Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-27 05:58:46.177 00:00:10.323 TCP 23.104.0.1:54186 -> 1.101.0.1:3000 11 1507 1 2025-08-27 05:59:06.342 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 05:59:06.408 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 05:58:57.990 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:33002 10 6452 1 2025-08-27 05:59:46.543 00:00:10.373 TCP 23.104.0.1:36650 -> 1.101.0.1:3000 11 1507 1 2025-08-27 05:59:58.176 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54974 10 6452 1 2025-08-27 06:00:46.959 00:00:10.365 TCP 23.104.0.1:52694 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:00:58.383 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56166 10 6452 1 2025-08-27 06:01:47.362 00:00:10.363 TCP 23.104.0.1:49722 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:01:58.553 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38600 10 6452 1 2025-08-27 06:02:47.782 00:00:10.367 TCP 23.104.0.1:56130 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:02:58.765 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57334 10 6452 1 2025-08-27 06:03:48.190 00:00:10.363 TCP 23.104.0.1:38670 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:04:06.345 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 06:04:06.454 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 06:03:58.977 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:55566 10 6452 1 2025-08-27 05:59:18.706 00:06:00.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 06:04:48.592 00:00:10.324 TCP 23.104.0.1:49236 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:04:59.215 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38752 10 6452 1 2025-08-27 06:00:18.709 00:06:00.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 06:05:48.957 00:00:10.325 TCP 23.104.0.1:35220 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:05:59.428 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53444 10 6452 1 2025-08-27 06:06:49.316 00:00:10.362 TCP 23.104.0.1:36812 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:06:59.644 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52412 12 6556 1 2025-08-27 06:07:49.720 00:00:10.328 TCP 23.104.0.1:55498 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:07:59.860 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39172 10 6452 1 2025-08-27 06:08:50.106 00:00:10.367 TCP 23.104.0.1:41382 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:09:06.673 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 06:09:06.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 06:09:00.098 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:54432 10 6452 1 2025-08-27 06:09:50.508 00:00:10.368 TCP 23.104.0.1:37580 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:10:00.354 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44634 10 6452 1 2025-08-27 06:10:50.911 00:00:10.363 TCP 23.104.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:11:00.525 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35794 10 6452 1 2025-08-27 06:06:18.709 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 06:11:51.317 00:00:10.359 TCP 23.104.0.1:56582 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:12:00.705 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59470 10 6452 1 2025-08-27 06:07:18.710 00:06:00.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 06:12:51.716 00:00:10.323 TCP 23.104.0.1:43030 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:13:00.875 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39826 10 6452 1 2025-08-27 06:14:06.584 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 06:14:06.691 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 06:13:52.097 00:00:10.362 TCP 23.104.0.1:46570 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:14:01.074 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45310 10 6452 1 2025-08-27 06:14:52.497 00:00:10.366 TCP 23.104.0.1:48572 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:15:01.290 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39478 10 6452 1 2025-08-27 06:15:52.900 00:00:10.369 TCP 23.104.0.1:37134 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:16:01.505 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47780 10 6452 1 2025-08-27 06:16:53.307 00:00:10.367 TCP 23.104.0.1:43912 -> 1.101.0.1:3000 12 1559 1 2025-08-27 06:17:01.728 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34640 10 6452 1 2025-08-27 06:17:53.715 00:00:10.337 TCP 23.104.0.1:51228 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:18:01.946 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42190 10 6452 1 2025-08-27 06:13:18.710 00:06:00.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 06:19:06.639 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 06:18:54.101 00:00:10.382 TCP 23.104.0.1:59184 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:19:06.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 06:19:02.171 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55582 10 6452 1 2025-08-27 06:14:18.712 00:06:00.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 06:19:54.525 00:00:10.366 TCP 23.104.0.1:33426 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:20:02.383 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38850 10 6452 1 2025-08-27 06:20:54.930 00:00:10.366 TCP 23.104.0.1:36130 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:21:02.589 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56648 10 6452 1 2025-08-27 06:21:55.339 00:00:10.382 TCP 23.104.0.1:38822 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:22:02.804 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59014 10 6452 1 2025-08-27 06:22:55.773 00:00:10.369 TCP 23.104.0.1:59802 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:23:03.012 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59352 10 6452 1 2025-08-27 06:23:56.177 00:00:10.331 TCP 23.104.0.1:58464 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:24:06.803 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 06:24:06.717 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 06:24:03.188 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36562 10 6452 1 2025-08-27 06:24:56.543 00:00:10.364 TCP 23.104.0.1:34968 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:25:03.406 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37832 10 6452 1 2025-08-27 06:20:18.710 00:06:00.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 06:25:56.946 00:00:10.372 TCP 23.104.0.1:34146 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:26:03.569 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57670 10 6452 1 2025-08-27 06:21:18.714 00:06:00.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 06:26:57.357 00:00:10.322 TCP 23.104.0.1:44230 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:27:03.790 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58754 10 6452 1 2025-08-27 06:27:57.715 00:00:10.369 TCP 23.104.0.1:40256 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:28:04.004 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38894 10 6452 1 2025-08-27 06:29:06.856 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 06:29:06.882 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 06:28:58.130 00:00:10.337 TCP 23.104.0.1:44716 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:29:04.220 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57540 10 6452 1 2025-08-27 06:29:58.520 00:00:10.323 TCP 23.104.0.1:52880 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:30:04.436 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55934 10 6452 1 2025-08-27 06:30:58.885 00:00:10.379 TCP 23.104.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:31:04.610 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55556 10 6452 1 2025-08-27 06:31:59.303 00:00:10.368 TCP 23.104.0.1:43102 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:32:04.824 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58740 10 6452 1 2025-08-27 06:27:18.717 00:06:00.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 06:32:59.707 00:00:10.375 TCP 23.104.0.1:43434 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:33:05.041 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39234 10 6452 1 2025-08-27 06:28:18.718 00:06:00.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 06:34:07.425 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 06:34:00.124 00:00:10.365 TCP 23.104.0.1:35020 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:34:07.240 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 06:34:05.249 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48832 10 6452 1 2025-08-27 06:35:00.529 00:00:10.367 TCP 23.104.0.1:41040 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:35:05.472 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55264 10 6452 1 2025-08-27 06:36:00.935 00:00:10.378 TCP 23.104.0.1:60456 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:36:05.695 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38782 10 6452 1 2025-08-27 06:37:01.362 00:00:10.506 TCP 23.104.0.1:34110 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:37:05.912 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48860 10 6452 1 2025-08-27 06:38:01.903 00:00:10.383 TCP 23.104.0.1:47978 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:38:06.120 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36416 10 6452 1 2025-08-27 06:39:07.037 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 06:39:07.373 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 06:39:06.336 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44394 10 6452 1 2025-08-27 06:39:02.324 00:00:10.321 TCP 23.104.0.1:45476 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:34:18.717 00:06:00.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 06:40:06.557 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59920 10 6452 1 2025-08-27 06:40:02.690 00:00:10.322 TCP 23.104.0.1:40154 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:35:18.719 00:06:00.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 06:41:06.773 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44958 10 6452 1 2025-08-27 06:41:03.066 00:00:10.372 TCP 23.104.0.1:37706 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:42:03.476 00:00:10.367 TCP 23.104.0.1:42442 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:42:06.989 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53768 10 6452 1 2025-08-27 06:43:03.883 00:00:10.382 TCP 23.104.0.1:45246 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:43:07.212 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38374 10 6452 1 2025-08-27 06:44:07.000 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 06:44:07.156 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 06:44:04.306 00:00:10.393 TCP 23.104.0.1:54232 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:44:07.422 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52034 10 6452 1 2025-08-27 06:45:04.740 00:00:10.372 TCP 23.104.0.1:46056 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:45:07.589 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47372 10 6452 1 2025-08-27 06:46:05.145 00:00:10.365 TCP 23.104.0.1:44822 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:46:07.805 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43548 10 6452 1 2025-08-27 06:41:18.720 00:06:00.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 06:47:05.545 00:00:10.364 TCP 23.104.0.1:35464 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:47:08.041 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33400 10 6452 1 2025-08-27 06:42:18.723 00:06:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 06:48:05.942 00:00:10.373 TCP 23.104.0.1:45444 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:48:08.209 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44324 10 6452 1 2025-08-27 06:49:07.449 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 06:49:07.292 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 06:49:06.352 00:00:10.324 TCP 23.104.0.1:40934 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:49:08.425 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53930 10 6452 1 2025-08-27 06:50:08.638 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57500 10 6452 1 2025-08-27 06:50:06.715 00:00:10.820 TCP 23.104.0.1:39374 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:51:08.857 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55212 10 6452 1 2025-08-27 06:51:07.574 00:00:10.366 TCP 23.104.0.1:59814 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:52:09.085 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38106 10 6452 1 2025-08-27 06:52:07.979 00:00:10.335 TCP 23.104.0.1:46252 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:53:08.349 00:00:10.368 TCP 23.104.0.1:57430 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:53:09.263 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55380 10 6452 1 2025-08-27 06:48:18.726 00:06:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 06:54:07.479 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 06:54:07.482 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 06:54:09.481 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45462 10 6452 1 2025-08-27 06:54:08.758 00:00:10.385 TCP 23.104.0.1:39370 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:49:18.727 00:06:00.172 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 06:55:09.700 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43712 10 6452 1 2025-08-27 06:55:09.182 00:00:10.372 TCP 23.104.0.1:57596 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:56:09.592 00:00:10.323 TCP 23.104.0.1:48878 -> 1.101.0.1:3000 11 1507 1 2025-08-27 06:56:09.919 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60400 10 6452 1 2025-08-27 06:57:10.130 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:49896 14 14280 1 2025-08-27 06:57:09.949 00:00:10.531 TCP 23.104.0.1:59124 -> 1.101.0.1:3000 17 2241 1 2025-08-27 06:58:10.412 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53256 10 6452 1 2025-08-27 06:58:10.522 00:00:10.364 TCP 23.104.0.1:44598 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 506082, total packets: 1569, avg bps: 1132, avg pps: 0, avg bpp: 322 Time window: 2025-08-27 05:58:46 - 2025-08-27 06:58:20 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0022s User: 0.0022s Wall: 0.0022s flows/second: 72463.9 Runtime: 0.0022s