Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 14:59:02.141 00:00:10.367 TCP 23.104.0.1:42900 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:59:36.429 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49896 10 6661 1 2025-08-25 15:00:02.548 00:00:10.368 TCP 23.104.0.1:41558 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:00:36.604 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58032 10 6661 1 2025-08-25 15:01:02.952 00:00:10.372 TCP 23.104.0.1:34002 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:01:36.827 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46662 10 6661 1 2025-08-25 15:02:03.360 00:00:10.367 TCP 23.104.0.1:42678 -> 1.101.0.1:3000 11 1507 1 2025-08-25 14:57:17.570 00:06:00.089 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 14:57:17.568 00:06:00.095 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 15:02:37.073 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35326 10 6661 1 2025-08-25 15:03:03.764 00:00:10.377 TCP 23.104.0.1:41422 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:03:19.634 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 15:03:19.799 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 15:03:37.287 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41606 10 6661 1 2025-08-25 15:04:04.178 00:00:10.362 TCP 23.104.0.1:54576 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:04:37.498 00:00:10.694 TCP 1.101.0.1:3000 -> 22.102.0.1:43260 10 6661 1 2025-08-25 15:05:04.578 00:00:10.370 TCP 23.104.0.1:53364 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:05:38.232 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34100 10 6661 1 2025-08-25 15:06:04.982 00:00:10.328 TCP 23.104.0.1:47374 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:06:38.405 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43522 10 6661 1 2025-08-25 15:07:05.346 00:00:10.370 TCP 23.104.0.1:38844 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:07:38.617 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39800 10 6661 1 2025-08-25 15:08:05.755 00:00:10.374 TCP 23.104.0.1:54830 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:08:20.228 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 15:08:19.763 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 15:08:38.792 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58376 10 6661 1 2025-08-25 15:09:06.166 00:00:10.376 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:04:17.573 00:06:00.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 15:04:17.576 00:06:00.086 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 15:09:39.006 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44952 10 6661 1 2025-08-25 15:10:06.574 00:00:10.331 TCP 23.104.0.1:43524 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:10:39.224 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43574 10 6661 1 2025-08-25 15:11:06.944 00:00:10.373 TCP 23.104.0.1:47828 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:11:39.435 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49976 10 6661 1 2025-08-25 15:12:07.354 00:00:10.469 TCP 23.104.0.1:50978 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:12:39.645 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6661 1 2025-08-25 15:13:07.862 00:00:10.619 TCP 23.104.0.1:58132 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:13:19.711 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 15:13:19.771 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 15:13:39.862 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47810 10 6661 1 2025-08-25 15:14:08.519 00:00:10.362 TCP 23.104.0.1:58822 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:14:40.066 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46316 10 6661 1 2025-08-25 15:15:08.923 00:00:10.376 TCP 23.104.0.1:34678 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:15:40.274 00:00:10.723 TCP 1.101.0.1:3000 -> 22.102.0.1:35984 10 6661 1 2025-08-25 15:11:17.580 00:06:00.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 15:16:09.338 00:00:10.361 TCP 23.104.0.1:41794 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:11:17.577 00:06:00.089 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 15:16:41.054 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50782 10 6661 1 2025-08-25 15:17:09.743 00:00:10.370 TCP 23.104.0.1:44414 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:17:41.270 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60144 10 6661 1 2025-08-25 15:18:10.148 00:00:10.361 TCP 23.104.0.1:49762 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:18:19.839 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 15:18:19.860 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 15:18:41.479 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37062 10 6661 1 2025-08-25 15:19:10.549 00:00:10.365 TCP 23.104.0.1:42898 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:19:41.698 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33342 10 6661 1 2025-08-25 15:20:10.955 00:00:10.327 TCP 23.104.0.1:42814 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:20:41.868 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33274 10 6661 1 2025-08-25 15:21:11.321 00:00:10.368 TCP 23.104.0.1:37330 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:21:42.064 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57592 10 6661 1 2025-08-25 15:22:11.732 00:00:10.370 TCP 23.104.0.1:34244 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:22:42.232 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59044 10 6661 1 2025-08-25 15:23:19.722 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 15:18:17.581 00:06:00.088 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 15:23:19.736 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 15:18:17.577 00:06:00.094 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 15:23:12.141 00:00:10.563 TCP 23.104.0.1:57556 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:23:42.409 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42052 10 6661 1 2025-08-25 15:24:12.743 00:00:10.375 TCP 23.104.0.1:55746 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:24:42.625 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37484 10 6661 1 2025-08-25 15:25:13.153 00:00:10.361 TCP 23.104.0.1:48356 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:25:42.836 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46194 10 6661 1 2025-08-25 15:26:13.556 00:00:10.365 TCP 23.104.0.1:36598 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:26:43.075 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33532 10 6661 1 2025-08-25 15:27:13.960 00:00:10.549 TCP 23.104.0.1:57710 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:27:43.285 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51216 10 6661 1 2025-08-25 15:28:20.404 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 15:28:20.329 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 15:28:14.553 00:00:10.325 TCP 23.104.0.1:58212 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:28:43.500 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41464 10 6661 1 2025-08-25 15:29:14.914 00:00:10.376 TCP 23.104.0.1:53550 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:29:43.711 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45044 10 6661 1 2025-08-25 15:25:17.579 00:06:00.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 15:25:17.593 00:06:00.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 15:30:15.328 00:00:10.363 TCP 23.104.0.1:42596 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:30:43.887 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49646 10 6661 1 2025-08-25 15:31:15.732 00:00:10.321 TCP 23.104.0.1:58148 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:31:44.109 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40450 10 6661 1 2025-08-25 15:32:16.106 00:00:10.322 TCP 23.104.0.1:52014 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:32:44.324 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44358 10 6661 1 2025-08-25 15:33:20.145 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 15:33:20.153 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 15:33:16.471 00:00:10.366 TCP 23.104.0.1:51654 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:33:44.501 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49034 10 6661 1 2025-08-25 15:34:16.878 00:00:10.363 TCP 23.104.0.1:58202 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:34:44.726 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:40600 10 6661 1 2025-08-25 15:35:17.276 00:00:10.368 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:35:44.909 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54966 10 6661 1 2025-08-25 15:36:17.684 00:00:10.327 TCP 23.104.0.1:51592 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:36:45.121 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45704 10 6661 1 2025-08-25 15:32:17.581 00:06:00.095 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 15:32:17.584 00:06:00.090 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 15:37:18.049 00:00:10.360 TCP 23.104.0.1:39766 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:37:45.336 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52414 10 6661 1 2025-08-25 15:38:20.447 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 15:38:20.250 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 15:38:18.450 00:00:10.327 TCP 23.104.0.1:42700 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:38:45.543 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42464 10 6661 1 2025-08-25 15:39:18.814 00:00:10.373 TCP 23.104.0.1:33742 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:39:45.714 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54208 10 6661 1 2025-08-25 15:40:19.226 00:00:10.367 TCP 23.104.0.1:46846 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:40:45.930 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:50518 10 6661 1 2025-08-25 15:41:19.630 00:00:10.362 TCP 23.104.0.1:35848 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:41:46.127 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57174 10 6661 1 2025-08-25 15:42:20.024 00:00:10.367 TCP 23.104.0.1:34798 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:42:46.349 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58930 10 6661 1 2025-08-25 15:43:20.438 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 15:43:20.523 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 15:43:20.428 00:00:10.375 TCP 23.104.0.1:44882 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:43:46.556 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43164 10 6661 1 2025-08-25 15:39:17.587 00:06:00.087 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 15:39:17.584 00:06:00.092 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 15:44:20.839 00:00:10.348 TCP 23.104.0.1:57096 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:44:46.769 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43658 10 6661 1 2025-08-25 15:45:21.220 00:00:10.366 TCP 23.104.0.1:44442 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:45:46.946 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:39450 12 6765 1 2025-08-25 15:46:21.629 00:00:10.367 TCP 23.104.0.1:59382 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:46:47.188 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48840 10 6661 1 2025-08-25 15:47:22.031 00:00:10.360 TCP 23.104.0.1:55084 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:47:47.434 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:42286 10 6661 1 2025-08-25 15:48:20.540 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 15:48:20.397 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 15:48:22.434 00:00:10.385 TCP 23.104.0.1:58326 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:48:47.673 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35948 10 6661 1 2025-08-25 15:49:22.845 00:00:10.377 TCP 23.104.0.1:35582 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:49:47.887 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47074 10 6661 1 2025-08-25 15:50:23.265 00:00:10.340 TCP 23.104.0.1:44986 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:50:48.109 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42254 10 6661 1 2025-08-25 15:46:17.597 00:06:00.079 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 15:46:17.595 00:06:00.084 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 15:51:23.642 00:00:10.367 TCP 23.104.0.1:33616 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:51:48.323 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47576 10 6661 1 2025-08-25 15:52:24.048 00:00:10.375 TCP 23.104.0.1:46494 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:52:48.533 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51568 10 6661 1 2025-08-25 15:53:20.357 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 15:53:20.783 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 15:53:24.460 00:00:10.364 TCP 23.104.0.1:44046 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:53:48.746 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43404 10 6661 1 2025-08-25 15:54:24.857 00:00:10.377 TCP 23.104.0.1:45654 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:54:48.963 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55130 10 6661 1 2025-08-25 15:55:25.275 00:00:10.362 TCP 23.104.0.1:42940 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:55:49.184 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46980 10 6661 1 2025-08-25 15:56:25.677 00:00:10.326 TCP 23.104.0.1:58064 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:56:49.397 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39154 10 6661 1 2025-08-25 15:57:26.036 00:00:10.366 TCP 23.104.0.1:33594 -> 1.101.0.1:3000 11 1507 1 2025-08-25 15:57:49.606 00:00:10.281 TCP 1.101.0.1:3000 -> 22.102.0.1:46410 10 6661 1 2025-08-25 15:58:20.609 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 15:53:17.592 00:06:00.094 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 15:53:17.595 00:06:00.089 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 15:58:20.508 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 15:58:26.439 00:00:10.362 TCP 23.104.0.1:33894 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 505069, total packets: 1576, avg bps: 1086, avg pps: 0, avg bpp: 320 Time window: 2025-08-25 14:57:17 - 2025-08-25 15:59:17 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0031s User: 0.0015s Wall: 0.0021s flows/second: 76885.2 Runtime: 0.0021s