Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 03:58:55.272 00:00:10.335 TCP 23.104.0.1:35408 -> 1.101.0.1:3000 11 1507 1 2025-08-15 03:59:32.793 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41326 10 6452 1 2025-08-15 03:59:55.642 00:00:10.366 TCP 23.104.0.1:54386 -> 1.101.0.1:3000 11 1507 1 2025-08-15 03:56:11.474 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 04:00:32.966 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47698 10 6452 1 2025-08-15 04:00:56.052 00:00:10.372 TCP 23.104.0.1:32872 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:01:33.196 00:00:10.430 TCP 1.101.0.1:3000 -> 22.102.0.1:60646 10 6452 1 2025-08-15 04:01:56.462 00:00:10.323 TCP 23.104.0.1:36226 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:02:33.677 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54530 10 6452 1 2025-08-15 04:02:56.823 00:00:10.368 TCP 23.104.0.1:51800 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:03:17.252 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 04:03:17.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:03:33.885 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53180 10 6452 1 2025-08-15 04:03:57.229 00:00:10.361 TCP 23.104.0.1:38580 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:00:11.473 00:05:00.863 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 04:04:34.111 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45610 10 6452 1 2025-08-15 04:04:57.630 00:00:10.321 TCP 23.104.0.1:60488 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:05:34.322 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52360 10 6452 1 2025-08-15 04:05:57.993 00:00:10.329 TCP 23.104.0.1:54194 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:02:11.479 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 04:06:34.540 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52100 10 6452 1 2025-08-15 04:06:58.358 00:00:10.320 TCP 23.104.0.1:47686 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:07:34.756 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36098 10 6452 1 2025-08-15 04:07:58.717 00:00:10.381 TCP 23.104.0.1:39450 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:08:17.568 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 04:08:17.659 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:08:34.929 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:51230 10 6452 1 2025-08-15 04:08:59.130 00:00:10.369 TCP 23.104.0.1:40970 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:09:35.124 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39294 10 6452 1 2025-08-15 04:09:59.535 00:00:10.367 TCP 23.104.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:06:11.478 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 04:10:35.339 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34456 10 6452 1 2025-08-15 04:10:59.940 00:00:10.351 TCP 23.104.0.1:37230 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:11:35.555 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50224 10 6452 1 2025-08-15 04:12:00.340 00:00:10.363 TCP 23.104.0.1:56938 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:08:11.480 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 04:12:35.762 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:44092 10 6452 1 2025-08-15 04:13:00.748 00:00:10.392 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:13:17.596 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 04:13:17.735 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:13:35.928 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:44172 10 6452 1 2025-08-15 04:14:01.177 00:00:10.367 TCP 23.104.0.1:41460 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:14:36.174 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45168 10 6452 1 2025-08-15 04:15:01.580 00:00:10.367 TCP 23.104.0.1:39336 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:15:36.396 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43880 10 6452 1 2025-08-15 04:12:11.479 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 04:16:01.985 00:00:10.366 TCP 23.104.0.1:44538 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:16:36.610 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47956 10 6452 1 2025-08-15 04:17:02.393 00:00:10.367 TCP 23.104.0.1:48598 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:17:36.830 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:33592 10 6452 1 2025-08-15 04:14:11.481 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 04:18:02.800 00:00:10.327 TCP 23.104.0.1:45640 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:18:17.644 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:18:17.669 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 04:18:37.105 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59764 10 6452 1 2025-08-15 04:19:03.168 00:00:10.365 TCP 23.104.0.1:42392 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:19:37.324 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60712 10 6452 1 2025-08-15 04:20:03.568 00:00:10.368 TCP 23.104.0.1:53324 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:20:37.550 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43722 10 6452 1 2025-08-15 04:21:03.979 00:00:10.370 TCP 23.104.0.1:48196 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:21:37.772 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37196 10 6452 1 2025-08-15 04:18:11.479 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 04:22:04.386 00:00:10.370 TCP 23.104.0.1:58670 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:22:38.007 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57466 10 6452 1 2025-08-15 04:23:04.791 00:00:10.350 TCP 23.104.0.1:36250 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:23:17.629 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 04:23:17.874 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:23:38.216 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38364 10 6452 1 2025-08-15 04:24:05.176 00:00:10.370 TCP 23.104.0.1:57728 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:20:11.484 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 04:24:38.440 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37822 10 6452 1 2025-08-15 04:25:05.576 00:00:10.359 TCP 23.104.0.1:37398 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:25:38.658 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44176 10 6452 1 2025-08-15 04:26:05.975 00:00:10.412 TCP 23.104.0.1:34330 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:26:38.877 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43052 10 6452 1 2025-08-15 04:27:06.427 00:00:10.365 TCP 23.104.0.1:50536 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:27:39.099 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54594 10 6452 1 2025-08-15 04:24:11.485 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 04:28:17.914 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:28:06.834 00:00:10.389 TCP 23.104.0.1:34082 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:28:17.782 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 04:28:39.278 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43458 10 6452 1 2025-08-15 04:29:07.262 00:00:10.363 TCP 23.104.0.1:60520 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:29:39.494 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48034 10 6452 1 2025-08-15 04:26:11.487 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 04:30:07.665 00:00:10.369 TCP 23.104.0.1:33464 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:30:39.698 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34448 10 6452 1 2025-08-15 04:31:08.102 00:00:10.370 TCP 23.104.0.1:56784 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:31:39.909 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47508 10 6452 1 2025-08-15 04:32:08.506 00:00:10.367 TCP 23.104.0.1:39694 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:32:40.127 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45896 10 6452 1 2025-08-15 04:33:18.196 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:33:08.912 00:00:10.370 TCP 23.104.0.1:51742 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:33:18.148 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 04:33:40.342 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54900 10 6452 1 2025-08-15 04:30:11.489 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 04:34:09.320 00:00:10.370 TCP 23.104.0.1:59932 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:34:40.556 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50038 10 6452 1 2025-08-15 04:35:09.733 00:00:10.327 TCP 23.104.0.1:55734 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:35:40.770 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:58528 10 6452 1 2025-08-15 04:32:11.491 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 04:36:10.106 00:00:10.364 TCP 23.104.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:36:40.961 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40812 12 6556 1 2025-08-15 04:37:10.510 00:00:10.369 TCP 23.104.0.1:50678 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:37:41.192 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51690 10 6452 1 2025-08-15 04:38:18.230 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:38:10.920 00:00:10.379 TCP 23.104.0.1:35724 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:38:18.015 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 04:38:41.367 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40980 10 6452 1 2025-08-15 04:39:11.339 00:00:10.365 TCP 23.104.0.1:40918 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:39:41.578 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60130 10 6452 1 2025-08-15 04:36:11.490 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 04:40:11.738 00:00:10.363 TCP 23.104.0.1:50730 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:40:41.793 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-08-15 04:41:12.143 00:00:10.362 TCP 23.104.0.1:54976 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:41:41.967 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56454 10 6452 1 2025-08-15 04:38:11.493 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 04:42:12.543 00:00:10.451 TCP 23.104.0.1:35996 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:42:42.195 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42450 10 6452 1 2025-08-15 04:43:18.193 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 04:43:17.993 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:43:13.035 00:00:10.359 TCP 23.104.0.1:33868 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:43:42.409 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39018 10 6452 1 2025-08-15 04:44:13.430 00:00:10.369 TCP 23.104.0.1:41906 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:44:42.633 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48050 10 6452 1 2025-08-15 04:45:13.845 00:00:10.402 TCP 23.104.0.1:48314 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:45:42.845 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33934 10 6452 1 2025-08-15 04:42:11.491 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 04:46:14.287 00:00:10.365 TCP 23.104.0.1:54922 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:46:43.091 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35632 10 6452 1 2025-08-15 04:47:14.697 00:00:10.336 TCP 23.104.0.1:48462 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:47:43.317 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55174 10 6452 1 2025-08-15 04:44:11.494 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 04:48:18.476 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 04:48:18.284 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:48:15.096 00:00:10.377 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:48:43.541 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37412 10 6452 1 2025-08-15 04:49:15.514 00:00:10.323 TCP 23.104.0.1:48234 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:49:43.758 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48272 10 6452 1 2025-08-15 04:50:15.876 00:00:10.402 TCP 23.104.0.1:41024 -> 1.101.0.1:3000 15 1926 1 2025-08-15 04:50:43.977 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:54904 12 10365 1 2025-08-15 04:51:16.317 00:00:10.377 TCP 23.104.0.1:54858 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:51:44.238 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-08-15 04:48:11.492 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 04:52:16.734 00:00:10.368 TCP 23.104.0.1:36096 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:52:44.409 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:34224 10 6452 1 2025-08-15 04:53:18.495 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:53:18.490 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 04:53:17.138 00:00:10.358 TCP 23.104.0.1:33446 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:53:44.622 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39124 10 6452 1 2025-08-15 04:50:11.495 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 04:54:17.542 00:00:10.362 TCP 23.104.0.1:56198 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:54:44.794 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42500 10 6452 1 2025-08-15 04:55:17.946 00:00:10.372 TCP 23.104.0.1:57148 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:55:44.966 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37734 12 6556 1 2025-08-15 04:56:18.356 00:00:10.371 TCP 23.104.0.1:50554 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:56:45.190 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59630 10 6452 1 2025-08-15 04:57:18.766 00:00:10.330 TCP 23.104.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-08-15 04:57:45.401 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43236 10 6452 1 2025-08-15 04:54:11.493 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 04:58:18.633 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 04:58:18.728 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 04:58:19.133 00:00:10.324 TCP 23.104.0.1:42290 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496436, total packets: 1572, avg bps: 1050, avg pps: 0, avg bpp: 315 Time window: 2025-08-15 03:56:11 - 2025-08-15 04:59:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0051s User: 0.0000s Wall: 0.0025s flows/second: 66017.0 Runtime: 0.0025s