Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-11 02:58:48.577 00:00:10.367 TCP 23.104.0.1:43676 -> 1.101.0.1:3000 11 1507 1 2025-08-11 02:55:09.454 00:05:00.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 02:59:18.560 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56208 10 6452 1 2025-08-11 02:59:48.984 00:00:10.374 TCP 23.104.0.1:36772 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:00:18.772 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54600 10 6452 1 2025-08-11 03:00:49.403 00:00:10.323 TCP 23.104.0.1:52636 -> 1.101.0.1:3000 11 1507 1 2025-08-11 02:57:09.458 00:05:00.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 03:01:20.607 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 03:01:20.652 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 03:01:18.985 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:43118 10 6452 1 2025-08-11 03:01:49.759 00:00:10.379 TCP 23.104.0.1:41412 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:02:19.172 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55862 10 6452 1 2025-08-11 03:02:50.176 00:00:10.371 TCP 23.104.0.1:53086 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:03:19.384 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56978 10 6452 1 2025-08-11 03:03:50.585 00:00:10.324 TCP 23.104.0.1:52858 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:04:19.555 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50578 10 6452 1 2025-08-11 03:04:50.951 00:00:10.366 TCP 23.104.0.1:38908 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:01:09.457 00:05:00.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 03:05:19.770 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56564 10 6452 1 2025-08-11 03:05:51.356 00:00:10.326 TCP 23.104.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:06:20.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 03:06:21.034 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 03:06:19.984 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34622 10 6452 1 2025-08-11 03:06:51.724 00:00:10.368 TCP 23.104.0.1:51922 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:03:09.461 00:05:00.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 03:07:20.158 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37274 10 6452 1 2025-08-11 03:07:52.130 00:00:10.359 TCP 23.104.0.1:35300 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:08:20.370 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56390 10 6452 1 2025-08-11 03:08:52.525 00:00:10.362 TCP 23.104.0.1:36820 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:09:20.578 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59210 10 6452 1 2025-08-11 03:09:52.927 00:00:10.388 TCP 23.104.0.1:52472 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:10:20.750 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37148 10 6452 1 2025-08-11 03:10:53.356 00:00:10.322 TCP 23.104.0.1:44982 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:07:09.459 00:05:00.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 03:11:21.038 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 03:11:20.940 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 03:11:20.925 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51250 10 6452 1 2025-08-11 03:11:53.713 00:00:10.435 TCP 23.104.0.1:36070 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:12:21.133 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38528 10 6452 1 2025-08-11 03:12:54.192 00:00:10.366 TCP 23.104.0.1:40370 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:09:09.462 00:05:00.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 03:13:21.349 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46362 10 6452 1 2025-08-11 03:13:54.600 00:00:10.360 TCP 23.104.0.1:52972 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:14:21.562 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53754 10 6452 1 2025-08-11 03:14:54.997 00:00:10.366 TCP 23.104.0.1:38712 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:15:21.775 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55608 10 6452 1 2025-08-11 03:15:55.399 00:00:10.362 TCP 23.104.0.1:57384 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:16:21.200 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 03:16:21.065 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 03:16:21.987 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60066 10 6452 1 2025-08-11 03:16:55.798 00:00:10.365 TCP 23.104.0.1:34368 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:13:09.460 00:05:00.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 03:17:22.226 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36324 10 6452 1 2025-08-11 03:17:56.209 00:00:10.323 TCP 23.104.0.1:43422 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:18:22.437 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40542 10 6452 1 2025-08-11 03:18:56.569 00:00:10.369 TCP 23.104.0.1:50726 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:15:09.463 00:05:00.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 03:19:22.651 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55170 10 6452 1 2025-08-11 03:19:56.974 00:00:10.420 TCP 23.104.0.1:41658 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:20:22.834 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41732 10 6452 1 2025-08-11 03:20:57.442 00:00:10.325 TCP 23.104.0.1:40258 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:21:20.878 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 03:21:21.081 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 03:21:23.065 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:42742 11 6504 1 2025-08-11 03:21:57.802 00:00:10.368 TCP 23.104.0.1:49904 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:22:23.332 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48034 10 6452 1 2025-08-11 03:22:58.204 00:00:10.362 TCP 23.104.0.1:44110 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:19:09.460 00:05:00.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 03:23:23.554 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38900 10 6452 1 2025-08-11 03:23:58.609 00:00:10.381 TCP 23.104.0.1:48916 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:24:23.781 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35806 10 6452 1 2025-08-11 03:24:59.067 00:00:10.370 TCP 23.104.0.1:55948 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:21:09.463 00:05:00.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 03:25:23.992 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6452 1 2025-08-11 03:25:59.477 00:00:10.331 TCP 23.104.0.1:35884 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:26:21.262 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 03:26:21.307 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 03:26:24.215 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38322 10 6452 1 2025-08-11 03:26:59.846 00:00:10.395 TCP 23.104.0.1:49758 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:27:24.429 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56828 10 6452 1 2025-08-11 03:28:00.274 00:00:10.367 TCP 23.104.0.1:36060 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:28:24.646 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47048 10 6452 1 2025-08-11 03:25:09.462 00:05:00.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 03:29:00.677 00:00:10.379 TCP 23.104.0.1:40914 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:29:24.856 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38332 10 6452 1 2025-08-11 03:30:01.110 00:00:10.365 TCP 23.104.0.1:42618 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:30:25.078 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45796 10 6452 1 2025-08-11 03:31:01.509 00:00:10.366 TCP 23.104.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:27:09.465 00:05:00.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 03:31:21.480 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 03:31:21.421 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 03:31:25.246 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52150 10 6452 1 2025-08-11 03:32:01.914 00:00:10.367 TCP 23.104.0.1:36970 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:32:25.459 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38452 10 6452 1 2025-08-11 03:33:02.318 00:00:10.371 TCP 23.104.0.1:35190 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:33:25.672 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40056 10 6452 1 2025-08-11 03:34:02.727 00:00:10.390 TCP 23.104.0.1:46750 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:34:25.888 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44514 10 6452 1 2025-08-11 03:31:09.463 00:05:00.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 03:35:03.157 00:00:10.321 TCP 23.104.0.1:50160 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:35:26.108 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51258 10 6452 1 2025-08-11 03:36:03.517 00:00:10.365 TCP 23.104.0.1:44464 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:36:21.544 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 03:36:21.487 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 03:36:26.320 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36564 10 6452 1 2025-08-11 03:33:09.466 00:05:00.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 03:37:03.930 00:00:10.369 TCP 23.104.0.1:54078 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:37:26.530 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 10 6452 1 2025-08-11 03:38:04.335 00:00:10.315 TCP 23.104.0.1:52488 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:38:26.748 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57060 10 6452 1 2025-08-11 03:39:04.693 00:00:10.323 TCP 23.104.0.1:53388 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:39:26.965 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53092 10 6452 1 2025-08-11 03:40:05.054 00:00:10.327 TCP 23.104.0.1:54276 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:40:27.180 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33814 10 6452 1 2025-08-11 03:37:09.464 00:05:00.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 03:41:05.420 00:00:10.366 TCP 23.104.0.1:42936 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:41:21.862 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 03:41:21.810 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 03:41:27.391 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53384 10 6452 1 2025-08-11 03:42:05.822 00:00:10.324 TCP 23.104.0.1:40716 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:42:27.606 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59486 10 6452 1 2025-08-11 03:39:09.467 00:05:00.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 03:43:06.189 00:00:10.364 TCP 23.104.0.1:43094 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:43:27.774 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50036 10 6452 1 2025-08-11 03:44:06.597 00:00:10.324 TCP 23.104.0.1:41156 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:44:27.986 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34660 10 6452 1 2025-08-11 03:45:06.960 00:00:10.324 TCP 23.104.0.1:54954 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:45:28.216 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44916 10 6452 1 2025-08-11 03:46:21.721 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 03:46:07.318 00:00:10.366 TCP 23.104.0.1:35328 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:46:21.711 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 03:46:28.432 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49472 10 6452 1 2025-08-11 03:43:09.466 00:05:00.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 03:47:07.727 00:00:10.374 TCP 23.104.0.1:39620 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:47:28.645 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48102 10 6452 1 2025-08-11 03:48:08.140 00:00:10.374 TCP 23.104.0.1:53860 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:48:28.867 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59080 10 6452 1 2025-08-11 03:45:09.468 00:05:00.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 03:49:08.556 00:00:10.323 TCP 23.104.0.1:54172 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:49:29.099 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53374 10 6452 1 2025-08-11 03:50:08.917 00:00:10.372 TCP 23.104.0.1:50754 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:50:29.315 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45426 12 6556 1 2025-08-11 03:51:21.780 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 03:51:09.329 00:00:10.362 TCP 23.104.0.1:34698 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:51:21.434 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 03:51:29.541 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41368 10 6452 1 2025-08-11 03:52:09.728 00:00:10.369 TCP 23.104.0.1:36932 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:52:29.722 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:56366 10 6452 1 2025-08-11 03:49:09.467 00:05:00.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 03:53:10.136 00:00:10.339 TCP 23.104.0.1:54022 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:53:29.929 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37390 10 6452 1 2025-08-11 03:54:10.507 00:00:10.326 TCP 23.104.0.1:57350 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:54:30.161 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42034 10 6452 1 2025-08-11 03:51:09.468 00:05:00.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 03:55:10.872 00:00:10.366 TCP 23.104.0.1:56908 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:55:30.375 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37244 10 6452 1 2025-08-11 03:56:11.281 00:00:10.366 TCP 23.104.0.1:49328 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:56:21.761 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 03:56:21.987 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 03:56:30.587 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33210 10 6452 1 2025-08-11 03:57:11.685 00:00:10.385 TCP 23.104.0.1:54834 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:57:30.759 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50028 10 6452 1 2025-08-11 03:58:12.119 00:00:10.343 TCP 23.104.0.1:47536 -> 1.101.0.1:3000 11 1507 1 2025-08-11 03:58:30.928 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:57902 10 6452 1 Summary: total flows: 164, total bytes: 498504, total packets: 1575, avg bps: 1046, avg pps: 0, avg bpp: 316 Time window: 2025-08-11 02:55:09 - 2025-08-11 03:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0023s User: 0.0023s Wall: 0.0023s flows/second: 72308.0 Runtime: 0.0023s