Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-26 09:58:50.970 00:00:10.393 TCP 23.104.0.1:54414 -> 1.101.0.1:3000 11 1507 1 2025-08-26 09:59:04.636 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:55950 10 6452 1 2025-08-26 09:59:51.399 00:00:10.372 TCP 23.104.0.1:40292 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:00:04.825 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43536 10 6452 1 2025-08-26 09:55:18.155 00:06:00.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 10:00:51.808 00:00:10.366 TCP 23.104.0.1:55510 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:01:04.999 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33622 10 6452 1 2025-08-26 09:56:18.158 00:06:00.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 10:01:52.213 00:00:10.359 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:02:05.241 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55850 10 6452 1 2025-08-26 10:02:52.612 00:00:10.366 TCP 23.104.0.1:40224 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:03:05.454 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42054 10 6452 1 2025-08-26 10:03:42.944 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 10:03:42.786 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 10:03:53.022 00:00:10.325 TCP 23.104.0.1:57996 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:04:05.679 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36418 10 6452 1 2025-08-26 10:04:53.392 00:00:10.367 TCP 23.104.0.1:39430 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:05:05.889 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45846 10 6452 1 2025-08-26 10:05:53.798 00:00:10.367 TCP 23.104.0.1:45902 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:06:06.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35778 10 6452 1 2025-08-26 10:06:54.204 00:00:10.372 TCP 23.104.0.1:54226 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:07:06.296 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43344 10 6452 1 2025-08-26 10:02:18.158 00:06:00.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 10:07:54.610 00:00:10.371 TCP 23.104.0.1:59414 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:08:06.467 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46706 10 6452 1 2025-08-26 10:03:18.160 00:06:00.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 10:08:42.599 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 10:08:42.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 10:08:55.021 00:00:10.364 TCP 23.104.0.1:53934 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:09:06.683 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42310 10 6452 1 2025-08-26 10:09:55.424 00:00:10.373 TCP 23.104.0.1:41504 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:10:06.904 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58892 10 6452 1 2025-08-26 10:10:55.837 00:00:10.389 TCP 23.104.0.1:53356 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:11:07.119 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37578 10 6452 1 2025-08-26 10:11:56.271 00:00:10.361 TCP 23.104.0.1:47694 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:12:07.293 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57430 10 6452 1 2025-08-26 10:12:56.671 00:00:10.323 TCP 23.104.0.1:44454 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:13:07.505 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49334 10 6452 1 2025-08-26 10:13:42.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 10:13:42.625 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 10:13:57.031 00:00:10.379 TCP 23.104.0.1:47792 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:14:07.682 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60782 10 6452 1 2025-08-26 10:09:18.159 00:06:00.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 10:14:57.438 00:00:10.372 TCP 23.104.0.1:58308 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:15:07.911 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50748 10 6452 1 2025-08-26 10:10:18.161 00:06:00.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 10:15:57.848 00:00:10.376 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:16:08.126 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40946 10 6452 1 2025-08-26 10:16:58.264 00:00:10.367 TCP 23.104.0.1:37376 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:17:08.336 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38366 10 6452 1 2025-08-26 10:17:58.668 00:00:10.368 TCP 23.104.0.1:57898 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:18:08.546 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45904 10 6452 1 2025-08-26 10:18:42.916 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 10:18:42.767 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 10:18:59.103 00:00:10.369 TCP 23.104.0.1:45616 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:19:08.716 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32974 10 6452 1 2025-08-26 10:19:59.506 00:00:10.364 TCP 23.104.0.1:52588 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:20:08.885 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35152 10 6452 1 2025-08-26 10:20:59.905 00:00:10.371 TCP 23.104.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:21:09.102 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33534 10 6452 1 2025-08-26 10:16:18.158 00:06:00.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 10:22:00.315 00:00:10.325 TCP 23.104.0.1:32938 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:17:18.161 00:06:00.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 10:22:09.315 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57040 10 6452 1 2025-08-26 10:23:00.682 00:00:10.371 TCP 23.104.0.1:49664 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:23:09.524 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60070 10 6452 1 2025-08-26 10:23:43.014 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 10:23:42.910 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 10:24:01.103 00:00:10.369 TCP 23.104.0.1:60512 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:24:09.741 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56862 10 6452 1 2025-08-26 10:25:01.514 00:00:10.367 TCP 23.104.0.1:52928 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:25:09.954 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:47332 12 6556 1 2025-08-26 10:26:01.920 00:00:10.374 TCP 23.104.0.1:55566 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:26:10.202 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34864 10 6452 1 2025-08-26 10:27:02.332 00:00:10.322 TCP 23.104.0.1:40934 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:27:10.415 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35512 10 6452 1 2025-08-26 10:28:02.694 00:00:10.903 TCP 23.104.0.1:39514 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:28:10.635 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36282 10 6452 1 2025-08-26 10:23:18.161 00:06:00.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 10:28:42.625 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 10:28:42.978 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 10:29:10.848 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45934 10 6452 1 2025-08-26 10:29:03.637 00:00:10.369 TCP 23.104.0.1:50518 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:24:18.163 00:06:00.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 10:30:04.049 00:00:10.365 TCP 23.104.0.1:40028 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:30:11.079 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33496 10 6452 1 2025-08-26 10:31:04.457 00:00:10.322 TCP 23.104.0.1:46076 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:31:11.295 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47694 10 6452 1 2025-08-26 10:32:04.816 00:00:10.325 TCP 23.104.0.1:53148 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:32:11.511 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42180 10 6452 1 2025-08-26 10:33:05.184 00:00:10.369 TCP 23.104.0.1:51308 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:33:11.726 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45678 10 6452 1 2025-08-26 10:33:42.970 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 10:33:43.030 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 10:34:05.589 00:00:10.362 TCP 23.104.0.1:43056 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:34:11.942 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57564 10 6452 1 2025-08-26 10:35:05.993 00:00:10.364 TCP 23.104.0.1:37318 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:30:18.163 00:06:00.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 10:35:12.180 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60088 10 6452 1 2025-08-26 10:36:06.400 00:00:10.374 TCP 23.104.0.1:39720 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:31:18.177 00:06:00.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 10:36:12.392 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50478 10 6452 1 2025-08-26 10:37:12.604 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40070 10 6452 1 2025-08-26 10:37:06.810 00:01:11.073 TCP 23.104.0.1:49048 -> 1.101.0.1:3000 22 3014 1 2025-08-26 10:38:12.826 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59930 10 6452 1 2025-08-26 10:38:43.029 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 10:38:43.216 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 10:39:07.922 00:00:10.364 TCP 23.104.0.1:59272 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:39:13.064 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-08-26 10:40:08.321 00:00:10.361 TCP 23.104.0.1:35148 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:40:13.235 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46632 10 6452 1 2025-08-26 10:41:08.722 00:00:10.379 TCP 23.104.0.1:41072 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:41:13.460 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42192 10 6452 1 2025-08-26 10:42:09.137 00:00:10.323 TCP 23.104.0.1:51920 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:37:18.171 00:06:00.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 10:42:13.680 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57180 10 6452 1 2025-08-26 10:43:09.496 00:00:10.364 TCP 23.104.0.1:34366 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:38:18.173 00:06:00.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 10:43:13.888 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36838 10 6452 1 2025-08-26 10:43:43.569 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 10:43:43.328 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 10:44:09.898 00:00:10.373 TCP 23.104.0.1:43478 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:44:14.109 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60072 10 6452 1 2025-08-26 10:45:10.308 00:00:10.368 TCP 23.104.0.1:52168 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:45:14.327 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:42848 10 6452 1 2025-08-26 10:46:10.714 00:00:10.374 TCP 23.104.0.1:44142 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:46:14.512 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60574 10 6452 1 2025-08-26 10:47:11.128 00:00:10.442 TCP 23.104.0.1:47000 -> 1.101.0.1:3000 15 1926 1 2025-08-26 10:47:14.728 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:57702 12 10367 1 2025-08-26 10:48:11.605 00:00:10.326 TCP 23.104.0.1:54182 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:48:14.966 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:38178 10 6452 1 2025-08-26 10:48:43.322 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 10:48:43.427 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 10:44:18.172 00:06:00.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 10:49:15.154 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45580 10 6452 1 2025-08-26 10:49:11.967 00:00:10.382 TCP 23.104.0.1:43794 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:45:18.175 00:06:00.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 10:50:15.365 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59808 10 6452 1 2025-08-26 10:50:12.389 00:00:10.366 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:51:12.814 00:00:10.332 TCP 23.104.0.1:49436 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:51:15.577 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32820 10 6452 1 2025-08-26 10:52:13.183 00:00:10.373 TCP 23.104.0.1:52406 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:52:15.790 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38730 10 6452 1 2025-08-26 10:53:16.001 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60924 10 6452 1 2025-08-26 10:53:13.594 00:00:10.369 TCP 23.104.0.1:40986 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:53:43.092 00:00:00.050 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 10:53:43.352 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 10:54:13.994 00:00:10.325 TCP 23.104.0.1:60576 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:54:16.218 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39198 10 6452 1 2025-08-26 10:55:14.355 00:00:10.362 TCP 23.104.0.1:58098 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:55:16.430 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48604 10 6452 1 2025-08-26 10:51:18.186 00:06:00.092 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 10:56:16.602 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50266 10 6452 1 2025-08-26 10:56:14.761 00:00:10.380 TCP 23.104.0.1:37954 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:52:18.188 00:06:00.088 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 10:57:15.176 00:00:10.362 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:57:16.826 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44832 10 6452 1 2025-08-26 10:58:15.577 00:00:10.365 TCP 23.104.0.1:60462 -> 1.101.0.1:3000 11 1507 1 2025-08-26 10:58:17.071 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37262 10 6452 1 2025-08-26 10:58:43.384 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 10:58:43.646 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 161, total bytes: 503524, total packets: 1592, avg bps: 1058, avg pps: 0, avg bpp: 316 Time window: 2025-08-26 09:55:18 - 2025-08-26 10:58:43 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0036s User: 0.0018s Wall: 0.0027s flows/second: 59173.1 Runtime: 0.0027s