Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-05 15:58:45.720 00:00:10.375 TCP 23.104.0.1:43898 -> 1.101.0.1:3000 11 1507 1 2025-08-05 15:58:45.916 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46962 10 6452 1 2025-08-05 15:55:06.764 00:05:00.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 15:59:46.127 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40564 10 6452 1 2025-08-05 15:59:46.132 00:00:10.323 TCP 23.104.0.1:49576 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:00:46.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51926 10 6452 1 2025-08-05 16:00:46.494 00:00:10.359 TCP 23.104.0.1:35954 -> 1.101.0.1:3000 11 1507 1 2025-08-05 15:57:06.767 00:05:00.588 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 16:01:46.510 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37788 10 6452 1 2025-08-05 16:01:46.894 00:00:10.381 TCP 23.104.0.1:34900 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:02:46.720 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33420 10 6452 1 2025-08-05 16:02:47.311 00:00:10.331 TCP 23.104.0.1:58734 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:03:43.275 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 16:03:42.837 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 16:03:46.960 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54022 12 6556 1 2025-08-05 16:03:47.686 00:00:10.371 TCP 23.104.0.1:46392 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:04:48.116 00:00:10.362 TCP 23.104.0.1:48864 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:04:47.188 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45886 10 6452 1 2025-08-05 16:01:06.765 00:05:00.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 16:05:48.515 00:00:10.326 TCP 23.104.0.1:53386 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:05:47.401 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48544 10 6452 1 2025-08-05 16:06:47.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40392 10 6452 1 2025-08-05 16:06:48.879 00:00:10.352 TCP 23.104.0.1:45388 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:03:06.768 00:05:00.588 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 16:07:47.839 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57222 10 6452 1 2025-08-05 16:07:49.271 00:00:10.373 TCP 23.104.0.1:53504 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:08:43.265 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 16:08:43.241 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 16:08:49.683 00:00:10.375 TCP 23.104.0.1:50950 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:08:48.014 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33424 10 6452 1 2025-08-05 16:09:50.108 00:00:10.367 TCP 23.104.0.1:40578 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:09:48.224 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34676 10 6452 1 2025-08-05 16:10:50.518 00:00:10.369 TCP 23.104.0.1:48220 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:10:48.402 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47728 10 6452 1 2025-08-05 16:07:06.767 00:05:00.592 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 16:11:50.930 00:00:10.389 TCP 23.104.0.1:46668 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:11:48.616 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50028 10 6452 1 2025-08-05 16:12:48.823 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34696 10 6452 1 2025-08-05 16:12:51.360 00:00:10.601 TCP 23.104.0.1:49558 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:09:06.769 00:05:00.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 16:13:43.798 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 16:13:43.297 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 16:13:49.047 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35396 10 6452 1 2025-08-05 16:13:51.996 00:00:10.364 TCP 23.104.0.1:42502 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:14:49.260 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58572 10 6452 1 2025-08-05 16:14:52.399 00:00:10.366 TCP 23.104.0.1:60042 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:15:49.481 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56054 10 6452 1 2025-08-05 16:15:52.811 00:00:10.359 TCP 23.104.0.1:36938 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:16:49.651 00:00:10.264 TCP 1.101.0.1:3000 -> 22.102.0.1:50622 10 6452 1 2025-08-05 16:16:53.209 00:00:10.326 TCP 23.104.0.1:59110 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:13:06.767 00:05:00.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 16:17:49.957 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:40484 10 6452 1 2025-08-05 16:17:53.575 00:00:10.361 TCP 23.104.0.1:48636 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:18:43.536 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 16:18:43.322 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 16:18:50.191 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33158 10 6452 1 2025-08-05 16:18:53.980 00:00:10.321 TCP 23.104.0.1:37004 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:15:06.769 00:05:00.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 16:19:50.412 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40836 10 6452 1 2025-08-05 16:19:54.344 00:00:10.325 TCP 23.104.0.1:35258 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:20:50.625 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52902 10 6452 1 2025-08-05 16:20:54.707 00:00:10.382 TCP 23.104.0.1:51108 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:21:50.839 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6452 1 2025-08-05 16:21:55.127 00:00:10.366 TCP 23.104.0.1:39294 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:22:51.088 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54794 10 6452 1 2025-08-05 16:22:55.530 00:00:10.367 TCP 23.104.0.1:45640 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:19:06.769 00:05:00.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 16:23:43.677 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 16:23:43.584 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 16:23:51.290 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46332 10 6452 1 2025-08-05 16:23:55.935 00:00:10.390 TCP 23.104.0.1:39108 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:24:51.502 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33996 10 6452 1 2025-08-05 16:24:56.364 00:00:10.376 TCP 23.104.0.1:44842 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:21:06.772 00:05:00.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 16:25:51.711 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35810 10 6452 1 2025-08-05 16:25:56.791 00:00:10.363 TCP 23.104.0.1:42560 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:26:51.890 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45504 10 6452 1 2025-08-05 16:26:57.191 00:00:10.369 TCP 23.104.0.1:46064 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:27:52.110 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34354 10 6452 1 2025-08-05 16:27:57.605 00:00:10.362 TCP 23.104.0.1:49132 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:28:43.674 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 16:28:43.449 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 16:28:52.325 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34004 10 6452 1 2025-08-05 16:25:06.770 00:05:00.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 16:28:58.005 00:00:10.364 TCP 23.104.0.1:37610 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:29:52.536 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33124 10 6452 1 2025-08-05 16:29:58.407 00:00:10.380 TCP 23.104.0.1:53938 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:30:52.756 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47062 10 6452 1 2025-08-05 16:30:58.824 00:00:10.354 TCP 23.104.0.1:51450 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:27:06.774 00:05:00.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 16:31:52.972 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:38894 13 6608 1 2025-08-05 16:31:59.212 00:00:10.372 TCP 23.104.0.1:34488 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:32:53.173 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6452 1 2025-08-05 16:32:59.622 00:00:10.323 TCP 23.104.0.1:59804 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:33:43.893 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 16:33:43.754 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 16:33:53.390 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42112 10 6452 1 2025-08-05 16:33:59.989 00:00:10.327 TCP 23.104.0.1:38070 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:34:53.561 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37440 10 6452 1 2025-08-05 16:35:00.373 00:00:10.368 TCP 23.104.0.1:51478 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:31:06.770 00:05:00.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 16:35:53.774 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38534 10 6452 1 2025-08-05 16:36:00.777 00:00:10.370 TCP 23.104.0.1:46130 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:36:53.987 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38136 10 6452 1 2025-08-05 16:33:06.772 00:05:00.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 16:37:01.188 00:00:10.367 TCP 23.104.0.1:42698 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:37:54.211 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59638 10 6452 1 2025-08-05 16:38:01.594 00:00:10.363 TCP 23.104.0.1:49840 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:38:43.609 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 16:38:43.889 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 16:38:54.426 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35914 10 6452 1 2025-08-05 16:39:01.997 00:00:10.364 TCP 23.104.0.1:53306 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:39:54.639 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-08-05 16:40:02.407 00:00:10.361 TCP 23.104.0.1:59874 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:40:54.806 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37342 10 6452 1 2025-08-05 16:37:06.771 00:05:00.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 16:41:02.808 00:00:10.367 TCP 23.104.0.1:60370 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:41:55.042 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41956 10 6452 1 2025-08-05 16:42:03.212 00:00:10.364 TCP 23.104.0.1:42164 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:42:55.266 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49436 10 6452 1 2025-08-05 16:39:06.774 00:05:00.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 16:43:03.620 00:00:10.363 TCP 23.104.0.1:49162 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:43:43.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 16:43:44.024 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 16:43:55.484 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48300 10 6452 1 2025-08-05 16:44:04.023 00:00:10.367 TCP 23.104.0.1:39184 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:44:55.707 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43120 10 6452 1 2025-08-05 16:45:04.428 00:00:10.367 TCP 23.104.0.1:57358 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:45:55.930 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:39618 10 6452 1 2025-08-05 16:46:04.833 00:00:10.347 TCP 23.104.0.1:59252 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:46:56.200 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59658 10 6452 1 2025-08-05 16:43:06.773 00:05:00.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 16:47:05.223 00:00:10.366 TCP 23.104.0.1:37064 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:47:56.418 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58520 10 6452 1 2025-08-05 16:48:05.630 00:00:10.382 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:48:44.060 00:00:00.051 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 16:48:44.205 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 16:48:56.642 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57704 10 6452 1 2025-08-05 16:45:06.774 00:05:00.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 16:49:06.061 00:00:10.361 TCP 23.104.0.1:41366 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:49:56.855 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35880 10 6452 1 2025-08-05 16:50:06.462 00:00:10.362 TCP 23.104.0.1:56174 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:50:57.037 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53108 10 6452 1 2025-08-05 16:51:06.866 00:00:10.368 TCP 23.104.0.1:59528 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:51:57.254 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40922 10 6452 1 2025-08-05 16:52:07.276 00:00:10.363 TCP 23.104.0.1:54876 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:52:57.475 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34696 10 6452 1 2025-08-05 16:49:06.774 00:05:00.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 16:53:07.679 00:00:10.366 TCP 23.104.0.1:43350 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:53:44.113 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 16:53:44.040 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 16:53:57.686 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41800 10 6452 1 2025-08-05 16:54:08.112 00:00:10.357 TCP 23.104.0.1:33156 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:51:06.777 00:05:00.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 16:54:57.899 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58404 10 6452 1 2025-08-05 16:55:08.513 00:00:10.364 TCP 23.104.0.1:50036 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:55:58.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59466 10 6452 1 2025-08-05 16:56:08.923 00:00:10.390 TCP 23.104.0.1:59892 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:56:58.323 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58834 10 6452 1 2025-08-05 16:57:09.366 00:00:10.366 TCP 23.104.0.1:60958 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:57:58.534 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34376 10 6452 1 2025-08-05 16:58:09.770 00:00:10.369 TCP 23.104.0.1:52126 -> 1.101.0.1:3000 11 1507 1 2025-08-05 16:58:44.257 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 16:58:44.301 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 164, total bytes: 498608, total packets: 1577, avg bps: 1044, avg pps: 0, avg bpp: 316 Time window: 2025-08-05 15:55:06 - 2025-08-05 16:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0018s Wall: 0.0026s flows/second: 63815.4 Runtime: 0.0026s