Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 05:59:07.061 00:00:10.365 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:59:16.248 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37754 10 6452 1 2025-08-25 06:00:07.473 00:00:10.369 TCP 23.104.0.1:46130 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:00:16.422 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57254 10 6452 1 2025-08-25 06:01:07.884 00:00:10.394 TCP 23.104.0.1:53356 -> 1.101.0.1:3000 11 1507 1 2025-08-25 05:56:17.340 00:06:00.052 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 06:01:16.635 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51026 10 6452 1 2025-08-25 05:57:17.343 00:06:00.045 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 06:02:08.318 00:00:10.364 TCP 23.104.0.1:41538 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:02:16.812 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60158 10 6452 1 2025-08-25 06:03:08.757 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 06:03:08.818 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 06:03:08.721 00:00:10.323 TCP 23.104.0.1:51068 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:03:17.029 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59562 10 6452 1 2025-08-25 06:04:09.109 00:00:10.394 TCP 23.104.0.1:39214 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:04:17.247 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:43310 10 6452 1 2025-08-25 06:05:09.551 00:00:10.341 TCP 23.104.0.1:53132 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:05:17.482 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46716 10 6452 1 2025-08-25 06:06:09.932 00:00:10.368 TCP 23.104.0.1:47076 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:06:17.699 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40056 10 6452 1 2025-08-25 06:07:10.340 00:00:10.324 TCP 23.104.0.1:39528 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:07:17.869 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35162 10 6452 1 2025-08-25 06:08:08.807 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 06:08:08.936 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 06:08:10.703 00:00:10.369 TCP 23.104.0.1:52866 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:03:17.342 00:06:00.052 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 06:08:18.098 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43942 10 6452 1 2025-08-25 06:09:11.111 00:00:10.362 TCP 23.104.0.1:60084 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:04:17.345 00:06:00.046 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 06:09:18.311 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56292 10 6452 1 2025-08-25 06:10:11.515 00:00:10.366 TCP 23.104.0.1:41188 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:10:18.521 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56440 10 6452 1 2025-08-25 06:11:11.922 00:00:10.378 TCP 23.104.0.1:39452 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:11:18.735 00:00:10.297 TCP 1.101.0.1:3000 -> 22.102.0.1:53180 10 6452 1 2025-08-25 06:12:12.337 00:00:10.320 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:12:19.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38456 10 6452 1 2025-08-25 06:13:08.982 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 06:13:08.819 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 06:13:12.695 00:00:10.381 TCP 23.104.0.1:41530 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:13:19.288 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36294 10 6452 1 2025-08-25 06:14:13.115 00:00:10.363 TCP 23.104.0.1:52734 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:14:19.457 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48974 10 6452 1 2025-08-25 06:10:17.343 00:06:00.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 06:15:13.518 00:00:10.337 TCP 23.104.0.1:42896 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:15:19.680 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55436 10 6452 1 2025-08-25 06:11:17.346 00:06:00.055 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 06:16:13.887 00:00:10.350 TCP 23.104.0.1:41026 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:16:19.857 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52166 10 6452 1 2025-08-25 06:17:14.279 00:00:10.369 TCP 23.104.0.1:56200 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:17:20.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35718 10 6452 1 2025-08-25 06:18:08.948 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 06:18:08.826 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 06:18:14.685 00:00:10.369 TCP 23.104.0.1:39014 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:18:20.296 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46260 10 6452 1 2025-08-25 06:19:15.106 00:00:10.368 TCP 23.104.0.1:35326 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:19:20.471 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38966 10 6452 1 2025-08-25 06:20:15.509 00:00:10.368 TCP 23.104.0.1:48340 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:20:20.636 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54844 10 6452 1 2025-08-25 06:21:15.914 00:00:10.929 TCP 23.104.0.1:46026 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:21:20.846 00:00:10.430 TCP 1.101.0.1:3000 -> 22.102.0.1:55330 12 10367 1 2025-08-25 06:17:17.343 00:06:00.069 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 06:22:21.315 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55376 10 6452 1 2025-08-25 06:22:16.919 00:00:10.458 TCP 23.104.0.1:43082 -> 1.101.0.1:3000 15 1926 1 2025-08-25 06:23:09.041 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 06:23:09.000 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 06:18:17.346 00:06:00.057 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 06:23:21.524 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59736 10 6452 1 2025-08-25 06:23:17.423 00:00:10.402 TCP 23.104.0.1:37776 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:24:17.865 00:00:10.333 TCP 23.104.0.1:53934 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:24:21.731 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:46470 10 6452 1 2025-08-25 06:25:18.237 00:00:10.368 TCP 23.104.0.1:58232 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:25:21.927 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:46398 10 6452 1 2025-08-25 06:26:18.642 00:00:10.324 TCP 23.104.0.1:42358 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:26:22.128 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60198 10 6452 1 2025-08-25 06:27:19.006 00:00:10.365 TCP 23.104.0.1:38570 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:27:22.337 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60056 10 6452 1 2025-08-25 06:28:09.049 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 06:28:08.836 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 06:28:19.414 00:00:10.379 TCP 23.104.0.1:50814 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:28:22.544 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49940 10 6452 1 2025-08-25 06:24:17.345 00:06:00.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 06:29:19.817 00:00:10.332 TCP 23.104.0.1:45972 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:29:22.760 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45510 10 6452 1 2025-08-25 06:25:17.348 00:06:00.058 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 06:30:20.184 00:00:10.364 TCP 23.104.0.1:60748 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:30:22.980 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49642 10 6452 1 2025-08-25 06:31:20.589 00:00:10.367 TCP 23.104.0.1:46404 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:31:23.211 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49114 10 6452 1 2025-08-25 06:32:20.997 00:00:10.364 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:32:23.429 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57696 10 6452 1 2025-08-25 06:33:09.036 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 06:33:09.267 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 06:33:21.399 00:00:10.325 TCP 23.104.0.1:53132 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:33:23.596 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6452 1 2025-08-25 06:34:23.812 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52832 10 6452 1 2025-08-25 06:34:21.763 00:00:10.381 TCP 23.104.0.1:55648 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:35:24.031 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58828 10 6452 1 2025-08-25 06:35:22.183 00:00:10.373 TCP 23.104.0.1:60132 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:31:17.344 00:06:00.066 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 06:36:22.598 00:00:10.365 TCP 23.104.0.1:50008 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:36:24.247 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38052 10 6452 1 2025-08-25 06:32:17.348 00:06:00.060 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 06:37:22.999 00:00:10.324 TCP 23.104.0.1:38736 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:37:24.460 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33048 10 6452 1 2025-08-25 06:38:09.233 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 06:38:09.341 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 06:38:24.673 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56544 10 6452 1 2025-08-25 06:38:23.360 00:00:10.367 TCP 23.104.0.1:54262 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:39:24.842 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:38736 10 6452 1 2025-08-25 06:39:23.767 00:00:10.371 TCP 23.104.0.1:49266 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:40:24.176 00:00:10.364 TCP 23.104.0.1:41180 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:40:25.035 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59998 10 6452 1 2025-08-25 06:41:25.246 00:00:10.425 TCP 1.101.0.1:3000 -> 22.102.0.1:33286 10 6452 1 2025-08-25 06:41:24.577 00:00:10.323 TCP 23.104.0.1:39606 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:42:25.719 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56120 10 6452 1 2025-08-25 06:42:24.940 00:00:10.377 TCP 23.104.0.1:35932 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:43:09.357 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 06:43:09.357 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 06:38:17.348 00:06:00.068 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 06:43:25.893 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34106 10 6452 1 2025-08-25 06:43:25.353 00:00:10.365 TCP 23.104.0.1:45792 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:39:17.351 00:06:00.062 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 06:44:26.111 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38694 10 6452 1 2025-08-25 06:44:25.758 00:00:10.385 TCP 23.104.0.1:53324 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:45:26.181 00:00:10.325 TCP 23.104.0.1:51194 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:45:26.323 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34684 10 6452 1 2025-08-25 06:46:26.531 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42584 10 6452 1 2025-08-25 06:46:26.544 00:00:10.360 TCP 23.104.0.1:44620 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:47:26.747 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:51764 11 6504 1 2025-08-25 06:47:26.942 00:00:10.367 TCP 23.104.0.1:49228 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:48:09.577 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 06:48:09.822 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 06:48:27.353 00:00:10.365 TCP 23.104.0.1:55430 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:48:27.024 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48936 10 6452 1 2025-08-25 06:49:27.238 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39648 10 6452 1 2025-08-25 06:49:27.756 00:00:10.383 TCP 23.104.0.1:44192 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:45:17.351 00:06:00.068 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 06:50:27.454 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56840 10 6452 1 2025-08-25 06:50:28.185 00:00:10.368 TCP 23.104.0.1:48510 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:46:17.355 00:06:00.062 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 06:51:27.679 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40484 10 6452 1 2025-08-25 06:51:28.591 00:00:10.368 TCP 23.104.0.1:36604 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:52:27.898 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47702 10 6452 1 2025-08-25 06:52:28.997 00:00:10.365 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:53:09.751 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 06:53:09.567 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 06:53:28.082 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35252 10 6452 1 2025-08-25 06:53:29.397 00:00:10.364 TCP 23.104.0.1:45284 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:54:29.808 00:00:10.365 TCP 23.104.0.1:54450 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:54:28.297 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51922 10 6452 1 2025-08-25 06:55:28.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56342 10 6452 1 2025-08-25 06:55:30.213 00:00:10.362 TCP 23.104.0.1:58362 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:56:28.721 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32842 10 6452 1 2025-08-25 06:56:30.613 00:00:10.324 TCP 23.104.0.1:48412 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:52:17.352 00:06:00.068 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 06:57:30.975 00:00:10.328 TCP 23.104.0.1:55046 -> 1.101.0.1:3000 11 1507 1 2025-08-25 06:57:28.940 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36828 10 6452 1 2025-08-25 06:58:09.645 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 06:58:09.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 06:53:17.355 00:06:00.062 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 06:58:29.177 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36844 10 6452 1 2025-08-25 06:58:31.341 00:00:10.368 TCP 23.104.0.1:33570 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503472, total packets: 1591, avg bps: 1065, avg pps: 0, avg bpp: 316 Time window: 2025-08-25 05:56:17 - 2025-08-25 06:59:17 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0034s User: 0.0009s Wall: 0.0026s flows/second: 62257.4 Runtime: 0.0026s