Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 17:58:48.105 00:00:10.366 TCP 23.104.0.1:34678 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:59:19.908 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 10 6452 1 2025-08-14 17:59:48.512 00:00:10.363 TCP 23.104.0.1:39132 -> 1.101.0.1:3000 11 1507 1 2025-08-14 17:56:11.296 00:05:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 18:00:20.087 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44302 10 6452 1 2025-08-14 18:00:48.918 00:00:10.375 TCP 23.104.0.1:38436 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:01:20.265 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34492 10 6452 1 2025-08-14 18:01:49.335 00:00:10.366 TCP 23.104.0.1:47334 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:02:20.477 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6452 1 2025-08-14 18:02:49.746 00:00:10.372 TCP 23.104.0.1:56060 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:03:05.358 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 18:03:05.464 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 18:03:20.691 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45508 10 6452 1 2025-08-14 18:03:50.166 00:00:10.369 TCP 23.104.0.1:35750 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:00:11.294 00:05:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 18:04:20.923 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37628 10 6452 1 2025-08-14 18:04:50.577 00:00:10.416 TCP 23.104.0.1:58546 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:05:21.140 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56802 10 6452 1 2025-08-14 18:05:51.050 00:00:10.363 TCP 23.104.0.1:41384 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:02:11.296 00:05:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 18:06:21.378 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42728 10 6452 1 2025-08-14 18:06:51.449 00:00:10.362 TCP 23.104.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:07:21.598 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51228 10 6452 1 2025-08-14 18:08:05.551 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 18:08:05.388 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 18:07:51.858 00:00:10.374 TCP 23.104.0.1:40010 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:08:21.808 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60960 10 6452 1 2025-08-14 18:08:52.274 00:00:10.363 TCP 23.104.0.1:50016 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:09:22.036 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41302 10 6452 1 2025-08-14 18:09:52.681 00:00:10.360 TCP 23.104.0.1:38634 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:06:11.295 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 18:10:22.247 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48830 10 6452 1 2025-08-14 18:10:53.104 00:00:10.373 TCP 23.104.0.1:52504 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:11:22.473 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59076 10 6452 1 2025-08-14 18:11:53.515 00:00:10.367 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:08:11.297 00:05:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 18:12:22.696 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39444 10 6452 1 2025-08-14 18:13:05.495 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 18:13:05.424 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 18:12:53.921 00:00:10.419 TCP 23.104.0.1:60452 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:13:22.868 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54428 10 6452 1 2025-08-14 18:13:54.381 00:00:10.361 TCP 23.104.0.1:52298 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:14:23.087 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47802 10 6452 1 2025-08-14 18:14:54.783 00:00:10.367 TCP 23.104.0.1:34476 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:15:23.308 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48736 10 6452 1 2025-08-14 18:15:55.188 00:00:10.366 TCP 23.104.0.1:52388 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:12:11.296 00:05:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 18:16:23.523 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44294 10 6452 1 2025-08-14 18:16:55.596 00:00:10.367 TCP 23.104.0.1:58022 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:17:23.738 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36556 10 6452 1 2025-08-14 18:17:55.998 00:00:10.371 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:18:05.419 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 18:18:05.772 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 18:14:11.298 00:05:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 18:18:23.958 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:47592 10 6452 1 2025-08-14 18:18:56.404 00:00:10.367 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:19:24.158 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40840 10 6452 1 2025-08-14 18:19:56.807 00:00:10.366 TCP 23.104.0.1:47848 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:20:24.366 00:00:10.345 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-08-14 18:20:57.207 00:00:10.364 TCP 23.104.0.1:45682 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:21:24.755 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55850 10 6452 1 2025-08-14 18:21:57.604 00:00:10.368 TCP 23.104.0.1:48388 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:18:11.296 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 18:22:24.972 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:46832 10 6452 1 2025-08-14 18:23:05.852 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 18:23:05.804 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 18:22:58.011 00:00:10.321 TCP 23.104.0.1:57588 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:23:25.214 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52602 10 6452 1 2025-08-14 18:23:58.367 00:00:10.363 TCP 23.104.0.1:46074 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:20:11.299 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 18:24:25.423 00:00:10.553 TCP 1.101.0.1:3000 -> 22.102.0.1:35074 10 6452 1 2025-08-14 18:24:58.772 00:00:10.368 TCP 23.104.0.1:47288 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:25:26.031 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:55988 12 10367 1 2025-08-14 18:25:59.176 00:00:10.443 TCP 23.104.0.1:33460 -> 1.101.0.1:3000 15 1926 1 2025-08-14 18:26:26.230 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40812 10 6452 1 2025-08-14 18:26:59.662 00:00:10.366 TCP 23.104.0.1:51136 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:27:26.444 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60592 10 6452 1 2025-08-14 18:28:05.806 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 18:28:05.837 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 18:28:00.086 00:00:10.365 TCP 23.104.0.1:51414 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:24:11.296 00:05:00.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 18:28:26.612 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48082 10 6452 1 2025-08-14 18:29:00.488 00:00:10.365 TCP 23.104.0.1:45598 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:29:26.828 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38940 10 6452 1 2025-08-14 18:30:00.898 00:00:10.327 TCP 23.104.0.1:34280 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:26:11.301 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 18:30:27.051 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38056 10 6452 1 2025-08-14 18:31:01.261 00:00:10.365 TCP 23.104.0.1:60156 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:31:27.276 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45502 10 6452 1 2025-08-14 18:32:01.664 00:00:10.365 TCP 23.104.0.1:38364 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:32:27.457 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43544 10 6452 1 2025-08-14 18:33:05.938 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 18:33:05.837 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 18:33:02.100 00:00:10.366 TCP 23.104.0.1:52596 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:33:27.671 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52080 10 6452 1 2025-08-14 18:34:02.501 00:00:10.375 TCP 23.104.0.1:46848 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:30:11.300 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 18:34:27.900 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:48556 10 6452 1 2025-08-14 18:35:02.912 00:00:10.411 TCP 23.104.0.1:47208 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:35:28.129 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38838 10 6452 1 2025-08-14 18:36:03.375 00:00:10.323 TCP 23.104.0.1:49450 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:32:11.302 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 18:36:28.355 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39188 10 6452 1 2025-08-14 18:37:03.737 00:00:10.776 TCP 23.104.0.1:33610 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:37:28.564 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51546 10 6452 1 2025-08-14 18:38:06.048 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 18:38:06.271 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 18:38:04.555 00:00:10.372 TCP 23.104.0.1:38326 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:38:28.780 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43774 10 6452 1 2025-08-14 18:39:04.964 00:00:10.375 TCP 23.104.0.1:35116 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:39:28.991 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:44838 10 6452 1 2025-08-14 18:40:05.381 00:00:10.378 TCP 23.104.0.1:57746 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:36:11.300 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 18:40:29.178 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38544 10 6452 1 2025-08-14 18:41:05.808 00:00:10.363 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:41:29.399 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57914 10 6452 1 2025-08-14 18:38:11.302 00:05:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 18:42:06.210 00:00:10.365 TCP 23.104.0.1:45780 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:42:29.570 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54320 10 6452 1 2025-08-14 18:43:06.170 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 18:43:06.311 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 18:43:06.615 00:00:10.366 TCP 23.104.0.1:38414 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:43:29.780 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:51902 10 6452 1 2025-08-14 18:44:07.018 00:00:10.365 TCP 23.104.0.1:56920 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:44:29.961 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37432 10 6452 1 2025-08-14 18:45:07.421 00:00:10.363 TCP 23.104.0.1:46388 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:45:30.181 00:00:10.670 TCP 1.101.0.1:3000 -> 22.102.0.1:54244 10 6452 1 2025-08-14 18:42:11.303 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 18:46:07.824 00:00:10.366 TCP 23.104.0.1:50836 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:46:30.889 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49250 10 6452 1 2025-08-14 18:47:08.233 00:00:10.362 TCP 23.104.0.1:46386 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:47:31.086 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36458 10 6452 1 2025-08-14 18:48:06.187 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 18:48:06.215 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 18:44:11.307 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 18:48:08.646 00:00:10.364 TCP 23.104.0.1:57726 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:48:31.312 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38696 10 6452 1 2025-08-14 18:49:09.060 00:00:10.363 TCP 23.104.0.1:49280 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:49:31.531 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32848 10 6452 1 2025-08-14 18:50:09.462 00:00:10.371 TCP 23.104.0.1:34064 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:50:31.749 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56686 10 6452 1 2025-08-14 18:51:09.875 00:00:10.788 TCP 23.104.0.1:51816 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:51:31.964 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47642 10 6452 1 2025-08-14 18:48:11.305 00:05:00.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 18:52:10.702 00:00:10.327 TCP 23.104.0.1:37436 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:52:32.189 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34462 10 6452 1 2025-08-14 18:53:06.567 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 18:53:06.443 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 18:53:11.091 00:00:10.364 TCP 23.104.0.1:54088 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:53:32.397 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58440 10 6452 1 2025-08-14 18:50:11.310 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 18:54:11.498 00:00:10.362 TCP 23.104.0.1:38318 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:54:32.612 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43248 10 6452 1 2025-08-14 18:55:11.897 00:00:10.359 TCP 23.104.0.1:50558 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:55:32.834 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57874 10 6452 1 2025-08-14 18:56:12.301 00:00:10.374 TCP 23.104.0.1:52390 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:56:33.076 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51008 10 6452 1 2025-08-14 18:57:12.709 00:00:10.364 TCP 23.104.0.1:35000 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:57:33.289 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35246 10 6452 1 2025-08-14 18:58:06.555 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 18:58:06.191 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 18:54:11.306 00:05:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 18:58:13.116 00:00:10.328 TCP 23.104.0.1:56618 -> 1.101.0.1:3000 11 1507 1 2025-08-14 18:58:33.499 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46704 10 6452 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1063, avg pps: 0, avg bpp: 318 Time window: 2025-08-14 17:56:11 - 2025-08-14 18:59:12 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0009s Wall: 0.0029s flows/second: 56961.4 Runtime: 0.0029s