Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-30 17:59:03.759 00:00:10.333 TCP 23.104.0.1:47324 -> 1.101.0.1:3000 11 1507 1 2025-08-30 17:59:28.587 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34468 10 6452 1 2025-08-30 18:00:04.127 00:00:10.366 TCP 23.104.0.1:33050 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:00:28.803 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56440 10 6452 1 2025-08-30 18:00:47.859 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 18:00:47.667 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 18:01:04.534 00:00:10.362 TCP 23.104.0.1:49112 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:01:29.023 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59204 10 6452 1 2025-08-30 18:02:04.938 00:00:10.383 TCP 23.104.0.1:53038 -> 1.101.0.1:3000 11 1507 1 2025-08-30 17:58:21.181 00:04:00.310 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 18:02:29.249 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48780 10 6452 1 2025-08-30 18:03:05.358 00:00:10.365 TCP 23.104.0.1:50164 -> 1.101.0.1:3000 11 1507 1 2025-08-30 17:59:21.178 00:04:00.311 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 18:03:29.469 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45240 10 6452 1 2025-08-30 18:04:05.768 00:00:10.386 TCP 23.104.0.1:50484 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:04:29.687 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36240 10 6452 1 2025-08-30 18:05:06.201 00:00:10.362 TCP 23.104.0.1:41770 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:05:29.911 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49978 10 6452 1 2025-08-30 18:05:47.596 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 18:05:47.824 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 18:06:06.603 00:00:10.361 TCP 23.104.0.1:37424 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:06:30.126 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38794 11 6813 1 2025-08-30 18:03:21.181 00:04:00.310 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 18:07:07.005 00:00:10.384 TCP 23.104.0.1:50058 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:07:30.379 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33126 10 6452 1 2025-08-30 18:04:21.180 00:04:00.313 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 18:08:07.441 00:00:10.370 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:08:30.588 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38274 10 6452 1 2025-08-30 18:09:07.849 00:00:10.377 TCP 23.104.0.1:59914 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:09:30.802 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55032 10 6452 1 2025-08-30 18:10:08.264 00:00:10.367 TCP 23.104.0.1:36994 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:10:31.036 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53300 10 6452 1 2025-08-30 18:10:47.947 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 18:10:48.378 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 18:11:08.676 00:00:10.325 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:11:31.211 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56824 10 6452 1 2025-08-30 18:12:09.059 00:00:10.367 TCP 23.104.0.1:40044 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:08:21.184 00:04:00.307 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 18:12:31.426 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37218 10 6452 1 2025-08-30 18:13:09.458 00:00:11.026 TCP 23.104.0.1:37470 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:13:31.596 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34086 10 6452 1 2025-08-30 18:14:10.523 00:00:10.368 TCP 23.104.0.1:49874 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:09:21.181 00:06:00.313 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-30 18:14:31.823 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-08-30 18:15:10.924 00:00:10.389 TCP 23.104.0.1:60972 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:15:32.007 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39836 10 6452 1 2025-08-30 18:15:48.041 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 18:15:48.294 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 18:16:11.355 00:00:10.366 TCP 23.104.0.1:60014 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:16:32.214 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-08-30 18:13:21.184 00:04:00.307 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 18:17:11.756 00:00:10.824 TCP 23.104.0.1:45824 -> 1.101.0.1:3000 15 1926 1 2025-08-30 18:17:32.435 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:50092 12 10367 1 2025-08-30 18:18:12.622 00:00:10.366 TCP 23.104.0.1:46822 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:18:32.671 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60930 10 6452 1 2025-08-30 18:19:13.035 00:00:10.391 TCP 23.104.0.1:58432 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:19:32.893 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59502 10 6452 1 2025-08-30 18:16:21.183 00:04:00.313 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 18:20:13.466 00:00:10.332 TCP 23.104.0.1:42408 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:20:33.116 00:00:10.586 TCP 1.101.0.1:3000 -> 22.102.0.1:36178 10 6452 1 2025-08-30 18:20:48.215 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 18:20:48.255 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 18:21:13.834 00:00:10.378 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:21:33.741 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51442 10 6452 1 2025-08-30 18:18:21.187 00:04:00.305 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 18:22:14.247 00:00:10.366 TCP 23.104.0.1:34408 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:22:33.955 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54652 10 6452 1 2025-08-30 18:23:14.658 00:00:10.366 TCP 23.104.0.1:33848 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:23:34.183 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36380 10 6452 1 2025-08-30 18:24:15.091 00:00:10.365 TCP 23.104.0.1:55108 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:24:34.395 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33664 10 6452 1 2025-08-30 18:21:21.186 00:04:00.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 18:25:15.501 00:00:10.364 TCP 23.104.0.1:55452 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:25:34.629 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53436 10 6452 1 2025-08-30 18:25:48.277 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 18:25:48.443 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 18:26:15.904 00:00:10.364 TCP 23.104.0.1:35586 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:26:34.842 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52196 10 6452 1 2025-08-30 18:23:21.191 00:04:00.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 18:27:16.309 00:00:10.363 TCP 23.104.0.1:40398 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:27:35.088 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46022 10 6452 1 2025-08-30 18:28:16.710 00:00:10.370 TCP 23.104.0.1:50006 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:28:35.300 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37330 10 6452 1 2025-08-30 18:28:21.194 00:01:00.301 TCP 179.1.22.22:39396 -> 179.1.22.1:179 4 246 1 2025-08-30 18:29:17.119 00:00:10.327 TCP 23.104.0.1:60250 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:29:35.514 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60414 10 6452 1 2025-08-30 18:26:21.190 00:04:00.307 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 18:30:17.481 00:00:10.328 TCP 23.104.0.1:58172 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:30:35.739 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47604 10 6452 1 2025-08-30 18:30:48.559 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 18:30:48.532 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 18:31:17.846 00:00:10.385 TCP 23.104.0.1:55302 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:31:35.961 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49388 10 6452 1 2025-08-30 18:32:18.267 00:00:10.444 TCP 23.104.0.1:43086 -> 1.101.0.1:3000 15 1926 1 2025-08-30 18:32:36.184 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58162 12 10365 1 2025-08-30 18:33:18.745 00:00:10.734 TCP 23.104.0.1:51284 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:33:36.427 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-08-30 18:30:21.193 00:04:00.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 18:34:19.516 00:00:10.362 TCP 23.104.0.1:55070 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:34:36.639 00:00:10.799 TCP 1.101.0.1:3000 -> 22.102.0.1:54340 10 6452 1 2025-08-30 18:31:21.191 00:04:00.308 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 18:35:19.920 00:00:10.409 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:35:48.825 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 18:35:37.480 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52854 10 6452 1 2025-08-30 18:35:48.715 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 18:36:20.371 00:00:10.363 TCP 23.104.0.1:33558 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:36:37.685 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38076 10 6452 1 2025-08-30 18:37:20.774 00:00:10.377 TCP 23.104.0.1:34172 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:37:37.887 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39540 10 6452 1 2025-08-30 18:38:21.219 00:00:10.362 TCP 23.104.0.1:51436 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:38:38.104 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58538 10 6452 1 2025-08-30 18:35:21.196 00:04:00.322 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 18:39:21.628 00:00:10.368 TCP 23.104.0.1:40414 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:39:38.319 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56330 10 6452 1 2025-08-30 18:36:21.194 00:04:00.311 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 18:40:22.035 00:00:10.361 TCP 23.104.0.1:57026 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:40:48.615 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 18:40:48.533 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 18:40:38.530 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54994 10 6452 1 2025-08-30 18:41:22.436 00:00:10.366 TCP 23.104.0.1:41480 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:41:38.744 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54314 10 6452 1 2025-08-30 18:42:22.841 00:00:10.388 TCP 23.104.0.1:42108 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:42:38.962 00:00:10.582 TCP 1.101.0.1:3000 -> 22.102.0.1:48784 10 6452 1 2025-08-30 18:43:23.266 00:00:10.363 TCP 23.104.0.1:46294 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:43:39.580 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-08-30 18:40:21.197 00:04:00.305 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 18:44:23.667 00:00:10.373 TCP 23.104.0.1:42178 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:44:39.797 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52952 10 6452 1 2025-08-30 18:41:21.194 00:04:00.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 18:45:24.104 00:00:10.366 TCP 23.104.0.1:33356 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:45:40.006 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:39668 10 6452 1 2025-08-30 18:45:48.562 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 18:45:48.545 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 18:46:24.510 00:00:10.367 TCP 23.104.0.1:36744 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:46:40.192 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53146 11 6504 1 2025-08-30 18:46:21.195 00:01:00.311 TCP 179.1.22.1:179 -> 179.1.22.22:39396 4 246 1 2025-08-30 18:47:24.910 00:00:10.367 TCP 23.104.0.1:47752 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:47:40.405 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60036 10 6452 1 2025-08-30 18:48:25.310 00:00:10.361 TCP 23.104.0.1:33944 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:48:40.612 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44098 10 6452 1 2025-08-30 18:45:21.197 00:04:00.306 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 18:49:25.709 00:00:10.365 TCP 23.104.0.1:56418 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:49:40.788 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55168 10 6452 1 2025-08-30 18:50:26.113 00:00:10.365 TCP 23.104.0.1:49410 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:50:40.995 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53066 10 6452 1 2025-08-30 18:50:48.774 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 18:50:48.514 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 18:51:26.514 00:00:10.361 TCP 23.104.0.1:33842 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:51:41.174 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44108 10 6452 1 2025-08-30 18:48:21.195 00:04:00.312 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 18:52:26.914 00:00:10.331 TCP 23.104.0.1:39064 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:52:41.383 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54006 10 6452 1 2025-08-30 18:53:27.285 00:00:10.365 TCP 23.104.0.1:42210 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:53:41.567 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37842 10 6452 1 2025-08-30 18:50:21.198 00:04:00.308 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 18:54:27.687 00:00:10.376 TCP 23.104.0.1:45082 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:54:41.785 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46422 10 6452 1 2025-08-30 18:55:28.104 00:00:10.367 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:55:48.988 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 18:55:48.734 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 18:55:42.004 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41584 10 6452 1 2025-08-30 18:56:28.508 00:00:10.326 TCP 23.104.0.1:45458 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:56:42.220 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53984 10 6452 1 2025-08-30 18:53:21.195 00:04:00.313 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 18:57:28.872 00:00:10.363 TCP 23.104.0.1:57738 -> 1.101.0.1:3000 11 1507 1 2025-08-30 18:57:42.428 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35350 10 6452 1 2025-08-30 18:58:29.271 00:00:10.326 TCP 23.104.0.1:46702 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 167, total bytes: 500483, total packets: 1568, avg bps: 1106, avg pps: 0, avg bpp: 319 Time window: 2025-08-30 17:58:21 - 2025-08-30 18:58:39 Total flows processed: 167, passed: 167, Blocks skipped: 0, Bytes read: 17432 Sys: 0.0031s User: 0.0021s Wall: 0.0025s flows/second: 67396.2 Runtime: 0.0025s