Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 01:58:49.115 00:00:10.361 TCP 23.104.0.1:34952 -> 1.101.0.1:3000 11 1507 1 2025-08-04 01:59:28.344 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59982 10 6452 1 2025-08-04 01:59:49.517 00:00:10.368 TCP 23.104.0.1:34324 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:00:28.562 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35270 10 6452 1 2025-08-04 02:00:49.922 00:00:10.351 TCP 23.104.0.1:54442 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:01:28.794 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60090 10 6452 1 2025-08-04 02:01:50.313 00:00:10.366 TCP 23.104.0.1:40466 -> 1.101.0.1:3000 11 1507 1 2025-08-04 01:58:05.990 00:05:00.261 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:02:29.025 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41972 10 6452 1 2025-08-04 02:02:57.268 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:02:57.365 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:02:50.717 00:00:10.331 TCP 23.104.0.1:35092 -> 1.101.0.1:3000 11 1507 1 2025-08-04 01:59:05.992 00:05:00.255 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:03:29.238 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41414 10 6452 1 2025-08-04 02:03:51.102 00:00:10.367 TCP 23.104.0.1:59862 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:04:29.407 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36994 10 6452 1 2025-08-04 02:04:51.516 00:00:10.323 TCP 23.104.0.1:50876 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:05:29.627 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44338 10 6452 1 2025-08-04 02:05:51.879 00:00:10.390 TCP 23.104.0.1:49984 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:06:29.842 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45278 10 6452 1 2025-08-04 02:06:52.304 00:00:10.366 TCP 23.104.0.1:42068 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:07:30.081 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33962 10 6452 1 2025-08-04 02:07:57.415 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:07:57.712 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:07:52.711 00:00:10.363 TCP 23.104.0.1:36392 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:04:05.991 00:05:00.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:08:30.302 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42776 10 6452 1 2025-08-04 02:08:53.116 00:00:10.326 TCP 23.104.0.1:33918 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:05:05.994 00:05:00.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:09:30.515 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34012 10 6452 1 2025-08-04 02:09:53.479 00:00:10.364 TCP 23.104.0.1:43966 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:10:30.693 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46478 10 6452 1 2025-08-04 02:10:53.879 00:00:10.395 TCP 23.104.0.1:34860 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:11:30.903 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44452 10 6452 1 2025-08-04 02:11:54.307 00:00:10.373 TCP 23.104.0.1:60838 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:12:31.119 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52922 10 6452 1 2025-08-04 02:12:58.742 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:12:58.363 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:12:54.716 00:00:10.372 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:13:31.337 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36130 10 6452 1 2025-08-04 02:13:55.121 00:00:10.329 TCP 23.104.0.1:53940 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:10:05.991 00:05:00.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:14:31.553 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45598 10 6452 1 2025-08-04 02:14:55.483 00:00:10.368 TCP 23.104.0.1:37440 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:11:05.994 00:05:00.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:15:31.764 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60634 10 6452 1 2025-08-04 02:15:55.877 00:00:10.371 TCP 23.104.0.1:44586 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:16:31.946 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38766 10 6452 1 2025-08-04 02:16:56.285 00:00:10.368 TCP 23.104.0.1:48248 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:17:32.178 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48084 10 6452 1 2025-08-04 02:17:57.729 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:17:57.841 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:17:56.681 00:00:10.366 TCP 23.104.0.1:46876 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:18:32.392 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59918 10 6452 1 2025-08-04 02:18:57.106 00:00:10.361 TCP 23.104.0.1:53894 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:19:32.612 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41248 10 6452 1 2025-08-04 02:16:05.992 00:05:00.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:19:57.505 00:00:10.321 TCP 23.104.0.1:42488 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:20:32.826 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39296 10 6452 1 2025-08-04 02:17:05.996 00:05:00.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:20:57.869 00:00:10.366 TCP 23.104.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:21:33.063 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40738 10 6452 1 2025-08-04 02:21:58.277 00:00:10.365 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:22:33.276 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53770 10 6452 1 2025-08-04 02:22:57.960 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:22:57.754 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:22:58.681 00:00:10.380 TCP 23.104.0.1:33234 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:23:33.496 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55306 10 6452 1 2025-08-04 02:23:59.105 00:00:10.322 TCP 23.104.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:24:33.712 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53436 10 6452 1 2025-08-04 02:24:59.467 00:00:10.360 TCP 23.104.0.1:58220 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:25:33.880 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33322 10 6452 1 2025-08-04 02:22:05.995 00:05:00.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:25:59.876 00:00:10.324 TCP 23.104.0.1:53568 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:26:34.114 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41606 10 6452 1 2025-08-04 02:23:05.998 00:05:00.256 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:27:00.238 00:00:10.371 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:27:34.353 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52128 10 6452 1 2025-08-04 02:27:57.862 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:27:57.906 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:28:00.649 00:00:10.357 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:28:34.567 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38676 10 6452 1 2025-08-04 02:29:01.053 00:00:10.372 TCP 23.104.0.1:50600 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:29:34.789 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36942 10 6452 1 2025-08-04 02:30:01.460 00:00:10.371 TCP 23.104.0.1:49524 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:30:35.002 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37698 10 6452 1 2025-08-04 02:31:01.867 00:00:10.368 TCP 23.104.0.1:41178 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:31:35.215 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45956 10 6452 1 2025-08-04 02:32:02.278 00:00:10.360 TCP 23.104.0.1:43058 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:32:35.427 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35608 10 6452 1 2025-08-04 02:32:58.225 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:32:58.014 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:28:06.002 00:06:00.256 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 02:33:02.677 00:00:10.363 TCP 23.104.0.1:49454 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:33:35.598 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-08-04 02:29:06.000 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-04 02:34:03.104 00:00:10.370 TCP 23.104.0.1:40644 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:34:35.812 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-08-04 02:35:03.513 00:00:10.374 TCP 23.104.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:35:35.982 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52140 10 6452 1 2025-08-04 02:35:05.998 00:01:00.259 TCP 179.1.22.1:179 -> 179.1.22.22:39396 4 246 1 2025-08-04 02:36:03.926 00:00:10.688 TCP 23.104.0.1:41362 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:36:36.219 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52706 10 6452 1 2025-08-04 02:37:04.644 00:00:10.369 TCP 23.104.0.1:47304 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:37:36.450 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44320 10 6452 1 2025-08-04 02:37:58.019 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:37:58.031 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:38:05.062 00:00:10.366 TCP 23.104.0.1:39168 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:38:36.621 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51272 10 6452 1 2025-08-04 02:39:05.465 00:00:10.360 TCP 23.104.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:39:36.835 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57060 10 6452 1 2025-08-04 02:35:06.256 00:06:00.012 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-04 02:40:05.864 00:00:10.366 TCP 23.104.0.1:40752 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:40:37.010 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36170 10 6452 1 2025-08-04 02:41:06.272 00:00:10.360 TCP 23.104.0.1:59728 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:41:37.226 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36546 10 6452 1 2025-08-04 02:37:06.001 00:06:00.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 02:42:06.672 00:00:10.361 TCP 23.104.0.1:43272 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:42:37.433 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57938 10 6452 1 2025-08-04 02:42:58.317 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:42:58.171 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:43:07.100 00:00:10.364 TCP 23.104.0.1:43104 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:43:37.609 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54302 10 6452 1 2025-08-04 02:44:07.503 00:00:10.362 TCP 23.104.0.1:46178 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:44:37.821 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59502 10 6452 1 2025-08-04 02:45:07.902 00:00:10.370 TCP 23.104.0.1:51728 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:45:37.993 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48452 10 6452 1 2025-08-04 02:46:08.313 00:00:10.363 TCP 23.104.0.1:33506 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:46:38.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34156 10 6452 1 2025-08-04 02:42:06.006 00:06:00.264 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 02:47:08.716 00:00:10.337 TCP 23.104.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:47:38.437 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51992 10 6452 1 2025-08-04 02:47:58.262 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:47:58.463 00:00:00.019 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:48:09.104 00:00:10.366 TCP 23.104.0.1:54926 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:48:38.651 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48400 10 6452 1 2025-08-04 02:44:06.002 00:06:00.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 02:49:09.510 00:00:10.328 TCP 23.104.0.1:42262 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:49:38.861 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48316 10 6452 1 2025-08-04 02:50:09.880 00:00:10.384 TCP 23.104.0.1:59534 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:50:39.085 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6452 1 2025-08-04 02:51:10.304 00:00:10.323 TCP 23.104.0.1:47574 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:51:39.257 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35490 10 6452 1 2025-08-04 02:52:10.662 00:00:10.365 TCP 23.104.0.1:56408 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:52:39.473 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51388 10 6452 1 2025-08-04 02:52:58.331 00:00:00.054 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:52:58.185 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:53:11.098 00:00:10.363 TCP 23.104.0.1:53014 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:53:39.702 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:52210 12 10365 1 2025-08-04 02:49:06.029 00:06:00.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 02:54:11.502 00:00:10.449 TCP 23.104.0.1:54170 -> 1.101.0.1:3000 15 1926 1 2025-08-04 02:54:39.950 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37730 10 6452 1 2025-08-04 02:55:11.995 00:00:10.385 TCP 23.104.0.1:48732 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:55:40.176 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45844 10 6452 1 2025-08-04 02:51:06.039 00:06:00.004 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-04 02:56:12.420 00:00:12.987 TCP 23.104.0.1:40882 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:56:40.343 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52354 10 6452 1 2025-08-04 02:57:15.481 00:00:10.359 TCP 23.104.0.1:48530 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:57:40.549 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6452 1 2025-08-04 02:57:58.581 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:57:58.649 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:58:15.878 00:00:10.363 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:58:40.767 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49614 11 6492 1 Summary: total flows: 163, total bytes: 502299, total packets: 1572, avg bps: 1102, avg pps: 0, avg bpp: 319 Time window: 2025-08-04 01:58:05 - 2025-08-04 02:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0048s User: 0.0000s Wall: 0.0030s flows/second: 54441.1 Runtime: 0.0030s