Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 13:59:00.322 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47900 10 6661 1 2025-08-25 13:59:28.764 00:00:10.371 TCP 23.104.0.1:34910 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:00:00.566 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41932 10 6661 1 2025-08-25 14:00:29.174 00:00:10.326 TCP 23.104.0.1:50252 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:01:00.774 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54536 10 6661 1 2025-08-25 14:01:29.535 00:00:10.321 TCP 23.104.0.1:34324 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:02:00.995 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56364 10 6661 1 2025-08-25 14:02:29.891 00:00:10.376 TCP 23.104.0.1:44804 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:03:01.215 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53264 10 6661 1 2025-08-25 14:03:18.382 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 14:03:18.320 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 14:03:30.303 00:00:10.322 TCP 23.104.0.1:54860 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:04:01.427 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49730 10 6661 1 2025-08-25 13:59:17.539 00:06:00.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 14:04:30.665 00:00:10.332 TCP 23.104.0.1:49102 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:05:01.640 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41280 10 6661 1 2025-08-25 14:00:17.542 00:06:00.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 14:05:31.034 00:00:10.368 TCP 23.104.0.1:48276 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:06:01.815 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41696 10 6661 1 2025-08-25 14:06:31.438 00:00:10.365 TCP 23.104.0.1:48698 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:07:02.037 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43766 10 6661 1 2025-08-25 14:07:31.838 00:00:10.389 TCP 23.104.0.1:47548 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:08:02.249 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50276 10 6661 1 2025-08-25 14:08:18.444 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 14:08:18.588 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 14:08:32.260 00:00:10.365 TCP 23.104.0.1:44060 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:09:02.422 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50324 10 6661 1 2025-08-25 14:09:32.668 00:00:10.673 TCP 23.104.0.1:38322 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:10:02.634 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53732 10 6661 1 2025-08-25 14:10:33.380 00:00:10.364 TCP 23.104.0.1:45002 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:11:02.808 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59620 10 6661 1 2025-08-25 14:06:17.540 00:06:00.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 14:11:33.782 00:00:10.368 TCP 23.104.0.1:47002 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:12:03.028 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35116 10 6661 1 2025-08-25 14:07:17.543 00:06:00.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 14:12:34.189 00:00:10.375 TCP 23.104.0.1:49106 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:13:03.242 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58196 10 6661 1 2025-08-25 14:13:18.562 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 14:13:18.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 14:13:34.587 00:00:10.367 TCP 23.104.0.1:53076 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:14:03.457 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49852 10 6661 1 2025-08-25 14:14:34.990 00:00:10.368 TCP 23.104.0.1:37470 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:15:03.630 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44338 10 6661 1 2025-08-25 14:15:35.396 00:00:10.366 TCP 23.104.0.1:50752 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:16:03.845 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42286 10 6661 1 2025-08-25 14:16:35.803 00:00:10.332 TCP 23.104.0.1:55932 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:17:04.082 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49032 10 6661 1 2025-08-25 14:17:36.169 00:00:10.371 TCP 23.104.0.1:60496 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:18:04.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6661 1 2025-08-25 14:18:18.584 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 14:13:17.543 00:06:00.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 14:18:18.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 14:18:36.585 00:00:10.376 TCP 23.104.0.1:38774 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:19:04.514 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35530 10 6661 1 2025-08-25 14:14:17.545 00:06:00.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 14:19:37.010 00:00:10.363 TCP 23.104.0.1:35006 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:20:04.690 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52996 10 6661 1 2025-08-25 14:20:37.411 00:00:10.367 TCP 23.104.0.1:35572 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:21:04.903 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48946 10 6661 1 2025-08-25 14:21:37.811 00:00:10.338 TCP 23.104.0.1:49650 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:22:05.114 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34018 10 6661 1 2025-08-25 14:22:38.184 00:00:10.374 TCP 23.104.0.1:55446 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:23:05.325 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51970 10 6661 1 2025-08-25 14:23:18.781 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 14:23:18.838 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 14:23:38.592 00:00:10.373 TCP 23.104.0.1:47364 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:24:05.537 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48404 10 6661 1 2025-08-25 14:24:39.000 00:00:10.365 TCP 23.104.0.1:43672 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:25:05.757 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57712 10 6661 1 2025-08-25 14:20:17.546 00:06:00.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 14:25:39.407 00:00:10.367 TCP 23.104.0.1:44412 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:26:05.973 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46962 10 6661 1 2025-08-25 14:21:17.547 00:06:00.263 TCP 179.1.22.22:39396 -> 179.1.22.1:179 16 965 1 2025-08-25 14:26:39.816 00:00:10.328 TCP 23.104.0.1:33394 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:27:06.192 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59396 10 6661 1 2025-08-25 14:27:17.428 00:00:00.381 TCP 179.1.22.1:179 -> 179.1.22.22:39396 4 366 1 2025-08-25 14:27:40.188 00:00:00.317 TCP 23.104.0.1:40460 -> 1.101.0.1:3000 9 1379 1 2025-08-25 14:29:58.403 00:00:11.089 TCP 32.102.0.1:56732 -> 1.101.0.1:3000 10 1308 1 2025-08-25 14:30:14.244 00:00:00.572 TCP 28.104.0.1:43130 -> 1.101.0.1:3000 9 1379 1 2025-08-25 14:30:13.571 00:00:00.744 TCP 30.104.0.1:42080 -> 1.101.0.1:3000 9 1379 1 2025-08-25 14:30:09.377 00:00:10.225 TCP 24.104.0.1:40968 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:30:29.985 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57962 10 6661 1 2025-08-25 14:30:50.967 00:00:10.364 TCP 23.104.0.1:43062 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:31:30.210 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46494 10 6661 1 2025-08-25 14:31:51.372 00:00:10.363 TCP 23.104.0.1:36560 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:32:30.386 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58334 10 6661 1 2025-08-25 14:32:51.771 00:00:10.323 TCP 23.104.0.1:35028 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:33:18.832 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 14:33:18.981 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 14:33:30.599 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33126 10 6661 1 2025-08-25 14:33:52.134 00:00:10.361 TCP 23.104.0.1:53110 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:29:58.033 00:05:19.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 16 984 1 2025-08-25 14:29:58.036 00:05:19.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 16 1634 1 2025-08-25 14:34:30.817 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39694 10 6661 1 2025-08-25 14:34:52.532 00:00:10.366 TCP 23.104.0.1:52254 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:35:31.041 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57388 10 6661 1 2025-08-25 14:35:52.936 00:00:10.379 TCP 23.104.0.1:51978 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:36:31.256 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42598 10 6661 1 2025-08-25 14:36:53.353 00:00:10.365 TCP 23.104.0.1:35134 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:37:31.476 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33824 10 6661 1 2025-08-25 14:37:53.757 00:00:10.374 TCP 23.104.0.1:50406 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:38:19.059 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 14:38:19.103 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 14:38:31.645 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54306 10 6661 1 2025-08-25 14:38:54.165 00:00:10.360 TCP 23.104.0.1:46026 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:39:31.825 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50288 10 6661 1 2025-08-25 14:39:54.569 00:00:10.372 TCP 23.104.0.1:34410 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:40:32.049 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52928 10 6661 1 2025-08-25 14:40:54.989 00:00:10.330 TCP 23.104.0.1:37592 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:36:17.549 00:06:00.095 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 14:36:17.552 00:06:00.089 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 14:41:32.262 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41640 10 6661 1 2025-08-25 14:41:55.363 00:00:10.360 TCP 23.104.0.1:39692 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:42:32.486 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57824 10 6661 1 2025-08-25 14:42:55.764 00:00:10.369 TCP 23.104.0.1:35064 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:43:19.164 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 14:43:19.242 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 14:43:32.698 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44362 10 6661 1 2025-08-25 14:43:56.168 00:00:10.366 TCP 23.104.0.1:53148 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:44:32.917 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34868 10 6661 1 2025-08-25 14:44:56.573 00:00:10.363 TCP 23.104.0.1:39016 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:45:33.129 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42434 10 6661 1 2025-08-25 14:45:56.974 00:00:10.373 TCP 23.104.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:46:33.348 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:39332 12 10576 1 2025-08-25 14:46:57.383 00:00:10.433 TCP 23.104.0.1:42464 -> 1.101.0.1:3000 15 1926 1 2025-08-25 14:47:33.597 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40192 10 6661 1 2025-08-25 14:47:57.857 00:00:10.374 TCP 23.104.0.1:44336 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:48:19.244 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 14:43:17.552 00:06:00.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 14:48:19.290 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 14:43:17.555 00:06:00.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 14:48:33.811 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44898 10 6661 1 2025-08-25 14:48:58.268 00:00:10.322 TCP 23.104.0.1:51668 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:49:33.984 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41936 10 6661 1 2025-08-25 14:49:58.626 00:00:10.324 TCP 23.104.0.1:41206 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:50:34.207 00:00:10.576 TCP 1.101.0.1:3000 -> 22.102.0.1:37240 10 6661 1 2025-08-25 14:50:58.990 00:00:10.364 TCP 23.104.0.1:60574 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:51:34.822 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54942 10 6661 1 2025-08-25 14:51:59.390 00:00:10.323 TCP 23.104.0.1:52484 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:52:35.043 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39744 10 6661 1 2025-08-25 14:52:59.755 00:00:10.381 TCP 23.104.0.1:49374 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:53:19.667 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 14:53:19.580 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 14:53:35.213 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57624 10 6661 1 2025-08-25 14:54:00.180 00:00:10.364 TCP 23.104.0.1:46722 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:54:35.431 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39816 10 6661 1 2025-08-25 14:55:00.585 00:00:10.327 TCP 23.104.0.1:35986 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:50:17.567 00:06:00.093 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 14:50:17.569 00:06:00.087 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 14:55:35.605 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49932 10 6661 1 2025-08-25 14:56:00.949 00:00:10.375 TCP 23.104.0.1:46680 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:56:35.776 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48008 10 6661 1 2025-08-25 14:57:01.363 00:00:10.364 TCP 23.104.0.1:43854 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:57:35.992 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52266 10 6661 1 2025-08-25 14:58:01.773 00:00:10.330 TCP 23.104.0.1:44068 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:58:19.449 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 14:58:19.693 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 14:58:36.221 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43680 10 6661 1 Summary: total flows: 158, total bytes: 502702, total packets: 1550, avg bps: 1121, avg pps: 0, avg bpp: 324 Time window: 2025-08-25 13:59:00 - 2025-08-25 14:58:46 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0015s User: 0.0030s Wall: 0.0033s flows/second: 48039.1 Runtime: 0.0033s