Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 14:58:46.087 00:00:10.321 TCP 23.104.0.1:59784 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:59:00.381 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42174 10 6452 1 2025-08-13 14:59:46.445 00:00:10.373 TCP 23.104.0.1:38236 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:00:00.596 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47510 10 6452 1 2025-08-13 14:56:10.735 00:05:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 15:00:46.857 00:00:10.373 TCP 23.104.0.1:49778 -> 1.101.0.1:3000 11 1507 1 2025-08-13 14:57:10.738 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 15:01:00.811 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36840 10 6452 1 2025-08-13 15:01:47.267 00:00:10.366 TCP 23.104.0.1:43582 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:02:01.040 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51772 10 6452 1 2025-08-13 15:02:32.983 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 15:02:32.727 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 15:02:47.671 00:00:10.386 TCP 23.104.0.1:58922 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:03:01.251 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51046 10 6452 1 2025-08-13 15:03:48.110 00:00:10.329 TCP 23.104.0.1:58010 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:04:01.464 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59304 10 6452 1 2025-08-13 15:04:48.475 00:00:10.323 TCP 23.104.0.1:49810 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:05:01.667 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33680 10 6452 1 2025-08-13 15:05:48.841 00:00:10.385 TCP 23.104.0.1:57356 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:06:01.884 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:45248 10 6452 1 2025-08-13 15:02:10.738 00:05:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 15:06:49.269 00:00:10.329 TCP 23.104.0.1:42574 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:07:02.080 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59356 10 6452 1 2025-08-13 15:03:10.741 00:05:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 15:07:32.991 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 15:07:32.912 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 15:07:49.641 00:00:10.348 TCP 23.104.0.1:48954 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:08:02.296 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38856 10 6452 1 2025-08-13 15:08:50.032 00:00:10.371 TCP 23.104.0.1:51646 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:09:02.510 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54890 10 6452 1 2025-08-13 15:09:50.445 00:00:10.363 TCP 23.104.0.1:55878 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:10:02.731 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50710 10 6452 1 2025-08-13 15:10:50.850 00:00:10.389 TCP 23.104.0.1:57292 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:11:02.954 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39952 10 6452 1 2025-08-13 15:11:51.285 00:00:10.375 TCP 23.104.0.1:51100 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:08:10.739 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 15:12:03.182 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57396 10 6452 1 2025-08-13 15:12:33.052 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 15:12:33.111 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 15:12:51.701 00:00:10.332 TCP 23.104.0.1:48344 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:09:10.742 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 15:13:03.407 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40998 10 6452 1 2025-08-13 15:13:52.103 00:00:10.365 TCP 23.104.0.1:60528 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:14:03.637 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36048 10 6452 1 2025-08-13 15:14:52.510 00:00:10.447 TCP 23.104.0.1:57070 -> 1.101.0.1:3000 15 1926 1 2025-08-13 15:15:03.858 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:40124 12 10365 1 2025-08-13 15:15:52.994 00:00:10.371 TCP 23.104.0.1:39630 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:16:04.115 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44178 10 6452 1 2025-08-13 15:16:53.399 00:00:10.324 TCP 23.104.0.1:49806 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:17:04.335 00:00:20.015 TCP 1.101.0.1:3000 -> 22.102.0.1:39032 10 6452 1 2025-08-13 15:17:33.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 15:17:33.365 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 15:17:53.761 00:00:10.330 TCP 23.104.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:14:10.742 00:05:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 15:18:14.406 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36972 10 6452 1 2025-08-13 15:18:54.143 00:00:10.369 TCP 23.104.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:15:10.745 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 15:19:14.578 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41490 10 6452 1 2025-08-13 15:19:54.546 00:00:10.446 TCP 23.104.0.1:42060 -> 1.101.0.1:3000 15 1926 1 2025-08-13 15:20:14.791 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:44482 13 10419 1 2025-08-13 15:20:55.030 00:00:10.367 TCP 23.104.0.1:42532 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:21:15.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55570 10 6452 1 2025-08-13 15:21:55.432 00:00:10.364 TCP 23.104.0.1:43866 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:22:15.293 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58920 10 6452 1 2025-08-13 15:22:33.410 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 15:22:33.146 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 15:22:55.834 00:00:10.357 TCP 23.104.0.1:60624 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:23:15.522 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57778 10 6452 1 2025-08-13 15:23:56.238 00:00:10.373 TCP 23.104.0.1:55174 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:20:10.742 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 15:24:15.694 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39168 10 6452 1 2025-08-13 15:24:56.650 00:00:10.372 TCP 23.104.0.1:36730 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:21:10.746 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 15:25:15.917 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54176 10 6452 1 2025-08-13 15:25:57.102 00:00:10.372 TCP 23.104.0.1:48768 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:26:16.132 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58666 10 6452 1 2025-08-13 15:26:57.524 00:00:10.372 TCP 23.104.0.1:54082 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:27:16.347 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53404 10 6452 1 2025-08-13 15:27:33.374 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 15:27:33.717 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 15:27:57.931 00:00:10.395 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:28:16.572 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47322 10 6452 1 2025-08-13 15:28:58.365 00:00:10.363 TCP 23.104.0.1:57382 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:29:16.754 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51556 10 6452 1 2025-08-13 15:29:58.771 00:00:10.334 TCP 23.104.0.1:59312 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:26:10.743 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 15:30:16.982 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34996 10 6452 1 2025-08-13 15:30:59.140 00:00:10.363 TCP 23.104.0.1:33628 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:27:10.746 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 15:31:17.215 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50012 10 6452 1 2025-08-13 15:31:59.550 00:00:10.367 TCP 23.104.0.1:55302 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:32:17.433 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46490 10 6452 1 2025-08-13 15:32:33.582 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 15:32:33.401 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 15:32:59.958 00:00:10.370 TCP 23.104.0.1:46736 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:33:17.655 00:00:15.735 TCP 1.101.0.1:3000 -> 22.102.0.1:55406 10 6452 1 2025-08-13 15:34:00.367 00:00:10.362 TCP 23.104.0.1:36968 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:34:23.429 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50764 10 6452 1 2025-08-13 15:35:00.767 00:00:10.371 TCP 23.104.0.1:47462 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:35:23.658 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38484 10 6452 1 2025-08-13 15:36:01.179 00:00:10.383 TCP 23.104.0.1:33738 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:32:10.744 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 15:36:23.882 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48940 10 6452 1 2025-08-13 15:37:01.582 00:00:10.369 TCP 23.104.0.1:58852 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:33:10.746 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 15:37:33.640 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 15:37:24.120 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42848 10 6452 1 2025-08-13 15:37:33.508 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 15:38:01.992 00:00:10.389 TCP 23.104.0.1:43474 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:38:24.294 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50970 10 6452 1 2025-08-13 15:39:02.423 00:00:10.323 TCP 23.104.0.1:57212 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:39:24.510 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37814 10 6452 1 2025-08-13 15:40:02.786 00:00:10.371 TCP 23.104.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:40:24.725 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40650 10 6452 1 2025-08-13 15:41:03.194 00:00:10.372 TCP 23.104.0.1:33730 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:41:24.941 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:40610 10 6452 1 2025-08-13 15:38:10.745 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 15:42:03.601 00:00:10.365 TCP 23.104.0.1:53692 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:42:25.139 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39924 10 6452 1 2025-08-13 15:42:33.800 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 15:42:33.583 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 15:39:10.748 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 15:43:04.007 00:00:10.363 TCP 23.104.0.1:34988 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:43:25.356 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36116 10 6452 1 2025-08-13 15:44:04.406 00:00:10.372 TCP 23.104.0.1:34706 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:44:25.568 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44140 10 6452 1 2025-08-13 15:45:04.815 00:00:10.364 TCP 23.104.0.1:42134 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:45:25.782 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 10 6452 1 2025-08-13 15:46:05.215 00:00:10.365 TCP 23.104.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:46:26.027 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33788 10 6452 1 2025-08-13 15:47:05.620 00:00:10.371 TCP 23.104.0.1:55644 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:47:26.247 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33230 10 6452 1 2025-08-13 15:47:33.852 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 15:47:33.685 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 15:48:06.025 00:00:10.323 TCP 23.104.0.1:41520 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:44:10.750 00:05:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 15:48:26.489 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53540 10 6452 1 2025-08-13 15:45:10.754 00:05:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 15:49:06.386 00:00:10.326 TCP 23.104.0.1:49400 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:49:26.670 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51066 10 6452 1 2025-08-13 15:50:06.750 00:00:10.340 TCP 23.104.0.1:59776 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:50:26.884 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:54038 10 6452 1 2025-08-13 15:51:07.130 00:00:10.364 TCP 23.104.0.1:42862 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:51:27.083 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34538 10 6452 1 2025-08-13 15:52:07.535 00:00:22.267 TCP 23.104.0.1:60306 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:52:34.331 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 15:52:34.363 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 15:52:27.252 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50324 10 6452 1 2025-08-13 15:53:19.871 00:00:10.374 TCP 23.104.0.1:60296 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:53:27.470 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41676 10 6452 1 2025-08-13 15:50:10.753 00:05:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 15:54:20.288 00:00:10.365 TCP 23.104.0.1:38510 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:54:27.693 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42106 10 6452 1 2025-08-13 15:51:10.756 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 15:55:20.692 00:00:10.363 TCP 23.104.0.1:43124 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:55:27.906 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58008 10 6452 1 2025-08-13 15:56:21.105 00:00:10.363 TCP 23.104.0.1:54808 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:56:28.130 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39632 10 6452 1 2025-08-13 15:57:21.509 00:00:10.364 TCP 23.104.0.1:54108 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:57:33.907 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 15:57:33.844 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 15:57:28.318 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38370 10 6452 1 2025-08-13 15:58:21.915 00:00:10.369 TCP 23.104.0.1:36550 -> 1.101.0.1:3000 11 1507 1 2025-08-13 15:58:28.534 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41074 10 6452 1 Summary: total flows: 164, total bytes: 507066, total packets: 1585, avg bps: 1082, avg pps: 0, avg bpp: 319 Time window: 2025-08-13 14:56:10 - 2025-08-13 15:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0010s Wall: 0.0022s flows/second: 74315.7 Runtime: 0.0022s