Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 11:59:07.997 00:00:10.363 TCP 23.104.0.1:41178 -> 1.101.0.1:3000 11 1507 1 2025-08-12 11:59:29.548 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49136 10 6452 1 2025-08-12 12:00:08.402 00:00:10.362 TCP 23.104.0.1:59856 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:00:29.762 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53558 10 6452 1 2025-08-12 12:01:08.804 00:00:10.366 TCP 23.104.0.1:42108 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:01:29.934 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60026 10 6452 1 2025-08-12 12:02:00.404 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 12:02:00.475 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 11:57:10.134 00:06:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 12:02:09.208 00:00:10.366 TCP 23.104.0.1:59690 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:02:30.172 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48188 10 6452 1 2025-08-12 12:03:09.613 00:00:10.365 TCP 23.104.0.1:44368 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:03:30.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33270 10 6452 1 2025-08-12 11:59:10.133 00:06:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 12:04:10.019 00:00:10.367 TCP 23.104.0.1:60030 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:04:30.598 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43084 10 6452 1 2025-08-12 12:05:10.422 00:00:10.339 TCP 23.104.0.1:46580 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:05:30.811 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41194 10 6452 1 2025-08-12 12:06:10.794 00:00:10.348 TCP 23.104.0.1:43772 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:06:31.039 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59042 10 6452 1 2025-08-12 12:07:00.234 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 12:07:00.443 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 12:07:11.185 00:00:10.360 TCP 23.104.0.1:60808 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:07:31.255 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36506 10 6452 1 2025-08-12 12:08:11.587 00:00:10.363 TCP 23.104.0.1:33766 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:08:31.468 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46966 10 6452 1 2025-08-12 12:04:10.137 00:06:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 12:09:11.990 00:00:10.365 TCP 23.104.0.1:40714 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:09:31.688 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44036 10 6452 1 2025-08-12 12:10:12.395 00:00:10.438 TCP 23.104.0.1:38876 -> 1.101.0.1:3000 15 1926 1 2025-08-12 12:10:31.874 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39252 13 13939 1 2025-08-12 12:06:10.137 00:06:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 12:11:12.872 00:00:10.326 TCP 23.104.0.1:39486 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:11:32.092 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56070 10 6452 1 2025-08-12 12:12:00.856 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 12:12:00.606 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 12:12:13.234 00:00:10.364 TCP 23.104.0.1:34622 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:12:32.308 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56976 10 6452 1 2025-08-12 12:13:13.631 00:00:10.328 TCP 23.104.0.1:34224 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:13:32.485 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45060 10 6452 1 2025-08-12 12:14:13.998 00:00:10.369 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:14:32.702 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37286 10 6452 1 2025-08-12 12:15:14.408 00:00:10.367 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:15:32.924 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45696 10 6452 1 2025-08-12 12:11:10.140 00:06:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 12:16:14.814 00:00:10.369 TCP 23.104.0.1:38972 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:16:33.175 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51150 10 6452 1 2025-08-12 12:17:00.466 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 12:17:00.562 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 12:17:15.218 00:00:10.361 TCP 23.104.0.1:58640 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:17:33.388 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59758 10 6452 1 2025-08-12 12:13:10.137 00:06:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 12:18:15.616 00:00:10.364 TCP 23.104.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:18:33.553 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54400 10 6452 1 2025-08-12 12:19:16.022 00:00:10.321 TCP 23.104.0.1:39168 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:19:33.772 00:00:13.154 TCP 1.101.0.1:3000 -> 22.102.0.1:32924 10 6452 1 2025-08-12 12:20:16.387 00:00:10.365 TCP 23.104.0.1:54134 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:20:36.965 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35768 10 6452 1 2025-08-12 12:21:16.787 00:00:10.349 TCP 23.104.0.1:51390 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:21:37.188 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35130 10 6452 1 2025-08-12 12:22:00.945 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 12:22:00.878 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 12:22:17.171 00:00:10.366 TCP 23.104.0.1:43566 -> 1.101.0.1:3000 12 1559 1 2025-08-12 12:22:37.403 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43994 10 6452 1 2025-08-12 12:18:10.139 00:06:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 12:23:17.575 00:00:10.372 TCP 23.104.0.1:43234 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:23:37.569 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53712 10 6452 1 2025-08-12 12:24:17.985 00:00:10.378 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:24:37.786 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51010 10 6452 1 2025-08-12 12:20:10.142 00:06:00.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 12:25:18.407 00:00:10.370 TCP 23.104.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:25:37.963 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:55564 10 6452 1 2025-08-12 12:26:18.813 00:00:10.336 TCP 23.104.0.1:45914 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:26:38.210 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57610 10 6452 1 2025-08-12 12:27:00.796 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 12:27:00.868 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 12:27:19.190 00:00:10.370 TCP 23.104.0.1:59780 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:27:38.422 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58168 10 6452 1 2025-08-12 12:28:19.601 00:00:10.326 TCP 23.104.0.1:32918 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:28:38.597 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33368 10 6452 1 2025-08-12 12:29:19.971 00:00:13.075 TCP 23.104.0.1:40622 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:29:38.815 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36756 10 6452 1 2025-08-12 12:25:10.145 00:06:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 12:30:23.112 00:00:10.370 TCP 23.104.0.1:47664 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:30:39.063 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44154 10 6452 1 2025-08-12 12:31:23.512 00:00:10.365 TCP 23.104.0.1:33214 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:31:39.272 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58968 10 6452 1 2025-08-12 12:32:01.086 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 12:32:00.886 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 12:27:10.142 00:06:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 12:32:23.914 00:00:10.368 TCP 23.104.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:32:39.490 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51850 10 6452 1 2025-08-12 12:33:24.318 00:00:10.364 TCP 23.104.0.1:42714 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:33:39.708 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58628 10 6452 1 2025-08-12 12:34:24.718 00:00:10.384 TCP 23.104.0.1:59288 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:34:39.883 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49402 10 6452 1 2025-08-12 12:35:25.137 00:00:10.364 TCP 23.104.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:35:40.082 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47038 10 6452 1 2025-08-12 12:36:25.540 00:00:10.900 TCP 23.104.0.1:44588 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:36:40.298 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56224 10 6452 1 2025-08-12 12:37:01.193 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 12:37:01.155 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 12:32:10.147 00:06:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 12:37:26.479 00:00:10.361 TCP 23.104.0.1:55352 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:37:40.508 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36198 10 6452 1 2025-08-12 12:38:26.881 00:00:10.379 TCP 23.104.0.1:50114 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:38:40.726 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40338 10 6452 1 2025-08-12 12:34:10.144 00:06:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 12:39:27.298 00:00:10.371 TCP 23.104.0.1:57200 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:39:40.953 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:32872 13 6596 1 2025-08-12 12:40:27.708 00:00:10.367 TCP 23.104.0.1:45666 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:40:41.205 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35454 10 6452 1 2025-08-12 12:41:28.113 00:00:10.323 TCP 23.104.0.1:33238 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:41:41.419 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53448 10 6452 1 2025-08-12 12:42:01.050 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 12:42:01.357 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 12:42:28.469 00:00:10.366 TCP 23.104.0.1:39860 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:42:41.634 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38976 10 6452 1 2025-08-12 12:43:28.872 00:00:10.367 TCP 23.104.0.1:41570 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:43:41.850 00:00:18.241 TCP 1.101.0.1:3000 -> 22.102.0.1:42630 10 6452 1 2025-08-12 12:39:10.148 00:06:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 12:44:29.277 00:00:10.366 TCP 23.104.0.1:60752 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:44:50.142 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50532 10 6452 1 2025-08-12 12:45:29.681 00:00:10.368 TCP 23.104.0.1:51390 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:45:50.318 00:00:10.755 TCP 1.101.0.1:3000 -> 22.102.0.1:51394 10 6452 1 2025-08-12 12:41:10.146 00:06:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 12:46:30.108 00:00:10.369 TCP 23.104.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:47:01.490 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 12:46:51.110 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38918 10 6452 1 2025-08-12 12:47:01.325 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 12:47:30.510 00:00:10.368 TCP 23.104.0.1:46672 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:47:51.286 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53738 10 6452 1 2025-08-12 12:48:30.913 00:00:10.325 TCP 23.104.0.1:36050 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:48:51.511 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59876 12 6556 1 2025-08-12 12:49:31.282 00:00:10.369 TCP 23.104.0.1:43140 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:49:51.713 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42994 10 6452 1 2025-08-12 12:50:31.687 00:00:10.369 TCP 23.104.0.1:60752 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:50:51.926 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:50064 10 6452 1 2025-08-12 12:46:10.151 00:06:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 12:51:32.118 00:00:10.365 TCP 23.104.0.1:38504 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:52:01.399 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 12:52:01.361 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 12:51:52.170 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51898 10 6452 1 2025-08-12 12:52:32.523 00:00:10.362 TCP 23.104.0.1:33522 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:52:52.396 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58158 10 6452 1 2025-08-12 12:48:10.148 00:06:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 12:53:32.929 00:00:10.391 TCP 23.104.0.1:46194 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:53:52.564 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37850 10 6452 1 2025-08-12 12:54:33.358 00:00:10.895 TCP 23.104.0.1:41930 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:54:52.788 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58428 10 6452 1 2025-08-12 12:55:34.286 00:00:10.366 TCP 23.104.0.1:38974 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:55:52.972 00:00:11.820 TCP 1.101.0.1:3000 -> 22.102.0.1:59072 10 6452 1 2025-08-12 12:56:34.688 00:00:10.370 TCP 23.104.0.1:47488 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:57:01.534 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 12:57:01.620 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 12:56:54.830 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52234 10 6452 1 2025-08-12 12:57:35.102 00:00:10.364 TCP 23.104.0.1:37358 -> 1.101.0.1:3000 11 1507 1 2025-08-12 12:57:55.078 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54290 10 6452 1 2025-08-12 12:53:10.151 00:06:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 12:58:35.506 00:00:10.366 TCP 23.104.0.1:44140 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 499979, total packets: 1573, avg bps: 1074, avg pps: 0, avg bpp: 317 Time window: 2025-08-12 11:57:10 - 2025-08-12 12:59:10 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0016s User: 0.0025s Wall: 0.0023s flows/second: 68935.7 Runtime: 0.0023s