Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 13:59:12.553 00:00:10.363 TCP 23.104.0.1:51460 -> 1.101.0.1:3000 11 1507 1 2025-08-14 13:59:24.011 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51946 10 6452 1 2025-08-14 13:56:11.228 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 14:00:12.954 00:00:10.371 TCP 23.104.0.1:35992 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:00:24.234 00:00:10.366 TCP 1.101.0.1:3000 -> 22.102.0.1:44116 10 6452 1 2025-08-14 14:01:13.361 00:00:10.363 TCP 23.104.0.1:57176 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:01:24.640 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:54682 10 6452 1 2025-08-14 14:02:13.765 00:00:10.374 TCP 23.104.0.1:38598 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:02:24.894 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47084 10 6452 1 2025-08-14 14:03:00.886 00:00:00.012 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 14:03:00.633 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 14:03:14.175 00:00:10.376 TCP 23.104.0.1:55510 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:03:25.117 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58974 10 6452 1 2025-08-14 14:00:11.228 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 14:04:14.579 00:00:10.370 TCP 23.104.0.1:51828 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:04:25.290 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:39404 10 6452 1 2025-08-14 14:05:14.987 00:00:10.367 TCP 23.104.0.1:48284 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:05:25.483 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51374 10 6452 1 2025-08-14 14:02:11.232 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 14:06:15.393 00:00:10.369 TCP 23.104.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:06:25.654 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50582 10 6452 1 2025-08-14 14:07:15.801 00:00:10.367 TCP 23.104.0.1:52202 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:07:25.866 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:46124 10 6452 1 2025-08-14 14:08:00.820 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 14:08:00.687 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 14:08:16.206 00:00:10.378 TCP 23.104.0.1:59928 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:08:26.066 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43318 10 6452 1 2025-08-14 14:09:16.626 00:00:10.371 TCP 23.104.0.1:38634 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:09:26.274 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33866 10 6452 1 2025-08-14 14:06:11.230 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 14:10:17.033 00:00:10.365 TCP 23.104.0.1:48276 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:10:26.488 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51830 10 6452 1 2025-08-14 14:11:17.439 00:00:10.351 TCP 23.104.0.1:47334 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:11:26.667 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55836 10 6452 1 2025-08-14 14:08:11.232 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 14:12:17.808 00:00:10.364 TCP 23.104.0.1:45192 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:12:26.849 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50614 10 6452 1 2025-08-14 14:13:00.797 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 14:13:00.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 14:13:18.216 00:00:10.372 TCP 23.104.0.1:38596 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:13:27.084 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:56814 10 6452 1 2025-08-14 14:14:18.628 00:00:10.375 TCP 23.104.0.1:53176 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:14:27.291 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36770 10 6452 1 2025-08-14 14:15:19.056 00:00:10.369 TCP 23.104.0.1:42702 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:15:27.506 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50946 10 6452 1 2025-08-14 14:12:11.229 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 14:16:19.469 00:00:10.366 TCP 23.104.0.1:52828 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:16:27.729 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:56202 11 6504 1 2025-08-14 14:17:19.877 00:00:10.378 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:17:27.992 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60416 10 6452 1 2025-08-14 14:18:01.061 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 14:18:00.974 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 14:14:11.232 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 14:18:20.295 00:00:10.372 TCP 23.104.0.1:47382 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:18:28.218 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35088 10 6452 1 2025-08-14 14:19:20.701 00:00:10.319 TCP 23.104.0.1:57350 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:19:28.441 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45996 10 6452 1 2025-08-14 14:20:21.077 00:00:10.326 TCP 23.104.0.1:54504 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:20:28.652 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34318 10 6452 1 2025-08-14 14:21:21.439 00:00:10.363 TCP 23.104.0.1:50102 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:21:28.867 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44144 10 6452 1 2025-08-14 14:18:11.231 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 14:22:21.845 00:00:10.433 TCP 23.104.0.1:34298 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:22:29.098 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48112 10 6452 1 2025-08-14 14:23:01.200 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 14:23:01.408 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 14:23:22.322 00:00:10.365 TCP 23.104.0.1:57800 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:23:29.312 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42528 10 6452 1 2025-08-14 14:20:11.234 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 14:24:22.726 00:00:10.369 TCP 23.104.0.1:49400 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:24:29.524 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60702 10 6452 1 2025-08-14 14:25:23.132 00:00:10.321 TCP 23.104.0.1:49092 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:25:29.740 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34914 10 6452 1 2025-08-14 14:26:23.491 00:00:10.320 TCP 23.104.0.1:44438 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:26:29.916 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:43576 10 6452 1 2025-08-14 14:27:23.850 00:00:10.337 TCP 23.104.0.1:40754 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:27:30.100 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38282 10 6452 1 2025-08-14 14:28:01.010 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 14:28:01.206 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 14:24:11.232 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 14:28:24.226 00:00:10.363 TCP 23.104.0.1:42346 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:28:30.266 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42770 10 6452 1 2025-08-14 14:29:24.626 00:00:10.323 TCP 23.104.0.1:45638 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:29:30.440 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51962 10 6452 1 2025-08-14 14:26:11.236 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 14:30:24.992 00:00:10.363 TCP 23.104.0.1:33336 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:30:30.655 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49942 10 6452 1 2025-08-14 14:31:25.394 00:00:10.366 TCP 23.104.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:31:30.867 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37986 10 6452 1 2025-08-14 14:32:25.801 00:00:10.367 TCP 23.104.0.1:33040 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:32:31.091 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54332 10 6452 1 2025-08-14 14:33:01.304 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 14:33:01.040 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 14:33:26.205 00:00:10.361 TCP 23.104.0.1:54368 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:33:31.276 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33266 10 6452 1 2025-08-14 14:30:11.234 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 14:34:26.607 00:00:10.358 TCP 23.104.0.1:52302 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:34:31.452 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45972 10 6452 1 2025-08-14 14:35:31.671 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56000 10 6452 1 2025-08-14 14:35:27.007 00:00:10.364 TCP 23.104.0.1:59776 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:32:11.237 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 14:36:27.411 00:00:10.324 TCP 23.104.0.1:38138 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:36:31.846 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55074 10 6452 1 2025-08-14 14:37:27.772 00:00:10.367 TCP 23.104.0.1:53210 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:37:32.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41862 10 6452 1 2025-08-14 14:38:01.226 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 14:38:01.203 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 14:38:28.178 00:00:10.367 TCP 23.104.0.1:53530 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:38:32.292 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46046 10 6452 1 2025-08-14 14:39:28.580 00:00:10.366 TCP 23.104.0.1:60444 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:39:32.463 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43462 10 6452 1 2025-08-14 14:36:11.236 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 14:40:28.986 00:00:10.340 TCP 23.104.0.1:40240 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:40:32.675 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58072 10 6452 1 2025-08-14 14:41:29.388 00:00:10.373 TCP 23.104.0.1:50162 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:41:32.889 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47326 10 6452 1 2025-08-14 14:38:11.238 00:05:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 14:42:29.796 00:00:10.375 TCP 23.104.0.1:40162 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:42:33.077 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58698 10 6452 1 2025-08-14 14:43:01.473 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 14:43:01.555 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 14:43:30.212 00:00:10.367 TCP 23.104.0.1:39316 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:43:33.302 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44624 10 6452 1 2025-08-14 14:44:30.614 00:00:10.363 TCP 23.104.0.1:32852 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:44:33.528 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53166 10 6452 1 2025-08-14 14:45:31.014 00:00:10.323 TCP 23.104.0.1:48774 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:45:33.747 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46958 10 6452 1 2025-08-14 14:42:11.237 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 14:46:31.376 00:00:10.325 TCP 23.104.0.1:43230 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:46:33.959 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:40476 10 6452 1 2025-08-14 14:47:31.736 00:00:10.324 TCP 23.104.0.1:50262 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:47:34.196 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42786 10 6452 1 2025-08-14 14:48:01.340 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 14:48:01.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 14:44:11.239 00:05:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 14:48:32.102 00:00:10.325 TCP 23.104.0.1:45902 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:48:34.407 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33348 10 6452 1 2025-08-14 14:49:34.630 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36892 10 6452 1 2025-08-14 14:49:32.465 00:00:10.362 TCP 23.104.0.1:40406 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:50:34.798 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59542 10 6452 1 2025-08-14 14:50:32.864 00:00:10.333 TCP 23.104.0.1:53098 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:51:33.234 00:00:10.366 TCP 23.104.0.1:37546 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:51:35.029 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:49000 11 6504 1 2025-08-14 14:48:11.239 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 14:52:33.639 00:00:10.365 TCP 23.104.0.1:56670 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:52:35.297 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45410 10 6452 1 2025-08-14 14:53:01.348 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 14:53:01.467 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 14:53:34.048 00:00:10.366 TCP 23.104.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:53:35.466 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36092 10 6452 1 2025-08-14 14:50:11.241 00:05:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 14:54:34.453 00:00:10.365 TCP 23.104.0.1:56484 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:54:35.679 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42766 10 6452 1 2025-08-14 14:55:35.892 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33496 10 6452 1 2025-08-14 14:55:34.860 00:00:10.371 TCP 23.104.0.1:60658 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:56:36.110 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50778 10 6452 1 2025-08-14 14:56:35.267 00:00:10.381 TCP 23.104.0.1:56352 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:57:36.326 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54634 10 6452 1 2025-08-14 14:57:35.674 00:00:10.360 TCP 23.104.0.1:34120 -> 1.101.0.1:3000 11 1507 1 2025-08-14 14:58:01.700 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 14:58:01.851 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 14:54:11.240 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 14:58:36.543 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44234 10 6452 1 2025-08-14 14:58:36.100 00:00:10.330 TCP 23.104.0.1:49388 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1054, avg pps: 0, avg bpp: 316 Time window: 2025-08-14 13:56:11 - 2025-08-14 14:59:12 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0019s User: 0.0028s Wall: 0.0021s flows/second: 76994.2 Runtime: 0.0021s