Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-07 01:58:51.268 00:00:10.366 TCP 23.104.0.1:40164 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:59:09.457 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49622 10 6452 1 2025-08-07 01:59:23.896 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 01:59:24.194 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 01:59:51.670 00:00:10.334 TCP 23.104.0.1:33624 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:00:09.634 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45916 10 6452 1 2025-08-07 02:00:52.053 00:00:10.359 TCP 23.104.0.1:41394 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:01:09.848 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45448 10 6452 1 2025-08-07 02:01:52.453 00:00:10.360 TCP 23.104.0.1:51490 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:02:10.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44428 10 6452 1 2025-08-07 02:02:52.855 00:00:10.384 TCP 23.104.0.1:50920 -> 1.101.0.1:3000 11 1507 1 2025-08-07 01:59:07.413 00:05:00.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 02:03:10.295 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44946 10 6452 1 2025-08-07 02:03:53.274 00:00:10.365 TCP 23.104.0.1:54118 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:00:07.410 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 02:04:10.464 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60632 10 6452 1 2025-08-07 02:04:24.197 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 02:04:24.086 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 02:04:53.678 00:00:10.373 TCP 23.104.0.1:45654 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:05:10.684 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39016 10 6452 1 2025-08-07 02:05:54.108 00:00:10.365 TCP 23.104.0.1:58972 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:06:10.896 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49556 10 6452 1 2025-08-07 02:06:54.513 00:00:10.319 TCP 23.104.0.1:49430 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:07:11.115 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59994 10 6452 1 2025-08-07 02:07:54.873 00:00:10.379 TCP 23.104.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:08:11.334 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56710 10 6452 1 2025-08-07 02:08:55.292 00:00:10.322 TCP 23.104.0.1:36500 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:05:07.415 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 02:09:24.313 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 02:09:11.544 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2025-08-07 02:09:24.284 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 02:09:55.666 00:00:10.323 TCP 23.104.0.1:48680 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:06:07.413 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 02:10:11.720 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60304 10 6452 1 2025-08-07 02:10:56.030 00:00:10.366 TCP 23.104.0.1:56980 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:11:11.939 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:59100 10 6452 1 2025-08-07 02:11:56.434 00:00:10.326 TCP 23.104.0.1:60108 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:12:12.178 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57508 10 6452 1 2025-08-07 02:12:56.795 00:00:10.373 TCP 23.104.0.1:47660 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:13:12.389 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43016 10 6452 1 2025-08-07 02:13:57.208 00:00:10.366 TCP 23.104.0.1:47028 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:14:12.605 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41936 10 6452 1 2025-08-07 02:14:24.286 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 02:14:24.390 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 02:11:07.415 00:05:00.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 02:14:57.620 00:00:10.325 TCP 23.104.0.1:59162 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:15:12.818 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60576 10 6452 1 2025-08-07 02:15:57.985 00:00:10.332 TCP 23.104.0.1:58280 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:12:07.412 00:05:00.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 02:16:13.005 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40322 10 6452 1 2025-08-07 02:16:58.360 00:00:10.365 TCP 23.104.0.1:47732 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:17:13.219 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58690 10 6452 1 2025-08-07 02:17:58.759 00:00:10.380 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:18:13.401 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54750 10 6452 1 2025-08-07 02:18:59.181 00:00:10.336 TCP 23.104.0.1:35760 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:19:24.362 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 02:19:13.620 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56596 10 6452 1 2025-08-07 02:19:24.534 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 02:19:59.551 00:00:10.367 TCP 23.104.0.1:33912 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:20:13.834 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41168 10 6452 1 2025-08-07 02:17:07.418 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 02:20:59.953 00:00:10.380 TCP 23.104.0.1:50888 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:21:14.075 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41302 10 6452 1 2025-08-07 02:22:00.369 00:00:10.368 TCP 23.104.0.1:38688 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:18:07.417 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 02:22:14.252 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47658 10 6452 1 2025-08-07 02:23:00.776 00:00:10.368 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:23:14.463 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55328 10 6452 1 2025-08-07 02:24:01.188 00:00:10.436 TCP 23.104.0.1:38918 -> 1.101.0.1:3000 15 1926 1 2025-08-07 02:24:14.637 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45844 12 10367 1 2025-08-07 02:24:24.465 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 02:24:24.355 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 02:25:01.667 00:00:10.344 TCP 23.104.0.1:55450 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:25:14.871 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45606 10 6452 1 2025-08-07 02:26:02.057 00:00:10.401 TCP 23.104.0.1:35026 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:26:15.108 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36178 10 6452 1 2025-08-07 02:23:07.422 00:05:00.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 02:27:02.471 00:00:10.331 TCP 23.104.0.1:57076 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:27:15.320 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55906 10 6452 1 2025-08-07 02:24:07.417 00:05:00.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 02:28:02.839 00:00:10.387 TCP 23.104.0.1:58174 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:28:15.529 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56410 10 6452 1 2025-08-07 02:29:03.268 00:00:10.362 TCP 23.104.0.1:47066 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:29:24.615 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 02:29:15.741 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49844 10 6452 1 2025-08-07 02:29:24.666 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 02:30:03.674 00:00:10.324 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:30:15.952 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47508 10 6452 1 2025-08-07 02:31:04.066 00:00:10.366 TCP 23.104.0.1:37726 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:31:16.176 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58064 10 6452 1 2025-08-07 02:32:04.487 00:00:10.369 TCP 23.104.0.1:40398 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:32:16.385 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35772 10 6452 1 2025-08-07 02:29:07.424 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 02:33:04.897 00:00:10.367 TCP 23.104.0.1:58798 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:33:16.557 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38104 10 6452 1 2025-08-07 02:30:07.421 00:05:00.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 02:34:05.311 00:00:10.363 TCP 23.104.0.1:53652 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:34:24.779 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 02:34:16.770 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56004 10 6452 1 2025-08-07 02:34:24.435 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 02:35:05.710 00:00:10.371 TCP 23.104.0.1:38502 -> 1.101.0.1:3000 12 1559 1 2025-08-07 02:35:16.934 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38772 10 6452 1 2025-08-07 02:36:06.114 00:00:10.366 TCP 23.104.0.1:54172 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:36:17.170 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33014 10 6452 1 2025-08-07 02:37:06.516 00:00:10.368 TCP 23.104.0.1:56296 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:37:17.397 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53870 10 6452 1 2025-08-07 02:38:06.921 00:00:10.392 TCP 23.104.0.1:38156 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:38:17.613 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54444 10 6452 1 2025-08-07 02:35:07.426 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 02:39:07.349 00:00:10.361 TCP 23.104.0.1:39174 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:39:25.130 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 02:39:25.070 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 02:39:17.818 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56868 10 6452 1 2025-08-07 02:36:07.425 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 02:40:07.748 00:00:10.385 TCP 23.104.0.1:53742 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:40:18.063 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:41204 10 6452 1 2025-08-07 02:41:08.173 00:00:10.322 TCP 23.104.0.1:43294 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:41:18.248 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:34854 10 6452 1 2025-08-07 02:42:08.538 00:00:10.365 TCP 23.104.0.1:53196 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:42:18.436 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38216 10 6452 1 2025-08-07 02:43:08.935 00:00:10.376 TCP 23.104.0.1:51140 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:43:18.606 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43264 10 6452 1 2025-08-07 02:44:09.353 00:00:10.359 TCP 23.104.0.1:57184 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:44:25.035 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 02:44:24.749 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 02:44:18.779 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46064 10 6452 1 2025-08-07 02:41:07.428 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 02:45:09.744 00:00:10.362 TCP 23.104.0.1:36522 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:45:18.993 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53260 10 6452 1 2025-08-07 02:42:07.427 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 02:46:10.146 00:00:10.366 TCP 23.104.0.1:56996 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:46:19.214 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53852 10 6452 1 2025-08-07 02:47:10.552 00:00:10.362 TCP 23.104.0.1:57104 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:47:19.387 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44662 10 6452 1 2025-08-07 02:48:10.955 00:00:10.371 TCP 23.104.0.1:60556 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:48:19.562 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60598 10 6452 1 2025-08-07 02:49:11.365 00:00:10.362 TCP 23.104.0.1:48740 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:49:24.933 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 02:49:25.037 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 02:49:19.738 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60778 10 6452 1 2025-08-07 02:50:11.768 00:00:10.367 TCP 23.104.0.1:47064 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:50:19.914 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52486 10 6452 1 2025-08-07 02:47:07.429 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 02:51:12.205 00:00:10.360 TCP 23.104.0.1:42162 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:51:20.126 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49902 10 6452 1 2025-08-07 02:48:07.427 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 02:52:12.608 00:00:10.359 TCP 23.104.0.1:37316 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:52:20.338 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38458 10 6452 1 2025-08-07 02:53:13.004 00:00:10.376 TCP 23.104.0.1:51072 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:53:20.551 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33386 10 6452 1 2025-08-07 02:54:25.173 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 02:54:13.419 00:00:10.372 TCP 23.104.0.1:36946 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:54:25.266 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 02:54:20.764 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56322 10 6452 1 2025-08-07 02:55:13.846 00:00:10.392 TCP 23.104.0.1:58850 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:55:20.979 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57808 10 6452 1 2025-08-07 02:56:14.283 00:00:10.370 TCP 23.104.0.1:38882 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:56:21.223 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50978 10 6452 1 2025-08-07 02:53:07.431 00:05:00.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 02:57:14.694 00:00:10.364 TCP 23.104.0.1:46720 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:57:21.432 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57940 10 6452 1 2025-08-07 02:54:07.429 00:05:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 02:58:15.101 00:00:10.369 TCP 23.104.0.1:36736 -> 1.101.0.1:3000 11 1507 1 2025-08-07 02:58:21.606 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58814 10 6452 1 Summary: total flows: 164, total bytes: 502734, total packets: 1579, avg bps: 1111, avg pps: 0, avg bpp: 318 Time window: 2025-08-07 01:58:51 - 2025-08-07 02:59:08 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0025s User: 0.0025s Wall: 0.0028s flows/second: 58303.6 Runtime: 0.0028s