Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 04:58:42.504 00:00:10.324 TCP 23.104.0.1:38332 -> 1.101.0.1:3000 11 1507 1 2025-08-25 04:59:02.899 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54254 10 6452 1 2025-08-25 04:54:17.305 00:06:00.066 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 04:59:42.869 00:00:10.324 TCP 23.104.0.1:56610 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:00:03.113 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47626 10 6452 1 2025-08-25 05:00:43.231 00:00:10.370 TCP 23.104.0.1:39008 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:01:03.325 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33302 10 6452 1 2025-08-25 05:01:43.637 00:00:10.372 TCP 23.104.0.1:38856 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:02:03.542 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:53198 10 6452 1 2025-08-25 05:02:44.047 00:00:10.372 TCP 23.104.0.1:59190 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:03:07.409 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 05:03:07.459 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 05:03:03.914 00:00:10.464 TCP 1.101.0.1:3000 -> 22.102.0.1:60330 10 6452 1 2025-08-25 05:03:44.454 00:00:10.326 TCP 23.104.0.1:33234 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:04:04.423 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51180 10 6452 1 2025-08-25 05:04:44.814 00:00:10.367 TCP 23.104.0.1:56342 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:05:04.638 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33276 10 6452 1 2025-08-25 05:00:17.304 00:06:00.070 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 05:05:45.219 00:00:10.330 TCP 23.104.0.1:43124 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:06:04.856 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59742 10 6452 1 2025-08-25 05:01:17.306 00:06:00.065 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 05:06:45.583 00:00:10.653 TCP 23.104.0.1:57518 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:07:05.083 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58448 10 6452 1 2025-08-25 05:07:46.274 00:00:10.330 TCP 23.104.0.1:37702 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:08:07.448 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 05:08:07.556 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 05:08:05.301 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33452 10 6452 1 2025-08-25 05:08:46.642 00:00:10.365 TCP 23.104.0.1:37582 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:09:05.523 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43388 10 6452 1 2025-08-25 05:09:47.051 00:00:10.363 TCP 23.104.0.1:44064 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:10:05.735 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2025-08-25 05:10:47.451 00:00:10.363 TCP 23.104.0.1:58450 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:11:05.946 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55956 10 6452 1 2025-08-25 05:11:47.853 00:00:10.372 TCP 23.104.0.1:46620 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:12:06.185 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58966 10 6452 1 2025-08-25 05:07:17.305 00:06:00.071 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 05:12:48.263 00:00:10.378 TCP 23.104.0.1:46548 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:13:07.896 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 05:13:07.640 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 05:13:06.397 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59246 10 6452 1 2025-08-25 05:08:17.309 00:06:00.066 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 05:13:48.695 00:00:10.362 TCP 23.104.0.1:43788 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:14:06.610 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:48220 11 6504 1 2025-08-25 05:14:49.101 00:00:10.367 TCP 23.104.0.1:56702 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:15:06.873 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35382 10 6452 1 2025-08-25 05:15:49.506 00:00:10.364 TCP 23.104.0.1:39094 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:16:07.067 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50450 10 6452 1 2025-08-25 05:16:49.907 00:00:10.374 TCP 23.104.0.1:50634 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:17:07.276 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-08-25 05:17:50.318 00:00:10.362 TCP 23.104.0.1:47894 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:18:08.208 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 05:18:08.334 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 05:18:07.495 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58370 10 6452 1 2025-08-25 05:18:50.719 00:00:10.369 TCP 23.104.0.1:59836 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:19:07.694 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59044 10 6452 1 2025-08-25 05:14:17.309 00:06:00.069 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 05:19:51.126 00:00:10.322 TCP 23.104.0.1:45728 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:15:17.313 00:06:00.064 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 05:20:07.946 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56812 10 6452 1 2025-08-25 05:20:51.485 00:00:10.362 TCP 23.104.0.1:34456 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:21:08.175 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41490 10 6452 1 2025-08-25 05:21:51.888 00:00:10.343 TCP 23.104.0.1:41662 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:22:08.384 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35002 10 6452 1 2025-08-25 05:22:52.265 00:00:10.366 TCP 23.104.0.1:60830 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:23:08.037 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 05:23:07.941 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 05:23:08.560 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:44736 10 6452 1 2025-08-25 05:23:52.668 00:00:10.364 TCP 23.104.0.1:46444 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:24:08.749 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35842 10 6452 1 2025-08-25 05:24:53.101 00:00:10.366 TCP 23.104.0.1:37988 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:25:08.963 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44984 10 6452 1 2025-08-25 05:25:53.501 00:00:10.371 TCP 23.104.0.1:53802 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:26:09.182 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39292 10 6452 1 2025-08-25 05:21:17.320 00:06:00.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 05:26:53.910 00:00:10.326 TCP 23.104.0.1:36396 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:27:09.395 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47090 10 6452 1 2025-08-25 05:22:17.323 00:06:00.055 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 05:27:54.270 00:00:10.370 TCP 23.104.0.1:43520 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:28:07.773 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 05:28:07.954 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 05:28:09.608 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45212 10 6452 1 2025-08-25 05:28:54.676 00:00:10.365 TCP 23.104.0.1:45452 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:29:09.828 00:00:10.312 TCP 1.101.0.1:3000 -> 22.102.0.1:56938 10 6452 1 2025-08-25 05:29:55.104 00:00:10.367 TCP 23.104.0.1:41870 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:30:10.181 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35602 10 6452 1 2025-08-25 05:30:55.508 00:00:10.364 TCP 23.104.0.1:45194 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:31:10.369 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55980 10 6452 1 2025-08-25 05:31:55.914 00:00:10.381 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:32:10.577 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:38540 10 6452 1 2025-08-25 05:32:56.336 00:00:10.363 TCP 23.104.0.1:41594 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:33:08.277 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 05:33:08.117 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 05:33:10.784 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35438 10 6452 1 2025-08-25 05:28:17.321 00:06:00.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 05:33:56.740 00:00:10.325 TCP 23.104.0.1:53274 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:34:11.002 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60312 10 6452 1 2025-08-25 05:29:17.323 00:06:00.058 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 05:34:57.112 00:00:10.379 TCP 23.104.0.1:53904 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:35:11.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49410 10 6452 1 2025-08-25 05:35:57.533 00:00:10.332 TCP 23.104.0.1:55722 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:36:11.427 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:52590 10 6452 1 2025-08-25 05:36:57.900 00:00:10.443 TCP 23.104.0.1:44734 -> 1.101.0.1:3000 15 1926 1 2025-08-25 05:37:11.598 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34318 12 10365 1 2025-08-25 05:37:58.385 00:00:10.366 TCP 23.104.0.1:40792 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:38:08.279 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 05:38:08.279 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 05:38:11.833 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48354 10 6452 1 2025-08-25 05:38:58.788 00:00:10.372 TCP 23.104.0.1:53010 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:39:12.010 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45328 10 6452 1 2025-08-25 05:39:59.200 00:00:10.373 TCP 23.104.0.1:45000 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:35:17.322 00:06:00.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 05:40:12.223 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51274 10 6452 1 2025-08-25 05:40:59.610 00:00:10.364 TCP 23.104.0.1:56392 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:36:17.334 00:06:00.050 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 05:41:12.397 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39094 10 6452 1 2025-08-25 05:42:00.013 00:00:10.364 TCP 23.104.0.1:51818 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:42:12.615 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57650 10 6452 1 2025-08-25 05:43:08.243 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 05:43:00.414 00:00:10.372 TCP 23.104.0.1:35950 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:43:08.566 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 05:43:12.827 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52254 10 6452 1 2025-08-25 05:44:00.826 00:00:10.437 TCP 23.104.0.1:38872 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:44:13.058 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55654 10 6452 1 2025-08-25 05:45:01.319 00:00:10.367 TCP 23.104.0.1:39310 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:45:13.228 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53306 10 6452 1 2025-08-25 05:46:01.723 00:00:10.383 TCP 23.104.0.1:41440 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:46:13.442 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59370 10 6452 1 2025-08-25 05:47:02.141 00:00:10.368 TCP 23.104.0.1:50816 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:42:17.329 00:06:00.058 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 05:47:13.654 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41454 10 6452 1 2025-08-25 05:48:08.334 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 05:48:08.468 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 05:48:02.545 00:00:10.373 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:43:17.333 00:06:00.052 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 05:48:13.870 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35838 10 6452 1 2025-08-25 05:49:02.959 00:00:10.369 TCP 23.104.0.1:53826 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:49:14.070 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49558 10 6452 1 2025-08-25 05:50:03.366 00:00:10.365 TCP 23.104.0.1:33366 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:50:14.281 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56096 10 6452 1 2025-08-25 05:51:03.766 00:00:10.371 TCP 23.104.0.1:39596 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:51:14.499 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46468 10 6452 1 2025-08-25 05:52:04.172 00:00:10.365 TCP 23.104.0.1:33984 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:52:14.719 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:34302 10 6452 1 2025-08-25 05:53:08.642 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 05:53:08.245 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 05:53:04.583 00:00:10.320 TCP 23.104.0.1:57336 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:53:14.882 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40858 10 6452 1 2025-08-25 05:54:04.949 00:00:10.370 TCP 23.104.0.1:33160 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:49:17.330 00:06:00.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 05:54:15.113 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60720 10 6452 1 2025-08-25 05:55:05.360 00:00:10.364 TCP 23.104.0.1:40838 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:50:17.337 00:06:00.050 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 05:55:15.347 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45300 10 6452 1 2025-08-25 05:56:05.759 00:00:10.368 TCP 23.104.0.1:47206 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:56:15.562 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:59566 12 10365 1 2025-08-25 05:57:06.166 00:00:10.437 TCP 23.104.0.1:50982 -> 1.101.0.1:3000 15 1926 1 2025-08-25 05:57:15.800 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35186 10 6452 1 2025-08-25 05:58:08.623 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 05:58:08.530 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 05:58:06.645 00:00:10.360 TCP 23.104.0.1:43312 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:58:16.033 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52718 10 6452 1 Summary: total flows: 161, total bytes: 506941, total packets: 1583, avg bps: 1053, avg pps: 0, avg bpp: 320 Time window: 2025-08-25 04:54:17 - 2025-08-25 05:58:26 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0033s User: 0.0011s Wall: 0.0026s flows/second: 62399.1 Runtime: 0.0026s