Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 18:58:46.046 00:00:10.328 TCP 23.104.0.1:33468 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:59:04.256 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 18:59:04.344 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 18:59:01.665 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6661 1 2025-08-16 18:59:46.415 00:00:10.383 TCP 23.104.0.1:53556 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:00:01.875 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37230 10 6661 1 2025-08-16 18:56:12.259 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 19:00:46.834 00:00:10.392 TCP 23.104.0.1:39776 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:01:02.101 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41186 10 6661 1 2025-08-16 19:01:47.260 00:00:10.327 TCP 23.104.0.1:58240 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:02:02.316 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34914 10 6661 1 2025-08-16 19:02:47.624 00:00:10.367 TCP 23.104.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:03:02.524 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49774 10 6661 1 2025-08-16 18:59:12.262 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 19:03:48.028 00:00:10.324 TCP 23.104.0.1:58636 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:04:04.497 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 19:04:04.407 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 19:04:02.735 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57732 10 6661 1 2025-08-16 19:04:48.388 00:00:10.366 TCP 23.104.0.1:48414 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:05:02.940 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46234 10 6661 1 2025-08-16 19:05:48.789 00:00:10.409 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 15 1926 1 2025-08-16 19:06:03.178 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34684 12 10367 1 2025-08-16 19:02:12.260 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 19:06:49.238 00:00:10.366 TCP 23.104.0.1:59038 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:07:03.418 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56334 10 6452 1 2025-08-16 19:07:49.651 00:00:10.361 TCP 23.104.0.1:47786 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:08:03.629 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47688 10 6452 1 2025-08-16 19:09:04.543 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 19:08:50.056 00:00:10.364 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:09:04.732 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 19:05:12.262 00:05:00.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 19:09:03.843 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51854 10 6452 1 2025-08-16 19:09:50.458 00:00:10.356 TCP 23.104.0.1:59756 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:10:04.084 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42716 10 6452 1 2025-08-16 19:10:50.854 00:00:10.378 TCP 23.104.0.1:57822 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:11:04.298 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60330 10 6452 1 2025-08-16 19:11:51.271 00:00:10.366 TCP 23.104.0.1:53648 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:12:04.470 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37284 10 6452 1 2025-08-16 19:08:12.260 00:05:00.874 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 19:12:51.673 00:00:10.360 TCP 23.104.0.1:38508 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:13:04.691 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60570 10 6452 1 2025-08-16 19:14:04.905 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 19:14:04.904 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 19:13:52.099 00:00:10.361 TCP 23.104.0.1:48574 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:14:04.901 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:58280 10 6452 1 2025-08-16 19:14:52.497 00:00:10.363 TCP 23.104.0.1:43478 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:15:05.093 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56362 10 6452 1 2025-08-16 19:11:12.264 00:05:00.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 19:15:52.906 00:00:10.368 TCP 23.104.0.1:59474 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:16:05.305 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59174 10 6452 1 2025-08-16 19:16:53.309 00:00:10.367 TCP 23.104.0.1:46620 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:17:05.515 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47646 10 6452 1 2025-08-16 19:17:53.718 00:00:10.385 TCP 23.104.0.1:47596 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:18:05.727 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53464 10 6452 1 2025-08-16 19:14:12.261 00:05:00.874 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 19:19:04.841 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 19:18:54.141 00:00:10.363 TCP 23.104.0.1:37724 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:19:04.748 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 19:19:05.935 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:56662 10 6452 1 2025-08-16 19:19:54.543 00:00:10.363 TCP 23.104.0.1:51434 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:20:06.137 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60802 10 6452 1 2025-08-16 19:20:54.945 00:00:10.376 TCP 23.104.0.1:40364 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:21:06.309 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40076 10 6452 1 2025-08-16 19:17:12.265 00:05:00.871 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 19:21:55.363 00:00:10.363 TCP 23.104.0.1:59356 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:22:06.521 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52906 10 6452 1 2025-08-16 19:22:55.760 00:00:10.373 TCP 23.104.0.1:34026 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:23:06.738 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37306 10 6452 1 2025-08-16 19:24:04.922 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 19:23:56.171 00:00:10.374 TCP 23.104.0.1:45436 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:24:04.847 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 19:20:12.263 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 19:24:06.950 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:50842 10 6452 1 2025-08-16 19:24:56.584 00:00:10.365 TCP 23.104.0.1:59464 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:25:07.195 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60180 10 6452 1 2025-08-16 19:25:56.989 00:00:10.372 TCP 23.104.0.1:37608 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:26:07.369 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39294 10 6452 1 2025-08-16 19:26:57.407 00:00:10.366 TCP 23.104.0.1:54474 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:23:12.266 00:05:00.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 19:27:07.583 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43594 10 6452 1 2025-08-16 19:27:57.811 00:00:10.365 TCP 23.104.0.1:35304 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:28:07.793 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59260 10 6452 1 2025-08-16 19:29:05.086 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 19:29:04.913 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 19:28:58.215 00:00:10.359 TCP 23.104.0.1:34672 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:29:07.966 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:59622 10 6452 1 2025-08-16 19:29:58.615 00:00:10.331 TCP 23.104.0.1:38646 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:26:12.263 00:05:00.876 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 19:30:08.211 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41162 10 6452 1 2025-08-16 19:30:58.989 00:00:10.364 TCP 23.104.0.1:54108 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:31:08.428 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36380 10 6452 1 2025-08-16 19:31:59.394 00:00:10.381 TCP 23.104.0.1:47368 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:32:08.644 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47108 10 6452 1 2025-08-16 19:32:59.823 00:00:10.364 TCP 23.104.0.1:37000 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:29:12.266 00:05:00.872 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 19:33:08.860 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54940 10 6452 1 2025-08-16 19:34:05.125 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 19:34:05.092 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 19:34:00.224 00:00:10.359 TCP 23.104.0.1:60894 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:34:09.093 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39552 10 6452 1 2025-08-16 19:35:00.624 00:00:10.364 TCP 23.104.0.1:56472 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:35:09.274 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51024 10 6452 1 2025-08-16 19:36:01.026 00:00:10.366 TCP 23.104.0.1:52196 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:32:12.264 00:05:00.878 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 19:36:09.488 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41054 10 6452 1 2025-08-16 19:37:01.432 00:00:10.359 TCP 23.104.0.1:43092 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:37:09.696 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51924 10 6452 1 2025-08-16 19:38:01.832 00:00:10.390 TCP 23.104.0.1:42132 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:38:09.913 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35200 10 6452 1 2025-08-16 19:39:05.208 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 19:39:05.063 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 19:39:02.262 00:00:10.367 TCP 23.104.0.1:39292 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:35:12.268 00:05:00.873 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 19:39:10.131 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45860 10 6452 1 2025-08-16 19:40:02.668 00:00:10.363 TCP 23.104.0.1:41924 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:40:10.353 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:44140 10 6452 1 2025-08-16 19:41:03.094 00:00:10.361 TCP 23.104.0.1:49952 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:41:10.552 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52348 10 6452 1 2025-08-16 19:42:03.499 00:00:10.362 TCP 23.104.0.1:45652 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:38:12.268 00:05:00.876 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 19:42:10.763 00:00:10.670 TCP 1.101.0.1:3000 -> 22.102.0.1:37996 10 6452 1 2025-08-16 19:43:03.902 00:00:10.369 TCP 23.104.0.1:38332 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:43:11.475 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52434 10 6452 1 2025-08-16 19:44:05.021 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 19:44:05.289 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 19:44:04.311 00:00:10.328 TCP 23.104.0.1:37574 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:44:11.691 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39670 10 6452 1 2025-08-16 19:41:12.271 00:05:00.872 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 19:45:04.678 00:00:10.362 TCP 23.104.0.1:58426 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:45:11.866 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46790 10 6452 1 2025-08-16 19:46:05.110 00:00:10.318 TCP 23.104.0.1:57306 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:46:12.052 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36054 10 6452 1 2025-08-16 19:47:05.469 00:00:10.363 TCP 23.104.0.1:44140 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:47:12.263 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40316 10 6452 1 2025-08-16 19:44:12.269 00:05:00.877 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 19:48:05.871 00:00:10.367 TCP 23.104.0.1:51872 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:48:12.472 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47870 10 6452 1 2025-08-16 19:49:05.344 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 19:49:05.201 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 19:49:06.275 00:00:10.367 TCP 23.104.0.1:40132 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:49:12.686 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37070 10 6452 1 2025-08-16 19:50:06.678 00:00:10.365 TCP 23.104.0.1:52676 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:50:12.900 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:53864 10 6452 1 2025-08-16 19:47:12.272 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 19:51:07.103 00:00:10.359 TCP 23.104.0.1:58410 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:51:13.089 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53144 10 6452 1 2025-08-16 19:52:07.499 00:00:10.321 TCP 23.104.0.1:34478 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:52:13.302 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50528 10 6452 1 2025-08-16 19:53:07.857 00:00:10.372 TCP 23.104.0.1:33928 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:53:13.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33882 10 6452 1 2025-08-16 19:54:05.572 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 19:54:05.385 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 19:50:12.272 00:05:00.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 19:54:08.272 00:00:10.367 TCP 23.104.0.1:47140 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:54:13.726 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41018 10 6452 1 2025-08-16 19:55:08.691 00:00:10.452 TCP 23.104.0.1:50926 -> 1.101.0.1:3000 15 1926 1 2025-08-16 19:55:13.936 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:35620 12 10367 1 2025-08-16 19:56:09.189 00:00:10.367 TCP 23.104.0.1:45672 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:56:14.193 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46004 10 6452 1 2025-08-16 19:53:12.276 00:05:00.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 19:57:09.601 00:00:10.369 TCP 23.104.0.1:37692 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:57:14.407 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42252 10 6452 1 2025-08-16 19:58:10.008 00:00:10.367 TCP 23.104.0.1:48888 -> 1.101.0.1:3000 11 1507 1 2025-08-16 19:58:14.577 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42034 10 6452 1 Summary: total flows: 164, total bytes: 508479, total packets: 1584, avg bps: 1089, avg pps: 0, avg bpp: 321 Time window: 2025-08-16 18:56:12 - 2025-08-16 19:58:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0025s User: 0.0008s Wall: 0.0015s flows/second: 111197.2 Runtime: 0.0015s