Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-18 17:59:02.812 00:00:10.332 TCP 23.104.0.1:42104 -> 1.101.0.1:3000 11 1507 1 2025-08-18 17:55:13.140 00:05:00.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 17:59:12.796 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34418 10 6452 1 2025-08-18 18:00:00.982 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 18:00:00.915 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 18:00:03.183 00:00:10.365 TCP 23.104.0.1:53668 -> 1.101.0.1:3000 11 1507 1 2025-08-18 17:56:13.142 00:05:00.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 18:00:12.972 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53504 10 6452 1 2025-08-18 18:01:03.587 00:00:10.361 TCP 23.104.0.1:52864 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:01:13.216 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51672 10 6452 1 2025-08-18 18:02:03.990 00:00:10.370 TCP 23.104.0.1:60052 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:02:13.432 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51592 10 6452 1 2025-08-18 18:03:04.401 00:00:10.365 TCP 23.104.0.1:48114 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:03:13.650 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53566 10 6452 1 2025-08-18 18:04:04.806 00:00:10.325 TCP 23.104.0.1:57026 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:04:13.815 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60504 10 6452 1 2025-08-18 18:05:01.218 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 18:05:01.190 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 18:05:05.174 00:00:10.326 TCP 23.104.0.1:43556 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:01:13.144 00:05:00.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 18:05:13.994 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36452 10 6452 1 2025-08-18 18:06:05.537 00:00:10.366 TCP 23.104.0.1:47258 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:02:13.144 00:05:00.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 18:06:14.219 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47422 10 6452 1 2025-08-18 18:07:05.943 00:00:10.371 TCP 23.104.0.1:50494 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:07:14.427 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38082 10 6452 1 2025-08-18 18:08:06.350 00:00:10.326 TCP 23.104.0.1:48380 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:08:14.602 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58540 10 6452 1 2025-08-18 18:09:06.717 00:00:10.378 TCP 23.104.0.1:35458 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:09:14.777 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51064 10 6452 1 2025-08-18 18:10:01.018 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 18:10:00.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 18:10:07.135 00:00:10.366 TCP 23.104.0.1:41980 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:10:14.997 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49166 10 6452 1 2025-08-18 18:07:13.142 00:05:00.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 18:11:07.540 00:00:10.361 TCP 23.104.0.1:60042 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:11:15.213 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60452 10 6452 1 2025-08-18 18:08:13.146 00:05:00.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 18:12:07.940 00:00:10.336 TCP 23.104.0.1:47818 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:12:15.425 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33742 10 6452 1 2025-08-18 18:13:08.316 00:00:10.358 TCP 23.104.0.1:35508 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:13:15.632 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53726 10 6452 1 2025-08-18 18:14:08.711 00:00:10.987 TCP 23.104.0.1:39014 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:14:15.805 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36978 10 6452 1 2025-08-18 18:15:01.358 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 18:15:01.421 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 18:15:09.735 00:00:10.369 TCP 23.104.0.1:49816 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:15:16.029 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48634 10 6452 1 2025-08-18 18:16:10.141 00:00:10.364 TCP 23.104.0.1:51920 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:16:16.244 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37876 10 6452 1 2025-08-18 18:13:13.147 00:05:00.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 18:17:10.544 00:00:10.323 TCP 23.104.0.1:44582 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:17:16.465 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59894 10 6452 1 2025-08-18 18:14:13.148 00:05:00.969 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 18:18:10.906 00:00:10.367 TCP 23.104.0.1:60728 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:18:16.680 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36598 10 6452 1 2025-08-18 18:19:11.314 00:00:10.369 TCP 23.104.0.1:39778 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:19:16.920 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49948 10 6452 1 2025-08-18 18:20:01.276 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 18:20:01.221 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 18:20:11.719 00:00:10.322 TCP 23.104.0.1:42726 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:20:17.128 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58552 10 6452 1 2025-08-18 18:21:12.109 00:00:10.375 TCP 23.104.0.1:58142 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:21:17.343 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39112 10 6452 1 2025-08-18 18:22:12.555 00:00:10.365 TCP 23.104.0.1:33146 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:22:17.558 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56416 10 6452 1 2025-08-18 18:19:13.148 00:05:00.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 18:23:12.954 00:00:10.365 TCP 23.104.0.1:44680 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:23:17.775 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48574 10 6452 1 2025-08-18 18:20:13.150 00:05:00.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 18:24:13.361 00:00:10.363 TCP 23.104.0.1:56576 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:24:17.991 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37102 10 6452 1 2025-08-18 18:25:01.376 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 18:25:01.466 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 18:25:13.766 00:00:10.375 TCP 23.104.0.1:58328 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:25:18.241 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6452 1 2025-08-18 18:26:14.186 00:00:10.747 TCP 23.104.0.1:41674 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:26:18.453 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 10 6452 1 2025-08-18 18:27:14.975 00:00:10.370 TCP 23.104.0.1:42248 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:27:18.659 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:43408 10 6452 1 2025-08-18 18:28:15.379 00:00:10.365 TCP 23.104.0.1:49712 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:28:18.931 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:40560 10 6452 1 2025-08-18 18:25:13.149 00:05:00.972 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 18:29:15.783 00:00:10.372 TCP 23.104.0.1:56584 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:29:19.174 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42720 10 6452 1 2025-08-18 18:30:01.457 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 18:30:01.253 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 18:26:13.151 00:05:00.967 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 18:30:16.193 00:00:10.324 TCP 23.104.0.1:59620 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:30:19.393 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:60678 10 6452 1 2025-08-18 18:31:16.556 00:00:10.362 TCP 23.104.0.1:45688 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:31:19.574 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41820 10 6452 1 2025-08-18 18:32:19.796 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43220 10 6452 1 2025-08-18 18:32:16.959 00:00:10.374 TCP 23.104.0.1:59162 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:33:20.007 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54702 10 6452 1 2025-08-18 18:33:17.370 00:00:10.333 TCP 23.104.0.1:33960 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:34:20.179 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59002 10 6452 1 2025-08-18 18:34:17.731 00:00:10.329 TCP 23.104.0.1:58628 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:35:01.759 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 18:35:01.615 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 18:31:13.152 00:05:00.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 18:35:20.400 00:00:10.524 TCP 1.101.0.1:3000 -> 22.102.0.1:38994 12 10367 1 2025-08-18 18:35:18.105 00:00:10.621 TCP 23.104.0.1:35524 -> 1.101.0.1:3000 15 1926 1 2025-08-18 18:32:13.156 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 18:36:20.959 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:38852 10 6452 1 2025-08-18 18:36:18.764 00:00:10.376 TCP 23.104.0.1:45860 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:37:21.155 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48644 10 6452 1 2025-08-18 18:37:19.179 00:00:10.367 TCP 23.104.0.1:39148 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:38:19.582 00:00:10.362 TCP 23.104.0.1:50540 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:38:21.328 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50110 10 6452 1 2025-08-18 18:39:19.984 00:00:10.365 TCP 23.104.0.1:34670 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:39:21.536 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51554 10 6452 1 2025-08-18 18:40:01.894 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 18:40:01.582 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 18:40:20.398 00:00:10.366 TCP 23.104.0.1:37002 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:40:21.754 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37522 10 6452 1 2025-08-18 18:37:13.156 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 18:41:20.803 00:00:10.367 TCP 23.104.0.1:51636 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:41:21.971 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:60480 10 6452 1 2025-08-18 18:38:13.159 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 18:42:21.209 00:00:10.368 TCP 23.104.0.1:37778 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:42:22.162 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42454 10 6452 1 2025-08-18 18:43:21.615 00:00:10.367 TCP 23.104.0.1:39098 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:43:22.382 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43184 10 6452 1 2025-08-18 18:44:22.601 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53884 10 6452 1 2025-08-18 18:44:22.019 00:00:10.740 TCP 23.104.0.1:54068 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:45:01.853 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 18:45:01.636 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 18:45:22.815 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47774 10 6452 1 2025-08-18 18:45:22.796 00:00:10.374 TCP 23.104.0.1:37094 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:46:23.028 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:41058 10 6452 1 2025-08-18 18:46:23.207 00:00:10.366 TCP 23.104.0.1:52628 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:43:13.160 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 18:47:23.308 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35626 10 6452 1 2025-08-18 18:47:23.613 00:00:10.363 TCP 23.104.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:44:13.161 00:05:00.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 18:48:23.495 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42540 10 6452 1 2025-08-18 18:48:24.017 00:00:10.368 TCP 23.104.0.1:56464 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:49:23.665 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47026 10 6452 1 2025-08-18 18:49:24.421 00:00:10.363 TCP 23.104.0.1:35398 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:50:01.815 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 18:50:01.987 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 18:50:24.822 00:00:10.369 TCP 23.104.0.1:35002 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:50:23.877 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41826 10 6452 1 2025-08-18 18:51:24.102 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40896 10 6452 1 2025-08-18 18:51:25.233 00:00:10.363 TCP 23.104.0.1:57774 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:52:25.636 00:00:10.333 TCP 23.104.0.1:42948 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:52:24.331 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:33266 10 6452 1 2025-08-18 18:49:13.159 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 18:53:26.012 00:00:10.359 TCP 23.104.0.1:51220 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:53:24.516 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41918 10 6452 1 2025-08-18 18:50:13.162 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 18:54:24.729 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46066 10 6452 1 2025-08-18 18:54:26.416 00:00:10.370 TCP 23.104.0.1:53140 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:55:02.124 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 18:55:02.076 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 18:55:24.940 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:59142 10 6452 1 2025-08-18 18:55:26.820 00:00:10.330 TCP 23.104.0.1:43142 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:56:25.187 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40234 10 6452 1 2025-08-18 18:56:27.182 00:00:10.374 TCP 23.104.0.1:54444 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:57:25.405 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:57000 10 6452 1 2025-08-18 18:57:27.594 00:00:10.365 TCP 23.104.0.1:46286 -> 1.101.0.1:3000 11 1507 1 2025-08-18 18:58:25.592 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34048 10 6452 1 2025-08-18 18:58:27.998 00:00:10.370 TCP 23.104.0.1:57806 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1056, avg pps: 0, avg bpp: 318 Time window: 2025-08-18 17:55:13 - 2025-08-18 18:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0018s Wall: 0.0027s flows/second: 60270.4 Runtime: 0.0027s