Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 02:59:08.742 00:00:10.363 TCP 23.104.0.1:53526 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:54:25.215 00:06:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 02:59:36.818 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50304 10 6452 1 2025-09-08 02:59:49.586 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 02:59:49.545 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:00:09.143 00:00:10.371 TCP 23.104.0.1:39218 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:00:37.040 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53412 10 6452 1 2025-09-08 03:01:09.545 00:00:10.706 TCP 23.104.0.1:35650 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:01:37.253 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:52808 10 6452 1 2025-09-08 03:02:10.291 00:00:10.369 TCP 23.104.0.1:39040 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:02:37.493 00:00:10.670 TCP 1.101.0.1:3000 -> 22.102.0.1:40836 10 6452 1 2025-09-08 03:03:10.691 00:00:10.325 TCP 23.104.0.1:52360 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:58:25.219 00:06:00.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 03:03:38.202 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56760 10 6452 1 2025-09-08 03:04:11.066 00:00:10.367 TCP 23.104.0.1:45580 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:04:49.546 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:04:38.420 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47514 10 6452 1 2025-09-08 03:04:49.821 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 03:05:11.466 00:00:10.364 TCP 23.104.0.1:44990 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:05:38.643 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46078 10 6452 1 2025-09-08 03:06:11.869 00:00:10.680 TCP 23.104.0.1:33238 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:01:25.217 00:06:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 03:06:38.861 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40006 10 6452 1 2025-09-08 03:07:12.587 00:00:10.368 TCP 23.104.0.1:58562 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:07:39.088 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34806 10 6452 1 2025-09-08 03:08:12.995 00:00:10.438 TCP 23.104.0.1:57914 -> 1.101.0.1:3000 15 1926 1 2025-09-08 03:08:39.310 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:34886 12 10365 1 2025-09-08 03:09:13.474 00:00:10.364 TCP 23.104.0.1:53512 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:09:50.113 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 03:09:39.508 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33098 10 6452 1 2025-09-08 03:09:50.040 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:05:25.219 00:06:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 03:10:13.878 00:00:10.363 TCP 23.104.0.1:60440 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:10:39.732 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59030 10 6452 1 2025-09-08 03:11:14.292 00:00:10.361 TCP 23.104.0.1:47138 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:11:39.952 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:34340 10 6452 1 2025-09-08 03:12:14.687 00:00:10.324 TCP 23.104.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:12:40.197 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:58554 10 6452 1 2025-09-08 03:08:25.219 00:06:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 03:13:15.062 00:00:10.366 TCP 23.104.0.1:45176 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:13:40.449 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47932 10 6452 1 2025-09-08 03:14:15.464 00:00:10.365 TCP 23.104.0.1:34870 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:14:40.666 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37532 10 6452 1 2025-09-08 03:14:49.924 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 03:14:49.884 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:15:15.863 00:00:10.377 TCP 23.104.0.1:53274 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:15:40.881 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58648 10 6452 1 2025-09-08 03:16:16.279 00:00:10.365 TCP 23.104.0.1:50712 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:16:41.113 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6452 1 2025-09-08 03:12:25.227 00:06:00.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 03:17:16.687 00:00:10.364 TCP 23.104.0.1:46852 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:17:41.321 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36502 10 6452 1 2025-09-08 03:18:17.103 00:00:10.374 TCP 23.104.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:18:41.534 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47502 10 6452 1 2025-09-08 03:19:17.528 00:00:10.383 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:19:41.750 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46878 10 6452 1 2025-09-08 03:19:50.271 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 03:19:50.380 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:15:25.227 00:06:00.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 03:20:17.935 00:00:10.377 TCP 23.104.0.1:57552 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:20:41.974 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:58554 10 6452 1 2025-09-08 03:21:18.349 00:00:10.372 TCP 23.104.0.1:54278 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:21:42.175 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38632 10 6452 1 2025-09-08 03:22:18.758 00:00:10.386 TCP 23.104.0.1:45312 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:22:42.386 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34100 10 6452 1 2025-09-08 03:23:19.180 00:00:10.364 TCP 23.104.0.1:38726 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:23:42.594 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35900 10 6452 1 2025-09-08 03:19:25.232 00:06:00.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 03:24:19.583 00:00:10.370 TCP 23.104.0.1:50368 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:24:50.577 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 03:24:50.009 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:24:42.808 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49828 10 6452 1 2025-09-08 03:25:19.990 00:00:10.326 TCP 23.104.0.1:46492 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:25:43.028 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49078 10 6452 1 2025-09-08 03:26:20.354 00:00:10.368 TCP 23.104.0.1:39158 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:26:43.248 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44930 10 6452 1 2025-09-08 03:22:25.229 00:06:00.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 03:27:20.759 00:00:10.380 TCP 23.104.0.1:38344 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:27:43.463 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52766 10 6452 1 2025-09-08 03:28:21.173 00:00:10.365 TCP 23.104.0.1:35580 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:28:43.682 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60828 10 6452 1 2025-09-08 03:29:21.572 00:00:10.367 TCP 23.104.0.1:38960 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:29:50.690 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:29:50.631 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 03:29:43.903 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46030 10 6452 1 2025-09-08 03:30:21.975 00:00:10.327 TCP 23.104.0.1:39600 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:30:44.118 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34814 10 6452 1 2025-09-08 03:26:25.233 00:06:00.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 03:31:22.341 00:00:10.365 TCP 23.104.0.1:45900 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:31:44.292 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54682 10 6452 1 2025-09-08 03:32:22.750 00:00:10.419 TCP 23.104.0.1:47300 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:32:44.515 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59260 10 6452 1 2025-09-08 03:33:23.235 00:00:10.365 TCP 23.104.0.1:35206 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:33:44.738 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54002 10 6452 1 2025-09-08 03:29:25.231 00:06:00.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 03:34:23.634 00:00:10.363 TCP 23.104.0.1:37116 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:34:50.312 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:34:50.475 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 03:34:44.948 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:57176 10 6452 1 2025-09-08 03:35:24.037 00:00:10.366 TCP 23.104.0.1:40634 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:35:45.138 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35256 10 6452 1 2025-09-08 03:36:24.441 00:00:10.362 TCP 23.104.0.1:38970 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:36:45.359 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2025-09-08 03:37:24.840 00:00:10.395 TCP 23.104.0.1:57124 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:37:45.539 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47320 10 6452 1 2025-09-08 03:33:25.234 00:06:00.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 03:38:25.271 00:00:10.325 TCP 23.104.0.1:55776 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:38:45.752 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-09-08 03:39:25.636 00:00:10.367 TCP 23.104.0.1:36306 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:39:50.303 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 03:39:50.383 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:39:45.933 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54014 10 6452 1 2025-09-08 03:36:25.232 00:05:00.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 03:40:26.036 00:00:10.364 TCP 23.104.0.1:55214 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:40:46.165 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39522 10 6452 1 2025-09-08 03:41:26.440 00:00:10.361 TCP 23.104.0.1:45242 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:41:46.335 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34622 10 6452 1 2025-09-08 03:42:26.843 00:00:10.349 TCP 23.104.0.1:38006 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:42:46.549 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38300 10 6452 1 2025-09-08 03:43:27.226 00:00:10.364 TCP 23.104.0.1:36706 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:43:46.724 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42464 10 6452 1 2025-09-08 03:44:27.629 00:00:10.364 TCP 23.104.0.1:39494 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:44:50.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 03:44:50.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:44:46.944 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36714 10 6452 1 2025-09-08 03:40:25.234 00:06:00.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 03:45:28.031 00:00:10.804 TCP 23.104.0.1:35626 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:45:47.171 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54442 10 6452 1 2025-09-08 03:42:25.234 00:05:00.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 03:46:28.876 00:00:10.374 TCP 23.104.0.1:52462 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:46:47.389 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38416 10 6452 1 2025-09-08 03:47:29.292 00:00:10.416 TCP 23.104.0.1:39898 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:47:47.601 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50074 10 6452 1 2025-09-08 03:48:29.753 00:00:10.389 TCP 23.104.0.1:59298 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:48:47.814 00:00:10.385 TCP 1.101.0.1:3000 -> 22.102.0.1:40652 10 6452 1 2025-09-08 03:49:30.176 00:00:10.362 TCP 23.104.0.1:50704 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:49:50.563 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 03:49:50.732 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:49:48.240 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48664 10 6452 1 2025-09-08 03:50:30.576 00:00:10.361 TCP 23.104.0.1:54436 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:50:48.413 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34826 10 6452 1 2025-09-08 03:47:25.238 00:05:00.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 03:51:30.976 00:00:10.381 TCP 23.104.0.1:46294 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:51:48.583 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57092 10 6452 1 2025-09-08 03:48:25.237 00:05:00.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 03:52:31.398 00:00:10.369 TCP 23.104.0.1:47734 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:52:48.808 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46540 10 6452 1 2025-09-08 03:53:31.804 00:00:10.740 TCP 23.104.0.1:39340 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:53:49.030 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45936 10 6452 1 2025-09-08 03:54:32.583 00:00:10.361 TCP 23.104.0.1:53490 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:54:50.847 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 03:54:50.731 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 03:54:49.245 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34672 10 6452 1 2025-09-08 03:55:32.986 00:00:10.367 TCP 23.104.0.1:47526 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:55:49.473 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49926 10 6452 1 2025-09-08 03:56:33.398 00:00:10.341 TCP 23.104.0.1:51734 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:56:49.647 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37928 10 6452 1 2025-09-08 03:53:25.244 00:05:00.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 03:57:33.790 00:00:10.366 TCP 23.104.0.1:45784 -> 1.101.0.1:3000 11 1507 1 2025-09-08 03:57:49.867 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37580 10 6452 1 2025-09-08 03:54:25.241 00:05:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 03:58:34.195 00:00:10.364 TCP 23.104.0.1:46442 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 497089, total packets: 1582, avg bps: 1019, avg pps: 0, avg bpp: 314 Time window: 2025-09-08 02:54:25 - 2025-09-08 03:59:26 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0024s User: 0.0024s Wall: 0.0018s flows/second: 89252.2 Runtime: 0.0018s