Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 04:58:53.134 00:00:10.331 TCP 23.104.0.1:36450 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:58:59.905 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36970 10 6452 1 2025-08-28 04:59:34.232 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 04:59:34.440 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 04:59:53.508 00:00:10.381 TCP 23.104.0.1:58672 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:00:00.120 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49738 10 6452 1 2025-08-28 05:00:53.936 00:00:10.384 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:01:00.290 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:54322 10 6452 1 2025-08-28 05:01:54.359 00:00:10.365 TCP 23.104.0.1:54430 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:02:00.492 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43722 10 6452 1 2025-08-28 05:02:54.768 00:00:10.372 TCP 23.104.0.1:46032 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:03:00.722 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54632 10 6452 1 2025-08-28 04:58:19.362 00:06:00.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 05:03:55.175 00:00:10.363 TCP 23.104.0.1:48644 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:04:00.938 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36920 12 6556 1 2025-08-28 04:59:19.363 00:06:00.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 05:04:34.625 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 05:04:34.572 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 05:04:55.574 00:00:11.020 TCP 23.104.0.1:42034 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:05:01.176 00:00:11.079 TCP 1.101.0.1:3000 -> 22.102.0.1:34490 10 6452 1 2025-08-28 05:05:56.634 00:00:10.326 TCP 23.104.0.1:38260 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:06:02.296 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48336 10 6452 1 2025-08-28 05:06:56.998 00:00:10.357 TCP 23.104.0.1:50876 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:07:02.520 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46480 10 6452 1 2025-08-28 05:07:57.396 00:00:10.361 TCP 23.104.0.1:34776 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:08:02.738 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49012 10 6452 1 2025-08-28 05:08:57.796 00:00:10.377 TCP 23.104.0.1:33886 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:09:02.967 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:51416 10 6452 1 2025-08-28 05:09:34.680 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 05:09:34.519 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 05:09:58.209 00:00:10.367 TCP 23.104.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:10:03.155 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58832 10 6452 1 2025-08-28 05:05:19.376 00:06:00.177 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 05:10:58.616 00:00:10.361 TCP 23.104.0.1:46150 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:11:03.365 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59326 10 6452 1 2025-08-28 05:06:19.378 00:06:00.172 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 05:11:59.029 00:00:10.423 TCP 23.104.0.1:48742 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:12:03.573 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35250 10 6452 1 2025-08-28 05:12:59.487 00:00:10.329 TCP 23.104.0.1:32914 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:13:03.790 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60216 10 6452 1 2025-08-28 05:13:59.850 00:00:10.373 TCP 23.104.0.1:49844 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:14:04.007 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47792 10 6452 1 2025-08-28 05:14:34.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 05:14:34.535 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 05:15:00.264 00:00:10.364 TCP 23.104.0.1:55230 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:15:04.222 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46684 10 6452 1 2025-08-28 05:16:00.671 00:00:10.331 TCP 23.104.0.1:46386 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:16:04.432 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53816 10 6452 1 2025-08-28 05:17:01.047 00:00:10.366 TCP 23.104.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:17:04.603 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38330 10 6452 1 2025-08-28 05:12:19.380 00:06:00.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 05:18:01.448 00:00:10.363 TCP 23.104.0.1:52522 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:18:04.780 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33404 10 6452 1 2025-08-28 05:13:19.385 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 05:19:04.992 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45662 10 6452 1 2025-08-28 05:19:01.866 00:00:10.331 TCP 23.104.0.1:33372 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:19:34.799 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 05:19:34.612 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 05:20:02.244 00:00:10.370 TCP 23.104.0.1:49830 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:20:05.213 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48604 10 6452 1 2025-08-28 05:21:05.393 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58480 10 6452 1 2025-08-28 05:21:02.654 00:00:10.370 TCP 23.104.0.1:35172 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:22:05.604 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37220 10 6452 1 2025-08-28 05:22:03.093 00:00:10.367 TCP 23.104.0.1:47282 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:23:05.781 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43502 11 6492 1 2025-08-28 05:23:03.499 00:00:10.367 TCP 23.104.0.1:56636 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:24:03.907 00:00:10.327 TCP 23.104.0.1:52924 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:24:05.996 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34430 10 6452 1 2025-08-28 05:19:19.381 00:06:00.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 05:24:34.916 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 05:24:34.935 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 05:25:06.218 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55046 10 6452 1 2025-08-28 05:25:04.271 00:00:10.335 TCP 23.104.0.1:55656 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:20:19.384 00:06:00.169 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 05:26:06.437 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-08-28 05:26:04.644 00:00:10.368 TCP 23.104.0.1:49896 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:27:06.655 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32864 10 6452 1 2025-08-28 05:27:05.063 00:00:10.365 TCP 23.104.0.1:34106 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:28:05.463 00:00:10.328 TCP 23.104.0.1:49672 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:28:06.869 00:00:10.445 TCP 1.101.0.1:3000 -> 22.102.0.1:58926 10 6452 1 2025-08-28 05:29:05.822 00:00:10.363 TCP 23.104.0.1:50934 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:29:07.355 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38208 12 6556 1 2025-08-28 05:29:34.892 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 05:29:34.715 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 05:30:06.222 00:00:10.366 TCP 23.104.0.1:42522 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:30:07.571 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57594 10 6452 1 2025-08-28 05:31:06.629 00:00:10.366 TCP 23.104.0.1:44294 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:31:07.743 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54012 10 6452 1 2025-08-28 05:26:19.386 00:06:00.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 05:27:19.390 00:06:00.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 05:32:07.034 00:00:10.366 TCP 23.104.0.1:36914 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:32:07.912 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39292 10 6452 1 2025-08-28 05:33:08.120 00:00:10.421 TCP 1.101.0.1:3000 -> 22.102.0.1:51186 10 6452 1 2025-08-28 05:33:07.436 00:00:10.364 TCP 23.104.0.1:45100 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:34:08.573 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33804 10 6452 1 2025-08-28 05:34:07.837 00:00:10.383 TCP 23.104.0.1:49168 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:34:34.959 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 05:34:34.849 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 05:35:08.744 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59384 10 6452 1 2025-08-28 05:35:08.258 00:00:10.373 TCP 23.104.0.1:41424 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:36:08.951 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:57176 10 6452 1 2025-08-28 05:36:08.672 00:00:10.374 TCP 23.104.0.1:41220 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:37:09.133 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39296 10 6452 1 2025-08-28 05:37:09.097 00:00:10.366 TCP 23.104.0.1:35100 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:38:09.304 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43084 10 6452 1 2025-08-28 05:33:19.388 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 05:38:09.498 00:00:10.369 TCP 23.104.0.1:36728 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:39:09.517 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44968 10 6452 1 2025-08-28 05:39:09.912 00:00:10.366 TCP 23.104.0.1:48198 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:34:19.391 00:06:00.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 05:39:35.254 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 05:39:35.244 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 05:40:10.315 00:00:10.326 TCP 23.104.0.1:38424 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:40:09.731 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54318 10 6452 1 2025-08-28 05:41:10.687 00:00:10.364 TCP 23.104.0.1:58092 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:41:09.948 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58954 10 6452 1 2025-08-28 05:42:11.105 00:00:10.365 TCP 23.104.0.1:57902 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:42:10.171 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39374 10 6452 1 2025-08-28 05:43:11.507 00:00:10.328 TCP 23.104.0.1:52202 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:43:10.383 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48934 10 6452 1 2025-08-28 05:44:10.598 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34630 10 6452 1 2025-08-28 05:44:11.874 00:00:10.365 TCP 23.104.0.1:49002 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:44:35.395 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 05:44:35.153 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 05:45:10.775 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33634 10 6452 1 2025-08-28 05:40:19.390 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 05:45:12.276 00:00:10.360 TCP 23.104.0.1:51842 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:41:19.391 00:06:00.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 05:46:10.985 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50014 10 6452 1 2025-08-28 05:46:12.680 00:00:10.364 TCP 23.104.0.1:58264 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:47:11.201 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54712 10 6452 1 2025-08-28 05:47:13.104 00:00:10.376 TCP 23.104.0.1:58040 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:48:13.512 00:00:10.366 TCP 23.104.0.1:48558 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:48:11.422 00:00:10.626 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 10 6452 1 2025-08-28 05:49:13.911 00:00:10.371 TCP 23.104.0.1:36212 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:49:12.095 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33112 10 6452 1 2025-08-28 05:49:35.315 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 05:49:35.432 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 05:50:14.313 00:00:10.365 TCP 23.104.0.1:56850 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:50:12.314 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58464 10 6452 1 2025-08-28 05:51:14.716 00:00:10.373 TCP 23.104.0.1:45666 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:51:12.546 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50352 10 6452 1 2025-08-28 05:47:19.391 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 05:52:15.128 00:00:10.328 TCP 23.104.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:52:12.765 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38462 10 6452 1 2025-08-28 05:48:19.394 00:06:00.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 05:53:15.493 00:00:10.333 TCP 23.104.0.1:51154 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:53:12.975 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:34804 10 6452 1 2025-08-28 05:54:13.170 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46584 10 6452 1 2025-08-28 05:54:15.867 00:00:10.322 TCP 23.104.0.1:39598 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:54:35.485 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 05:54:35.464 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 05:55:16.230 00:00:10.366 TCP 23.104.0.1:34156 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:55:13.395 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40452 10 6452 1 2025-08-28 05:56:13.565 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48718 10 6452 1 2025-08-28 05:56:16.642 00:00:10.362 TCP 23.104.0.1:57198 -> 1.101.0.1:3000 11 1507 1 2025-08-28 05:57:13.771 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:60764 12 10367 1 2025-08-28 05:57:17.047 00:00:10.437 TCP 23.104.0.1:40832 -> 1.101.0.1:3000 15 1926 1 2025-08-28 05:58:14.015 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41598 10 6452 1 2025-08-28 05:58:17.525 00:00:10.326 TCP 23.104.0.1:44976 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 501946, total packets: 1567, avg bps: 1112, avg pps: 0, avg bpp: 320 Time window: 2025-08-28 04:58:19 - 2025-08-28 05:58:27 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0023s User: 0.0031s Wall: 0.0046s flows/second: 34453.7 Runtime: 0.0047s