Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 01:58:57.562 00:00:10.371 TCP 23.104.0.1:45876 -> 1.101.0.1:3000 11 1507 1 2025-08-14 01:59:22.455 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46102 10 6452 1 2025-08-14 01:59:57.972 00:00:10.366 TCP 23.104.0.1:45092 -> 1.101.0.1:3000 11 1507 1 2025-08-14 01:56:10.971 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 02:00:22.666 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 13 13937 1 2025-08-14 02:00:58.373 00:00:10.435 TCP 23.104.0.1:49902 -> 1.101.0.1:3000 15 1926 1 2025-08-14 01:57:10.974 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 02:01:22.919 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36876 10 6452 1 2025-08-14 02:01:58.846 00:00:10.390 TCP 23.104.0.1:54288 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:02:23.136 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45690 10 6452 1 2025-08-14 02:02:46.168 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 02:02:46.095 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 02:02:59.275 00:00:10.320 TCP 23.104.0.1:33566 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:03:23.354 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-08-14 02:03:59.633 00:00:10.510 TCP 23.104.0.1:45646 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:04:23.586 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42652 10 6452 1 2025-08-14 02:05:00.181 00:00:10.362 TCP 23.104.0.1:59902 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:05:23.798 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33922 10 6452 1 2025-08-14 02:06:00.580 00:00:10.368 TCP 23.104.0.1:46380 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:02:10.974 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 02:06:24.008 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45012 10 6452 1 2025-08-14 02:07:00.984 00:00:10.352 TCP 23.104.0.1:38882 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:03:10.977 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 02:07:24.234 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60968 10 6452 1 2025-08-14 02:07:46.377 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 02:07:46.382 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 02:08:01.374 00:00:10.367 TCP 23.104.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:08:24.443 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46176 10 6452 1 2025-08-14 02:09:01.779 00:00:10.327 TCP 23.104.0.1:49026 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:09:24.655 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46304 10 6452 1 2025-08-14 02:10:02.138 00:00:10.364 TCP 23.104.0.1:59902 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:10:24.871 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58000 10 6452 1 2025-08-14 02:11:02.551 00:00:10.331 TCP 23.104.0.1:32864 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:11:25.074 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43174 10 6452 1 2025-08-14 02:08:10.974 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 02:12:02.919 00:00:10.386 TCP 23.104.0.1:34764 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:12:25.289 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49352 10 6452 1 2025-08-14 02:12:46.438 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 02:12:46.560 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 02:09:10.976 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 02:13:03.337 00:00:10.323 TCP 23.104.0.1:38332 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:13:25.455 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43904 10 6452 1 2025-08-14 02:14:03.699 00:00:10.363 TCP 23.104.0.1:33024 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:14:25.630 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38672 10 6452 1 2025-08-14 02:15:04.104 00:00:10.365 TCP 23.104.0.1:41022 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:15:25.856 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36496 10 6452 1 2025-08-14 02:16:04.508 00:00:10.373 TCP 23.104.0.1:39346 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:16:26.091 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50634 10 6452 1 2025-08-14 02:17:04.922 00:00:10.383 TCP 23.104.0.1:49242 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:17:26.306 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44654 10 6452 1 2025-08-14 02:17:46.507 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 02:17:46.502 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 02:18:05.338 00:00:10.369 TCP 23.104.0.1:59168 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:14:10.975 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 02:18:26.518 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60072 10 6452 1 2025-08-14 02:19:05.747 00:00:10.323 TCP 23.104.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:15:10.977 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 02:19:26.748 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46268 10 6452 1 2025-08-14 02:20:06.109 00:00:10.322 TCP 23.104.0.1:53592 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:20:26.973 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44860 10 6452 1 2025-08-14 02:21:06.472 00:00:10.361 TCP 23.104.0.1:43974 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:21:27.203 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39434 10 6452 1 2025-08-14 02:22:06.875 00:00:10.365 TCP 23.104.0.1:36508 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:22:27.377 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46338 10 6452 1 2025-08-14 02:22:46.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 02:22:46.503 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 02:23:07.280 00:00:10.369 TCP 23.104.0.1:46872 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:23:27.586 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33932 10 6452 1 2025-08-14 02:20:10.979 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 02:24:07.689 00:00:10.322 TCP 23.104.0.1:46802 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:24:27.806 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54382 10 6452 1 2025-08-14 02:21:10.983 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 02:25:08.064 00:00:10.361 TCP 23.104.0.1:42504 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:25:28.029 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59680 10 6452 1 2025-08-14 02:26:08.467 00:00:10.363 TCP 23.104.0.1:41838 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:26:28.244 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47246 10 6452 1 2025-08-14 02:27:08.884 00:00:10.389 TCP 23.104.0.1:37856 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:27:28.478 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59980 10 6452 1 2025-08-14 02:27:46.657 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 02:27:46.401 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 02:28:09.308 00:00:10.359 TCP 23.104.0.1:49798 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:28:28.690 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47054 10 6452 1 2025-08-14 02:29:09.706 00:00:10.394 TCP 23.104.0.1:47798 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:29:28.863 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37544 10 6452 1 2025-08-14 02:26:10.982 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 02:30:10.133 00:00:10.362 TCP 23.104.0.1:40854 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:30:29.097 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:48004 10 6452 1 2025-08-14 02:27:10.984 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 02:31:10.535 00:00:10.366 TCP 23.104.0.1:44362 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:31:29.302 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44608 10 6452 1 2025-08-14 02:32:10.943 00:00:10.335 TCP 23.104.0.1:40870 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:32:29.522 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57822 10 6452 1 2025-08-14 02:32:46.675 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 02:32:46.814 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 02:33:11.316 00:00:10.369 TCP 23.104.0.1:41924 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:33:29.743 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36248 10 6452 1 2025-08-14 02:34:11.721 00:00:10.374 TCP 23.104.0.1:42456 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:34:29.965 00:00:20.166 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 12 6556 1 2025-08-14 02:35:12.134 00:00:10.366 TCP 23.104.0.1:36592 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:35:40.171 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48550 10 6452 1 2025-08-14 02:32:10.984 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 02:36:12.537 00:00:10.398 TCP 23.104.0.1:52276 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:36:40.386 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52208 10 6452 1 2025-08-14 02:33:10.985 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 02:37:12.996 00:00:10.372 TCP 23.104.0.1:55386 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:37:46.910 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 02:37:47.205 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 02:37:40.599 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34936 10 6452 1 2025-08-14 02:38:13.409 00:00:10.361 TCP 23.104.0.1:50876 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:38:40.825 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35832 10 6452 1 2025-08-14 02:39:13.806 00:00:10.330 TCP 23.104.0.1:56760 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:39:41.070 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:48734 11 6504 1 2025-08-14 02:40:14.176 00:00:10.367 TCP 23.104.0.1:35440 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:40:41.343 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42332 10 6452 1 2025-08-14 02:41:14.578 00:00:10.368 TCP 23.104.0.1:53004 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:41:41.563 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36244 10 6452 1 2025-08-14 02:38:10.992 00:05:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 02:42:14.984 00:00:10.371 TCP 23.104.0.1:40914 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:42:46.968 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 02:42:46.860 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 02:42:41.782 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34108 10 6452 1 2025-08-14 02:39:10.994 00:05:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 02:43:15.401 00:00:10.368 TCP 23.104.0.1:60712 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:43:42.000 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37154 10 6452 1 2025-08-14 02:44:15.809 00:00:10.366 TCP 23.104.0.1:60798 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:44:42.231 00:00:10.333 TCP 1.101.0.1:3000 -> 22.102.0.1:52280 10 6452 1 2025-08-14 02:45:16.212 00:00:10.370 TCP 23.104.0.1:44188 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:45:42.603 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-08-14 02:46:16.615 00:00:10.363 TCP 23.104.0.1:33800 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:46:42.816 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60252 10 6452 1 2025-08-14 02:47:17.020 00:00:10.318 TCP 23.104.0.1:59446 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:47:46.955 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 02:47:47.044 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 02:47:43.025 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48100 10 6452 1 2025-08-14 02:44:10.993 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 02:48:17.379 00:00:10.322 TCP 23.104.0.1:51828 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:48:43.235 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41642 10 6452 1 2025-08-14 02:45:10.996 00:05:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 02:49:17.737 00:00:10.362 TCP 23.104.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:49:43.456 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49608 10 6452 1 2025-08-14 02:50:18.137 00:00:10.326 TCP 23.104.0.1:33258 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:50:43.671 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58758 10 6452 1 2025-08-14 02:51:18.505 00:00:10.414 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:51:43.888 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40354 10 6452 1 2025-08-14 02:52:18.964 00:00:10.327 TCP 23.104.0.1:36302 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:52:46.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 02:52:47.132 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 02:52:44.082 00:00:10.802 TCP 1.101.0.1:3000 -> 22.102.0.1:50128 11 6504 1 2025-08-14 02:53:19.329 00:00:10.364 TCP 23.104.0.1:57638 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:53:44.927 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:53896 10 6452 1 2025-08-14 02:50:10.993 00:04:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 02:54:19.731 00:00:10.331 TCP 23.104.0.1:38398 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:54:45.178 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56560 10 6452 1 2025-08-14 02:51:10.997 00:05:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 02:55:20.108 00:00:10.319 TCP 23.104.0.1:36284 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:55:45.395 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60814 10 6452 1 2025-08-14 02:56:20.469 00:00:10.367 TCP 23.104.0.1:49624 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:56:45.610 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53038 10 6452 1 2025-08-14 02:57:20.877 00:00:10.321 TCP 23.104.0.1:59592 -> 1.101.0.1:3000 11 1507 1 2025-08-14 02:57:47.553 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 02:57:47.406 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 02:57:45.792 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55032 10 6452 1 2025-08-14 02:58:21.243 00:00:14.287 TCP 23.104.0.1:50862 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 499885, total packets: 1571, avg bps: 1067, avg pps: 0, avg bpp: 318 Time window: 2025-08-14 01:56:10 - 2025-08-14 02:58:35 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0012s Wall: 0.0026s flows/second: 62814.4 Runtime: 0.0026s