Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-17 09:58:53.546 00:00:10.366 TCP 23.104.0.1:34570 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:59:22.393 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 09:59:22.334 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 09:59:15.573 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33188 11 6492 1 2025-08-17 09:59:53.950 00:00:10.368 TCP 23.104.0.1:35010 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:56:12.513 00:05:00.927 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 10:00:15.746 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36896 10 6452 1 2025-08-17 10:00:54.359 00:00:10.374 TCP 23.104.0.1:39096 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:01:15.926 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51870 10 6452 1 2025-08-17 10:01:54.761 00:00:10.381 TCP 23.104.0.1:38082 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:02:16.135 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 6452 1 2025-08-17 10:02:55.189 00:00:10.376 TCP 23.104.0.1:43484 -> 1.101.0.1:3000 11 1507 1 2025-08-17 09:59:12.517 00:05:00.922 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 10:03:16.347 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40052 10 6452 1 2025-08-17 10:03:55.609 00:00:10.362 TCP 23.104.0.1:46630 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:04:22.539 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 10:04:16.564 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:32800 10 6452 1 2025-08-17 10:04:22.537 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 10:04:56.013 00:00:10.363 TCP 23.104.0.1:43790 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:05:16.734 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34562 10 6452 1 2025-08-17 10:05:56.422 00:00:10.376 TCP 23.104.0.1:44752 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:02:12.515 00:05:00.927 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 10:06:16.948 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:60936 10 6452 1 2025-08-17 10:06:56.837 00:00:10.383 TCP 23.104.0.1:36792 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:07:17.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45080 10 6452 1 2025-08-17 10:07:57.267 00:00:10.370 TCP 23.104.0.1:42264 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:08:17.346 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46792 10 6452 1 2025-08-17 10:08:57.673 00:00:10.377 TCP 23.104.0.1:60076 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:05:12.517 00:05:00.923 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 10:09:22.643 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 10:09:22.426 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 10:09:17.554 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44234 10 6452 1 2025-08-17 10:09:58.102 00:00:10.326 TCP 23.104.0.1:38958 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:10:17.773 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45498 10 6452 1 2025-08-17 10:10:58.466 00:00:10.361 TCP 23.104.0.1:34472 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:11:17.983 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:51456 10 6452 1 2025-08-17 10:11:58.865 00:00:10.371 TCP 23.104.0.1:59964 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:08:12.516 00:05:00.928 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 10:12:18.173 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46784 10 6452 1 2025-08-17 10:12:59.274 00:00:10.325 TCP 23.104.0.1:43402 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:13:18.389 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58868 10 6452 1 2025-08-17 10:13:59.650 00:00:10.367 TCP 23.104.0.1:39942 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:14:22.783 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 10:14:22.671 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 10:14:18.566 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58622 10 6452 1 2025-08-17 10:15:00.063 00:00:10.331 TCP 23.104.0.1:50838 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:11:12.521 00:05:00.923 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 10:15:18.733 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33172 10 6452 1 2025-08-17 10:16:00.432 00:00:10.324 TCP 23.104.0.1:59522 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:16:18.906 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44730 10 6452 1 2025-08-17 10:17:00.797 00:00:10.364 TCP 23.104.0.1:40984 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:17:19.119 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56626 12 6556 1 2025-08-17 10:18:01.202 00:00:10.373 TCP 23.104.0.1:49440 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:14:12.519 00:05:00.926 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 10:18:19.329 00:00:10.683 TCP 1.101.0.1:3000 -> 22.102.0.1:48864 10 6452 1 2025-08-17 10:19:01.614 00:00:10.361 TCP 23.104.0.1:36430 -> 1.101.0.1:3000 12 1559 1 2025-08-17 10:19:22.917 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 10:19:22.784 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 10:19:20.074 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35198 10 6452 1 2025-08-17 10:20:02.022 00:00:10.366 TCP 23.104.0.1:36848 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:20:20.247 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39102 10 6452 1 2025-08-17 10:21:02.432 00:00:10.902 TCP 23.104.0.1:46142 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:17:12.522 00:05:00.921 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 10:21:20.460 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40006 10 6452 1 2025-08-17 10:22:03.369 00:00:10.367 TCP 23.104.0.1:54070 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:22:20.687 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44002 10 6452 1 2025-08-17 10:23:03.774 00:00:10.376 TCP 23.104.0.1:39238 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:23:20.910 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47000 10 6452 1 2025-08-17 10:20:12.520 00:05:00.925 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 10:24:04.193 00:00:10.356 TCP 23.104.0.1:51608 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:24:23.015 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 10:24:22.956 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 10:24:21.125 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53152 10 6452 1 2025-08-17 10:25:04.590 00:00:10.371 TCP 23.104.0.1:58426 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:25:21.301 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6452 1 2025-08-17 10:26:04.998 00:00:10.365 TCP 23.104.0.1:48388 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:26:21.518 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38380 10 6452 1 2025-08-17 10:27:05.399 00:00:10.323 TCP 23.104.0.1:59094 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:23:12.527 00:05:00.917 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 10:27:21.733 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44856 10 6452 1 2025-08-17 10:28:05.757 00:00:10.383 TCP 23.104.0.1:56850 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:28:21.947 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52352 10 6452 1 2025-08-17 10:29:06.179 00:00:10.325 TCP 23.104.0.1:33098 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:29:22.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 10:29:23.020 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 10:29:22.174 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33074 10 6452 1 2025-08-17 10:30:06.544 00:00:10.374 TCP 23.104.0.1:54462 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:26:12.527 00:05:00.921 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 10:30:22.365 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33654 12 6556 1 2025-08-17 10:31:06.956 00:00:10.362 TCP 23.104.0.1:51672 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:31:22.582 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52080 10 6452 1 2025-08-17 10:32:07.355 00:00:10.318 TCP 23.104.0.1:60636 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:32:22.794 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34394 10 6452 1 2025-08-17 10:29:12.531 00:05:00.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 10:33:07.716 00:00:10.383 TCP 23.104.0.1:54348 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:33:23.012 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45156 10 6452 1 2025-08-17 10:34:08.138 00:00:10.369 TCP 23.104.0.1:58616 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:34:23.086 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 10:34:23.035 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 10:34:23.229 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58734 10 6452 1 2025-08-17 10:35:08.547 00:00:10.437 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 15 1926 1 2025-08-17 10:35:23.454 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:58946 12 10367 1 2025-08-17 10:32:12.528 00:05:00.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 10:36:09.023 00:00:10.366 TCP 23.104.0.1:55684 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:36:23.655 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53196 10 6452 1 2025-08-17 10:37:09.431 00:00:10.366 TCP 23.104.0.1:51444 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:37:23.869 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46502 10 6452 1 2025-08-17 10:38:09.838 00:00:10.391 TCP 23.104.0.1:40312 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:38:24.100 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48962 10 6452 1 2025-08-17 10:35:12.532 00:05:00.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 10:39:23.267 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 10:39:10.268 00:00:10.368 TCP 23.104.0.1:40734 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:39:23.364 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 10:39:24.309 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58104 10 6452 1 2025-08-17 10:40:10.680 00:00:10.412 TCP 23.104.0.1:46936 -> 1.101.0.1:3000 15 1926 1 2025-08-17 10:40:24.490 00:00:10.807 TCP 1.101.0.1:3000 -> 22.102.0.1:54794 12 10365 1 2025-08-17 10:41:11.128 00:00:10.325 TCP 23.104.0.1:59692 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:41:25.337 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49762 10 6452 1 2025-08-17 10:38:12.529 00:05:00.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 10:42:11.491 00:00:10.365 TCP 23.104.0.1:56252 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:42:25.553 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58646 10 6452 1 2025-08-17 10:43:11.893 00:00:10.336 TCP 23.104.0.1:51856 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:43:25.764 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40742 12 6556 1 2025-08-17 10:44:23.374 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 10:44:12.268 00:00:10.338 TCP 23.104.0.1:54350 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:44:23.421 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 10:44:25.976 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:60462 10 6452 1 2025-08-17 10:41:12.533 00:05:00.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 10:45:12.643 00:00:10.375 TCP 23.104.0.1:60224 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:45:26.168 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55638 10 6452 1 2025-08-17 10:46:13.089 00:00:10.329 TCP 23.104.0.1:39990 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:46:26.381 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45844 10 6452 1 2025-08-17 10:47:13.457 00:00:10.322 TCP 23.104.0.1:39408 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:47:26.598 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55564 10 6452 1 2025-08-17 10:44:12.529 00:05:00.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 10:48:13.820 00:00:10.362 TCP 23.104.0.1:45278 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:48:26.815 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41698 10 6452 1 2025-08-17 10:49:23.552 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 10:49:23.480 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 10:49:14.222 00:00:10.329 TCP 23.104.0.1:39390 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:49:27.041 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45488 10 6452 1 2025-08-17 10:50:14.593 00:00:10.375 TCP 23.104.0.1:39322 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:50:27.269 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39012 10 6452 1 2025-08-17 10:47:12.534 00:05:00.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 10:51:15.010 00:00:10.326 TCP 23.104.0.1:57966 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:51:27.481 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39498 10 6452 1 2025-08-17 10:52:15.373 00:00:10.363 TCP 23.104.0.1:54986 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:52:27.698 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39532 10 6452 1 2025-08-17 10:53:15.778 00:00:10.364 TCP 23.104.0.1:33100 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:53:27.912 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39404 10 6452 1 2025-08-17 10:50:12.533 00:05:00.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 10:54:23.201 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 10:54:16.180 00:00:10.365 TCP 23.104.0.1:51612 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:54:23.713 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 10:54:28.086 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35188 10 6452 1 2025-08-17 10:55:16.585 00:00:10.362 TCP 23.104.0.1:45372 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:55:28.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57284 10 6452 1 2025-08-17 10:56:16.980 00:00:10.332 TCP 23.104.0.1:47150 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:56:28.516 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38276 10 6452 1 2025-08-17 10:53:12.535 00:05:00.916 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 10:57:17.353 00:00:10.366 TCP 23.104.0.1:58202 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:57:28.746 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40366 10 6452 1 2025-08-17 10:58:17.759 00:00:10.378 TCP 23.104.0.1:44468 -> 1.101.0.1:3000 11 1507 1 2025-08-17 10:58:28.955 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39108 10 6452 1 Summary: total flows: 164, total bytes: 507418, total packets: 1592, avg bps: 1083, avg pps: 0, avg bpp: 318 Time window: 2025-08-17 09:56:12 - 2025-08-17 10:58:39 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0022s User: 0.0022s Wall: 0.0020s flows/second: 80631.3 Runtime: 0.0021s