Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-05 13:58:57.577 00:00:10.370 TCP 23.104.0.1:60360 -> 1.101.0.1:3000 11 1507 1 2025-08-05 13:55:06.719 00:05:00.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 13:59:19.833 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47818 10 6452 1 2025-08-05 13:59:57.994 00:00:10.371 TCP 23.104.0.1:40290 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:00:20.074 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52550 10 6452 1 2025-08-05 13:57:06.721 00:05:00.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 14:00:58.405 00:00:10.365 TCP 23.104.0.1:47942 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:01:20.283 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49380 10 6452 1 2025-08-05 14:01:58.808 00:00:10.337 TCP 23.104.0.1:59712 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:02:20.456 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55648 10 6452 1 2025-08-05 14:02:59.181 00:00:10.364 TCP 23.104.0.1:55330 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:03:20.673 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56204 10 6452 1 2025-08-05 14:03:40.828 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 14:03:40.710 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 14:03:59.583 00:00:10.366 TCP 23.104.0.1:51862 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:04:20.888 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36378 10 6452 1 2025-08-05 14:01:06.720 00:05:00.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 14:04:59.989 00:00:10.324 TCP 23.104.0.1:51834 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:05:21.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34954 10 6452 1 2025-08-05 14:06:00.351 00:00:10.369 TCP 23.104.0.1:60178 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:06:21.319 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42284 10 6452 1 2025-08-05 14:03:06.725 00:05:00.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 14:07:00.768 00:00:10.374 TCP 23.104.0.1:46080 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:07:21.527 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55258 10 6452 1 2025-08-05 14:08:01.180 00:00:10.367 TCP 23.104.0.1:38238 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:08:21.740 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44320 10 6452 1 2025-08-05 14:08:41.010 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 14:08:40.942 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 14:09:01.583 00:00:10.370 TCP 23.104.0.1:46974 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:09:21.960 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53218 10 6452 1 2025-08-05 14:10:01.991 00:00:10.377 TCP 23.104.0.1:53434 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:10:22.189 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37916 10 6452 1 2025-08-05 14:07:06.723 00:05:00.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 14:11:02.404 00:00:10.320 TCP 23.104.0.1:51772 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:11:22.402 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40556 10 6452 1 2025-08-05 14:12:02.765 00:00:10.375 TCP 23.104.0.1:39330 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:12:22.617 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44246 10 6452 1 2025-08-05 14:09:06.726 00:05:00.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 14:13:03.174 00:00:10.364 TCP 23.104.0.1:55602 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:13:22.834 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:57614 12 10367 1 2025-08-05 14:13:40.728 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 14:13:40.892 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 14:14:03.575 00:00:10.439 TCP 23.104.0.1:39358 -> 1.101.0.1:3000 15 1926 1 2025-08-05 14:14:23.089 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33628 10 6452 1 2025-08-05 14:15:04.066 00:00:10.377 TCP 23.104.0.1:37148 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:15:23.303 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34398 10 6452 1 2025-08-05 14:16:04.483 00:00:10.364 TCP 23.104.0.1:45124 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:16:23.516 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55294 10 6452 1 2025-08-05 14:13:06.725 00:05:00.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 14:17:04.881 00:00:10.331 TCP 23.104.0.1:60474 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:17:23.726 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52380 10 6452 1 2025-08-05 14:18:05.251 00:00:10.372 TCP 23.104.0.1:51984 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:18:23.944 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54500 10 6452 1 2025-08-05 14:18:41.098 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 14:18:40.870 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 14:15:06.727 00:05:00.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 14:19:05.666 00:00:10.369 TCP 23.104.0.1:54748 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:19:24.178 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40292 10 6452 1 2025-08-05 14:20:06.105 00:00:10.368 TCP 23.104.0.1:49576 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:20:24.392 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56108 10 6452 1 2025-08-05 14:21:06.512 00:00:10.367 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:21:24.602 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59416 10 6452 1 2025-08-05 14:22:06.921 00:00:10.397 TCP 23.104.0.1:35024 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:22:24.815 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44366 10 6452 1 2025-08-05 14:19:06.727 00:05:00.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 14:23:07.364 00:00:10.359 TCP 23.104.0.1:41404 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:23:25.042 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45684 12 10365 1 2025-08-05 14:23:41.382 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 14:23:40.938 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 14:24:07.765 00:00:10.448 TCP 23.104.0.1:55396 -> 1.101.0.1:3000 15 1926 1 2025-08-05 14:24:25.286 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39256 10 6452 1 2025-08-05 14:21:06.730 00:05:00.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 14:25:08.248 00:00:10.363 TCP 23.104.0.1:35358 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:25:25.510 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55838 10 6452 1 2025-08-05 14:26:08.650 00:00:10.369 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:26:25.722 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53282 10 6452 1 2025-08-05 14:27:09.088 00:00:10.364 TCP 23.104.0.1:38108 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:27:25.935 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44518 10 6452 1 2025-08-05 14:28:09.490 00:00:10.366 TCP 23.104.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:28:26.163 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51840 10 6452 1 2025-08-05 14:28:41.415 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 14:28:41.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 14:25:06.728 00:05:00.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 14:29:09.897 00:00:10.370 TCP 23.104.0.1:53346 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:29:26.373 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41052 10 6452 1 2025-08-05 14:30:10.306 00:00:10.363 TCP 23.104.0.1:47980 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:30:26.594 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42822 10 6452 1 2025-08-05 14:27:06.731 00:05:00.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 14:31:10.706 00:00:10.365 TCP 23.104.0.1:40246 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:31:26.808 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33990 10 6452 1 2025-08-05 14:32:11.113 00:00:10.363 TCP 23.104.0.1:48702 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:32:27.038 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-08-05 14:33:11.513 00:00:10.359 TCP 23.104.0.1:56724 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:33:41.084 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 14:33:27.257 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34080 10 6452 1 2025-08-05 14:33:41.352 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 14:34:11.915 00:00:10.320 TCP 23.104.0.1:36588 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:34:27.474 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42234 10 6452 1 2025-08-05 14:31:06.731 00:05:00.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 14:35:12.277 00:00:10.361 TCP 23.104.0.1:51780 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:35:27.687 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46568 10 6452 1 2025-08-05 14:36:12.680 00:00:10.363 TCP 23.104.0.1:50498 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:36:27.914 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:32800 10 6452 1 2025-08-05 14:33:06.734 00:05:00.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 14:37:13.108 00:00:10.364 TCP 23.104.0.1:33494 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:37:28.097 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49638 10 6452 1 2025-08-05 14:38:13.515 00:00:10.374 TCP 23.104.0.1:60152 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:38:28.314 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38724 10 6452 1 2025-08-05 14:38:41.828 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 14:38:41.884 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 14:39:13.927 00:00:10.389 TCP 23.104.0.1:33406 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:39:28.530 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51808 10 6452 1 2025-08-05 14:40:14.354 00:00:10.367 TCP 23.104.0.1:48822 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:40:28.705 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50858 10 6452 1 2025-08-05 14:37:06.731 00:05:00.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 14:41:14.756 00:00:10.379 TCP 23.104.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:41:28.879 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53252 10 6452 1 2025-08-05 14:42:15.174 00:00:10.365 TCP 23.104.0.1:59808 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:42:29.095 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51814 10 6452 1 2025-08-05 14:39:06.744 00:05:00.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 14:43:15.582 00:00:10.363 TCP 23.104.0.1:57840 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:43:41.555 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 14:43:29.311 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57004 10 6452 1 2025-08-05 14:43:41.455 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 14:44:15.985 00:00:10.367 TCP 23.104.0.1:35296 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:44:29.528 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51492 10 6452 1 2025-08-05 14:45:16.385 00:00:10.363 TCP 23.104.0.1:57904 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:45:29.740 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55328 10 6452 1 2025-08-05 14:46:16.793 00:00:10.344 TCP 23.104.0.1:49290 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:46:29.956 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58858 10 6452 1 2025-08-05 14:43:06.742 00:05:00.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 14:47:17.174 00:00:10.325 TCP 23.104.0.1:45242 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:47:30.186 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42934 10 6452 1 2025-08-05 14:48:17.540 00:00:10.324 TCP 23.104.0.1:59560 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:48:41.672 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 14:48:30.399 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57160 10 6452 1 2025-08-05 14:48:41.489 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 14:45:06.744 00:05:00.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 14:49:17.904 00:00:10.378 TCP 23.104.0.1:60450 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:49:30.614 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35926 10 6452 1 2025-08-05 14:50:18.325 00:00:10.365 TCP 23.104.0.1:35604 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:50:30.829 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38816 10 6452 1 2025-08-05 14:51:18.729 00:00:10.384 TCP 23.104.0.1:59616 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:51:31.072 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60338 10 6452 1 2025-08-05 14:52:19.141 00:00:10.371 TCP 23.104.0.1:37488 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:52:31.302 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53426 10 6452 1 2025-08-05 14:49:06.742 00:05:00.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 14:53:19.543 00:00:10.370 TCP 23.104.0.1:58204 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:53:41.933 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 14:53:31.514 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54252 10 6452 1 2025-08-05 14:53:41.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 14:54:19.952 00:00:10.330 TCP 23.104.0.1:32908 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:54:31.733 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58802 10 6452 1 2025-08-05 14:51:06.744 00:05:00.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 14:55:20.320 00:00:10.327 TCP 23.104.0.1:59608 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:55:31.957 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55126 10 6452 1 2025-08-05 14:56:20.688 00:00:10.326 TCP 23.104.0.1:39110 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:56:32.184 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37054 10 6452 1 2025-08-05 14:57:21.065 00:00:10.364 TCP 23.104.0.1:55286 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:57:32.395 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45762 10 6452 1 2025-08-05 14:58:21.466 00:00:10.367 TCP 23.104.0.1:34254 -> 1.101.0.1:3000 11 1507 1 2025-08-05 14:58:41.782 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 14:58:41.856 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 14:58:32.613 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55054 10 6452 1 Summary: total flows: 164, total bytes: 507014, total packets: 1584, avg bps: 1062, avg pps: 0, avg bpp: 320 Time window: 2025-08-05 13:55:06 - 2025-08-05 14:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0011s Wall: 0.0024s flows/second: 67570.3 Runtime: 0.0024s