Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 03:59:07.287 00:00:10.362 TCP 23.104.0.1:43474 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:59:29.718 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59514 10 6452 1 2025-08-13 03:56:10.508 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 04:00:07.692 00:00:10.440 TCP 23.104.0.1:44690 -> 1.101.0.1:3000 15 1926 1 2025-08-13 04:00:29.933 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57934 12 10365 1 2025-08-13 03:57:10.515 00:05:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 04:01:08.174 00:00:10.378 TCP 23.104.0.1:48132 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:01:30.152 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51930 10 6452 1 2025-08-13 04:02:19.453 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 04:02:08.592 00:00:10.326 TCP 23.104.0.1:39934 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:02:19.757 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 04:02:30.367 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49340 10 6452 1 2025-08-13 04:03:08.957 00:00:10.324 TCP 23.104.0.1:39022 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:03:30.576 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39570 10 6452 1 2025-08-13 04:04:09.318 00:00:10.366 TCP 23.104.0.1:34342 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:04:30.797 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48724 10 6452 1 2025-08-13 04:05:09.723 00:00:10.405 TCP 23.104.0.1:34840 -> 1.101.0.1:3000 15 1926 1 2025-08-13 04:05:30.973 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:57488 12 10367 1 2025-08-13 04:02:10.511 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 04:06:10.165 00:00:10.325 TCP 23.104.0.1:43948 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:06:31.238 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34322 10 6452 1 2025-08-13 04:03:10.514 00:05:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 04:07:19.717 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 04:07:19.677 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 04:07:10.530 00:00:10.364 TCP 23.104.0.1:47914 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:07:31.448 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59514 10 6452 1 2025-08-13 04:08:10.936 00:00:10.342 TCP 23.104.0.1:46766 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:08:31.617 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56520 10 6452 1 2025-08-13 04:09:11.318 00:00:10.362 TCP 23.104.0.1:37782 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:09:31.789 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38970 10 6452 1 2025-08-13 04:10:11.721 00:00:10.427 TCP 23.104.0.1:53776 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:10:31.956 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46550 10 6452 1 2025-08-13 04:11:12.187 00:00:10.364 TCP 23.104.0.1:55224 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:11:32.182 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34182 10 6452 1 2025-08-13 04:08:10.513 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 04:12:19.934 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 04:12:19.926 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 04:12:12.589 00:00:10.326 TCP 23.104.0.1:49620 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:12:32.400 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53190 10 6452 1 2025-08-13 04:09:10.515 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 04:13:12.952 00:00:10.370 TCP 23.104.0.1:38268 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:13:32.574 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51636 10 6452 1 2025-08-13 04:14:13.360 00:00:10.367 TCP 23.104.0.1:50218 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:14:32.783 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56606 10 6452 1 2025-08-13 04:15:13.768 00:00:10.373 TCP 23.104.0.1:54460 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:15:32.993 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54120 10 6452 1 2025-08-13 04:16:14.182 00:00:10.325 TCP 23.104.0.1:60038 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:16:33.174 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54638 10 6452 1 2025-08-13 04:17:19.992 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 04:17:19.997 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 04:17:14.545 00:00:10.361 TCP 23.104.0.1:37062 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:17:33.385 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51622 10 6452 1 2025-08-13 04:14:10.512 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 04:18:14.942 00:00:10.378 TCP 23.104.0.1:32954 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:18:33.590 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60722 10 6452 1 2025-08-13 04:15:10.517 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 04:19:15.370 00:00:10.366 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:19:33.803 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44026 10 6452 1 2025-08-13 04:20:15.780 00:00:10.373 TCP 23.104.0.1:54410 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:20:34.020 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-08-13 04:21:16.192 00:00:10.365 TCP 23.104.0.1:42086 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:21:34.233 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:55342 10 6452 1 2025-08-13 04:22:20.290 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 04:22:20.414 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 04:22:16.597 00:00:10.327 TCP 23.104.0.1:34592 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:22:34.426 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:46570 10 6452 1 2025-08-13 04:23:16.961 00:00:10.338 TCP 23.104.0.1:39808 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:23:34.597 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58262 10 6452 1 2025-08-13 04:20:10.515 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 04:24:17.339 00:00:10.323 TCP 23.104.0.1:57798 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:24:34.811 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32880 10 6452 1 2025-08-13 04:21:10.520 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 04:25:17.701 00:00:10.364 TCP 23.104.0.1:59094 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:25:35.032 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44048 10 6452 1 2025-08-13 04:26:18.111 00:00:10.364 TCP 23.104.0.1:35768 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:26:35.246 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49696 10 6452 1 2025-08-13 04:27:20.037 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 04:27:20.131 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 04:27:18.511 00:00:10.365 TCP 23.104.0.1:54234 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:27:35.462 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47372 10 6452 1 2025-08-13 04:28:18.917 00:00:10.355 TCP 23.104.0.1:33186 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:28:35.675 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54658 10 6452 1 2025-08-13 04:29:19.310 00:00:10.362 TCP 23.104.0.1:57842 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:29:35.886 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43824 10 6452 1 2025-08-13 04:26:10.518 00:05:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 04:30:19.712 00:00:10.395 TCP 23.104.0.1:34820 -> 1.101.0.1:3000 15 1926 1 2025-08-13 04:30:36.086 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35168 12 10367 1 2025-08-13 04:27:10.520 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 04:31:20.146 00:00:10.364 TCP 23.104.0.1:32968 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:31:36.320 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57850 10 6452 1 2025-08-13 04:32:20.193 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 04:32:20.125 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 04:32:20.549 00:00:10.364 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:32:36.534 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58666 10 6452 1 2025-08-13 04:33:20.953 00:00:10.366 TCP 23.104.0.1:53980 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:33:36.755 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48844 10 6452 1 2025-08-13 04:34:21.356 00:00:10.365 TCP 23.104.0.1:39886 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:34:36.964 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43208 10 6452 1 2025-08-13 04:35:21.762 00:00:10.370 TCP 23.104.0.1:55640 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:35:37.206 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:34706 10 6452 1 2025-08-13 04:32:10.522 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 04:36:22.168 00:00:10.321 TCP 23.104.0.1:44770 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:36:37.403 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51066 10 6452 1 2025-08-13 04:33:10.525 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 04:37:19.963 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 04:37:20.300 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 04:37:22.527 00:00:10.323 TCP 23.104.0.1:41362 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:37:37.620 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54608 10 6452 1 2025-08-13 04:38:22.892 00:00:10.378 TCP 23.104.0.1:52540 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:38:37.839 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50816 10 6452 1 2025-08-13 04:39:23.308 00:00:10.324 TCP 23.104.0.1:46022 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:39:38.085 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48058 10 6452 1 2025-08-13 04:40:23.671 00:00:10.443 TCP 23.104.0.1:35506 -> 1.101.0.1:3000 15 1926 1 2025-08-13 04:40:38.316 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34322 12 10365 1 2025-08-13 04:41:24.164 00:00:10.369 TCP 23.104.0.1:33770 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:41:38.557 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53544 10 6452 1 2025-08-13 04:38:10.524 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 04:42:20.269 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 04:42:20.565 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 04:42:24.570 00:00:10.362 TCP 23.104.0.1:60486 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:42:38.773 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44708 10 6452 1 2025-08-13 04:39:10.527 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 04:43:24.978 00:00:10.376 TCP 23.104.0.1:60792 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:43:38.985 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60730 10 6452 1 2025-08-13 04:44:25.392 00:00:10.367 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:44:39.214 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:41640 10 6452 1 2025-08-13 04:45:25.799 00:00:10.363 TCP 23.104.0.1:55206 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:45:39.424 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48758 10 6452 1 2025-08-13 04:46:26.198 00:00:10.362 TCP 23.104.0.1:53788 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:46:39.639 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54516 10 6452 1 2025-08-13 04:47:20.670 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 04:47:20.554 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 04:47:26.598 00:00:10.378 TCP 23.104.0.1:48996 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:47:39.856 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:38380 10 6452 1 2025-08-13 04:44:10.525 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 04:48:27.012 00:00:10.364 TCP 23.104.0.1:36492 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:48:40.067 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35132 10 6452 1 2025-08-13 04:45:10.528 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 04:49:27.417 00:00:10.362 TCP 23.104.0.1:53082 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:49:40.277 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37812 10 6452 1 2025-08-13 04:50:27.821 00:00:10.364 TCP 23.104.0.1:53996 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:50:40.448 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47862 10 6452 1 2025-08-13 04:51:28.220 00:00:10.334 TCP 23.104.0.1:59312 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:51:40.665 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55390 10 6452 1 2025-08-13 04:52:20.807 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 04:52:20.607 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 04:52:28.578 00:00:10.342 TCP 23.104.0.1:60420 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:52:40.879 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46758 10 6452 1 2025-08-13 04:53:28.962 00:00:10.363 TCP 23.104.0.1:41094 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:53:41.107 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48616 10 6452 1 2025-08-13 04:50:10.530 00:05:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 04:54:29.365 00:00:10.359 TCP 23.104.0.1:42444 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:54:41.320 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38258 10 6452 1 2025-08-13 04:51:10.533 00:05:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 04:55:29.764 00:00:10.382 TCP 23.104.0.1:59908 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:55:41.487 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:55646 10 6452 1 2025-08-13 04:56:30.197 00:00:10.324 TCP 23.104.0.1:43238 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:56:41.691 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44902 10 6452 1 2025-08-13 04:57:20.786 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 04:57:20.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 04:57:30.565 00:00:10.327 TCP 23.104.0.1:44592 -> 1.101.0.1:3000 11 1507 1 2025-08-13 04:57:41.904 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43080 10 6452 1 2025-08-13 04:58:30.937 00:00:10.380 TCP 23.104.0.1:45556 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 509228, total packets: 1586, avg bps: 1086, avg pps: 0, avg bpp: 321 Time window: 2025-08-13 03:56:10 - 2025-08-13 04:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0017s User: 0.0017s Wall: 0.0025s flows/second: 65592.6 Runtime: 0.0025s