Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 02:58:45.674 00:00:10.458 TCP 23.104.0.1:32986 -> 1.101.0.1:3000 15 1926 1 2025-08-09 02:58:45.207 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42946 12 10367 1 2025-08-09 02:59:46.174 00:00:10.332 TCP 23.104.0.1:56708 -> 1.101.0.1:3000 11 1507 1 2025-08-09 02:59:45.458 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:50526 10 6452 1 2025-08-09 02:56:08.423 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 03:00:22.884 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 03:00:22.912 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 03:00:46.539 00:00:10.377 TCP 23.104.0.1:59308 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:00:45.706 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41204 10 6452 1 2025-08-09 02:57:08.426 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 03:01:45.923 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41178 10 6452 1 2025-08-09 03:01:46.960 00:00:10.368 TCP 23.104.0.1:50608 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:02:46.133 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40544 10 6452 1 2025-08-09 03:02:47.365 00:00:10.365 TCP 23.104.0.1:34426 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:03:46.352 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52766 10 6452 1 2025-08-09 03:03:47.774 00:00:10.376 TCP 23.104.0.1:57284 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:04:46.556 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59586 10 6452 1 2025-08-09 03:04:48.190 00:00:10.375 TCP 23.104.0.1:50034 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:05:23.171 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 03:05:23.109 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 03:05:46.774 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54324 10 6452 1 2025-08-09 03:05:48.609 00:00:10.324 TCP 23.104.0.1:59776 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:02:08.427 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 03:06:48.969 00:00:10.385 TCP 23.104.0.1:48754 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:06:46.952 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:34030 12 6556 1 2025-08-09 03:03:08.427 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 03:07:49.385 00:00:10.374 TCP 23.104.0.1:48394 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:07:47.194 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42910 10 6452 1 2025-08-09 03:08:49.795 00:00:10.441 TCP 23.104.0.1:49256 -> 1.101.0.1:3000 15 1926 1 2025-08-09 03:08:47.409 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:51468 12 10367 1 2025-08-09 03:09:47.657 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48074 10 6452 1 2025-08-09 03:09:50.278 00:00:10.321 TCP 23.104.0.1:38616 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:10:23.421 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 03:10:23.395 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 03:10:50.641 00:00:10.322 TCP 23.104.0.1:54406 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:10:47.868 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34578 10 6452 1 2025-08-09 03:11:48.067 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58674 10 6452 1 2025-08-09 03:11:51.000 00:00:10.365 TCP 23.104.0.1:58832 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:08:08.426 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 03:12:48.240 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42536 10 6452 1 2025-08-09 03:12:51.404 00:00:10.363 TCP 23.104.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:09:08.429 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 03:13:48.472 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38006 10 6452 1 2025-08-09 03:13:51.806 00:00:10.362 TCP 23.104.0.1:34508 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:14:48.640 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49806 10 6452 1 2025-08-09 03:14:52.207 00:00:10.360 TCP 23.104.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:15:23.233 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 03:15:23.438 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 03:15:48.852 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42576 10 6452 1 2025-08-09 03:15:52.607 00:00:10.325 TCP 23.104.0.1:41690 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:16:49.032 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52430 10 6452 1 2025-08-09 03:16:52.971 00:00:10.365 TCP 23.104.0.1:41438 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:17:49.244 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-08-09 03:17:53.380 00:00:10.363 TCP 23.104.0.1:60882 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:14:08.428 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 03:18:49.459 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:42292 10 6452 1 2025-08-09 03:18:53.780 00:00:10.366 TCP 23.104.0.1:58016 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:15:08.430 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 03:19:49.623 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44526 10 6452 1 2025-08-09 03:19:54.183 00:00:10.361 TCP 23.104.0.1:57680 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:20:23.545 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 03:20:23.528 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 03:20:49.838 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:33510 11 6504 1 2025-08-09 03:20:54.583 00:00:10.371 TCP 23.104.0.1:44178 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:21:50.101 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33244 10 6452 1 2025-08-09 03:21:54.989 00:00:10.367 TCP 23.104.0.1:51850 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:22:50.279 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53322 10 6452 1 2025-08-09 03:22:55.394 00:00:10.326 TCP 23.104.0.1:44028 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:23:50.455 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39396 10 6452 1 2025-08-09 03:23:55.762 00:00:10.382 TCP 23.104.0.1:33328 -> 1.101.0.1:3000 12 1559 1 2025-08-09 03:20:08.428 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 03:24:50.624 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40956 10 6452 1 2025-08-09 03:24:56.196 00:00:10.328 TCP 23.104.0.1:40542 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:21:08.431 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 03:25:23.739 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 03:25:23.671 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 03:25:50.808 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56516 10 6452 1 2025-08-09 03:25:56.563 00:00:10.366 TCP 23.104.0.1:36246 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:26:51.029 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44216 10 6452 1 2025-08-09 03:26:56.971 00:00:10.367 TCP 23.104.0.1:49424 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:27:51.238 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49574 10 6452 1 2025-08-09 03:27:57.373 00:00:10.367 TCP 23.104.0.1:43102 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:28:51.456 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38090 10 6452 1 2025-08-09 03:28:57.781 00:00:10.330 TCP 23.104.0.1:45038 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:29:51.677 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39964 10 6452 1 2025-08-09 03:29:58.148 00:00:10.377 TCP 23.104.0.1:60704 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:26:08.429 00:05:00.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 03:30:23.861 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 03:30:23.897 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 03:30:51.886 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60556 10 6452 1 2025-08-09 03:27:08.432 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 03:30:58.576 00:00:10.367 TCP 23.104.0.1:55342 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:31:52.104 00:00:10.348 TCP 1.101.0.1:3000 -> 22.102.0.1:53834 10 6452 1 2025-08-09 03:31:58.976 00:00:10.366 TCP 23.104.0.1:53018 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:32:52.488 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51600 10 6452 1 2025-08-09 03:32:59.378 00:00:10.388 TCP 23.104.0.1:47746 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:33:52.663 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44654 10 6452 1 2025-08-09 03:33:59.812 00:00:10.334 TCP 23.104.0.1:59762 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:34:52.837 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53998 10 6452 1 2025-08-09 03:35:00.184 00:00:10.319 TCP 23.104.0.1:33810 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:35:23.602 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 03:35:23.579 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 03:36:00.543 00:00:10.320 TCP 23.104.0.1:42512 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:35:53.007 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48890 10 6452 1 2025-08-09 03:32:08.434 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 03:36:53.216 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60384 10 6452 1 2025-08-09 03:37:00.901 00:00:10.332 TCP 23.104.0.1:55036 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:33:08.436 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 03:37:53.431 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44660 10 6452 1 2025-08-09 03:38:01.272 00:00:10.329 TCP 23.104.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:38:53.640 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55554 10 6452 1 2025-08-09 03:39:01.639 00:00:10.369 TCP 23.104.0.1:47662 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:39:53.855 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39262 10 6452 1 2025-08-09 03:40:02.059 00:00:10.367 TCP 23.104.0.1:34650 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:40:23.792 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 03:40:23.795 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 03:40:54.084 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39786 10 6452 1 2025-08-09 03:41:02.462 00:00:10.357 TCP 23.104.0.1:44070 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:41:54.253 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60102 10 6452 1 2025-08-09 03:38:08.436 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 03:42:02.860 00:00:10.371 TCP 23.104.0.1:50332 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:42:54.425 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41534 10 6452 1 2025-08-09 03:39:08.438 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 03:43:03.266 00:00:10.365 TCP 23.104.0.1:35550 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:43:54.636 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41158 10 6452 1 2025-08-09 03:44:03.672 00:00:10.380 TCP 23.104.0.1:58288 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:44:54.844 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59914 10 6452 1 2025-08-09 03:45:04.105 00:00:10.369 TCP 23.104.0.1:42448 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:45:23.885 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 03:45:24.003 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 03:45:55.030 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43842 10 6452 1 2025-08-09 03:46:04.506 00:00:10.368 TCP 23.104.0.1:60158 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:46:55.238 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37062 10 6452 1 2025-08-09 03:47:04.919 00:00:10.404 TCP 23.104.0.1:49100 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:47:55.410 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53038 10 6452 1 2025-08-09 03:44:08.437 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 03:48:05.392 00:00:10.318 TCP 23.104.0.1:57778 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:48:55.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39546 10 6452 1 2025-08-09 03:45:08.440 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 03:49:05.746 00:00:10.365 TCP 23.104.0.1:58678 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:49:55.838 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36644 10 6452 1 2025-08-09 03:50:06.149 00:00:10.362 TCP 23.104.0.1:37488 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:50:23.937 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 03:50:23.748 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 03:50:56.075 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43024 10 6452 1 2025-08-09 03:51:06.551 00:00:10.371 TCP 23.104.0.1:34336 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:51:56.315 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47280 10 6452 1 2025-08-09 03:52:06.969 00:00:10.369 TCP 23.104.0.1:43210 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:52:56.495 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53546 10 6452 1 2025-08-09 03:53:07.377 00:00:10.318 TCP 23.104.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:53:56.703 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55962 10 6452 1 2025-08-09 03:50:08.437 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 03:54:07.738 00:00:10.358 TCP 23.104.0.1:50082 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:51:08.440 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 03:54:56.925 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36128 10 6452 1 2025-08-09 03:55:08.132 00:00:10.361 TCP 23.104.0.1:47354 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:55:24.039 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 03:55:24.023 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 03:55:57.152 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48712 10 6452 1 2025-08-09 03:56:08.535 00:00:10.366 TCP 23.104.0.1:37220 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:56:57.371 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52860 10 6452 1 2025-08-09 03:57:08.938 00:00:10.382 TCP 23.104.0.1:33216 -> 1.101.0.1:3000 11 1507 1 2025-08-09 03:57:57.581 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60974 10 6452 1 2025-08-09 03:58:09.364 00:00:10.330 TCP 23.104.0.1:43372 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507224, total packets: 1588, avg bps: 1087, avg pps: 0, avg bpp: 319 Time window: 2025-08-09 02:56:08 - 2025-08-09 03:58:19 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0017s Wall: 0.0035s flows/second: 47383.5 Runtime: 0.0035s