Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-19 23:58:48.006 00:00:10.339 TCP 23.104.0.1:40126 -> 1.101.0.1:3000 11 1507 1 2025-08-19 23:59:03.956 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:50306 10 6452 1 2025-08-19 23:55:13.711 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 23:59:48.388 00:00:10.361 TCP 23.104.0.1:32854 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:00:04.140 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37328 10 6452 1 2025-08-19 23:56:13.714 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 00:00:36.946 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 00:00:37.159 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 00:00:48.796 00:00:10.366 TCP 23.104.0.1:38200 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:01:04.348 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41554 10 6452 1 2025-08-20 00:01:49.205 00:00:10.320 TCP 23.104.0.1:51970 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:02:04.563 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54624 10 6452 1 2025-08-20 00:02:49.564 00:00:10.365 TCP 23.104.0.1:36592 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:03:04.778 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54792 10 6452 1 2025-08-20 00:03:49.970 00:00:10.337 TCP 23.104.0.1:47728 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:04:04.946 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55988 10 6452 1 2025-08-20 00:04:50.344 00:00:10.365 TCP 23.104.0.1:33030 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:05:05.177 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54850 10 6452 1 2025-08-20 00:01:13.712 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 00:05:36.916 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 00:05:37.253 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 00:05:50.749 00:00:10.321 TCP 23.104.0.1:57106 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:06:05.384 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58682 10 6452 1 2025-08-20 00:02:13.715 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 00:06:51.113 00:00:10.367 TCP 23.104.0.1:33656 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:07:05.599 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60696 10 6452 1 2025-08-20 00:07:51.519 00:00:10.324 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:08:05.834 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44922 10 6452 1 2025-08-20 00:08:51.883 00:00:10.390 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:09:06.004 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:44274 10 6452 1 2025-08-20 00:09:52.305 00:00:10.361 TCP 23.104.0.1:42876 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:10:06.218 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41544 10 6452 1 2025-08-20 00:10:37.427 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 00:10:37.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 00:10:52.707 00:00:10.364 TCP 23.104.0.1:43466 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:11:06.438 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37470 10 6452 1 2025-08-20 00:07:13.714 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 00:11:53.113 00:00:10.365 TCP 23.104.0.1:37730 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:08:13.716 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 00:12:06.650 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52562 10 6452 1 2025-08-20 00:12:53.517 00:00:10.326 TCP 23.104.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:13:06.861 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41782 10 6452 1 2025-08-20 00:13:53.889 00:00:10.817 TCP 23.104.0.1:58872 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:14:07.069 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41452 10 6452 1 2025-08-20 00:14:54.745 00:00:10.325 TCP 23.104.0.1:58892 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:15:07.280 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59578 10 6452 1 2025-08-20 00:15:37.204 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 00:15:37.375 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 00:15:55.111 00:00:10.358 TCP 23.104.0.1:45506 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:16:07.506 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44050 10 6452 1 2025-08-20 00:16:55.507 00:00:10.326 TCP 23.104.0.1:55232 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:13:13.714 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 00:17:07.724 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51516 10 6452 1 2025-08-20 00:17:55.868 00:00:10.366 TCP 23.104.0.1:60708 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:14:13.717 00:05:00.958 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 00:18:07.909 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32826 10 6452 1 2025-08-20 00:18:56.273 00:00:10.337 TCP 23.104.0.1:53818 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:19:08.126 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44038 10 6452 1 2025-08-20 00:19:56.647 00:00:10.364 TCP 23.104.0.1:56618 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:20:08.337 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50842 10 6452 1 2025-08-20 00:20:37.471 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 00:20:37.318 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 00:20:57.064 00:00:10.370 TCP 23.104.0.1:34834 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:21:08.549 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55284 10 6452 1 2025-08-20 00:21:57.472 00:00:10.366 TCP 23.104.0.1:56312 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:22:08.760 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58406 10 6452 1 2025-08-20 00:22:57.873 00:00:10.367 TCP 23.104.0.1:48754 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:19:13.716 00:05:00.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 00:23:08.973 00:00:10.383 TCP 1.101.0.1:3000 -> 22.102.0.1:42382 10 6452 1 2025-08-20 00:23:58.276 00:00:10.378 TCP 23.104.0.1:50686 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:20:13.719 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 00:24:09.392 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50966 10 6452 1 2025-08-20 00:24:58.704 00:00:10.327 TCP 23.104.0.1:35488 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:25:09.608 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54612 10 6452 1 2025-08-20 00:25:37.439 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 00:25:37.511 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 00:25:59.096 00:00:10.370 TCP 23.104.0.1:52560 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:26:09.823 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51558 10 6452 1 2025-08-20 00:26:59.508 00:00:10.373 TCP 23.104.0.1:57138 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:27:10.071 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:47090 10 6452 1 2025-08-20 00:27:59.918 00:00:10.443 TCP 23.104.0.1:59350 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:28:10.273 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37946 10 6452 1 2025-08-20 00:29:00.404 00:00:10.361 TCP 23.104.0.1:42426 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:25:13.717 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 00:29:10.484 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54670 10 6452 1 2025-08-20 00:30:00.807 00:00:10.367 TCP 23.104.0.1:40748 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:26:13.720 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 00:30:10.694 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44038 10 6452 1 2025-08-20 00:30:37.855 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 00:30:37.721 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 00:31:01.216 00:00:10.367 TCP 23.104.0.1:56628 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:31:10.909 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46992 10 6452 1 2025-08-20 00:32:01.622 00:00:10.366 TCP 23.104.0.1:55514 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:32:11.127 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50228 10 6452 1 2025-08-20 00:33:02.030 00:00:10.327 TCP 23.104.0.1:54082 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:33:11.302 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41934 10 6452 1 2025-08-20 00:34:02.403 00:00:10.370 TCP 23.104.0.1:51874 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:34:11.477 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58658 10 6452 1 2025-08-20 00:35:02.812 00:00:10.330 TCP 23.104.0.1:57410 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:31:13.718 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 00:35:11.694 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40740 10 6452 1 2025-08-20 00:35:37.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 00:35:37.792 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 00:32:13.721 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 00:36:03.177 00:00:10.367 TCP 23.104.0.1:50912 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:36:11.869 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 2025-08-20 00:37:03.583 00:00:10.365 TCP 23.104.0.1:33452 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:37:12.064 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49276 10 6452 1 2025-08-20 00:38:03.987 00:00:10.360 TCP 23.104.0.1:43236 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:38:12.242 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42830 10 6452 1 2025-08-20 00:39:04.385 00:00:10.369 TCP 23.104.0.1:49572 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:39:12.455 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57972 10 6452 1 2025-08-20 00:40:04.793 00:00:10.335 TCP 23.104.0.1:58586 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:40:12.674 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49800 10 6452 1 2025-08-20 00:40:37.883 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 00:40:37.712 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 00:41:05.165 00:00:10.361 TCP 23.104.0.1:51750 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:37:13.721 00:05:00.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 00:41:12.881 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40702 10 6452 1 2025-08-20 00:42:05.566 00:00:10.369 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:38:13.723 00:05:00.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 00:42:13.104 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60110 10 6452 1 2025-08-20 00:43:05.973 00:00:10.336 TCP 23.104.0.1:56180 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:43:13.308 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33432 10 6452 1 2025-08-20 00:44:06.346 00:00:10.366 TCP 23.104.0.1:56502 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:44:13.527 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:32928 10 6452 1 2025-08-20 00:45:06.744 00:00:10.326 TCP 23.104.0.1:40348 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:45:13.699 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43752 11 6504 1 2025-08-20 00:45:38.030 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 00:45:37.921 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 00:46:07.107 00:00:10.367 TCP 23.104.0.1:41652 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:46:13.926 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6452 1 2025-08-20 00:43:13.721 00:05:00.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 00:47:07.512 00:00:10.363 TCP 23.104.0.1:35178 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:47:14.134 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:32970 10 6452 1 2025-08-20 00:44:13.727 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 00:48:07.915 00:00:10.370 TCP 23.104.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:48:14.349 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36744 10 6452 1 2025-08-20 00:49:08.324 00:00:10.366 TCP 23.104.0.1:50250 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:49:14.563 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36412 10 6452 1 2025-08-20 00:50:08.724 00:00:10.375 TCP 23.104.0.1:53524 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:50:14.741 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47216 10 6452 1 2025-08-20 00:50:38.225 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 00:50:38.300 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 00:51:09.135 00:00:10.480 TCP 23.104.0.1:56724 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:51:14.949 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:39768 10 6452 1 2025-08-20 00:52:09.656 00:00:10.369 TCP 23.104.0.1:41102 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:52:15.196 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45746 10 6452 1 2025-08-20 00:49:13.725 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 00:53:10.091 00:00:10.336 TCP 23.104.0.1:38986 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:53:15.412 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56874 10 6452 1 2025-08-20 00:50:13.728 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 00:54:10.479 00:00:10.364 TCP 23.104.0.1:58910 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:54:15.629 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36714 10 6452 1 2025-08-20 00:55:10.881 00:00:10.371 TCP 23.104.0.1:34624 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:55:15.849 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56940 10 6452 1 2025-08-20 00:55:38.164 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 00:55:38.098 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 00:56:11.305 00:00:10.378 TCP 23.104.0.1:52754 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:56:16.078 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45042 10 6452 1 2025-08-20 00:57:11.718 00:00:10.373 TCP 23.104.0.1:57556 -> 1.101.0.1:3000 11 1507 1 2025-08-20 00:57:16.287 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56184 10 6452 1 2025-08-20 00:58:16.497 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48764 10 6452 1 2025-08-20 00:58:12.132 00:00:10.325 TCP 23.104.0.1:54158 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1051, avg pps: 0, avg bpp: 316 Time window: 2025-08-19 23:55:13 - 2025-08-20 00:58:26 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0019s User: 0.0029s Wall: 0.0023s flows/second: 71274.0 Runtime: 0.0023s