Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-07 18:58:46.590 00:00:10.365 TCP 23.104.0.1:49324 -> 1.101.0.1:3000 11 1507 1 2025-08-07 18:58:52.884 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59084 10 6452 1 2025-08-07 18:59:44.651 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 18:59:44.424 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 18:59:46.992 00:00:10.370 TCP 23.104.0.1:49492 -> 1.101.0.1:3000 11 1507 1 2025-08-07 18:59:53.107 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49596 10 6452 1 2025-08-07 19:00:47.399 00:00:10.360 TCP 23.104.0.1:33442 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:00:53.318 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48574 10 6452 1 2025-08-07 19:01:47.796 00:00:10.340 TCP 23.104.0.1:40254 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:01:53.551 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 10 6452 1 2025-08-07 19:02:48.176 00:00:10.363 TCP 23.104.0.1:40158 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:02:53.762 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58140 10 6452 1 2025-08-07 18:59:07.745 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 19:03:48.578 00:00:10.441 TCP 23.104.0.1:43408 -> 1.101.0.1:3000 15 1926 1 2025-08-07 19:03:53.974 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:59388 12 10367 1 2025-08-07 19:00:07.742 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 19:04:44.550 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 19:04:44.607 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 19:04:49.071 00:00:10.375 TCP 23.104.0.1:55512 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:04:54.223 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57556 10 6452 1 2025-08-07 19:05:49.486 00:00:10.365 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:05:54.433 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35266 12 6556 1 2025-08-07 19:06:49.891 00:00:10.331 TCP 23.104.0.1:47738 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:06:54.644 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54506 10 6452 1 2025-08-07 19:07:50.263 00:00:10.330 TCP 23.104.0.1:43856 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:07:54.854 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46102 10 6452 1 2025-08-07 19:08:50.634 00:00:10.365 TCP 23.104.0.1:46378 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:08:55.094 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44380 10 6452 1 2025-08-07 19:05:07.748 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 19:09:44.578 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 19:09:44.688 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 19:09:51.068 00:00:10.366 TCP 23.104.0.1:33110 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:09:55.307 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6452 1 2025-08-07 19:06:07.746 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 19:10:51.470 00:00:10.323 TCP 23.104.0.1:48284 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:10:55.516 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34134 10 6452 1 2025-08-07 19:11:55.729 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 10 6452 1 2025-08-07 19:11:51.836 00:00:10.396 TCP 23.104.0.1:45302 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:12:55.940 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37276 10 6452 1 2025-08-07 19:12:52.272 00:00:10.361 TCP 23.104.0.1:42276 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:13:52.678 00:00:10.371 TCP 23.104.0.1:33728 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:13:56.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37342 10 6452 1 2025-08-07 19:14:44.698 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 19:14:44.702 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 19:14:53.099 00:00:10.322 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:14:56.390 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47612 10 6452 1 2025-08-07 19:11:07.751 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 19:15:53.461 00:00:10.365 TCP 23.104.0.1:47606 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:15:56.604 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52388 10 6452 1 2025-08-07 19:12:07.748 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 19:16:53.862 00:00:10.367 TCP 23.104.0.1:35870 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:16:56.835 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37928 10 6452 1 2025-08-07 19:17:54.271 00:00:10.368 TCP 23.104.0.1:37102 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:17:57.078 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49204 10 6452 1 2025-08-07 19:18:54.680 00:00:10.365 TCP 23.104.0.1:55586 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:18:57.245 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36818 10 6452 1 2025-08-07 19:19:44.902 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 19:19:44.901 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 19:19:55.099 00:00:10.376 TCP 23.104.0.1:54328 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:19:57.457 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51406 10 6452 1 2025-08-07 19:20:55.516 00:00:10.366 TCP 23.104.0.1:50636 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:17:07.752 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 19:20:57.648 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40166 10 6452 1 2025-08-07 19:21:55.917 00:00:10.379 TCP 23.104.0.1:54600 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:21:57.874 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38108 10 6452 1 2025-08-07 19:18:07.751 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 19:22:56.332 00:00:10.373 TCP 23.104.0.1:58494 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:22:58.073 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44632 10 6452 1 2025-08-07 19:23:56.750 00:00:10.390 TCP 23.104.0.1:44380 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:23:58.293 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54662 10 6452 1 2025-08-07 19:24:45.420 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 19:24:45.264 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 19:24:57.179 00:00:10.364 TCP 23.104.0.1:48062 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:24:58.513 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55064 10 6452 1 2025-08-07 19:25:58.689 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58688 10 6452 1 2025-08-07 19:25:57.582 00:00:10.324 TCP 23.104.0.1:55372 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:26:58.906 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:36452 10 6452 1 2025-08-07 19:23:07.755 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 19:26:57.944 00:00:10.333 TCP 23.104.0.1:48892 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:24:07.753 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 19:27:59.089 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58038 10 6452 1 2025-08-07 19:27:58.310 00:00:10.375 TCP 23.104.0.1:57508 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:28:59.303 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56728 10 6452 1 2025-08-07 19:28:58.716 00:00:10.370 TCP 23.104.0.1:51106 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:29:45.181 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 19:29:45.011 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 19:29:59.520 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50158 10 6452 1 2025-08-07 19:29:59.128 00:00:10.325 TCP 23.104.0.1:34398 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:30:59.737 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33154 10 6452 1 2025-08-07 19:30:59.491 00:00:10.367 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:31:59.895 00:00:10.367 TCP 23.104.0.1:37028 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:31:59.947 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:42276 10 6452 1 2025-08-07 19:33:00.140 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56732 10 6452 1 2025-08-07 19:33:00.302 00:00:10.368 TCP 23.104.0.1:41750 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:29:07.757 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 19:30:07.755 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 19:34:00.351 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56386 10 6452 1 2025-08-07 19:34:00.707 00:00:10.337 TCP 23.104.0.1:34708 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:34:45.184 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 19:34:45.357 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 19:35:01.106 00:00:10.325 TCP 23.104.0.1:46422 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:35:00.574 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35188 10 6452 1 2025-08-07 19:36:00.788 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41230 10 6452 1 2025-08-07 19:36:01.475 00:00:10.364 TCP 23.104.0.1:43286 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:37:01.000 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:47286 10 6452 1 2025-08-07 19:37:01.872 00:00:10.366 TCP 23.104.0.1:41474 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:38:01.184 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46012 10 6452 1 2025-08-07 19:38:02.278 00:00:10.321 TCP 23.104.0.1:45278 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:35:07.760 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 19:39:01.398 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39518 10 6452 1 2025-08-07 19:39:02.647 00:00:10.372 TCP 23.104.0.1:38272 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:39:45.397 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 19:39:45.258 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 19:40:01.614 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54626 10 6452 1 2025-08-07 19:36:07.757 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 19:40:03.066 00:00:10.367 TCP 23.104.0.1:50062 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:41:01.796 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37114 10 6452 1 2025-08-07 19:41:03.471 00:00:10.364 TCP 23.104.0.1:41596 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:42:02.008 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49694 10 6452 1 2025-08-07 19:42:03.872 00:00:10.362 TCP 23.104.0.1:43136 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:43:02.229 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55768 10 6452 1 2025-08-07 19:43:04.276 00:00:10.328 TCP 23.104.0.1:60296 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:44:04.636 00:00:10.366 TCP 23.104.0.1:43946 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:44:02.449 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46794 10 6452 1 2025-08-07 19:44:45.383 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 19:44:45.037 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 19:41:07.761 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 19:45:05.046 00:00:10.367 TCP 23.104.0.1:49396 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:45:02.664 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49888 10 6452 1 2025-08-07 19:42:07.759 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 19:46:05.453 00:00:10.323 TCP 23.104.0.1:58352 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:46:02.834 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33048 10 6452 1 2025-08-07 19:47:03.076 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46018 10 6452 1 2025-08-07 19:47:05.811 00:00:10.362 TCP 23.104.0.1:34448 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:48:03.290 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35952 10 6452 1 2025-08-07 19:48:06.217 00:00:10.367 TCP 23.104.0.1:53664 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:49:03.528 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45966 10 6452 1 2025-08-07 19:49:06.622 00:00:10.362 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:49:45.542 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 19:49:45.489 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 19:50:03.742 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47202 10 6452 1 2025-08-07 19:50:07.022 00:00:10.359 TCP 23.104.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:47:07.764 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 19:51:03.957 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:41756 12 6556 1 2025-08-07 19:51:07.420 00:00:10.362 TCP 23.104.0.1:33328 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:48:07.762 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 19:52:04.194 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49050 10 6452 1 2025-08-07 19:52:07.829 00:00:10.386 TCP 23.104.0.1:60984 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:53:04.405 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49070 10 6452 1 2025-08-07 19:53:08.254 00:00:10.365 TCP 23.104.0.1:34480 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:54:04.628 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36396 10 6452 1 2025-08-07 19:54:08.661 00:00:10.367 TCP 23.104.0.1:36956 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:54:45.711 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 19:54:45.602 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 19:55:04.843 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49422 10 6452 1 2025-08-07 19:55:09.090 00:00:10.364 TCP 23.104.0.1:41126 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:56:05.085 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51542 10 6452 1 2025-08-07 19:56:09.495 00:00:10.366 TCP 23.104.0.1:48702 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:53:07.768 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 19:57:05.261 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36672 10 6452 1 2025-08-07 19:57:09.900 00:00:10.379 TCP 23.104.0.1:43104 -> 1.101.0.1:3000 11 1507 1 2025-08-07 19:54:07.766 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 19:58:05.479 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39154 10 6452 1 2025-08-07 19:58:10.304 00:00:10.417 TCP 23.104.0.1:57612 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502890, total packets: 1582, avg bps: 1110, avg pps: 0, avg bpp: 317 Time window: 2025-08-07 18:58:46 - 2025-08-07 19:59:08 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0009s Wall: 0.0020s flows/second: 82666.2 Runtime: 0.0020s