Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 16:58:50.761 00:00:10.327 TCP 23.104.0.1:53920 -> 1.101.0.1:3000 11 1507 1 2025-08-25 16:59:02.435 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41672 10 6452 1 2025-08-25 16:59:51.134 00:00:10.363 TCP 23.104.0.1:51990 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:00:02.650 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38700 10 6452 1 2025-08-25 17:00:51.533 00:00:10.370 TCP 23.104.0.1:38616 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:01:02.873 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41804 10 6452 1 2025-08-25 16:56:17.607 00:06:00.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 16:56:17.610 00:06:00.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 17:01:51.935 00:00:10.371 TCP 23.104.0.1:36584 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:02:03.104 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:45482 10 6452 1 2025-08-25 17:02:52.344 00:00:10.371 TCP 23.104.0.1:37730 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:03:03.286 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60182 10 6452 1 2025-08-25 17:03:22.270 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 17:03:22.174 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 17:03:52.755 00:00:10.377 TCP 23.104.0.1:50354 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:04:03.460 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50706 10 6452 1 2025-08-25 17:04:53.177 00:00:10.364 TCP 23.104.0.1:59796 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:05:03.674 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58608 10 6452 1 2025-08-25 17:05:53.583 00:00:10.363 TCP 23.104.0.1:34510 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:06:03.845 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47874 10 6452 1 2025-08-25 17:06:53.985 00:00:10.369 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:07:04.079 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51524 10 6452 1 2025-08-25 17:07:54.399 00:00:10.323 TCP 23.104.0.1:38706 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:08:04.291 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58664 10 6452 1 2025-08-25 17:03:17.612 00:06:00.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 17:03:17.615 00:06:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 17:08:22.260 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 17:08:22.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 17:08:54.760 00:00:10.380 TCP 23.104.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:09:04.501 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56284 10 6452 1 2025-08-25 17:09:55.181 00:00:10.323 TCP 23.104.0.1:50944 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:10:04.671 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45952 10 6452 1 2025-08-25 17:10:55.544 00:00:10.324 TCP 23.104.0.1:39656 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:11:04.881 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48974 10 6452 1 2025-08-25 17:11:55.906 00:00:10.362 TCP 23.104.0.1:57224 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:12:05.080 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41370 10 6452 1 2025-08-25 17:12:56.310 00:00:10.372 TCP 23.104.0.1:38000 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:13:05.251 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34968 10 6452 1 2025-08-25 17:13:22.236 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 17:13:22.249 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 17:13:56.717 00:00:10.369 TCP 23.104.0.1:35650 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:14:05.428 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38718 10 6452 1 2025-08-25 17:14:57.124 00:00:10.362 TCP 23.104.0.1:42772 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:15:05.641 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60364 10 6452 1 2025-08-25 17:10:17.617 00:06:00.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 17:10:17.619 00:06:00.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 17:15:57.526 00:00:10.363 TCP 23.104.0.1:41490 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:16:05.853 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2025-08-25 17:16:57.928 00:00:10.372 TCP 23.104.0.1:44938 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:17:06.083 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49878 10 6452 1 2025-08-25 17:17:58.338 00:00:10.362 TCP 23.104.0.1:57304 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:18:06.254 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 10 6452 1 2025-08-25 17:18:22.282 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 17:18:22.421 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 17:18:58.738 00:00:10.327 TCP 23.104.0.1:45928 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:19:06.436 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47038 10 6452 1 2025-08-25 17:19:59.106 00:00:10.376 TCP 23.104.0.1:51094 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:20:06.607 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57176 10 6452 1 2025-08-25 17:20:59.527 00:00:10.364 TCP 23.104.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:21:06.821 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42456 10 6452 1 2025-08-25 17:21:59.930 00:00:10.375 TCP 23.104.0.1:37072 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:17:17.632 00:06:00.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 17:22:07.058 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 10 6452 1 2025-08-25 17:17:17.636 00:06:00.090 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 17:23:00.340 00:00:10.364 TCP 23.104.0.1:45994 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:23:07.278 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50228 10 6452 1 2025-08-25 17:23:22.350 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 17:23:22.448 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 17:24:00.744 00:00:10.362 TCP 23.104.0.1:54536 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:24:07.453 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36804 10 6452 1 2025-08-25 17:25:01.151 00:00:10.368 TCP 23.104.0.1:47454 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:25:07.691 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41904 10 6452 1 2025-08-25 17:26:01.557 00:00:10.364 TCP 23.104.0.1:56120 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:26:07.904 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:45586 10 6452 1 2025-08-25 17:27:01.961 00:00:10.398 TCP 23.104.0.1:58770 -> 1.101.0.1:3000 15 1926 1 2025-08-25 17:27:08.085 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:42528 12 10365 1 2025-08-25 17:28:02.396 00:00:10.370 TCP 23.104.0.1:53882 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:28:22.649 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 17:28:08.322 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:33410 10 6452 1 2025-08-25 17:28:22.234 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 17:29:02.814 00:00:10.651 TCP 23.104.0.1:40484 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:29:08.560 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42184 10 6452 1 2025-08-25 17:24:17.626 00:06:00.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 17:24:17.629 00:06:00.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 17:30:03.505 00:00:10.362 TCP 23.104.0.1:52328 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:30:08.734 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37690 10 6452 1 2025-08-25 17:31:03.906 00:00:10.361 TCP 23.104.0.1:58528 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:31:08.905 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47264 10 6452 1 2025-08-25 17:32:04.305 00:00:10.322 TCP 23.104.0.1:34842 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:32:09.087 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33216 10 6452 1 2025-08-25 17:33:04.668 00:00:10.364 TCP 23.104.0.1:35314 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:33:09.304 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51606 10 6452 1 2025-08-25 17:33:22.642 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 17:33:22.569 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 17:34:05.096 00:00:10.364 TCP 23.104.0.1:39304 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:34:09.518 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34426 10 6452 1 2025-08-25 17:35:05.496 00:00:10.324 TCP 23.104.0.1:42280 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:35:09.732 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57560 10 6452 1 2025-08-25 17:36:05.860 00:00:10.368 TCP 23.104.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:31:17.629 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 17:36:09.945 00:00:11.366 TCP 1.101.0.1:3000 -> 22.102.0.1:47982 10 6452 1 2025-08-25 17:31:17.626 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 17:37:06.267 00:00:10.363 TCP 23.104.0.1:40660 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:37:11.361 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44156 10 6452 1 2025-08-25 17:38:06.669 00:00:10.324 TCP 23.104.0.1:46908 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:38:11.535 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33938 10 6452 1 2025-08-25 17:38:22.664 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 17:38:22.745 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 17:39:11.747 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45476 10 6452 1 2025-08-25 17:39:07.032 00:00:10.320 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:40:07.393 00:00:10.360 TCP 23.104.0.1:40676 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:40:11.961 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43518 10 6452 1 2025-08-25 17:41:07.789 00:00:10.370 TCP 23.104.0.1:57086 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:41:12.178 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37332 10 6452 1 2025-08-25 17:42:08.208 00:00:10.439 TCP 23.104.0.1:37466 -> 1.101.0.1:3000 15 1926 1 2025-08-25 17:42:12.390 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:47554 12 10365 1 2025-08-25 17:38:17.629 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 17:43:12.636 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37684 10 6452 1 2025-08-25 17:43:23.009 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 17:43:08.691 00:00:10.359 TCP 23.104.0.1:60812 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:38:17.632 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 17:43:22.784 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 17:44:09.105 00:00:10.365 TCP 23.104.0.1:42386 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:44:12.809 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40590 10 6452 1 2025-08-25 17:45:09.508 00:00:10.366 TCP 23.104.0.1:40858 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:45:13.040 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36922 10 6452 1 2025-08-25 17:46:09.921 00:00:10.341 TCP 23.104.0.1:44724 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:46:13.254 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44606 10 6452 1 2025-08-25 17:47:10.303 00:00:10.917 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:47:13.428 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58558 10 6452 1 2025-08-25 17:48:11.257 00:00:10.361 TCP 23.104.0.1:48156 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:48:13.642 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46976 10 6452 1 2025-08-25 17:48:22.872 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 17:48:22.924 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 17:49:11.661 00:00:10.363 TCP 23.104.0.1:44406 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:49:13.853 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51328 10 6452 1 2025-08-25 17:45:17.635 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 17:45:17.633 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 17:50:12.089 00:00:10.316 TCP 23.104.0.1:48588 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:50:14.081 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46358 10 6452 1 2025-08-25 17:51:12.444 00:00:10.370 TCP 23.104.0.1:45184 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:51:14.296 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-08-25 17:52:14.517 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39624 10 6452 1 2025-08-25 17:52:12.846 00:00:10.387 TCP 23.104.0.1:41222 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:53:23.106 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 17:53:13.270 00:00:10.367 TCP 23.104.0.1:50538 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:53:14.693 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43344 10 6452 1 2025-08-25 17:53:22.858 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 17:54:13.677 00:00:10.322 TCP 23.104.0.1:46340 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:54:14.866 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34980 10 6452 1 2025-08-25 17:55:14.044 00:00:10.361 TCP 23.104.0.1:49340 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:55:15.086 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54856 10 6452 1 2025-08-25 17:56:14.444 00:00:10.327 TCP 23.104.0.1:35586 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:56:15.297 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39914 10 6452 1 2025-08-25 17:52:17.634 00:06:00.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 17:52:17.636 00:06:00.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 17:57:14.808 00:00:10.366 TCP 23.104.0.1:60850 -> 1.101.0.1:3000 11 1507 1 2025-08-25 17:57:15.505 00:00:10.475 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6452 1 2025-08-25 17:58:23.044 00:00:00.049 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 17:58:16.029 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40710 10 6452 1 2025-08-25 17:58:22.896 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 17:58:15.216 00:00:10.338 TCP 23.104.0.1:39014 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 507750, total packets: 1596, avg bps: 1089, avg pps: 0, avg bpp: 318 Time window: 2025-08-25 16:56:17 - 2025-08-25 17:58:26 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0035s User: 0.0018s Wall: 0.0027s flows/second: 59713.3 Runtime: 0.0027s