Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 13:59:00.937 00:00:10.382 TCP 23.104.0.1:58432 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:59:08.511 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44562 10 6452 1 2025-08-12 14:00:01.360 00:00:10.368 TCP 23.104.0.1:45160 -> 1.101.0.1:3000 11 1507 1 2025-08-12 13:56:10.175 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 14:00:08.735 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53258 10 6452 1 2025-08-12 13:56:10.178 00:06:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 14:01:01.758 00:00:10.335 TCP 23.104.0.1:45538 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:01:08.960 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54384 12 6556 1 2025-08-12 14:02:02.645 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 14:02:02.836 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 14:02:02.136 00:00:10.415 TCP 23.104.0.1:44986 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:02:09.199 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54074 10 6452 1 2025-08-12 14:03:02.588 00:00:10.363 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:03:09.414 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34428 10 6452 1 2025-08-12 14:04:02.993 00:00:11.081 TCP 23.104.0.1:57206 -> 1.101.0.1:3000 12 1559 1 2025-08-12 14:04:09.583 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43588 10 6452 1 2025-08-12 14:05:04.111 00:00:10.364 TCP 23.104.0.1:34158 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:05:09.797 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38776 10 6452 1 2025-08-12 14:02:10.179 00:05:00.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 14:06:04.510 00:00:10.365 TCP 23.104.0.1:52596 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:06:10.011 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49232 10 6452 1 2025-08-12 14:07:02.932 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 14:07:03.057 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 14:03:10.184 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 14:07:04.911 00:00:10.366 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:07:10.233 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35810 10 6452 1 2025-08-12 14:08:05.314 00:00:10.366 TCP 23.104.0.1:41396 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:08:10.439 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-08-12 14:09:05.716 00:00:10.388 TCP 23.104.0.1:50012 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:09:10.657 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54868 10 6452 1 2025-08-12 14:10:06.141 00:00:10.364 TCP 23.104.0.1:40472 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:10:10.882 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48002 10 6452 1 2025-08-12 14:11:06.542 00:00:10.364 TCP 23.104.0.1:54678 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:11:11.106 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54884 10 6452 1 2025-08-12 14:12:03.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 14:12:03.334 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 14:08:10.184 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 14:12:06.944 00:00:10.373 TCP 23.104.0.1:55212 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:12:11.276 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59340 10 6452 1 2025-08-12 14:09:10.186 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 14:13:07.359 00:00:10.371 TCP 23.104.0.1:33356 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:13:11.491 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51214 10 6452 1 2025-08-12 14:14:07.767 00:00:10.374 TCP 23.104.0.1:49358 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:14:11.697 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59246 10 6452 1 2025-08-12 14:15:08.176 00:00:10.371 TCP 23.104.0.1:53704 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:15:11.912 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43932 10 6452 1 2025-08-12 14:16:08.581 00:00:10.364 TCP 23.104.0.1:42070 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:16:12.121 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50848 10 6452 1 2025-08-12 14:17:03.068 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 14:17:03.206 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 14:17:08.984 00:00:18.635 TCP 23.104.0.1:33148 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:17:12.289 00:00:15.353 TCP 1.101.0.1:3000 -> 22.102.0.1:45902 10 6452 1 2025-08-12 14:14:10.185 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 14:18:17.663 00:00:10.380 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:18:17.679 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38972 10 6452 1 2025-08-12 14:15:10.188 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 14:19:18.106 00:00:10.322 TCP 23.104.0.1:40142 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:19:17.906 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56306 10 6452 1 2025-08-12 14:20:18.465 00:00:10.362 TCP 23.104.0.1:60336 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:20:18.126 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36000 10 6452 1 2025-08-12 14:21:18.871 00:00:10.365 TCP 23.104.0.1:33652 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:21:18.347 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59622 10 6452 1 2025-08-12 14:22:03.386 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 14:22:03.503 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 14:22:19.276 00:00:10.368 TCP 23.104.0.1:52756 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:22:18.558 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43972 10 6452 1 2025-08-12 14:23:19.681 00:00:10.366 TCP 23.104.0.1:49600 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:23:18.772 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33850 10 6452 1 2025-08-12 14:20:10.187 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 14:24:18.985 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39402 10 6452 1 2025-08-12 14:24:20.105 00:00:10.372 TCP 23.104.0.1:56474 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:21:10.190 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 14:25:19.209 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53422 10 6452 1 2025-08-12 14:25:20.511 00:00:10.366 TCP 23.104.0.1:60706 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:26:19.425 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36358 10 6452 1 2025-08-12 14:26:20.917 00:00:10.370 TCP 23.104.0.1:47830 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:27:03.317 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 14:27:03.038 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 14:27:21.322 00:00:10.379 TCP 23.104.0.1:43286 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:27:19.631 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37238 10 6452 1 2025-08-12 14:28:19.804 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6452 1 2025-08-12 14:28:21.738 00:00:10.365 TCP 23.104.0.1:40584 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:29:19.979 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:59894 10 6452 1 2025-08-12 14:29:22.138 00:00:10.362 TCP 23.104.0.1:46400 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:26:10.188 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 14:30:20.221 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:39706 12 10365 1 2025-08-12 14:30:22.539 00:00:10.463 TCP 23.104.0.1:38978 -> 1.101.0.1:3000 15 1926 1 2025-08-12 14:27:10.191 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 14:31:20.419 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44072 10 6452 1 2025-08-12 14:31:23.049 00:00:10.366 TCP 23.104.0.1:34834 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:32:03.506 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 14:32:03.352 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 14:32:20.646 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51614 10 6452 1 2025-08-12 14:32:23.453 00:00:10.359 TCP 23.104.0.1:43858 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:33:20.817 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43540 10 6452 1 2025-08-12 14:33:23.851 00:00:10.335 TCP 23.104.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:34:21.043 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39270 10 6452 1 2025-08-12 14:34:24.228 00:00:10.367 TCP 23.104.0.1:45176 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:35:21.212 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50360 10 6452 1 2025-08-12 14:35:24.638 00:00:10.327 TCP 23.104.0.1:51450 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:32:10.189 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 14:36:21.426 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59480 10 6452 1 2025-08-12 14:36:25.004 00:00:10.358 TCP 23.104.0.1:51412 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:37:03.669 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 14:37:03.453 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 14:33:10.192 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 14:37:21.638 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60264 10 6452 1 2025-08-12 14:37:25.399 00:00:10.366 TCP 23.104.0.1:50922 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:38:21.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60514 10 6452 1 2025-08-12 14:38:25.806 00:00:10.379 TCP 23.104.0.1:56212 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:39:22.055 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56054 10 6452 1 2025-08-12 14:39:26.224 00:00:10.365 TCP 23.104.0.1:33842 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:40:22.272 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42220 10 6452 1 2025-08-12 14:40:26.626 00:00:10.362 TCP 23.104.0.1:49452 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:41:22.497 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55814 10 6452 1 2025-08-12 14:41:27.028 00:00:10.365 TCP 23.104.0.1:57850 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:42:03.541 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 14:42:03.432 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 14:38:10.191 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 14:42:22.735 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33994 10 6452 1 2025-08-12 14:42:27.429 00:00:10.365 TCP 23.104.0.1:49120 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:39:10.194 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 14:43:22.952 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44176 12 6556 1 2025-08-12 14:43:27.836 00:00:10.387 TCP 23.104.0.1:39100 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:44:23.216 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46082 10 6452 1 2025-08-12 14:44:28.258 00:00:10.330 TCP 23.104.0.1:59536 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:45:23.428 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42238 10 6452 1 2025-08-12 14:45:28.635 00:00:10.362 TCP 23.104.0.1:42032 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:46:23.641 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34408 10 6452 1 2025-08-12 14:46:29.044 00:00:10.378 TCP 23.104.0.1:46146 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:47:04.345 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 14:47:04.280 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 14:47:23.862 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41472 10 6452 1 2025-08-12 14:47:29.463 00:00:10.365 TCP 23.104.0.1:51990 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:44:10.191 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 14:48:24.098 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57676 10 6452 1 2025-08-12 14:48:29.879 00:00:10.373 TCP 23.104.0.1:43658 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:45:10.194 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 14:49:24.281 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50598 10 6452 1 2025-08-12 14:49:30.295 00:00:10.325 TCP 23.104.0.1:44292 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:50:24.495 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38476 12 6556 1 2025-08-12 14:50:30.663 00:00:10.334 TCP 23.104.0.1:36474 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:51:24.708 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33702 10 6452 1 2025-08-12 14:51:31.053 00:00:10.326 TCP 23.104.0.1:35628 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:52:04.182 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 14:52:03.979 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 14:52:24.880 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33774 10 6452 1 2025-08-12 14:52:31.414 00:00:10.321 TCP 23.104.0.1:51284 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:53:25.108 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33524 10 6452 1 2025-08-12 14:53:31.777 00:00:10.365 TCP 23.104.0.1:40072 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:50:10.198 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 14:54:25.283 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38228 10 6452 1 2025-08-12 14:54:32.183 00:00:10.368 TCP 23.104.0.1:44808 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:51:10.200 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 14:55:25.496 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40774 12 6556 1 2025-08-12 14:55:32.591 00:00:10.362 TCP 23.104.0.1:58794 -> 1.101.0.1:3000 12 1559 1 2025-08-12 14:56:25.709 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45956 10 6452 1 2025-08-12 14:56:32.993 00:00:10.359 TCP 23.104.0.1:39488 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:57:03.934 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 14:57:03.786 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 14:57:25.882 00:00:10.338 TCP 1.101.0.1:3000 -> 22.102.0.1:41392 10 6452 1 2025-08-12 14:57:33.391 00:00:10.367 TCP 23.104.0.1:46336 -> 1.101.0.1:3000 11 1507 1 2025-08-12 14:58:26.254 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49192 10 6452 1 2025-08-12 14:58:33.798 00:00:10.342 TCP 23.104.0.1:37338 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 503323, total packets: 1590, avg bps: 1072, avg pps: 0, avg bpp: 316 Time window: 2025-08-12 13:56:10 - 2025-08-12 14:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0017s User: 0.0025s Wall: 0.0019s flows/second: 84618.8 Runtime: 0.0020s