Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-26 08:58:48.928 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52642 10 6452 1 2025-08-26 08:59:26.905 00:00:10.326 TCP 23.104.0.1:58220 -> 1.101.0.1:3000 11 1507 1 2025-08-26 08:59:49.166 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60100 10 6452 1 2025-08-26 09:00:27.267 00:00:10.362 TCP 23.104.0.1:34922 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:00:49.384 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49802 10 6452 1 2025-08-26 09:01:27.667 00:00:10.324 TCP 23.104.0.1:52812 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:01:49.603 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39388 10 6452 1 2025-08-26 09:02:28.030 00:00:10.369 TCP 23.104.0.1:34140 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:02:49.821 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36808 10 6452 1 2025-08-26 09:03:41.210 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 09:03:28.437 00:00:10.367 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:03:41.325 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 09:03:49.991 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41618 10 6452 1 2025-08-26 08:59:18.121 00:06:00.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 09:04:28.838 00:00:10.387 TCP 23.104.0.1:60622 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:04:50.215 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37896 10 6452 1 2025-08-26 09:00:18.125 00:06:00.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 09:05:29.259 00:00:10.363 TCP 23.104.0.1:48324 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:05:50.420 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54532 10 6452 1 2025-08-26 09:06:29.660 00:00:10.442 TCP 23.104.0.1:49652 -> 1.101.0.1:3000 15 1926 1 2025-08-26 09:06:50.596 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45412 12 10365 1 2025-08-26 09:07:30.142 00:00:10.364 TCP 23.104.0.1:35000 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:07:50.844 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50300 10 6452 1 2025-08-26 09:08:41.552 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 09:08:30.549 00:00:10.362 TCP 23.104.0.1:59250 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:08:41.751 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 09:08:51.083 00:00:11.725 TCP 1.101.0.1:3000 -> 22.102.0.1:46692 10 6452 1 2025-08-26 09:09:30.948 00:00:10.336 TCP 23.104.0.1:48008 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:09:52.856 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53560 10 6452 1 2025-08-26 09:10:31.322 00:00:10.363 TCP 23.104.0.1:58712 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:10:53.098 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53190 10 6452 1 2025-08-26 09:06:18.126 00:06:00.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 09:11:31.725 00:00:10.446 TCP 23.104.0.1:52918 -> 1.101.0.1:3000 15 1926 1 2025-08-26 09:11:53.328 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:51834 12 10367 1 2025-08-26 09:07:18.126 00:06:00.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 09:12:32.210 00:00:10.360 TCP 23.104.0.1:57506 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:12:53.575 00:00:10.910 TCP 1.101.0.1:3000 -> 22.102.0.1:45096 10 6452 1 2025-08-26 09:13:41.205 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 09:13:41.124 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 09:13:32.623 00:00:10.359 TCP 23.104.0.1:58220 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:13:54.530 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45314 10 6452 1 2025-08-26 09:14:33.029 00:00:10.375 TCP 23.104.0.1:47614 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:14:54.752 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36022 10 6452 1 2025-08-26 09:15:33.448 00:00:10.321 TCP 23.104.0.1:52690 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:15:54.976 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:41916 13 6608 1 2025-08-26 09:16:33.810 00:00:10.369 TCP 23.104.0.1:35634 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:16:55.231 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39630 10 6452 1 2025-08-26 09:17:34.221 00:00:10.361 TCP 23.104.0.1:60628 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:17:55.453 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37332 10 6452 1 2025-08-26 09:13:18.123 00:06:00.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 09:18:41.713 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 09:18:41.564 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 09:18:34.620 00:00:10.362 TCP 23.104.0.1:32870 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:18:55.663 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38898 10 6452 1 2025-08-26 09:14:18.125 00:06:00.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 09:19:35.023 00:00:10.325 TCP 23.104.0.1:56878 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:19:55.835 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52992 10 6452 1 2025-08-26 09:20:35.387 00:00:10.358 TCP 23.104.0.1:52088 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:20:56.073 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42732 10 6452 1 2025-08-26 09:21:35.781 00:00:10.365 TCP 23.104.0.1:43268 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:21:56.279 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50262 10 6452 1 2025-08-26 09:22:36.185 00:00:10.363 TCP 23.104.0.1:52398 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:22:56.496 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48718 10 6452 1 2025-08-26 09:23:41.491 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 09:23:41.489 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 09:23:36.588 00:00:10.367 TCP 23.104.0.1:50370 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:23:56.704 00:00:10.705 TCP 1.101.0.1:3000 -> 22.102.0.1:35682 10 6452 1 2025-08-26 09:24:36.994 00:00:10.327 TCP 23.104.0.1:60886 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:24:57.445 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33736 10 6452 1 2025-08-26 09:20:18.124 00:06:00.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 09:25:37.360 00:00:10.365 TCP 23.104.0.1:55030 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:25:57.667 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43680 10 6452 1 2025-08-26 09:21:18.126 00:06:00.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 09:26:37.764 00:00:10.374 TCP 23.104.0.1:51070 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:26:57.875 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49948 10 6452 1 2025-08-26 09:27:38.178 00:00:10.675 TCP 23.104.0.1:38754 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:27:58.102 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57280 10 6452 1 2025-08-26 09:28:41.639 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 09:28:41.893 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 09:28:38.892 00:00:10.377 TCP 23.104.0.1:42662 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:28:58.319 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53684 10 6452 1 2025-08-26 09:29:39.304 00:00:10.324 TCP 23.104.0.1:41358 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:29:58.493 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36212 10 6452 1 2025-08-26 09:30:39.669 00:00:10.364 TCP 23.104.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:30:58.710 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55498 10 6452 1 2025-08-26 09:31:40.097 00:00:10.363 TCP 23.104.0.1:33044 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:31:58.882 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37032 10 6452 1 2025-08-26 09:27:18.140 00:06:00.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 09:32:40.498 00:00:10.375 TCP 23.104.0.1:59226 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:32:59.099 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56138 10 6452 1 2025-08-26 09:28:18.144 00:06:00.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 09:33:41.699 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 09:33:41.861 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 09:33:40.907 00:00:10.368 TCP 23.104.0.1:46474 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:33:59.309 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41298 10 6452 1 2025-08-26 09:34:41.313 00:00:10.320 TCP 23.104.0.1:54932 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:34:59.537 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51406 10 6452 1 2025-08-26 09:35:41.673 00:00:10.331 TCP 23.104.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:35:59.758 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34326 10 6452 1 2025-08-26 09:36:42.050 00:00:10.365 TCP 23.104.0.1:57842 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:36:59.978 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:58090 10 6452 1 2025-08-26 09:37:42.452 00:00:10.372 TCP 23.104.0.1:45698 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:38:00.226 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:44324 10 6452 1 2025-08-26 09:38:41.958 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 09:38:42.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 09:38:42.859 00:00:10.368 TCP 23.104.0.1:43604 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:39:00.407 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39524 10 6452 1 2025-08-26 09:34:18.143 00:06:00.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 09:39:43.264 00:00:10.367 TCP 23.104.0.1:42788 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:40:00.623 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40188 10 6452 1 2025-08-26 09:35:18.146 00:06:00.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 09:40:43.671 00:00:10.363 TCP 23.104.0.1:32876 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:41:00.803 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38300 10 6452 1 2025-08-26 09:41:44.099 00:00:10.366 TCP 23.104.0.1:36354 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:42:01.027 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56052 10 6452 1 2025-08-26 09:42:44.516 00:00:10.370 TCP 23.104.0.1:45306 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:43:01.243 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37272 10 6452 1 2025-08-26 09:43:42.435 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 09:43:42.384 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 09:43:44.917 00:00:10.339 TCP 23.104.0.1:47566 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:44:01.455 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55524 10 6452 1 2025-08-26 09:44:45.295 00:00:10.367 TCP 23.104.0.1:48020 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:45:01.665 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46782 10 6452 1 2025-08-26 09:45:45.708 00:00:10.367 TCP 23.104.0.1:42094 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:46:01.882 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50306 10 6452 1 2025-08-26 09:41:18.155 00:06:00.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 09:46:46.114 00:00:10.367 TCP 23.104.0.1:42946 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:47:02.098 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:47912 10 6452 1 2025-08-26 09:42:18.157 00:06:00.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 09:47:46.517 00:00:10.370 TCP 23.104.0.1:53220 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:48:02.269 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59758 10 6452 1 2025-08-26 09:48:42.051 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 09:48:42.102 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 09:48:46.926 00:00:10.340 TCP 23.104.0.1:33490 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:49:02.480 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46884 10 6452 1 2025-08-26 09:49:47.301 00:00:10.365 TCP 23.104.0.1:55622 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:50:02.697 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52870 10 6452 1 2025-08-26 09:50:47.702 00:00:10.370 TCP 23.104.0.1:53298 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:51:02.912 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36414 10 6452 1 2025-08-26 09:51:48.114 00:00:10.368 TCP 23.104.0.1:47368 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:52:03.122 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41266 10 6452 1 2025-08-26 09:52:48.520 00:00:10.364 TCP 23.104.0.1:34092 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:53:03.295 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54064 10 6452 1 2025-08-26 09:48:18.155 00:06:00.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 09:53:42.290 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 09:53:42.048 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 09:53:48.920 00:00:10.373 TCP 23.104.0.1:45506 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:54:03.504 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56180 10 6452 1 2025-08-26 09:49:18.159 00:06:00.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 09:54:49.332 00:00:10.363 TCP 23.104.0.1:44132 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:55:03.735 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50830 10 6452 1 2025-08-26 09:55:49.737 00:00:10.424 TCP 23.104.0.1:55894 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:56:03.947 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54692 10 6452 1 2025-08-26 09:56:50.205 00:00:10.327 TCP 23.104.0.1:43330 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:57:04.182 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56704 10 6452 1 2025-08-26 09:57:50.568 00:00:10.365 TCP 23.104.0.1:56780 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:58:04.412 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50246 10 6452 1 2025-08-26 09:58:42.281 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 09:58:42.425 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 159, total bytes: 504679, total packets: 1560, avg bps: 1123, avg pps: 0, avg bpp: 323 Time window: 2025-08-26 08:58:48 - 2025-08-26 09:58:42 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0034s User: 0.0017s Wall: 0.0023s flows/second: 69707.8 Runtime: 0.0023s