Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 15:58:58.739 00:00:10.370 TCP 23.104.0.1:36310 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:59:38.781 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47676 10 6452 1 2025-08-12 15:59:59.150 00:00:10.367 TCP 23.104.0.1:54788 -> 1.101.0.1:3000 11 1507 1 2025-08-12 15:56:10.217 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 16:00:38.957 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36884 10 6452 1 2025-08-12 15:57:10.219 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 16:00:59.556 00:00:10.321 TCP 23.104.0.1:41744 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:01:39.189 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33428 10 6452 1 2025-08-12 16:02:05.423 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 16:02:05.498 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 16:01:59.918 00:00:10.349 TCP 23.104.0.1:44244 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:02:39.408 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40176 10 6452 1 2025-08-12 16:03:00.311 00:00:10.365 TCP 23.104.0.1:39676 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:03:39.615 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36038 10 6452 1 2025-08-12 16:04:00.720 00:00:10.315 TCP 23.104.0.1:41694 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:04:39.829 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:37970 12 10367 1 2025-08-12 16:05:01.109 00:00:10.497 TCP 23.104.0.1:44334 -> 1.101.0.1:3000 15 1926 1 2025-08-12 16:05:40.088 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59420 10 6452 1 2025-08-12 16:02:10.217 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 16:06:01.645 00:00:10.374 TCP 23.104.0.1:39064 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:06:40.284 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35510 10 6452 1 2025-08-12 16:07:05.341 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 16:07:05.079 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 16:03:10.220 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 16:07:02.099 00:00:10.370 TCP 23.104.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:07:40.498 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56356 10 6452 1 2025-08-12 16:08:02.512 00:00:10.363 TCP 23.104.0.1:39974 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:08:40.667 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48654 10 6452 1 2025-08-12 16:09:02.917 00:00:10.368 TCP 23.104.0.1:50306 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:09:40.875 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51798 10 6452 1 2025-08-12 16:10:03.339 00:00:10.366 TCP 23.104.0.1:45936 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:10:41.090 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51752 10 6452 1 2025-08-12 16:11:03.748 00:00:10.365 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:11:41.343 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50966 10 6452 1 2025-08-12 16:12:05.518 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 16:12:05.300 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 16:12:04.148 00:00:10.363 TCP 23.104.0.1:39082 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:08:10.218 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 16:12:41.561 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35666 10 6452 1 2025-08-12 16:09:10.222 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 16:13:04.552 00:00:10.321 TCP 23.104.0.1:47584 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:13:41.782 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36592 10 6452 1 2025-08-12 16:14:04.912 00:00:10.363 TCP 23.104.0.1:44914 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:14:41.992 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36322 10 6452 1 2025-08-12 16:15:05.313 00:00:10.367 TCP 23.104.0.1:42208 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:15:42.211 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44672 10 6452 1 2025-08-12 16:16:05.731 00:00:10.375 TCP 23.104.0.1:58654 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:16:42.427 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42458 10 6452 1 2025-08-12 16:17:05.650 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 16:17:05.384 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 16:17:06.141 00:00:10.360 TCP 23.104.0.1:40986 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:17:42.646 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35348 12 6556 1 2025-08-12 16:14:10.222 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 16:18:06.547 00:00:10.361 TCP 23.104.0.1:50210 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:18:42.861 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58682 10 6452 1 2025-08-12 16:15:10.225 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 16:19:06.949 00:00:10.367 TCP 23.104.0.1:43060 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:19:43.091 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40352 10 6452 1 2025-08-12 16:20:07.352 00:00:10.321 TCP 23.104.0.1:56190 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:20:43.302 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45204 10 6452 1 2025-08-12 16:21:07.711 00:00:10.319 TCP 23.104.0.1:55414 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:21:43.482 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33798 10 6452 1 2025-08-12 16:22:05.508 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 16:22:05.675 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 16:22:08.096 00:00:10.320 TCP 23.104.0.1:35090 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:22:43.693 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47878 10 6452 1 2025-08-12 16:23:08.459 00:00:10.365 TCP 23.104.0.1:41448 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:23:43.902 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42856 10 6452 1 2025-08-12 16:20:10.225 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 16:24:08.861 00:00:10.385 TCP 23.104.0.1:52742 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:24:44.118 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57236 10 6452 1 2025-08-12 16:21:10.227 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 16:25:09.290 00:00:10.362 TCP 23.104.0.1:55904 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:25:44.337 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40656 10 6452 1 2025-08-12 16:26:09.691 00:00:10.365 TCP 23.104.0.1:35314 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:26:44.562 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:40344 10 6452 1 2025-08-12 16:27:05.974 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 16:27:05.607 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 16:27:10.108 00:00:10.330 TCP 23.104.0.1:54518 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:27:44.811 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46422 10 6452 1 2025-08-12 16:28:10.476 00:00:10.362 TCP 23.104.0.1:45924 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:28:45.035 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34372 10 6452 1 2025-08-12 16:29:10.878 00:00:10.377 TCP 23.104.0.1:52884 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:29:45.253 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47730 10 6452 1 2025-08-12 16:26:10.225 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 16:30:11.298 00:00:10.365 TCP 23.104.0.1:44128 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:30:45.475 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40006 10 6452 1 2025-08-12 16:27:10.228 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 16:31:11.702 00:00:10.360 TCP 23.104.0.1:57758 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:31:45.696 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44026 10 6452 1 2025-08-12 16:32:05.771 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 16:32:06.003 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 16:32:12.106 00:00:10.363 TCP 23.104.0.1:40990 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:32:45.865 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42760 10 6452 1 2025-08-12 16:33:12.512 00:00:10.370 TCP 23.104.0.1:49430 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:33:46.088 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34404 10 6452 1 2025-08-12 16:34:12.925 00:00:10.376 TCP 23.104.0.1:32910 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:34:46.310 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38036 10 6452 1 2025-08-12 16:35:13.341 00:00:10.364 TCP 23.104.0.1:47186 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:35:46.518 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59938 10 6452 1 2025-08-12 16:32:10.228 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 16:36:13.749 00:00:10.398 TCP 23.104.0.1:41800 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:36:46.707 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54088 10 6452 1 2025-08-12 16:37:05.988 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 16:37:05.886 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 16:33:10.232 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 16:37:14.180 00:00:10.365 TCP 23.104.0.1:52768 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:37:46.887 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48442 10 6452 1 2025-08-12 16:38:14.582 00:00:10.369 TCP 23.104.0.1:47004 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:38:47.112 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:58264 11 6504 1 2025-08-12 16:39:14.988 00:00:13.827 TCP 23.104.0.1:46860 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:39:47.377 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48018 10 6452 1 2025-08-12 16:40:18.856 00:00:10.391 TCP 23.104.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:40:47.588 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60702 10 6452 1 2025-08-12 16:41:19.287 00:00:10.366 TCP 23.104.0.1:51658 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:41:47.807 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53318 10 6452 1 2025-08-12 16:42:06.289 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 16:42:05.909 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 16:38:10.231 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 16:42:19.691 00:00:10.368 TCP 23.104.0.1:33620 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:42:48.040 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47822 10 6452 1 2025-08-12 16:39:10.234 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 16:43:20.108 00:00:10.358 TCP 23.104.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:43:48.251 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47464 10 6452 1 2025-08-12 16:44:20.503 00:00:10.327 TCP 23.104.0.1:34814 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:44:48.463 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53878 10 6452 1 2025-08-12 16:45:20.865 00:00:10.364 TCP 23.104.0.1:59334 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:45:48.682 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56034 10 6452 1 2025-08-12 16:46:21.267 00:00:10.365 TCP 23.104.0.1:50202 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:46:48.851 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52950 10 6452 1 2025-08-12 16:47:06.214 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 16:47:05.874 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 16:47:21.669 00:00:10.321 TCP 23.104.0.1:42982 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:47:49.076 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41496 10 6452 1 2025-08-12 16:44:10.234 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 16:48:22.027 00:00:10.369 TCP 23.104.0.1:60118 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:48:49.290 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43838 10 6452 1 2025-08-12 16:45:10.236 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 16:49:22.439 00:00:10.366 TCP 23.104.0.1:36964 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:49:49.498 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44470 10 6452 1 2025-08-12 16:50:22.844 00:00:10.348 TCP 23.104.0.1:38026 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:50:49.706 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39768 10 6452 1 2025-08-12 16:51:23.227 00:00:10.367 TCP 23.104.0.1:59076 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:51:49.923 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42228 10 6452 1 2025-08-12 16:52:06.180 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 16:52:06.168 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 16:52:23.631 00:00:10.362 TCP 23.104.0.1:44750 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:52:50.135 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48140 10 6452 1 2025-08-12 16:53:24.029 00:00:10.324 TCP 23.104.0.1:51050 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:53:50.355 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36038 10 6452 1 2025-08-12 16:50:10.235 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 16:54:24.390 00:00:10.361 TCP 23.104.0.1:38088 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:54:50.545 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55202 10 6452 1 2025-08-12 16:51:10.238 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 16:55:24.795 00:00:10.365 TCP 23.104.0.1:41344 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:55:50.759 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55422 10 6452 1 2025-08-12 16:56:25.204 00:00:10.325 TCP 23.104.0.1:55298 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:56:50.973 00:00:10.378 TCP 1.101.0.1:3000 -> 22.102.0.1:56892 10 6452 1 2025-08-12 16:57:06.444 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 16:57:06.442 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 16:57:25.571 00:00:10.367 TCP 23.104.0.1:39312 -> 1.101.0.1:3000 11 1507 1 2025-08-12 16:57:51.389 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59954 10 6452 1 2025-08-12 16:58:25.978 00:00:10.448 TCP 23.104.0.1:48222 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496386, total packets: 1571, avg bps: 1060, avg pps: 0, avg bpp: 315 Time window: 2025-08-12 15:56:10 - 2025-08-12 16:58:36 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0011s User: 0.0032s Wall: 0.0025s flows/second: 65940.5 Runtime: 0.0025s