Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 05:59:00.143 00:00:10.372 TCP 23.104.0.1:39742 -> 1.101.0.1:3000 11 1507 1 2025-08-09 05:59:22.994 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58894 10 6452 1 2025-08-09 05:56:08.491 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 06:00:00.557 00:00:12.865 TCP 23.104.0.1:45956 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:00:26.551 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 06:00:26.685 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 06:00:23.228 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55688 10 6452 1 2025-08-09 05:57:08.495 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 06:01:03.493 00:00:10.367 TCP 23.104.0.1:53676 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:01:23.403 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52524 10 6452 1 2025-08-09 06:02:03.897 00:00:10.368 TCP 23.104.0.1:51504 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:02:23.614 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36942 10 6452 1 2025-08-09 06:03:04.313 00:00:10.368 TCP 23.104.0.1:60464 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:03:23.836 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40132 10 6452 1 2025-08-09 06:04:04.725 00:00:10.330 TCP 23.104.0.1:35776 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:04:24.015 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45546 10 6452 1 2025-08-09 06:05:05.106 00:00:10.336 TCP 23.104.0.1:40700 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:05:26.561 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 06:05:26.529 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 06:05:24.230 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47696 10 6452 1 2025-08-09 06:02:08.495 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 06:06:05.479 00:00:10.366 TCP 23.104.0.1:56562 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:06:24.397 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46596 10 6452 1 2025-08-09 06:03:08.497 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 06:07:05.884 00:00:10.385 TCP 23.104.0.1:46578 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:07:24.612 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60038 10 6452 1 2025-08-09 06:08:06.309 00:00:10.364 TCP 23.104.0.1:43704 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:08:24.820 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:38926 10 6452 1 2025-08-09 06:09:06.713 00:00:10.372 TCP 23.104.0.1:34594 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:09:24.989 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48644 10 6452 1 2025-08-09 06:10:07.127 00:00:10.363 TCP 23.104.0.1:52958 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:10:26.650 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 06:10:26.567 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 06:10:25.216 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40022 10 6452 1 2025-08-09 06:11:07.526 00:00:10.322 TCP 23.104.0.1:46478 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:11:25.391 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38022 10 6452 1 2025-08-09 06:08:08.495 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 06:12:07.889 00:00:10.332 TCP 23.104.0.1:45442 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:12:25.605 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42760 10 6452 1 2025-08-09 06:09:08.497 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 06:13:08.263 00:00:10.367 TCP 23.104.0.1:54126 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:13:25.821 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50698 10 6452 1 2025-08-09 06:14:08.671 00:00:10.366 TCP 23.104.0.1:44848 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:14:26.048 00:00:10.871 TCP 1.101.0.1:3000 -> 22.102.0.1:40530 10 6452 1 2025-08-09 06:15:09.103 00:00:10.368 TCP 23.104.0.1:47676 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:15:26.877 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 06:15:26.983 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 06:15:26.958 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57356 12 6556 1 2025-08-09 06:16:09.507 00:00:10.369 TCP 23.104.0.1:47940 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:16:27.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43442 10 6452 1 2025-08-09 06:17:09.912 00:00:10.323 TCP 23.104.0.1:37856 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:17:27.398 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60416 10 6452 1 2025-08-09 06:14:08.498 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 06:18:10.274 00:00:10.360 TCP 23.104.0.1:50370 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:18:27.619 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54190 10 6452 1 2025-08-09 06:15:08.501 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 06:19:10.674 00:00:10.373 TCP 23.104.0.1:57044 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:19:27.831 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48474 10 6452 1 2025-08-09 06:20:11.106 00:00:10.359 TCP 23.104.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:20:27.017 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 06:20:26.995 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 06:20:28.062 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37638 10 6452 1 2025-08-09 06:21:11.504 00:00:10.328 TCP 23.104.0.1:48462 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:21:28.237 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34860 10 6452 1 2025-08-09 06:22:11.867 00:00:10.325 TCP 23.104.0.1:42272 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:22:28.458 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42140 10 6452 1 2025-08-09 06:23:12.243 00:00:10.405 TCP 23.104.0.1:41052 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:23:28.669 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50836 10 6452 1 2025-08-09 06:20:08.500 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 06:24:12.718 00:00:10.375 TCP 23.104.0.1:47726 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:24:28.882 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:33046 10 6452 1 2025-08-09 06:21:08.501 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 06:25:13.133 00:00:10.476 TCP 23.104.0.1:44582 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:25:26.863 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 06:25:27.243 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 06:25:29.114 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57114 10 6452 1 2025-08-09 06:26:13.648 00:00:10.363 TCP 23.104.0.1:40672 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:26:29.326 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47162 10 6452 1 2025-08-09 06:27:14.061 00:00:10.364 TCP 23.104.0.1:54352 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:27:29.549 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45128 10 6452 1 2025-08-09 06:28:14.465 00:00:10.371 TCP 23.104.0.1:58120 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:28:29.763 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34142 10 6452 1 2025-08-09 06:29:14.872 00:00:10.365 TCP 23.104.0.1:43906 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:29:29.975 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:39560 10 6452 1 2025-08-09 06:26:08.500 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 06:30:15.276 00:00:10.364 TCP 23.104.0.1:40194 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:30:27.350 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 06:30:27.037 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 06:30:30.223 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:36744 10 6452 1 2025-08-09 06:27:08.503 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 06:31:15.676 00:00:10.323 TCP 23.104.0.1:36042 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:31:30.430 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59954 10 6452 1 2025-08-09 06:32:16.035 00:00:10.334 TCP 23.104.0.1:51638 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:32:30.605 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53920 10 6452 1 2025-08-09 06:33:16.402 00:00:10.371 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:33:30.819 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33912 10 6452 1 2025-08-09 06:34:16.814 00:00:10.360 TCP 23.104.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:34:31.045 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33024 10 6452 1 2025-08-09 06:35:27.408 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 06:35:27.545 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 06:35:17.218 00:00:10.367 TCP 23.104.0.1:36192 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:35:31.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56260 10 6452 1 2025-08-09 06:32:08.501 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 06:36:17.620 00:00:10.363 TCP 23.104.0.1:49054 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:36:31.430 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47086 11 6492 1 2025-08-09 06:33:08.504 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 06:37:18.022 00:00:10.332 TCP 23.104.0.1:36004 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:37:31.649 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57096 10 6452 1 2025-08-09 06:38:18.392 00:00:10.365 TCP 23.104.0.1:50804 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:38:31.875 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39282 10 6452 1 2025-08-09 06:39:18.799 00:00:10.341 TCP 23.104.0.1:33464 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:39:32.082 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58144 10 6452 1 2025-08-09 06:40:19.182 00:00:10.360 TCP 23.104.0.1:43882 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:40:27.495 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 06:40:27.487 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 06:40:32.305 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46312 10 6452 1 2025-08-09 06:41:19.576 00:00:10.368 TCP 23.104.0.1:39908 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:41:32.514 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50368 10 6452 1 2025-08-09 06:38:08.507 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 06:42:19.985 00:00:10.363 TCP 23.104.0.1:45240 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:42:32.729 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56340 10 6452 1 2025-08-09 06:39:08.508 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 06:43:20.386 00:00:10.331 TCP 23.104.0.1:53196 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:43:32.946 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38802 10 6452 1 2025-08-09 06:44:20.757 00:00:10.389 TCP 23.104.0.1:39464 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:44:33.174 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38042 10 6452 1 2025-08-09 06:45:27.690 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 06:45:27.270 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 06:45:21.187 00:00:10.367 TCP 23.104.0.1:40398 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:45:33.352 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42832 10 6452 1 2025-08-09 06:46:21.594 00:00:10.364 TCP 23.104.0.1:32874 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:46:33.529 00:00:10.418 TCP 1.101.0.1:3000 -> 22.102.0.1:49756 10 6452 1 2025-08-09 06:47:21.999 00:00:12.474 TCP 23.104.0.1:53268 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:47:33.986 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:38028 10 6452 1 2025-08-09 06:44:08.507 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 06:48:24.553 00:00:10.327 TCP 23.104.0.1:57008 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:48:34.180 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59044 10 6452 1 2025-08-09 06:45:08.510 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 06:49:24.915 00:00:10.365 TCP 23.104.0.1:45204 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:49:34.368 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52038 10 6452 1 2025-08-09 06:50:27.557 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 06:50:27.770 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 06:50:25.316 00:00:10.362 TCP 23.104.0.1:56086 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:50:34.538 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59776 10 6452 1 2025-08-09 06:51:25.726 00:00:10.372 TCP 23.104.0.1:37076 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:51:34.717 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45854 10 6452 1 2025-08-09 06:52:26.137 00:00:10.417 TCP 23.104.0.1:47136 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:52:34.924 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42016 10 6452 1 2025-08-09 06:53:26.592 00:00:10.361 TCP 23.104.0.1:43742 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:53:35.152 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44228 10 6452 1 2025-08-09 06:50:08.508 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 06:54:26.989 00:00:10.328 TCP 23.104.0.1:38640 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:54:35.372 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41300 10 6452 1 2025-08-09 06:51:08.511 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 06:55:27.829 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 06:55:27.774 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 06:55:27.358 00:00:10.361 TCP 23.104.0.1:36592 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:55:35.606 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42536 10 6452 1 2025-08-09 06:56:27.761 00:00:10.379 TCP 23.104.0.1:42374 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:56:35.834 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43970 10 6452 1 2025-08-09 06:57:28.179 00:00:10.365 TCP 23.104.0.1:38180 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:57:36.071 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39566 10 6452 1 2025-08-09 06:58:28.584 00:00:10.365 TCP 23.104.0.1:60576 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:58:36.285 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50270 10 6452 1 Summary: total flows: 164, total bytes: 498492, total packets: 1575, avg bps: 1061, avg pps: 0, avg bpp: 316 Time window: 2025-08-09 05:56:08 - 2025-08-09 06:58:46 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0021s Wall: 0.0023s flows/second: 71488.9 Runtime: 0.0023s