Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 15:58:47.152 00:00:10.370 TCP 23.104.0.1:38280 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:59:08.724 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36150 10 6452 1 2025-08-15 15:59:47.550 00:00:10.368 TCP 23.104.0.1:39806 -> 1.101.0.1:3000 11 1507 1 2025-08-15 15:56:11.711 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 16:00:08.933 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34944 10 6452 1 2025-08-15 16:00:47.956 00:00:10.374 TCP 23.104.0.1:38924 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:01:09.167 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55390 10 6452 1 2025-08-15 16:01:48.366 00:00:10.362 TCP 23.104.0.1:42660 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:02:09.401 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52598 10 6452 1 2025-08-15 16:02:48.760 00:00:10.375 TCP 23.104.0.1:39410 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:03:09.624 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52824 10 6452 1 2025-08-15 16:03:31.873 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 16:03:31.889 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 16:03:49.172 00:00:10.362 TCP 23.104.0.1:38692 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:00:11.709 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 16:04:09.842 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46828 10 6452 1 2025-08-15 16:04:49.576 00:00:10.366 TCP 23.104.0.1:47892 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:05:10.081 00:00:10.350 TCP 1.101.0.1:3000 -> 22.102.0.1:50736 10 6452 1 2025-08-15 16:05:49.983 00:00:12.973 TCP 23.104.0.1:55854 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:02:11.713 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 16:06:10.472 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:53908 10 6452 1 2025-08-15 16:06:53.008 00:00:10.358 TCP 23.104.0.1:38672 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:07:10.658 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33780 10 6452 1 2025-08-15 16:07:53.408 00:00:10.365 TCP 23.104.0.1:50010 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:08:10.874 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60668 10 6452 1 2025-08-15 16:08:31.860 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 16:08:32.028 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 16:08:53.814 00:00:10.362 TCP 23.104.0.1:53490 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:09:11.070 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60088 10 6452 1 2025-08-15 16:09:54.215 00:00:10.363 TCP 23.104.0.1:51284 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:06:11.711 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 16:10:11.295 00:00:10.439 TCP 1.101.0.1:3000 -> 22.102.0.1:35314 10 6452 1 2025-08-15 16:10:54.619 00:00:10.359 TCP 23.104.0.1:57352 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:11:11.775 00:00:11.294 TCP 1.101.0.1:3000 -> 22.102.0.1:41522 10 6452 1 2025-08-15 16:11:55.024 00:00:10.369 TCP 23.104.0.1:40200 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:08:11.714 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 16:12:13.113 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57956 10 6452 1 2025-08-15 16:12:55.430 00:00:10.415 TCP 23.104.0.1:53762 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:13:13.284 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47970 10 6452 1 2025-08-15 16:13:32.250 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 16:13:32.187 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 16:13:55.882 00:00:10.368 TCP 23.104.0.1:38106 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:14:13.508 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46920 10 6452 1 2025-08-15 16:14:56.290 00:00:10.370 TCP 23.104.0.1:54592 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:15:13.721 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57658 10 6452 1 2025-08-15 16:15:56.694 00:00:10.320 TCP 23.104.0.1:60478 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:12:11.723 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 16:16:13.940 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:54288 10 6452 1 2025-08-15 16:16:57.058 00:00:10.359 TCP 23.104.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:17:14.197 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44196 10 6452 1 2025-08-15 16:17:57.455 00:00:10.361 TCP 23.104.0.1:37630 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:14:11.726 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 16:18:14.424 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35548 10 6452 1 2025-08-15 16:18:32.250 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 16:18:32.011 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 16:18:57.857 00:00:10.373 TCP 23.104.0.1:47880 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:19:14.601 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37892 10 6452 1 2025-08-15 16:19:58.271 00:00:10.363 TCP 23.104.0.1:33068 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:20:14.818 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39936 10 6452 1 2025-08-15 16:20:58.676 00:00:10.364 TCP 23.104.0.1:41720 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:21:15.083 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40710 10 6452 1 2025-08-15 16:21:59.112 00:00:10.325 TCP 23.104.0.1:52338 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:18:11.724 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 16:22:15.296 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40064 10 6452 1 2025-08-15 16:22:59.473 00:00:10.364 TCP 23.104.0.1:60778 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:23:15.508 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42984 10 6452 1 2025-08-15 16:23:32.506 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 16:23:32.594 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 16:23:59.877 00:00:10.327 TCP 23.104.0.1:47296 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:20:11.728 00:05:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 16:24:15.715 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50578 10 6452 1 2025-08-15 16:25:00.242 00:00:10.365 TCP 23.104.0.1:57182 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:25:15.890 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46906 10 6452 1 2025-08-15 16:26:00.652 00:00:10.365 TCP 23.104.0.1:37914 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:26:16.117 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:58974 10 6452 1 2025-08-15 16:27:01.063 00:00:10.365 TCP 23.104.0.1:33688 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:27:16.294 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37690 10 6452 1 2025-08-15 16:28:01.475 00:00:10.366 TCP 23.104.0.1:41338 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:24:11.728 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 16:28:16.503 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40432 10 6452 1 2025-08-15 16:28:32.712 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 16:28:32.537 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 16:29:01.876 00:00:10.361 TCP 23.104.0.1:49902 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:29:16.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40838 10 6452 1 2025-08-15 16:26:11.731 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 16:30:02.284 00:00:10.367 TCP 23.104.0.1:49762 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:30:16.930 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:51856 10 6452 1 2025-08-15 16:31:02.691 00:00:10.363 TCP 23.104.0.1:60104 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:31:17.164 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51848 10 6452 1 2025-08-15 16:32:03.112 00:00:10.328 TCP 23.104.0.1:40202 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:32:17.369 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33708 10 6452 1 2025-08-15 16:33:03.476 00:00:10.364 TCP 23.104.0.1:50670 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:33:17.536 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38946 10 6452 1 2025-08-15 16:33:32.519 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 16:33:32.407 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 16:30:11.730 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 16:34:03.877 00:00:10.335 TCP 23.104.0.1:52746 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:34:17.711 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39446 10 6452 1 2025-08-15 16:35:04.254 00:00:10.364 TCP 23.104.0.1:57570 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:35:17.926 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:60150 10 6452 1 2025-08-15 16:32:11.733 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 16:36:04.662 00:00:10.365 TCP 23.104.0.1:58604 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:36:18.168 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:55438 10 6452 1 2025-08-15 16:37:05.090 00:00:10.648 TCP 23.104.0.1:45088 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:37:18.352 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45486 10 6452 1 2025-08-15 16:38:05.774 00:00:10.374 TCP 23.104.0.1:36146 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:38:18.566 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33236 10 6452 1 2025-08-15 16:38:32.460 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 16:38:32.657 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 16:39:06.181 00:00:10.370 TCP 23.104.0.1:33572 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:39:18.776 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55206 10 6452 1 2025-08-15 16:40:06.589 00:00:10.371 TCP 23.104.0.1:60904 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:36:11.733 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 16:40:18.953 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:33920 10 6452 1 2025-08-15 16:41:07.000 00:00:10.370 TCP 23.104.0.1:41122 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:41:19.142 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40354 10 6452 1 2025-08-15 16:38:11.736 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 16:42:07.407 00:00:10.366 TCP 23.104.0.1:57992 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:42:19.361 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49582 10 6452 1 2025-08-15 16:43:07.811 00:00:10.368 TCP 23.104.0.1:53070 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:43:19.580 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35682 10 6452 1 2025-08-15 16:43:32.660 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 16:43:32.593 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 16:44:08.216 00:00:10.386 TCP 23.104.0.1:58602 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:44:19.797 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41376 10 6452 1 2025-08-15 16:45:08.637 00:00:10.327 TCP 23.104.0.1:56460 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:45:19.970 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:35888 10 6452 1 2025-08-15 16:42:11.733 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 16:46:08.998 00:00:10.324 TCP 23.104.0.1:55818 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:46:20.167 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40334 10 6452 1 2025-08-15 16:47:09.360 00:00:10.361 TCP 23.104.0.1:58032 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:47:20.405 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43622 10 6452 1 2025-08-15 16:44:11.736 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 16:48:09.760 00:00:10.384 TCP 23.104.0.1:45492 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:48:20.633 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59508 10 6452 1 2025-08-15 16:48:32.831 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 16:48:32.683 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 16:49:10.182 00:00:10.362 TCP 23.104.0.1:42908 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:49:20.843 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:39146 10 6452 1 2025-08-15 16:50:10.575 00:00:10.366 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:50:21.141 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52448 10 6452 1 2025-08-15 16:51:10.981 00:00:10.334 TCP 23.104.0.1:50794 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:51:21.352 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52368 10 6452 1 2025-08-15 16:48:11.735 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 16:52:11.354 00:00:10.321 TCP 23.104.0.1:56962 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:52:21.518 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56018 10 6452 1 2025-08-15 16:53:11.717 00:00:10.375 TCP 23.104.0.1:41494 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:53:21.698 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60284 10 6452 1 2025-08-15 16:53:32.798 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 16:53:33.008 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 16:50:11.738 00:05:00.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 16:54:12.125 00:00:10.324 TCP 23.104.0.1:40744 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:54:21.912 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33052 10 6452 1 2025-08-15 16:55:12.485 00:00:10.380 TCP 23.104.0.1:47470 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:55:22.128 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40114 10 6452 1 2025-08-15 16:56:12.904 00:00:10.369 TCP 23.104.0.1:47506 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:56:22.349 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60846 10 6452 1 2025-08-15 16:57:13.313 00:00:10.330 TCP 23.104.0.1:60560 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:57:22.533 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57688 10 6452 1 2025-08-15 16:54:11.736 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 16:58:13.679 00:00:10.377 TCP 23.104.0.1:38248 -> 1.101.0.1:3000 11 1507 1 2025-08-15 16:58:22.753 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48532 10 6452 1 2025-08-15 16:58:32.803 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 16:58:32.813 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1054, avg pps: 0, avg bpp: 317 Time window: 2025-08-15 15:56:11 - 2025-08-15 16:59:12 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0008s Wall: 0.0023s flows/second: 71682.6 Runtime: 0.0023s