Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 16:59:01.929 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 16:59:01.973 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 16:58:57.502 00:00:10.366 TCP 23.104.0.1:58250 -> 1.101.0.1:3000 11 1507 1 2025-08-16 16:59:35.430 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39594 10 6452 1 2025-08-16 16:59:57.908 00:00:10.366 TCP 23.104.0.1:33580 -> 1.101.0.1:3000 11 1507 1 2025-08-16 16:56:12.217 00:05:00.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 17:00:35.602 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39454 12 10365 1 2025-08-16 17:00:58.312 00:00:10.445 TCP 23.104.0.1:35196 -> 1.101.0.1:3000 15 1926 1 2025-08-16 17:01:35.844 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41376 10 6452 1 2025-08-16 17:01:58.796 00:00:10.337 TCP 23.104.0.1:57426 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:02:36.087 00:00:10.245 TCP 1.101.0.1:3000 -> 22.102.0.1:48110 10 6452 1 2025-08-16 17:02:59.177 00:00:10.377 TCP 23.104.0.1:40344 -> 1.101.0.1:3000 11 1507 1 2025-08-16 16:59:12.220 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 17:03:36.372 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35946 10 6452 1 2025-08-16 17:04:01.951 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 17:04:01.738 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 17:03:59.594 00:00:10.363 TCP 23.104.0.1:53014 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:04:36.593 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50242 10 6452 1 2025-08-16 17:05:00.002 00:00:10.324 TCP 23.104.0.1:47454 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:05:36.822 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54114 10 6452 1 2025-08-16 17:06:00.373 00:00:10.368 TCP 23.104.0.1:53572 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:02:12.218 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 17:06:37.069 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49388 10 6452 1 2025-08-16 17:07:00.790 00:00:10.319 TCP 23.104.0.1:46574 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:07:37.288 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45078 10 6452 1 2025-08-16 17:08:01.150 00:00:10.365 TCP 23.104.0.1:52034 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:08:37.467 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6452 1 2025-08-16 17:09:02.439 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 17:09:02.529 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 17:09:01.557 00:00:10.330 TCP 23.104.0.1:39016 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:05:12.224 00:05:00.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 17:09:37.676 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41596 10 6452 1 2025-08-16 17:10:01.930 00:00:10.396 TCP 23.104.0.1:32874 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:10:37.887 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:53114 12 10367 1 2025-08-16 17:11:02.374 00:00:10.493 TCP 23.104.0.1:52244 -> 1.101.0.1:3000 15 1926 1 2025-08-16 17:11:38.139 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57578 10 6452 1 2025-08-16 17:08:12.222 00:05:00.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 17:12:02.945 00:00:10.340 TCP 23.104.0.1:43122 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:12:38.358 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35056 10 6452 1 2025-08-16 17:13:03.321 00:00:10.366 TCP 23.104.0.1:42474 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:13:38.579 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53218 10 6452 1 2025-08-16 17:14:02.260 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 17:14:02.272 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 17:14:03.722 00:00:10.375 TCP 23.104.0.1:36956 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:14:38.804 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45498 10 6452 1 2025-08-16 17:11:12.225 00:05:00.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 17:15:04.139 00:00:10.362 TCP 23.104.0.1:34522 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:15:39.030 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51648 10 6452 1 2025-08-16 17:16:04.551 00:00:10.368 TCP 23.104.0.1:43524 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:16:39.271 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60238 10 6452 1 2025-08-16 17:17:04.966 00:00:10.372 TCP 23.104.0.1:53064 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:17:39.492 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44180 10 6452 1 2025-08-16 17:18:05.377 00:00:10.364 TCP 23.104.0.1:33574 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:14:12.224 00:05:00.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 17:18:39.715 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58856 10 6452 1 2025-08-16 17:19:02.250 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 17:19:02.418 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 17:19:05.776 00:00:10.369 TCP 23.104.0.1:59458 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:19:39.928 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:34768 10 6452 1 2025-08-16 17:20:06.177 00:00:10.368 TCP 23.104.0.1:58204 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:20:40.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45338 10 6452 1 2025-08-16 17:17:12.226 00:05:00.874 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 17:21:06.581 00:00:10.324 TCP 23.104.0.1:55012 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:21:40.337 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47830 10 6452 1 2025-08-16 17:22:06.945 00:00:10.369 TCP 23.104.0.1:43460 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:22:40.544 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:51720 10 6452 1 2025-08-16 17:23:07.352 00:00:10.363 TCP 23.104.0.1:33452 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:23:40.748 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53682 10 6452 1 2025-08-16 17:24:02.351 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 17:24:02.299 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 17:20:12.225 00:05:00.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 17:24:07.759 00:00:10.380 TCP 23.104.0.1:52266 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:24:40.964 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56954 10 6452 1 2025-08-16 17:25:08.178 00:00:10.361 TCP 23.104.0.1:45212 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:25:41.181 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40612 10 6452 1 2025-08-16 17:26:08.580 00:00:10.361 TCP 23.104.0.1:54888 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:26:41.395 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47874 10 6452 1 2025-08-16 17:23:12.227 00:05:00.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 17:27:08.981 00:00:10.368 TCP 23.104.0.1:40372 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:27:41.574 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49318 10 6452 1 2025-08-16 17:28:09.388 00:00:10.322 TCP 23.104.0.1:37476 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:28:41.794 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37662 10 6452 1 2025-08-16 17:29:02.383 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 17:29:02.333 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 17:29:09.744 00:00:10.371 TCP 23.104.0.1:50092 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:29:41.968 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:38610 10 6452 1 2025-08-16 17:26:12.228 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 17:30:10.150 00:00:10.440 TCP 23.104.0.1:47778 -> 1.101.0.1:3000 15 1926 1 2025-08-16 17:30:42.167 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54496 12 10367 1 2025-08-16 17:31:10.634 00:00:10.359 TCP 23.104.0.1:60086 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:31:42.401 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-08-16 17:32:11.031 00:00:10.360 TCP 23.104.0.1:39178 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:32:42.574 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55380 10 6452 1 2025-08-16 17:29:12.230 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 17:33:11.440 00:00:10.365 TCP 23.104.0.1:37120 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:33:42.781 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45136 10 6452 1 2025-08-16 17:34:02.771 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 17:34:02.707 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 17:34:11.842 00:00:10.386 TCP 23.104.0.1:34238 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:34:42.990 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46828 10 6452 1 2025-08-16 17:35:12.270 00:00:10.367 TCP 23.104.0.1:37524 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:35:43.221 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46582 10 6452 1 2025-08-16 17:32:12.228 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 17:36:12.672 00:00:10.364 TCP 23.104.0.1:44476 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:36:43.432 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36300 10 6452 1 2025-08-16 17:37:13.104 00:00:10.320 TCP 23.104.0.1:50234 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:37:43.643 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43196 10 6452 1 2025-08-16 17:38:13.463 00:00:10.580 TCP 23.104.0.1:37534 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:38:43.813 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:52214 10 6452 1 2025-08-16 17:39:02.672 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 17:39:02.688 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 17:35:12.232 00:05:00.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 17:39:14.116 00:00:10.324 TCP 23.104.0.1:45734 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:39:44.037 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35576 10 6452 1 2025-08-16 17:40:14.482 00:00:10.368 TCP 23.104.0.1:58950 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:40:44.260 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48404 10 6452 1 2025-08-16 17:41:14.895 00:00:10.376 TCP 23.104.0.1:57362 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:41:44.478 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48924 10 6452 1 2025-08-16 17:38:12.230 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 17:42:15.309 00:00:10.323 TCP 23.104.0.1:37446 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:42:44.692 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40808 10 6452 1 2025-08-16 17:43:15.674 00:00:10.333 TCP 23.104.0.1:43070 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:43:44.903 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:36020 10 6452 1 2025-08-16 17:44:02.694 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 17:44:02.948 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 17:44:16.043 00:00:10.333 TCP 23.104.0.1:60166 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:44:45.099 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60874 10 6452 1 2025-08-16 17:41:12.232 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 17:45:16.412 00:00:10.387 TCP 23.104.0.1:39528 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:45:45.272 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-08-16 17:46:16.839 00:00:10.351 TCP 23.104.0.1:53026 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:46:45.489 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50380 10 6452 1 2025-08-16 17:47:17.226 00:00:10.333 TCP 23.104.0.1:55886 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:47:45.699 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40510 10 6452 1 2025-08-16 17:44:12.230 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 17:48:17.589 00:00:10.365 TCP 23.104.0.1:58998 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:48:45.876 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60110 10 6452 1 2025-08-16 17:49:03.037 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 17:49:02.995 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 17:49:17.994 00:00:10.364 TCP 23.104.0.1:57484 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:49:46.105 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51846 10 6452 1 2025-08-16 17:50:18.395 00:00:10.437 TCP 23.104.0.1:35384 -> 1.101.0.1:3000 15 1926 1 2025-08-16 17:50:46.319 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:56744 12 10365 1 2025-08-16 17:47:12.233 00:05:00.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 17:51:18.868 00:00:10.325 TCP 23.104.0.1:49582 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:51:46.559 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35724 10 6452 1 2025-08-16 17:52:19.229 00:00:10.361 TCP 23.104.0.1:41820 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:52:46.776 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:50788 10 6452 1 2025-08-16 17:53:19.630 00:00:10.364 TCP 23.104.0.1:46092 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:53:47.049 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39456 10 6452 1 2025-08-16 17:54:03.253 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 17:54:02.922 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 17:50:12.231 00:05:00.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 17:54:20.045 00:00:10.369 TCP 23.104.0.1:54720 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:54:47.263 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53866 10 6452 1 2025-08-16 17:55:20.449 00:00:10.438 TCP 23.104.0.1:49336 -> 1.101.0.1:3000 15 1926 1 2025-08-16 17:55:47.481 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:39868 12 10574 1 2025-08-16 17:56:20.923 00:00:10.406 TCP 23.104.0.1:43112 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:56:47.737 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44298 10 6661 1 2025-08-16 17:53:12.235 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 17:57:21.364 00:00:10.366 TCP 23.104.0.1:34790 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:57:47.945 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48818 10 6661 1 2025-08-16 17:58:21.768 00:00:10.367 TCP 23.104.0.1:56732 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 514187, total packets: 1592, avg bps: 1099, avg pps: 0, avg bpp: 322 Time window: 2025-08-16 16:56:12 - 2025-08-16 17:58:32 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0011s Wall: 0.0033s flows/second: 50016.2 Runtime: 0.0033s