Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 11:59:09.060 00:00:10.367 TCP 23.104.0.1:57888 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:59:16.581 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37562 10 6452 1 2025-08-15 11:56:11.633 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 12:00:09.469 00:00:10.368 TCP 23.104.0.1:49886 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:00:16.752 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42840 10 6452 1 2025-08-15 12:01:09.874 00:00:10.381 TCP 23.104.0.1:41284 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:01:16.973 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39304 10 6452 1 2025-08-15 12:02:10.295 00:00:10.325 TCP 23.104.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:02:17.211 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53236 10 6452 1 2025-08-15 12:03:10.664 00:00:10.365 TCP 23.104.0.1:54646 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:03:27.183 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 12:03:27.317 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 12:03:17.434 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53472 10 6452 1 2025-08-15 12:00:11.633 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 12:04:11.102 00:00:10.368 TCP 23.104.0.1:59844 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:04:17.650 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59824 10 6452 1 2025-08-15 12:05:11.507 00:00:10.363 TCP 23.104.0.1:40424 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:05:17.871 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40568 10 6452 1 2025-08-15 12:02:11.638 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 12:06:11.910 00:00:10.363 TCP 23.104.0.1:42558 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:06:18.101 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40026 10 6452 1 2025-08-15 12:07:12.314 00:00:10.367 TCP 23.104.0.1:41652 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:07:18.269 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47796 10 6452 1 2025-08-15 12:08:26.938 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 12:08:12.726 00:00:10.328 TCP 23.104.0.1:40808 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:08:27.322 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 12:08:18.480 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39956 10 6452 1 2025-08-15 12:09:13.110 00:00:10.324 TCP 23.104.0.1:43342 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:09:18.656 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51668 10 6452 1 2025-08-15 12:06:11.634 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 12:10:13.472 00:00:10.366 TCP 23.104.0.1:44326 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:10:18.869 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51354 10 6452 1 2025-08-15 12:11:13.874 00:00:10.368 TCP 23.104.0.1:47970 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:11:19.069 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35406 10 6452 1 2025-08-15 12:08:11.638 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 12:12:14.283 00:00:10.368 TCP 23.104.0.1:37598 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:12:19.237 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57582 10 6452 1 2025-08-15 12:13:14.688 00:00:10.366 TCP 23.104.0.1:37778 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:13:27.146 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 12:13:19.450 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-08-15 12:13:27.279 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 12:14:15.110 00:00:10.363 TCP 23.104.0.1:53032 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:14:19.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50508 10 6452 1 2025-08-15 12:15:15.526 00:00:10.368 TCP 23.104.0.1:33430 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:15:19.834 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42874 10 6452 1 2025-08-15 12:12:11.635 00:05:00.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 12:16:15.933 00:00:10.383 TCP 23.104.0.1:33796 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:16:20.083 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59132 10 6452 1 2025-08-15 12:17:16.359 00:00:10.367 TCP 23.104.0.1:35396 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:17:20.315 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33088 10 6452 1 2025-08-15 12:14:11.638 00:05:00.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 12:18:20.528 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43280 10 6452 1 2025-08-15 12:18:27.281 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 12:18:27.240 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 12:18:16.769 00:00:10.372 TCP 23.104.0.1:33988 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:19:17.179 00:00:10.850 TCP 23.104.0.1:41902 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:19:20.742 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54544 10 6452 1 2025-08-15 12:20:18.122 00:00:10.402 TCP 23.104.0.1:44136 -> 1.101.0.1:3000 15 1926 1 2025-08-15 12:20:20.918 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38404 12 10367 1 2025-08-15 12:21:18.566 00:00:10.365 TCP 23.104.0.1:43470 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:21:21.165 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56934 10 6452 1 2025-08-15 12:18:11.637 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 12:22:21.423 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51212 10 6452 1 2025-08-15 12:22:18.963 00:00:10.385 TCP 23.104.0.1:33102 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:23:21.600 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47074 10 6452 1 2025-08-15 12:23:27.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 12:23:27.194 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 12:23:19.402 00:00:10.367 TCP 23.104.0.1:57326 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:20:11.640 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 12:24:19.802 00:00:10.367 TCP 23.104.0.1:59076 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:24:21.818 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50820 10 6452 1 2025-08-15 12:25:20.212 00:00:10.367 TCP 23.104.0.1:38556 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:25:22.037 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42396 10 6452 1 2025-08-15 12:26:20.610 00:00:10.323 TCP 23.104.0.1:36574 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:26:22.253 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46530 10 6452 1 2025-08-15 12:27:20.971 00:00:10.362 TCP 23.104.0.1:41610 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:27:22.459 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49820 10 6452 1 2025-08-15 12:24:11.642 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 12:28:27.704 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 12:28:21.374 00:00:10.372 TCP 23.104.0.1:38382 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:28:27.431 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 12:28:22.676 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38232 10 6452 1 2025-08-15 12:29:21.787 00:00:10.418 TCP 23.104.0.1:57904 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:29:22.854 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40870 10 6452 1 2025-08-15 12:26:11.642 00:05:00.858 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 12:30:22.246 00:00:10.367 TCP 23.104.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:30:23.089 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35568 10 6452 1 2025-08-15 12:31:23.300 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45550 10 6452 1 2025-08-15 12:31:22.650 00:00:10.365 TCP 23.104.0.1:49932 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:32:23.515 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57732 10 6452 1 2025-08-15 12:32:23.064 00:00:10.367 TCP 23.104.0.1:40036 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:33:27.577 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 12:33:27.613 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 12:33:23.746 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50786 10 6452 1 2025-08-15 12:33:23.466 00:00:10.366 TCP 23.104.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:30:11.642 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 12:34:23.921 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52750 10 6452 1 2025-08-15 12:34:23.866 00:00:10.366 TCP 23.104.0.1:45674 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:35:24.271 00:00:10.439 TCP 23.104.0.1:60962 -> 1.101.0.1:3000 15 1926 1 2025-08-15 12:35:24.132 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:55166 12 10367 1 2025-08-15 12:32:11.645 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 12:36:24.750 00:00:10.388 TCP 23.104.0.1:49678 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:36:24.328 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47744 10 6452 1 2025-08-15 12:37:25.179 00:00:10.377 TCP 23.104.0.1:50604 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:37:24.541 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6452 1 2025-08-15 12:38:27.943 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 12:38:28.025 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 12:38:24.754 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47626 10 6452 1 2025-08-15 12:38:25.592 00:00:10.369 TCP 23.104.0.1:47640 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:39:24.962 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54316 10 6452 1 2025-08-15 12:39:25.998 00:00:10.369 TCP 23.104.0.1:36432 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:36:11.645 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 12:40:26.411 00:00:10.365 TCP 23.104.0.1:59810 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:40:25.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34790 10 6452 1 2025-08-15 12:41:25.397 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:41932 10 6452 1 2025-08-15 12:41:26.817 00:00:10.362 TCP 23.104.0.1:47174 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:38:11.648 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 12:42:25.575 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39692 10 6452 1 2025-08-15 12:42:27.216 00:00:10.380 TCP 23.104.0.1:42988 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:43:27.990 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 12:43:27.873 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 12:43:25.789 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42518 10 6452 1 2025-08-15 12:43:27.632 00:00:10.366 TCP 23.104.0.1:43396 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:44:26.001 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46676 10 6452 1 2025-08-15 12:44:28.034 00:00:10.368 TCP 23.104.0.1:49880 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:45:26.172 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:51964 10 6452 1 2025-08-15 12:45:28.440 00:00:10.361 TCP 23.104.0.1:44524 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:42:11.646 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 12:46:26.363 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52470 10 6452 1 2025-08-15 12:46:28.840 00:00:10.353 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:47:26.584 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48164 10 6452 1 2025-08-15 12:47:29.225 00:00:10.367 TCP 23.104.0.1:43328 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:44:11.649 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 12:48:28.076 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 12:48:27.997 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 12:48:26.799 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52002 10 6452 1 2025-08-15 12:48:29.631 00:00:10.370 TCP 23.104.0.1:60924 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:49:30.046 00:00:10.325 TCP 23.104.0.1:41702 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:49:26.980 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:41076 10 6452 1 2025-08-15 12:50:30.420 00:00:10.361 TCP 23.104.0.1:46190 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:50:27.181 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59928 10 6452 1 2025-08-15 12:51:27.389 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 10 6452 1 2025-08-15 12:51:30.823 00:00:10.323 TCP 23.104.0.1:54368 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:48:11.647 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 12:52:27.605 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60352 10 6452 1 2025-08-15 12:52:31.188 00:00:10.363 TCP 23.104.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:53:27.908 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 12:53:28.167 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 12:53:27.821 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40832 10 6452 1 2025-08-15 12:53:31.591 00:00:10.328 TCP 23.104.0.1:36866 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:50:11.648 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 12:54:27.994 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:46154 10 6452 1 2025-08-15 12:54:31.960 00:00:10.333 TCP 23.104.0.1:53594 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:55:28.177 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36252 10 6452 1 2025-08-15 12:55:32.334 00:00:10.365 TCP 23.104.0.1:47322 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:56:28.397 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44004 10 6452 1 2025-08-15 12:56:32.739 00:00:10.371 TCP 23.104.0.1:37530 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:57:28.624 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33110 10 6452 1 2025-08-15 12:57:33.143 00:00:10.367 TCP 23.104.0.1:46068 -> 1.101.0.1:3000 11 1507 1 2025-08-15 12:54:11.651 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 12:58:28.007 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 12:58:27.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 12:58:28.844 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47114 10 6452 1 2025-08-15 12:58:33.552 00:00:10.365 TCP 23.104.0.1:54654 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507016, total packets: 1584, avg bps: 1072, avg pps: 0, avg bpp: 320 Time window: 2025-08-15 11:56:11 - 2025-08-15 12:59:12 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0019s Wall: 0.0028s flows/second: 58407.6 Runtime: 0.0028s