Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 07:58:46.657 00:00:10.370 TCP 23.104.0.1:34394 -> 1.101.0.1:3000 11 1507 1 2025-08-13 07:59:20.630 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49590 10 6452 1 2025-08-13 07:59:47.113 00:00:10.587 TCP 23.104.0.1:43124 -> 1.101.0.1:3000 11 1507 1 2025-08-13 07:56:10.595 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 08:00:20.807 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57062 10 6452 1 2025-08-13 08:00:47.740 00:00:10.364 TCP 23.104.0.1:55822 -> 1.101.0.1:3000 11 1507 1 2025-08-13 07:57:10.596 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 08:01:20.983 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52246 10 6452 1 2025-08-13 08:01:48.138 00:00:10.369 TCP 23.104.0.1:47598 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:02:24.558 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 08:02:24.431 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 08:02:21.217 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43058 10 6452 1 2025-08-13 08:02:48.559 00:00:10.366 TCP 23.104.0.1:51458 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:03:21.440 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:54346 10 6452 1 2025-08-13 08:03:48.959 00:00:10.324 TCP 23.104.0.1:49572 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:04:21.625 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52774 10 6452 1 2025-08-13 08:04:49.320 00:00:10.365 TCP 23.104.0.1:32978 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:05:21.838 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40838 10 6452 1 2025-08-13 08:05:49.723 00:00:10.328 TCP 23.104.0.1:47382 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:02:10.596 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 08:06:22.008 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44850 10 6452 1 2025-08-13 08:06:50.104 00:00:10.368 TCP 23.104.0.1:47698 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:03:10.599 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 08:07:24.471 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 08:07:24.654 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 08:07:22.221 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42652 10 6452 1 2025-08-13 08:07:50.507 00:00:10.366 TCP 23.104.0.1:41764 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:08:22.438 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44990 10 6452 1 2025-08-13 08:08:50.909 00:00:10.363 TCP 23.104.0.1:34050 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:09:22.646 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35226 10 6452 1 2025-08-13 08:09:51.309 00:00:10.327 TCP 23.104.0.1:49772 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:10:22.819 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39144 10 6452 1 2025-08-13 08:10:51.670 00:00:10.325 TCP 23.104.0.1:60406 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:11:23.042 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37996 10 6452 1 2025-08-13 08:11:52.032 00:00:10.369 TCP 23.104.0.1:58414 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:08:10.598 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 08:12:24.643 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 08:12:24.646 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 08:12:23.254 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53598 10 6452 1 2025-08-13 08:12:52.434 00:00:10.362 TCP 23.104.0.1:52296 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:09:10.602 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 08:13:23.428 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46728 10 6452 1 2025-08-13 08:13:52.837 00:00:10.389 TCP 23.104.0.1:58558 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:14:23.645 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56270 10 6452 1 2025-08-13 08:14:53.261 00:00:10.324 TCP 23.104.0.1:37084 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:15:23.854 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37406 10 6452 1 2025-08-13 08:15:53.624 00:00:10.373 TCP 23.104.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:16:24.091 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39424 10 6452 1 2025-08-13 08:16:54.054 00:00:10.366 TCP 23.104.0.1:47760 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:17:24.960 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 08:17:24.847 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 08:17:24.301 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57514 10 6452 1 2025-08-13 08:17:54.460 00:00:10.368 TCP 23.104.0.1:55226 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:14:10.599 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 08:18:24.516 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36330 10 6452 1 2025-08-13 08:18:54.861 00:00:10.374 TCP 23.104.0.1:43698 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:15:10.603 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 08:19:24.735 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48202 10 6452 1 2025-08-13 08:19:55.274 00:00:10.364 TCP 23.104.0.1:37388 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:20:24.944 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51988 10 6452 1 2025-08-13 08:20:55.677 00:00:10.368 TCP 23.104.0.1:44536 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:21:25.130 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38784 10 6452 1 2025-08-13 08:21:56.104 00:00:10.362 TCP 23.104.0.1:51390 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:22:24.658 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 08:22:24.819 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 08:22:25.338 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42032 10 6452 1 2025-08-13 08:22:56.504 00:00:10.368 TCP 23.104.0.1:46012 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:23:25.552 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57016 10 6452 1 2025-08-13 08:23:56.908 00:00:10.359 TCP 23.104.0.1:44306 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:20:10.602 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 08:24:25.768 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36732 10 6452 1 2025-08-13 08:24:57.301 00:00:10.367 TCP 23.104.0.1:41202 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:21:10.604 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 08:25:25.981 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53746 10 6452 1 2025-08-13 08:25:57.706 00:00:10.364 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:26:26.216 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41148 10 6452 1 2025-08-13 08:26:58.107 00:00:10.361 TCP 23.104.0.1:59182 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:27:25.088 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 08:27:25.334 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 08:27:26.431 00:00:10.445 TCP 1.101.0.1:3000 -> 22.102.0.1:56790 10 6452 1 2025-08-13 08:27:58.506 00:00:10.366 TCP 23.104.0.1:37880 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:28:26.921 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47938 10 6452 1 2025-08-13 08:28:58.916 00:00:10.359 TCP 23.104.0.1:38264 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:29:27.136 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:38550 10 6452 1 2025-08-13 08:29:59.329 00:00:10.322 TCP 23.104.0.1:49136 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:26:10.604 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 08:30:27.415 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46472 10 6452 1 2025-08-13 08:30:59.705 00:00:10.390 TCP 23.104.0.1:33532 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:27:10.612 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 08:31:27.589 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51850 10 6452 1 2025-08-13 08:32:00.132 00:00:10.760 TCP 23.104.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:32:25.164 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 08:32:24.839 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 08:32:27.758 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40464 10 6452 1 2025-08-13 08:33:00.950 00:00:10.363 TCP 23.104.0.1:52336 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:33:27.935 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:43318 10 6452 1 2025-08-13 08:34:01.346 00:00:10.323 TCP 23.104.0.1:38500 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:34:28.170 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49100 10 6452 1 2025-08-13 08:35:01.708 00:00:10.365 TCP 23.104.0.1:41934 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:35:28.380 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35820 10 6452 1 2025-08-13 08:32:10.606 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 08:36:02.114 00:00:10.325 TCP 23.104.0.1:33704 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:36:28.589 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48252 10 6452 1 2025-08-13 08:33:10.609 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 08:37:02.481 00:00:10.323 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:37:25.392 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 08:37:25.450 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 08:37:28.799 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58100 10 6452 1 2025-08-13 08:38:02.847 00:00:10.344 TCP 23.104.0.1:48838 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:38:29.033 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45288 10 6452 1 2025-08-13 08:39:03.229 00:00:10.371 TCP 23.104.0.1:60126 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:39:29.250 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44386 10 6452 1 2025-08-13 08:40:03.639 00:00:10.364 TCP 23.104.0.1:54884 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:40:29.463 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45318 10 6452 1 2025-08-13 08:41:04.049 00:00:10.368 TCP 23.104.0.1:48156 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:41:29.636 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43632 10 6452 1 2025-08-13 08:42:04.460 00:00:10.326 TCP 23.104.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:38:10.612 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 08:42:25.330 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 08:42:25.147 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 08:42:29.847 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60930 10 6452 1 2025-08-13 08:39:10.613 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 08:43:04.821 00:00:10.364 TCP 23.104.0.1:58300 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:43:30.090 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51878 10 6452 1 2025-08-13 08:44:05.225 00:00:10.361 TCP 23.104.0.1:42138 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:44:30.300 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57938 10 6452 1 2025-08-13 08:45:05.624 00:00:10.368 TCP 23.104.0.1:47780 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:45:30.517 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48484 10 6452 1 2025-08-13 08:46:06.027 00:00:10.362 TCP 23.104.0.1:49770 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:46:30.729 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38614 10 6452 1 2025-08-13 08:47:06.434 00:00:10.367 TCP 23.104.0.1:48620 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:47:25.336 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 08:47:25.461 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 08:47:30.908 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:40620 10 6452 1 2025-08-13 08:44:10.614 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 08:48:06.838 00:00:10.394 TCP 23.104.0.1:59914 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:48:31.104 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48842 10 6452 1 2025-08-13 08:45:10.615 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 08:49:07.271 00:00:10.369 TCP 23.104.0.1:40276 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:49:31.318 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44472 10 6452 1 2025-08-13 08:50:07.678 00:00:10.362 TCP 23.104.0.1:44188 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:50:31.536 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58310 10 6452 1 2025-08-13 08:51:08.107 00:00:10.365 TCP 23.104.0.1:60504 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:51:31.746 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59748 10 6452 1 2025-08-13 08:52:08.523 00:00:10.366 TCP 23.104.0.1:37056 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:52:25.362 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 08:52:25.532 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 08:52:31.961 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54074 10 6452 1 2025-08-13 08:53:08.930 00:00:10.384 TCP 23.104.0.1:51506 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:53:32.183 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44494 10 6452 1 2025-08-13 08:50:10.615 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 08:54:09.356 00:00:10.369 TCP 23.104.0.1:45612 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:54:32.396 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44212 10 6452 1 2025-08-13 08:51:10.617 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 08:55:09.765 00:00:10.372 TCP 23.104.0.1:49992 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:55:32.615 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58860 10 6452 1 2025-08-13 08:56:10.176 00:00:10.365 TCP 23.104.0.1:32840 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:56:32.823 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:53916 10 6452 1 2025-08-13 08:57:10.583 00:00:10.324 TCP 23.104.0.1:47214 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:57:25.600 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 08:57:25.265 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 08:57:33.035 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45030 10 6452 1 2025-08-13 08:58:10.946 00:00:10.338 TCP 23.104.0.1:56018 -> 1.101.0.1:3000 11 1507 1 2025-08-13 08:58:33.247 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51378 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1062, avg pps: 0, avg bpp: 317 Time window: 2025-08-13 07:56:10 - 2025-08-13 08:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0016s Wall: 0.0023s flows/second: 69819.9 Runtime: 0.0024s