Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 05:58:56.555 00:00:10.363 TCP 23.104.0.1:39956 -> 1.101.0.1:3000 11 1507 1 2025-08-14 05:54:11.076 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-14 05:59:26.639 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47560 10 6452 1 2025-08-14 05:59:56.953 00:00:10.369 TCP 23.104.0.1:54682 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:00:26.810 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42614 10 6452 1 2025-08-14 06:00:57.362 00:00:10.360 TCP 23.104.0.1:46100 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:01:26.980 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34474 10 6452 1 2025-08-14 06:00:11.851 00:02:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 5 317 1 2025-08-14 06:01:57.762 00:00:10.379 TCP 23.104.0.1:60600 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:02:27.221 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58678 10 6452 1 2025-08-14 06:02:50.943 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 06:02:50.902 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 06:02:58.179 00:00:10.325 TCP 23.104.0.1:36798 -> 1.101.0.1:3000 11 1507 1 2025-08-14 05:58:11.073 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-14 06:03:27.392 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51412 10 6452 1 2025-08-14 06:03:58.542 00:00:10.365 TCP 23.104.0.1:59468 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:04:27.569 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50412 10 6452 1 2025-08-14 06:04:58.945 00:00:10.374 TCP 23.104.0.1:58758 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:05:27.738 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37552 10 6452 1 2025-08-14 06:04:11.854 00:02:00.011 TCP 179.1.22.1:179 -> 179.1.22.22:39396 5 298 1 2025-08-14 06:05:59.358 00:00:10.365 TCP 23.104.0.1:33696 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:06:27.940 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:50202 10 6452 1 2025-08-14 06:06:59.763 00:00:10.335 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:03:11.079 00:04:00.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 06:07:28.173 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52674 10 6452 1 2025-08-14 06:07:51.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 06:07:50.899 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 06:08:00.134 00:00:10.756 TCP 23.104.0.1:33050 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:08:28.380 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41450 10 6452 1 2025-08-14 06:09:00.923 00:00:10.382 TCP 23.104.0.1:50616 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:09:28.555 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45110 10 6452 1 2025-08-14 06:10:01.343 00:00:10.326 TCP 23.104.0.1:33996 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:10:28.765 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41278 10 6452 1 2025-08-14 06:07:11.076 00:04:00.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 06:11:01.707 00:00:10.382 TCP 23.104.0.1:37314 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:11:28.981 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46688 10 6452 1 2025-08-14 06:08:11.079 00:04:00.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 06:12:02.125 00:00:10.365 TCP 23.104.0.1:39736 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:12:29.232 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60692 10 6452 1 2025-08-14 06:12:50.913 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 06:12:51.322 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 06:13:02.527 00:00:10.364 TCP 23.104.0.1:39522 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:13:29.438 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-08-14 06:14:02.937 00:00:10.377 TCP 23.104.0.1:54428 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:14:29.603 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53870 10 6452 1 2025-08-14 06:15:03.348 00:00:10.367 TCP 23.104.0.1:39648 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:15:29.816 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60116 10 6452 1 2025-08-14 06:12:11.077 00:04:00.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 06:16:03.757 00:00:10.390 TCP 23.104.0.1:39586 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:16:30.030 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44450 10 6452 1 2025-08-14 06:17:04.189 00:00:10.356 TCP 23.104.0.1:33188 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:17:30.242 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35532 10 6452 1 2025-08-14 06:17:51.322 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 06:17:51.276 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 06:13:11.079 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-14 06:18:04.589 00:00:10.326 TCP 23.104.0.1:52608 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:18:30.464 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45902 10 6452 1 2025-08-14 06:19:04.951 00:00:10.362 TCP 23.104.0.1:38178 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:19:30.676 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:43736 10 6452 1 2025-08-14 06:20:05.356 00:00:10.329 TCP 23.104.0.1:40488 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:20:30.863 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49590 10 6452 1 2025-08-14 06:21:05.720 00:00:10.383 TCP 23.104.0.1:59524 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:21:31.093 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53762 10 6452 1 2025-08-14 06:17:11.078 00:06:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-14 06:22:06.139 00:00:10.362 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:22:31.303 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36516 10 6452 1 2025-08-14 06:22:51.499 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 06:22:51.250 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 06:23:06.538 00:00:10.359 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:23:31.516 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37416 10 6452 1 2025-08-14 06:19:11.853 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-14 06:24:06.948 00:00:10.376 TCP 23.104.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:24:31.723 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 10 6452 1 2025-08-14 06:25:07.359 00:00:10.339 TCP 23.104.0.1:57516 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:25:31.893 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41240 10 6452 1 2025-08-14 06:26:07.736 00:00:10.369 TCP 23.104.0.1:42520 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:26:32.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46184 10 6452 1 2025-08-14 06:27:08.146 00:00:10.368 TCP 23.104.0.1:45062 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:27:32.328 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46910 10 6452 1 2025-08-14 06:27:51.602 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 06:27:51.668 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 06:23:11.857 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-08-14 06:28:08.552 00:00:10.370 TCP 23.104.0.1:40762 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:28:32.542 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60966 10 6452 1 2025-08-14 06:29:08.964 00:00:10.374 TCP 23.104.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:29:32.753 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53710 10 6452 1 2025-08-14 06:30:09.380 00:00:10.366 TCP 23.104.0.1:46346 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:30:32.963 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:43244 10 6452 1 2025-08-14 06:26:11.081 00:06:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-14 06:31:09.787 00:00:10.365 TCP 23.104.0.1:60292 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:31:33.198 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40188 10 6452 1 2025-08-14 06:32:10.192 00:00:10.360 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:32:33.413 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54670 10 6452 1 2025-08-14 06:32:51.610 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 06:32:51.666 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 06:33:10.588 00:00:10.365 TCP 23.104.0.1:50284 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:33:33.586 00:00:10.318 TCP 1.101.0.1:3000 -> 22.102.0.1:55246 10 6452 1 2025-08-14 06:32:11.859 00:02:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 5 317 1 2025-08-14 06:34:10.991 00:00:10.360 TCP 23.104.0.1:43794 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:34:33.945 00:00:12.681 TCP 1.101.0.1:3000 -> 22.102.0.1:37192 10 6452 1 2025-08-14 06:30:11.078 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-14 06:35:11.393 00:00:10.365 TCP 23.104.0.1:55160 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:35:36.685 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36518 10 6452 1 2025-08-14 06:36:11.795 00:00:10.367 TCP 23.104.0.1:44382 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:36:36.869 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60370 10 6452 1 2025-08-14 06:37:12.197 00:00:10.323 TCP 23.104.0.1:33126 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:37:37.086 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36698 10 6452 1 2025-08-14 06:37:51.479 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 06:37:51.548 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 06:38:12.562 00:00:10.368 TCP 23.104.0.1:59220 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:38:37.303 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50910 10 6452 1 2025-08-14 06:35:11.081 00:04:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 06:39:12.965 00:00:10.379 TCP 23.104.0.1:57742 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:39:37.530 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44774 10 6452 1 2025-08-14 06:40:13.397 00:00:10.329 TCP 23.104.0.1:49816 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:40:37.755 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47902 10 6452 1 2025-08-14 06:36:11.861 00:05:59.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 06:41:13.763 00:00:10.372 TCP 23.104.0.1:41482 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:41:37.967 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52382 10 6452 1 2025-08-14 06:42:14.175 00:00:10.365 TCP 23.104.0.1:44364 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:42:38.196 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38768 10 6452 1 2025-08-14 06:42:51.853 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 06:42:51.847 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 06:42:11.870 00:01:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 3 175 1 2025-08-14 06:43:14.579 00:00:10.417 TCP 23.104.0.1:49176 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:43:38.417 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:40456 10 6452 1 2025-08-14 06:40:11.084 00:04:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 06:44:15.049 00:00:10.373 TCP 23.104.0.1:57960 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:44:38.599 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51594 10 6452 1 2025-08-14 06:45:15.455 00:00:10.364 TCP 23.104.0.1:50942 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:45:38.823 00:00:10.704 TCP 1.101.0.1:3000 -> 22.102.0.1:36716 10 6452 1 2025-08-14 06:46:15.863 00:00:10.370 TCP 23.104.0.1:37168 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:46:39.562 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56760 10 6452 1 2025-08-14 06:47:16.271 00:00:10.375 TCP 23.104.0.1:37978 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:47:39.769 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36096 10 6452 1 2025-08-14 06:47:51.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 06:47:51.772 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 06:44:11.083 00:04:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 06:48:16.678 00:00:10.386 TCP 23.104.0.1:39888 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:48:39.954 00:00:10.251 TCP 1.101.0.1:3000 -> 22.102.0.1:53342 13 6608 1 2025-08-14 06:45:11.085 00:04:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 06:49:17.113 00:00:10.368 TCP 23.104.0.1:52172 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:49:40.279 00:00:10.421 TCP 1.101.0.1:3000 -> 22.102.0.1:53918 10 6452 1 2025-08-14 06:50:17.518 00:00:10.367 TCP 23.104.0.1:54260 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:50:40.736 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59000 10 6452 1 2025-08-14 06:51:17.923 00:00:10.390 TCP 23.104.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:51:40.951 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54384 10 6452 1 2025-08-14 06:52:18.350 00:00:10.364 TCP 23.104.0.1:52240 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:52:51.728 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 06:52:41.185 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43318 10 6452 1 2025-08-14 06:52:51.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 06:49:11.083 00:04:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 06:53:18.746 00:00:10.329 TCP 23.104.0.1:48594 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:53:41.399 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56352 10 6452 1 2025-08-14 06:54:19.113 00:00:10.383 TCP 23.104.0.1:42064 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:54:41.626 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35246 10 6452 1 2025-08-14 06:50:11.086 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-14 06:55:19.540 00:00:10.360 TCP 23.104.0.1:43366 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:55:41.840 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32982 10 6452 1 2025-08-14 06:56:19.938 00:00:10.381 TCP 23.104.0.1:50360 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:56:42.084 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51054 10 6452 1 2025-08-14 06:57:20.350 00:00:10.366 TCP 23.104.0.1:34114 -> 1.101.0.1:3000 11 1507 1 2025-08-14 06:57:52.167 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 06:57:42.261 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51576 10 6452 1 2025-08-14 06:57:52.161 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 06:58:20.752 00:00:10.389 TCP 23.104.0.1:45516 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 166, total bytes: 491858, total packets: 1562, avg bps: 1019, avg pps: 0, avg bpp: 314 Time window: 2025-08-14 05:54:11 - 2025-08-14 06:58:31 Total flows processed: 166, passed: 166, Blocks skipped: 0, Bytes read: 17328 Sys: 0.0012s User: 0.0035s Wall: 0.0025s flows/second: 67505.8 Runtime: 0.0025s