Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 19:58:51.984 00:00:10.370 TCP 23.104.0.1:38410 -> 1.101.0.1:3000 11 1507 1 2025-08-24 19:59:04.729 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47056 10 6452 1 2025-08-24 19:59:52.395 00:00:10.364 TCP 23.104.0.1:39728 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:00:04.943 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56832 10 6452 1 2025-08-24 20:00:52.796 00:00:10.375 TCP 23.104.0.1:59484 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:01:05.176 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53468 10 6452 1 2025-08-24 19:57:16.990 00:05:00.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 20:01:53.211 00:00:10.395 TCP 23.104.0.1:45016 -> 1.101.0.1:3000 15 1926 1 2025-08-24 20:02:05.351 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:33620 12 10367 1 2025-08-24 19:58:16.987 00:05:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 20:02:56.847 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:02:56.748 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 20:02:53.645 00:00:10.324 TCP 23.104.0.1:55672 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:03:05.600 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:58910 10 6452 1 2025-08-24 20:03:54.006 00:00:10.362 TCP 23.104.0.1:51032 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:04:05.851 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35318 10 6452 1 2025-08-24 20:04:54.403 00:00:10.318 TCP 23.104.0.1:37360 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:05:06.032 00:00:10.665 TCP 1.101.0.1:3000 -> 22.102.0.1:40888 10 6452 1 2025-08-24 20:05:54.759 00:00:10.372 TCP 23.104.0.1:55840 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:06:06.730 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38880 10 6452 1 2025-08-24 20:06:55.174 00:00:10.366 TCP 23.104.0.1:38676 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:03:16.991 00:05:00.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 20:07:06.944 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54222 10 6452 1 2025-08-24 20:07:56.668 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:07:56.701 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 20:07:55.578 00:00:10.367 TCP 23.104.0.1:56990 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:08:07.175 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50572 10 6452 1 2025-08-24 20:04:16.989 00:05:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 20:08:55.990 00:00:10.365 TCP 23.104.0.1:50078 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:09:07.392 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33582 10 6452 1 2025-08-24 20:09:56.393 00:00:10.367 TCP 23.104.0.1:54318 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:10:07.602 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:38664 10 6452 1 2025-08-24 20:10:56.795 00:00:10.339 TCP 23.104.0.1:46220 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:11:07.833 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54778 10 6452 1 2025-08-24 20:11:57.174 00:00:10.397 TCP 23.104.0.1:43140 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:12:08.076 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33028 10 6452 1 2025-08-24 20:12:56.892 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:12:57.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 20:12:57.611 00:00:10.366 TCP 23.104.0.1:50818 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:13:08.291 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34168 10 6452 1 2025-08-24 20:09:16.993 00:05:00.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 20:13:58.018 00:00:10.319 TCP 23.104.0.1:58224 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:10:16.991 00:05:00.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 20:14:08.503 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38960 10 6452 1 2025-08-24 20:14:58.376 00:00:10.337 TCP 23.104.0.1:46064 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:15:08.715 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44544 10 6452 1 2025-08-24 20:15:58.764 00:00:10.381 TCP 23.104.0.1:48626 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:16:08.931 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45304 10 6452 1 2025-08-24 20:16:59.178 00:00:10.324 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:17:09.167 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38598 10 6452 1 2025-08-24 20:17:56.919 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:17:57.062 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 20:17:59.539 00:00:10.365 TCP 23.104.0.1:49276 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:18:09.344 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49336 10 6452 1 2025-08-24 20:18:59.947 00:00:10.368 TCP 23.104.0.1:38602 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:15:16.995 00:05:00.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 20:19:09.559 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36202 10 6452 1 2025-08-24 20:20:00.352 00:00:10.367 TCP 23.104.0.1:46154 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:16:16.992 00:05:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 20:20:09.785 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57854 10 6452 1 2025-08-24 20:21:00.761 00:00:10.374 TCP 23.104.0.1:38154 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:21:10.003 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40660 10 6452 1 2025-08-24 20:22:01.174 00:00:10.363 TCP 23.104.0.1:60408 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:22:10.210 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53558 10 6452 1 2025-08-24 20:22:56.962 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 20:22:57.091 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:23:01.577 00:00:10.360 TCP 23.104.0.1:37562 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:23:10.431 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60256 10 6452 1 2025-08-24 20:24:01.973 00:00:10.372 TCP 23.104.0.1:46270 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:24:10.652 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44688 10 6452 1 2025-08-24 20:25:02.384 00:00:10.363 TCP 23.104.0.1:40926 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:21:16.995 00:05:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 20:25:10.860 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60748 10 6452 1 2025-08-24 20:26:02.791 00:00:10.330 TCP 23.104.0.1:36602 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:26:11.089 00:00:10.492 TCP 1.101.0.1:3000 -> 22.102.0.1:39572 10 6452 1 2025-08-24 20:22:16.992 00:05:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 20:27:03.154 00:00:10.369 TCP 23.104.0.1:38878 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:27:11.622 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53500 10 6452 1 2025-08-24 20:27:57.155 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:27:57.121 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 20:28:03.562 00:00:10.372 TCP 23.104.0.1:41852 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:28:11.836 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:43636 10 6452 1 2025-08-24 20:29:03.973 00:00:10.369 TCP 23.104.0.1:39304 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:29:12.003 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54014 10 6452 1 2025-08-24 20:30:04.382 00:00:10.708 TCP 23.104.0.1:58372 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:30:12.222 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50308 10 6452 1 2025-08-24 20:31:05.127 00:00:10.320 TCP 23.104.0.1:59352 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:27:16.996 00:05:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 20:31:12.440 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36570 10 6452 1 2025-08-24 20:32:05.490 00:00:10.361 TCP 23.104.0.1:54010 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:28:16.998 00:05:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 20:32:12.658 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33674 10 6452 1 2025-08-24 20:32:57.180 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:32:57.314 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 20:33:05.889 00:00:10.370 TCP 23.104.0.1:45112 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:33:12.871 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45638 10 6452 1 2025-08-24 20:34:06.306 00:00:10.361 TCP 23.104.0.1:53678 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:34:13.099 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52992 10 6452 1 2025-08-24 20:35:06.704 00:00:10.369 TCP 23.104.0.1:55278 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:35:13.308 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53088 10 6452 1 2025-08-24 20:36:07.116 00:00:10.361 TCP 23.104.0.1:34316 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:36:13.526 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36100 10 6452 1 2025-08-24 20:37:07.519 00:00:10.324 TCP 23.104.0.1:34568 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:33:16.997 00:05:00.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 20:37:13.742 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53756 10 6452 1 2025-08-24 20:37:57.148 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:37:57.355 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 20:38:07.882 00:00:10.390 TCP 23.104.0.1:40242 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:34:16.994 00:05:00.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 20:38:13.920 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33102 10 6452 1 2025-08-24 20:39:08.312 00:00:10.325 TCP 23.104.0.1:37378 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:39:14.131 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33694 10 6452 1 2025-08-24 20:40:08.675 00:00:10.322 TCP 23.104.0.1:35344 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:40:14.347 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45644 10 6452 1 2025-08-24 20:41:09.033 00:00:10.748 TCP 23.104.0.1:60006 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:41:14.555 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34394 10 6452 1 2025-08-24 20:42:09.820 00:00:10.369 TCP 23.104.0.1:52092 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:42:14.770 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36500 10 6452 1 2025-08-24 20:42:57.152 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 20:42:57.582 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:39:16.997 00:05:00.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 20:43:10.225 00:00:10.622 TCP 23.104.0.1:54822 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:43:14.980 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43486 10 6452 1 2025-08-24 20:40:16.996 00:05:00.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 20:44:10.880 00:00:10.368 TCP 23.104.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:44:15.206 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58834 10 6452 1 2025-08-24 20:45:11.285 00:00:10.387 TCP 23.104.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:45:15.418 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60380 10 6452 1 2025-08-24 20:46:15.629 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51078 10 6452 1 2025-08-24 20:46:11.721 00:00:10.368 TCP 23.104.0.1:54838 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:47:15.839 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52850 10 6452 1 2025-08-24 20:47:12.130 00:00:10.365 TCP 23.104.0.1:51768 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:47:57.508 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:47:57.275 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 20:48:12.534 00:00:10.371 TCP 23.104.0.1:45704 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:48:16.076 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46744 10 6452 1 2025-08-24 20:45:16.999 00:05:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 20:49:12.946 00:00:10.377 TCP 23.104.0.1:53694 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:49:16.307 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58540 10 6452 1 2025-08-24 20:46:16.996 00:05:00.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 20:50:13.364 00:00:10.362 TCP 23.104.0.1:38980 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:50:16.526 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50490 10 6452 1 2025-08-24 20:51:16.755 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-08-24 20:51:13.763 00:00:10.376 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:52:14.179 00:00:10.370 TCP 23.104.0.1:52640 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:52:16.977 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:45692 10 6452 1 2025-08-24 20:52:57.707 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 20:52:57.676 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:53:14.586 00:00:10.371 TCP 23.104.0.1:33734 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:53:17.164 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56718 10 6452 1 2025-08-24 20:54:14.988 00:00:10.370 TCP 23.104.0.1:42392 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:54:17.373 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50598 10 6452 1 2025-08-24 20:55:15.393 00:00:10.368 TCP 23.104.0.1:58640 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:55:17.576 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46132 10 6452 1 2025-08-24 20:51:17.000 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-24 20:52:16.997 00:05:00.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 20:56:15.805 00:00:10.364 TCP 23.104.0.1:58724 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:56:17.759 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:59816 10 6452 1 2025-08-24 20:57:16.217 00:00:10.364 TCP 23.104.0.1:51932 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:57:17.946 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51924 10 6452 1 2025-08-24 20:57:57.970 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 20:57:57.855 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:58:16.624 00:00:10.358 TCP 23.104.0.1:44290 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:58:18.177 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:39914 10 6452 1 Summary: total flows: 164, total bytes: 502805, total packets: 1580, avg bps: 1095, avg pps: 0, avg bpp: 318 Time window: 2025-08-24 19:57:16 - 2025-08-24 20:58:28 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0000s Wall: 0.0021s flows/second: 77874.5 Runtime: 0.0021s