Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 18:59:13.483 00:00:10.367 TCP 23.104.0.1:38516 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:59:33.738 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45702 10 6452 1 2025-08-14 18:56:11.309 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 19:00:13.894 00:00:10.392 TCP 23.104.0.1:48832 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:00:33.926 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:54458 10 6452 1 2025-08-14 19:01:14.331 00:00:10.369 TCP 23.104.0.1:35230 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:01:34.128 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55136 10 6452 1 2025-08-14 19:02:14.745 00:00:10.671 TCP 23.104.0.1:33062 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:02:34.350 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53840 10 6452 1 2025-08-14 19:03:06.956 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 19:03:06.783 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 19:03:15.454 00:00:11.012 TCP 23.104.0.1:56804 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:03:34.575 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44484 10 6452 1 2025-08-14 19:00:11.307 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 19:04:16.499 00:00:10.370 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:04:34.745 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6452 1 2025-08-14 19:05:16.910 00:00:10.324 TCP 23.104.0.1:52846 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:05:34.956 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45012 10 6452 1 2025-08-14 19:02:11.311 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 19:06:17.274 00:00:10.328 TCP 23.104.0.1:47856 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:06:35.189 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50544 10 6452 1 2025-08-14 19:07:17.639 00:00:10.372 TCP 23.104.0.1:47138 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:07:35.397 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34634 10 6452 1 2025-08-14 19:08:06.491 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 19:08:06.732 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 19:08:18.054 00:00:10.380 TCP 23.104.0.1:49402 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:08:35.611 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43702 10 6452 1 2025-08-14 19:09:18.470 00:00:10.365 TCP 23.104.0.1:34600 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:09:35.834 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33140 10 6452 1 2025-08-14 19:06:11.309 00:05:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 19:10:18.874 00:00:10.370 TCP 23.104.0.1:43064 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:10:36.054 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38020 10 6452 1 2025-08-14 19:11:19.285 00:00:10.380 TCP 23.104.0.1:55622 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:11:36.271 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40500 10 6452 1 2025-08-14 19:08:11.312 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 19:12:19.705 00:00:10.370 TCP 23.104.0.1:43134 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:12:36.485 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:39600 10 6452 1 2025-08-14 19:13:06.870 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 19:13:06.742 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 19:13:20.112 00:00:10.736 TCP 23.104.0.1:38736 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:13:36.728 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41034 10 6452 1 2025-08-14 19:14:20.888 00:00:10.365 TCP 23.104.0.1:33674 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:14:36.947 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59486 10 6452 1 2025-08-14 19:15:21.288 00:00:10.368 TCP 23.104.0.1:59944 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:15:37.177 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57914 10 6452 1 2025-08-14 19:12:11.310 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 19:16:21.694 00:00:10.360 TCP 23.104.0.1:40884 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:16:37.351 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40158 10 6452 1 2025-08-14 19:17:22.100 00:00:10.367 TCP 23.104.0.1:60904 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:17:37.571 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53170 10 6452 1 2025-08-14 19:18:06.825 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 19:18:06.959 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 19:14:11.313 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 19:18:22.504 00:00:10.325 TCP 23.104.0.1:37148 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:18:37.785 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38900 10 6452 1 2025-08-14 19:19:22.869 00:00:10.367 TCP 23.104.0.1:41228 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:19:38.012 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53258 10 6452 1 2025-08-14 19:20:23.276 00:00:10.367 TCP 23.104.0.1:56164 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:20:38.220 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33328 10 6452 1 2025-08-14 19:21:23.683 00:00:10.363 TCP 23.104.0.1:37402 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:21:38.438 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57136 10 6452 1 2025-08-14 19:18:11.312 00:05:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 19:22:24.105 00:00:10.365 TCP 23.104.0.1:46642 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:22:38.658 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53622 10 6452 1 2025-08-14 19:23:07.361 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 19:23:07.195 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 19:23:24.511 00:00:10.323 TCP 23.104.0.1:52518 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:23:38.872 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:41816 10 6452 1 2025-08-14 19:20:11.315 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 19:24:24.873 00:00:10.323 TCP 23.104.0.1:52566 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:24:39.080 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:40452 10 6452 1 2025-08-14 19:25:25.235 00:00:10.336 TCP 23.104.0.1:54358 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:25:39.334 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47748 10 6452 1 2025-08-14 19:26:25.613 00:00:10.365 TCP 23.104.0.1:55902 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:26:39.511 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51020 10 6452 1 2025-08-14 19:27:26.018 00:00:10.373 TCP 23.104.0.1:39302 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:27:39.695 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50420 10 6452 1 2025-08-14 19:28:07.283 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 19:28:07.027 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 19:24:11.313 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 19:28:26.436 00:00:10.363 TCP 23.104.0.1:59806 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:28:39.905 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:40722 10 6452 1 2025-08-14 19:29:26.837 00:00:10.403 TCP 23.104.0.1:48222 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:29:40.106 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53782 10 6452 1 2025-08-14 19:26:11.315 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 19:30:27.270 00:00:10.368 TCP 23.104.0.1:49540 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:30:40.284 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59830 10 6452 1 2025-08-14 19:31:27.675 00:00:10.372 TCP 23.104.0.1:36476 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:31:40.496 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55650 10 6452 1 2025-08-14 19:32:28.107 00:00:10.365 TCP 23.104.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:32:40.676 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53468 10 6452 1 2025-08-14 19:33:07.261 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 19:33:07.099 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 19:33:28.511 00:00:10.371 TCP 23.104.0.1:44594 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:33:40.895 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54068 10 6452 1 2025-08-14 19:30:11.313 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 19:34:28.927 00:00:10.443 TCP 23.104.0.1:45896 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:34:41.083 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57376 10 6452 1 2025-08-14 19:35:29.410 00:00:10.365 TCP 23.104.0.1:33258 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:35:41.304 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43516 10 6452 1 2025-08-14 19:32:11.315 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 19:36:29.815 00:00:10.994 TCP 23.104.0.1:43582 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:36:41.521 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:57214 11 6504 1 2025-08-14 19:37:30.841 00:00:10.389 TCP 23.104.0.1:53974 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:37:41.786 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57046 10 6452 1 2025-08-14 19:38:07.324 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 19:38:07.289 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 19:38:31.267 00:00:10.329 TCP 23.104.0.1:34736 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:38:42.005 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55246 10 6452 1 2025-08-14 19:39:31.632 00:00:10.363 TCP 23.104.0.1:57848 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:39:42.216 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56066 10 6452 1 2025-08-14 19:36:11.315 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 19:40:32.031 00:00:10.369 TCP 23.104.0.1:57192 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:40:42.431 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40454 10 6452 1 2025-08-14 19:41:32.446 00:00:10.360 TCP 23.104.0.1:38798 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:41:42.643 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37126 10 6452 1 2025-08-14 19:38:11.318 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 19:42:32.858 00:00:10.332 TCP 23.104.0.1:50110 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:42:42.820 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56228 10 6452 1 2025-08-14 19:43:07.510 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 19:43:07.496 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 19:43:33.229 00:00:10.318 TCP 23.104.0.1:46872 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:43:43.037 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48304 10 6452 1 2025-08-14 19:44:33.588 00:00:10.322 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:44:43.253 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41090 10 6452 1 2025-08-14 19:45:33.949 00:00:10.371 TCP 23.104.0.1:51008 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:45:43.434 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-08-14 19:42:11.314 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 19:46:34.355 00:00:10.362 TCP 23.104.0.1:46180 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:46:43.606 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39798 10 6452 1 2025-08-14 19:47:34.758 00:00:10.378 TCP 23.104.0.1:34276 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:47:43.818 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34198 10 6452 1 2025-08-14 19:48:07.180 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 19:48:07.244 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 19:44:11.317 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 19:48:35.176 00:00:10.364 TCP 23.104.0.1:54736 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:48:44.041 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34806 10 6452 1 2025-08-14 19:49:35.576 00:00:10.364 TCP 23.104.0.1:38022 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:49:44.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53830 10 6452 1 2025-08-14 19:50:35.978 00:00:10.323 TCP 23.104.0.1:55016 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:50:44.429 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50110 10 6452 1 2025-08-14 19:51:36.339 00:00:10.372 TCP 23.104.0.1:49692 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:51:44.643 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36790 10 6452 1 2025-08-14 19:48:11.317 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 19:52:36.751 00:00:10.365 TCP 23.104.0.1:34992 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:52:44.815 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37558 10 6452 1 2025-08-14 19:53:07.690 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 19:53:07.581 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 19:53:37.158 00:00:10.374 TCP 23.104.0.1:55460 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:53:44.996 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58228 10 6452 1 2025-08-14 19:50:11.320 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 19:54:37.568 00:00:10.371 TCP 23.104.0.1:56854 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:54:45.216 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51070 10 6452 1 2025-08-14 19:55:37.976 00:00:10.368 TCP 23.104.0.1:34188 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:55:45.426 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37032 10 6452 1 2025-08-14 19:56:38.379 00:00:10.362 TCP 23.104.0.1:48320 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:56:45.640 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46654 10 6452 1 2025-08-14 19:57:38.783 00:00:10.366 TCP 23.104.0.1:46812 -> 1.101.0.1:3000 11 1507 1 2025-08-14 19:57:45.870 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45606 10 6452 1 2025-08-14 19:58:07.842 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 19:58:07.682 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 19:54:11.319 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 19:58:39.189 00:00:10.364 TCP 23.104.0.1:46804 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 491948, total packets: 1563, avg bps: 1040, avg pps: 0, avg bpp: 314 Time window: 2025-08-14 18:56:11 - 2025-08-14 19:59:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0021s Wall: 0.0024s flows/second: 68897.7 Runtime: 0.0024s