Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 09:58:57.494 00:00:10.328 TCP 23.104.0.1:43092 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:55:13.888 00:05:00.972 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 09:59:12.466 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53504 10 6452 1 2025-08-20 09:59:57.859 00:00:10.375 TCP 23.104.0.1:40826 -> 1.101.0.1:3000 11 1507 1 2025-08-20 09:56:13.893 00:05:00.966 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 10:00:12.675 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54778 10 6452 1 2025-08-20 10:00:48.951 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 10:00:48.945 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 10:00:58.272 00:00:10.369 TCP 23.104.0.1:58036 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:01:12.892 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:44678 10 6452 1 2025-08-20 10:01:58.684 00:00:10.370 TCP 23.104.0.1:57180 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:02:13.100 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45036 10 6452 1 2025-08-20 10:02:59.111 00:00:10.363 TCP 23.104.0.1:48450 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:03:13.337 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37114 10 6452 1 2025-08-20 10:03:59.515 00:00:10.365 TCP 23.104.0.1:47354 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:04:13.513 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60004 10 6452 1 2025-08-20 10:04:59.922 00:00:10.396 TCP 23.104.0.1:41316 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:01:13.890 00:05:00.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 10:05:13.738 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41092 10 6452 1 2025-08-20 10:05:49.579 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 10:05:49.624 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 10:06:00.353 00:00:10.372 TCP 23.104.0.1:50016 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:02:13.892 00:05:00.967 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 10:06:13.922 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46000 10 6452 1 2025-08-20 10:07:00.768 00:00:10.383 TCP 23.104.0.1:48956 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:07:14.135 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:55706 10 6452 1 2025-08-20 10:08:01.189 00:00:10.323 TCP 23.104.0.1:56058 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:08:14.343 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38136 10 6452 1 2025-08-20 10:09:01.555 00:00:10.364 TCP 23.104.0.1:44438 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:09:14.560 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40892 10 6452 1 2025-08-20 10:10:01.958 00:00:10.377 TCP 23.104.0.1:32800 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:10:14.767 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51512 10 6452 1 2025-08-20 10:10:49.273 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 10:10:49.260 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 10:11:02.375 00:00:10.367 TCP 23.104.0.1:35346 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:07:13.890 00:05:00.980 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 10:11:14.980 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53652 10 6452 1 2025-08-20 10:12:02.775 00:00:10.373 TCP 23.104.0.1:49828 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:08:13.893 00:05:00.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 10:12:15.207 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38534 10 6452 1 2025-08-20 10:13:03.183 00:00:10.358 TCP 23.104.0.1:36920 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:13:15.421 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38010 10 6452 1 2025-08-20 10:14:03.575 00:00:10.326 TCP 23.104.0.1:39110 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:14:15.594 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58658 10 6452 1 2025-08-20 10:15:03.940 00:00:10.377 TCP 23.104.0.1:59744 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:15:15.812 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57224 10 6452 1 2025-08-20 10:15:49.602 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 10:15:49.293 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 10:16:04.355 00:00:10.368 TCP 23.104.0.1:37364 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:16:16.039 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52686 10 6452 1 2025-08-20 10:17:04.765 00:00:10.384 TCP 23.104.0.1:55366 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:13:13.892 00:05:00.974 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 10:17:16.248 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47568 10 6452 1 2025-08-20 10:14:13.895 00:05:00.969 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 10:18:05.192 00:00:10.323 TCP 23.104.0.1:47144 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:18:16.424 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-08-20 10:19:05.555 00:00:10.329 TCP 23.104.0.1:36100 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:19:16.639 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40796 10 6452 1 2025-08-20 10:20:05.921 00:00:10.354 TCP 23.104.0.1:42344 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:20:16.853 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33446 10 6452 1 2025-08-20 10:20:49.499 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 10:20:49.335 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 10:21:06.315 00:00:10.389 TCP 23.104.0.1:46020 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:21:17.039 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55202 10 6452 1 2025-08-20 10:22:06.746 00:00:10.362 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:22:17.256 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45674 10 6452 1 2025-08-20 10:19:13.893 00:05:00.977 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 10:23:07.147 00:00:14.951 TCP 23.104.0.1:32806 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:23:17.474 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48248 10 6452 1 2025-08-20 10:20:13.895 00:05:00.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 10:24:12.163 00:00:10.369 TCP 23.104.0.1:41902 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:24:17.681 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43820 10 6452 1 2025-08-20 10:25:12.570 00:00:10.365 TCP 23.104.0.1:45654 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:25:17.898 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47730 12 10367 1 2025-08-20 10:25:50.446 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 10:25:50.422 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 10:26:12.970 00:00:10.444 TCP 23.104.0.1:47138 -> 1.101.0.1:3000 15 1926 1 2025-08-20 10:26:18.151 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37844 10 6452 1 2025-08-20 10:27:13.464 00:00:10.363 TCP 23.104.0.1:36012 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:27:18.374 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54352 10 6452 1 2025-08-20 10:28:13.866 00:00:10.369 TCP 23.104.0.1:34826 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:28:18.591 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41764 10 6452 1 2025-08-20 10:25:13.894 00:05:00.977 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 10:29:14.273 00:00:10.372 TCP 23.104.0.1:55318 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:29:18.816 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:34758 10 6452 1 2025-08-20 10:26:13.896 00:05:00.972 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 10:30:14.682 00:00:10.368 TCP 23.104.0.1:41928 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:30:19.003 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57970 10 6452 1 2025-08-20 10:30:49.847 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 10:30:49.718 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 10:31:15.107 00:00:10.361 TCP 23.104.0.1:52330 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:31:19.175 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37148 10 6452 1 2025-08-20 10:32:15.509 00:00:10.360 TCP 23.104.0.1:53690 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:32:19.390 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48342 10 6452 1 2025-08-20 10:33:15.909 00:00:10.365 TCP 23.104.0.1:51642 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:33:19.604 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55700 10 6452 1 2025-08-20 10:34:16.309 00:00:10.365 TCP 23.104.0.1:37530 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:34:19.770 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37704 10 6452 1 2025-08-20 10:31:13.897 00:05:00.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 10:35:16.713 00:00:10.386 TCP 23.104.0.1:46470 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:35:19.984 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34324 10 6452 1 2025-08-20 10:35:49.747 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 10:35:49.867 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 10:32:13.900 00:05:00.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 10:36:20.208 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41008 10 6452 1 2025-08-20 10:36:17.131 00:00:10.331 TCP 23.104.0.1:38324 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:37:20.417 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57992 10 6452 1 2025-08-20 10:37:17.495 00:00:10.367 TCP 23.104.0.1:46564 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:38:20.624 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34244 10 6452 1 2025-08-20 10:38:17.903 00:00:10.326 TCP 23.104.0.1:51558 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:39:18.266 00:00:10.357 TCP 23.104.0.1:50640 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:39:20.794 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51910 10 6452 1 2025-08-20 10:40:18.660 00:00:10.369 TCP 23.104.0.1:60590 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:40:21.007 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45592 10 6452 1 2025-08-20 10:40:49.835 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 10:40:50.016 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 10:37:13.898 00:05:00.978 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 10:41:19.091 00:00:10.363 TCP 23.104.0.1:59658 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:41:21.221 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36618 10 6452 1 2025-08-20 10:38:13.901 00:05:00.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 10:42:19.495 00:00:10.575 TCP 23.104.0.1:49532 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:42:21.389 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45106 10 6452 1 2025-08-20 10:43:20.109 00:00:10.520 TCP 23.104.0.1:35108 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:43:21.603 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34432 10 6452 1 2025-08-20 10:44:21.820 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34942 10 6452 1 2025-08-20 10:44:20.666 00:00:10.324 TCP 23.104.0.1:39062 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:45:21.024 00:00:10.321 TCP 23.104.0.1:53604 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:45:22.043 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43810 10 6452 1 2025-08-20 10:45:50.277 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 10:45:50.107 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 10:46:21.385 00:00:10.323 TCP 23.104.0.1:35086 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:46:22.256 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44922 10 6452 1 2025-08-20 10:43:13.900 00:05:00.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 10:47:22.467 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:52082 10 6452 1 2025-08-20 10:47:21.755 00:00:10.331 TCP 23.104.0.1:40108 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:44:13.903 00:05:00.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 10:48:22.633 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53828 10 6452 1 2025-08-20 10:48:22.132 00:00:10.365 TCP 23.104.0.1:58232 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:49:22.861 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43012 10 6452 1 2025-08-20 10:49:22.539 00:00:10.334 TCP 23.104.0.1:48992 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:50:23.090 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:34184 10 6452 1 2025-08-20 10:50:22.913 00:00:10.343 TCP 23.104.0.1:38602 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:50:50.204 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 10:50:50.007 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 10:51:23.303 00:00:10.367 TCP 23.104.0.1:49512 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:51:23.295 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43926 10 6452 1 2025-08-20 10:52:23.510 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46680 10 6452 1 2025-08-20 10:52:23.712 00:00:10.379 TCP 23.104.0.1:42526 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:49:13.901 00:05:00.981 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 10:53:23.680 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40170 10 6452 1 2025-08-20 10:53:24.131 00:00:10.363 TCP 23.104.0.1:59650 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:50:13.904 00:05:00.976 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 10:54:23.893 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38550 10 6452 1 2025-08-20 10:54:24.534 00:00:10.321 TCP 23.104.0.1:38152 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:55:24.096 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35008 10 6452 1 2025-08-20 10:55:24.895 00:00:10.371 TCP 23.104.0.1:38284 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:55:50.175 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 10:55:50.242 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 10:56:25.304 00:00:10.365 TCP 23.104.0.1:33704 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:56:24.306 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39176 10 6452 1 2025-08-20 10:57:24.478 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47526 10 6452 1 2025-08-20 10:57:25.708 00:00:10.370 TCP 23.104.0.1:56660 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:58:26.108 00:00:10.375 TCP 23.104.0.1:35076 -> 1.101.0.1:3000 11 1507 1 2025-08-20 10:58:24.697 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36104 10 6452 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1057, avg pps: 0, avg bpp: 318 Time window: 2025-08-20 09:55:13 - 2025-08-20 10:58:36 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0022s Wall: 0.0027s flows/second: 59762.5 Runtime: 0.0028s