Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 17:58:51.498 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50384 10 6452 1 2025-08-28 17:59:20.951 00:00:10.322 TCP 23.104.0.1:38968 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:59:49.955 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 17:59:49.923 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 17:59:51.711 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49082 10 6452 1 2025-08-28 17:55:19.804 00:06:00.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 18:00:21.311 00:00:10.363 TCP 23.104.0.1:46152 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:00:51.930 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42104 10 6452 1 2025-08-28 17:56:19.805 00:06:00.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 18:01:21.720 00:00:10.374 TCP 23.104.0.1:37212 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:01:52.142 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44088 10 6452 1 2025-08-28 18:02:22.134 00:00:10.327 TCP 23.104.0.1:41698 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:02:52.357 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52868 10 6452 1 2025-08-28 18:03:22.500 00:00:10.370 TCP 23.104.0.1:51002 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:03:52.567 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42346 10 6452 1 2025-08-28 18:04:22.908 00:00:10.366 TCP 23.104.0.1:42942 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:04:50.175 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 18:04:50.244 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 18:04:52.777 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52478 10 6452 1 2025-08-28 18:05:23.312 00:00:10.367 TCP 23.104.0.1:59260 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:05:52.994 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57184 10 6452 1 2025-08-28 18:06:23.715 00:00:10.364 TCP 23.104.0.1:56094 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:06:53.218 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41154 10 6452 1 2025-08-28 18:02:19.810 00:06:00.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 18:07:24.116 00:00:10.362 TCP 23.104.0.1:33728 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:07:53.437 00:00:10.495 TCP 1.101.0.1:3000 -> 22.102.0.1:38360 10 6452 1 2025-08-28 18:03:19.813 00:06:00.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 18:08:24.528 00:00:10.733 TCP 23.104.0.1:58830 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:08:53.970 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:46290 10 6452 1 2025-08-28 18:09:25.297 00:00:10.325 TCP 23.104.0.1:44428 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:09:50.416 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 18:09:50.438 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 18:09:54.214 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35482 10 6452 1 2025-08-28 18:10:25.665 00:00:10.368 TCP 23.104.0.1:59902 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:10:54.426 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40686 10 6452 1 2025-08-28 18:11:26.100 00:00:10.371 TCP 23.104.0.1:35992 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:11:54.635 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38160 10 6452 1 2025-08-28 18:12:26.505 00:00:10.364 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:12:54.849 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35452 10 6452 1 2025-08-28 18:13:26.911 00:00:10.322 TCP 23.104.0.1:55366 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:13:55.081 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57114 10 6452 1 2025-08-28 18:09:19.812 00:06:00.127 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 18:14:27.271 00:00:10.377 TCP 23.104.0.1:34204 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:14:50.335 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 18:14:50.470 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 18:14:55.271 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58312 10 6452 1 2025-08-28 18:10:19.815 00:06:00.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 18:15:27.690 00:00:10.373 TCP 23.104.0.1:54558 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:15:55.486 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49530 10 6452 1 2025-08-28 18:16:28.108 00:00:10.368 TCP 23.104.0.1:41636 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:16:55.713 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56330 10 6452 1 2025-08-28 18:17:28.513 00:00:10.368 TCP 23.104.0.1:47458 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:17:55.927 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60412 10 6452 1 2025-08-28 18:18:28.919 00:00:10.349 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:18:56.159 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53622 10 6452 1 2025-08-28 18:19:29.308 00:00:10.362 TCP 23.104.0.1:45654 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:19:50.550 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 18:19:50.496 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 18:19:56.377 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40332 10 6452 1 2025-08-28 18:20:29.709 00:00:10.367 TCP 23.104.0.1:59048 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:20:56.585 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59022 10 6452 1 2025-08-28 18:16:19.819 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 18:21:30.145 00:00:10.373 TCP 23.104.0.1:33240 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:21:56.793 00:00:11.632 TCP 1.101.0.1:3000 -> 22.102.0.1:53230 10 6452 1 2025-08-28 18:17:19.824 00:06:00.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 18:22:30.548 00:00:10.334 TCP 23.104.0.1:59794 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:22:58.462 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39360 10 6452 1 2025-08-28 18:23:30.920 00:00:10.389 TCP 23.104.0.1:51930 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:23:58.676 00:00:10.303 TCP 1.101.0.1:3000 -> 22.102.0.1:33466 10 6452 1 2025-08-28 18:24:31.349 00:00:10.367 TCP 23.104.0.1:48504 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:24:50.818 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 18:24:50.849 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 18:24:59.023 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51552 10 6452 1 2025-08-28 18:25:31.755 00:00:10.386 TCP 23.104.0.1:37204 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:25:59.232 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52462 10 6452 1 2025-08-28 18:26:32.184 00:00:10.321 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:26:59.450 00:00:10.808 TCP 1.101.0.1:3000 -> 22.102.0.1:36760 10 6452 1 2025-08-28 18:27:32.549 00:00:10.367 TCP 23.104.0.1:53462 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:28:00.293 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42370 10 6452 1 2025-08-28 18:23:19.821 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 18:28:32.953 00:00:10.332 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:29:00.506 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47260 10 6452 1 2025-08-28 18:24:19.823 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 18:29:33.326 00:00:10.370 TCP 23.104.0.1:55854 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:29:51.383 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 18:29:51.401 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 18:30:00.670 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53818 10 6452 1 2025-08-28 18:30:33.732 00:00:10.371 TCP 23.104.0.1:55554 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:31:00.886 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38146 10 6452 1 2025-08-28 18:31:34.137 00:00:10.369 TCP 23.104.0.1:48290 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:32:01.110 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34894 10 6452 1 2025-08-28 18:32:34.546 00:00:10.368 TCP 23.104.0.1:60318 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:33:01.286 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37468 10 6452 1 2025-08-28 18:33:34.951 00:00:10.368 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:34:01.499 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33390 10 6452 1 2025-08-28 18:34:35.357 00:00:10.365 TCP 23.104.0.1:57920 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:34:50.708 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 18:34:50.693 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 18:35:01.715 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43222 10 6452 1 2025-08-28 18:30:19.823 00:06:00.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 18:35:35.763 00:00:10.331 TCP 23.104.0.1:59742 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:36:01.932 00:00:10.421 TCP 1.101.0.1:3000 -> 22.102.0.1:54578 10 6452 1 2025-08-28 18:31:19.827 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 18:36:36.142 00:00:10.321 TCP 23.104.0.1:35098 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:37:02.390 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57594 10 6452 1 2025-08-28 18:37:36.508 00:00:10.369 TCP 23.104.0.1:46122 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:38:02.609 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6452 1 2025-08-28 18:38:36.912 00:00:10.362 TCP 23.104.0.1:49768 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:39:02.831 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37456 10 6452 1 2025-08-28 18:39:50.821 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 18:39:50.867 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 18:39:37.314 00:00:10.365 TCP 23.104.0.1:60320 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:40:03.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35590 10 6452 1 2025-08-28 18:40:37.720 00:00:10.419 TCP 23.104.0.1:55494 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:41:03.295 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35200 10 6452 1 2025-08-28 18:41:38.125 00:00:10.367 TCP 23.104.0.1:39690 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:42:03.513 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56990 10 6452 1 2025-08-28 18:37:19.830 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 18:42:38.538 00:00:10.383 TCP 23.104.0.1:41428 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:43:03.742 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49616 10 6452 1 2025-08-28 18:38:19.831 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 18:43:38.971 00:00:10.335 TCP 23.104.0.1:45614 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:44:03.967 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:41426 10 6452 1 2025-08-28 18:44:50.804 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 18:44:39.341 00:00:10.323 TCP 23.104.0.1:53170 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:44:50.775 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 18:45:04.201 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47972 10 6452 1 2025-08-28 18:45:39.704 00:00:10.327 TCP 23.104.0.1:43186 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:46:04.414 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59876 10 6452 1 2025-08-28 18:46:40.093 00:00:10.366 TCP 23.104.0.1:34530 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:47:04.588 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59356 10 6452 1 2025-08-28 18:47:40.496 00:00:10.371 TCP 23.104.0.1:43234 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:48:04.808 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38590 10 6452 1 2025-08-28 18:48:40.905 00:00:10.366 TCP 23.104.0.1:54256 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:49:04.985 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49982 10 6452 1 2025-08-28 18:44:19.831 00:06:00.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 18:49:51.234 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 18:49:41.310 00:00:10.361 TCP 23.104.0.1:57534 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:49:51.227 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 18:50:05.213 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47654 10 6452 1 2025-08-28 18:45:19.832 00:06:00.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 18:50:41.711 00:00:10.367 TCP 23.104.0.1:52678 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:51:05.385 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53418 10 6452 1 2025-08-28 18:51:42.114 00:00:10.365 TCP 23.104.0.1:53658 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:52:05.556 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57270 10 6452 1 2025-08-28 18:52:42.525 00:00:10.321 TCP 23.104.0.1:48692 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:53:05.776 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38030 10 6452 1 2025-08-28 18:53:42.888 00:00:10.368 TCP 23.104.0.1:51602 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:54:05.990 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48550 10 6452 1 2025-08-28 18:54:50.841 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 18:54:51.049 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 18:54:43.293 00:00:10.327 TCP 23.104.0.1:51680 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:55:06.228 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:46938 10 6452 1 2025-08-28 18:55:43.661 00:00:10.363 TCP 23.104.0.1:55474 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:56:06.408 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41874 10 6452 1 2025-08-28 18:51:19.835 00:06:00.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 18:56:44.088 00:00:10.363 TCP 23.104.0.1:43592 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:57:06.622 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51940 10 6452 1 2025-08-28 18:52:19.838 00:06:00.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 18:57:44.492 00:00:10.365 TCP 23.104.0.1:55708 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:58:06.830 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6452 1 Summary: total flows: 161, total bytes: 497579, total packets: 1573, avg bps: 1053, avg pps: 0, avg bpp: 316 Time window: 2025-08-28 17:55:19 - 2025-08-28 18:58:19 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0029s User: 0.0019s Wall: 0.0021s flows/second: 75484.3 Runtime: 0.0022s