Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 18:59:30.596 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38500 10 6452 1 2025-08-25 18:59:40.211 00:00:10.332 TCP 23.104.0.1:34556 -> 1.101.0.1:3000 11 1507 1 2025-08-25 18:55:17.664 00:06:00.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 18:55:17.667 00:06:00.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 19:00:30.822 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56916 10 6452 1 2025-08-25 19:00:40.589 00:00:10.363 TCP 23.104.0.1:38096 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:01:30.998 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38196 10 6452 1 2025-08-25 19:01:40.995 00:00:10.365 TCP 23.104.0.1:55248 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:02:31.223 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60396 10 6452 1 2025-08-25 19:02:41.402 00:00:10.370 TCP 23.104.0.1:44522 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:03:24.322 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 19:03:24.266 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 19:03:31.435 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33800 10 6452 1 2025-08-25 19:03:41.808 00:00:10.330 TCP 23.104.0.1:57032 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:04:31.646 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38814 10 6452 1 2025-08-25 19:04:42.177 00:00:10.321 TCP 23.104.0.1:50212 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:05:31.860 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54814 10 6452 1 2025-08-25 19:05:42.536 00:00:10.363 TCP 23.104.0.1:59956 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:06:32.088 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41446 10 6452 1 2025-08-25 19:06:42.940 00:00:10.369 TCP 23.104.0.1:53902 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:02:17.666 00:06:00.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 19:02:17.669 00:06:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 19:07:32.302 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57896 10 6452 1 2025-08-25 19:07:43.348 00:00:10.325 TCP 23.104.0.1:38706 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:08:24.454 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 19:08:24.678 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 19:08:32.472 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33790 10 6452 1 2025-08-25 19:08:43.711 00:00:10.380 TCP 23.104.0.1:42474 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:09:32.684 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37076 10 6452 1 2025-08-25 19:09:44.123 00:00:10.368 TCP 23.104.0.1:48684 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:10:32.899 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51212 10 6452 1 2025-08-25 19:10:44.528 00:00:10.328 TCP 23.104.0.1:32780 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:11:33.089 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54752 10 6452 1 2025-08-25 19:11:44.896 00:00:10.334 TCP 23.104.0.1:40000 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:12:33.318 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54382 10 6452 1 2025-08-25 19:12:45.269 00:00:10.326 TCP 23.104.0.1:33864 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:13:24.802 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 19:13:24.706 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 19:13:33.533 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35410 10 6452 1 2025-08-25 19:13:45.632 00:00:10.332 TCP 23.104.0.1:50114 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:09:17.675 00:06:00.100 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 19:09:17.672 00:06:00.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 19:14:33.748 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37098 11 6492 1 2025-08-25 19:14:45.995 00:00:10.363 TCP 23.104.0.1:56202 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:15:33.963 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40522 10 6452 1 2025-08-25 19:15:46.399 00:00:10.361 TCP 23.104.0.1:58056 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:16:34.184 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59650 10 6452 1 2025-08-25 19:16:46.796 00:00:10.372 TCP 23.104.0.1:54352 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:17:34.355 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37922 10 6452 1 2025-08-25 19:17:47.207 00:00:10.321 TCP 23.104.0.1:46102 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:18:24.675 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 19:18:24.652 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 19:18:34.566 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41996 10 6452 1 2025-08-25 19:18:47.570 00:00:10.364 TCP 23.104.0.1:43476 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:19:34.799 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49496 10 6452 1 2025-08-25 19:19:47.971 00:00:10.360 TCP 23.104.0.1:36388 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:20:35.020 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44922 10 6452 1 2025-08-25 19:20:48.373 00:00:10.362 TCP 23.104.0.1:37744 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:16:17.674 00:06:00.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 19:16:17.677 00:06:00.100 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 19:21:35.236 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57036 10 6452 1 2025-08-25 19:21:48.771 00:00:10.372 TCP 23.104.0.1:42564 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:22:35.449 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59204 10 6452 1 2025-08-25 19:22:49.179 00:00:10.368 TCP 23.104.0.1:35916 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:23:24.863 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 19:23:24.904 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 19:23:35.621 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50620 10 6452 1 2025-08-25 19:23:49.588 00:00:10.373 TCP 23.104.0.1:49044 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:24:35.835 00:00:10.610 TCP 1.101.0.1:3000 -> 22.102.0.1:36796 10 6452 1 2025-08-25 19:24:50.002 00:00:10.364 TCP 23.104.0.1:41392 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:25:36.481 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47250 10 6452 1 2025-08-25 19:25:50.403 00:00:10.364 TCP 23.104.0.1:35496 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:26:36.688 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51604 10 6452 1 2025-08-25 19:26:50.807 00:00:10.370 TCP 23.104.0.1:33030 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:27:36.900 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:34212 10 6452 1 2025-08-25 19:27:51.211 00:00:10.367 TCP 23.104.0.1:42328 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:23:17.675 00:06:00.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 19:28:24.963 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 19:23:17.678 00:06:00.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 19:28:24.934 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 19:28:37.085 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57026 10 6452 1 2025-08-25 19:28:51.613 00:00:10.324 TCP 23.104.0.1:53418 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:29:37.305 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40150 10 6452 1 2025-08-25 19:29:51.978 00:00:10.338 TCP 23.104.0.1:44350 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:30:37.477 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55144 10 6452 1 2025-08-25 19:30:52.351 00:00:10.393 TCP 23.104.0.1:47472 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:31:37.657 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:38838 12 10367 1 2025-08-25 19:31:52.783 00:00:10.402 TCP 23.104.0.1:42272 -> 1.101.0.1:3000 15 1926 1 2025-08-25 19:32:37.860 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54172 10 6452 1 2025-08-25 19:32:53.223 00:00:10.372 TCP 23.104.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:33:25.068 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 19:33:24.974 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 19:33:38.085 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54582 10 6452 1 2025-08-25 19:33:53.640 00:00:10.336 TCP 23.104.0.1:36500 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:34:38.302 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44942 10 6452 1 2025-08-25 19:34:54.014 00:00:10.370 TCP 23.104.0.1:45292 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:30:17.677 00:06:00.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 19:30:17.679 00:06:00.100 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 19:35:38.515 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45056 10 6452 1 2025-08-25 19:35:54.424 00:00:10.372 TCP 23.104.0.1:44016 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:36:38.732 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:41100 12 10365 1 2025-08-25 19:36:54.832 00:00:10.463 TCP 23.104.0.1:54718 -> 1.101.0.1:3000 15 1926 1 2025-08-25 19:37:38.929 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:49746 10 6452 1 2025-08-25 19:37:55.339 00:00:10.366 TCP 23.104.0.1:41120 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:38:24.976 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 19:38:24.849 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 19:38:39.127 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39074 10 6452 1 2025-08-25 19:38:55.741 00:00:10.367 TCP 23.104.0.1:51898 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:39:39.302 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54944 10 6452 1 2025-08-25 19:39:56.143 00:00:10.364 TCP 23.104.0.1:54028 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:40:39.476 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37426 10 6452 1 2025-08-25 19:40:56.547 00:00:10.325 TCP 23.104.0.1:46896 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:41:39.686 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:37234 12 10367 1 2025-08-25 19:41:56.911 00:00:10.442 TCP 23.104.0.1:37966 -> 1.101.0.1:3000 15 1926 1 2025-08-25 19:37:17.678 00:06:00.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 19:37:17.681 00:06:00.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 19:42:39.890 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47906 10 6452 1 2025-08-25 19:42:57.389 00:00:10.367 TCP 23.104.0.1:50388 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:43:25.147 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 19:43:25.257 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 19:43:40.108 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56740 10 6452 1 2025-08-25 19:43:57.793 00:00:10.348 TCP 23.104.0.1:44140 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:44:40.284 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40224 10 6452 1 2025-08-25 19:44:58.167 00:00:10.318 TCP 23.104.0.1:46718 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:45:40.498 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6452 1 2025-08-25 19:45:58.521 00:00:10.335 TCP 23.104.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:46:40.714 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47466 10 6452 1 2025-08-25 19:46:58.885 00:00:10.373 TCP 23.104.0.1:60380 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:47:40.901 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 10 6452 1 2025-08-25 19:47:59.297 00:00:10.485 TCP 23.104.0.1:54048 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:48:25.317 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 19:48:25.316 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 19:48:41.113 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50002 10 6452 1 2025-08-25 19:48:59.827 00:00:10.319 TCP 23.104.0.1:54624 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:44:17.678 00:06:00.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 19:44:17.682 00:06:00.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 19:49:41.327 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59198 10 6452 1 2025-08-25 19:50:00.188 00:00:10.366 TCP 23.104.0.1:44340 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:50:41.536 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51786 10 6452 1 2025-08-25 19:51:00.593 00:00:10.332 TCP 23.104.0.1:43580 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:51:41.745 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:50242 10 6452 1 2025-08-25 19:52:00.961 00:00:10.326 TCP 23.104.0.1:53876 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:52:41.914 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50130 10 6452 1 2025-08-25 19:53:01.320 00:00:10.328 TCP 23.104.0.1:50388 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:53:25.524 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 19:53:25.589 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 19:53:42.124 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:38766 10 6452 1 2025-08-25 19:54:01.682 00:00:10.370 TCP 23.104.0.1:45904 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:54:42.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47074 10 6452 1 2025-08-25 19:55:02.104 00:00:10.366 TCP 23.104.0.1:54430 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:55:42.509 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54844 10 6452 1 2025-08-25 19:56:02.501 00:00:10.361 TCP 23.104.0.1:38274 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:51:17.683 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 19:51:17.680 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 19:56:42.684 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44932 10 6452 1 2025-08-25 19:57:02.904 00:00:10.363 TCP 23.104.0.1:41024 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:57:42.907 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39716 10 6452 1 2025-08-25 19:58:03.303 00:00:10.364 TCP 23.104.0.1:34900 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:58:25.143 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 19:58:25.457 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 160, total bytes: 504167, total packets: 1582, avg bps: 1064, avg pps: 0, avg bpp: 318 Time window: 2025-08-25 18:55:17 - 2025-08-25 19:58:25 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0025s User: 0.0025s Wall: 0.0026s flows/second: 61562.1 Runtime: 0.0026s