Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 01:59:03.618 00:00:10.358 TCP 23.104.0.1:34180 -> 1.101.0.1:3000 11 1507 1 2025-08-03 01:59:16.141 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52104 10 6452 1 2025-08-03 02:00:04.015 00:00:10.359 TCP 23.104.0.1:33522 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:00:16.354 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59022 10 6452 1 2025-08-03 02:01:04.408 00:00:10.364 TCP 23.104.0.1:55820 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:01:16.567 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57810 10 6452 1 2025-08-03 02:02:04.814 00:00:10.367 TCP 23.104.0.1:33190 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:02:16.777 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58642 10 6452 1 2025-08-03 02:02:28.552 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 02:02:28.576 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 01:58:05.529 00:06:00.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 01:58:05.528 00:06:00.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 02:03:05.225 00:00:10.324 TCP 23.104.0.1:54086 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:03:16.995 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36572 10 6452 1 2025-08-03 02:04:05.585 00:00:10.366 TCP 23.104.0.1:37794 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:04:17.167 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37986 10 6452 1 2025-08-03 02:05:05.988 00:00:10.328 TCP 23.104.0.1:55816 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:05:17.386 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6452 1 2025-08-03 02:06:06.355 00:00:10.391 TCP 23.104.0.1:33928 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:06:17.607 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45144 10 6452 1 2025-08-03 02:07:06.807 00:00:10.373 TCP 23.104.0.1:53172 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:07:28.606 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 02:07:17.814 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58116 10 6452 1 2025-08-03 02:07:28.732 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 02:08:07.220 00:00:10.379 TCP 23.104.0.1:32998 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:08:18.037 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57432 10 6452 1 2025-08-03 02:09:07.652 00:00:10.367 TCP 23.104.0.1:50494 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:09:18.268 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49174 10 6452 1 2025-08-03 02:05:05.519 00:06:00.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 02:05:05.522 00:06:00.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 02:10:08.067 00:00:10.365 TCP 23.104.0.1:45626 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:10:18.438 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50480 10 6452 1 2025-08-03 02:11:08.467 00:00:10.358 TCP 23.104.0.1:55004 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:11:18.651 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35390 10 6452 1 2025-08-03 02:12:08.865 00:00:10.364 TCP 23.104.0.1:39502 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:12:28.611 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 02:12:18.862 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40790 10 6452 1 2025-08-03 02:12:28.714 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 02:13:09.272 00:00:10.370 TCP 23.104.0.1:37530 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:13:19.086 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40290 10 6452 1 2025-08-03 02:14:09.680 00:00:10.462 TCP 23.104.0.1:59680 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:14:19.261 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47508 10 6452 1 2025-08-03 02:15:10.183 00:00:10.367 TCP 23.104.0.1:44744 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:15:19.435 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56612 10 6452 1 2025-08-03 02:16:10.585 00:00:10.363 TCP 23.104.0.1:46496 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:16:19.653 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56464 10 6452 1 2025-08-03 02:12:05.525 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 02:12:05.524 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 02:17:11.006 00:00:10.364 TCP 23.104.0.1:46002 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:17:19.890 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47164 10 6452 1 2025-08-03 02:17:28.891 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 02:17:28.852 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 02:18:11.404 00:00:10.356 TCP 23.104.0.1:54880 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:18:20.129 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46760 10 6452 1 2025-08-03 02:19:11.810 00:00:10.366 TCP 23.104.0.1:36990 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:19:20.342 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59796 10 6452 1 2025-08-03 02:20:12.215 00:00:10.367 TCP 23.104.0.1:35272 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:20:20.560 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44866 10 6452 1 2025-08-03 02:21:12.630 00:00:10.363 TCP 23.104.0.1:32788 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:21:20.767 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54526 10 6452 1 2025-08-03 02:22:13.035 00:00:10.415 TCP 23.104.0.1:34502 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:22:29.287 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 02:22:29.526 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 02:22:20.981 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41426 10 6452 1 2025-08-03 02:23:13.491 00:00:10.362 TCP 23.104.0.1:40152 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:23:21.219 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:60402 12 10367 1 2025-08-03 02:19:05.525 00:06:00.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 02:19:05.526 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 02:24:13.893 00:00:10.448 TCP 23.104.0.1:38318 -> 1.101.0.1:3000 15 1926 1 2025-08-03 02:24:21.464 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60086 10 6452 1 2025-08-03 02:25:14.380 00:00:10.366 TCP 23.104.0.1:49058 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:25:21.637 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36196 10 6452 1 2025-08-03 02:26:14.787 00:00:10.369 TCP 23.104.0.1:32816 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:26:21.845 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33216 10 6452 1 2025-08-03 02:27:15.196 00:00:10.500 TCP 23.104.0.1:50256 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:27:28.981 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 02:27:29.051 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 02:27:22.030 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52064 10 6452 1 2025-08-03 02:28:15.736 00:00:10.327 TCP 23.104.0.1:51090 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:28:22.242 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55806 10 6452 1 2025-08-03 02:29:16.105 00:00:10.367 TCP 23.104.0.1:51730 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:29:22.417 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56958 10 6452 1 2025-08-03 02:30:16.514 00:00:10.336 TCP 23.104.0.1:33900 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:30:22.639 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33016 10 6452 1 2025-08-03 02:26:05.525 00:06:00.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 02:26:05.528 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 02:31:16.890 00:00:10.368 TCP 23.104.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:31:22.853 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44306 10 6452 1 2025-08-03 02:32:29.107 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 02:32:29.187 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 02:32:17.297 00:00:10.376 TCP 23.104.0.1:59692 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:32:23.077 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60894 10 6452 1 2025-08-03 02:33:17.709 00:00:10.360 TCP 23.104.0.1:51540 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:33:23.250 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-08-03 02:34:18.109 00:00:10.362 TCP 23.104.0.1:52802 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:34:23.461 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49476 10 6452 1 2025-08-03 02:35:18.510 00:00:10.366 TCP 23.104.0.1:34418 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:35:23.674 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56720 10 6452 1 2025-08-03 02:36:18.914 00:00:10.367 TCP 23.104.0.1:36816 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:36:23.888 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60750 10 6452 1 2025-08-03 02:37:29.337 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 02:37:19.317 00:00:10.371 TCP 23.104.0.1:60140 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:37:29.299 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 02:37:24.103 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38878 10 6452 1 2025-08-03 02:33:05.532 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 02:33:05.534 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 02:38:19.722 00:00:10.371 TCP 23.104.0.1:38016 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:38:24.319 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40182 10 6452 1 2025-08-03 02:39:20.138 00:00:10.373 TCP 23.104.0.1:39786 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:39:24.529 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45284 10 6452 1 2025-08-03 02:40:20.554 00:00:10.367 TCP 23.104.0.1:48622 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:40:24.744 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54840 10 6452 1 2025-08-03 02:41:20.963 00:00:10.328 TCP 23.104.0.1:33398 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:41:24.952 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:59704 10 6452 1 2025-08-03 02:42:29.345 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 02:42:21.333 00:00:10.375 TCP 23.104.0.1:52012 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:42:29.300 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 02:42:25.148 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52112 10 6452 1 2025-08-03 02:43:25.363 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34304 10 6452 1 2025-08-03 02:43:21.747 00:00:10.321 TCP 23.104.0.1:60984 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:44:25.588 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36952 12 6556 1 2025-08-03 02:44:22.109 00:00:10.322 TCP 23.104.0.1:33508 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:40:05.531 00:06:00.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 02:40:05.535 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 02:45:25.820 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:40172 10 6452 1 2025-08-03 02:45:22.474 00:00:10.362 TCP 23.104.0.1:53860 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:46:26.106 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41578 10 6452 1 2025-08-03 02:46:22.878 00:00:10.367 TCP 23.104.0.1:37782 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:47:29.707 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 02:47:23.285 00:00:10.425 TCP 23.104.0.1:36890 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:47:29.544 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 02:47:26.320 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56944 10 6452 1 2025-08-03 02:48:23.751 00:00:10.386 TCP 23.104.0.1:38596 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:48:26.494 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40970 10 6452 1 2025-08-03 02:49:24.174 00:00:10.365 TCP 23.104.0.1:51252 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:49:26.708 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59496 10 6452 1 2025-08-03 02:50:24.575 00:00:10.372 TCP 23.104.0.1:33296 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:50:26.923 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54128 10 6452 1 2025-08-03 02:51:24.983 00:00:10.373 TCP 23.104.0.1:53634 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:51:27.134 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35208 10 6452 1 2025-08-03 02:47:05.536 00:06:00.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 02:47:05.538 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 02:52:29.559 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 02:52:29.548 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 02:52:25.388 00:00:10.365 TCP 23.104.0.1:49430 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:52:27.345 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39814 10 6452 1 2025-08-03 02:53:25.801 00:00:10.364 TCP 23.104.0.1:48096 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:53:27.562 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59594 10 6452 1 2025-08-03 02:54:26.207 00:00:10.369 TCP 23.104.0.1:43326 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:54:27.770 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57178 10 6452 1 2025-08-03 02:55:26.616 00:00:10.323 TCP 23.104.0.1:35962 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:55:27.978 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:50258 10 6452 1 2025-08-03 02:56:26.979 00:00:10.366 TCP 23.104.0.1:57424 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:56:28.214 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39028 10 6452 1 2025-08-03 02:57:29.777 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 02:57:29.567 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 02:57:27.379 00:00:10.325 TCP 23.104.0.1:42278 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:57:28.428 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:46882 10 6452 1 2025-08-03 02:58:27.743 00:00:10.397 TCP 23.104.0.1:58018 -> 1.101.0.1:3000 11 1507 1 2025-08-03 02:58:28.605 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:60456 11 6504 1 Summary: total flows: 160, total bytes: 501854, total packets: 1565, avg bps: 1105, avg pps: 0, avg bpp: 320 Time window: 2025-08-03 01:58:05 - 2025-08-03 02:58:38 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0018s User: 0.0027s Wall: 0.0023s flows/second: 68702.8 Runtime: 0.0024s