Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-18 08:59:10.765 00:00:10.377 TCP 23.104.0.1:51306 -> 1.101.0.1:3000 11 1507 1 2025-08-18 08:59:15.599 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41656 10 6452 1 2025-08-18 08:59:50.245 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 08:59:50.012 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 08:56:12.938 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 09:00:11.182 00:00:10.363 TCP 23.104.0.1:37196 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:00:15.809 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49468 10 6452 1 2025-08-18 09:01:11.584 00:00:10.365 TCP 23.104.0.1:47770 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:01:16.038 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47482 10 6452 1 2025-08-18 09:02:11.995 00:00:10.363 TCP 23.104.0.1:33876 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:02:16.255 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47032 10 6452 1 2025-08-18 08:59:12.942 00:05:00.958 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 09:03:16.430 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:32918 10 6452 1 2025-08-18 09:03:12.399 00:00:10.366 TCP 23.104.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:04:16.618 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57502 10 6452 1 2025-08-18 09:04:12.801 00:00:10.369 TCP 23.104.0.1:38480 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:04:50.404 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 09:04:50.095 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 09:05:13.209 00:00:10.365 TCP 23.104.0.1:54744 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:05:16.826 00:00:10.397 TCP 1.101.0.1:3000 -> 22.102.0.1:44490 10 6452 1 2025-08-18 09:02:12.940 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 09:06:13.611 00:00:10.371 TCP 23.104.0.1:41374 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:06:17.259 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35966 10 6452 1 2025-08-18 09:07:14.024 00:00:10.327 TCP 23.104.0.1:48744 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:07:17.474 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40978 10 6452 1 2025-08-18 09:08:14.388 00:00:10.364 TCP 23.104.0.1:37576 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:08:17.684 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33860 10 6452 1 2025-08-18 09:05:12.944 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 09:09:14.791 00:00:10.365 TCP 23.104.0.1:46056 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:09:17.895 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43568 10 6452 1 2025-08-18 09:09:50.223 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 09:09:50.081 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 09:10:15.200 00:00:10.365 TCP 23.104.0.1:57282 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:10:18.119 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52290 10 6452 1 2025-08-18 09:11:15.605 00:00:10.368 TCP 23.104.0.1:44012 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:11:18.335 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34522 10 6452 1 2025-08-18 09:08:12.942 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 09:12:16.008 00:00:10.319 TCP 23.104.0.1:40142 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:12:18.553 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57052 10 6452 1 2025-08-18 09:13:16.365 00:00:10.324 TCP 23.104.0.1:41698 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:13:18.761 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46612 10 6452 1 2025-08-18 09:14:16.730 00:00:10.370 TCP 23.104.0.1:52776 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:14:18.929 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:52842 10 6452 1 2025-08-18 09:14:50.806 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 09:14:50.250 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 09:11:12.947 00:05:00.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 09:15:17.139 00:00:10.369 TCP 23.104.0.1:53650 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:15:19.181 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36232 10 6452 1 2025-08-18 09:16:19.391 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36716 10 6452 1 2025-08-18 09:16:17.547 00:00:10.372 TCP 23.104.0.1:48768 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:17:19.560 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35486 10 6452 1 2025-08-18 09:17:17.956 00:00:10.327 TCP 23.104.0.1:54660 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:14:12.955 00:05:00.956 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 09:18:18.321 00:00:10.367 TCP 23.104.0.1:46520 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:18:19.787 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45492 10 6452 1 2025-08-18 09:19:18.731 00:00:10.325 TCP 23.104.0.1:38948 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:19:20.005 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48356 10 6452 1 2025-08-18 09:19:50.613 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 09:19:50.592 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 09:20:19.107 00:00:10.325 TCP 23.104.0.1:49420 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:20:20.218 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35654 10 6452 1 2025-08-18 09:17:12.961 00:05:00.950 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 09:21:19.472 00:00:10.368 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:21:20.439 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60322 10 6452 1 2025-08-18 09:22:20.654 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40298 10 6452 1 2025-08-18 09:22:19.878 00:00:10.382 TCP 23.104.0.1:54276 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:23:20.299 00:00:10.364 TCP 23.104.0.1:33038 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:23:20.827 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46106 10 6452 1 2025-08-18 09:20:12.957 00:05:00.958 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 09:24:20.698 00:00:10.374 TCP 23.104.0.1:59714 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:24:21.074 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42848 11 6504 1 2025-08-18 09:24:50.538 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 09:24:50.579 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 09:25:21.114 00:00:10.356 TCP 23.104.0.1:45494 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:25:21.300 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54384 10 6452 1 2025-08-18 09:26:21.509 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60844 10 6452 1 2025-08-18 09:26:21.513 00:00:10.364 TCP 23.104.0.1:52066 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:23:12.960 00:05:00.953 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 09:27:21.726 00:00:10.258 TCP 1.101.0.1:3000 -> 22.102.0.1:58024 10 6452 1 2025-08-18 09:27:21.921 00:00:10.384 TCP 23.104.0.1:44092 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:28:22.025 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39224 10 6452 1 2025-08-18 09:28:22.344 00:00:10.328 TCP 23.104.0.1:48938 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:29:22.710 00:00:10.334 TCP 23.104.0.1:41814 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:29:22.235 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37164 10 6452 1 2025-08-18 09:29:50.415 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 09:29:50.796 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 09:26:12.958 00:05:00.958 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 09:30:23.105 00:00:10.362 TCP 23.104.0.1:54240 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:30:22.451 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51584 10 6452 1 2025-08-18 09:31:23.509 00:00:10.330 TCP 23.104.0.1:32976 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:31:22.637 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49678 10 6452 1 2025-08-18 09:32:23.896 00:00:10.371 TCP 23.104.0.1:54322 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:32:22.852 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51594 10 6452 1 2025-08-18 09:29:12.962 00:05:00.952 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 09:33:23.083 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51470 10 6452 1 2025-08-18 09:33:24.301 00:00:10.333 TCP 23.104.0.1:59018 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:34:24.666 00:00:10.365 TCP 23.104.0.1:49432 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:34:23.323 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42550 10 6452 1 2025-08-18 09:34:50.495 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 09:34:50.568 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 09:35:23.549 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35190 12 10361 1 2025-08-18 09:35:25.098 00:00:10.440 TCP 23.104.0.1:59602 -> 1.101.0.1:3000 15 1926 1 2025-08-18 09:32:12.959 00:05:00.958 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 09:36:23.785 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36696 10 6452 1 2025-08-18 09:36:25.577 00:00:10.371 TCP 23.104.0.1:56022 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:37:24.001 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56082 10 6452 1 2025-08-18 09:37:25.985 00:00:10.365 TCP 23.104.0.1:34344 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:38:26.391 00:00:10.361 TCP 23.104.0.1:38556 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:38:24.222 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:34462 10 6452 1 2025-08-18 09:35:12.964 00:05:00.952 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 09:39:24.469 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49310 10 6452 1 2025-08-18 09:39:26.800 00:00:10.369 TCP 23.104.0.1:57566 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:39:50.893 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 09:39:50.925 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 09:40:24.683 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44540 10 6452 1 2025-08-18 09:40:27.210 00:00:10.366 TCP 23.104.0.1:50576 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:41:24.907 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55926 10 6452 1 2025-08-18 09:41:27.619 00:00:10.331 TCP 23.104.0.1:39592 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:38:12.962 00:05:00.958 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 09:42:25.126 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60488 10 6452 1 2025-08-18 09:42:27.993 00:00:10.372 TCP 23.104.0.1:37168 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:43:25.344 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56520 10 6452 1 2025-08-18 09:43:28.402 00:00:10.361 TCP 23.104.0.1:39216 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:44:25.559 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58804 10 6452 1 2025-08-18 09:44:28.802 00:00:10.331 TCP 23.104.0.1:46850 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:44:50.963 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 09:44:50.867 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 09:41:12.968 00:05:00.950 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 09:45:25.771 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38588 10 6452 1 2025-08-18 09:45:29.174 00:00:10.334 TCP 23.104.0.1:34332 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:46:25.980 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44530 10 6452 1 2025-08-18 09:46:29.545 00:00:10.363 TCP 23.104.0.1:50376 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:47:26.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46060 10 6452 1 2025-08-18 09:47:29.950 00:00:10.366 TCP 23.104.0.1:59226 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:44:12.974 00:05:00.947 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 09:48:26.425 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50644 10 6452 1 2025-08-18 09:48:30.359 00:00:10.373 TCP 23.104.0.1:44108 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:49:26.644 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43796 10 6452 1 2025-08-18 09:49:30.771 00:00:10.365 TCP 23.104.0.1:46444 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:49:51.039 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 09:49:51.187 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 09:50:31.173 00:00:10.368 TCP 23.104.0.1:39502 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:50:26.859 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51212 10 6452 1 2025-08-18 09:47:12.978 00:05:00.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 09:51:31.579 00:00:10.369 TCP 23.104.0.1:42406 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:51:27.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6452 1 2025-08-18 09:52:27.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51358 10 6452 1 2025-08-18 09:52:31.985 00:00:10.367 TCP 23.104.0.1:35576 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:53:27.512 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35766 10 6452 1 2025-08-18 09:53:32.386 00:00:10.365 TCP 23.104.0.1:45456 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:50:12.977 00:05:00.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 09:54:27.728 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57756 10 6452 1 2025-08-18 09:54:32.791 00:00:10.321 TCP 23.104.0.1:36918 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:54:51.083 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 09:54:50.993 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 09:55:27.903 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54156 10 6452 1 2025-08-18 09:55:33.149 00:00:10.362 TCP 23.104.0.1:37690 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:56:28.082 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60842 10 6452 1 2025-08-18 09:56:33.551 00:00:10.365 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:53:12.981 00:05:00.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 09:57:28.300 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48198 10 6452 1 2025-08-18 09:57:33.954 00:00:10.367 TCP 23.104.0.1:46186 -> 1.101.0.1:3000 11 1507 1 2025-08-18 09:58:28.524 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43942 10 6452 1 2025-08-18 09:58:34.367 00:00:10.363 TCP 23.104.0.1:52486 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502728, total packets: 1579, avg bps: 1071, avg pps: 0, avg bpp: 318 Time window: 2025-08-18 08:56:12 - 2025-08-18 09:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0019s User: 0.0028s Wall: 0.0021s flows/second: 78577.3 Runtime: 0.0021s