Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 00:58:56.022 00:00:10.363 TCP 23.104.0.1:39110 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:59:09.183 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35318 10 6452 1 2025-08-25 00:59:56.428 00:00:10.359 TCP 23.104.0.1:54982 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:00:09.394 00:00:10.737 TCP 1.101.0.1:3000 -> 22.102.0.1:58074 10 6452 1 2025-08-25 00:55:17.179 00:06:00.087 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 01:00:56.827 00:00:10.321 TCP 23.104.0.1:58762 -> 1.101.0.1:3000 11 1507 1 2025-08-25 00:56:17.182 00:06:00.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 01:01:10.171 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47440 10 6452 1 2025-08-25 01:01:57.191 00:00:10.402 TCP 23.104.0.1:33512 -> 1.101.0.1:3000 15 1926 1 2025-08-25 01:02:10.400 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:46112 12 10365 1 2025-08-25 01:03:02.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 01:03:02.787 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:02:57.632 00:00:10.362 TCP 23.104.0.1:42286 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:03:10.600 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57904 10 6452 1 2025-08-25 01:03:58.033 00:00:10.324 TCP 23.104.0.1:46408 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:04:10.768 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52140 10 6452 1 2025-08-25 01:04:58.397 00:00:10.368 TCP 23.104.0.1:56252 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:05:10.977 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54834 10 6452 1 2025-08-25 01:05:58.798 00:00:10.369 TCP 23.104.0.1:53292 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:06:11.218 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58748 10 6452 1 2025-08-25 01:06:59.204 00:00:10.361 TCP 23.104.0.1:50100 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:07:11.405 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51546 10 6452 1 2025-08-25 01:02:17.190 00:06:00.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 01:08:02.644 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:08:02.886 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 01:07:59.603 00:00:10.366 TCP 23.104.0.1:51076 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:03:17.193 00:06:00.072 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 01:08:11.573 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45336 10 6452 1 2025-08-25 01:09:00.013 00:00:10.359 TCP 23.104.0.1:39936 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:09:11.741 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56494 10 6452 1 2025-08-25 01:10:00.417 00:00:10.380 TCP 23.104.0.1:50394 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:10:11.914 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50016 10 6452 1 2025-08-25 01:11:00.828 00:00:10.374 TCP 23.104.0.1:40148 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:11:12.124 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:55060 10 6452 1 2025-08-25 01:12:01.239 00:00:10.365 TCP 23.104.0.1:42700 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:12:12.289 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38332 10 6452 1 2025-08-25 01:13:02.838 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 01:13:02.891 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:13:01.644 00:00:10.369 TCP 23.104.0.1:49494 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:13:12.521 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35834 10 6452 1 2025-08-25 01:14:02.053 00:00:10.322 TCP 23.104.0.1:59586 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:09:17.195 00:06:00.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 01:14:12.690 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59700 10 6452 1 2025-08-25 01:15:02.416 00:00:10.320 TCP 23.104.0.1:51624 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:10:17.197 00:06:00.072 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 01:15:12.898 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44906 10 6452 1 2025-08-25 01:16:02.777 00:00:10.374 TCP 23.104.0.1:57164 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:16:13.119 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41510 10 6452 1 2025-08-25 01:17:03.199 00:00:10.363 TCP 23.104.0.1:53908 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:17:13.329 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40516 10 6452 1 2025-08-25 01:18:02.674 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:18:02.913 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 01:18:03.599 00:00:10.368 TCP 23.104.0.1:53582 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:18:13.540 00:00:10.248 TCP 1.101.0.1:3000 -> 22.102.0.1:37610 10 6452 1 2025-08-25 01:19:04.005 00:00:10.334 TCP 23.104.0.1:53680 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:19:13.829 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-08-25 01:20:04.377 00:00:10.367 TCP 23.104.0.1:54032 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:20:14.038 00:00:10.520 TCP 1.101.0.1:3000 -> 22.102.0.1:38028 10 6452 1 2025-08-25 01:21:04.783 00:00:10.377 TCP 23.104.0.1:48368 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:16:17.203 00:06:00.071 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 01:21:14.602 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37362 10 6452 1 2025-08-25 01:22:05.191 00:00:10.372 TCP 23.104.0.1:46358 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:17:17.203 00:06:00.067 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 01:22:14.820 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40802 10 6452 1 2025-08-25 01:23:03.057 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:23:02.900 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 01:23:05.617 00:00:10.367 TCP 23.104.0.1:56276 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:23:15.050 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38366 10 6452 1 2025-08-25 01:24:06.020 00:00:10.375 TCP 23.104.0.1:46090 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:24:15.260 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60452 10 6452 1 2025-08-25 01:25:06.437 00:00:10.421 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:25:15.488 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49184 10 6452 1 2025-08-25 01:26:06.895 00:00:10.377 TCP 23.104.0.1:47168 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:26:15.695 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41364 10 6452 1 2025-08-25 01:27:07.308 00:00:10.323 TCP 23.104.0.1:50846 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:27:15.916 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50700 10 6452 1 2025-08-25 01:28:03.205 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 01:28:02.820 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:28:07.673 00:00:10.373 TCP 23.104.0.1:49876 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:23:17.208 00:06:00.066 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 01:28:16.130 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47602 10 6452 1 2025-08-25 01:24:17.210 00:06:00.062 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 01:29:08.108 00:00:10.327 TCP 23.104.0.1:38502 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:29:16.352 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48422 10 6452 1 2025-08-25 01:30:08.471 00:00:10.361 TCP 23.104.0.1:47014 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:30:16.565 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59120 10 6452 1 2025-08-25 01:31:08.867 00:00:10.365 TCP 23.104.0.1:44262 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:31:16.775 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:49440 14 14282 1 2025-08-25 01:32:09.271 00:00:10.519 TCP 23.104.0.1:42174 -> 1.101.0.1:3000 17 2241 1 2025-08-25 01:32:17.067 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55412 10 6452 1 2025-08-25 01:33:03.228 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:33:03.021 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 01:33:09.826 00:00:10.320 TCP 23.104.0.1:54544 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:33:17.283 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46008 10 6452 1 2025-08-25 01:34:10.189 00:00:10.366 TCP 23.104.0.1:34908 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:34:17.504 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37028 10 6452 1 2025-08-25 01:35:10.589 00:00:10.324 TCP 23.104.0.1:52224 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:30:17.208 00:06:00.078 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 01:35:17.730 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56778 10 6452 1 2025-08-25 01:36:10.952 00:00:10.366 TCP 23.104.0.1:38720 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:31:17.211 00:06:00.072 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 01:36:17.947 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35744 12 10367 1 2025-08-25 01:37:11.356 00:00:10.441 TCP 23.104.0.1:45702 -> 1.101.0.1:3000 15 1926 1 2025-08-25 01:37:18.162 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52986 10 6452 1 2025-08-25 01:38:03.594 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:38:03.567 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 01:38:11.840 00:00:10.337 TCP 23.104.0.1:41842 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:38:18.330 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58324 10 6452 1 2025-08-25 01:39:12.217 00:00:10.368 TCP 23.104.0.1:49182 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:39:18.542 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:58608 10 6452 1 2025-08-25 01:40:12.627 00:00:10.319 TCP 23.104.0.1:49114 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:40:18.833 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54044 10 6452 1 2025-08-25 01:41:12.985 00:00:10.370 TCP 23.104.0.1:57950 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:41:19.071 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54098 10 6452 1 2025-08-25 01:37:17.231 00:06:00.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 01:42:13.392 00:00:10.366 TCP 23.104.0.1:34582 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:42:19.286 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45428 10 6452 1 2025-08-25 01:43:03.519 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 01:43:03.336 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:38:17.233 00:06:00.051 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 01:43:13.794 00:00:10.364 TCP 23.104.0.1:38052 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:43:19.507 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:37428 10 6452 1 2025-08-25 01:44:14.197 00:00:10.367 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:44:19.870 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33848 10 6452 1 2025-08-25 01:45:14.604 00:00:10.324 TCP 23.104.0.1:52332 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:45:20.070 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44638 10 6452 1 2025-08-25 01:46:14.971 00:00:10.382 TCP 23.104.0.1:33084 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:46:20.249 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45004 10 6452 1 2025-08-25 01:47:15.396 00:00:10.319 TCP 23.104.0.1:35718 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:47:20.424 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58100 10 6452 1 2025-08-25 01:48:03.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 01:48:03.561 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:48:15.751 00:00:10.362 TCP 23.104.0.1:46156 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:48:20.638 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-08-25 01:44:17.232 00:06:00.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 01:49:16.156 00:00:10.324 TCP 23.104.0.1:46322 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:49:20.850 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43616 10 6452 1 2025-08-25 01:45:17.233 00:06:00.059 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 01:50:16.532 00:00:10.328 TCP 23.104.0.1:52516 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:50:21.079 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:44544 10 6452 1 2025-08-25 01:51:21.262 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33994 10 6452 1 2025-08-25 01:51:16.908 00:00:10.366 TCP 23.104.0.1:55536 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:52:17.320 00:00:10.364 TCP 23.104.0.1:47304 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:52:21.433 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46410 10 6452 1 2025-08-25 01:53:03.595 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 01:53:03.727 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:53:17.725 00:00:10.371 TCP 23.104.0.1:38252 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:53:21.651 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58058 10 6452 1 2025-08-25 01:54:18.132 00:00:10.363 TCP 23.104.0.1:44570 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:54:21.875 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59468 10 6452 1 2025-08-25 01:55:18.533 00:00:10.357 TCP 23.104.0.1:35910 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:55:22.097 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39424 10 6452 1 2025-08-25 01:51:17.233 00:06:00.062 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 01:56:18.930 00:00:10.378 TCP 23.104.0.1:57498 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:56:22.315 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47380 10 6452 1 2025-08-25 01:52:17.236 00:06:00.057 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 01:57:19.351 00:00:10.361 TCP 23.104.0.1:54696 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:57:22.489 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33202 10 6452 1 2025-08-25 01:58:03.814 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 01:58:03.748 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 01:58:19.753 00:00:10.388 TCP 23.104.0.1:54530 -> 1.101.0.1:3000 11 1507 1 2025-08-25 01:58:22.705 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60736 10 6452 1 Summary: total flows: 162, total bytes: 516316, total packets: 1606, avg bps: 1088, avg pps: 0, avg bpp: 321 Time window: 2025-08-25 00:55:17 - 2025-08-25 01:58:32 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0035s User: 0.0012s Wall: 0.0021s flows/second: 75987.2 Runtime: 0.0021s