Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 01:59:20.180 00:00:10.368 TCP 23.104.0.1:40032 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:59:22.876 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55716 10 6452 1 2025-08-25 02:00:20.589 00:00:10.323 TCP 23.104.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:00:23.100 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32846 10 6452 1 2025-08-25 02:01:20.947 00:00:10.441 TCP 23.104.0.1:50540 -> 1.101.0.1:3000 15 1926 1 2025-08-25 02:01:23.319 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:40746 12 10367 1 2025-08-25 02:02:21.427 00:00:10.370 TCP 23.104.0.1:42902 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:02:23.562 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46354 10 6452 1 2025-08-25 02:03:04.010 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 02:03:03.971 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:58:17.246 00:06:00.050 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 02:03:21.833 00:00:10.438 TCP 23.104.0.1:34862 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:03:23.786 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40746 10 6452 1 2025-08-25 01:59:17.249 00:06:00.045 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 02:04:24.001 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44974 10 6452 1 2025-08-25 02:04:22.315 00:00:10.797 TCP 23.104.0.1:47380 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:05:23.149 00:00:10.363 TCP 23.104.0.1:37630 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:05:24.223 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42084 10 6452 1 2025-08-25 02:06:23.555 00:00:10.364 TCP 23.104.0.1:48436 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:06:24.397 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54514 10 6452 1 2025-08-25 02:07:23.958 00:00:10.321 TCP 23.104.0.1:56036 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:07:24.573 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55848 10 6452 1 2025-08-25 02:08:04.090 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 02:08:03.978 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 02:08:24.786 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59932 10 6452 1 2025-08-25 02:08:24.319 00:00:10.327 TCP 23.104.0.1:45036 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:09:24.683 00:00:10.366 TCP 23.104.0.1:53118 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:09:25.013 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46906 10 6452 1 2025-08-25 02:05:17.247 00:06:00.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 02:10:25.227 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:42850 10 6452 1 2025-08-25 02:10:25.104 00:00:10.366 TCP 23.104.0.1:57652 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:06:17.249 00:06:00.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 02:11:25.404 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41590 10 6452 1 2025-08-25 02:11:25.510 00:00:10.370 TCP 23.104.0.1:34504 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:12:25.917 00:00:10.358 TCP 23.104.0.1:58422 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:12:25.579 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56250 10 6452 1 2025-08-25 02:13:04.157 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 02:13:04.291 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 02:13:25.790 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33298 10 6452 1 2025-08-25 02:13:26.309 00:00:10.364 TCP 23.104.0.1:50982 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:14:26.007 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49336 10 6452 1 2025-08-25 02:14:26.709 00:00:10.367 TCP 23.104.0.1:58826 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:15:26.222 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46486 10 6452 1 2025-08-25 02:15:27.114 00:00:10.371 TCP 23.104.0.1:41126 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:16:26.436 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:44124 12 10367 1 2025-08-25 02:16:27.520 00:00:10.436 TCP 23.104.0.1:32772 -> 1.101.0.1:3000 15 1926 1 2025-08-25 02:12:17.251 00:06:00.055 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 02:17:26.700 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46968 10 6452 1 2025-08-25 02:17:27.992 00:00:10.375 TCP 23.104.0.1:60480 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:18:04.029 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 02:18:04.291 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 02:13:17.254 00:06:00.052 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 02:18:28.422 00:00:10.365 TCP 23.104.0.1:37582 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:18:26.922 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42398 10 6452 1 2025-08-25 02:19:28.831 00:00:10.343 TCP 23.104.0.1:57556 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:19:27.164 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48270 10 6452 1 2025-08-25 02:20:29.211 00:00:10.367 TCP 23.104.0.1:50456 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:20:27.373 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46616 10 6452 1 2025-08-25 02:21:27.586 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45180 10 6452 1 2025-08-25 02:21:29.615 00:00:10.365 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:22:30.018 00:00:10.362 TCP 23.104.0.1:60602 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:22:27.761 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36924 10 6452 1 2025-08-25 02:23:04.725 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 02:23:04.746 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 02:23:27.969 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:39876 10 6452 1 2025-08-25 02:23:30.415 00:00:10.364 TCP 23.104.0.1:59350 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:19:17.252 00:06:00.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 02:24:28.153 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47792 10 6452 1 2025-08-25 02:24:30.817 00:00:10.364 TCP 23.104.0.1:57978 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:20:17.257 00:06:00.052 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 02:25:31.220 00:00:10.324 TCP 23.104.0.1:54044 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:25:28.364 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33144 10 6452 1 2025-08-25 02:26:31.582 00:00:10.367 TCP 23.104.0.1:52302 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:26:28.570 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33290 10 6452 1 2025-08-25 02:27:28.781 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44644 10 6452 1 2025-08-25 02:27:31.986 00:00:10.365 TCP 23.104.0.1:33706 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:28:04.354 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 02:28:04.461 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 02:28:28.998 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58548 10 6452 1 2025-08-25 02:28:32.390 00:00:10.372 TCP 23.104.0.1:53272 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:29:29.216 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51178 10 6452 1 2025-08-25 02:29:32.798 00:00:10.342 TCP 23.104.0.1:39424 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:30:29.431 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49170 10 6452 1 2025-08-25 02:30:33.172 00:00:10.367 TCP 23.104.0.1:39216 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:26:17.255 00:06:00.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 02:31:29.601 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36618 12 10574 1 2025-08-25 02:31:33.577 00:00:10.440 TCP 23.104.0.1:48204 -> 1.101.0.1:3000 15 1926 1 2025-08-25 02:27:17.256 00:06:00.055 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 02:32:29.841 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57248 10 6661 1 2025-08-25 02:32:34.064 00:00:10.326 TCP 23.104.0.1:53318 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:33:04.600 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 02:33:04.255 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 02:33:30.084 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50406 10 6661 1 2025-08-25 02:33:34.420 00:00:10.366 TCP 23.104.0.1:36636 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:34:30.301 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35692 10 6661 1 2025-08-25 02:34:34.826 00:00:10.362 TCP 23.104.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:35:30.516 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:39994 10 6661 1 2025-08-25 02:35:35.228 00:00:10.363 TCP 23.104.0.1:59156 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:36:30.796 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46910 10 6661 1 2025-08-25 02:36:35.629 00:00:10.367 TCP 23.104.0.1:51804 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:37:31.025 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56180 10 6661 1 2025-08-25 02:37:36.035 00:00:10.371 TCP 23.104.0.1:46670 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:38:04.902 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 02:38:04.851 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 02:33:17.255 00:06:00.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 02:38:31.240 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36378 10 6661 1 2025-08-25 02:38:36.458 00:00:10.442 TCP 23.104.0.1:34684 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:34:17.258 00:06:00.055 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 02:39:31.462 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52738 10 6661 1 2025-08-25 02:39:36.962 00:00:10.366 TCP 23.104.0.1:35210 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:40:31.678 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35014 10 6661 1 2025-08-25 02:40:37.368 00:00:10.368 TCP 23.104.0.1:51272 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:41:31.888 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43742 10 6661 1 2025-08-25 02:41:37.773 00:00:10.370 TCP 23.104.0.1:49970 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:42:32.111 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44574 10 6661 1 2025-08-25 02:42:38.178 00:00:10.365 TCP 23.104.0.1:33958 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:43:04.686 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 02:43:04.674 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 02:43:32.324 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44086 10 6661 1 2025-08-25 02:43:38.589 00:00:10.332 TCP 23.104.0.1:38380 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:44:32.567 00:00:10.778 TCP 1.101.0.1:3000 -> 22.102.0.1:39952 10 6661 1 2025-08-25 02:44:38.957 00:00:10.366 TCP 23.104.0.1:52302 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:40:17.257 00:06:00.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 02:45:33.388 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36826 10 6661 1 2025-08-25 02:45:39.365 00:00:10.366 TCP 23.104.0.1:38476 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:41:17.259 00:06:00.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 02:46:33.603 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55814 10 6661 1 2025-08-25 02:46:39.770 00:00:10.386 TCP 23.104.0.1:55646 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:47:33.823 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53466 10 6661 1 2025-08-25 02:47:40.199 00:00:10.367 TCP 23.104.0.1:55158 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:48:04.710 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 02:48:04.871 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 02:48:34.071 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42214 10 6661 1 2025-08-25 02:48:40.602 00:00:10.323 TCP 23.104.0.1:54372 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:49:34.240 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47518 10 6661 1 2025-08-25 02:49:40.968 00:00:10.370 TCP 23.104.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:50:34.452 00:00:10.429 TCP 1.101.0.1:3000 -> 22.102.0.1:42710 10 6661 1 2025-08-25 02:50:41.375 00:00:10.371 TCP 23.104.0.1:48358 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:51:34.925 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36468 12 10785 1 2025-08-25 02:51:41.784 00:00:10.718 TCP 23.104.0.1:58178 -> 1.101.0.1:3000 15 1926 1 2025-08-25 02:47:17.256 00:06:00.064 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 02:52:35.150 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38870 10 6870 1 2025-08-25 02:52:42.544 00:00:10.366 TCP 23.104.0.1:51838 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:53:04.647 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 02:53:04.900 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 02:48:17.260 00:06:00.058 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 02:53:35.370 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53160 10 6870 1 2025-08-25 02:53:42.946 00:00:10.375 TCP 23.104.0.1:60128 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:54:35.584 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37826 10 6870 1 2025-08-25 02:54:43.356 00:00:10.372 TCP 23.104.0.1:32836 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:55:35.796 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42680 10 6870 1 2025-08-25 02:55:43.765 00:00:10.370 TCP 23.104.0.1:36176 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:56:36.057 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60702 10 6870 1 2025-08-25 02:56:44.178 00:00:10.366 TCP 23.104.0.1:39622 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:57:36.275 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:46774 11 6922 1 2025-08-25 02:57:44.582 00:00:10.367 TCP 23.104.0.1:57326 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:58:05.066 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 02:58:04.834 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 02:58:36.542 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56672 10 6870 1 Summary: total flows: 159, total bytes: 520767, total packets: 1570, avg bps: 1147, avg pps: 0, avg bpp: 331 Time window: 2025-08-25 01:58:17 - 2025-08-25 02:58:46 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0018s User: 0.0027s Wall: 0.0018s flows/second: 87992.4 Runtime: 0.0018s