Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-21 09:59:16.357 00:00:10.322 TCP 23.104.0.1:56562 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:59:37.642 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:57084 10 6452 1 2025-08-21 10:00:16.714 00:00:10.367 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:00:37.833 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57998 10 6452 1 2025-08-21 09:57:14.546 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 10:01:17.915 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:01:17.990 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 10:01:17.123 00:00:10.322 TCP 23.104.0.1:33786 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:01:38.007 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49368 10 6452 1 2025-08-21 10:02:17.492 00:00:10.369 TCP 23.104.0.1:37256 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:02:38.226 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56568 10 6452 1 2025-08-21 10:03:17.894 00:00:10.378 TCP 23.104.0.1:47014 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:03:38.438 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34458 10 6452 1 2025-08-21 10:00:14.543 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 10:04:18.311 00:00:10.321 TCP 23.104.0.1:53134 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:04:38.650 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35418 10 6452 1 2025-08-21 10:05:18.679 00:00:10.373 TCP 23.104.0.1:53900 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:05:38.881 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43092 10 6452 1 2025-08-21 10:06:18.093 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 10:06:17.900 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:06:19.128 00:00:10.360 TCP 23.104.0.1:50330 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:06:39.103 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35164 10 6452 1 2025-08-21 10:03:14.545 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 10:07:19.540 00:00:10.324 TCP 23.104.0.1:47844 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:07:39.313 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35132 10 6452 1 2025-08-21 10:08:19.905 00:00:10.372 TCP 23.104.0.1:36666 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:08:39.528 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43196 10 6452 1 2025-08-21 10:09:20.317 00:00:10.365 TCP 23.104.0.1:50372 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:09:39.744 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46204 10 6452 1 2025-08-21 10:06:14.543 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 10:10:20.722 00:00:10.327 TCP 23.104.0.1:36400 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:10:39.956 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55876 10 6452 1 2025-08-21 10:11:18.277 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:11:18.201 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 10:11:21.107 00:00:10.371 TCP 23.104.0.1:35048 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:11:40.192 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52688 10 6452 1 2025-08-21 10:12:21.513 00:00:10.370 TCP 23.104.0.1:34686 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:12:40.406 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52600 10 6452 1 2025-08-21 10:09:14.546 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 10:13:21.922 00:00:10.385 TCP 23.104.0.1:38608 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:13:40.580 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48656 10 6452 1 2025-08-21 10:14:22.345 00:00:10.368 TCP 23.104.0.1:40548 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:14:40.797 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40320 10 6452 1 2025-08-21 10:15:22.751 00:00:10.335 TCP 23.104.0.1:35522 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:15:41.012 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44476 10 6452 1 2025-08-21 10:12:14.545 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 10:16:18.454 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 10:16:18.336 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:16:23.123 00:00:10.323 TCP 23.104.0.1:60722 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:16:41.220 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36692 10 6452 1 2025-08-21 10:17:23.479 00:00:10.367 TCP 23.104.0.1:54438 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:17:41.436 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45558 10 6452 1 2025-08-21 10:18:23.881 00:00:10.513 TCP 23.104.0.1:43238 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:18:41.649 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49108 10 6452 1 2025-08-21 10:15:14.548 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 10:19:24.432 00:00:10.326 TCP 23.104.0.1:44876 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:19:41.871 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60102 10 6452 1 2025-08-21 10:20:24.792 00:00:10.342 TCP 23.104.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:20:42.093 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42908 10 6452 1 2025-08-21 10:21:18.404 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:21:18.347 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 10:21:25.177 00:00:10.369 TCP 23.104.0.1:44256 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:21:42.309 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36406 10 6452 1 2025-08-21 10:18:14.545 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 10:22:25.581 00:00:10.370 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:22:42.520 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44852 10 6452 1 2025-08-21 10:23:25.991 00:00:10.373 TCP 23.104.0.1:46864 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:23:42.741 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38178 10 6452 1 2025-08-21 10:24:26.398 00:00:10.373 TCP 23.104.0.1:38196 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:24:42.952 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35514 12 6556 1 2025-08-21 10:21:14.548 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 10:25:26.816 00:00:10.374 TCP 23.104.0.1:50856 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:25:43.184 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38286 10 6452 1 2025-08-21 10:26:18.610 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:26:18.688 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 10:26:27.227 00:00:10.324 TCP 23.104.0.1:33984 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:26:43.404 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40628 10 6452 1 2025-08-21 10:27:27.590 00:00:10.328 TCP 23.104.0.1:36948 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:27:43.619 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37586 10 6452 1 2025-08-21 10:24:14.546 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 10:28:27.958 00:00:10.370 TCP 23.104.0.1:59732 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:28:43.797 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39536 10 6452 1 2025-08-21 10:29:28.364 00:00:10.373 TCP 23.104.0.1:41568 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:29:44.008 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32858 10 6452 1 2025-08-21 10:30:28.763 00:00:10.337 TCP 23.104.0.1:55146 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:30:44.223 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33340 10 6452 1 2025-08-21 10:27:14.549 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 10:31:18.412 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:31:18.727 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 10:31:29.135 00:00:10.376 TCP 23.104.0.1:49180 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:31:44.438 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47312 10 6452 1 2025-08-21 10:32:29.552 00:00:10.323 TCP 23.104.0.1:37464 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:32:44.644 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46206 10 6452 1 2025-08-21 10:33:29.917 00:00:10.381 TCP 23.104.0.1:57546 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:33:44.859 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39506 10 6452 1 2025-08-21 10:30:14.548 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 10:34:30.335 00:00:10.361 TCP 23.104.0.1:58996 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:34:45.040 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57198 10 6452 1 2025-08-21 10:35:30.740 00:00:10.367 TCP 23.104.0.1:35860 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:35:45.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49928 10 6452 1 2025-08-21 10:36:18.606 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:36:18.801 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 10:36:31.144 00:00:10.364 TCP 23.104.0.1:60410 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:36:45.418 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60008 10 6452 1 2025-08-21 10:33:14.550 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 10:37:31.549 00:00:10.325 TCP 23.104.0.1:34712 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:37:45.635 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34526 10 6452 1 2025-08-21 10:38:31.915 00:00:10.320 TCP 23.104.0.1:47674 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:38:45.853 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:37946 10 6452 1 2025-08-21 10:39:32.269 00:00:10.366 TCP 23.104.0.1:50086 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:39:46.030 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39488 10 6452 1 2025-08-21 10:36:14.547 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 10:40:32.677 00:00:10.378 TCP 23.104.0.1:33936 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:40:46.244 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46888 10 6452 1 2025-08-21 10:41:18.982 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 10:41:19.122 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:41:33.116 00:00:10.328 TCP 23.104.0.1:52162 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:41:46.451 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35050 10 6452 1 2025-08-21 10:42:33.482 00:00:10.326 TCP 23.104.0.1:53776 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:42:46.663 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59882 10 6452 1 2025-08-21 10:39:14.561 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 10:43:33.846 00:00:11.012 TCP 23.104.0.1:51314 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:43:46.886 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46496 10 6452 1 2025-08-21 10:44:34.899 00:00:10.370 TCP 23.104.0.1:34456 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:44:47.104 00:00:13.700 TCP 1.101.0.1:3000 -> 22.102.0.1:49098 10 6452 1 2025-08-21 10:45:35.302 00:00:10.371 TCP 23.104.0.1:49720 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:45:50.848 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60558 10 6452 1 2025-08-21 10:42:14.561 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 10:46:18.769 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 10:46:18.717 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:46:35.709 00:00:10.383 TCP 23.104.0.1:39486 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:46:51.079 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58224 10 6452 1 2025-08-21 10:47:36.131 00:00:10.368 TCP 23.104.0.1:50702 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:47:51.251 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50006 10 6452 1 2025-08-21 10:48:36.537 00:00:10.324 TCP 23.104.0.1:56702 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:48:51.428 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52664 10 6452 1 2025-08-21 10:45:14.564 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 10:49:36.897 00:00:10.361 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:49:51.640 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37692 10 6452 1 2025-08-21 10:50:37.295 00:00:10.322 TCP 23.104.0.1:52008 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:50:51.811 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51360 10 6452 1 2025-08-21 10:51:19.013 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 10:51:19.056 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:51:37.656 00:00:10.362 TCP 23.104.0.1:35578 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:51:52.036 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55406 10 6452 1 2025-08-21 10:48:14.563 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 10:52:38.075 00:00:10.365 TCP 23.104.0.1:46266 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:52:52.245 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41608 10 6452 1 2025-08-21 10:53:38.478 00:00:10.364 TCP 23.104.0.1:34128 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:53:52.420 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54066 10 6452 1 2025-08-21 10:54:38.885 00:00:10.387 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:54:52.595 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35676 10 6452 1 2025-08-21 10:51:14.565 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 10:55:39.307 00:00:10.362 TCP 23.104.0.1:60684 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:55:52.808 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40328 10 6452 1 2025-08-21 10:56:19.186 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 10:56:19.036 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:56:39.709 00:00:10.383 TCP 23.104.0.1:60288 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:56:53.033 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42080 10 6452 1 2025-08-21 10:57:40.132 00:00:10.373 TCP 23.104.0.1:40468 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:57:53.244 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58712 10 6452 1 2025-08-21 10:54:14.563 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 10:58:40.540 00:00:10.379 TCP 23.104.0.1:58866 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492000, total packets: 1564, avg bps: 1057, avg pps: 0, avg bpp: 314 Time window: 2025-08-21 09:57:14 - 2025-08-21 10:59:15 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0016s Wall: 0.0032s flows/second: 50857.1 Runtime: 0.0032s