Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 05:58:43.109 00:00:10.364 TCP 23.104.0.1:47746 -> 1.101.0.1:3000 11 1507 1 2025-08-15 05:58:59.194 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58074 10 6452 1 2025-08-15 05:59:43.523 00:00:10.368 TCP 23.104.0.1:38650 -> 1.101.0.1:3000 11 1507 1 2025-08-15 05:59:59.365 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52432 10 6452 1 2025-08-15 05:56:11.524 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 06:00:43.925 00:00:10.380 TCP 23.104.0.1:38670 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:00:59.581 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56876 10 6452 1 2025-08-15 06:01:44.340 00:00:10.365 TCP 23.104.0.1:54066 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:01:59.795 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33730 10 6452 1 2025-08-15 06:02:44.741 00:00:10.391 TCP 23.104.0.1:32836 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:03:00.030 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2025-08-15 06:03:19.697 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 06:03:19.764 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 06:03:45.166 00:00:10.372 TCP 23.104.0.1:49192 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:04:00.239 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53320 10 6452 1 2025-08-15 06:00:11.521 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 06:04:45.575 00:00:10.366 TCP 23.104.0.1:43848 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:05:00.451 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57056 10 6452 1 2025-08-15 06:05:45.980 00:00:10.364 TCP 23.104.0.1:50044 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:06:00.626 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57004 10 6452 1 2025-08-15 06:02:11.525 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 06:06:46.381 00:00:10.364 TCP 23.104.0.1:42700 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:07:00.848 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57404 10 6452 1 2025-08-15 06:07:46.789 00:00:10.365 TCP 23.104.0.1:38342 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:08:01.080 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52892 10 6452 1 2025-08-15 06:08:19.909 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 06:08:20.047 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 06:08:47.196 00:00:10.364 TCP 23.104.0.1:39692 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:09:01.294 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42266 10 6452 1 2025-08-15 06:09:47.602 00:00:10.362 TCP 23.104.0.1:42346 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:10:01.507 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46630 10 6452 1 2025-08-15 06:06:11.523 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 06:10:48.010 00:00:10.367 TCP 23.104.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:11:01.722 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39804 10 6452 1 2025-08-15 06:11:48.414 00:00:10.365 TCP 23.104.0.1:57544 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:08:11.526 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 06:12:01.948 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:50810 10 6452 1 2025-08-15 06:12:48.819 00:00:10.372 TCP 23.104.0.1:59376 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:13:02.184 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41370 10 6452 1 2025-08-15 06:13:19.928 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 06:13:20.091 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 06:13:49.227 00:00:10.368 TCP 23.104.0.1:57528 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:14:02.406 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33448 10 6452 1 2025-08-15 06:14:49.630 00:00:10.373 TCP 23.104.0.1:49834 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:15:02.615 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53978 10 6452 1 2025-08-15 06:15:50.051 00:00:10.331 TCP 23.104.0.1:35950 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:16:02.830 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58768 10 6452 1 2025-08-15 06:12:11.526 00:05:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 06:16:50.419 00:00:10.323 TCP 23.104.0.1:39806 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:17:03.076 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35714 10 6452 1 2025-08-15 06:17:50.782 00:00:10.364 TCP 23.104.0.1:52600 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:18:03.287 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38502 10 6452 1 2025-08-15 06:14:11.533 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 06:18:19.956 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 06:18:20.122 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 06:18:51.184 00:00:10.367 TCP 23.104.0.1:35078 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:19:03.499 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60768 10 6452 1 2025-08-15 06:19:51.588 00:00:10.362 TCP 23.104.0.1:38818 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:20:03.710 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58172 10 6452 1 2025-08-15 06:20:51.992 00:00:10.358 TCP 23.104.0.1:36190 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:21:03.922 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:37562 10 6452 1 2025-08-15 06:21:52.389 00:00:10.380 TCP 23.104.0.1:58032 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:22:04.114 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53456 10 6452 1 2025-08-15 06:18:11.526 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 06:22:52.817 00:00:10.326 TCP 23.104.0.1:39548 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:23:04.284 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52356 10 6452 1 2025-08-15 06:23:20.058 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 06:23:20.000 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 06:23:53.187 00:00:10.364 TCP 23.104.0.1:40740 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:24:04.490 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:39826 10 6452 1 2025-08-15 06:20:11.529 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 06:24:53.588 00:00:10.362 TCP 23.104.0.1:53952 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:25:04.658 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60322 10 6452 1 2025-08-15 06:25:53.988 00:00:10.365 TCP 23.104.0.1:51816 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:26:04.881 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51834 10 6452 1 2025-08-15 06:26:54.389 00:00:10.329 TCP 23.104.0.1:46708 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:27:05.102 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42824 10 6452 1 2025-08-15 06:27:54.754 00:00:10.399 TCP 23.104.0.1:48448 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:24:11.528 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 06:28:05.336 00:00:10.601 TCP 1.101.0.1:3000 -> 22.102.0.1:60644 10 6452 1 2025-08-15 06:28:20.455 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 06:28:20.298 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 06:28:55.191 00:00:10.364 TCP 23.104.0.1:53678 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:29:05.980 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:43436 10 6452 1 2025-08-15 06:29:55.589 00:00:10.366 TCP 23.104.0.1:43134 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:30:06.216 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40528 10 6452 1 2025-08-15 06:26:11.531 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 06:30:55.994 00:00:10.363 TCP 23.104.0.1:37646 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:31:06.441 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53014 10 6452 1 2025-08-15 06:31:56.395 00:00:10.363 TCP 23.104.0.1:40690 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:32:06.659 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41572 10 6452 1 2025-08-15 06:32:56.798 00:00:10.365 TCP 23.104.0.1:60660 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:33:20.563 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 06:33:20.496 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 06:33:06.867 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51844 10 6452 1 2025-08-15 06:33:57.202 00:00:10.365 TCP 23.104.0.1:38154 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:30:11.527 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 06:34:07.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39066 10 6452 1 2025-08-15 06:34:57.605 00:00:10.322 TCP 23.104.0.1:55856 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:35:07.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42308 10 6452 1 2025-08-15 06:35:57.973 00:00:10.364 TCP 23.104.0.1:40272 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:32:11.532 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 06:36:07.517 00:00:10.124 TCP 1.101.0.1:3000 -> 22.102.0.1:52162 10 6452 1 2025-08-15 06:36:58.376 00:00:10.363 TCP 23.104.0.1:51916 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:37:07.680 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:34794 11 6504 1 2025-08-15 06:37:58.779 00:00:10.364 TCP 23.104.0.1:51322 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:38:07.941 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:46792 10 6452 1 2025-08-15 06:38:20.736 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 06:38:20.796 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 06:38:59.180 00:00:10.361 TCP 23.104.0.1:35732 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:39:08.136 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42102 10 6452 1 2025-08-15 06:39:59.580 00:00:10.365 TCP 23.104.0.1:45404 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:36:11.536 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 06:40:08.354 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40724 10 6452 1 2025-08-15 06:40:59.986 00:00:10.365 TCP 23.104.0.1:35538 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:41:08.521 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57996 10 6452 1 2025-08-15 06:42:00.393 00:00:10.360 TCP 23.104.0.1:40468 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:38:11.532 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 06:42:08.694 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:36106 11 6504 1 2025-08-15 06:43:00.795 00:00:10.976 TCP 23.104.0.1:51150 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:43:08.970 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46874 10 6452 1 2025-08-15 06:43:20.620 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 06:43:20.744 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 06:44:01.809 00:00:10.362 TCP 23.104.0.1:37996 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:44:09.191 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48914 10 6452 1 2025-08-15 06:45:02.209 00:00:10.327 TCP 23.104.0.1:52974 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:45:09.402 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51610 10 6452 1 2025-08-15 06:42:11.533 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 06:46:02.576 00:00:10.363 TCP 23.104.0.1:47548 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:46:09.619 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58348 10 6452 1 2025-08-15 06:47:02.976 00:00:10.326 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:47:09.834 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48938 10 6452 1 2025-08-15 06:48:03.343 00:00:10.370 TCP 23.104.0.1:45402 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:44:11.536 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 06:48:20.642 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 06:48:10.075 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36806 10 6452 1 2025-08-15 06:48:20.601 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 06:49:03.754 00:00:10.381 TCP 23.104.0.1:37242 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:49:10.285 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54792 10 6452 1 2025-08-15 06:50:04.183 00:00:10.335 TCP 23.104.0.1:56022 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:50:10.497 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:55852 12 10367 1 2025-08-15 06:51:04.565 00:00:10.440 TCP 23.104.0.1:53168 -> 1.101.0.1:3000 15 1926 1 2025-08-15 06:51:10.736 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55756 10 6452 1 2025-08-15 06:52:05.051 00:00:10.377 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:48:11.535 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 06:52:10.955 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48296 10 6452 1 2025-08-15 06:53:05.476 00:00:10.326 TCP 23.104.0.1:54274 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:53:20.916 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 06:53:11.179 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45458 10 6452 1 2025-08-15 06:53:20.911 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 06:54:05.836 00:00:10.386 TCP 23.104.0.1:33492 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:50:11.536 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 06:54:11.358 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53628 10 6452 1 2025-08-15 06:55:06.260 00:00:10.374 TCP 23.104.0.1:35394 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:55:11.576 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47652 10 6452 1 2025-08-15 06:56:11.791 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58708 10 6452 1 2025-08-15 06:56:06.674 00:00:10.326 TCP 23.104.0.1:44304 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:57:07.034 00:00:10.725 TCP 23.104.0.1:33990 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:57:11.963 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35252 12 6556 1 2025-08-15 06:54:11.535 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 06:58:20.873 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 06:58:20.998 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 06:58:07.799 00:00:10.541 TCP 23.104.0.1:38080 -> 1.101.0.1:3000 11 1507 1 2025-08-15 06:58:12.185 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41524 10 6452 1 Summary: total flows: 164, total bytes: 502890, total packets: 1582, avg bps: 1064, avg pps: 0, avg bpp: 317 Time window: 2025-08-15 05:56:11 - 2025-08-15 06:59:12 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0050s User: 0.0000s Wall: 0.0022s flows/second: 75193.0 Runtime: 0.0022s