Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-26 14:59:14.586 00:00:10.359 TCP 23.104.0.1:45832 -> 1.101.0.1:3000 11 1507 1 2025-08-26 14:59:22.842 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53156 10 6452 1 2025-08-26 15:00:14.983 00:00:10.364 TCP 23.104.0.1:44332 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:00:23.021 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53500 10 6452 1 2025-08-26 14:56:18.293 00:06:00.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 15:01:15.386 00:00:10.360 TCP 23.104.0.1:38270 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:01:23.248 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59964 10 6452 1 2025-08-26 14:57:18.297 00:06:00.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 15:02:15.785 00:00:10.359 TCP 23.104.0.1:43598 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:02:23.460 00:00:10.473 TCP 1.101.0.1:3000 -> 22.102.0.1:48632 10 6452 1 2025-08-26 15:03:16.184 00:00:10.365 TCP 23.104.0.1:33030 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:03:23.973 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:43568 10 6452 1 2025-08-26 15:03:48.089 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 15:03:48.260 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 15:04:16.589 00:00:10.366 TCP 23.104.0.1:39154 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:04:24.221 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57608 10 6452 1 2025-08-26 15:05:17.029 00:00:10.385 TCP 23.104.0.1:57070 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:05:24.438 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50190 10 6452 1 2025-08-26 15:06:17.491 00:00:10.367 TCP 23.104.0.1:56808 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:06:24.610 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54876 10 6452 1 2025-08-26 15:07:17.895 00:00:10.377 TCP 23.104.0.1:58094 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:07:24.826 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43656 10 6452 1 2025-08-26 15:03:18.295 00:06:00.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 15:08:18.311 00:00:10.318 TCP 23.104.0.1:38266 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:08:25.063 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35126 10 6452 1 2025-08-26 15:08:48.470 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 15:08:48.310 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 15:04:18.299 00:06:00.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 15:09:18.669 00:00:10.383 TCP 23.104.0.1:34456 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:09:25.275 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52706 10 6452 1 2025-08-26 15:10:19.103 00:00:10.362 TCP 23.104.0.1:50252 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:10:25.489 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50762 10 6452 1 2025-08-26 15:11:19.500 00:00:10.367 TCP 23.104.0.1:58382 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:11:25.718 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39370 10 6452 1 2025-08-26 15:12:19.907 00:00:10.363 TCP 23.104.0.1:34442 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:12:25.894 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52476 10 6452 1 2025-08-26 15:13:20.309 00:00:10.324 TCP 23.104.0.1:38020 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:13:26.122 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46928 10 6452 1 2025-08-26 15:13:48.692 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 15:13:48.612 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 15:14:20.670 00:00:10.365 TCP 23.104.0.1:40028 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:14:26.351 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51216 10 6452 1 2025-08-26 15:10:18.297 00:06:00.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 15:15:21.111 00:00:10.360 TCP 23.104.0.1:54298 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:15:26.576 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60676 10 6452 1 2025-08-26 15:11:18.299 00:06:00.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 15:16:21.527 00:00:10.369 TCP 23.104.0.1:38362 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:16:26.801 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60966 10 6452 1 2025-08-26 15:17:21.933 00:00:10.373 TCP 23.104.0.1:54988 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:17:27.037 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42342 10 6452 1 2025-08-26 15:18:22.344 00:00:10.841 TCP 23.104.0.1:44286 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:18:27.216 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58378 10 6452 1 2025-08-26 15:18:48.858 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 15:18:48.628 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 15:19:23.229 00:00:10.364 TCP 23.104.0.1:35704 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:19:27.424 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44448 10 6452 1 2025-08-26 15:20:23.630 00:00:10.656 TCP 23.104.0.1:39570 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:20:27.636 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34098 10 6452 1 2025-08-26 15:21:24.328 00:00:10.322 TCP 23.104.0.1:55090 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:21:27.853 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35108 10 6452 1 2025-08-26 15:17:18.297 00:06:00.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 15:22:24.690 00:00:10.369 TCP 23.104.0.1:45588 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:22:28.067 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53286 10 6452 1 2025-08-26 15:18:18.300 00:06:00.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 15:23:25.112 00:00:10.369 TCP 23.104.0.1:47706 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:23:28.282 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58318 10 6452 1 2025-08-26 15:23:48.984 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 15:23:48.831 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 15:24:25.520 00:00:10.327 TCP 23.104.0.1:41940 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:24:28.499 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53958 10 6452 1 2025-08-26 15:25:25.881 00:00:10.393 TCP 23.104.0.1:50302 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:25:28.712 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42406 10 6452 1 2025-08-26 15:26:26.311 00:00:10.383 TCP 23.104.0.1:50098 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:26:28.888 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53974 10 6452 1 2025-08-26 15:27:26.736 00:00:10.366 TCP 23.104.0.1:35608 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:27:29.110 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53274 10 6452 1 2025-08-26 15:28:29.340 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37814 10 6452 1 2025-08-26 15:28:27.141 00:00:10.367 TCP 23.104.0.1:54322 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:28:49.174 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 15:28:49.197 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 15:24:18.298 00:06:00.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 15:29:27.541 00:00:10.364 TCP 23.104.0.1:50254 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:29:29.563 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41930 10 6452 1 2025-08-26 15:25:18.301 00:06:00.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 15:30:27.941 00:00:10.380 TCP 23.104.0.1:47014 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:30:29.747 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46888 10 6452 1 2025-08-26 15:31:29.922 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57088 10 6452 1 2025-08-26 15:31:28.357 00:00:10.324 TCP 23.104.0.1:60236 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:32:28.717 00:00:10.373 TCP 23.104.0.1:56052 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:32:30.134 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36838 10 6452 1 2025-08-26 15:33:30.352 00:00:10.652 TCP 1.101.0.1:3000 -> 22.102.0.1:55760 10 6452 1 2025-08-26 15:33:29.129 00:00:10.362 TCP 23.104.0.1:37654 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:33:48.798 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 15:33:49.200 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 15:34:31.051 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40896 10 6452 1 2025-08-26 15:34:29.529 00:00:10.366 TCP 23.104.0.1:45436 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:35:31.267 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:35722 10 6452 1 2025-08-26 15:35:29.936 00:00:10.379 TCP 23.104.0.1:40594 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:31:18.300 00:06:00.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 15:36:31.433 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 12 10367 1 2025-08-26 15:36:30.352 00:00:10.440 TCP 23.104.0.1:40478 -> 1.101.0.1:3000 15 1926 1 2025-08-26 15:32:18.302 00:06:00.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 15:37:31.633 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59580 10 6452 1 2025-08-26 15:37:30.828 00:00:10.378 TCP 23.104.0.1:48312 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:38:31.241 00:00:10.362 TCP 23.104.0.1:33830 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:38:31.843 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38474 10 6452 1 2025-08-26 15:38:49.041 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 15:38:49.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 15:39:31.642 00:00:10.373 TCP 23.104.0.1:38058 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:39:32.028 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35646 10 6452 1 2025-08-26 15:40:32.249 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36530 12 6556 1 2025-08-26 15:40:32.066 00:00:10.340 TCP 23.104.0.1:44544 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:41:32.464 00:00:10.364 TCP 23.104.0.1:36882 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:41:32.474 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36036 10 6452 1 2025-08-26 15:42:32.873 00:00:10.368 TCP 23.104.0.1:42186 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:42:32.688 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57512 10 6452 1 2025-08-26 15:38:18.302 00:06:00.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 15:43:33.282 00:00:10.360 TCP 23.104.0.1:57146 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:43:49.158 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 15:43:32.905 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42006 10 6452 1 2025-08-26 15:43:49.325 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 15:39:18.304 00:06:00.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 15:44:33.120 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44906 10 6452 1 2025-08-26 15:44:33.682 00:00:10.367 TCP 23.104.0.1:35630 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:45:33.330 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42290 10 6452 1 2025-08-26 15:45:34.109 00:00:10.363 TCP 23.104.0.1:59972 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:46:33.547 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45398 10 6452 1 2025-08-26 15:46:34.510 00:00:10.323 TCP 23.104.0.1:59118 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:47:33.761 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39184 10 6452 1 2025-08-26 15:47:34.878 00:00:10.368 TCP 23.104.0.1:40008 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:48:35.290 00:00:10.363 TCP 23.104.0.1:37628 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:48:49.353 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 15:48:33.972 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48166 10 6452 1 2025-08-26 15:48:49.383 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 15:49:34.208 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:48926 10 6452 1 2025-08-26 15:49:35.693 00:00:10.365 TCP 23.104.0.1:34278 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:45:18.304 00:06:00.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 15:50:34.398 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59634 10 6452 1 2025-08-26 15:50:36.108 00:00:10.363 TCP 23.104.0.1:47822 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:46:18.305 00:06:00.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 15:51:34.616 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41214 10 6452 1 2025-08-26 15:51:36.505 00:00:10.382 TCP 23.104.0.1:46594 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:52:34.833 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34444 10 6452 1 2025-08-26 15:52:36.928 00:00:10.390 TCP 23.104.0.1:60904 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:53:35.001 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46142 10 6452 1 2025-08-26 15:53:49.282 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 15:53:49.367 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 15:53:37.355 00:00:15.440 TCP 23.104.0.1:55634 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:54:35.220 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-08-26 15:54:42.837 00:00:17.904 TCP 23.104.0.1:46874 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:55:35.444 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49992 11 6504 1 2025-08-26 15:55:50.789 00:00:10.363 TCP 23.104.0.1:34602 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:56:35.667 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35160 10 6452 1 2025-08-26 15:56:51.197 00:00:10.364 TCP 23.104.0.1:55110 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:52:18.306 00:06:00.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-26 15:57:35.888 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:47138 10 6452 1 2025-08-26 15:57:51.601 00:00:10.357 TCP 23.104.0.1:48978 -> 1.101.0.1:3000 11 1507 1 2025-08-26 15:53:18.310 00:06:00.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-26 15:58:36.177 00:00:15.159 TCP 1.101.0.1:3000 -> 22.102.0.1:37278 10 6452 1 2025-08-26 15:58:49.550 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 15:58:49.299 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 161, total bytes: 502069, total packets: 1582, avg bps: 1062, avg pps: 0, avg bpp: 317 Time window: 2025-08-26 14:56:18 - 2025-08-26 15:59:18 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0040s User: 0.0010s Wall: 0.0021s flows/second: 76225.6 Runtime: 0.0021s