Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 19:58:54.460 00:00:10.363 TCP 23.104.0.1:56134 -> 1.101.0.1:3000 11 1507 1 2025-08-12 19:59:39.727 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54210 10 6452 1 2025-08-12 19:59:54.861 00:00:10.332 TCP 23.104.0.1:51274 -> 1.101.0.1:3000 11 1507 1 2025-08-12 19:56:10.298 00:05:00.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 20:00:39.940 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:59798 10 6452 1 2025-08-12 20:00:55.227 00:00:10.365 TCP 23.104.0.1:56464 -> 1.101.0.1:3000 11 1507 1 2025-08-12 19:57:10.301 00:05:00.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 20:01:40.186 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42108 10 6452 1 2025-08-12 20:01:55.625 00:00:10.375 TCP 23.104.0.1:45152 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:02:10.096 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 20:02:10.132 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 20:02:40.401 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48642 10 6452 1 2025-08-12 20:02:56.057 00:00:10.380 TCP 23.104.0.1:45042 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:03:40.581 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55582 10 6452 1 2025-08-12 20:03:56.469 00:00:10.363 TCP 23.104.0.1:40428 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:04:40.757 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33478 10 6452 1 2025-08-12 20:04:56.874 00:00:10.367 TCP 23.104.0.1:35012 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:05:40.970 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36370 10 6452 1 2025-08-12 20:05:57.298 00:00:10.370 TCP 23.104.0.1:56318 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:02:10.299 00:05:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 20:06:41.197 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36046 10 6452 1 2025-08-12 20:07:10.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 20:06:57.706 00:00:10.366 TCP 23.104.0.1:56452 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:07:09.862 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 20:03:10.304 00:05:00.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 20:07:41.413 00:00:10.384 TCP 1.101.0.1:3000 -> 22.102.0.1:37690 10 6452 1 2025-08-12 20:07:58.111 00:00:10.362 TCP 23.104.0.1:38934 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:08:41.837 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42060 10 6452 1 2025-08-12 20:08:58.515 00:00:10.367 TCP 23.104.0.1:56932 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:09:42.077 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33330 10 6452 1 2025-08-12 20:09:58.927 00:00:10.381 TCP 23.104.0.1:34816 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:10:42.291 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53946 10 6452 1 2025-08-12 20:10:59.346 00:00:10.365 TCP 23.104.0.1:34602 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:11:42.508 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45836 10 6452 1 2025-08-12 20:12:10.533 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 20:08:10.303 00:05:00.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 20:12:10.031 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 20:11:59.748 00:00:10.358 TCP 23.104.0.1:49172 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:12:42.716 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46808 10 6452 1 2025-08-12 20:13:00.141 00:00:10.371 TCP 23.104.0.1:60534 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:09:10.306 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 20:13:42.886 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57178 10 6452 1 2025-08-12 20:14:00.553 00:00:10.369 TCP 23.104.0.1:58324 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:14:43.113 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44432 10 6452 1 2025-08-12 20:15:00.966 00:00:10.368 TCP 23.104.0.1:53032 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:15:43.343 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34772 10 6452 1 2025-08-12 20:16:01.374 00:00:10.366 TCP 23.104.0.1:46106 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:16:43.513 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47440 10 6452 1 2025-08-12 20:17:10.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 20:17:10.386 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 20:17:01.775 00:00:10.368 TCP 23.104.0.1:55064 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:17:43.726 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59454 10 6452 1 2025-08-12 20:14:10.304 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 20:18:02.179 00:00:10.333 TCP 23.104.0.1:44018 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:18:43.938 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:58758 10 6452 1 2025-08-12 20:15:10.307 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 20:19:02.548 00:00:10.394 TCP 23.104.0.1:39178 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:19:44.184 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:46388 10 6452 1 2025-08-12 20:20:02.952 00:00:10.368 TCP 23.104.0.1:45182 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:20:44.352 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38858 10 6452 1 2025-08-12 20:21:03.359 00:00:10.323 TCP 23.104.0.1:33264 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:21:44.565 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-08-12 20:22:10.403 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 20:22:10.409 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 20:22:03.721 00:00:10.364 TCP 23.104.0.1:33414 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:22:44.786 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55458 10 6452 1 2025-08-12 20:23:04.124 00:00:10.365 TCP 23.104.0.1:45460 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:23:45.001 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46266 10 6452 1 2025-08-12 20:20:10.308 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 20:24:04.531 00:00:10.375 TCP 23.104.0.1:34566 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:24:45.219 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60436 10 6452 1 2025-08-12 20:21:10.309 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 20:25:04.952 00:00:10.332 TCP 23.104.0.1:36096 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:25:45.390 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40864 10 6452 1 2025-08-12 20:26:05.325 00:00:10.367 TCP 23.104.0.1:37160 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:26:45.605 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34682 10 6452 1 2025-08-12 20:27:10.560 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 20:27:10.517 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 20:27:05.731 00:00:10.369 TCP 23.104.0.1:32882 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:27:45.776 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34032 10 6452 1 2025-08-12 20:28:06.137 00:00:10.364 TCP 23.104.0.1:42144 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:28:45.947 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41238 10 6452 1 2025-08-12 20:29:06.539 00:00:10.364 TCP 23.104.0.1:51170 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:29:46.176 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39258 10 6452 1 2025-08-12 20:26:10.308 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 20:30:06.944 00:00:10.381 TCP 23.104.0.1:59472 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:30:46.351 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50826 10 6452 1 2025-08-12 20:27:10.311 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 20:31:07.369 00:00:10.365 TCP 23.104.0.1:41194 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:31:46.526 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49546 10 6452 1 2025-08-12 20:32:10.881 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 20:32:11.061 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 20:32:07.778 00:00:10.368 TCP 23.104.0.1:55336 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:32:46.746 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42580 10 6452 1 2025-08-12 20:33:08.184 00:00:10.326 TCP 23.104.0.1:54526 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:33:46.956 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:47492 10 6452 1 2025-08-12 20:34:08.550 00:00:10.365 TCP 23.104.0.1:50590 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:34:47.152 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51050 10 6452 1 2025-08-12 20:35:08.950 00:00:10.369 TCP 23.104.0.1:41628 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:35:47.369 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37106 10 6452 1 2025-08-12 20:32:10.309 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 20:36:09.357 00:00:10.361 TCP 23.104.0.1:51138 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:36:47.581 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50702 10 6452 1 2025-08-12 20:37:10.871 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 20:37:10.760 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 20:33:10.313 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 20:37:09.757 00:00:10.373 TCP 23.104.0.1:52940 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:37:47.750 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:43038 10 6452 1 2025-08-12 20:38:10.170 00:00:10.365 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:38:47.915 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:58536 10 6452 1 2025-08-12 20:39:10.571 00:00:10.368 TCP 23.104.0.1:43462 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:39:48.105 00:00:10.265 TCP 1.101.0.1:3000 -> 22.102.0.1:36312 10 6452 1 2025-08-12 20:40:10.976 00:00:10.325 TCP 23.104.0.1:51108 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:40:48.406 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48194 10 6452 1 2025-08-12 20:41:11.336 00:00:10.365 TCP 23.104.0.1:34392 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:41:48.580 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:43828 10 6452 1 2025-08-12 20:42:10.785 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 20:38:10.310 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 20:42:10.934 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 20:42:11.739 00:00:10.367 TCP 23.104.0.1:50802 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:42:48.764 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50446 10 6452 1 2025-08-12 20:39:10.312 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 20:43:12.147 00:00:10.363 TCP 23.104.0.1:53802 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:43:48.973 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47196 10 6452 1 2025-08-12 20:44:12.549 00:00:10.362 TCP 23.104.0.1:55042 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:44:49.204 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60636 10 6452 1 2025-08-12 20:45:12.950 00:00:10.365 TCP 23.104.0.1:39196 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:45:49.420 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35476 10 6452 1 2025-08-12 20:46:13.354 00:00:10.322 TCP 23.104.0.1:37784 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:46:49.637 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49374 10 6452 1 2025-08-12 20:47:11.177 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 20:47:10.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 20:47:13.712 00:00:10.377 TCP 23.104.0.1:60718 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:47:49.849 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47368 10 6452 1 2025-08-12 20:44:10.311 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 20:48:14.132 00:00:10.367 TCP 23.104.0.1:51240 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:48:50.038 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35410 10 6452 1 2025-08-12 20:45:10.314 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 20:49:14.536 00:00:10.359 TCP 23.104.0.1:45536 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:49:50.250 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43356 10 6452 1 2025-08-12 20:50:14.936 00:00:10.374 TCP 23.104.0.1:39884 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:50:50.460 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55910 10 6452 1 2025-08-12 20:51:15.351 00:00:10.368 TCP 23.104.0.1:39196 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:51:50.676 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45110 10 6452 1 2025-08-12 20:52:11.178 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 20:52:11.022 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 20:52:15.764 00:00:10.379 TCP 23.104.0.1:41344 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:52:50.896 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47742 10 6452 1 2025-08-12 20:53:16.181 00:00:10.373 TCP 23.104.0.1:54016 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:53:51.123 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50826 10 6452 1 2025-08-12 20:50:10.313 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 20:54:16.586 00:00:10.322 TCP 23.104.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:54:51.300 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49342 10 6452 1 2025-08-12 20:51:10.319 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 20:55:16.947 00:00:10.365 TCP 23.104.0.1:57166 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:55:51.516 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50304 10 6452 1 2025-08-12 20:56:17.353 00:00:10.364 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:56:51.741 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60480 10 6452 1 2025-08-12 20:57:11.356 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 20:57:11.294 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 20:57:17.757 00:00:10.381 TCP 23.104.0.1:58018 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:57:51.917 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44306 10 6452 1 2025-08-12 20:58:18.173 00:00:10.363 TCP 23.104.0.1:58756 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 491896, total packets: 1562, avg bps: 1052, avg pps: 0, avg bpp: 314 Time window: 2025-08-12 19:56:10 - 2025-08-12 20:58:28 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0027s User: 0.0013s Wall: 0.0023s flows/second: 69655.8 Runtime: 0.0024s