Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 02:58:57.590 00:00:10.372 TCP 23.104.0.1:50940 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:55:09.919 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 02:59:18.500 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-08-12 02:59:57.997 00:00:10.324 TCP 23.104.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:00:18.708 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:52068 10 6452 1 2025-08-12 03:00:58.356 00:00:10.364 TCP 23.104.0.1:57258 -> 1.101.0.1:3000 11 1507 1 2025-08-12 02:57:09.922 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 03:01:18.914 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47010 10 6452 1 2025-08-12 03:01:49.529 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 03:01:49.596 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 03:01:58.757 00:00:10.387 TCP 23.104.0.1:36568 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:02:19.128 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59902 10 6452 1 2025-08-12 03:02:59.182 00:00:10.362 TCP 23.104.0.1:33804 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:03:19.345 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37856 10 6452 1 2025-08-12 03:03:59.581 00:00:10.362 TCP 23.104.0.1:47252 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:04:19.561 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40498 10 6452 1 2025-08-12 03:01:09.920 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 03:04:59.995 00:00:10.369 TCP 23.104.0.1:47924 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:05:19.734 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54328 10 6452 1 2025-08-12 03:06:00.404 00:00:10.365 TCP 23.104.0.1:46968 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:06:19.945 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:45968 10 6452 1 2025-08-12 03:06:49.453 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 03:06:49.839 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 03:07:00.808 00:00:10.331 TCP 23.104.0.1:50520 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:03:09.924 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 03:07:20.144 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46260 10 6452 1 2025-08-12 03:08:01.188 00:00:10.364 TCP 23.104.0.1:59106 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:08:20.365 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60966 10 6452 1 2025-08-12 03:09:01.592 00:00:10.364 TCP 23.104.0.1:34906 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:09:20.582 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46010 10 6452 1 2025-08-12 03:10:02.002 00:00:10.361 TCP 23.104.0.1:47384 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:10:20.805 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41734 10 6452 1 2025-08-12 03:07:09.921 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 03:11:02.407 00:00:10.363 TCP 23.104.0.1:39822 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:11:20.974 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:54460 10 6452 1 2025-08-12 03:11:49.842 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 03:11:49.601 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 03:12:02.808 00:00:10.359 TCP 23.104.0.1:38818 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:12:21.233 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33792 10 6452 1 2025-08-12 03:09:09.924 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 03:13:03.206 00:00:10.367 TCP 23.104.0.1:40782 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:13:21.471 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56600 10 6452 1 2025-08-12 03:14:03.613 00:00:10.368 TCP 23.104.0.1:38940 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:14:21.680 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39268 10 6452 1 2025-08-12 03:15:04.019 00:00:10.357 TCP 23.104.0.1:60714 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:15:21.899 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58508 10 6452 1 2025-08-12 03:16:04.417 00:00:10.361 TCP 23.104.0.1:58540 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:16:22.120 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37352 10 6452 1 2025-08-12 03:16:49.726 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 03:16:49.959 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 03:13:09.923 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 03:17:04.818 00:00:10.366 TCP 23.104.0.1:34422 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:17:22.345 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55614 10 6452 1 2025-08-12 03:18:05.223 00:00:10.685 TCP 23.104.0.1:40722 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:18:22.561 00:00:10.345 TCP 1.101.0.1:3000 -> 22.102.0.1:57814 10 6452 1 2025-08-12 03:15:09.925 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 03:19:05.947 00:00:10.371 TCP 23.104.0.1:32892 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:19:22.945 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:49230 10 6452 1 2025-08-12 03:20:06.360 00:00:10.374 TCP 23.104.0.1:34480 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:20:23.206 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45082 10 6452 1 2025-08-12 03:21:06.771 00:00:10.371 TCP 23.104.0.1:39382 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:21:23.424 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60328 10 6452 1 2025-08-12 03:21:50.228 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 03:21:49.851 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 03:22:07.182 00:00:10.324 TCP 23.104.0.1:52104 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:22:23.597 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33436 10 6452 1 2025-08-12 03:19:09.924 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 03:23:07.546 00:00:10.326 TCP 23.104.0.1:49912 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:23:23.822 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43194 10 6452 1 2025-08-12 03:24:07.911 00:00:10.323 TCP 23.104.0.1:35530 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:24:24.069 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33596 10 6452 1 2025-08-12 03:21:09.927 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 03:25:08.278 00:00:10.325 TCP 23.104.0.1:45512 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:25:24.241 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36004 10 6452 1 2025-08-12 03:26:08.647 00:00:10.322 TCP 23.104.0.1:35988 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:26:24.457 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41850 10 6452 1 2025-08-12 03:26:50.180 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 03:26:49.940 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 03:27:09.011 00:00:10.363 TCP 23.104.0.1:58000 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:27:24.671 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46954 10 6452 1 2025-08-12 03:28:09.418 00:00:10.376 TCP 23.104.0.1:51590 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:28:24.887 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35234 10 6452 1 2025-08-12 03:25:09.924 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 03:29:09.832 00:00:10.395 TCP 23.104.0.1:40314 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:29:25.112 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52556 10 6452 1 2025-08-12 03:30:10.267 00:00:10.365 TCP 23.104.0.1:54524 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:30:25.334 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38146 10 6452 1 2025-08-12 03:27:09.931 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 03:31:10.671 00:00:10.359 TCP 23.104.0.1:56346 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:31:25.540 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33036 10 6452 1 2025-08-12 03:31:50.000 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 03:31:49.964 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 03:32:11.096 00:00:10.322 TCP 23.104.0.1:33120 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:32:25.760 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57828 10 6452 1 2025-08-12 03:33:11.458 00:00:10.365 TCP 23.104.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:33:25.928 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55786 10 6452 1 2025-08-12 03:34:11.864 00:00:10.370 TCP 23.104.0.1:59104 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:34:26.164 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52504 10 6452 1 2025-08-12 03:31:09.928 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 03:35:12.273 00:00:10.365 TCP 23.104.0.1:32958 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:35:26.384 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51938 10 6452 1 2025-08-12 03:36:12.677 00:00:10.380 TCP 23.104.0.1:52444 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:36:26.592 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48818 10 6452 1 2025-08-12 03:36:50.443 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 03:36:50.438 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 03:33:09.932 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 03:37:13.110 00:00:10.369 TCP 23.104.0.1:38332 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:37:26.805 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56450 10 6452 1 2025-08-12 03:38:13.520 00:00:10.366 TCP 23.104.0.1:46544 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:38:27.022 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33402 10 6452 1 2025-08-12 03:39:13.926 00:00:10.392 TCP 23.104.0.1:36418 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:39:27.237 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45554 10 6452 1 2025-08-12 03:40:14.362 00:00:10.327 TCP 23.104.0.1:49636 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:40:27.452 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43380 10 6452 1 2025-08-12 03:37:09.930 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 03:41:14.729 00:00:10.371 TCP 23.104.0.1:44194 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:41:27.625 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45766 10 6452 1 2025-08-12 03:41:50.348 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 03:41:50.177 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 03:42:15.140 00:00:10.321 TCP 23.104.0.1:42408 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:42:27.847 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:44160 10 6452 1 2025-08-12 03:39:09.933 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 03:43:15.500 00:00:10.366 TCP 23.104.0.1:60004 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:43:28.041 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39894 10 6452 1 2025-08-12 03:44:15.909 00:00:10.366 TCP 23.104.0.1:37714 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:44:28.224 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42652 10 6452 1 2025-08-12 03:45:16.312 00:00:10.368 TCP 23.104.0.1:34622 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:45:28.440 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60180 10 6452 1 2025-08-12 03:46:16.716 00:00:10.375 TCP 23.104.0.1:45878 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:46:28.662 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54006 10 6452 1 2025-08-12 03:46:50.344 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 03:46:50.324 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 03:43:09.931 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 03:47:17.131 00:00:10.362 TCP 23.104.0.1:40768 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:47:28.885 00:00:10.482 TCP 1.101.0.1:3000 -> 22.102.0.1:58374 10 6452 1 2025-08-12 03:48:17.533 00:00:10.422 TCP 23.104.0.1:43988 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:48:29.407 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41618 10 6452 1 2025-08-12 03:45:09.933 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 03:49:17.996 00:00:10.364 TCP 23.104.0.1:38498 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:49:29.583 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42284 10 6452 1 2025-08-12 03:50:18.400 00:00:10.368 TCP 23.104.0.1:55422 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:50:29.810 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38098 10 6452 1 2025-08-12 03:51:18.805 00:00:10.366 TCP 23.104.0.1:40982 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:51:29.992 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:37776 10 6452 1 2025-08-12 03:51:50.666 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 03:51:50.509 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 03:52:19.209 00:00:10.364 TCP 23.104.0.1:51430 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:52:30.244 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56088 10 6452 1 2025-08-12 03:49:09.932 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 03:53:19.611 00:00:10.321 TCP 23.104.0.1:41892 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:53:30.472 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53154 10 6452 1 2025-08-12 03:54:19.969 00:00:10.368 TCP 23.104.0.1:46798 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:54:30.697 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33330 10 6452 1 2025-08-12 03:51:09.936 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 03:55:20.375 00:00:10.361 TCP 23.104.0.1:47262 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:55:30.909 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58542 10 6452 1 2025-08-12 03:56:20.774 00:00:10.323 TCP 23.104.0.1:57932 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:56:31.129 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60310 10 6452 1 2025-08-12 03:56:50.875 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 03:56:50.830 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 03:57:21.136 00:00:10.364 TCP 23.104.0.1:33946 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:57:31.300 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41156 10 6452 1 2025-08-12 03:58:21.542 00:00:10.368 TCP 23.104.0.1:60064 -> 1.101.0.1:3000 11 1507 1 2025-08-12 03:58:31.520 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46526 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1045, avg pps: 0, avg bpp: 317 Time window: 2025-08-12 02:55:09 - 2025-08-12 03:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0009s Wall: 0.0029s flows/second: 57141.2 Runtime: 0.0029s