Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-26 00:59:01.952 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40360 10 6452 1 2025-08-26 00:59:11.731 00:00:10.368 TCP 23.104.0.1:58210 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:00:02.188 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44270 10 6452 1 2025-08-26 01:00:12.135 00:00:10.364 TCP 23.104.0.1:58376 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:01:02.363 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40394 10 6452 1 2025-08-26 01:01:12.544 00:00:10.362 TCP 23.104.0.1:60210 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:02:02.580 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59724 10 6452 1 2025-08-26 01:02:12.946 00:00:10.368 TCP 23.104.0.1:47012 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:03:02.800 00:00:10.379 TCP 1.101.0.1:3000 -> 22.102.0.1:44788 10 6452 1 2025-08-26 01:03:13.354 00:00:10.364 TCP 23.104.0.1:42016 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:03:31.896 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 01:03:31.843 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 01:04:03.233 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43666 10 6452 1 2025-08-26 00:59:17.820 00:06:00.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 00:59:17.822 00:06:00.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 01:04:13.756 00:00:10.332 TCP 23.104.0.1:41900 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:05:03.438 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:46612 10 6452 1 2025-08-26 01:05:14.130 00:00:10.364 TCP 23.104.0.1:49772 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:06:03.674 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52964 10 6452 1 2025-08-26 01:06:14.535 00:00:10.366 TCP 23.104.0.1:48714 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:07:03.906 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:57402 10 6452 1 2025-08-26 01:07:14.933 00:00:10.381 TCP 23.104.0.1:54926 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:08:04.094 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48682 10 6452 1 2025-08-26 01:08:15.357 00:00:10.335 TCP 23.104.0.1:34292 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:08:31.750 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 01:08:31.830 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 01:09:04.309 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53968 10 6452 1 2025-08-26 01:09:15.735 00:00:10.378 TCP 23.104.0.1:43460 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:10:04.518 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38198 10 6452 1 2025-08-26 01:10:16.153 00:00:10.321 TCP 23.104.0.1:40734 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:11:04.691 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40520 10 6452 1 2025-08-26 01:06:17.825 00:06:00.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 01:06:17.828 00:06:00.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 01:11:16.512 00:00:10.326 TCP 23.104.0.1:44988 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:12:04.893 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37000 10 6452 1 2025-08-26 01:12:16.875 00:00:10.325 TCP 23.104.0.1:57402 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:13:05.115 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:49936 10 6452 1 2025-08-26 01:13:32.441 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 01:13:17.236 00:00:10.374 TCP 23.104.0.1:51184 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:13:32.130 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 01:14:05.299 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:46184 10 6452 1 2025-08-26 01:14:17.651 00:00:10.376 TCP 23.104.0.1:34222 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:15:05.489 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:42006 10 6452 1 2025-08-26 01:15:18.078 00:00:10.392 TCP 23.104.0.1:55112 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:16:05.657 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38260 10 6452 1 2025-08-26 01:16:18.505 00:00:10.380 TCP 23.104.0.1:43588 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:17:05.879 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34582 10 6452 1 2025-08-26 01:17:18.927 00:00:10.394 TCP 23.104.0.1:50476 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:18:06.091 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57484 10 6452 1 2025-08-26 01:13:17.826 00:06:00.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 01:13:17.829 00:06:00.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 01:18:31.857 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 01:18:31.809 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 01:18:19.357 00:00:10.327 TCP 23.104.0.1:42980 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:19:06.317 00:00:10.752 TCP 1.101.0.1:3000 -> 22.102.0.1:56778 10 6452 1 2025-08-26 01:19:19.724 00:00:10.324 TCP 23.104.0.1:35168 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:20:07.105 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35226 10 6452 1 2025-08-26 01:20:20.103 00:00:10.366 TCP 23.104.0.1:60612 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:21:07.272 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42548 10 6452 1 2025-08-26 01:21:20.512 00:00:10.366 TCP 23.104.0.1:38224 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:22:07.490 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38142 10 6452 1 2025-08-26 01:22:20.915 00:00:10.332 TCP 23.104.0.1:40458 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:23:07.703 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56448 10 6452 1 2025-08-26 01:23:21.286 00:00:10.361 TCP 23.104.0.1:44260 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:23:32.482 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 01:23:32.630 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 01:24:07.920 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:53970 10 6452 1 2025-08-26 01:24:21.680 00:00:10.366 TCP 23.104.0.1:50330 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:25:08.114 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45152 10 6452 1 2025-08-26 01:20:17.833 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 01:20:17.835 00:06:00.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 01:25:22.105 00:00:10.377 TCP 23.104.0.1:33612 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:26:08.330 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46860 10 6452 1 2025-08-26 01:26:22.504 00:00:10.408 TCP 23.104.0.1:45360 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:27:08.538 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49388 10 6452 1 2025-08-26 01:27:22.957 00:00:10.318 TCP 23.104.0.1:52328 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:28:08.762 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:49976 10 6452 1 2025-08-26 01:28:31.890 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 01:28:32.254 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 01:28:23.314 00:00:10.365 TCP 23.104.0.1:54972 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:29:09.008 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60890 10 6452 1 2025-08-26 01:29:23.721 00:00:10.331 TCP 23.104.0.1:48414 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:30:09.235 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34558 10 6452 1 2025-08-26 01:30:24.112 00:00:10.365 TCP 23.104.0.1:43898 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:31:09.416 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35678 10 6452 1 2025-08-26 01:31:24.518 00:00:10.319 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:32:09.634 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:40862 10 6452 1 2025-08-26 01:27:17.834 00:06:00.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 01:27:17.838 00:06:00.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 01:32:24.880 00:00:10.394 TCP 23.104.0.1:54010 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:33:09.812 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44340 10 6452 1 2025-08-26 01:33:32.301 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 01:33:32.413 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 01:33:25.312 00:00:10.364 TCP 23.104.0.1:45178 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:34:10.038 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37718 10 6452 1 2025-08-26 01:34:25.718 00:00:10.332 TCP 23.104.0.1:42432 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:35:10.255 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52472 10 6452 1 2025-08-26 01:35:26.105 00:00:10.326 TCP 23.104.0.1:46600 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:36:10.470 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34716 10 6452 1 2025-08-26 01:36:26.469 00:00:10.370 TCP 23.104.0.1:45120 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:37:10.646 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36840 10 6452 1 2025-08-26 01:37:26.879 00:00:10.379 TCP 23.104.0.1:51676 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:38:10.859 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53842 10 6452 1 2025-08-26 01:38:32.336 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 01:38:32.333 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 01:38:27.300 00:00:10.333 TCP 23.104.0.1:60394 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:34:17.838 00:06:00.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 01:34:17.836 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 01:39:11.086 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53198 10 6452 1 2025-08-26 01:39:27.669 00:00:10.376 TCP 23.104.0.1:51252 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:40:11.299 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54144 10 6452 1 2025-08-26 01:40:28.104 00:00:10.333 TCP 23.104.0.1:49718 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:41:11.505 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59172 10 6452 1 2025-08-26 01:41:28.490 00:00:10.329 TCP 23.104.0.1:33026 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:42:11.717 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42804 10 6452 1 2025-08-26 01:42:28.857 00:00:10.338 TCP 23.104.0.1:52706 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:43:11.929 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:48322 10 6452 1 2025-08-26 01:43:32.520 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 01:43:32.596 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 01:43:29.234 00:00:10.369 TCP 23.104.0.1:55378 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:44:12.135 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40834 10 6452 1 2025-08-26 01:44:29.646 00:00:10.721 TCP 23.104.0.1:47874 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:45:12.355 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39198 10 6452 1 2025-08-26 01:45:30.409 00:00:10.326 TCP 23.104.0.1:34318 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:41:17.839 00:06:00.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 01:41:17.836 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 01:46:12.569 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40994 10 6452 1 2025-08-26 01:46:30.778 00:00:10.378 TCP 23.104.0.1:38722 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:47:12.784 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54514 10 6452 1 2025-08-26 01:47:31.198 00:00:10.365 TCP 23.104.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:48:12.955 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40288 12 6556 1 2025-08-26 01:48:32.364 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 01:48:32.561 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 01:48:31.602 00:00:10.363 TCP 23.104.0.1:60166 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:49:13.192 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52212 10 6452 1 2025-08-26 01:49:32.003 00:00:10.320 TCP 23.104.0.1:55994 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:50:13.363 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32852 10 6452 1 2025-08-26 01:50:32.362 00:00:10.602 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 13 1611 1 2025-08-26 01:51:13.581 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46896 10 6452 1 2025-08-26 01:51:33.004 00:00:10.358 TCP 23.104.0.1:55860 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:52:13.797 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42248 10 6452 1 2025-08-26 01:52:33.409 00:00:10.362 TCP 23.104.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:48:17.837 00:06:00.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 01:48:17.840 00:06:00.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 01:53:14.022 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40750 10 6452 1 2025-08-26 01:53:32.543 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 01:53:32.770 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 01:53:33.811 00:00:10.363 TCP 23.104.0.1:54878 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:54:14.239 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:49808 10 6452 1 2025-08-26 01:54:34.214 00:00:10.367 TCP 23.104.0.1:60610 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:55:14.437 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35036 10 6452 1 2025-08-26 01:55:34.619 00:00:10.361 TCP 23.104.0.1:49376 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:56:14.612 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47282 10 6452 1 2025-08-26 01:56:35.020 00:00:10.372 TCP 23.104.0.1:37796 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:57:14.846 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49576 10 6452 1 2025-08-26 01:57:35.429 00:00:10.368 TCP 23.104.0.1:36752 -> 1.101.0.1:3000 11 1507 1 2025-08-26 01:58:15.026 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39344 10 6452 1 2025-08-26 01:58:32.598 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 01:58:32.786 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 01:58:35.834 00:00:10.395 TCP 23.104.0.1:45322 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 497572, total packets: 1560, avg bps: 1110, avg pps: 0, avg bpp: 318 Time window: 2025-08-26 00:59:01 - 2025-08-26 01:58:46 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0038s User: 0.0009s Wall: 0.0019s flows/second: 84658.6 Runtime: 0.0019s