Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 03:58:52.661 00:00:10.325 TCP 23.104.0.1:58550 -> 1.101.0.1:3000 11 1507 1 2025-08-03 03:59:41.623 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35680 10 6452 1 2025-08-03 03:59:53.027 00:00:10.369 TCP 23.104.0.1:38150 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:00:41.851 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:48962 10 6452 1 2025-08-03 04:00:53.433 00:00:10.370 TCP 23.104.0.1:40966 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:01:42.095 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46764 10 6452 1 2025-08-03 04:01:53.839 00:00:10.386 TCP 23.104.0.1:50934 -> 1.101.0.1:3000 11 1507 1 2025-08-03 03:57:05.555 00:06:00.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 03:57:05.553 00:06:00.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 04:02:30.993 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 04:02:30.806 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 04:02:42.322 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44450 10 6452 1 2025-08-03 04:02:54.263 00:00:10.369 TCP 23.104.0.1:37424 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:03:42.566 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:53702 12 10365 1 2025-08-03 04:03:54.667 00:00:10.437 TCP 23.104.0.1:54508 -> 1.101.0.1:3000 15 1926 1 2025-08-03 04:04:42.763 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44560 10 6452 1 2025-08-03 04:04:55.144 00:00:10.322 TCP 23.104.0.1:45186 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:05:42.972 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:42620 10 6452 1 2025-08-03 04:05:55.504 00:00:10.368 TCP 23.104.0.1:37040 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:06:43.160 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37654 10 6452 1 2025-08-03 04:06:55.910 00:00:10.377 TCP 23.104.0.1:43382 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:07:30.964 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 04:07:30.897 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 04:07:43.378 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36196 10 6452 1 2025-08-03 04:07:56.328 00:00:10.365 TCP 23.104.0.1:51828 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:08:43.591 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41354 10 6452 1 2025-08-03 04:04:05.557 00:06:00.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 04:04:05.555 00:06:00.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 04:08:56.738 00:00:10.369 TCP 23.104.0.1:50782 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:09:43.811 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58432 10 6452 1 2025-08-03 04:09:57.143 00:00:10.378 TCP 23.104.0.1:53050 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:10:44.063 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58344 10 6452 1 2025-08-03 04:10:57.561 00:00:10.366 TCP 23.104.0.1:56132 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:11:44.285 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:35626 10 6452 1 2025-08-03 04:11:57.969 00:00:10.370 TCP 23.104.0.1:52704 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:12:31.081 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 04:12:31.251 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 04:12:44.454 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47256 10 6452 1 2025-08-03 04:12:58.382 00:00:10.325 TCP 23.104.0.1:39882 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:13:44.676 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57300 10 6452 1 2025-08-03 04:13:58.744 00:00:10.321 TCP 23.104.0.1:53642 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:14:44.894 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57914 10 6452 1 2025-08-03 04:14:59.108 00:00:10.364 TCP 23.104.0.1:53388 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:15:45.111 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59566 10 6452 1 2025-08-03 04:11:05.556 00:06:00.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 04:11:05.559 00:06:00.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 04:15:59.513 00:00:10.327 TCP 23.104.0.1:34602 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:16:45.339 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45522 10 6452 1 2025-08-03 04:16:59.893 00:00:10.368 TCP 23.104.0.1:47102 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:17:31.339 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 04:17:31.259 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 04:17:45.560 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6452 1 2025-08-03 04:18:00.305 00:00:10.363 TCP 23.104.0.1:52722 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:18:45.781 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42086 10 6452 1 2025-08-03 04:19:00.714 00:00:10.390 TCP 23.104.0.1:34286 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:19:46.007 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45686 10 6452 1 2025-08-03 04:20:01.138 00:00:10.364 TCP 23.104.0.1:57426 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:20:46.182 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58246 10 6452 1 2025-08-03 04:21:01.540 00:00:10.371 TCP 23.104.0.1:56348 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:21:46.395 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42882 10 6452 1 2025-08-03 04:22:01.949 00:00:10.325 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:22:31.255 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 04:22:31.325 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 04:22:46.620 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50378 10 6452 1 2025-08-03 04:18:05.557 00:06:00.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 04:18:05.559 00:06:00.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 04:23:02.315 00:00:10.365 TCP 23.104.0.1:52578 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:23:46.841 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45718 10 6452 1 2025-08-03 04:24:02.721 00:00:10.369 TCP 23.104.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:24:47.032 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34402 10 6452 1 2025-08-03 04:25:03.133 00:00:10.323 TCP 23.104.0.1:52484 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:25:47.247 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59114 10 6452 1 2025-08-03 04:26:03.495 00:00:10.366 TCP 23.104.0.1:34258 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:26:47.473 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52434 10 6452 1 2025-08-03 04:27:03.895 00:00:10.371 TCP 23.104.0.1:45904 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:27:31.385 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 04:27:31.383 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 04:27:47.693 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:42446 10 6452 1 2025-08-03 04:28:04.311 00:00:10.366 TCP 23.104.0.1:34478 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:28:47.908 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55054 10 6452 1 2025-08-03 04:29:04.714 00:00:10.361 TCP 23.104.0.1:34130 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:29:48.140 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52528 10 6452 1 2025-08-03 04:25:05.570 00:06:00.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 04:25:05.572 00:06:00.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 04:30:05.114 00:00:10.322 TCP 23.104.0.1:47514 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:30:48.312 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54106 10 6452 1 2025-08-03 04:31:05.476 00:00:10.371 TCP 23.104.0.1:53384 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:31:48.532 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46802 10 6452 1 2025-08-03 04:32:05.880 00:00:10.387 TCP 23.104.0.1:49940 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:32:31.555 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 04:32:31.537 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 04:32:48.743 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37066 10 6452 1 2025-08-03 04:33:06.307 00:00:10.364 TCP 23.104.0.1:45888 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:33:48.959 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 12 10367 1 2025-08-03 04:34:06.709 00:00:10.437 TCP 23.104.0.1:49614 -> 1.101.0.1:3000 15 1926 1 2025-08-03 04:34:49.220 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35044 10 6452 1 2025-08-03 04:35:07.189 00:00:10.367 TCP 23.104.0.1:40130 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:35:49.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33366 10 6452 1 2025-08-03 04:36:07.594 00:00:10.362 TCP 23.104.0.1:39300 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:36:49.610 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56444 10 6452 1 2025-08-03 04:32:05.574 00:06:00.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 04:32:05.575 00:06:00.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 04:37:08.003 00:00:10.359 TCP 23.104.0.1:41746 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:37:31.544 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 04:37:31.613 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 04:37:49.830 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40424 10 6452 1 2025-08-03 04:38:08.401 00:00:10.366 TCP 23.104.0.1:54342 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:38:50.070 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36102 10 6452 1 2025-08-03 04:39:08.808 00:00:10.362 TCP 23.104.0.1:60340 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:39:50.288 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38306 10 6452 1 2025-08-03 04:40:09.207 00:00:10.375 TCP 23.104.0.1:52936 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:40:50.511 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58482 10 6452 1 2025-08-03 04:41:09.622 00:00:10.366 TCP 23.104.0.1:53330 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:41:50.734 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42484 10 6452 1 2025-08-03 04:42:10.028 00:00:10.369 TCP 23.104.0.1:45200 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:42:31.791 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 04:42:31.913 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 04:42:50.950 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:34810 10 6452 1 2025-08-03 04:43:10.444 00:00:10.360 TCP 23.104.0.1:33716 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:43:51.187 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48306 10 6452 1 2025-08-03 04:39:05.575 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 04:39:05.572 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 04:44:10.846 00:00:10.382 TCP 23.104.0.1:52148 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:44:51.403 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51618 10 6452 1 2025-08-03 04:45:11.269 00:00:10.370 TCP 23.104.0.1:56066 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:45:51.626 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57794 10 6452 1 2025-08-03 04:46:11.676 00:00:10.361 TCP 23.104.0.1:48746 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:46:51.843 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53650 10 6452 1 2025-08-03 04:47:12.100 00:00:10.363 TCP 23.104.0.1:40720 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:47:31.686 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 04:47:31.840 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 04:47:52.077 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48414 10 6452 1 2025-08-03 04:48:12.506 00:00:10.339 TCP 23.104.0.1:49510 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:48:52.296 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49808 10 6452 1 2025-08-03 04:49:12.885 00:00:10.371 TCP 23.104.0.1:46814 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:49:52.509 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53738 10 6452 1 2025-08-03 04:50:13.295 00:00:10.366 TCP 23.104.0.1:40770 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:46:05.577 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 04:50:52.725 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37346 10 6452 1 2025-08-03 04:46:05.575 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 04:51:13.701 00:00:10.364 TCP 23.104.0.1:54912 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:51:52.932 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:39128 10 6452 1 2025-08-03 04:52:14.106 00:00:10.367 TCP 23.104.0.1:42572 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:52:32.586 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 04:52:32.791 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 04:52:53.126 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60398 10 6452 1 2025-08-03 04:53:14.513 00:00:10.358 TCP 23.104.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:53:53.339 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:53328 12 10367 1 2025-08-03 04:54:14.910 00:00:10.438 TCP 23.104.0.1:48760 -> 1.101.0.1:3000 15 1926 1 2025-08-03 04:54:53.578 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42682 10 6452 1 2025-08-03 04:55:15.392 00:00:10.369 TCP 23.104.0.1:52080 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:55:53.797 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56778 10 6452 1 2025-08-03 04:56:15.793 00:00:10.367 TCP 23.104.0.1:44862 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:56:54.014 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43078 10 6452 1 2025-08-03 04:57:16.201 00:00:10.365 TCP 23.104.0.1:53382 -> 1.101.0.1:3000 11 1507 1 2025-08-03 04:57:32.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 04:57:32.162 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 04:53:05.577 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 04:57:54.250 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51418 10 6452 1 2025-08-03 04:53:05.576 00:06:00.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 04:58:16.602 00:00:10.368 TCP 23.104.0.1:42042 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 505634, total packets: 1592, avg bps: 1087, avg pps: 0, avg bpp: 317 Time window: 2025-08-03 03:57:05 - 2025-08-03 04:59:05 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0025s User: 0.0013s Wall: 0.0021s flows/second: 78384.6 Runtime: 0.0021s