Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 23:58:45.231 00:00:10.363 TCP 23.104.0.1:33076 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:58:49.038 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50660 10 6452 1 2025-08-25 23:59:45.636 00:00:10.646 TCP 23.104.0.1:46836 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:59:49.251 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38214 10 6452 1 2025-08-26 00:00:46.319 00:00:10.375 TCP 23.104.0.1:59470 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:00:49.465 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52822 10 6452 1 2025-08-25 23:56:17.797 00:06:00.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 23:56:17.794 00:06:00.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 00:01:49.678 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58360 10 6452 1 2025-08-26 00:01:46.735 00:00:10.368 TCP 23.104.0.1:34700 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:02:47.143 00:00:10.749 TCP 23.104.0.1:34508 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:02:49.894 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42708 10 6452 1 2025-08-26 00:03:31.190 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 00:03:30.881 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 00:03:47.932 00:00:10.378 TCP 23.104.0.1:48222 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:03:50.113 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58976 10 6452 1 2025-08-26 00:04:50.318 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32828 10 6452 1 2025-08-26 00:04:48.353 00:00:10.363 TCP 23.104.0.1:36170 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:05:48.754 00:00:10.327 TCP 23.104.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:05:50.528 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41810 10 6452 1 2025-08-26 00:06:49.124 00:00:10.371 TCP 23.104.0.1:40364 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:06:50.747 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55754 10 6452 1 2025-08-26 00:07:49.530 00:00:10.374 TCP 23.104.0.1:34580 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:07:50.973 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:39614 10 6452 1 2025-08-26 00:03:17.797 00:06:00.132 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 00:03:17.800 00:06:00.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 00:08:30.641 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 00:08:30.514 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 00:08:49.952 00:00:10.377 TCP 23.104.0.1:45152 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:08:51.214 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59332 10 6452 1 2025-08-26 00:09:50.361 00:00:10.366 TCP 23.104.0.1:41398 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:09:51.448 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53040 10 6452 1 2025-08-26 00:10:50.760 00:00:10.990 TCP 23.104.0.1:52912 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:10:51.661 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48822 10 6452 1 2025-08-26 00:11:51.888 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:40892 12 10365 1 2025-08-26 00:11:51.786 00:00:10.449 TCP 23.104.0.1:57736 -> 1.101.0.1:3000 15 1926 1 2025-08-26 00:12:52.275 00:00:10.362 TCP 23.104.0.1:44302 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:12:52.141 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43918 10 6452 1 2025-08-26 00:13:30.600 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 00:13:30.780 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 00:13:52.349 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39890 10 6452 1 2025-08-26 00:13:52.679 00:00:10.376 TCP 23.104.0.1:54692 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:14:53.105 00:00:10.363 TCP 23.104.0.1:37410 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:14:52.525 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48182 10 6452 1 2025-08-26 00:10:17.799 00:06:00.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 00:10:17.801 00:06:00.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 00:15:53.508 00:00:10.360 TCP 23.104.0.1:52602 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:15:52.740 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:47320 10 6452 1 2025-08-26 00:16:52.929 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 10 6452 1 2025-08-26 00:16:53.908 00:00:10.365 TCP 23.104.0.1:41172 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:17:54.321 00:00:10.376 TCP 23.104.0.1:37804 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:17:53.127 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60918 10 6452 1 2025-08-26 00:18:30.679 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 00:18:30.743 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 00:18:53.345 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33398 10 6452 1 2025-08-26 00:18:54.732 00:00:10.327 TCP 23.104.0.1:54482 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:19:55.105 00:00:10.360 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:19:53.563 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2025-08-26 00:20:55.503 00:00:10.360 TCP 23.104.0.1:41788 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:20:53.734 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38286 10 6452 1 2025-08-26 00:21:53.908 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36802 10 6452 1 2025-08-26 00:21:55.897 00:00:10.332 TCP 23.104.0.1:57634 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:17:17.815 00:06:00.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 00:17:17.813 00:06:00.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 00:22:56.277 00:00:10.320 TCP 23.104.0.1:34770 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:22:54.130 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46636 10 6452 1 2025-08-26 00:23:30.719 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 00:23:30.768 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 00:23:56.642 00:00:10.330 TCP 23.104.0.1:46326 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:23:54.343 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32808 10 6452 1 2025-08-26 00:24:54.557 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2025-08-26 00:24:57.014 00:00:10.365 TCP 23.104.0.1:57638 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:25:54.766 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59266 10 6452 1 2025-08-26 00:25:57.417 00:00:10.320 TCP 23.104.0.1:50798 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:26:54.974 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34428 10 6452 1 2025-08-26 00:26:57.778 00:00:10.368 TCP 23.104.0.1:60176 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:27:55.209 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38036 10 6452 1 2025-08-26 00:27:58.196 00:00:10.361 TCP 23.104.0.1:35072 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:28:30.858 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 00:28:30.726 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 00:28:55.427 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52360 10 6452 1 2025-08-26 00:28:58.594 00:00:10.367 TCP 23.104.0.1:50278 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:24:17.813 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 00:24:17.816 00:06:00.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 00:29:55.639 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51074 10 6452 1 2025-08-26 00:29:58.994 00:00:10.367 TCP 23.104.0.1:51888 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:30:55.847 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46046 10 6452 1 2025-08-26 00:30:59.400 00:00:10.420 TCP 23.104.0.1:42070 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:31:56.031 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35562 10 6452 1 2025-08-26 00:31:59.859 00:00:10.376 TCP 23.104.0.1:41236 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:32:56.256 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40336 10 6452 1 2025-08-26 00:33:00.269 00:00:10.360 TCP 23.104.0.1:58138 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:33:30.922 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 00:33:31.110 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 00:33:56.471 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50096 10 6452 1 2025-08-26 00:34:00.674 00:00:10.377 TCP 23.104.0.1:48248 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:34:56.680 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37378 10 6452 1 2025-08-26 00:35:01.110 00:00:10.364 TCP 23.104.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:35:56.903 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60336 10 6452 1 2025-08-26 00:36:01.514 00:00:10.369 TCP 23.104.0.1:60178 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:31:17.815 00:06:00.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 00:31:17.817 00:06:00.126 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 00:36:57.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58188 10 6452 1 2025-08-26 00:37:01.921 00:00:10.376 TCP 23.104.0.1:34000 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:37:57.298 00:00:10.568 TCP 1.101.0.1:3000 -> 22.102.0.1:49744 10 6452 1 2025-08-26 00:38:02.343 00:00:10.457 TCP 23.104.0.1:58216 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:38:31.913 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 00:38:31.986 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 00:38:57.899 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41932 10 6452 1 2025-08-26 00:39:02.861 00:00:10.381 TCP 23.104.0.1:47338 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:39:58.147 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55002 10 6452 1 2025-08-26 00:40:03.309 00:00:10.372 TCP 23.104.0.1:48920 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:40:58.316 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54166 10 6452 1 2025-08-26 00:41:03.719 00:00:10.367 TCP 23.104.0.1:55076 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:41:58.485 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48940 10 6452 1 2025-08-26 00:42:04.127 00:00:10.331 TCP 23.104.0.1:43122 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:42:58.704 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41996 10 6452 1 2025-08-26 00:43:04.508 00:00:10.365 TCP 23.104.0.1:44500 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:38:17.819 00:06:00.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 00:38:17.816 00:06:00.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 00:43:31.168 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 00:43:31.039 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 00:43:58.916 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41688 10 6452 1 2025-08-26 00:44:04.913 00:00:10.374 TCP 23.104.0.1:34038 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:44:59.125 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54128 10 6452 1 2025-08-26 00:45:05.331 00:00:10.361 TCP 23.104.0.1:50754 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:45:59.306 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44638 10 6452 1 2025-08-26 00:46:05.735 00:00:10.370 TCP 23.104.0.1:39848 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:46:59.513 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53730 10 6452 1 2025-08-26 00:47:06.141 00:00:10.368 TCP 23.104.0.1:40098 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:47:59.730 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59564 10 6452 1 2025-08-26 00:48:06.553 00:00:10.365 TCP 23.104.0.1:35010 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:48:31.276 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 00:48:31.389 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 00:48:59.898 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37382 10 6452 1 2025-08-26 00:49:06.949 00:00:10.375 TCP 23.104.0.1:36184 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:50:00.117 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44292 10 6452 1 2025-08-26 00:45:17.816 00:06:00.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 00:45:17.820 00:06:00.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 00:50:07.362 00:00:11.130 TCP 23.104.0.1:38606 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:51:00.329 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46890 10 6452 1 2025-08-26 00:51:08.528 00:00:10.372 TCP 23.104.0.1:46182 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:52:00.543 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59828 10 6452 1 2025-08-26 00:52:08.938 00:00:10.331 TCP 23.104.0.1:33456 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:53:00.754 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45238 10 6452 1 2025-08-26 00:53:09.303 00:00:10.368 TCP 23.104.0.1:53260 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:53:31.519 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 00:53:31.434 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 00:54:00.922 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-08-26 00:54:09.711 00:00:10.333 TCP 23.104.0.1:59900 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:55:01.138 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32804 10 6452 1 2025-08-26 00:55:10.104 00:00:10.365 TCP 23.104.0.1:43322 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:56:01.347 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58972 10 6452 1 2025-08-26 00:56:10.509 00:00:10.362 TCP 23.104.0.1:49794 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:57:01.560 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-08-26 00:52:17.820 00:06:00.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 00:57:10.916 00:00:10.373 TCP 23.104.0.1:39996 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:52:17.822 00:06:00.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 00:58:01.734 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40608 10 6452 1 2025-08-26 00:58:11.328 00:00:10.364 TCP 23.104.0.1:47302 -> 1.101.0.1:3000 11 1507 1 2025-08-26 00:58:31.567 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 00:58:31.507 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 162, total bytes: 503418, total packets: 1590, avg bps: 1078, avg pps: 0, avg bpp: 316 Time window: 2025-08-25 23:56:17 - 2025-08-26 00:58:31 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0011s User: 0.0033s Wall: 0.0026s flows/second: 61625.0 Runtime: 0.0026s