Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 02:58:44.981 00:00:10.363 TCP 23.104.0.1:39354 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:54:17.261 00:06:00.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 02:59:36.757 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34692 10 6870 1 2025-08-25 02:59:45.388 00:00:10.379 TCP 23.104.0.1:50988 -> 1.101.0.1:3000 11 1507 1 2025-08-25 02:55:17.265 00:06:00.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 03:00:36.967 00:00:10.353 TCP 1.101.0.1:3000 -> 22.102.0.1:33600 11 6910 1 2025-08-25 03:00:45.810 00:00:10.370 TCP 23.104.0.1:52718 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:01:37.362 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57082 10 6870 1 2025-08-25 03:01:46.214 00:00:10.367 TCP 23.104.0.1:40056 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:02:37.588 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40722 10 6870 1 2025-08-25 03:02:46.617 00:00:10.369 TCP 23.104.0.1:54300 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:03:04.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 03:03:05.182 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:03:37.758 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37754 10 6870 1 2025-08-25 03:03:47.026 00:00:10.366 TCP 23.104.0.1:33638 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:04:37.928 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44514 10 6870 1 2025-08-25 03:04:47.428 00:00:10.367 TCP 23.104.0.1:50314 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:05:38.162 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51992 10 6870 1 2025-08-25 03:05:47.831 00:00:10.386 TCP 23.104.0.1:42542 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:01:17.263 00:06:00.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 03:06:38.330 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50168 10 6870 1 2025-08-25 03:06:48.258 00:00:10.325 TCP 23.104.0.1:60978 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:02:17.265 00:06:00.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 03:07:38.544 00:00:10.555 TCP 1.101.0.1:3000 -> 22.102.0.1:52432 10 6870 1 2025-08-25 03:07:48.626 00:00:10.327 TCP 23.104.0.1:45942 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:08:05.189 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 03:08:05.226 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:08:39.133 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34150 10 6870 1 2025-08-25 03:08:48.992 00:00:10.379 TCP 23.104.0.1:59882 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:09:39.352 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32778 10 6870 1 2025-08-25 03:09:49.421 00:00:10.669 TCP 23.104.0.1:45374 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:10:39.560 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40670 10 6870 1 2025-08-25 03:10:50.129 00:00:10.368 TCP 23.104.0.1:55326 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:11:39.779 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59874 10 6870 1 2025-08-25 03:11:50.536 00:00:10.324 TCP 23.104.0.1:53202 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:12:39.991 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43922 10 6870 1 2025-08-25 03:12:50.899 00:00:10.332 TCP 23.104.0.1:52494 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:13:05.314 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:13:05.473 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 03:08:17.267 00:06:00.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 03:13:40.215 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46604 10 6870 1 2025-08-25 03:13:51.273 00:00:10.369 TCP 23.104.0.1:46680 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:09:17.271 00:06:00.055 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 03:14:40.424 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41904 10 6870 1 2025-08-25 03:14:51.679 00:00:10.372 TCP 23.104.0.1:44916 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:15:40.634 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41232 10 6870 1 2025-08-25 03:15:52.100 00:00:10.382 TCP 23.104.0.1:33532 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:16:40.845 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6870 1 2025-08-25 03:16:52.514 00:00:10.367 TCP 23.104.0.1:54548 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:17:41.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52172 10 6870 1 2025-08-25 03:18:05.669 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:17:52.920 00:00:10.344 TCP 23.104.0.1:44304 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:18:05.594 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 03:18:41.302 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36990 10 6870 1 2025-08-25 03:18:53.305 00:00:10.364 TCP 23.104.0.1:48854 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:19:41.474 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44056 10 6870 1 2025-08-25 03:19:53.705 00:00:10.325 TCP 23.104.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:15:17.269 00:06:00.062 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 03:20:41.692 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53362 10 6870 1 2025-08-25 03:20:54.082 00:00:10.372 TCP 23.104.0.1:55300 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:16:17.272 00:06:00.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 03:21:41.910 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55468 10 6870 1 2025-08-25 03:21:54.496 00:00:10.328 TCP 23.104.0.1:57566 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:22:42.124 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60160 10 6870 1 2025-08-25 03:23:05.614 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:22:54.860 00:00:10.377 TCP 23.104.0.1:34182 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:23:05.548 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 03:23:42.301 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35130 10 6870 1 2025-08-25 03:23:55.280 00:00:10.364 TCP 23.104.0.1:36320 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:24:42.511 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36996 10 6870 1 2025-08-25 03:24:55.682 00:00:10.367 TCP 23.104.0.1:58050 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:25:42.741 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 10 6870 1 2025-08-25 03:25:56.103 00:00:10.365 TCP 23.104.0.1:56808 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:26:42.960 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53268 10 6870 1 2025-08-25 03:26:56.508 00:00:10.325 TCP 23.104.0.1:32946 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:22:17.271 00:06:00.062 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 03:27:43.214 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55812 10 6870 1 2025-08-25 03:28:05.745 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 03:28:05.450 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:27:56.878 00:00:10.364 TCP 23.104.0.1:42714 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:23:17.273 00:06:00.057 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 03:28:43.459 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43400 10 6870 1 2025-08-25 03:28:57.287 00:00:10.368 TCP 23.104.0.1:39496 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:29:43.669 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57284 10 6870 1 2025-08-25 03:29:57.689 00:00:10.368 TCP 23.104.0.1:42702 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:30:43.883 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46936 10 6870 1 2025-08-25 03:30:58.127 00:00:10.325 TCP 23.104.0.1:52626 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:31:44.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33390 10 6870 1 2025-08-25 03:31:58.493 00:00:10.373 TCP 23.104.0.1:47066 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:32:44.301 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50986 10 6870 1 2025-08-25 03:33:05.810 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 03:33:05.549 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:32:58.907 00:00:10.325 TCP 23.104.0.1:50978 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:33:44.472 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36272 10 6870 1 2025-08-25 03:33:59.274 00:00:10.333 TCP 23.104.0.1:42544 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:29:17.273 00:06:00.070 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 03:34:44.649 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47168 10 6870 1 2025-08-25 03:34:59.645 00:00:10.364 TCP 23.104.0.1:42134 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:30:17.276 00:06:00.065 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 03:35:44.860 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47754 10 6870 1 2025-08-25 03:36:00.057 00:00:10.367 TCP 23.104.0.1:46938 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:36:45.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52680 10 6870 1 2025-08-25 03:37:00.460 00:00:10.362 TCP 23.104.0.1:58402 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:37:45.298 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45374 10 6870 1 2025-08-25 03:38:05.900 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 03:38:06.015 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:38:00.871 00:00:10.323 TCP 23.104.0.1:51642 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:38:45.511 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55472 10 6870 1 2025-08-25 03:39:01.230 00:00:10.361 TCP 23.104.0.1:55052 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:39:45.718 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43462 10 6870 1 2025-08-25 03:40:01.638 00:00:10.369 TCP 23.104.0.1:45262 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:40:45.893 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60192 10 6870 1 2025-08-25 03:41:02.044 00:00:10.367 TCP 23.104.0.1:60266 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:36:17.276 00:06:00.069 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 03:41:46.113 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47856 10 6870 1 2025-08-25 03:42:02.454 00:00:10.328 TCP 23.104.0.1:35048 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:37:17.278 00:06:00.065 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 03:42:46.322 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33718 10 6870 1 2025-08-25 03:43:05.984 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:43:06.183 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 03:43:02.825 00:00:10.405 TCP 23.104.0.1:51924 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:43:46.540 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49356 10 6870 1 2025-08-25 03:44:03.270 00:00:10.622 TCP 23.104.0.1:51692 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:44:46.752 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60618 10 6870 1 2025-08-25 03:45:03.938 00:00:10.372 TCP 23.104.0.1:43358 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:45:46.968 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6870 1 2025-08-25 03:46:04.346 00:00:10.364 TCP 23.104.0.1:35112 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:46:47.144 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52186 10 6870 1 2025-08-25 03:47:04.745 00:00:10.326 TCP 23.104.0.1:45318 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:47:47.361 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54352 10 6870 1 2025-08-25 03:48:05.936 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 03:48:05.710 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:48:05.112 00:00:10.362 TCP 23.104.0.1:59500 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:43:17.275 00:06:00.070 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 03:48:47.538 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48906 10 6870 1 2025-08-25 03:49:05.513 00:00:10.363 TCP 23.104.0.1:39474 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:44:17.278 00:06:00.065 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 03:49:47.749 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41470 10 6870 1 2025-08-25 03:50:05.918 00:00:10.394 TCP 23.104.0.1:43850 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:50:47.973 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38788 10 6870 1 2025-08-25 03:51:06.352 00:00:10.366 TCP 23.104.0.1:45148 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:51:48.202 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34412 10 6870 1 2025-08-25 03:52:06.757 00:00:10.331 TCP 23.104.0.1:53084 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:52:48.432 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35266 10 6870 1 2025-08-25 03:53:06.085 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:53:06.180 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 03:53:07.124 00:00:10.369 TCP 23.104.0.1:58592 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:53:48.651 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40930 10 6870 1 2025-08-25 03:54:07.530 00:00:14.196 TCP 23.104.0.1:39508 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:54:48.859 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40402 10 6870 1 2025-08-25 03:50:17.278 00:06:00.071 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 03:55:11.764 00:00:10.365 TCP 23.104.0.1:38058 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:55:49.089 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58902 10 6870 1 2025-08-25 03:51:17.281 00:06:00.066 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 03:56:12.169 00:00:10.363 TCP 23.104.0.1:55546 -> 1.101.0.1:3000 11 1507 1 2025-08-25 03:56:49.301 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:52168 12 10367 1 2025-08-25 03:57:12.570 00:00:10.443 TCP 23.104.0.1:39142 -> 1.101.0.1:3000 15 1926 1 2025-08-25 03:57:49.502 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60752 10 6452 1 2025-08-25 03:58:06.326 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 03:58:06.194 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 03:58:13.053 00:00:10.368 TCP 23.104.0.1:55324 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 520834, total packets: 1581, avg bps: 1083, avg pps: 0, avg bpp: 329 Time window: 2025-08-25 02:54:17 - 2025-08-25 03:58:23 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0027s User: 0.0018s Wall: 0.0044s flows/second: 36366.1 Runtime: 0.0045s