Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 08:59:10.367 00:00:10.370 TCP 23.104.0.1:56738 -> 1.101.0.1:3000 11 1507 1 2025-08-14 08:59:09.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55148 10 6452 1 2025-08-14 09:00:10.783 00:00:10.351 TCP 23.104.0.1:47650 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:00:09.326 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42920 10 6452 1 2025-08-14 08:57:11.118 00:04:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 09:01:11.170 00:00:10.369 TCP 23.104.0.1:59764 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:01:09.546 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38050 10 6452 1 2025-08-14 08:58:11.120 00:04:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 09:02:11.578 00:00:10.373 TCP 23.104.0.1:34070 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:02:09.770 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:54284 10 6452 1 2025-08-14 09:02:54.756 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 09:02:54.744 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 09:03:09.953 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47656 10 6452 1 2025-08-14 09:03:11.995 00:00:10.368 TCP 23.104.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:04:10.179 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51420 10 6452 1 2025-08-14 09:04:12.404 00:00:10.364 TCP 23.104.0.1:40218 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:05:10.352 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6452 1 2025-08-14 09:05:12.812 00:00:10.363 TCP 23.104.0.1:38792 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:02:11.129 00:04:00.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 09:06:10.561 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47336 10 6452 1 2025-08-14 09:06:13.213 00:00:10.574 TCP 23.104.0.1:33128 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:07:10.777 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47504 10 6452 1 2025-08-14 09:07:13.829 00:00:10.393 TCP 23.104.0.1:60718 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:07:54.774 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 09:07:54.675 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 09:03:11.131 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-14 09:08:10.992 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35444 10 6452 1 2025-08-14 09:08:14.256 00:00:10.368 TCP 23.104.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:09:11.223 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59224 10 6452 1 2025-08-14 09:09:14.661 00:00:10.368 TCP 23.104.0.1:51040 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:10:11.432 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57304 10 6452 1 2025-08-14 09:10:15.091 00:00:10.336 TCP 23.104.0.1:52470 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:11:11.648 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46192 10 6452 1 2025-08-14 09:11:15.462 00:00:10.371 TCP 23.104.0.1:55368 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:07:11.129 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-14 09:12:11.862 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53668 10 6452 1 2025-08-14 09:12:15.870 00:00:10.364 TCP 23.104.0.1:36360 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:12:55.152 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 09:12:55.031 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 09:13:12.043 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59440 10 6452 1 2025-08-14 09:13:16.275 00:00:10.365 TCP 23.104.0.1:45594 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:09:11.911 00:06:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-14 09:14:12.214 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49730 10 6452 1 2025-08-14 09:14:16.676 00:00:10.372 TCP 23.104.0.1:52130 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:15:12.427 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49246 10 6452 1 2025-08-14 09:15:17.102 00:00:10.338 TCP 23.104.0.1:41682 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:16:12.598 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42916 10 6452 1 2025-08-14 09:16:17.480 00:00:10.363 TCP 23.104.0.1:54428 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:17:12.807 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41014 11 6492 1 2025-08-14 09:17:17.881 00:00:10.391 TCP 23.104.0.1:38520 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:17:54.972 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 09:17:54.941 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 09:13:11.912 00:05:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 667 1 2025-08-14 09:18:13.038 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41290 10 6452 1 2025-08-14 09:18:18.314 00:00:10.366 TCP 23.104.0.1:43836 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:16:11.134 00:03:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 8 492 1 2025-08-14 09:19:13.246 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41656 10 6452 1 2025-08-14 09:19:18.723 00:00:10.368 TCP 23.104.0.1:45272 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:20:13.459 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49212 10 6452 1 2025-08-14 09:20:19.134 00:00:10.364 TCP 23.104.0.1:47698 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:21:13.673 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43018 10 6452 1 2025-08-14 09:21:19.537 00:00:10.366 TCP 23.104.0.1:46190 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:22:13.885 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41946 10 6452 1 2025-08-14 09:22:19.945 00:00:10.380 TCP 23.104.0.1:37482 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:22:55.050 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 09:22:54.908 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 09:19:11.132 00:04:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 09:23:14.086 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36678 10 6452 1 2025-08-14 09:23:20.360 00:00:10.363 TCP 23.104.0.1:56188 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:20:11.136 00:04:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 09:24:14.299 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 10 6452 1 2025-08-14 09:24:20.765 00:00:10.376 TCP 23.104.0.1:38432 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:25:14.518 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47514 10 6452 1 2025-08-14 09:25:21.177 00:00:10.331 TCP 23.104.0.1:46538 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:26:14.737 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53018 10 6452 1 2025-08-14 09:26:21.551 00:00:10.361 TCP 23.104.0.1:36638 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:27:14.947 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52722 10 6452 1 2025-08-14 09:27:21.952 00:00:10.375 TCP 23.104.0.1:57954 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:27:56.400 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 09:27:56.227 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 09:24:11.136 00:04:00.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 09:28:15.180 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47948 10 6452 1 2025-08-14 09:28:22.366 00:00:10.326 TCP 23.104.0.1:51002 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:25:11.137 00:04:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 09:29:15.391 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59610 10 6452 1 2025-08-14 09:29:22.729 00:00:10.372 TCP 23.104.0.1:33652 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:30:15.605 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34428 12 10367 1 2025-08-14 09:30:23.142 00:00:10.440 TCP 23.104.0.1:48986 -> 1.101.0.1:3000 15 1926 1 2025-08-14 09:31:15.842 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59776 12 6556 1 2025-08-14 09:31:23.616 00:00:10.319 TCP 23.104.0.1:48466 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:32:16.080 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48440 10 6452 1 2025-08-14 09:32:23.973 00:00:10.375 TCP 23.104.0.1:59552 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:32:55.285 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 09:32:55.257 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 09:29:11.136 00:04:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 09:33:16.256 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60520 10 6452 1 2025-08-14 09:33:24.389 00:00:10.363 TCP 23.104.0.1:54104 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:30:11.139 00:04:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 09:34:16.471 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40894 10 6452 1 2025-08-14 09:34:24.789 00:00:10.369 TCP 23.104.0.1:52708 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:35:16.684 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46354 10 6452 1 2025-08-14 09:35:25.195 00:00:10.366 TCP 23.104.0.1:52636 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:36:16.894 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:33750 10 6452 1 2025-08-14 09:36:25.597 00:00:10.368 TCP 23.104.0.1:45830 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:37:17.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44250 10 6452 1 2025-08-14 09:37:26.003 00:00:10.322 TCP 23.104.0.1:35492 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:37:55.047 00:00:00.054 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 09:37:55.354 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 09:34:11.138 00:04:00.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-14 09:38:17.297 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43382 10 6452 1 2025-08-14 09:38:26.370 00:00:10.363 TCP 23.104.0.1:51744 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:39:17.517 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42020 10 6452 1 2025-08-14 09:39:26.776 00:00:10.365 TCP 23.104.0.1:39400 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:35:11.140 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-14 09:40:17.730 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38998 10 6452 1 2025-08-14 09:40:27.190 00:00:10.328 TCP 23.104.0.1:59192 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:41:17.941 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36488 10 6452 1 2025-08-14 09:41:27.552 00:00:10.329 TCP 23.104.0.1:34520 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:42:18.179 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:50338 11 6504 1 2025-08-14 09:42:27.921 00:00:10.393 TCP 23.104.0.1:46426 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:42:55.428 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 09:42:55.205 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 09:43:18.443 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36182 10 6452 1 2025-08-14 09:43:28.349 00:00:10.358 TCP 23.104.0.1:33232 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:39:11.139 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-14 09:44:18.660 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43442 10 6452 1 2025-08-14 09:44:28.746 00:00:10.362 TCP 23.104.0.1:38770 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:45:18.872 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:43010 12 10367 1 2025-08-14 09:45:29.148 00:00:10.437 TCP 23.104.0.1:46978 -> 1.101.0.1:3000 15 1926 1 2025-08-14 09:41:11.917 00:05:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 686 1 2025-08-14 09:46:19.118 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50154 10 6452 1 2025-08-14 09:46:29.624 00:00:10.320 TCP 23.104.0.1:37168 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:47:19.335 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34288 10 6452 1 2025-08-14 09:47:29.993 00:00:10.379 TCP 23.104.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:47:55.456 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 09:47:55.588 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 09:48:19.552 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46292 10 6452 1 2025-08-14 09:48:30.420 00:00:10.366 TCP 23.104.0.1:39534 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:49:19.757 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40608 10 6452 1 2025-08-14 09:49:30.827 00:00:10.395 TCP 23.104.0.1:57418 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:45:11.923 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-08-14 09:50:19.922 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51792 10 6452 1 2025-08-14 09:50:31.262 00:00:10.367 TCP 23.104.0.1:47174 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:47:11.143 00:04:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 09:51:20.098 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52892 10 6452 1 2025-08-14 09:51:31.667 00:00:10.380 TCP 23.104.0.1:34562 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:52:20.307 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43922 10 6452 1 2025-08-14 09:52:32.107 00:00:10.361 TCP 23.104.0.1:53102 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:52:55.237 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 09:52:55.619 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 09:53:20.514 00:00:14.768 TCP 1.101.0.1:3000 -> 22.102.0.1:43322 10 6452 1 2025-08-14 09:53:32.515 00:00:10.368 TCP 23.104.0.1:40442 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:54:25.328 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45640 10 6452 1 2025-08-14 09:54:32.924 00:00:10.350 TCP 23.104.0.1:46140 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:52:11.142 00:03:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 8 492 1 2025-08-14 09:55:25.550 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58202 10 6452 1 2025-08-14 09:55:33.312 00:00:10.393 TCP 23.104.0.1:33700 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:52:11.144 00:04:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-14 09:56:25.774 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50530 10 6452 1 2025-08-14 09:56:33.717 00:00:10.373 TCP 23.104.0.1:40520 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:57:25.995 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57120 10 6452 1 2025-08-14 09:57:34.123 00:00:10.327 TCP 23.104.0.1:53876 -> 1.101.0.1:3000 11 1507 1 2025-08-14 09:57:55.763 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 09:57:55.641 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 09:58:26.227 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59094 10 6452 1 2025-08-14 09:58:34.486 00:00:10.359 TCP 23.104.0.1:54320 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 166, total bytes: 506966, total packets: 1584, avg bps: 1098, avg pps: 0, avg bpp: 320 Time window: 2025-08-14 08:57:11 - 2025-08-14 09:58:44 Total flows processed: 166, passed: 166, Blocks skipped: 0, Bytes read: 17328 Sys: 0.0033s User: 0.0017s Wall: 0.0023s flows/second: 73320.8 Runtime: 0.0023s