Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-27 17:59:03.435 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59974 10 6452 1 2025-08-27 17:59:21.359 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 17:59:21.166 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 17:54:19.047 00:06:00.223 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 17:59:14.202 00:00:10.327 TCP 23.104.0.1:41356 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:00:03.652 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 10 6452 1 2025-08-27 18:00:14.566 00:00:10.363 TCP 23.104.0.1:54462 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:01:03.864 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53894 10 6452 1 2025-08-27 18:01:14.967 00:00:10.378 TCP 23.104.0.1:38746 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:02:04.074 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58472 10 6452 1 2025-08-27 18:02:15.385 00:00:10.365 TCP 23.104.0.1:34930 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:03:04.286 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58430 10 6452 1 2025-08-27 18:03:15.792 00:00:10.359 TCP 23.104.0.1:34942 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:04:21.199 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 18:04:04.501 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46468 10 6452 1 2025-08-27 18:04:21.268 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 18:04:16.195 00:00:10.359 TCP 23.104.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:05:04.713 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38714 10 6452 1 2025-08-27 18:00:19.053 00:06:00.222 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 18:05:16.589 00:00:10.365 TCP 23.104.0.1:56036 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:06:04.921 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51348 10 6452 1 2025-08-27 18:01:19.056 00:06:00.216 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 18:06:16.989 00:00:10.327 TCP 23.104.0.1:57082 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:07:05.150 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58032 10 6452 1 2025-08-27 18:07:17.356 00:00:10.322 TCP 23.104.0.1:37892 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:08:05.372 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33972 10 6452 1 2025-08-27 18:08:17.715 00:00:10.373 TCP 23.104.0.1:45366 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:09:05.597 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46708 10 6452 1 2025-08-27 18:09:21.432 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 18:09:21.442 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 18:09:18.130 00:00:10.367 TCP 23.104.0.1:58510 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:10:05.818 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58598 10 6452 1 2025-08-27 18:10:18.540 00:00:10.365 TCP 23.104.0.1:44420 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:11:06.041 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33862 10 6452 1 2025-08-27 18:11:18.950 00:00:10.327 TCP 23.104.0.1:53598 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:12:06.258 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48810 10 6452 1 2025-08-27 18:07:19.058 00:06:00.225 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 18:12:19.311 00:00:10.366 TCP 23.104.0.1:49076 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:13:06.474 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53850 10 6452 1 2025-08-27 18:08:19.060 00:06:00.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 18:13:19.716 00:00:10.369 TCP 23.104.0.1:51232 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:14:06.694 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33600 10 6452 1 2025-08-27 18:14:21.414 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 18:14:21.347 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 18:14:20.126 00:00:10.328 TCP 23.104.0.1:60828 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:15:06.919 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46944 10 6452 1 2025-08-27 18:15:20.491 00:00:10.370 TCP 23.104.0.1:33092 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:16:07.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50330 10 6452 1 2025-08-27 18:16:20.903 00:00:10.327 TCP 23.104.0.1:57906 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:17:07.341 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:59070 12 10367 1 2025-08-27 18:17:21.263 00:00:10.445 TCP 23.104.0.1:32904 -> 1.101.0.1:3000 15 1926 1 2025-08-27 18:18:07.584 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38802 10 6452 1 2025-08-27 18:18:21.747 00:00:10.388 TCP 23.104.0.1:35680 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:19:07.752 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33740 10 6452 1 2025-08-27 18:19:21.775 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 18:14:19.059 00:06:00.228 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 18:19:21.455 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 18:19:22.174 00:00:10.333 TCP 23.104.0.1:44118 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:15:19.062 00:06:00.222 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 18:20:07.977 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35190 10 6452 1 2025-08-27 18:20:22.545 00:00:10.366 TCP 23.104.0.1:51174 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:21:08.199 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57240 10 6452 1 2025-08-27 18:21:22.949 00:00:10.330 TCP 23.104.0.1:41154 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:22:08.376 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52704 10 6452 1 2025-08-27 18:22:23.310 00:00:10.371 TCP 23.104.0.1:50594 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:23:08.591 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35416 10 6452 1 2025-08-27 18:23:23.721 00:00:10.376 TCP 23.104.0.1:34700 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:24:08.801 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53988 10 6452 1 2025-08-27 18:24:21.714 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 18:24:21.654 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 18:24:24.140 00:00:10.367 TCP 23.104.0.1:59914 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:25:09.032 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40066 10 6452 1 2025-08-27 18:25:24.545 00:00:10.367 TCP 23.104.0.1:44312 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:26:09.204 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55376 10 6452 1 2025-08-27 18:21:19.061 00:06:00.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 18:26:24.954 00:00:10.378 TCP 23.104.0.1:37098 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:22:19.072 00:06:00.214 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 18:27:09.419 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52980 10 6452 1 2025-08-27 18:27:25.380 00:00:10.324 TCP 23.104.0.1:52154 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:28:09.633 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49310 10 6452 1 2025-08-27 18:28:25.743 00:00:10.365 TCP 23.104.0.1:35892 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:29:09.850 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58774 12 6556 1 2025-08-27 18:29:21.711 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 18:29:21.815 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 18:29:26.146 00:00:10.528 TCP 23.104.0.1:53250 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:30:10.084 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38880 10 6452 1 2025-08-27 18:30:26.714 00:00:10.371 TCP 23.104.0.1:40744 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:31:10.291 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41614 10 6452 1 2025-08-27 18:31:27.124 00:00:10.326 TCP 23.104.0.1:47908 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:32:10.511 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59540 10 6452 1 2025-08-27 18:32:27.489 00:00:10.362 TCP 23.104.0.1:59666 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:33:10.725 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40446 10 6452 1 2025-08-27 18:28:19.082 00:06:00.215 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 18:33:27.888 00:00:10.339 TCP 23.104.0.1:38990 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:34:21.803 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 18:34:10.943 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:34420 10 6452 1 2025-08-27 18:34:21.675 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 18:29:19.085 00:06:00.209 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 18:34:28.262 00:00:10.367 TCP 23.104.0.1:60030 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:35:11.136 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56190 10 6452 1 2025-08-27 18:35:28.666 00:00:10.365 TCP 23.104.0.1:42684 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:36:11.351 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35212 10 6452 1 2025-08-27 18:36:29.101 00:00:10.363 TCP 23.104.0.1:45132 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:37:11.568 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45292 10 6452 1 2025-08-27 18:37:29.500 00:00:10.324 TCP 23.104.0.1:57054 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:38:11.757 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38672 10 6452 1 2025-08-27 18:38:29.864 00:00:10.373 TCP 23.104.0.1:33256 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:39:21.852 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 18:39:11.974 00:00:10.821 TCP 1.101.0.1:3000 -> 22.102.0.1:47218 10 6452 1 2025-08-27 18:39:21.980 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 18:39:30.275 00:00:10.362 TCP 23.104.0.1:36058 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:35:19.084 00:06:00.215 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 18:40:12.828 00:00:10.318 TCP 1.101.0.1:3000 -> 22.102.0.1:58302 10 6452 1 2025-08-27 18:40:30.676 00:00:10.398 TCP 23.104.0.1:58338 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:36:19.085 00:06:00.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 18:41:13.186 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41532 10 6452 1 2025-08-27 18:41:31.131 00:00:10.370 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:42:13.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35998 10 6452 1 2025-08-27 18:42:31.535 00:00:10.364 TCP 23.104.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:43:13.619 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38006 10 6452 1 2025-08-27 18:43:31.937 00:00:10.333 TCP 23.104.0.1:52622 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:44:13.832 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40446 10 6452 1 2025-08-27 18:44:22.312 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 18:44:22.399 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 18:44:32.314 00:00:10.371 TCP 23.104.0.1:48008 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:45:14.075 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60764 10 6452 1 2025-08-27 18:45:32.723 00:00:10.335 TCP 23.104.0.1:55854 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:46:14.286 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38620 10 6452 1 2025-08-27 18:46:33.107 00:00:10.363 TCP 23.104.0.1:48768 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:42:19.085 00:06:00.220 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 18:47:14.459 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40634 10 6452 1 2025-08-27 18:47:33.506 00:00:10.366 TCP 23.104.0.1:45918 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:43:19.088 00:06:00.215 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 18:48:14.673 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34152 10 6452 1 2025-08-27 18:48:33.911 00:00:10.327 TCP 23.104.0.1:59952 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:49:14.883 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47406 10 6452 1 2025-08-27 18:49:22.014 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 18:49:22.242 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 18:49:34.278 00:00:10.362 TCP 23.104.0.1:36078 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:50:15.116 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45348 10 6452 1 2025-08-27 18:50:34.680 00:00:10.383 TCP 23.104.0.1:43352 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:51:15.332 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36852 10 6452 1 2025-08-27 18:51:35.098 00:00:10.363 TCP 23.104.0.1:59476 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:52:15.543 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:47990 10 6452 1 2025-08-27 18:52:35.499 00:00:10.441 TCP 23.104.0.1:57252 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:53:15.785 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34892 10 6452 1 2025-08-27 18:53:35.994 00:00:10.320 TCP 23.104.0.1:35692 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:49:19.088 00:06:00.220 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 18:54:22.614 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 18:54:15.998 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53512 10 6452 1 2025-08-27 18:54:22.467 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 18:54:36.352 00:00:10.516 TCP 23.104.0.1:50390 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:50:19.091 00:06:00.215 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 18:55:16.209 00:00:10.866 TCP 1.101.0.1:3000 -> 22.102.0.1:35242 10 6452 1 2025-08-27 18:55:36.907 00:00:10.366 TCP 23.104.0.1:57274 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:56:17.109 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41898 10 6452 1 2025-08-27 18:56:37.304 00:00:10.361 TCP 23.104.0.1:54836 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:57:17.323 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48704 10 6452 1 2025-08-27 18:57:37.702 00:00:10.362 TCP 23.104.0.1:52854 -> 1.101.0.1:3000 11 1507 1 2025-08-27 18:58:17.525 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59220 10 6452 1 2025-08-27 18:58:38.102 00:00:10.326 TCP 23.104.0.1:39494 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 502663, total packets: 1578, avg bps: 1039, avg pps: 0, avg bpp: 318 Time window: 2025-08-27 17:54:19 - 2025-08-27 18:58:48 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0033s User: 0.0022s Wall: 0.0029s flows/second: 56254.8 Runtime: 0.0029s