Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 17:58:59.903 00:00:10.331 TCP 23.104.0.1:34706 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:59:04.204 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52104 10 6452 1 2025-08-12 17:56:10.255 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 18:00:00.273 00:00:10.369 TCP 23.104.0.1:54052 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:00:04.372 00:00:10.586 TCP 1.101.0.1:3000 -> 22.102.0.1:38658 10 6452 1 2025-08-12 18:01:00.680 00:00:10.369 TCP 23.104.0.1:49120 -> 1.101.0.1:3000 11 1507 1 2025-08-12 17:57:10.258 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 18:01:04.994 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42078 10 6452 1 2025-08-12 18:02:07.672 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 18:02:07.692 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 18:02:01.107 00:00:10.364 TCP 23.104.0.1:40436 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:02:05.211 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50238 10 6452 1 2025-08-12 18:03:01.513 00:00:10.368 TCP 23.104.0.1:59512 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:03:05.426 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:41692 10 6452 1 2025-08-12 18:04:05.613 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55808 10 6452 1 2025-08-12 18:04:01.919 00:00:10.394 TCP 23.104.0.1:37574 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:05:02.352 00:00:10.320 TCP 23.104.0.1:54392 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:05:05.825 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36868 10 6452 1 2025-08-12 18:02:10.257 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 18:06:06.058 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40030 10 6452 1 2025-08-12 18:06:02.711 00:00:10.380 TCP 23.104.0.1:46180 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:07:07.572 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 18:03:10.260 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 18:07:07.740 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 18:07:03.129 00:00:10.322 TCP 23.104.0.1:40696 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:07:06.229 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60652 10 6452 1 2025-08-12 18:08:06.443 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34964 10 6452 1 2025-08-12 18:08:03.490 00:00:10.362 TCP 23.104.0.1:54718 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:09:03.891 00:00:10.330 TCP 23.104.0.1:33708 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:09:06.615 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51860 10 6452 1 2025-08-12 18:10:06.794 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39380 10 6452 1 2025-08-12 18:10:04.257 00:00:10.362 TCP 23.104.0.1:56888 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:11:04.662 00:00:10.372 TCP 23.104.0.1:47346 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:11:06.972 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49686 10 6452 1 2025-08-12 18:12:08.053 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 18:08:10.260 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 18:12:07.906 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 18:12:05.129 00:00:10.362 TCP 23.104.0.1:45550 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:12:07.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42874 10 6452 1 2025-08-12 18:09:10.263 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 18:13:05.532 00:00:10.335 TCP 23.104.0.1:49460 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:13:07.432 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45832 10 6452 1 2025-08-12 18:14:05.907 00:00:10.334 TCP 23.104.0.1:40658 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:14:07.659 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:36402 10 6452 1 2025-08-12 18:15:06.277 00:00:10.365 TCP 23.104.0.1:46688 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:15:07.914 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41284 10 6452 1 2025-08-12 18:16:06.683 00:00:11.071 TCP 23.104.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:16:08.132 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50934 10 6452 1 2025-08-12 18:17:08.010 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 18:17:08.005 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 18:17:07.802 00:00:10.372 TCP 23.104.0.1:58472 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:17:08.348 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47500 10 6452 1 2025-08-12 18:14:10.262 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 18:18:08.558 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59232 10 6452 1 2025-08-12 18:18:08.205 00:00:10.367 TCP 23.104.0.1:40466 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:15:10.265 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 18:19:08.767 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53046 10 6452 1 2025-08-12 18:19:08.614 00:00:10.368 TCP 23.104.0.1:39854 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:20:09.019 00:00:10.322 TCP 23.104.0.1:56766 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:20:08.990 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:39612 10 6452 1 2025-08-12 18:21:09.379 00:00:10.328 TCP 23.104.0.1:38978 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:21:09.183 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46794 10 6452 1 2025-08-12 18:22:08.109 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 18:22:08.060 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 18:22:09.393 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49718 10 6452 1 2025-08-12 18:22:09.745 00:00:10.368 TCP 23.104.0.1:60446 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:23:09.569 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:33478 10 6452 1 2025-08-12 18:23:10.150 00:00:10.358 TCP 23.104.0.1:34784 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:20:10.262 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 18:24:09.818 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55030 10 6452 1 2025-08-12 18:24:10.555 00:00:10.381 TCP 23.104.0.1:43106 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:21:10.266 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 18:25:10.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54494 10 6452 1 2025-08-12 18:25:10.961 00:00:10.364 TCP 23.104.0.1:58174 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:26:10.265 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45522 10 6452 1 2025-08-12 18:26:11.364 00:00:10.363 TCP 23.104.0.1:34966 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:27:08.298 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 18:27:08.344 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 18:27:10.474 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43606 10 6452 1 2025-08-12 18:27:11.765 00:00:10.372 TCP 23.104.0.1:55560 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:28:10.686 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34590 10 6452 1 2025-08-12 18:28:12.175 00:00:10.366 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:29:10.903 00:00:10.700 TCP 1.101.0.1:3000 -> 22.102.0.1:36478 10 6452 1 2025-08-12 18:29:12.580 00:00:10.358 TCP 23.104.0.1:35944 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:26:10.267 00:05:00.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 18:30:11.640 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34582 10 6452 1 2025-08-12 18:30:12.980 00:00:10.366 TCP 23.104.0.1:45540 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:27:10.270 00:05:00.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 18:31:11.856 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41616 10 6452 1 2025-08-12 18:31:13.389 00:00:10.361 TCP 23.104.0.1:38032 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:32:08.227 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 18:32:08.157 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 18:32:13.795 00:00:10.360 TCP 23.104.0.1:56720 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:32:12.039 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52796 10 6452 1 2025-08-12 18:33:12.214 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36258 10 6452 1 2025-08-12 18:33:14.192 00:00:10.361 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:34:14.591 00:00:10.360 TCP 23.104.0.1:41664 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:34:12.431 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:44810 10 6452 1 2025-08-12 18:35:12.641 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46146 10 6452 1 2025-08-12 18:35:14.993 00:00:10.321 TCP 23.104.0.1:42856 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:32:10.269 00:05:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 18:36:12.859 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52984 10 6452 1 2025-08-12 18:36:15.355 00:00:10.323 TCP 23.104.0.1:34898 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:37:08.283 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 18:37:08.336 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 18:33:10.272 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 18:37:13.040 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51230 10 6452 1 2025-08-12 18:37:15.717 00:00:10.375 TCP 23.104.0.1:51348 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:38:13.248 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38778 10 6452 1 2025-08-12 18:38:16.127 00:00:10.318 TCP 23.104.0.1:46890 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:39:13.417 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55380 10 6452 1 2025-08-12 18:39:16.483 00:00:10.360 TCP 23.104.0.1:44882 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:40:13.632 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35834 12 10367 1 2025-08-12 18:40:16.884 00:00:10.399 TCP 23.104.0.1:46446 -> 1.101.0.1:3000 15 1926 1 2025-08-12 18:41:13.873 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57060 10 6452 1 2025-08-12 18:41:17.327 00:00:10.366 TCP 23.104.0.1:41428 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:42:08.661 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 18:42:08.782 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 18:38:10.273 00:05:00.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 18:42:14.071 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48120 10 6452 1 2025-08-12 18:42:17.732 00:00:10.370 TCP 23.104.0.1:43624 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:39:10.278 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 18:43:18.132 00:00:15.610 TCP 23.104.0.1:34384 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:43:14.283 00:00:19.377 TCP 1.101.0.1:3000 -> 22.102.0.1:56082 10 6452 1 2025-08-12 18:44:23.793 00:00:10.360 TCP 23.104.0.1:45626 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:44:23.700 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34852 10 6452 1 2025-08-12 18:45:23.869 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56200 10 6452 1 2025-08-12 18:45:24.193 00:00:10.324 TCP 23.104.0.1:39308 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:46:24.555 00:00:10.353 TCP 23.104.0.1:48218 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:46:24.094 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49002 10 6452 1 2025-08-12 18:47:08.614 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 18:47:08.506 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 18:47:24.304 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53684 10 6452 1 2025-08-12 18:47:24.948 00:00:10.326 TCP 23.104.0.1:48128 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:44:10.277 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 18:48:25.317 00:00:10.361 TCP 23.104.0.1:41944 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:48:24.474 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59052 10 6452 1 2025-08-12 18:45:10.280 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 18:49:25.718 00:00:10.375 TCP 23.104.0.1:54856 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:49:24.657 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55398 10 6452 1 2025-08-12 18:50:24.870 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32996 10 6452 1 2025-08-12 18:50:26.129 00:00:10.329 TCP 23.104.0.1:53082 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:51:25.084 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52180 10 6452 1 2025-08-12 18:51:26.496 00:00:10.366 TCP 23.104.0.1:36668 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:52:08.480 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 18:52:08.631 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 18:52:25.307 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59426 10 6452 1 2025-08-12 18:52:26.898 00:00:10.376 TCP 23.104.0.1:56700 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:53:25.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45704 10 6452 1 2025-08-12 18:53:27.308 00:00:10.370 TCP 23.104.0.1:34502 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:50:10.280 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 18:54:25.738 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51660 10 6452 1 2025-08-12 18:54:27.714 00:00:10.369 TCP 23.104.0.1:45010 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:51:10.283 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 18:55:25.953 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36818 12 6556 1 2025-08-12 18:55:28.123 00:00:10.330 TCP 23.104.0.1:48676 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:56:26.200 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55382 10 6452 1 2025-08-12 18:56:28.491 00:00:10.369 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:57:08.849 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 18:57:08.636 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 18:57:26.426 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46888 10 6452 1 2025-08-12 18:57:28.901 00:00:10.380 TCP 23.104.0.1:53784 -> 1.101.0.1:3000 11 1507 1 2025-08-12 18:58:26.640 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46056 10 6452 1 2025-08-12 18:58:29.326 00:00:10.365 TCP 23.104.0.1:59010 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1072, avg pps: 0, avg bpp: 318 Time window: 2025-08-12 17:56:10 - 2025-08-12 18:58:39 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0019s Wall: 0.0029s flows/second: 57365.2 Runtime: 0.0029s