.366 TCP 23.104.0.1:55418 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:07:01.248 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41946 10 6452 1 2025-08-14 04:07:48.857 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 04:07:49.172 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 04:08:01.469 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54264 10 6452 1 2025-08-14 04:08:00.541 00:00:10.367 TCP 23.104.0.1:56548 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:09:00.945 00:00:10.375 TCP 23.104.0.1:43778 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:05:11.047 00:04:00.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 04:09:01.644 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60722 10 6452 1 2025-08-14 04:04:11.047 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-14 04:10:01.355 00:00:10.374 TCP 23.104.0.1:45064 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:10:01.853 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51828 10 6452 1 2025-08-14 04:11:01.756 00:00:10.388 TCP 23.104.0.1:37984 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:11:02.088 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47842 10 6452 1 2025-08-14 04:12:02.182 00:00:10.364 TCP 23.104.0.1:60518 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:12:02.315 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59462 10 6452 1 2025-08-14 04:12:48.861 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 04:12:48.805 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 04:13:02.580 00:00:10.363 TCP 23.104.0.1:47424 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:13:02.538 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41556 10 6452 1 2025-08-14 04:10:11.050 00:04:00.750 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 04:14:02.982 00:00:10.475 TCP 23.104.0.1:60744 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:14:02.753 00:00:10.668 TCP 1.101.0.1:3000 -> 22.102.0.1:42300 10 6452 1 2025-08-14 04:10:11.801 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-08-14 04:15:03.442 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40534 10 6452 1 2025-08-14 04:15:03.495 00:00:10.365 TCP 23.104.0.1:52610 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:16:03.900 00:00:10.324 TCP 23.104.0.1:33214 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:16:03.657 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60304 10 6452 1 2025-08-14 04:17:03.867 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35206 10 6452 1 2025-08-14 04:17:04.265 00:00:10.326 TCP 23.104.0.1:38514 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:17:48.807 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 04:17:48.980 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 04:18:04.077 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50808 10 6452 1 2025-08-14 04:18:04.631 00:00:10.366 TCP 23.104.0.1:44866 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:19:04.300 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:34346 10 6452 1 2025-08-14 04:19:05.043 00:00:10.380 TCP 23.104.0.1:50672 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:15:11.052 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-14 04:20:04.503 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33476 10 6452 1 2025-08-14 04:20:05.469 00:00:10.382 TCP 23.104.0.1:54528 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:21:04.723 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57044 10 6452 1 2025-08-14 04:21:05.894 00:00:10.370 TCP 23.104.0.1:42172 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:17:11.049 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-14 04:22:06.310 00:00:10.368 TCP 23.104.0.1:54308 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:22:04.929 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41660 10 6452 1 2025-08-14 04:22:48.892 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 04:22:48.687 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 04:23:05.168 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59412 10 6452 1 2025-08-14 04:23:06.719 00:00:10.325 TCP 23.104.0.1:60658 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:24:05.382 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56990 10 6452 1 2025-08-14 04:24:07.111 00:00:10.365 TCP 23.104.0.1:52108 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:25:05.597 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40060 10 6452 1 2025-08-14 04:25:07.514 00:00:10.368 TCP 23.104.0.1:60712 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:21:11.802 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-14 04:26:05.772 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47916 10 6452 1 2025-08-14 04:26:07.915 00:00:10.377 TCP 23.104.0.1:42948 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:27:05.984 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:60502 10 6452 1 2025-08-14 04:27:08.341 00:00:10.370 TCP 23.104.0.1:44884 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:27:48.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 04:27:49.054 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 04:23:11.806 00:05:59.247 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 04:28:06.175 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34892 10 6452 1 2025-08-14 04:28:08.753 00:00:10.392 TCP 23.104.0.1:47342 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:29:06.389 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35950 10 6452 1 2025-08-14 04:29:09.183 00:00:10.331 TCP 23.104.0.1:33668 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:30:06.598 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39226 10 6452 1 2025-08-14 04:30:09.549 00:00:10.326 TCP 23.104.0.1:58702 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:31:06.819 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36576 10 6452 1 2025-08-14 04:31:09.916 00:00:10.365 TCP 23.104.0.1:52504 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:32:10.319 00:00:10.322 TCP 23.104.0.1:42410 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:32:07.065 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44836 10 6452 1 2025-08-14 04:32:49.214 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 04:32:48.758 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 04:28:11.055 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-14 04:33:10.689 00:00:10.327 TCP 23.104.0.1:37096 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:33:07.279 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55020 10 6452 1 2025-08-14 04:29:11.806 00:05:59.248 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 04:34:07.497 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49854 10 6452 1 2025-08-14 04:34:11.061 00:00:10.364 TCP 23.104.0.1:34060 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:35:11.807 00:00:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 1 52 1 2025-08-14 04:35:11.467 00:00:10.372 TCP 23.104.0.1:38250 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:35:07.715 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36634 10 6452 1 2025-08-14 04:34:11.804 00:02:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 5 317 1 2025-08-14 04:36:07.889 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49792 10 6452 1 2025-08-14 04:36:11.875 00:00:10.366 TCP 23.104.0.1:37464 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:37:08.118 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33064 10 6452 1 2025-08-14 04:37:12.281 00:00:10.363 TCP 23.104.0.1:58230 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:37:49.226 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 04:37:49.271 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 04:38:08.331 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47096 10 6452 1 2025-08-14 04:38:12.682 00:00:10.322 TCP 23.104.0.1:59128 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:39:08.536 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36450 10 6452 1 2025-08-14 04:39:13.059 00:00:10.368 TCP 23.104.0.1:33660 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:36:11.053 00:04:00.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 04:40:08.751 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36410 10 6452 1 2025-08-14 04:40:13.460 00:00:10.366 TCP 23.104.0.1:49246 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:41:08.965 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:58080 10 6452 1 2025-08-14 04:41:13.864 00:00:10.378 TCP 23.104.0.1:40966 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:37:11.056 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-14 04:42:09.163 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36404 10 6452 1 2025-08-14 04:42:14.280 00:00:10.327 TCP 23.104.0.1:34962 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:42:49.183 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 04:42:49.324 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 04:43:09.332 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48322 10 6452 1 2025-08-14 04:43:14.651 00:00:10.369 TCP 23.104.0.1:33156 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:44:09.546 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:32986 10 6452 1 2025-08-14 04:44:15.061 00:00:10.368 TCP 23.104.0.1:54694 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:45:09.773 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48088 10 6452 1 2025-08-14 04:45:15.470 00:00:10.366 TCP 23.104.0.1:35904 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:41:11.054 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-14 04:46:10.008 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44562 10 6452 1 2025-08-14 04:46:15.876 00:00:10.357 TCP 23.104.0.1:33524 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:47:10.183 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36900 10 6452 1 2025-08-14 04:47:16.287 00:00:10.366 TCP 23.104.0.1:47158 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:47:49.915 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 04:47:49.802 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 04:43:11.810 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-14 04:48:10.402 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37278 10 6452 1 2025-08-14 04:48:16.691 00:00:10.380 TCP 23.104.0.1:58936 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:49:10.618 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51312 10 6452 1 2025-08-14 04:49:17.118 00:00:10.369 TCP 23.104.0.1:43482 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:50:10.833 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34058 10 6452 1 2025-08-14 04:50:17.524 00:00:10.373 TCP 23.104.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:51:11.082 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:40488 11 6504 1 2025-08-14 04:51:17.930 00:00:10.388 TCP 23.104.0.1:55234 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:47:11.814 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-08-14 04:52:11.369 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57506 10 6452 1 2025-08-14 04:52:18.357 00:00:10.367 TCP 23.104.0.1:38522 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:52:49.763 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 04:52:49.509 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 04:53:11.591 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38328 10 6452 1 2025-08-14 04:53:18.760 00:00:10.332 TCP 23.104.0.1:53820 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:54:11.810 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41508 10 6452 1 2025-08-14 04:54:19.135 00:00:10.322 TCP 23.104.0.1:33396 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:50:11.060 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-14 04:55:12.056 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48966 10 6452 1 2025-08-14 04:55:19.496 00:00:10.324 TCP 23.104.0.1:52522 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:56:12.264 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40132 10 6452 1 2025-08-14 04:56:19.856 00:00:10.370 TCP 23.104.0.1:49100 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:57:12.492 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39560 10 6452 1 2025-08-14 04:57:20.264 00:00:10.368 TCP 23.104.0.1:32896 -> 1.101.0.1:3000 11 1507 1 2025-08-14 04:57:49.661 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 04:57:49.409 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 04:56:11.814 00:02:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 5 317 1 2025-08-14 04:58:12.707 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60244 10 6452 1 2025-08-14 04:58:20.673 00:00:10.434 TCP 23.104.0.1:33698 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 166, total bytes: 497979, total packets: 1566, avg bps: 1082, avg pps: 0, avg bpp: 317 Time window: 2025-08-14 03:57:11 - 2025-08-14 04:58:31 Total flows processed: 166, passed: 166, Blocks skipped: 0, Bytes read: 17328 Sys: 0.0034s User: 0.0011s Wall: 0.0021s flows/second: 78672.8 Runtime: 0.0021s