Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-06 18:59:00.179 00:00:10.369 TCP 23.104.0.1:42552 -> 1.101.0.1:3000 11 1507 1 2025-08-06 18:59:16.457 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 18:59:16.411 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 18:59:42.012 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53932 10 6452 1 2025-08-06 19:00:00.587 00:00:10.366 TCP 23.104.0.1:54350 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:00:42.223 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46836 10 6452 1 2025-08-06 19:01:00.992 00:00:10.324 TCP 23.104.0.1:37110 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:01:42.434 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46066 10 6452 1 2025-08-06 19:02:01.363 00:00:10.325 TCP 23.104.0.1:36658 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:02:42.644 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51356 10 6452 1 2025-08-06 18:59:07.279 00:05:00.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 19:03:01.728 00:00:10.371 TCP 23.104.0.1:53796 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:03:42.861 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34226 10 6452 1 2025-08-06 19:00:07.276 00:05:00.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 19:04:15.709 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 19:04:02.139 00:00:10.362 TCP 23.104.0.1:38130 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:04:15.764 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 19:04:43.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45866 10 6452 1 2025-08-06 19:05:02.542 00:00:10.372 TCP 23.104.0.1:42350 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:05:43.318 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34166 10 6452 1 2025-08-06 19:06:02.951 00:00:10.373 TCP 23.104.0.1:56042 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:06:43.526 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44720 10 6452 1 2025-08-06 19:07:03.363 00:00:10.339 TCP 23.104.0.1:44128 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:07:43.705 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49730 10 6452 1 2025-08-06 19:08:03.745 00:00:11.057 TCP 23.104.0.1:42704 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:08:43.916 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37460 10 6452 1 2025-08-06 19:05:07.282 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 19:09:04.868 00:00:10.364 TCP 23.104.0.1:54680 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:09:15.866 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 19:09:15.791 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 19:09:44.128 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56526 10 6452 1 2025-08-06 19:06:07.278 00:05:00.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 19:10:05.272 00:00:10.362 TCP 23.104.0.1:51660 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:10:44.307 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32984 10 6452 1 2025-08-06 19:11:05.678 00:00:10.370 TCP 23.104.0.1:33624 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:11:44.519 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37690 10 6452 1 2025-08-06 19:12:06.094 00:00:10.367 TCP 23.104.0.1:36156 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:12:44.734 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49478 10 6452 1 2025-08-06 19:13:06.499 00:00:10.367 TCP 23.104.0.1:35180 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:13:44.945 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52464 10 6452 1 2025-08-06 19:14:16.230 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 19:14:16.237 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 19:14:06.909 00:00:10.321 TCP 23.104.0.1:59178 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:14:45.184 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:56958 10 6452 1 2025-08-06 19:11:07.284 00:05:00.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 19:15:07.278 00:00:10.327 TCP 23.104.0.1:44802 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:15:45.381 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41058 10 6452 1 2025-08-06 19:12:07.282 00:05:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 19:16:07.650 00:00:10.369 TCP 23.104.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:16:45.591 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60322 10 6452 1 2025-08-06 19:17:08.070 00:00:10.367 TCP 23.104.0.1:50242 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:17:45.804 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52298 10 6452 1 2025-08-06 19:18:08.474 00:00:10.365 TCP 23.104.0.1:59692 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:18:46.030 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40506 10 6452 1 2025-08-06 19:19:16.077 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 19:19:15.940 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 19:19:08.883 00:00:10.390 TCP 23.104.0.1:54652 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:19:46.241 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60744 10 6452 1 2025-08-06 19:20:09.312 00:00:10.362 TCP 23.104.0.1:43054 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:20:46.411 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52232 10 6452 1 2025-08-06 19:17:07.285 00:05:00.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 19:21:09.713 00:00:10.373 TCP 23.104.0.1:58942 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:21:46.579 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33134 10 6452 1 2025-08-06 19:18:07.282 00:05:00.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 19:22:10.126 00:00:10.369 TCP 23.104.0.1:42748 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:22:46.789 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45418 10 6452 1 2025-08-06 19:23:10.533 00:00:10.321 TCP 23.104.0.1:42794 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:23:47.004 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53356 10 6452 1 2025-08-06 19:24:15.883 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 19:24:16.136 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 19:24:10.894 00:00:10.372 TCP 23.104.0.1:41636 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:24:47.175 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42542 10 6452 1 2025-08-06 19:25:11.303 00:00:10.366 TCP 23.104.0.1:48020 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:25:47.392 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47852 10 6452 1 2025-08-06 19:26:11.705 00:00:10.319 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:26:47.608 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48820 10 6452 1 2025-08-06 19:23:07.286 00:05:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 19:27:12.093 00:00:10.360 TCP 23.104.0.1:50450 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:27:47.820 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:33406 10 6452 1 2025-08-06 19:24:07.283 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 19:28:12.492 00:00:10.323 TCP 23.104.0.1:55122 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:28:48.004 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46460 10 6452 1 2025-08-06 19:29:16.198 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 19:29:15.967 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 19:29:12.855 00:00:10.375 TCP 23.104.0.1:53192 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:29:48.239 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54538 10 6452 1 2025-08-06 19:30:13.267 00:00:10.596 TCP 23.104.0.1:49370 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:30:48.410 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44258 10 6452 1 2025-08-06 19:31:13.902 00:00:10.373 TCP 23.104.0.1:51974 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:31:48.617 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48888 10 6452 1 2025-08-06 19:32:14.314 00:00:10.369 TCP 23.104.0.1:46174 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:32:48.802 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58548 10 6452 1 2025-08-06 19:29:07.287 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 19:33:14.721 00:00:10.372 TCP 23.104.0.1:38182 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:33:49.025 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40040 10 6452 1 2025-08-06 19:30:07.283 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 19:34:16.313 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 19:34:16.074 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 19:34:15.132 00:00:10.369 TCP 23.104.0.1:58372 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:34:49.237 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46738 10 6452 1 2025-08-06 19:35:15.542 00:00:10.324 TCP 23.104.0.1:40594 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:35:49.449 00:00:10.517 TCP 1.101.0.1:3000 -> 22.102.0.1:46000 10 6452 1 2025-08-06 19:36:15.909 00:00:10.370 TCP 23.104.0.1:34478 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:36:50.009 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34258 10 6452 1 2025-08-06 19:37:16.314 00:00:10.367 TCP 23.104.0.1:45054 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:37:50.219 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49664 10 6452 1 2025-08-06 19:38:16.717 00:00:10.323 TCP 23.104.0.1:51940 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:38:50.391 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6452 1 2025-08-06 19:35:07.289 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 19:39:16.436 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 19:39:16.296 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 19:39:17.105 00:00:10.368 TCP 23.104.0.1:54620 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:39:50.609 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35320 10 6452 1 2025-08-06 19:36:07.287 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 19:40:17.513 00:00:10.327 TCP 23.104.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:40:50.838 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41744 10 6452 1 2025-08-06 19:41:17.879 00:00:10.358 TCP 23.104.0.1:58534 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:41:51.012 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:50772 10 6452 1 2025-08-06 19:42:18.277 00:00:10.369 TCP 23.104.0.1:50052 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:42:51.209 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47228 10 6452 1 2025-08-06 19:43:18.685 00:00:10.324 TCP 23.104.0.1:41018 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:43:51.425 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37402 10 6452 1 2025-08-06 19:44:16.623 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 19:44:16.496 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 19:44:19.056 00:00:10.364 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:44:51.609 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45046 10 6452 1 2025-08-06 19:41:07.290 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 19:45:19.461 00:00:10.329 TCP 23.104.0.1:53012 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:45:51.779 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54838 10 6452 1 2025-08-06 19:42:07.288 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 19:46:19.822 00:00:10.368 TCP 23.104.0.1:52984 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:46:51.996 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59390 10 6452 1 2025-08-06 19:47:20.224 00:00:10.331 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:47:52.171 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57592 10 6452 1 2025-08-06 19:48:20.585 00:00:10.365 TCP 23.104.0.1:48948 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:48:52.348 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34972 10 6452 1 2025-08-06 19:49:16.464 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 19:49:16.724 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 19:49:20.989 00:00:10.337 TCP 23.104.0.1:60910 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:49:52.521 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6452 1 2025-08-06 19:50:21.369 00:00:10.370 TCP 23.104.0.1:55400 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:50:52.692 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53138 10 6452 1 2025-08-06 19:47:07.291 00:05:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 19:51:21.785 00:00:10.366 TCP 23.104.0.1:53804 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:51:52.912 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49974 10 6452 1 2025-08-06 19:48:07.289 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 19:52:22.188 00:00:10.328 TCP 23.104.0.1:43768 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:52:53.120 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53706 10 6452 1 2025-08-06 19:53:22.557 00:00:10.397 TCP 23.104.0.1:48250 -> 1.101.0.1:3000 15 1926 1 2025-08-06 19:53:53.345 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52698 13 13937 1 2025-08-06 19:54:16.588 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 19:54:16.807 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 19:54:22.998 00:00:10.368 TCP 23.104.0.1:52670 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:54:53.586 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50624 10 6452 1 2025-08-06 19:55:23.410 00:00:10.365 TCP 23.104.0.1:44194 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:55:53.797 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49254 10 6452 1 2025-08-06 19:56:23.812 00:00:10.332 TCP 23.104.0.1:32898 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:56:53.973 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56938 10 6452 1 2025-08-06 19:53:07.294 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 19:57:24.180 00:00:10.363 TCP 23.104.0.1:39896 -> 1.101.0.1:3000 11 1507 1 2025-08-06 19:57:54.205 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36776 10 6452 1 2025-08-06 19:54:07.291 00:05:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 19:58:24.579 00:00:10.382 TCP 23.104.0.1:55830 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 499800, total packets: 1569, avg bps: 1108, avg pps: 0, avg bpp: 318 Time window: 2025-08-06 18:59:00 - 2025-08-06 19:59:08 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0020s Wall: 0.0041s flows/second: 39343.5 Runtime: 0.0042s