Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 14:59:03.830 00:00:10.388 TCP 23.104.0.1:52854 -> 1.101.0.1:3000 11 1507 1 2025-08-20 14:55:13.989 00:05:00.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 14:59:17.948 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41078 10 6452 1 2025-08-20 14:56:13.992 00:05:00.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 15:00:04.260 00:00:10.323 TCP 23.104.0.1:56008 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:00:18.176 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38418 10 6452 1 2025-08-20 15:00:55.155 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 15:00:54.933 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 15:01:04.623 00:00:10.360 TCP 23.104.0.1:58776 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:01:18.393 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46832 10 6452 1 2025-08-20 15:02:05.023 00:00:10.361 TCP 23.104.0.1:34590 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:02:18.563 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45918 10 6452 1 2025-08-20 15:03:05.426 00:00:10.370 TCP 23.104.0.1:37842 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:03:18.737 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53650 10 6452 1 2025-08-20 15:04:05.834 00:00:10.386 TCP 23.104.0.1:58738 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:04:18.910 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:41616 10 6452 1 2025-08-20 15:05:06.261 00:00:10.370 TCP 23.104.0.1:37116 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:01:13.989 00:05:00.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 15:05:19.163 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55200 10 6452 1 2025-08-20 15:05:55.271 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 15:05:55.209 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 15:02:13.992 00:05:00.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 15:06:06.668 00:00:10.376 TCP 23.104.0.1:60910 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:06:19.385 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37502 10 6452 1 2025-08-20 15:07:07.097 00:00:10.364 TCP 23.104.0.1:55260 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:07:19.609 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:33658 10 6452 1 2025-08-20 15:08:07.501 00:00:10.322 TCP 23.104.0.1:51010 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:08:19.794 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47204 10 6452 1 2025-08-20 15:09:07.863 00:00:10.330 TCP 23.104.0.1:46526 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:09:20.005 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:50524 10 6452 1 2025-08-20 15:10:08.229 00:00:10.371 TCP 23.104.0.1:48166 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:10:20.190 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:56966 10 6452 1 2025-08-20 15:10:55.336 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 15:10:55.541 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 15:07:13.991 00:05:00.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 15:11:08.638 00:00:10.370 TCP 23.104.0.1:59006 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:11:20.377 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58470 10 6452 1 2025-08-20 15:08:13.993 00:05:00.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 15:12:09.050 00:00:10.364 TCP 23.104.0.1:51070 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:12:20.592 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:49260 10 6452 1 2025-08-20 15:13:09.448 00:00:10.367 TCP 23.104.0.1:55140 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:13:20.758 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53632 10 6452 1 2025-08-20 15:14:09.848 00:00:10.384 TCP 23.104.0.1:38248 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:14:20.974 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:51618 10 6452 1 2025-08-20 15:15:10.265 00:00:10.367 TCP 23.104.0.1:35240 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:15:21.166 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38064 10 6452 1 2025-08-20 15:15:55.269 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 15:15:55.319 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 15:16:10.671 00:00:10.320 TCP 23.104.0.1:46964 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:16:21.376 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56090 10 6452 1 2025-08-20 15:13:13.995 00:05:00.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 15:17:11.029 00:00:10.364 TCP 23.104.0.1:46764 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:17:21.586 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:40394 10 6452 1 2025-08-20 15:14:13.998 00:05:00.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 15:18:11.433 00:00:10.364 TCP 23.104.0.1:54324 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:18:21.756 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37302 10 6452 1 2025-08-20 15:19:11.834 00:00:10.390 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:19:21.971 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44128 10 6452 1 2025-08-20 15:20:12.261 00:00:10.367 TCP 23.104.0.1:50008 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:20:22.165 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33664 10 6452 1 2025-08-20 15:20:55.492 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 15:20:55.500 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 15:21:12.668 00:00:10.323 TCP 23.104.0.1:55408 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:21:22.385 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45424 10 6452 1 2025-08-20 15:22:13.031 00:00:10.362 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:22:22.601 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38460 10 6452 1 2025-08-20 15:19:13.997 00:05:00.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 15:23:13.434 00:00:10.363 TCP 23.104.0.1:35794 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:23:22.814 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:51782 10 6452 1 2025-08-20 15:24:13.837 00:00:10.394 TCP 23.104.0.1:40058 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:24:22.981 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51104 10 6452 1 2025-08-20 15:20:14.001 00:06:00.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-20 15:25:14.273 00:00:10.370 TCP 23.104.0.1:41898 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:25:23.207 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60070 10 6452 1 2025-08-20 15:25:55.643 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 15:25:55.538 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 15:26:14.682 00:00:10.370 TCP 23.104.0.1:48268 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:26:23.418 00:00:10.741 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-08-20 15:27:15.106 00:00:10.361 TCP 23.104.0.1:52054 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:27:24.207 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33302 10 6452 1 2025-08-20 15:28:15.507 00:00:10.364 TCP 23.104.0.1:56596 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:28:24.429 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53346 10 6452 1 2025-08-20 15:25:13.998 00:05:00.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 15:29:15.915 00:00:10.383 TCP 23.104.0.1:51326 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:29:24.646 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36388 10 6452 1 2025-08-20 15:30:16.337 00:00:10.447 TCP 23.104.0.1:42448 -> 1.101.0.1:3000 15 1926 1 2025-08-20 15:30:24.857 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:44898 12 10365 1 2025-08-20 15:30:55.607 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 15:30:55.586 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 15:31:16.839 00:00:10.345 TCP 23.104.0.1:36096 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:31:25.104 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58234 10 6452 1 2025-08-20 15:27:14.004 00:06:00.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-20 15:32:17.228 00:00:10.365 TCP 23.104.0.1:51706 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:32:25.317 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35162 10 6452 1 2025-08-20 15:33:17.634 00:00:10.360 TCP 23.104.0.1:60272 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:33:25.531 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52484 10 6452 1 2025-08-20 15:34:18.032 00:00:10.362 TCP 23.104.0.1:45102 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:34:25.751 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54232 10 6452 1 2025-08-20 15:35:18.437 00:00:10.364 TCP 23.104.0.1:35940 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:35:25.966 00:00:10.584 TCP 1.101.0.1:3000 -> 22.102.0.1:42272 10 6452 1 2025-08-20 15:35:56.320 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 15:35:56.306 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 15:31:14.000 00:06:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-20 15:36:18.840 00:00:10.388 TCP 23.104.0.1:60602 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:36:26.590 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43304 10 6452 1 2025-08-20 15:37:19.264 00:00:10.364 TCP 23.104.0.1:58668 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:37:26.805 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53622 10 6452 1 2025-08-20 15:38:19.667 00:00:10.369 TCP 23.104.0.1:57188 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:38:27.029 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34466 10 6452 1 2025-08-20 15:34:14.003 00:06:00.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-20 15:39:20.095 00:00:10.453 TCP 23.104.0.1:51566 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:39:27.243 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56586 10 6452 1 2025-08-20 15:40:20.586 00:00:10.398 TCP 23.104.0.1:36806 -> 1.101.0.1:3000 15 1926 1 2025-08-20 15:40:27.452 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:51460 12 10367 1 2025-08-20 15:40:55.898 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 15:40:55.943 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 15:41:21.023 00:00:10.361 TCP 23.104.0.1:59894 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:41:27.697 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57424 10 6452 1 2025-08-20 15:42:21.423 00:00:10.381 TCP 23.104.0.1:52610 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:42:27.917 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48162 10 6452 1 2025-08-20 15:38:14.002 00:06:00.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-20 15:43:21.840 00:00:10.380 TCP 23.104.0.1:33480 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:43:28.126 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37840 10 6452 1 2025-08-20 15:44:22.257 00:00:10.362 TCP 23.104.0.1:39656 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:44:28.347 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34330 10 6452 1 2025-08-20 15:45:22.662 00:00:10.366 TCP 23.104.0.1:58296 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:45:28.553 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-08-20 15:45:56.062 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 15:45:55.896 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 15:41:14.042 00:06:00.946 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-20 15:46:23.095 00:00:10.322 TCP 23.104.0.1:46320 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:46:28.764 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55606 10 6452 1 2025-08-20 15:47:23.456 00:00:10.359 TCP 23.104.0.1:47430 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:47:28.938 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33562 10 6452 1 2025-08-20 15:48:23.855 00:00:10.375 TCP 23.104.0.1:35734 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:48:29.172 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:44280 10 6452 1 2025-08-20 15:49:24.266 00:00:10.425 TCP 23.104.0.1:52982 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:49:29.356 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60122 10 6452 1 2025-08-20 15:45:14.030 00:06:00.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-20 15:50:24.735 00:00:10.362 TCP 23.104.0.1:49126 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:50:29.525 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45356 10 6452 1 2025-08-20 15:50:55.714 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 15:50:55.998 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 15:51:25.138 00:00:10.367 TCP 23.104.0.1:38732 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:51:29.695 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:55196 10 6452 1 2025-08-20 15:52:25.547 00:00:10.325 TCP 23.104.0.1:36726 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:52:29.862 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42200 10 6452 1 2025-08-20 15:48:14.034 00:06:00.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-20 15:53:25.926 00:00:10.397 TCP 23.104.0.1:36050 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:53:30.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43790 10 6452 1 2025-08-20 15:54:26.354 00:00:10.323 TCP 23.104.0.1:44706 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:54:30.299 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36952 10 6452 1 2025-08-20 15:55:30.513 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58648 10 6452 1 2025-08-20 15:55:26.718 00:00:10.338 TCP 23.104.0.1:57028 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:55:55.981 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 15:55:56.167 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 15:56:27.120 00:00:10.320 TCP 23.104.0.1:55080 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:56:30.721 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39848 10 6452 1 2025-08-20 15:52:14.034 00:06:00.959 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-20 15:57:30.948 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42050 10 6452 1 2025-08-20 15:57:27.482 00:00:10.367 TCP 23.104.0.1:38706 -> 1.101.0.1:3000 11 1507 1 2025-08-20 15:58:31.176 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45252 10 6452 1 2025-08-20 15:58:27.893 00:00:10.377 TCP 23.104.0.1:37324 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 507383, total packets: 1590, avg bps: 1066, avg pps: 0, avg bpp: 319 Time window: 2025-08-20 14:55:13 - 2025-08-20 15:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0035s User: 0.0017s Wall: 0.0024s flows/second: 69274.7 Runtime: 0.0024s