Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 03:58:49.721 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38968 10 6452 1 2025-08-25 03:59:13.462 00:00:10.365 TCP 23.104.0.1:34960 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:59:49.936 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:46308 10 6452 1 2025-08-25 04:00:13.862 00:00:10.367 TCP 23.104.0.1:51274 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:00:50.121 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53996 10 6452 1 2025-08-25 04:01:14.267 00:00:10.366 TCP 23.104.0.1:36960 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:01:50.294 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47692 10 6452 1 2025-08-25 03:57:17.279 00:06:00.071 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 04:02:14.669 00:00:10.366 TCP 23.104.0.1:42188 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:02:50.466 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53640 10 6452 1 2025-08-25 04:03:06.658 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 04:03:06.328 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:58:17.282 00:06:00.066 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 04:03:15.096 00:00:10.324 TCP 23.104.0.1:56360 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:03:50.682 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36140 10 6452 1 2025-08-25 04:04:15.461 00:00:10.361 TCP 23.104.0.1:50274 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:04:50.898 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36848 10 6452 1 2025-08-25 04:05:15.860 00:00:10.369 TCP 23.104.0.1:37288 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:05:51.119 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58442 10 6452 1 2025-08-25 04:06:16.278 00:00:10.319 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:06:51.326 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54480 10 6452 1 2025-08-25 04:07:16.636 00:00:10.326 TCP 23.104.0.1:32990 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:07:51.540 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54538 10 6452 1 2025-08-25 04:08:06.275 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 04:08:06.393 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 04:08:17.002 00:00:10.319 TCP 23.104.0.1:60468 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:08:51.752 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60774 10 6452 1 2025-08-25 04:04:17.279 00:06:00.072 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 04:09:17.359 00:00:10.368 TCP 23.104.0.1:54842 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:09:51.963 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40628 10 6452 1 2025-08-25 04:05:17.283 00:06:00.067 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 04:10:17.769 00:00:10.371 TCP 23.104.0.1:44796 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:10:52.190 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39516 10 6452 1 2025-08-25 04:11:18.172 00:00:10.327 TCP 23.104.0.1:43646 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:11:52.407 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45116 10 6452 1 2025-08-25 04:12:18.533 00:00:10.374 TCP 23.104.0.1:52162 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:12:52.620 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59654 10 6452 1 2025-08-25 04:13:06.612 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 04:13:06.482 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 04:13:18.957 00:00:10.359 TCP 23.104.0.1:39734 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:13:52.830 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40320 10 6452 1 2025-08-25 04:14:19.357 00:00:10.366 TCP 23.104.0.1:36034 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:14:53.068 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37914 10 6452 1 2025-08-25 04:15:19.761 00:00:10.384 TCP 23.104.0.1:37434 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:15:53.287 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56534 10 6452 1 2025-08-25 04:11:17.283 00:06:00.071 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 04:16:20.181 00:00:10.324 TCP 23.104.0.1:59558 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:16:53.513 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40724 10 6452 1 2025-08-25 04:12:17.286 00:06:00.066 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 04:17:20.542 00:00:10.366 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:17:53.686 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34684 10 6452 1 2025-08-25 04:18:06.475 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 04:18:06.616 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 04:18:20.944 00:00:10.373 TCP 23.104.0.1:58214 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:18:53.902 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46668 10 6452 1 2025-08-25 04:19:21.356 00:00:10.366 TCP 23.104.0.1:38564 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:19:54.117 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51316 10 6452 1 2025-08-25 04:20:21.763 00:00:10.374 TCP 23.104.0.1:45170 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:20:54.306 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43668 10 6452 1 2025-08-25 04:21:22.173 00:00:10.375 TCP 23.104.0.1:40004 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:21:54.516 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49272 10 6452 1 2025-08-25 04:22:22.582 00:00:10.330 TCP 23.104.0.1:43952 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:23:06.709 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 04:22:54.693 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50522 10 6452 1 2025-08-25 04:23:06.425 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 04:18:17.284 00:06:00.070 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 04:23:22.949 00:00:10.366 TCP 23.104.0.1:56474 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:23:54.902 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57544 10 6452 1 2025-08-25 04:19:17.285 00:06:00.067 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 04:24:23.353 00:00:10.360 TCP 23.104.0.1:46190 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:24:55.119 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56922 10 6452 1 2025-08-25 04:25:23.751 00:00:10.320 TCP 23.104.0.1:37656 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:25:55.330 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35044 10 6452 1 2025-08-25 04:26:24.107 00:00:10.365 TCP 23.104.0.1:34034 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:26:55.545 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47618 10 6452 1 2025-08-25 04:27:24.514 00:00:10.373 TCP 23.104.0.1:37234 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:28:06.962 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 04:27:55.761 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:33230 10 6452 1 2025-08-25 04:28:06.983 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 04:28:24.929 00:00:10.393 TCP 23.104.0.1:50866 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:28:55.937 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:51614 10 6452 1 2025-08-25 04:29:25.360 00:00:10.319 TCP 23.104.0.1:40284 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:29:56.181 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43064 10 6452 1 2025-08-25 04:25:17.284 00:06:00.071 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 04:30:25.714 00:00:10.326 TCP 23.104.0.1:44852 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:30:56.355 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57540 10 6452 1 2025-08-25 04:26:17.288 00:06:00.066 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 04:31:26.101 00:00:10.329 TCP 23.104.0.1:45860 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:31:56.568 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54156 10 6452 1 2025-08-25 04:32:26.468 00:00:10.367 TCP 23.104.0.1:60436 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:33:06.753 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 04:32:56.740 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55158 10 6452 1 2025-08-25 04:33:07.061 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 04:33:26.875 00:00:10.327 TCP 23.104.0.1:54954 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:33:56.916 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55796 10 6452 1 2025-08-25 04:34:27.236 00:00:10.367 TCP 23.104.0.1:36138 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:34:57.129 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60030 10 6452 1 2025-08-25 04:35:27.641 00:00:10.329 TCP 23.104.0.1:53982 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:35:57.338 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51044 10 6452 1 2025-08-25 04:36:28.004 00:00:10.372 TCP 23.104.0.1:38246 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:36:57.564 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53206 10 6452 1 2025-08-25 04:32:17.301 00:06:00.057 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 04:37:28.413 00:00:10.368 TCP 23.104.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:38:07.033 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 04:37:57.779 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42312 10 6452 1 2025-08-25 04:38:07.047 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 04:33:17.296 00:06:00.060 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 04:38:28.818 00:00:10.359 TCP 23.104.0.1:55064 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:38:58.008 00:00:10.254 TCP 1.101.0.1:3000 -> 22.102.0.1:56802 10 6452 1 2025-08-25 04:39:29.217 00:00:15.812 TCP 23.104.0.1:50970 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:39:58.301 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35956 10 6452 1 2025-08-25 04:40:35.097 00:00:10.362 TCP 23.104.0.1:36170 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:40:58.471 00:00:10.949 TCP 1.101.0.1:3000 -> 22.102.0.1:47164 10 6452 1 2025-08-25 04:41:35.500 00:00:10.360 TCP 23.104.0.1:35118 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:41:59.457 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33556 10 6452 1 2025-08-25 04:42:35.900 00:00:10.364 TCP 23.104.0.1:49298 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:43:07.106 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 04:42:59.665 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54066 10 6452 1 2025-08-25 04:43:07.163 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 04:43:36.304 00:00:10.326 TCP 23.104.0.1:37950 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:43:59.877 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59160 10 6452 1 2025-08-25 04:39:17.295 00:06:00.065 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 04:44:36.669 00:00:10.597 TCP 23.104.0.1:39410 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:45:00.098 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51102 10 6452 1 2025-08-25 04:40:17.296 00:06:00.061 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 04:45:37.303 00:00:10.318 TCP 23.104.0.1:42170 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:46:00.306 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36598 10 6452 1 2025-08-25 04:46:37.662 00:00:10.364 TCP 23.104.0.1:57562 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:47:00.480 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40278 10 6452 1 2025-08-25 04:47:38.092 00:00:10.370 TCP 23.104.0.1:37470 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:48:00.688 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38350 10 6452 1 2025-08-25 04:48:07.221 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 04:48:07.168 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 04:48:38.502 00:00:10.362 TCP 23.104.0.1:51754 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:49:00.858 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56170 10 6452 1 2025-08-25 04:49:38.903 00:00:10.325 TCP 23.104.0.1:57290 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:50:01.080 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59632 10 6452 1 2025-08-25 04:50:39.266 00:00:10.364 TCP 23.104.0.1:44192 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:51:01.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50076 10 6452 1 2025-08-25 04:46:17.301 00:06:00.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 04:51:39.668 00:00:10.366 TCP 23.104.0.1:56878 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:52:01.510 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59274 10 6452 1 2025-08-25 04:47:17.305 00:06:00.054 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 04:52:40.096 00:00:10.322 TCP 23.104.0.1:40412 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:53:01.692 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44228 10 6452 1 2025-08-25 04:53:07.175 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 04:53:07.400 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 04:53:40.454 00:00:10.372 TCP 23.104.0.1:44268 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:54:01.907 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42650 10 6452 1 2025-08-25 04:54:40.868 00:00:10.370 TCP 23.104.0.1:33802 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:55:02.116 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33958 10 6452 1 2025-08-25 04:55:41.274 00:00:10.365 TCP 23.104.0.1:60834 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:56:02.292 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:32888 10 6452 1 2025-08-25 04:56:41.678 00:00:10.362 TCP 23.104.0.1:35610 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:57:02.466 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53462 10 6452 1 2025-08-25 04:57:42.101 00:00:10.361 TCP 23.104.0.1:48528 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:58:07.455 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 04:58:07.450 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 04:58:02.682 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44836 10 6452 1 2025-08-25 04:53:17.302 00:06:00.071 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 Summary: total flows: 160, total bytes: 496718, total packets: 1559, avg bps: 1068, avg pps: 0, avg bpp: 318 Time window: 2025-08-25 03:57:17 - 2025-08-25 04:59:17 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0022s User: 0.0022s Wall: 0.0025s flows/second: 65040.6 Runtime: 0.0025s