Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 01:59:22.394 00:00:10.363 TCP 23.104.0.1:48178 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:59:32.710 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48936 10 6452 1 2025-08-09 01:56:08.404 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 02:00:21.896 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 02:00:21.750 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 02:00:22.793 00:00:10.348 TCP 23.104.0.1:55718 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:00:32.885 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41126 10 6452 1 2025-08-09 01:57:08.406 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 02:01:23.180 00:00:10.368 TCP 23.104.0.1:37978 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:01:33.106 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59032 10 6452 1 2025-08-09 02:02:23.588 00:00:10.362 TCP 23.104.0.1:57984 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:02:33.278 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39504 10 6452 1 2025-08-09 02:03:23.987 00:00:10.366 TCP 23.104.0.1:33212 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:03:33.488 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33284 10 6452 1 2025-08-09 02:04:24.398 00:00:10.376 TCP 23.104.0.1:52444 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:04:33.696 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39228 10 6452 1 2025-08-09 02:05:21.800 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 02:05:21.894 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 02:05:24.811 00:00:10.365 TCP 23.104.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:05:33.911 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:45114 10 6452 1 2025-08-09 02:02:08.405 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 02:06:25.214 00:00:10.363 TCP 23.104.0.1:37432 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:06:34.099 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38364 10 6452 1 2025-08-09 02:03:08.408 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 02:07:25.614 00:00:10.360 TCP 23.104.0.1:49290 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:07:34.316 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37458 10 6452 1 2025-08-09 02:08:26.027 00:00:10.366 TCP 23.104.0.1:44750 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:08:34.495 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51608 10 6452 1 2025-08-09 02:09:26.426 00:00:10.367 TCP 23.104.0.1:55580 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:09:34.723 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58514 10 6452 1 2025-08-09 02:10:21.649 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 02:10:21.695 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 02:10:26.830 00:00:10.350 TCP 23.104.0.1:51312 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:10:34.932 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:42276 10 6452 1 2025-08-09 02:11:27.217 00:00:10.361 TCP 23.104.0.1:33058 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:11:35.177 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42740 10 6452 1 2025-08-09 02:08:08.408 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 02:12:27.616 00:00:10.372 TCP 23.104.0.1:53498 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:12:35.351 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59710 10 6452 1 2025-08-09 02:09:08.411 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 02:13:28.029 00:00:10.320 TCP 23.104.0.1:56084 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:13:35.565 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54856 10 6452 1 2025-08-09 02:14:28.391 00:00:10.328 TCP 23.104.0.1:52986 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:14:35.780 00:00:10.346 TCP 1.101.0.1:3000 -> 22.102.0.1:41340 10 6452 1 2025-08-09 02:15:22.214 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 02:15:22.247 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 02:15:28.755 00:00:10.371 TCP 23.104.0.1:52648 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:15:36.165 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57208 10 6452 1 2025-08-09 02:16:29.167 00:00:10.323 TCP 23.104.0.1:51494 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:16:36.383 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56172 10 6452 1 2025-08-09 02:17:29.527 00:00:10.368 TCP 23.104.0.1:57982 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:17:36.594 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37780 10 6452 1 2025-08-09 02:14:08.416 00:05:00.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 02:18:29.932 00:00:10.380 TCP 23.104.0.1:41600 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:18:36.823 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:45286 10 6452 1 2025-08-09 02:15:08.417 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 02:19:30.348 00:00:10.318 TCP 23.104.0.1:40098 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:19:36.988 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:43166 10 6452 1 2025-08-09 02:20:22.508 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 02:20:22.188 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 02:20:30.707 00:00:10.360 TCP 23.104.0.1:55694 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:20:37.171 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57390 10 6452 1 2025-08-09 02:21:31.103 00:00:10.320 TCP 23.104.0.1:38692 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:21:37.383 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50424 10 6452 1 2025-08-09 02:22:31.467 00:00:10.325 TCP 23.104.0.1:55084 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:22:37.555 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39034 10 6452 1 2025-08-09 02:23:31.829 00:00:10.379 TCP 23.104.0.1:35198 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:23:37.774 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58040 10 6452 1 2025-08-09 02:20:08.417 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 02:24:32.253 00:00:10.320 TCP 23.104.0.1:40712 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:24:37.983 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59158 10 6452 1 2025-08-09 02:21:08.420 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 02:25:22.237 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 02:25:22.505 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 02:25:32.611 00:00:10.362 TCP 23.104.0.1:57630 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:25:38.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35778 10 6452 1 2025-08-09 02:26:33.014 00:00:10.327 TCP 23.104.0.1:48144 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:26:38.427 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37334 10 6452 1 2025-08-09 02:27:33.377 00:00:10.363 TCP 23.104.0.1:44080 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:27:38.641 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44146 10 6452 1 2025-08-09 02:28:33.792 00:00:10.434 TCP 23.104.0.1:39672 -> 1.101.0.1:3000 15 1926 1 2025-08-09 02:28:38.856 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:59402 13 10628 1 2025-08-09 02:29:34.268 00:00:10.361 TCP 23.104.0.1:42034 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:29:39.143 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54760 10 6661 1 2025-08-09 02:26:08.419 00:05:00.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 02:30:22.484 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 02:30:22.497 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 02:30:34.669 00:00:10.327 TCP 23.104.0.1:55270 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:30:39.309 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46888 10 6661 1 2025-08-09 02:27:08.421 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 02:31:35.051 00:00:10.331 TCP 23.104.0.1:44722 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:31:39.533 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43368 10 6661 1 2025-08-09 02:32:35.420 00:00:10.382 TCP 23.104.0.1:48842 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:32:39.753 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41588 10 6661 1 2025-08-09 02:33:35.843 00:00:10.385 TCP 23.104.0.1:37388 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:33:39.973 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:42788 13 6817 1 2025-08-09 02:34:36.271 00:00:10.326 TCP 23.104.0.1:49314 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:34:40.225 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49984 10 6661 1 2025-08-09 02:35:22.435 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 02:35:22.496 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 02:35:40.445 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59484 10 6661 1 2025-08-09 02:35:36.637 00:00:10.367 TCP 23.104.0.1:39288 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:32:08.420 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 02:36:40.663 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37052 10 6661 1 2025-08-09 02:36:37.046 00:00:10.320 TCP 23.104.0.1:57974 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:33:08.423 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 02:37:40.882 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46224 10 6661 1 2025-08-09 02:37:37.409 00:00:10.364 TCP 23.104.0.1:49478 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:38:41.110 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34706 10 6661 1 2025-08-09 02:38:37.812 00:00:10.354 TCP 23.104.0.1:40712 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:39:41.283 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45158 10 6661 1 2025-08-09 02:39:38.207 00:00:10.367 TCP 23.104.0.1:50146 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:40:22.558 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 02:40:22.329 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 02:40:41.496 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:51326 10 6661 1 2025-08-09 02:40:38.609 00:00:10.330 TCP 23.104.0.1:43228 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:41:38.977 00:00:10.368 TCP 23.104.0.1:58528 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:41:41.733 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33896 10 6661 1 2025-08-09 02:38:08.421 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 02:42:39.382 00:00:10.363 TCP 23.104.0.1:51146 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:42:41.909 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60138 10 6661 1 2025-08-09 02:39:08.423 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 02:43:39.780 00:00:10.376 TCP 23.104.0.1:40358 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:43:42.120 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45746 10 6661 1 2025-08-09 02:44:40.192 00:00:10.327 TCP 23.104.0.1:60376 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:44:42.289 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:56932 10 6661 1 2025-08-09 02:45:23.216 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 02:45:22.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 02:45:40.553 00:00:10.367 TCP 23.104.0.1:55296 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:45:42.458 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42858 10 6661 1 2025-08-09 02:46:40.955 00:00:10.369 TCP 23.104.0.1:55650 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:46:42.673 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56614 10 6661 1 2025-08-09 02:47:41.358 00:00:10.368 TCP 23.104.0.1:58374 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:47:42.890 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45354 10 6661 1 2025-08-09 02:44:08.421 00:05:00.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 02:48:41.764 00:00:10.371 TCP 23.104.0.1:59512 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:48:43.105 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 10 6661 1 2025-08-09 02:45:08.424 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 02:49:42.171 00:00:10.326 TCP 23.104.0.1:48106 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:49:43.318 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36966 10 6661 1 2025-08-09 02:50:22.718 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 02:50:22.500 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 02:50:42.534 00:00:10.364 TCP 23.104.0.1:57530 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:50:43.538 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60572 10 6661 1 2025-08-09 02:51:42.934 00:00:10.382 TCP 23.104.0.1:56896 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:51:43.705 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45072 10 6661 1 2025-08-09 02:52:43.358 00:00:10.325 TCP 23.104.0.1:41574 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:52:43.920 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40234 10 6661 1 2025-08-09 02:53:44.132 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44714 10 6661 1 2025-08-09 02:53:43.725 00:00:10.366 TCP 23.104.0.1:56848 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:50:08.422 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 02:54:44.337 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54158 10 6661 1 2025-08-09 02:54:44.129 00:00:10.327 TCP 23.104.0.1:55054 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:51:08.427 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 02:55:22.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 02:55:22.960 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 02:55:44.492 00:00:10.326 TCP 23.104.0.1:51524 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:55:44.559 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42484 10 6661 1 2025-08-09 02:56:44.856 00:00:10.377 TCP 23.104.0.1:39756 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:56:44.768 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46582 10 6661 1 2025-08-09 02:57:44.983 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52690 10 6661 1 2025-08-09 02:57:45.272 00:00:10.364 TCP 23.104.0.1:34014 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 501201, total packets: 1561, avg bps: 1081, avg pps: 0, avg bpp: 321 Time window: 2025-08-09 01:56:08 - 2025-08-09 02:57:55 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0028s User: 0.0014s Wall: 0.0020s flows/second: 80755.6 Runtime: 0.0020s