Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 00:58:54.365 00:00:10.364 TCP 23.104.0.1:36856 -> 1.101.0.1:3000 11 1507 1 2025-08-12 00:55:09.882 00:05:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 00:59:41.655 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49650 10 6452 1 2025-08-12 00:59:54.768 00:00:10.384 TCP 23.104.0.1:46964 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:00:41.872 00:00:10.462 TCP 1.101.0.1:3000 -> 22.102.0.1:55134 10 6452 1 2025-08-12 01:00:55.194 00:00:10.336 TCP 23.104.0.1:59122 -> 1.101.0.1:3000 11 1507 1 2025-08-12 00:57:09.886 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 01:01:47.258 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 01:01:47.321 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 01:01:42.372 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38936 10 6452 1 2025-08-12 01:01:55.579 00:00:10.865 TCP 23.104.0.1:60748 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:02:42.580 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35414 10 6452 1 2025-08-12 01:02:56.496 00:00:10.330 TCP 23.104.0.1:58732 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:03:42.750 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54630 10 6452 1 2025-08-12 01:03:56.865 00:00:10.370 TCP 23.104.0.1:44678 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:04:42.966 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:51634 10 6452 1 2025-08-12 01:01:09.886 00:05:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 01:04:57.271 00:00:10.324 TCP 23.104.0.1:52878 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:05:43.162 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36322 10 6452 1 2025-08-12 01:05:57.633 00:00:10.422 TCP 23.104.0.1:35490 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:06:47.412 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 01:06:47.197 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 01:06:43.380 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47364 10 6452 1 2025-08-12 01:03:09.889 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 01:06:58.108 00:00:10.369 TCP 23.104.0.1:48640 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:07:43.555 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49852 10 6452 1 2025-08-12 01:07:58.515 00:00:10.370 TCP 23.104.0.1:59420 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:08:43.769 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41898 10 6452 1 2025-08-12 01:08:58.920 00:00:10.380 TCP 23.104.0.1:44990 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:09:43.988 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56510 10 6452 1 2025-08-12 01:09:59.343 00:00:10.362 TCP 23.104.0.1:49310 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:10:44.221 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37654 10 6452 1 2025-08-12 01:10:59.747 00:00:10.325 TCP 23.104.0.1:36392 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:07:09.888 00:05:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 01:11:47.501 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 01:11:47.662 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 01:11:44.442 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-08-12 01:12:00.113 00:00:10.321 TCP 23.104.0.1:42580 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:12:44.645 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50454 10 6452 1 2025-08-12 01:13:00.479 00:00:10.364 TCP 23.104.0.1:60010 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:09:09.893 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 01:13:44.817 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-08-12 01:14:00.885 00:00:10.381 TCP 23.104.0.1:46644 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:14:45.052 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54450 10 6452 1 2025-08-12 01:15:01.305 00:00:10.358 TCP 23.104.0.1:49204 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:15:45.268 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51122 10 6452 1 2025-08-12 01:16:01.701 00:00:10.324 TCP 23.104.0.1:55886 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:16:47.516 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 01:16:47.433 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 01:16:45.489 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48586 10 6452 1 2025-08-12 01:13:09.890 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 01:17:02.090 00:00:10.366 TCP 23.104.0.1:55362 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:17:45.659 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:34796 10 6452 1 2025-08-12 01:18:02.491 00:00:10.368 TCP 23.104.0.1:33388 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:18:45.844 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:54198 10 6452 1 2025-08-12 01:15:09.893 00:05:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 01:19:02.894 00:00:10.374 TCP 23.104.0.1:53586 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:19:46.026 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37374 10 6452 1 2025-08-12 01:20:03.307 00:00:10.332 TCP 23.104.0.1:45370 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:20:46.235 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35556 10 6452 1 2025-08-12 01:21:03.679 00:00:10.367 TCP 23.104.0.1:51804 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:21:47.439 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 01:21:47.514 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 01:21:46.443 00:00:10.457 TCP 1.101.0.1:3000 -> 22.102.0.1:58680 10 6452 1 2025-08-12 01:22:04.109 00:00:10.415 TCP 23.104.0.1:39810 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:22:46.936 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:50308 10 6452 1 2025-08-12 01:19:09.892 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 01:23:04.560 00:00:10.369 TCP 23.104.0.1:55470 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:23:47.174 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53972 10 6452 1 2025-08-12 01:24:04.968 00:00:10.376 TCP 23.104.0.1:35210 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:24:47.395 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53358 10 6452 1 2025-08-12 01:21:09.895 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 01:25:05.385 00:00:10.368 TCP 23.104.0.1:44950 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:25:47.613 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45852 10 6452 1 2025-08-12 01:26:05.794 00:00:10.377 TCP 23.104.0.1:53798 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:26:47.669 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 01:26:47.727 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 01:26:47.824 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41486 10 6452 1 2025-08-12 01:27:06.220 00:00:10.367 TCP 23.104.0.1:35892 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:27:48.075 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45572 10 6452 1 2025-08-12 01:28:06.629 00:00:10.321 TCP 23.104.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:28:48.294 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47854 10 6452 1 2025-08-12 01:25:09.893 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 01:29:06.992 00:00:10.403 TCP 23.104.0.1:50472 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:29:48.513 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34188 10 6452 1 2025-08-12 01:30:07.462 00:00:10.362 TCP 23.104.0.1:58286 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:30:48.731 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43070 10 6452 1 2025-08-12 01:27:09.896 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 01:31:07.864 00:00:10.417 TCP 23.104.0.1:44300 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:31:47.795 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 01:31:47.864 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 01:31:48.950 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36014 10 6452 1 2025-08-12 01:32:08.326 00:00:10.366 TCP 23.104.0.1:42316 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:32:49.182 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49722 10 6452 1 2025-08-12 01:33:08.731 00:00:10.368 TCP 23.104.0.1:56856 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:33:49.390 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56390 10 6452 1 2025-08-12 01:34:09.139 00:00:10.376 TCP 23.104.0.1:55808 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:34:49.609 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46528 10 6452 1 2025-08-12 01:31:09.897 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 01:35:09.556 00:00:10.366 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:35:49.825 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33360 10 6452 1 2025-08-12 01:36:09.958 00:00:10.324 TCP 23.104.0.1:48110 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:36:47.609 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 01:36:48.230 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 01:36:50.078 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43498 10 6452 1 2025-08-12 01:33:09.907 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 01:37:10.316 00:00:10.326 TCP 23.104.0.1:39076 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:37:50.290 00:00:15.979 TCP 1.101.0.1:3000 -> 22.102.0.1:34138 10 6452 1 2025-08-12 01:38:10.678 00:00:10.370 TCP 23.104.0.1:44886 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:38:56.318 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39176 10 6452 1 2025-08-12 01:39:11.102 00:00:10.376 TCP 23.104.0.1:60058 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:39:56.531 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54030 10 6452 1 2025-08-12 01:40:11.523 00:00:10.363 TCP 23.104.0.1:59118 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:40:56.741 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37184 10 6452 1 2025-08-12 01:37:09.897 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 01:41:11.923 00:00:10.383 TCP 23.104.0.1:43316 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:41:48.131 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 01:41:47.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 01:41:56.910 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49022 10 6452 1 2025-08-12 01:42:12.344 00:00:10.365 TCP 23.104.0.1:51614 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:42:57.125 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38218 10 6452 1 2025-08-12 01:39:09.899 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 01:43:12.748 00:00:10.369 TCP 23.104.0.1:51896 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:43:57.347 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49150 10 6452 1 2025-08-12 01:44:13.154 00:00:10.364 TCP 23.104.0.1:48850 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:44:57.567 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41150 10 6452 1 2025-08-12 01:45:13.557 00:00:10.364 TCP 23.104.0.1:55588 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:45:57.781 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39694 10 6452 1 2025-08-12 01:46:13.962 00:00:10.326 TCP 23.104.0.1:34986 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:46:47.873 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 01:46:48.043 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 01:43:09.898 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 01:46:57.993 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:53534 10 6452 1 2025-08-12 01:47:14.325 00:00:10.385 TCP 23.104.0.1:44342 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:47:58.187 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59294 10 6452 1 2025-08-12 01:48:14.743 00:00:10.364 TCP 23.104.0.1:50894 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:48:58.407 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43188 10 6452 1 2025-08-12 01:45:09.901 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 01:49:15.145 00:00:10.334 TCP 23.104.0.1:40190 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:49:58.627 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48668 10 6452 1 2025-08-12 01:50:15.517 00:00:10.339 TCP 23.104.0.1:38564 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:50:58.809 00:00:13.677 TCP 1.101.0.1:3000 -> 22.102.0.1:49804 10 6452 1 2025-08-12 01:51:15.913 00:00:10.366 TCP 23.104.0.1:57260 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:51:48.184 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 01:51:48.408 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 01:52:02.531 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37282 10 6452 1 2025-08-12 01:52:16.320 00:00:10.511 TCP 23.104.0.1:44582 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:49:09.901 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 01:53:02.744 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42040 10 6452 1 2025-08-12 01:53:16.871 00:00:10.325 TCP 23.104.0.1:37688 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:54:02.965 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51212 10 6452 1 2025-08-12 01:54:17.230 00:00:10.368 TCP 23.104.0.1:52416 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:51:09.904 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 01:55:03.185 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52668 10 6452 1 2025-08-12 01:55:17.634 00:00:10.363 TCP 23.104.0.1:48816 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:56:03.404 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41470 10 6452 1 2025-08-12 01:56:18.036 00:00:10.320 TCP 23.104.0.1:44508 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:56:48.032 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 01:56:48.098 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 01:57:03.616 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54092 10 6452 1 2025-08-12 01:57:18.397 00:00:10.364 TCP 23.104.0.1:48708 -> 1.101.0.1:3000 11 1507 1 2025-08-12 01:58:03.788 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60056 10 6452 1 2025-08-12 01:58:18.805 00:00:10.366 TCP 23.104.0.1:48808 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 491896, total packets: 1562, avg bps: 1035, avg pps: 0, avg bpp: 314 Time window: 2025-08-12 00:55:09 - 2025-08-12 01:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0009s Wall: 0.0043s flows/second: 37977.5 Runtime: 0.0043s