Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 08:59:11.320 00:00:10.367 TCP 23.104.0.1:47582 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:59:33.460 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-08-13 08:56:10.617 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 09:00:11.725 00:00:10.377 TCP 23.104.0.1:36120 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:00:33.682 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47820 10 6452 1 2025-08-13 08:57:10.621 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 09:01:12.136 00:00:10.378 TCP 23.104.0.1:32792 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:01:33.853 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57822 10 6452 1 2025-08-13 09:02:12.553 00:00:10.361 TCP 23.104.0.1:39152 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:02:25.563 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 09:02:25.354 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 09:02:34.085 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33044 10 6452 1 2025-08-13 09:03:12.954 00:00:10.330 TCP 23.104.0.1:33326 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:03:34.298 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47862 10 6452 1 2025-08-13 09:04:13.325 00:00:10.363 TCP 23.104.0.1:59190 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:04:34.513 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47928 10 6452 1 2025-08-13 09:05:13.729 00:00:10.448 TCP 23.104.0.1:54014 -> 1.101.0.1:3000 15 1926 1 2025-08-13 09:05:34.728 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:54504 12 10365 1 2025-08-13 09:02:10.622 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 09:06:14.215 00:00:10.372 TCP 23.104.0.1:46770 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:06:34.978 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:60064 10 6452 1 2025-08-13 09:03:10.622 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 09:07:25.902 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 09:07:14.623 00:00:10.370 TCP 23.104.0.1:42368 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:07:25.947 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 09:07:35.221 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58814 10 6452 1 2025-08-13 09:08:15.030 00:00:10.421 TCP 23.104.0.1:52932 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:08:35.435 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56034 10 6452 1 2025-08-13 09:09:15.494 00:00:10.366 TCP 23.104.0.1:46456 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:09:35.649 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50568 10 6452 1 2025-08-13 09:10:15.907 00:00:10.367 TCP 23.104.0.1:56498 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:10:35.867 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57296 10 6452 1 2025-08-13 09:11:16.313 00:00:10.361 TCP 23.104.0.1:54050 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:11:36.093 00:00:10.329 TCP 1.101.0.1:3000 -> 22.102.0.1:58850 10 6452 1 2025-08-13 09:08:10.622 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 09:12:25.765 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 09:12:26.207 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 09:12:16.716 00:00:10.330 TCP 23.104.0.1:47736 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:12:36.466 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41618 10 6452 1 2025-08-13 09:09:10.626 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 09:13:17.107 00:00:10.361 TCP 23.104.0.1:41932 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:13:36.683 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35362 10 6452 1 2025-08-13 09:14:17.511 00:00:10.370 TCP 23.104.0.1:59954 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:14:36.853 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54482 10 6452 1 2025-08-13 09:15:17.920 00:00:10.327 TCP 23.104.0.1:57592 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:15:37.081 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60518 10 6452 1 2025-08-13 09:16:18.283 00:00:10.365 TCP 23.104.0.1:45692 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:16:37.287 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44190 10 6452 1 2025-08-13 09:17:25.923 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 09:17:25.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 09:17:18.684 00:00:10.359 TCP 23.104.0.1:40336 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:17:37.465 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:42682 10 6452 1 2025-08-13 09:14:10.626 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 09:18:19.099 00:00:10.362 TCP 23.104.0.1:51626 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:18:37.632 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34318 10 6452 1 2025-08-13 09:15:10.629 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 09:19:19.503 00:00:10.329 TCP 23.104.0.1:54886 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:19:37.847 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53438 10 6452 1 2025-08-13 09:20:19.866 00:00:10.372 TCP 23.104.0.1:53924 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:20:38.078 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41292 10 6452 1 2025-08-13 09:21:20.276 00:00:10.367 TCP 23.104.0.1:48626 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:21:38.294 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38564 10 6452 1 2025-08-13 09:22:25.872 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 09:22:26.050 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 09:22:20.680 00:00:10.364 TCP 23.104.0.1:40362 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:22:38.527 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51842 10 6452 1 2025-08-13 09:23:21.107 00:00:10.367 TCP 23.104.0.1:53826 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:23:38.746 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54362 10 6452 1 2025-08-13 09:20:10.628 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 09:24:21.510 00:00:10.326 TCP 23.104.0.1:33604 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:24:38.969 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45684 10 6452 1 2025-08-13 09:21:10.631 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 09:25:21.872 00:00:10.367 TCP 23.104.0.1:55694 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:25:39.192 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55622 10 6452 1 2025-08-13 09:26:22.278 00:00:10.369 TCP 23.104.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:26:39.408 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-08-13 09:27:26.028 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 09:27:26.243 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 09:27:22.682 00:00:10.369 TCP 23.104.0.1:33386 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:27:39.642 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36672 10 6452 1 2025-08-13 09:28:23.105 00:00:10.363 TCP 23.104.0.1:51026 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:28:39.865 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53352 10 6452 1 2025-08-13 09:29:23.507 00:00:10.323 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:29:40.093 00:00:10.855 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 10 6452 1 2025-08-13 09:26:10.628 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 09:30:23.868 00:00:10.426 TCP 23.104.0.1:54954 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:30:40.990 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52178 10 6452 1 2025-08-13 09:27:10.631 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 09:31:24.334 00:00:10.364 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:31:41.208 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41108 10 6452 1 2025-08-13 09:32:26.295 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 09:32:26.371 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 09:32:24.733 00:00:10.366 TCP 23.104.0.1:60500 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:32:41.424 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57198 10 6452 1 2025-08-13 09:33:25.143 00:00:10.366 TCP 23.104.0.1:41228 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:33:41.589 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42378 10 6452 1 2025-08-13 09:34:25.544 00:00:10.374 TCP 23.104.0.1:37090 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:34:41.803 00:00:10.336 TCP 1.101.0.1:3000 -> 22.102.0.1:48072 10 6452 1 2025-08-13 09:35:25.956 00:00:10.320 TCP 23.104.0.1:43178 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:35:42.180 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41584 10 6452 1 2025-08-13 09:32:10.629 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 09:36:26.326 00:00:10.365 TCP 23.104.0.1:60420 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:36:42.395 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42912 10 6452 1 2025-08-13 09:33:10.632 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 09:37:26.417 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 09:37:26.336 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 09:37:26.734 00:00:10.719 TCP 23.104.0.1:50292 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:37:42.621 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54072 10 6452 1 2025-08-13 09:38:27.496 00:00:10.325 TCP 23.104.0.1:43762 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:38:42.836 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52940 10 6452 1 2025-08-13 09:39:27.857 00:00:10.374 TCP 23.104.0.1:34156 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:39:43.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37004 10 6452 1 2025-08-13 09:40:28.272 00:00:10.367 TCP 23.104.0.1:56016 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:40:43.301 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48638 10 6452 1 2025-08-13 09:41:28.682 00:00:10.374 TCP 23.104.0.1:55120 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:41:43.510 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42620 10 6452 1 2025-08-13 09:38:10.631 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 09:42:26.441 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 09:42:26.538 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 09:42:29.105 00:00:10.369 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:42:43.723 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47852 10 6452 1 2025-08-13 09:39:10.634 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 09:43:29.510 00:00:10.324 TCP 23.104.0.1:33746 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:43:43.941 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34938 10 6452 1 2025-08-13 09:44:29.878 00:00:10.381 TCP 23.104.0.1:39886 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:44:44.178 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51458 10 6452 1 2025-08-13 09:45:30.303 00:00:10.369 TCP 23.104.0.1:42980 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:45:44.352 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48192 10 6452 1 2025-08-13 09:46:30.708 00:00:10.367 TCP 23.104.0.1:43238 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:46:44.565 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52664 10 6452 1 2025-08-13 09:47:26.731 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 09:47:26.622 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 09:47:31.120 00:00:10.330 TCP 23.104.0.1:57506 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:47:44.784 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54112 10 6452 1 2025-08-13 09:44:10.633 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 09:48:31.487 00:00:10.366 TCP 23.104.0.1:37248 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:48:44.997 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34518 10 6452 1 2025-08-13 09:45:10.636 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 09:49:31.891 00:00:10.378 TCP 23.104.0.1:50872 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:49:45.219 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43282 10 6452 1 2025-08-13 09:50:32.309 00:00:10.324 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:50:45.429 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33788 10 6452 1 2025-08-13 09:51:32.674 00:00:10.330 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:51:45.638 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39356 10 6452 1 2025-08-13 09:52:26.641 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 09:52:26.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 09:52:33.054 00:00:10.361 TCP 23.104.0.1:39090 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:52:45.848 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43642 10 6452 1 2025-08-13 09:53:33.456 00:00:10.370 TCP 23.104.0.1:40736 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:53:46.081 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50110 10 6452 1 2025-08-13 09:50:10.635 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 09:54:33.872 00:00:10.367 TCP 23.104.0.1:56484 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:54:46.301 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55424 12 10367 1 2025-08-13 09:51:10.640 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 09:55:34.278 00:00:10.443 TCP 23.104.0.1:41932 -> 1.101.0.1:3000 15 1926 1 2025-08-13 09:55:46.547 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50650 10 6452 1 2025-08-13 09:56:34.759 00:00:10.390 TCP 23.104.0.1:50956 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:56:46.763 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37030 10 6452 1 2025-08-13 09:57:26.864 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 09:57:26.736 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 09:57:35.184 00:00:10.369 TCP 23.104.0.1:49238 -> 1.101.0.1:3000 11 1507 1 2025-08-13 09:57:46.939 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55372 10 6452 1 2025-08-13 09:58:35.590 00:00:10.372 TCP 23.104.0.1:47518 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500562, total packets: 1574, avg bps: 1066, avg pps: 0, avg bpp: 318 Time window: 2025-08-13 08:56:10 - 2025-08-13 09:58:45 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0008s Wall: 0.0017s flows/second: 98017.4 Runtime: 0.0017s