Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 19:58:43.115 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40976 10 6452 1 2025-08-25 19:59:03.709 00:00:10.326 TCP 23.104.0.1:60274 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:59:43.327 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-08-25 20:00:04.103 00:00:10.322 TCP 23.104.0.1:36136 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:00:43.499 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44486 10 6452 1 2025-08-25 20:01:04.468 00:00:10.331 TCP 23.104.0.1:37346 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:01:43.668 00:00:10.361 TCP 1.101.0.1:3000 -> 22.102.0.1:52398 10 6452 1 2025-08-25 20:02:04.853 00:00:10.370 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:02:44.082 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44540 10 6452 1 2025-08-25 20:03:05.259 00:00:10.363 TCP 23.104.0.1:55612 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:58:17.687 00:06:00.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 19:58:17.684 00:06:00.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:03:25.699 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:03:25.571 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:03:44.295 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48226 10 6452 1 2025-08-25 20:04:05.673 00:00:10.370 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:04:44.511 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-08-25 20:05:06.111 00:00:10.325 TCP 23.104.0.1:49370 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:05:44.728 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38134 10 6452 1 2025-08-25 20:06:06.474 00:00:10.372 TCP 23.104.0.1:60426 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:06:44.937 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38010 10 6452 1 2025-08-25 20:07:06.890 00:00:10.378 TCP 23.104.0.1:53482 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:07:45.174 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51686 10 6452 1 2025-08-25 20:08:07.306 00:00:10.364 TCP 23.104.0.1:57234 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:08:25.706 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:08:25.664 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:08:45.344 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44346 10 6452 1 2025-08-25 20:09:07.708 00:00:10.375 TCP 23.104.0.1:54142 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:09:45.561 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60374 10 6452 1 2025-08-25 20:05:17.687 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:10:08.125 00:00:10.361 TCP 23.104.0.1:45504 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:05:17.688 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:10:45.786 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57506 10 6452 1 2025-08-25 20:11:08.522 00:00:10.370 TCP 23.104.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:11:46.013 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34598 10 6452 1 2025-08-25 20:12:08.929 00:00:10.527 TCP 23.104.0.1:47318 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:12:46.228 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57972 10 6452 1 2025-08-25 20:13:09.493 00:00:10.363 TCP 23.104.0.1:50244 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:13:25.711 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:13:25.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:13:46.436 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60710 10 6452 1 2025-08-25 20:14:09.894 00:00:10.336 TCP 23.104.0.1:48048 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:14:46.653 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48972 10 6452 1 2025-08-25 20:15:10.266 00:00:10.369 TCP 23.104.0.1:37606 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:15:46.829 00:00:10.345 TCP 1.101.0.1:3000 -> 22.102.0.1:57372 10 6452 1 2025-08-25 20:16:10.672 00:00:10.335 TCP 23.104.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:16:47.211 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58810 10 6452 1 2025-08-25 20:12:17.689 00:06:00.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:17:11.061 00:00:10.322 TCP 23.104.0.1:58628 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:12:17.688 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:17:47.391 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53452 10 6452 1 2025-08-25 20:18:26.159 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:18:11.424 00:00:10.365 TCP 23.104.0.1:57036 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:18:26.210 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:18:47.612 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41390 10 6452 1 2025-08-25 20:19:11.825 00:00:10.366 TCP 23.104.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:19:47.782 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43242 10 6452 1 2025-08-25 20:20:12.224 00:00:10.328 TCP 23.104.0.1:54156 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:20:47.997 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49488 10 6452 1 2025-08-25 20:21:12.585 00:00:10.380 TCP 23.104.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:21:48.217 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55724 10 6452 1 2025-08-25 20:22:12.999 00:00:10.369 TCP 23.104.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:22:48.401 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43472 10 6452 1 2025-08-25 20:23:26.004 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:23:25.666 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:23:13.406 00:00:10.325 TCP 23.104.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:23:48.614 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41242 10 6452 1 2025-08-25 20:19:17.690 00:06:00.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:19:17.689 00:06:00.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:24:13.770 00:00:10.331 TCP 23.104.0.1:56624 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:24:48.821 00:00:14.731 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-08-25 20:25:14.135 00:00:10.323 TCP 23.104.0.1:46860 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:25:53.597 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56088 10 6452 1 2025-08-25 20:26:14.497 00:00:10.369 TCP 23.104.0.1:55976 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:26:53.809 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36896 10 6452 1 2025-08-25 20:27:14.901 00:00:10.368 TCP 23.104.0.1:59718 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:27:54.017 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45794 10 6452 1 2025-08-25 20:28:25.917 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:28:15.308 00:00:10.324 TCP 23.104.0.1:58350 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:28:26.233 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:28:54.232 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:49664 10 6452 1 2025-08-25 20:29:15.672 00:00:10.326 TCP 23.104.0.1:42332 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:29:54.400 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34134 10 6452 1 2025-08-25 20:30:16.037 00:00:10.367 TCP 23.104.0.1:56640 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:30:54.607 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48730 10 6452 1 2025-08-25 20:26:17.690 00:06:00.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:26:17.689 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:31:16.440 00:00:10.366 TCP 23.104.0.1:46804 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:31:54.816 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37292 10 6452 1 2025-08-25 20:32:16.847 00:00:10.340 TCP 23.104.0.1:44896 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:32:55.035 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47852 10 6452 1 2025-08-25 20:33:26.231 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:33:26.164 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:33:17.226 00:00:10.369 TCP 23.104.0.1:50384 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:33:55.258 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6452 1 2025-08-25 20:34:17.630 00:00:10.325 TCP 23.104.0.1:47324 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:34:55.470 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-08-25 20:35:18.008 00:00:10.326 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:35:55.689 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 10 6452 1 2025-08-25 20:36:18.381 00:00:10.360 TCP 23.104.0.1:56470 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:36:55.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45518 10 6452 1 2025-08-25 20:37:18.781 00:00:10.373 TCP 23.104.0.1:56136 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:37:56.116 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34296 10 6452 1 2025-08-25 20:33:17.701 00:06:00.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:38:26.519 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:33:17.704 00:06:00.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:38:26.447 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:38:19.197 00:00:10.362 TCP 23.104.0.1:55908 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:38:56.347 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57916 10 6452 1 2025-08-25 20:39:19.599 00:00:10.366 TCP 23.104.0.1:41120 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:39:56.561 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55948 10 6452 1 2025-08-25 20:40:20.005 00:00:10.321 TCP 23.104.0.1:55190 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:40:56.791 00:00:17.362 TCP 1.101.0.1:3000 -> 22.102.0.1:52732 10 6452 1 2025-08-25 20:41:20.362 00:00:10.362 TCP 23.104.0.1:53040 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:42:04.202 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42552 10 6452 1 2025-08-25 20:42:20.764 00:00:10.371 TCP 23.104.0.1:49312 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:43:04.420 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44570 10 6452 1 2025-08-25 20:43:26.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:43:26.314 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:43:21.175 00:00:10.365 TCP 23.104.0.1:60856 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:44:04.643 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35626 10 6452 1 2025-08-25 20:44:21.579 00:00:10.371 TCP 23.104.0.1:50000 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:45:04.855 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35146 10 6452 1 2025-08-25 20:40:17.704 00:06:00.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:40:17.703 00:06:00.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:45:21.985 00:00:10.374 TCP 23.104.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:46:05.078 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36876 10 6452 1 2025-08-25 20:46:22.399 00:00:10.372 TCP 23.104.0.1:51414 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:47:05.294 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-08-25 20:47:22.810 00:00:10.367 TCP 23.104.0.1:41376 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:48:05.465 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43284 10 6452 1 2025-08-25 20:48:26.830 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:48:26.633 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:48:23.215 00:00:10.323 TCP 23.104.0.1:42118 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:49:05.673 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37376 10 6452 1 2025-08-25 20:49:23.574 00:00:10.367 TCP 23.104.0.1:44712 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:50:05.892 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56906 10 6452 1 2025-08-25 20:50:23.977 00:00:10.364 TCP 23.104.0.1:57082 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:51:06.110 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6452 1 2025-08-25 20:51:24.378 00:00:10.365 TCP 23.104.0.1:39558 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:52:06.327 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47532 10 6452 1 2025-08-25 20:47:17.704 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:47:17.706 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:52:24.792 00:00:10.370 TCP 23.104.0.1:47022 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:53:06.498 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55990 10 6452 1 2025-08-25 20:53:26.743 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:53:26.643 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:53:25.201 00:00:10.376 TCP 23.104.0.1:57522 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:54:06.703 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6452 1 2025-08-25 20:54:25.625 00:00:10.324 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:55:06.872 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37128 10 6452 1 2025-08-25 20:55:25.990 00:00:10.330 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:56:07.094 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53052 10 6452 1 2025-08-25 20:56:26.356 00:00:10.366 TCP 23.104.0.1:52624 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:57:07.314 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33960 10 6452 1 2025-08-25 20:57:26.759 00:00:10.436 TCP 23.104.0.1:36512 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:58:07.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36412 10 6452 1 2025-08-25 20:58:26.669 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:58:26.744 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:58:27.237 00:00:10.366 TCP 23.104.0.1:56176 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 497364, total packets: 1556, avg bps: 1099, avg pps: 0, avg bpp: 319 Time window: 2025-08-25 19:58:17 - 2025-08-25 20:58:37 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0034s User: 0.0011s Wall: 0.0024s flows/second: 67371.6 Runtime: 0.0024s