Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 06:59:28.993 00:00:10.331 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-08-09 06:59:36.496 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56878 10 6452 1 2025-08-09 06:56:08.510 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 07:00:27.741 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 07:00:27.754 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 07:00:29.368 00:00:10.527 TCP 23.104.0.1:59608 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:00:36.707 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41028 10 6452 1 2025-08-09 06:57:08.513 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 07:01:29.938 00:00:10.337 TCP 23.104.0.1:42114 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:01:36.925 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39010 10 6452 1 2025-08-09 07:02:30.314 00:00:10.368 TCP 23.104.0.1:47092 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:02:37.143 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42268 10 6452 1 2025-08-09 07:03:30.724 00:00:10.375 TCP 23.104.0.1:54330 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:03:37.351 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42424 10 6452 1 2025-08-09 07:04:31.138 00:00:10.363 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:04:37.560 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52038 10 6452 1 2025-08-09 07:05:27.790 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 07:05:27.910 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 07:05:31.543 00:00:10.362 TCP 23.104.0.1:52274 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:05:37.763 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51394 10 6452 1 2025-08-09 07:02:08.527 00:05:00.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 07:06:31.947 00:00:10.367 TCP 23.104.0.1:42366 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:06:37.977 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:53002 10 6452 1 2025-08-09 07:03:08.530 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 07:07:32.356 00:00:10.364 TCP 23.104.0.1:44782 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:07:38.227 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59378 10 6452 1 2025-08-09 07:08:32.767 00:00:10.457 TCP 23.104.0.1:52702 -> 1.101.0.1:3000 15 1926 1 2025-08-09 07:08:38.445 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:60758 12 10365 1 2025-08-09 07:09:33.262 00:00:10.325 TCP 23.104.0.1:49668 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:09:38.646 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59842 10 6452 1 2025-08-09 07:10:27.889 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 07:10:28.365 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 07:10:33.625 00:00:10.372 TCP 23.104.0.1:55572 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:10:38.859 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50506 10 6452 1 2025-08-09 07:11:34.051 00:00:10.319 TCP 23.104.0.1:44314 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:11:39.042 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43198 10 6452 1 2025-08-09 07:08:08.527 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 07:12:34.409 00:00:10.378 TCP 23.104.0.1:32996 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:12:39.254 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59664 10 6452 1 2025-08-09 07:09:08.530 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 07:13:34.826 00:00:10.341 TCP 23.104.0.1:53342 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:13:39.472 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41578 10 6452 1 2025-08-09 07:14:35.209 00:00:10.331 TCP 23.104.0.1:57920 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:14:39.687 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46816 10 6452 1 2025-08-09 07:15:28.175 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 07:15:28.121 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 07:15:35.586 00:00:10.365 TCP 23.104.0.1:49194 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:15:39.901 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:39064 10 6452 1 2025-08-09 07:16:35.992 00:00:10.378 TCP 23.104.0.1:60854 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:16:40.101 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55138 10 6452 1 2025-08-09 07:17:36.413 00:00:10.329 TCP 23.104.0.1:50532 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:17:40.316 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56014 10 6452 1 2025-08-09 07:14:08.527 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 07:18:36.779 00:00:10.370 TCP 23.104.0.1:40102 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:18:40.535 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52568 10 6452 1 2025-08-09 07:15:08.531 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 07:19:40.715 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57188 10 6452 1 2025-08-09 07:19:37.193 00:00:10.373 TCP 23.104.0.1:55140 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:20:28.259 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 07:20:28.474 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 07:20:40.928 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:51218 10 6452 1 2025-08-09 07:20:37.606 00:00:10.319 TCP 23.104.0.1:41260 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:21:37.965 00:00:10.326 TCP 23.104.0.1:45646 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:21:41.126 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36230 10 6452 1 2025-08-09 07:22:41.343 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42542 10 6452 1 2025-08-09 07:22:38.334 00:00:10.322 TCP 23.104.0.1:55672 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:23:41.575 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56770 10 6452 1 2025-08-09 07:23:38.691 00:00:10.362 TCP 23.104.0.1:44760 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:20:08.531 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 07:24:39.106 00:00:10.363 TCP 23.104.0.1:37966 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:24:41.750 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33546 10 6452 1 2025-08-09 07:21:08.533 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 07:25:28.335 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 07:25:28.174 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 07:25:39.509 00:00:10.371 TCP 23.104.0.1:36260 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:25:41.965 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39332 10 6452 1 2025-08-09 07:26:39.913 00:00:10.393 TCP 23.104.0.1:48460 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:26:42.145 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47700 10 6452 1 2025-08-09 07:27:40.330 00:00:10.367 TCP 23.104.0.1:45764 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:27:42.354 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-08-09 07:28:40.735 00:00:10.325 TCP 23.104.0.1:47358 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:28:42.564 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59728 10 6452 1 2025-08-09 07:29:41.108 00:00:10.367 TCP 23.104.0.1:46392 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:29:42.789 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39936 10 6452 1 2025-08-09 07:26:08.532 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 07:30:28.747 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 07:30:28.637 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 07:30:41.515 00:00:10.325 TCP 23.104.0.1:43714 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:30:43.001 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:37228 10 6452 1 2025-08-09 07:27:08.534 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 07:31:43.235 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40890 10 6452 1 2025-08-09 07:31:41.881 00:00:10.349 TCP 23.104.0.1:42274 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:32:42.269 00:00:11.221 TCP 23.104.0.1:57264 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:32:43.452 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51334 10 6452 1 2025-08-09 07:33:43.632 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37266 10 6452 1 2025-08-09 07:33:43.516 00:00:10.362 TCP 23.104.0.1:57952 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:34:43.843 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43204 10 6452 1 2025-08-09 07:34:43.919 00:00:10.348 TCP 23.104.0.1:52024 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:35:28.570 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 07:35:28.464 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 07:35:44.305 00:00:10.362 TCP 23.104.0.1:44968 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:35:44.077 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49430 10 6452 1 2025-08-09 07:32:08.532 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 07:36:44.255 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33112 10 6452 1 2025-08-09 07:36:44.704 00:00:10.367 TCP 23.104.0.1:51640 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:33:08.534 00:05:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 07:37:44.432 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52394 10 6452 1 2025-08-09 07:37:45.112 00:00:10.364 TCP 23.104.0.1:55302 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:38:45.514 00:00:10.368 TCP 23.104.0.1:41926 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:38:44.604 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53780 10 6452 1 2025-08-09 07:39:44.821 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47612 10 6452 1 2025-08-09 07:39:45.914 00:00:10.377 TCP 23.104.0.1:33218 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:40:28.469 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 07:40:28.821 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 07:40:46.326 00:00:10.327 TCP 23.104.0.1:56658 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:40:45.044 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37880 10 6452 1 2025-08-09 07:41:45.263 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56618 10 6452 1 2025-08-09 07:41:46.689 00:00:10.328 TCP 23.104.0.1:43838 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:38:08.532 00:05:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 07:42:45.435 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38516 10 6452 1 2025-08-09 07:42:47.063 00:00:10.369 TCP 23.104.0.1:46936 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:39:08.534 00:05:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 07:43:45.654 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33306 10 6452 1 2025-08-09 07:43:47.471 00:00:10.362 TCP 23.104.0.1:40798 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:44:45.871 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 10 6452 1 2025-08-09 07:44:47.869 00:00:10.363 TCP 23.104.0.1:48686 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:45:28.928 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 07:45:28.565 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 07:45:46.099 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 10 6452 1 2025-08-09 07:45:48.284 00:00:10.361 TCP 23.104.0.1:43990 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:46:46.317 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59128 10 6452 1 2025-08-09 07:46:48.686 00:00:10.365 TCP 23.104.0.1:39412 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:47:46.491 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34670 10 6452 1 2025-08-09 07:47:49.110 00:00:10.373 TCP 23.104.0.1:51128 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:44:08.534 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 07:48:46.714 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33442 10 6452 1 2025-08-09 07:48:49.537 00:00:10.366 TCP 23.104.0.1:50098 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:45:08.537 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 07:49:49.945 00:00:10.339 TCP 23.104.0.1:58380 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:49:46.881 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59390 10 6452 1 2025-08-09 07:50:28.879 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 07:50:29.010 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 07:50:50.327 00:00:10.363 TCP 23.104.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:50:47.098 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57848 10 6452 1 2025-08-09 07:51:47.310 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41582 10 6452 1 2025-08-09 07:51:50.727 00:00:10.369 TCP 23.104.0.1:34908 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:52:47.524 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:48478 10 6452 1 2025-08-09 07:52:51.139 00:00:10.361 TCP 23.104.0.1:48808 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:53:47.727 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41070 10 6452 1 2025-08-09 07:53:51.538 00:00:10.555 TCP 23.104.0.1:49374 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:50:08.534 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 07:54:47.943 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36520 10 6452 1 2025-08-09 07:54:52.131 00:00:10.365 TCP 23.104.0.1:52034 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:51:08.538 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 07:55:29.142 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 07:55:29.213 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 07:55:48.172 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40834 10 6452 1 2025-08-09 07:55:52.530 00:00:10.383 TCP 23.104.0.1:44002 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:56:48.388 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51526 10 6452 1 2025-08-09 07:56:52.934 00:00:10.345 TCP 23.104.0.1:38260 -> 1.101.0.1:3000 11 1507 1 2025-08-09 07:57:48.599 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53214 10 6452 1 2025-08-09 07:57:53.314 00:00:10.363 TCP 23.104.0.1:40276 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494721, total packets: 1557, avg bps: 1065, avg pps: 0, avg bpp: 317 Time window: 2025-08-09 06:56:08 - 2025-08-09 07:58:03 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0008s User: 0.0031s Wall: 0.0022s flows/second: 74381.7 Runtime: 0.0022s