Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 23:58:56.292 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38154 10 6452 1 2025-08-24 23:59:30.790 00:00:10.347 TCP 23.104.0.1:53526 -> 1.101.0.1:3000 11 1507 1 2025-08-24 23:59:56.463 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53858 10 6452 1 2025-08-25 00:00:31.175 00:00:10.373 TCP 23.104.0.1:40658 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:00:56.674 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41846 10 6452 1 2025-08-25 00:01:31.584 00:00:10.370 TCP 23.104.0.1:45536 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:01:56.884 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53816 10 6452 1 2025-08-25 00:02:31.989 00:00:10.323 TCP 23.104.0.1:58908 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:03:01.533 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 00:03:01.470 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:02:57.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6452 1 2025-08-25 00:03:32.346 00:00:10.335 TCP 23.104.0.1:42440 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:03:57.322 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57060 10 6452 1 2025-08-24 23:59:17.163 00:06:00.089 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 00:04:32.715 00:00:10.387 TCP 23.104.0.1:46824 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:04:57.539 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48542 10 6452 1 2025-08-25 00:00:17.166 00:06:00.084 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 00:05:33.141 00:00:10.362 TCP 23.104.0.1:57828 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:05:57.711 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43812 10 6452 1 2025-08-25 00:06:33.536 00:00:10.364 TCP 23.104.0.1:51202 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:06:57.930 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:56534 10 6452 1 2025-08-25 00:07:33.932 00:00:10.389 TCP 23.104.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:08:01.563 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 00:08:01.725 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:07:58.122 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37752 10 6452 1 2025-08-25 00:08:34.367 00:00:10.366 TCP 23.104.0.1:33154 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:08:58.360 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41722 10 6452 1 2025-08-25 00:09:34.776 00:00:10.368 TCP 23.104.0.1:57552 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:09:58.586 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39914 10 6452 1 2025-08-25 00:10:35.184 00:00:10.367 TCP 23.104.0.1:47086 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:10:58.798 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46030 10 6452 1 2025-08-25 00:06:17.166 00:06:00.088 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 00:11:35.586 00:00:10.361 TCP 23.104.0.1:37022 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:11:59.012 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52088 10 6452 1 2025-08-25 00:07:17.168 00:06:00.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 00:12:35.983 00:00:10.361 TCP 23.104.0.1:34918 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:13:01.674 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:13:01.897 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 00:12:59.184 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57780 10 6452 1 2025-08-25 00:13:36.392 00:00:10.365 TCP 23.104.0.1:47294 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:13:59.394 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58682 10 6452 1 2025-08-25 00:14:36.795 00:00:10.366 TCP 23.104.0.1:56836 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:14:59.614 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37488 10 6452 1 2025-08-25 00:15:37.204 00:00:10.367 TCP 23.104.0.1:59140 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:15:59.837 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34118 10 6452 1 2025-08-25 00:16:37.609 00:00:10.362 TCP 23.104.0.1:50368 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:17:00.086 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51190 10 6452 1 2025-08-25 00:17:38.011 00:00:10.363 TCP 23.104.0.1:43730 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:18:01.730 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:18:01.812 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 00:18:00.260 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53958 10 6452 1 2025-08-25 00:13:17.168 00:06:00.088 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 00:18:38.412 00:00:10.362 TCP 23.104.0.1:49996 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:19:00.438 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58702 10 6452 1 2025-08-25 00:14:17.171 00:06:00.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 00:19:38.823 00:00:10.392 TCP 23.104.0.1:57536 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:20:00.611 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37018 10 6452 1 2025-08-25 00:20:39.253 00:00:10.367 TCP 23.104.0.1:46860 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:21:00.826 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40190 10 6452 1 2025-08-25 00:21:39.659 00:00:10.385 TCP 23.104.0.1:57846 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:22:01.071 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55422 10 6452 1 2025-08-25 00:22:40.097 00:00:10.325 TCP 23.104.0.1:33812 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:23:01.904 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:23:01.945 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 00:23:01.244 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58686 10 6452 1 2025-08-25 00:23:40.458 00:00:10.361 TCP 23.104.0.1:34186 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:24:01.415 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60842 10 6452 1 2025-08-25 00:24:40.856 00:00:10.343 TCP 23.104.0.1:44160 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:25:01.630 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44818 10 6452 1 2025-08-25 00:20:17.169 00:06:00.089 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 00:25:41.230 00:00:10.321 TCP 23.104.0.1:51120 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:26:01.845 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39652 10 6452 1 2025-08-25 00:21:17.171 00:06:00.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 00:26:41.587 00:00:10.368 TCP 23.104.0.1:49700 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:27:02.076 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:35334 10 6452 1 2025-08-25 00:27:42.005 00:00:10.366 TCP 23.104.0.1:54544 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:28:02.032 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 00:28:02.033 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:28:02.241 00:00:10.368 TCP 1.101.0.1:3000 -> 22.102.0.1:58444 10 6452 1 2025-08-25 00:28:42.407 00:00:10.362 TCP 23.104.0.1:43494 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:29:02.646 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49622 10 6452 1 2025-08-25 00:29:42.808 00:00:10.366 TCP 23.104.0.1:51010 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:30:02.854 00:00:10.534 TCP 1.101.0.1:3000 -> 22.102.0.1:56442 10 6452 1 2025-08-25 00:30:43.212 00:00:10.370 TCP 23.104.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:31:03.427 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53542 10 6452 1 2025-08-25 00:31:43.614 00:00:10.327 TCP 23.104.0.1:51228 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:32:03.646 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38146 10 6452 1 2025-08-25 00:27:17.172 00:06:00.088 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 00:32:43.980 00:00:10.333 TCP 23.104.0.1:49780 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:33:01.925 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:33:02.104 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 00:33:03.818 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33342 10 6452 1 2025-08-25 00:28:17.175 00:06:00.083 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 00:33:44.355 00:00:10.361 TCP 23.104.0.1:40488 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:34:04.038 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44444 10 6452 1 2025-08-25 00:34:44.761 00:00:10.377 TCP 23.104.0.1:52296 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:35:04.250 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42512 10 6452 1 2025-08-25 00:35:45.172 00:00:10.366 TCP 23.104.0.1:48638 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:36:04.463 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37970 10 6452 1 2025-08-25 00:36:45.574 00:00:10.371 TCP 23.104.0.1:52698 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:37:04.639 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:58278 10 6452 1 2025-08-25 00:37:45.979 00:00:10.373 TCP 23.104.0.1:47510 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:38:02.307 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 00:38:02.184 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:38:04.815 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59112 10 6452 1 2025-08-25 00:38:46.388 00:00:11.210 TCP 23.104.0.1:60224 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:39:05.043 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56116 10 6452 1 2025-08-25 00:34:17.172 00:06:00.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 00:39:47.638 00:00:10.370 TCP 23.104.0.1:34522 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:40:05.221 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:55484 10 6452 1 2025-08-25 00:35:17.175 00:06:00.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 00:40:48.054 00:00:10.468 TCP 23.104.0.1:60292 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:41:05.420 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43050 10 6452 1 2025-08-25 00:41:48.547 00:00:10.328 TCP 23.104.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:42:05.637 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37488 10 6452 1 2025-08-25 00:42:48.912 00:00:10.365 TCP 23.104.0.1:51146 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:43:02.225 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:43:02.244 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 00:43:05.851 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41316 10 6452 1 2025-08-25 00:43:49.315 00:00:10.362 TCP 23.104.0.1:55478 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:44:06.074 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51150 10 6452 1 2025-08-25 00:44:49.714 00:00:10.361 TCP 23.104.0.1:52100 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:45:06.287 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45964 10 6452 1 2025-08-25 00:45:50.116 00:00:10.366 TCP 23.104.0.1:52880 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:46:06.510 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47106 10 6452 1 2025-08-25 00:41:17.174 00:06:00.089 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 00:46:50.532 00:00:10.366 TCP 23.104.0.1:54038 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:47:06.683 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42432 10 6452 1 2025-08-25 00:42:17.177 00:06:00.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 00:48:02.493 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 00:47:50.936 00:00:10.609 TCP 23.104.0.1:56732 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:48:02.288 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:48:06.894 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57670 10 6452 1 2025-08-25 00:48:51.583 00:00:10.363 TCP 23.104.0.1:41710 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:49:07.106 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50670 10 6452 1 2025-08-25 00:49:51.990 00:00:10.364 TCP 23.104.0.1:55096 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:50:07.279 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60362 10 6452 1 2025-08-25 00:50:52.392 00:00:10.368 TCP 23.104.0.1:50218 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:51:07.494 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34680 10 6452 1 2025-08-25 00:51:52.805 00:00:10.336 TCP 23.104.0.1:47932 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:52:07.702 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50000 10 6452 1 2025-08-25 00:53:02.514 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 00:53:02.453 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:52:53.183 00:00:10.761 TCP 23.104.0.1:57916 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:53:07.881 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38732 10 6452 1 2025-08-25 00:48:17.177 00:06:00.088 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 00:53:53.991 00:00:10.365 TCP 23.104.0.1:39048 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:49:17.179 00:06:00.083 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 00:54:08.106 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44380 10 6452 1 2025-08-25 00:54:54.390 00:00:10.367 TCP 23.104.0.1:56830 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:55:08.318 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34132 10 6452 1 2025-08-25 00:55:54.795 00:00:10.372 TCP 23.104.0.1:53598 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:56:08.534 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37512 10 6452 1 2025-08-25 00:56:55.203 00:00:10.369 TCP 23.104.0.1:46124 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:57:08.749 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48924 10 6452 1 2025-08-25 00:57:55.613 00:00:10.369 TCP 23.104.0.1:55894 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:58:02.617 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 00:58:02.928 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 00:58:08.960 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38604 10 6452 1 Summary: total flows: 159, total bytes: 495857, total packets: 1545, avg bps: 1113, avg pps: 0, avg bpp: 320 Time window: 2025-08-24 23:58:56 - 2025-08-25 00:58:19 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0024s User: 0.0016s Wall: 0.0021s flows/second: 75534.5 Runtime: 0.0021s