Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-17 19:58:55.222 00:00:10.360 TCP 23.104.0.1:41330 -> 1.101.0.1:3000 11 1507 1 2025-08-17 19:59:26.008 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38416 10 6452 1 2025-08-17 19:59:34.516 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 19:59:34.272 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 19:59:55.618 00:00:10.366 TCP 23.104.0.1:38528 -> 1.101.0.1:3000 11 1507 1 2025-08-17 19:56:12.687 00:05:00.951 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 20:00:26.218 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:37352 12 10367 1 2025-08-17 20:00:56.024 00:00:10.436 TCP 23.104.0.1:46256 -> 1.101.0.1:3000 15 1926 1 2025-08-17 20:01:26.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36246 10 6452 1 2025-08-17 20:01:56.500 00:00:10.322 TCP 23.104.0.1:55114 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:02:26.640 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43012 10 6452 1 2025-08-17 20:02:56.861 00:00:10.369 TCP 23.104.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-08-17 19:59:12.700 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 20:03:26.848 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37392 10 6452 1 2025-08-17 20:03:57.271 00:00:10.364 TCP 23.104.0.1:34018 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:04:34.276 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 20:04:34.575 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 20:04:27.026 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58530 10 6452 1 2025-08-17 20:04:57.671 00:00:10.364 TCP 23.104.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:05:27.233 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34362 10 6452 1 2025-08-17 20:05:58.100 00:00:10.414 TCP 23.104.0.1:54212 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:02:12.697 00:05:00.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 20:06:27.409 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46462 10 6452 1 2025-08-17 20:06:58.555 00:00:10.368 TCP 23.104.0.1:51112 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:07:27.627 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53940 10 6452 1 2025-08-17 20:07:58.956 00:00:10.364 TCP 23.104.0.1:41086 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:08:27.855 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46156 10 6452 1 2025-08-17 20:08:59.363 00:00:10.336 TCP 23.104.0.1:47052 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:05:12.700 00:05:00.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 20:09:34.720 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 20:09:34.553 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 20:09:28.087 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34088 10 6452 1 2025-08-17 20:09:59.739 00:00:10.368 TCP 23.104.0.1:37648 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:10:28.309 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-08-17 20:11:00.150 00:00:10.338 TCP 23.104.0.1:48596 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:11:28.525 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35536 10 6452 1 2025-08-17 20:12:00.522 00:00:10.328 TCP 23.104.0.1:50100 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:08:12.698 00:05:00.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 20:12:28.707 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41840 10 6452 1 2025-08-17 20:13:00.889 00:00:10.365 TCP 23.104.0.1:46542 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:13:28.924 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34112 10 6452 1 2025-08-17 20:14:01.292 00:00:10.327 TCP 23.104.0.1:34682 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:14:34.851 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 20:14:34.591 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 20:14:29.146 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58334 10 6452 1 2025-08-17 20:11:12.703 00:05:00.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 20:15:01.663 00:00:10.366 TCP 23.104.0.1:46098 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:15:29.360 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38424 10 6452 1 2025-08-17 20:16:02.093 00:00:10.367 TCP 23.104.0.1:49392 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:16:29.530 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46882 10 6452 1 2025-08-17 20:17:02.500 00:00:10.369 TCP 23.104.0.1:50786 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:17:29.706 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41662 10 6452 1 2025-08-17 20:14:12.701 00:05:00.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 20:18:02.903 00:00:10.331 TCP 23.104.0.1:45206 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:18:29.922 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60102 10 6452 1 2025-08-17 20:19:03.267 00:00:10.367 TCP 23.104.0.1:58810 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:19:34.812 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 20:19:34.697 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 20:19:30.161 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47116 10 6452 1 2025-08-17 20:20:03.674 00:00:10.323 TCP 23.104.0.1:39586 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:20:30.341 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41856 10 6452 1 2025-08-17 20:21:04.048 00:00:10.367 TCP 23.104.0.1:38464 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:17:12.704 00:05:00.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 20:21:30.552 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50844 10 6452 1 2025-08-17 20:22:04.456 00:00:10.318 TCP 23.104.0.1:40668 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:22:30.735 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51116 10 6452 1 2025-08-17 20:23:04.819 00:00:10.368 TCP 23.104.0.1:43670 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:23:30.902 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:52394 10 6452 1 2025-08-17 20:20:12.701 00:05:00.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 20:24:05.230 00:00:10.366 TCP 23.104.0.1:56402 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:24:34.929 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 20:24:34.929 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 20:24:31.092 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48200 10 6452 1 2025-08-17 20:25:05.637 00:00:10.364 TCP 23.104.0.1:58628 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:25:31.303 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55580 10 6452 1 2025-08-17 20:26:06.046 00:00:10.323 TCP 23.104.0.1:36868 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:26:31.481 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47520 10 6452 1 2025-08-17 20:27:06.411 00:00:10.365 TCP 23.104.0.1:37332 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:23:12.704 00:05:00.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 20:27:31.697 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34766 10 6452 1 2025-08-17 20:28:06.815 00:00:10.379 TCP 23.104.0.1:44156 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:28:31.914 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47440 10 6452 1 2025-08-17 20:29:07.236 00:00:10.362 TCP 23.104.0.1:41146 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:29:35.002 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 20:29:34.873 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 20:29:32.128 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41950 10 6452 1 2025-08-17 20:26:12.704 00:05:00.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 20:30:07.637 00:00:10.387 TCP 23.104.0.1:44508 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:30:32.350 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39428 10 6452 1 2025-08-17 20:31:08.044 00:00:10.365 TCP 23.104.0.1:43594 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:31:32.564 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-08-17 20:32:08.445 00:00:10.367 TCP 23.104.0.1:53084 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:32:32.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58882 10 6452 1 2025-08-17 20:29:12.707 00:05:00.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 20:33:08.851 00:00:10.379 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:33:32.987 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33296 10 6452 1 2025-08-17 20:34:09.270 00:00:10.415 TCP 23.104.0.1:36662 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:34:34.882 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 20:34:34.854 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 20:34:33.173 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53658 10 6452 1 2025-08-17 20:35:09.724 00:00:10.398 TCP 23.104.0.1:33164 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:35:33.395 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48924 10 6452 1 2025-08-17 20:32:12.707 00:05:00.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 20:36:10.148 00:00:10.363 TCP 23.104.0.1:33932 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:36:33.572 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57878 10 6452 1 2025-08-17 20:37:10.547 00:00:10.326 TCP 23.104.0.1:44584 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:37:33.798 00:00:10.340 TCP 1.101.0.1:3000 -> 22.102.0.1:40514 10 6452 1 2025-08-17 20:38:10.913 00:00:10.324 TCP 23.104.0.1:53054 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:38:34.181 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:42046 10 6452 1 2025-08-17 20:35:12.709 00:05:00.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 20:39:11.277 00:00:10.371 TCP 23.104.0.1:60738 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:39:35.548 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 20:39:35.348 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 20:39:34.374 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59024 10 6452 1 2025-08-17 20:40:11.684 00:00:10.326 TCP 23.104.0.1:41090 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:40:34.587 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60534 10 6452 1 2025-08-17 20:41:12.060 00:00:10.319 TCP 23.104.0.1:37782 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:41:34.802 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35894 10 6452 1 2025-08-17 20:38:12.708 00:05:00.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 20:42:12.424 00:00:10.370 TCP 23.104.0.1:53916 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:42:34.980 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57394 10 6452 1 2025-08-17 20:43:12.838 00:00:10.387 TCP 23.104.0.1:52708 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:43:35.208 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58984 10 6452 1 2025-08-17 20:44:13.269 00:00:10.367 TCP 23.104.0.1:59336 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:44:35.050 00:00:00.049 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 20:44:35.187 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 20:44:35.383 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39542 10 6452 1 2025-08-17 20:41:12.712 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 20:45:13.670 00:00:10.326 TCP 23.104.0.1:38176 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:45:35.594 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40196 10 6452 1 2025-08-17 20:46:14.034 00:00:10.374 TCP 23.104.0.1:42304 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:46:35.802 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50174 10 6452 1 2025-08-17 20:47:14.452 00:00:10.368 TCP 23.104.0.1:35054 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:47:35.974 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:47740 10 6452 1 2025-08-17 20:44:12.710 00:05:00.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 20:48:14.861 00:00:10.379 TCP 23.104.0.1:46358 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:48:36.171 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-08-17 20:49:15.279 00:00:10.363 TCP 23.104.0.1:37680 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:49:35.369 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 20:49:35.382 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 20:49:36.382 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49180 10 6452 1 2025-08-17 20:50:15.680 00:00:10.368 TCP 23.104.0.1:36250 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:50:36.588 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59962 10 6452 1 2025-08-17 20:47:12.716 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 20:51:16.111 00:00:10.366 TCP 23.104.0.1:37480 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:51:36.804 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50298 10 6452 1 2025-08-17 20:52:16.516 00:00:10.368 TCP 23.104.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:52:36.973 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52488 10 6452 1 2025-08-17 20:53:16.922 00:00:10.386 TCP 23.104.0.1:57350 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:53:37.172 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:49112 10 6452 1 2025-08-17 20:50:12.714 00:05:00.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 20:54:17.352 00:00:10.368 TCP 23.104.0.1:41954 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:54:35.390 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 20:54:35.673 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 20:54:37.340 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55434 10 6452 1 2025-08-17 20:55:17.755 00:00:10.382 TCP 23.104.0.1:54334 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:55:37.549 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47776 10 6452 1 2025-08-17 20:56:18.175 00:00:10.369 TCP 23.104.0.1:50614 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:56:37.765 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41052 10 6452 1 2025-08-17 20:53:12.717 00:05:00.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 20:57:18.579 00:00:10.362 TCP 23.104.0.1:43802 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:57:37.977 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:36852 10 6452 1 2025-08-17 20:58:18.975 00:00:10.380 TCP 23.104.0.1:56006 -> 1.101.0.1:3000 11 1507 1 2025-08-17 20:58:38.171 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55808 10 6452 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1070, avg pps: 0, avg bpp: 318 Time window: 2025-08-17 19:56:12 - 2025-08-17 20:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0019s Wall: 0.0031s flows/second: 52920.9 Runtime: 0.0031s