Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 10:59:13.551 00:00:10.364 TCP 23.104.0.1:40866 -> 1.101.0.1:3000 11 1507 1 2025-08-25 10:59:21.076 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45002 10 6452 1 2025-08-25 11:00:13.958 00:00:10.363 TCP 23.104.0.1:50614 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:00:21.289 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43766 10 6452 1 2025-08-25 11:01:14.361 00:00:10.326 TCP 23.104.0.1:35898 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:01:21.526 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54964 10 6452 1 2025-08-25 10:57:17.455 00:06:00.051 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 11:02:14.727 00:00:10.370 TCP 23.104.0.1:50024 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:02:21.740 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35558 10 6452 1 2025-08-25 11:03:14.653 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 11:03:14.670 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 10:58:17.458 00:06:00.046 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 11:03:15.141 00:00:10.365 TCP 23.104.0.1:60900 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:03:21.909 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:42760 11 6504 1 2025-08-25 11:04:15.539 00:00:10.322 TCP 23.104.0.1:53448 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:04:22.184 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44732 10 6452 1 2025-08-25 11:05:15.899 00:00:10.372 TCP 23.104.0.1:38642 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:05:22.394 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:49324 10 6452 1 2025-08-25 11:06:16.307 00:00:10.375 TCP 23.104.0.1:36516 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:06:22.595 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34500 10 6452 1 2025-08-25 11:07:16.719 00:00:10.318 TCP 23.104.0.1:54228 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:07:22.804 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42192 10 6452 1 2025-08-25 11:08:14.771 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 11:08:14.937 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 11:08:17.107 00:00:10.369 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:08:23.024 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58844 10 6452 1 2025-08-25 11:04:17.459 00:06:00.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 11:09:17.515 00:00:10.373 TCP 23.104.0.1:45186 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:09:23.198 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34378 12 6556 1 2025-08-25 11:05:17.462 00:06:00.051 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 11:10:17.926 00:00:10.349 TCP 23.104.0.1:37502 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:10:23.408 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34004 10 6452 1 2025-08-25 11:11:18.315 00:00:10.397 TCP 23.104.0.1:47796 -> 1.101.0.1:3000 15 1926 1 2025-08-25 11:11:23.620 00:00:10.523 TCP 1.101.0.1:3000 -> 22.102.0.1:49068 12 10367 1 2025-08-25 11:12:18.748 00:00:10.378 TCP 23.104.0.1:42142 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:12:24.183 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32816 10 6452 1 2025-08-25 11:13:15.337 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 11:13:15.054 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 11:13:19.164 00:00:10.367 TCP 23.104.0.1:47788 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:13:24.406 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48838 10 6452 1 2025-08-25 11:14:19.564 00:00:10.368 TCP 23.104.0.1:57236 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:14:24.571 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33416 10 6452 1 2025-08-25 11:15:19.974 00:00:10.377 TCP 23.104.0.1:38596 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:15:24.786 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51008 10 6452 1 2025-08-25 11:11:17.461 00:06:00.055 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 11:16:20.379 00:00:10.364 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:16:25.007 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50412 10 6452 1 2025-08-25 11:12:17.463 00:06:00.050 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 11:17:20.779 00:00:10.365 TCP 23.104.0.1:54316 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:17:25.223 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50346 10 6452 1 2025-08-25 11:18:15.144 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 11:18:15.328 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 11:18:21.181 00:00:10.347 TCP 23.104.0.1:55152 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:18:25.391 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43512 10 6452 1 2025-08-25 11:19:21.567 00:00:10.363 TCP 23.104.0.1:33512 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:19:25.614 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49292 10 6452 1 2025-08-25 11:20:25.827 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52032 10 6452 1 2025-08-25 11:20:21.967 00:00:10.328 TCP 23.104.0.1:41548 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:21:26.057 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45074 10 6452 1 2025-08-25 11:21:22.334 00:00:10.368 TCP 23.104.0.1:45936 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:22:22.737 00:00:10.370 TCP 23.104.0.1:35882 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:22:26.234 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53374 10 6452 1 2025-08-25 11:23:15.037 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 11:23:14.850 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 11:18:17.463 00:06:00.055 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 11:23:23.141 00:00:10.369 TCP 23.104.0.1:33624 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:23:26.410 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59912 10 6452 1 2025-08-25 11:19:17.464 00:06:00.050 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 11:24:23.552 00:00:10.369 TCP 23.104.0.1:55794 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:24:26.631 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56774 10 6452 1 2025-08-25 11:25:23.966 00:00:10.365 TCP 23.104.0.1:35022 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:25:26.848 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51708 10 6452 1 2025-08-25 11:26:24.370 00:00:10.366 TCP 23.104.0.1:44510 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:26:27.089 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54138 10 6452 1 2025-08-25 11:27:24.766 00:00:10.373 TCP 23.104.0.1:60986 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:27:27.304 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41102 10 6452 1 2025-08-25 11:28:15.388 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 11:28:15.297 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 11:28:25.177 00:00:10.330 TCP 23.104.0.1:54902 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:28:27.519 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34708 10 6452 1 2025-08-25 11:29:25.546 00:00:10.368 TCP 23.104.0.1:41122 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:29:27.745 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43652 10 6452 1 2025-08-25 11:25:17.467 00:06:00.051 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 11:30:25.951 00:00:10.324 TCP 23.104.0.1:47752 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:30:27.924 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:49980 10 6452 1 2025-08-25 11:26:17.471 00:06:00.045 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 11:31:26.312 00:00:10.362 TCP 23.104.0.1:40410 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:31:28.108 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52830 10 6452 1 2025-08-25 11:32:28.322 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53690 10 6452 1 2025-08-25 11:32:26.714 00:00:10.379 TCP 23.104.0.1:43278 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:33:15.059 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 11:33:15.313 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 11:33:28.499 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59522 10 6452 1 2025-08-25 11:33:27.132 00:00:10.322 TCP 23.104.0.1:35104 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:34:27.499 00:00:10.371 TCP 23.104.0.1:33284 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:34:28.712 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60636 10 6452 1 2025-08-25 11:35:28.923 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:49090 10 6452 1 2025-08-25 11:35:27.909 00:00:10.360 TCP 23.104.0.1:60706 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:36:28.309 00:00:10.373 TCP 23.104.0.1:33536 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:36:29.108 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57266 10 6452 1 2025-08-25 11:32:17.469 00:06:00.054 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 11:37:29.316 00:00:10.424 TCP 1.101.0.1:3000 -> 22.102.0.1:33510 10 6452 1 2025-08-25 11:37:28.723 00:00:10.381 TCP 23.104.0.1:40456 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:38:15.524 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 11:38:15.371 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 11:33:17.472 00:06:00.048 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 11:38:29.144 00:00:10.364 TCP 23.104.0.1:53232 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:38:29.778 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:58742 10 6452 1 2025-08-25 11:39:29.965 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38664 10 6452 1 2025-08-25 11:39:29.554 00:00:10.317 TCP 23.104.0.1:40564 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:40:30.180 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60798 10 6452 1 2025-08-25 11:40:29.913 00:00:10.369 TCP 23.104.0.1:55078 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:41:30.396 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55366 10 6452 1 2025-08-25 11:41:30.316 00:00:10.323 TCP 23.104.0.1:35474 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:42:30.570 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54536 10 6452 1 2025-08-25 11:42:30.678 00:00:10.367 TCP 23.104.0.1:42764 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:43:15.686 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 11:43:15.410 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 11:43:31.106 00:00:10.360 TCP 23.104.0.1:35062 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:43:30.778 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50316 10 6452 1 2025-08-25 11:39:17.474 00:06:00.049 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 11:44:31.508 00:00:10.364 TCP 23.104.0.1:54908 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:44:30.994 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55142 10 6452 1 2025-08-25 11:40:17.474 00:06:00.047 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 11:45:31.210 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54576 10 6452 1 2025-08-25 11:45:31.909 00:00:10.373 TCP 23.104.0.1:52072 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:46:31.426 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54382 10 6452 1 2025-08-25 11:46:32.319 00:00:10.363 TCP 23.104.0.1:52994 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:47:31.658 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39784 10 6452 1 2025-08-25 11:47:32.717 00:00:10.378 TCP 23.104.0.1:51058 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:48:15.667 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 11:48:15.590 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 11:48:31.866 00:00:10.317 TCP 1.101.0.1:3000 -> 22.102.0.1:47540 10 6452 1 2025-08-25 11:48:33.133 00:00:10.327 TCP 23.104.0.1:43796 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:49:32.228 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42732 10 6452 1 2025-08-25 11:49:33.500 00:00:10.949 TCP 23.104.0.1:59020 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:50:32.401 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40180 10 6452 1 2025-08-25 11:50:34.489 00:00:10.364 TCP 23.104.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:46:17.474 00:06:00.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 11:51:32.615 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49090 10 6452 1 2025-08-25 11:51:34.890 00:00:10.432 TCP 23.104.0.1:41404 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:47:17.476 00:06:00.058 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 11:52:32.833 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58722 10 6452 1 2025-08-25 11:52:35.359 00:00:10.366 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:53:15.808 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 11:53:15.787 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 11:53:35.765 00:00:10.380 TCP 23.104.0.1:59844 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:53:33.063 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45978 10 6452 1 2025-08-25 11:54:33.279 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36382 10 6452 1 2025-08-25 11:54:36.186 00:00:10.380 TCP 23.104.0.1:50524 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:55:36.599 00:00:10.369 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:55:33.489 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55752 10 6452 1 2025-08-25 11:56:33.698 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39872 10 6452 1 2025-08-25 11:56:37.010 00:00:10.371 TCP 23.104.0.1:32920 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:57:33.916 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58360 10 6452 1 2025-08-25 11:57:37.419 00:00:10.366 TCP 23.104.0.1:35700 -> 1.101.0.1:3000 11 1507 1 2025-08-25 11:58:15.618 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 11:58:15.950 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 11:53:17.481 00:06:00.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 11:58:34.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51122 10 6452 1 2025-08-25 11:58:37.826 00:00:10.321 TCP 23.104.0.1:40582 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 502715, total packets: 1579, avg bps: 1081, avg pps: 0, avg bpp: 318 Time window: 2025-08-25 10:57:17 - 2025-08-25 11:59:17 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0032s User: 0.0011s Wall: 0.0016s flows/second: 103002.3 Runtime: 0.0016s