Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 08:58:55.172 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37504 10 6452 1 2025-08-25 08:59:24.241 00:00:10.362 TCP 23.104.0.1:60006 -> 1.101.0.1:3000 11 1507 1 2025-08-25 08:59:55.386 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58580 10 6452 1 2025-08-25 09:00:24.638 00:00:10.369 TCP 23.104.0.1:42746 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:00:55.597 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39858 10 6452 1 2025-08-25 09:01:25.054 00:00:10.332 TCP 23.104.0.1:56296 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:01:55.819 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58246 10 6452 1 2025-08-25 09:02:25.425 00:00:10.321 TCP 23.104.0.1:47338 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:02:56.066 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59482 10 6452 1 2025-08-25 09:03:12.384 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 09:03:12.400 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 08:58:17.418 00:06:00.034 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 09:03:25.796 00:00:10.367 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:03:56.237 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48880 10 6452 1 2025-08-25 08:59:17.450 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-25 09:04:26.199 00:00:10.369 TCP 23.104.0.1:57030 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:04:56.415 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45392 10 6452 1 2025-08-25 09:05:26.603 00:00:10.720 TCP 23.104.0.1:51294 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:05:56.636 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45898 10 6452 1 2025-08-25 09:06:27.376 00:00:10.323 TCP 23.104.0.1:46684 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:06:56.856 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59852 10 6452 1 2025-08-25 09:07:27.739 00:00:10.365 TCP 23.104.0.1:49446 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:07:57.091 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48920 10 6452 1 2025-08-25 09:08:12.406 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 09:08:12.286 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 09:08:28.144 00:00:10.374 TCP 23.104.0.1:53450 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:08:57.309 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42090 10 6452 1 2025-08-25 09:09:28.560 00:00:10.370 TCP 23.104.0.1:38062 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:09:57.523 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49404 10 6452 1 2025-08-25 09:05:17.427 00:06:00.026 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 09:10:28.986 00:00:10.339 TCP 23.104.0.1:43018 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:10:57.740 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60058 10 6452 1 2025-08-25 09:06:17.451 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-25 09:11:29.365 00:00:10.374 TCP 23.104.0.1:55840 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:11:57.946 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38776 10 6452 1 2025-08-25 09:12:29.773 00:00:10.371 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:12:58.173 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52622 10 6452 1 2025-08-25 09:13:12.822 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 09:13:12.749 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 09:13:30.180 00:00:10.370 TCP 23.104.0.1:53602 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:13:58.389 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56380 10 6452 1 2025-08-25 09:14:30.591 00:00:10.363 TCP 23.104.0.1:60516 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:14:58.564 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48754 10 6452 1 2025-08-25 09:15:31.005 00:00:10.363 TCP 23.104.0.1:46502 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:15:58.775 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42884 10 6452 1 2025-08-25 09:16:31.401 00:00:10.365 TCP 23.104.0.1:35834 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:16:58.989 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35474 10 6452 1 2025-08-25 09:12:17.429 00:06:00.027 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 09:17:31.806 00:00:10.365 TCP 23.104.0.1:48920 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:17:59.210 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6452 1 2025-08-25 09:18:12.881 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 09:18:12.821 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 09:13:17.452 00:06:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-25 09:18:32.208 00:00:10.364 TCP 23.104.0.1:47736 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:18:59.422 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54096 10 6452 1 2025-08-25 09:19:32.609 00:00:10.364 TCP 23.104.0.1:54886 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:19:59.638 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54040 10 6452 1 2025-08-25 09:20:33.012 00:00:10.363 TCP 23.104.0.1:47826 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:20:59.857 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44546 10 6452 1 2025-08-25 09:21:33.417 00:00:10.368 TCP 23.104.0.1:51700 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:22:00.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37982 10 6452 1 2025-08-25 09:22:33.819 00:00:10.370 TCP 23.104.0.1:51364 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:23:00.297 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46044 10 6452 1 2025-08-25 09:23:12.573 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 09:23:12.624 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 09:23:34.222 00:00:10.364 TCP 23.104.0.1:34970 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:24:00.504 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-08-25 09:19:17.432 00:06:00.026 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 09:24:34.623 00:00:10.380 TCP 23.104.0.1:42946 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:25:00.717 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43862 10 6452 1 2025-08-25 09:20:17.453 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-25 09:25:35.054 00:00:10.366 TCP 23.104.0.1:35352 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:26:00.929 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:59572 10 6452 1 2025-08-25 09:26:35.460 00:00:10.361 TCP 23.104.0.1:55110 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:27:01.163 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:52984 10 6452 1 2025-08-25 09:27:35.858 00:00:10.377 TCP 23.104.0.1:42956 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:28:01.356 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37392 10 6452 1 2025-08-25 09:28:12.562 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 09:28:12.905 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 09:28:36.275 00:00:10.322 TCP 23.104.0.1:36148 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:29:01.575 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36482 10 6452 1 2025-08-25 09:29:36.639 00:00:10.365 TCP 23.104.0.1:48500 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:30:01.784 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57412 10 6452 1 2025-08-25 09:30:37.045 00:00:10.366 TCP 23.104.0.1:38636 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:31:01.995 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47160 10 6452 1 2025-08-25 09:26:17.435 00:06:00.025 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 09:31:37.451 00:00:10.374 TCP 23.104.0.1:33078 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:32:02.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39792 10 6452 1 2025-08-25 09:27:17.454 00:06:00.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-25 09:32:37.870 00:00:10.356 TCP 23.104.0.1:56048 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:33:12.962 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 09:33:02.423 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50650 10 6452 1 2025-08-25 09:33:12.963 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 09:33:38.268 00:00:10.364 TCP 23.104.0.1:42512 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:34:02.642 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:48744 10 6452 1 2025-08-25 09:34:38.673 00:00:10.375 TCP 23.104.0.1:40914 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:35:02.849 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35520 10 6452 1 2025-08-25 09:35:39.106 00:00:10.369 TCP 23.104.0.1:53268 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:36:03.068 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57848 10 6452 1 2025-08-25 09:36:39.522 00:00:10.416 TCP 23.104.0.1:52588 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:37:03.241 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47776 10 6452 1 2025-08-25 09:37:39.982 00:00:10.373 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:38:12.990 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 09:38:03.457 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35776 10 6452 1 2025-08-25 09:38:13.064 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 09:33:17.436 00:06:00.025 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 09:38:40.396 00:00:10.377 TCP 23.104.0.1:41332 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:39:03.668 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35700 10 6452 1 2025-08-25 09:34:17.458 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-25 09:39:40.811 00:00:10.368 TCP 23.104.0.1:38138 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:40:03.885 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45646 10 6452 1 2025-08-25 09:40:41.223 00:00:10.369 TCP 23.104.0.1:52684 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:41:04.106 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:60162 10 6452 1 2025-08-25 09:41:41.633 00:00:10.364 TCP 23.104.0.1:43186 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:42:04.367 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36540 10 6452 1 2025-08-25 09:42:42.036 00:00:10.368 TCP 23.104.0.1:37974 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:43:04.578 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53278 10 6452 1 2025-08-25 09:43:12.912 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 09:43:13.176 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 09:43:42.447 00:00:10.368 TCP 23.104.0.1:41152 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:44:04.755 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38082 10 6452 1 2025-08-25 09:44:42.853 00:00:10.378 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:45:04.929 00:00:10.382 TCP 1.101.0.1:3000 -> 22.102.0.1:36908 10 6452 1 2025-08-25 09:40:17.439 00:06:00.024 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 09:45:43.270 00:00:10.364 TCP 23.104.0.1:60238 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:46:05.351 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40326 10 6452 1 2025-08-25 09:41:17.459 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-25 09:46:43.675 00:00:10.372 TCP 23.104.0.1:54714 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:47:05.567 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36924 10 6452 1 2025-08-25 09:47:44.104 00:00:10.362 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:48:13.651 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 09:48:05.788 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60096 10 6452 1 2025-08-25 09:48:13.427 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 09:48:44.503 00:00:10.328 TCP 23.104.0.1:42380 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:49:05.997 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55386 10 6452 1 2025-08-25 09:49:44.873 00:00:10.405 TCP 23.104.0.1:55512 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:50:06.219 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46220 10 6452 1 2025-08-25 09:50:45.322 00:00:10.366 TCP 23.104.0.1:39670 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:51:06.436 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54266 10 6452 1 2025-08-25 09:51:45.733 00:00:10.745 TCP 23.104.0.1:44482 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:52:06.653 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50026 10 6452 1 2025-08-25 09:47:17.440 00:06:00.024 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 09:52:46.521 00:00:10.366 TCP 23.104.0.1:52686 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:53:13.057 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 09:48:17.461 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-25 09:53:13.257 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 09:53:06.866 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59570 10 6452 1 2025-08-25 09:53:46.923 00:00:10.393 TCP 23.104.0.1:51736 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:54:07.109 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33346 10 6452 1 2025-08-25 09:54:47.344 00:00:10.365 TCP 23.104.0.1:35032 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:55:07.286 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57476 10 6452 1 2025-08-25 09:55:47.749 00:00:10.361 TCP 23.104.0.1:48250 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:56:07.502 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38892 10 6452 1 2025-08-25 09:56:48.151 00:00:10.372 TCP 23.104.0.1:57176 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:57:07.714 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49392 10 6452 1 2025-08-25 09:57:48.556 00:00:10.363 TCP 23.104.0.1:38822 -> 1.101.0.1:3000 11 1507 1 2025-08-25 09:58:13.416 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 09:58:13.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 09:58:07.926 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:59046 10 6452 1 Summary: total flows: 159, total bytes: 492945, total packets: 1489, avg bps: 1095, avg pps: 0, avg bpp: 331 Time window: 2025-08-25 08:58:17 - 2025-08-25 09:58:18 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0041s User: 0.0008s Wall: 0.0022s flows/second: 71333.2 Runtime: 0.0022s