Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 14:58:42.547 00:00:10.379 TCP 23.104.0.1:49348 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:59:23.114 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55528 10 6452 1 2025-08-09 14:59:42.982 00:00:10.377 TCP 23.104.0.1:43142 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:56:08.695 00:05:00.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 15:00:23.287 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33094 10 6452 1 2025-08-09 15:00:37.520 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 15:00:37.549 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 15:00:43.401 00:00:10.364 TCP 23.104.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-08-09 14:57:08.698 00:05:00.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 15:01:23.500 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32910 10 6452 1 2025-08-09 15:01:43.807 00:00:10.334 TCP 23.104.0.1:58280 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:02:23.673 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47802 10 6452 1 2025-08-09 15:02:44.179 00:00:10.358 TCP 23.104.0.1:55210 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:03:23.882 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44154 10 6452 1 2025-08-09 15:03:44.575 00:00:10.366 TCP 23.104.0.1:33696 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:04:24.080 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44022 10 6452 1 2025-08-09 15:04:44.980 00:00:10.371 TCP 23.104.0.1:60920 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:05:24.248 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39100 10 6452 1 2025-08-09 15:05:37.639 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 15:05:37.323 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 15:05:45.394 00:00:10.366 TCP 23.104.0.1:35814 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:02:08.699 00:05:00.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 15:06:24.461 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57494 10 6452 1 2025-08-09 15:06:45.797 00:00:10.342 TCP 23.104.0.1:57308 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:03:08.702 00:05:00.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 15:07:24.676 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39542 10 6452 1 2025-08-09 15:07:46.175 00:00:10.371 TCP 23.104.0.1:36034 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:08:24.900 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:42632 10 6452 1 2025-08-09 15:08:46.584 00:00:10.366 TCP 23.104.0.1:47380 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:09:25.108 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38122 10 6452 1 2025-08-09 15:09:46.984 00:00:10.365 TCP 23.104.0.1:44112 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:10:25.321 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46204 10 6452 1 2025-08-09 15:10:37.972 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 15:10:37.690 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 15:10:47.387 00:00:10.368 TCP 23.104.0.1:55166 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:11:25.501 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:59048 10 6452 1 2025-08-09 15:11:47.796 00:00:10.375 TCP 23.104.0.1:44594 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:08:08.699 00:05:00.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 15:12:25.708 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53672 10 6452 1 2025-08-09 15:12:48.206 00:00:10.323 TCP 23.104.0.1:37802 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:09:08.702 00:05:00.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 15:13:25.915 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51822 10 6452 1 2025-08-09 15:13:48.566 00:00:10.322 TCP 23.104.0.1:40640 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:14:26.133 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37530 10 6452 1 2025-08-09 15:14:48.923 00:00:10.379 TCP 23.104.0.1:44556 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:15:26.349 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53546 10 6452 1 2025-08-09 15:15:37.956 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 15:15:37.928 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 15:15:49.342 00:00:10.357 TCP 23.104.0.1:58948 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:16:26.558 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47934 10 6452 1 2025-08-09 15:16:49.754 00:00:10.331 TCP 23.104.0.1:45444 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:17:26.768 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39254 10 6452 1 2025-08-09 15:17:50.119 00:00:10.327 TCP 23.104.0.1:60474 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:14:08.704 00:05:00.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 15:18:26.986 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:34026 10 6452 1 2025-08-09 15:18:50.483 00:00:10.330 TCP 23.104.0.1:48316 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:15:08.704 00:05:00.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 15:19:27.229 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53686 10 6452 1 2025-08-09 15:19:50.851 00:00:10.376 TCP 23.104.0.1:44134 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:20:37.731 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 15:20:27.441 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36810 10 6452 1 2025-08-09 15:20:37.941 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 15:20:51.267 00:00:10.363 TCP 23.104.0.1:55052 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:21:27.647 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48904 10 6452 1 2025-08-09 15:21:51.670 00:00:10.379 TCP 23.104.0.1:34282 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:22:27.858 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55608 10 6452 1 2025-08-09 15:22:52.113 00:00:10.339 TCP 23.104.0.1:48460 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:23:28.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37122 10 6452 1 2025-08-09 15:23:52.494 00:00:10.325 TCP 23.104.0.1:55614 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:20:08.705 00:05:00.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 15:24:28.300 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59086 10 6452 1 2025-08-09 15:24:52.854 00:00:10.374 TCP 23.104.0.1:60512 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:21:08.707 00:05:00.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 15:25:28.518 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51026 10 6452 1 2025-08-09 15:25:38.171 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 15:25:37.742 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 15:25:53.265 00:00:10.370 TCP 23.104.0.1:43176 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:26:28.732 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43894 10 6452 1 2025-08-09 15:26:53.672 00:00:10.364 TCP 23.104.0.1:54598 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:27:28.945 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46490 10 6452 1 2025-08-09 15:27:54.105 00:00:10.364 TCP 23.104.0.1:54138 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:28:29.182 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33098 10 6452 1 2025-08-09 15:28:54.510 00:00:10.443 TCP 23.104.0.1:46534 -> 1.101.0.1:3000 15 1926 1 2025-08-09 15:29:29.395 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:36750 12 10365 1 2025-08-09 15:29:55.008 00:00:10.372 TCP 23.104.0.1:34620 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:26:08.707 00:05:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 15:30:29.600 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52964 10 6452 1 2025-08-09 15:30:38.016 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 15:30:38.110 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 15:30:55.426 00:00:10.367 TCP 23.104.0.1:46976 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:27:08.708 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 15:31:29.769 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50682 10 6452 1 2025-08-09 15:31:55.830 00:00:10.393 TCP 23.104.0.1:38984 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:32:29.988 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35036 10 6452 1 2025-08-09 15:32:56.264 00:00:10.363 TCP 23.104.0.1:52080 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:33:30.223 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35578 10 6452 1 2025-08-09 15:33:56.669 00:00:10.333 TCP 23.104.0.1:40362 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:34:30.452 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48808 10 6452 1 2025-08-09 15:34:57.053 00:00:10.364 TCP 23.104.0.1:44094 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:35:38.256 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 15:35:30.669 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45428 10 6452 1 2025-08-09 15:35:38.213 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 15:35:57.455 00:00:10.375 TCP 23.104.0.1:39800 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:32:08.709 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 15:36:30.840 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50968 10 6452 1 2025-08-09 15:33:08.711 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 15:36:57.856 00:00:10.332 TCP 23.104.0.1:48584 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:37:31.099 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39724 10 6452 1 2025-08-09 15:37:58.227 00:00:10.366 TCP 23.104.0.1:53538 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:38:31.312 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51434 10 6452 1 2025-08-09 15:38:58.636 00:00:10.369 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:39:31.522 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49374 10 6452 1 2025-08-09 15:39:59.044 00:00:10.365 TCP 23.104.0.1:49644 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:40:38.180 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 15:40:31.701 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45118 10 6452 1 2025-08-09 15:40:38.319 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 15:40:59.448 00:00:10.364 TCP 23.104.0.1:57282 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:41:31.910 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43756 10 6452 1 2025-08-09 15:41:59.857 00:00:10.375 TCP 23.104.0.1:40938 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:38:08.709 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 15:42:32.123 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60188 10 6452 1 2025-08-09 15:43:00.269 00:00:10.362 TCP 23.104.0.1:55008 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:39:08.712 00:05:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 15:43:32.299 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45500 10 6452 1 2025-08-09 15:44:00.672 00:00:10.364 TCP 23.104.0.1:48008 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:44:32.486 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39876 10 6452 1 2025-08-09 15:45:01.103 00:00:10.370 TCP 23.104.0.1:49870 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:45:38.311 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 15:45:38.402 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 15:45:32.706 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52202 10 6452 1 2025-08-09 15:46:01.512 00:00:10.368 TCP 23.104.0.1:37782 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:46:32.876 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44774 12 6556 1 2025-08-09 15:47:01.918 00:00:10.321 TCP 23.104.0.1:58562 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:47:33.100 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49506 10 6452 1 2025-08-09 15:44:08.712 00:05:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 15:48:02.279 00:00:10.381 TCP 23.104.0.1:52160 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:48:33.312 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49918 10 6452 1 2025-08-09 15:45:08.715 00:05:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 15:49:02.697 00:00:10.377 TCP 23.104.0.1:45918 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:49:33.531 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37084 10 6452 1 2025-08-09 15:50:03.114 00:00:10.366 TCP 23.104.0.1:38662 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:50:38.405 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 15:50:38.584 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 15:50:33.739 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38510 10 6452 1 2025-08-09 15:51:03.522 00:00:10.365 TCP 23.104.0.1:51150 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:51:33.952 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46782 12 6556 1 2025-08-09 15:52:03.922 00:00:10.392 TCP 23.104.0.1:43778 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:52:34.178 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50004 10 6452 1 2025-08-09 15:53:04.353 00:00:10.361 TCP 23.104.0.1:32904 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:53:34.397 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54612 10 6452 1 2025-08-09 15:50:08.714 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 15:54:04.758 00:00:10.377 TCP 23.104.0.1:46360 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:54:34.617 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45390 10 6452 1 2025-08-09 15:51:08.718 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 15:55:05.180 00:00:10.365 TCP 23.104.0.1:45334 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:55:38.576 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 15:55:38.546 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 15:55:34.835 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55962 10 6452 1 2025-08-09 15:56:05.582 00:00:10.368 TCP 23.104.0.1:36312 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:56:35.076 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37866 10 6452 1 2025-08-09 15:57:05.987 00:00:10.369 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:57:35.288 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41682 10 6452 1 2025-08-09 15:58:06.394 00:00:10.364 TCP 23.104.0.1:39234 -> 1.101.0.1:3000 11 1507 1 2025-08-09 15:58:35.505 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45030 10 6452 1 Summary: total flows: 164, total bytes: 502888, total packets: 1582, avg bps: 1070, avg pps: 0, avg bpp: 317 Time window: 2025-08-09 14:56:08 - 2025-08-09 15:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0011s Wall: 0.0015s flows/second: 107546.3 Runtime: 0.0015s