Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-17 11:58:41.676 00:00:10.368 TCP 23.104.0.1:52498 -> 1.101.0.1:3000 11 1507 1 2025-08-17 11:58:43.087 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42346 10 6452 1 2025-08-17 11:59:24.819 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 11:59:24.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 11:59:42.103 00:00:10.335 TCP 23.104.0.1:55580 -> 1.101.0.1:3000 11 1507 1 2025-08-17 11:59:43.261 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41010 10 6452 1 2025-08-17 11:56:12.552 00:05:00.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 12:00:43.434 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55924 10 6452 1 2025-08-17 12:00:42.478 00:00:10.364 TCP 23.104.0.1:54696 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:01:43.651 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35706 10 6452 1 2025-08-17 12:01:42.880 00:00:10.389 TCP 23.104.0.1:53054 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:02:43.309 00:00:10.324 TCP 23.104.0.1:60100 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:02:43.828 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33802 10 6452 1 2025-08-17 11:59:12.554 00:05:00.917 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 12:03:43.678 00:00:10.328 TCP 23.104.0.1:54418 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:03:44.048 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44116 10 6452 1 2025-08-17 12:04:24.993 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 12:04:24.822 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 12:04:44.063 00:00:10.363 TCP 23.104.0.1:44628 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:04:44.218 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49546 10 6452 1 2025-08-17 12:05:44.461 00:00:10.328 TCP 23.104.0.1:55174 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:05:44.431 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44586 10 6452 1 2025-08-17 12:02:12.551 00:05:00.922 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 12:06:44.825 00:00:10.332 TCP 23.104.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:06:44.605 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51302 10 6452 1 2025-08-17 12:07:45.192 00:00:10.321 TCP 23.104.0.1:47258 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:07:44.784 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35620 10 6452 1 2025-08-17 12:08:44.998 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53364 10 6452 1 2025-08-17 12:08:45.552 00:00:10.360 TCP 23.104.0.1:59306 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:05:12.554 00:05:00.919 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 12:09:25.110 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 12:09:25.007 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 12:09:45.951 00:00:10.369 TCP 23.104.0.1:34032 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:09:45.210 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58310 10 6452 1 2025-08-17 12:10:46.360 00:00:10.367 TCP 23.104.0.1:35966 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:10:45.419 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55308 10 6452 1 2025-08-17 12:11:45.640 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33946 10 6452 1 2025-08-17 12:11:46.764 00:00:10.337 TCP 23.104.0.1:49300 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:08:12.553 00:05:00.924 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 12:12:45.860 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39346 10 6452 1 2025-08-17 12:12:47.145 00:00:10.400 TCP 23.104.0.1:50736 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:13:46.086 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53424 10 6452 1 2025-08-17 12:13:47.578 00:00:10.378 TCP 23.104.0.1:41574 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:14:24.897 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 12:14:25.093 00:00:00.049 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 12:14:46.261 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48094 10 6452 1 2025-08-17 12:14:47.998 00:00:10.323 TCP 23.104.0.1:38570 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:11:12.555 00:05:00.920 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 12:15:46.473 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43906 10 6452 1 2025-08-17 12:15:48.362 00:00:10.365 TCP 23.104.0.1:51424 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:16:46.687 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56668 10 6452 1 2025-08-17 12:16:48.772 00:00:10.330 TCP 23.104.0.1:51678 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:17:46.865 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:41914 10 6452 1 2025-08-17 12:17:49.137 00:00:10.368 TCP 23.104.0.1:36210 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:14:12.554 00:05:00.926 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 12:18:49.550 00:00:10.331 TCP 23.104.0.1:42492 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:18:47.101 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48426 10 6452 1 2025-08-17 12:19:25.058 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 12:19:25.433 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 12:19:47.319 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37050 10 6452 1 2025-08-17 12:19:49.913 00:00:10.359 TCP 23.104.0.1:57278 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:20:50.312 00:00:10.364 TCP 23.104.0.1:35488 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:20:47.491 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55284 10 6452 1 2025-08-17 12:17:12.557 00:05:00.922 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 12:21:47.700 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58716 10 6452 1 2025-08-17 12:21:50.718 00:00:10.372 TCP 23.104.0.1:34844 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:22:51.135 00:00:10.371 TCP 23.104.0.1:44990 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:22:47.913 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6452 1 2025-08-17 12:23:48.126 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44308 10 6452 1 2025-08-17 12:23:51.543 00:00:10.363 TCP 23.104.0.1:43508 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:20:12.555 00:05:00.926 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 12:24:24.948 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 12:24:25.293 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 12:24:48.341 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47664 10 6452 1 2025-08-17 12:24:51.943 00:00:10.332 TCP 23.104.0.1:34310 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:25:48.513 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:49060 12 10365 1 2025-08-17 12:25:52.313 00:00:10.442 TCP 23.104.0.1:49432 -> 1.101.0.1:3000 15 1926 1 2025-08-17 12:26:48.755 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34066 10 6452 1 2025-08-17 12:26:52.790 00:00:10.367 TCP 23.104.0.1:37624 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:23:12.559 00:05:00.921 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 12:27:48.925 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45726 10 6452 1 2025-08-17 12:27:53.200 00:00:10.364 TCP 23.104.0.1:42090 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:28:49.137 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60320 10 6452 1 2025-08-17 12:28:53.603 00:00:10.362 TCP 23.104.0.1:45002 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:29:25.494 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 12:29:25.135 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 12:29:49.345 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56432 10 6452 1 2025-08-17 12:29:54.003 00:00:10.358 TCP 23.104.0.1:56630 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:26:12.557 00:05:00.926 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 12:30:49.557 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56770 10 6452 1 2025-08-17 12:30:54.398 00:00:10.360 TCP 23.104.0.1:54224 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:31:49.774 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54454 10 6452 1 2025-08-17 12:31:54.799 00:00:10.331 TCP 23.104.0.1:59312 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:32:49.947 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55268 10 6452 1 2025-08-17 12:32:55.168 00:00:10.368 TCP 23.104.0.1:35086 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:29:12.560 00:05:00.921 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 12:33:50.173 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:54276 10 6452 1 2025-08-17 12:33:55.577 00:00:10.364 TCP 23.104.0.1:34118 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:34:25.659 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 12:34:25.600 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 12:34:50.342 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33606 10 6452 1 2025-08-17 12:34:55.980 00:00:10.364 TCP 23.104.0.1:36354 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:35:50.561 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59874 10 6452 1 2025-08-17 12:35:56.383 00:00:10.369 TCP 23.104.0.1:41364 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:32:12.558 00:05:00.926 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 12:36:50.773 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39678 10 6452 1 2025-08-17 12:36:56.791 00:00:10.366 TCP 23.104.0.1:34912 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:37:50.990 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56292 10 6452 1 2025-08-17 12:37:57.192 00:00:10.366 TCP 23.104.0.1:60444 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:38:51.225 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51686 10 6452 1 2025-08-17 12:38:57.600 00:00:10.367 TCP 23.104.0.1:58996 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:35:12.561 00:05:00.920 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 12:39:25.480 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 12:39:25.662 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 12:39:51.446 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36828 10 6452 1 2025-08-17 12:39:57.999 00:00:10.367 TCP 23.104.0.1:58960 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:40:51.658 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50844 10 6452 1 2025-08-17 12:40:58.403 00:00:10.364 TCP 23.104.0.1:49634 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:41:51.872 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42006 10 6452 1 2025-08-17 12:41:58.812 00:00:10.330 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:38:12.560 00:05:00.925 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 12:42:52.101 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47380 10 6452 1 2025-08-17 12:42:59.182 00:00:10.366 TCP 23.104.0.1:53742 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:43:52.326 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60826 10 6452 1 2025-08-17 12:43:59.591 00:00:10.361 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:44:25.741 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 12:44:25.782 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 12:44:52.562 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47064 10 6452 1 2025-08-17 12:45:00.002 00:00:10.365 TCP 23.104.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:41:12.563 00:05:00.920 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 12:45:52.774 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59102 10 6452 1 2025-08-17 12:46:00.404 00:00:10.453 TCP 23.104.0.1:42668 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:46:52.999 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54654 10 6452 1 2025-08-17 12:47:00.892 00:00:10.326 TCP 23.104.0.1:58274 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:47:53.215 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55700 10 6452 1 2025-08-17 12:48:01.256 00:00:10.363 TCP 23.104.0.1:56742 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:44:12.562 00:05:00.924 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 12:48:53.394 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45254 10 6452 1 2025-08-17 12:49:01.655 00:00:10.369 TCP 23.104.0.1:50238 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:49:25.916 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 12:49:25.869 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 12:49:53.576 00:00:10.436 TCP 1.101.0.1:3000 -> 22.102.0.1:55532 10 6452 1 2025-08-17 12:50:02.069 00:00:10.364 TCP 23.104.0.1:40894 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:50:54.079 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55450 10 6452 1 2025-08-17 12:51:02.471 00:00:10.371 TCP 23.104.0.1:38782 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:47:12.567 00:05:00.919 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 12:51:54.249 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48736 10 6452 1 2025-08-17 12:52:02.883 00:00:10.387 TCP 23.104.0.1:52834 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:52:54.464 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42492 10 6452 1 2025-08-17 12:53:03.306 00:00:10.365 TCP 23.104.0.1:53084 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:53:54.680 00:00:10.556 TCP 1.101.0.1:3000 -> 22.102.0.1:43908 10 6452 1 2025-08-17 12:50:12.564 00:05:00.923 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 12:54:03.709 00:00:10.377 TCP 23.104.0.1:57928 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:54:25.920 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 12:54:25.834 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 12:54:55.278 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38196 10 6452 1 2025-08-17 12:55:04.128 00:00:10.364 TCP 23.104.0.1:48796 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:55:55.485 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46232 10 6452 1 2025-08-17 12:56:04.529 00:00:10.369 TCP 23.104.0.1:54616 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:56:55.698 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36336 10 6452 1 2025-08-17 12:53:12.568 00:05:00.918 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 12:57:04.936 00:00:10.385 TCP 23.104.0.1:46580 -> 1.101.0.1:3000 11 1507 1 2025-08-17 12:57:55.906 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49220 10 6452 1 2025-08-17 12:58:05.350 00:00:10.363 TCP 23.104.0.1:54536 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502680, total packets: 1578, avg bps: 1080, avg pps: 0, avg bpp: 318 Time window: 2025-08-17 11:56:12 - 2025-08-17 12:58:15 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0007s Wall: 0.0030s flows/second: 53789.9 Runtime: 0.0031s