Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 06:58:42.967 00:00:10.372 TCP 23.104.0.1:48352 -> 1.101.0.1:3000 11 1507 1 2025-08-20 06:55:13.834 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 06:59:34.092 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35686 10 6452 1 2025-08-20 06:59:43.383 00:00:10.334 TCP 23.104.0.1:43796 -> 1.101.0.1:3000 11 1507 1 2025-08-20 06:56:13.836 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 07:00:34.311 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35634 10 6452 1 2025-08-20 07:00:45.618 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 07:00:45.198 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 07:00:43.761 00:00:10.377 TCP 23.104.0.1:60882 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:01:34.482 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33800 10 6452 1 2025-08-20 07:01:44.179 00:00:10.361 TCP 23.104.0.1:60266 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:02:34.693 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41852 10 6452 1 2025-08-20 07:02:44.579 00:00:10.366 TCP 23.104.0.1:50730 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:03:34.909 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41926 10 6452 1 2025-08-20 07:03:44.987 00:00:10.328 TCP 23.104.0.1:35354 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:04:35.128 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60136 10 6452 1 2025-08-20 07:04:45.359 00:00:10.363 TCP 23.104.0.1:41772 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:01:13.835 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 07:05:45.667 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 07:05:35.343 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-08-20 07:05:45.553 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 07:05:45.760 00:00:10.330 TCP 23.104.0.1:43882 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:02:13.836 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 07:06:35.556 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34144 10 6452 1 2025-08-20 07:06:46.128 00:00:10.324 TCP 23.104.0.1:60330 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:07:35.766 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53148 10 6452 1 2025-08-20 07:07:46.497 00:00:10.362 TCP 23.104.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:08:35.981 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59552 10 6452 1 2025-08-20 07:08:46.905 00:00:10.325 TCP 23.104.0.1:35164 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:09:36.210 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53036 10 6452 1 2025-08-20 07:09:47.270 00:00:10.336 TCP 23.104.0.1:47290 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:10:45.663 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 07:10:36.421 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58206 10 6452 1 2025-08-20 07:10:45.320 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 07:10:47.639 00:00:10.366 TCP 23.104.0.1:50324 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:07:13.836 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 07:11:36.642 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57482 10 6452 1 2025-08-20 07:11:48.045 00:00:10.360 TCP 23.104.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:08:13.839 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 07:12:36.862 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37972 10 6452 1 2025-08-20 07:12:48.444 00:00:10.362 TCP 23.104.0.1:51710 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:13:37.087 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40144 10 6452 1 2025-08-20 07:13:48.842 00:00:10.398 TCP 23.104.0.1:47000 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:14:37.301 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51534 10 6452 1 2025-08-20 07:14:49.278 00:00:10.367 TCP 23.104.0.1:32860 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:15:45.776 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 07:15:45.719 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 07:15:37.510 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43286 10 6452 1 2025-08-20 07:15:49.683 00:00:10.374 TCP 23.104.0.1:34398 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:16:37.717 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50448 10 6452 1 2025-08-20 07:16:50.110 00:00:10.367 TCP 23.104.0.1:51830 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:13:13.840 00:05:00.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 07:17:37.954 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 12 6556 1 2025-08-20 07:17:50.515 00:00:10.376 TCP 23.104.0.1:46282 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:14:13.844 00:05:00.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 07:18:38.186 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53664 10 6452 1 2025-08-20 07:18:50.934 00:00:10.384 TCP 23.104.0.1:43062 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:19:38.408 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48034 10 6452 1 2025-08-20 07:19:51.359 00:00:10.370 TCP 23.104.0.1:34784 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:20:45.809 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 07:20:46.154 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 07:20:38.630 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53982 10 6452 1 2025-08-20 07:20:51.760 00:00:10.380 TCP 23.104.0.1:34560 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:21:38.808 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45658 10 6452 1 2025-08-20 07:21:52.182 00:00:10.366 TCP 23.104.0.1:40000 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:22:39.045 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42078 10 6452 1 2025-08-20 07:22:52.582 00:00:10.324 TCP 23.104.0.1:41762 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:19:13.842 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 07:23:39.257 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33740 10 6452 1 2025-08-20 07:23:52.946 00:00:10.344 TCP 23.104.0.1:57480 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:20:13.844 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 07:24:39.428 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36908 10 6452 1 2025-08-20 07:24:53.313 00:00:10.362 TCP 23.104.0.1:56980 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:25:46.005 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 07:25:46.070 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 07:25:39.649 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42084 10 6452 1 2025-08-20 07:25:53.711 00:00:10.387 TCP 23.104.0.1:56450 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:26:39.816 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45436 10 6452 1 2025-08-20 07:26:54.127 00:00:10.370 TCP 23.104.0.1:45528 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:27:40.035 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50634 10 6452 1 2025-08-20 07:27:54.532 00:00:10.326 TCP 23.104.0.1:37848 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:28:40.243 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37116 10 6452 1 2025-08-20 07:28:54.900 00:00:10.378 TCP 23.104.0.1:57438 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:25:13.842 00:05:00.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 07:29:40.458 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36440 10 6452 1 2025-08-20 07:29:55.316 00:00:10.377 TCP 23.104.0.1:42324 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:26:13.845 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 07:30:46.112 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 07:30:45.846 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 07:30:40.672 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:50792 12 10367 1 2025-08-20 07:30:55.733 00:00:10.406 TCP 23.104.0.1:52058 -> 1.101.0.1:3000 15 1926 1 2025-08-20 07:31:40.869 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60214 10 6452 1 2025-08-20 07:31:56.174 00:00:10.330 TCP 23.104.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:32:41.100 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57724 10 6452 1 2025-08-20 07:32:56.544 00:00:10.370 TCP 23.104.0.1:44682 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:33:41.312 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 10 6452 1 2025-08-20 07:33:56.994 00:00:10.326 TCP 23.104.0.1:41048 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:34:41.530 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56694 10 6452 1 2025-08-20 07:34:57.357 00:00:10.563 TCP 23.104.0.1:52630 -> 1.101.0.1:3000 13 1611 1 2025-08-20 07:31:13.843 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 07:35:46.194 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 07:35:46.194 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 07:35:41.745 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57114 10 6452 1 2025-08-20 07:35:58.303 00:00:10.331 TCP 23.104.0.1:56078 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:32:13.846 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 07:36:41.917 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51414 10 6452 1 2025-08-20 07:36:58.660 00:00:10.365 TCP 23.104.0.1:46676 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:37:42.136 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45848 10 6452 1 2025-08-20 07:37:59.088 00:00:10.695 TCP 23.104.0.1:53802 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:38:42.381 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34936 10 6452 1 2025-08-20 07:38:59.822 00:00:10.359 TCP 23.104.0.1:39084 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:39:42.603 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55596 10 6452 1 2025-08-20 07:40:00.220 00:00:10.367 TCP 23.104.0.1:37028 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:40:46.446 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 07:40:46.333 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 07:40:42.827 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38634 10 6452 1 2025-08-20 07:41:00.621 00:00:10.365 TCP 23.104.0.1:44306 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:37:13.843 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 07:41:43.070 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44270 10 6452 1 2025-08-20 07:42:01.024 00:00:10.364 TCP 23.104.0.1:41776 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:38:13.847 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 07:42:43.284 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55006 10 6452 1 2025-08-20 07:43:01.437 00:00:10.370 TCP 23.104.0.1:39920 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:43:43.453 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58152 10 6452 1 2025-08-20 07:44:01.848 00:00:10.384 TCP 23.104.0.1:60314 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:44:43.666 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37388 12 6556 1 2025-08-20 07:45:02.267 00:00:10.365 TCP 23.104.0.1:44376 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:45:46.442 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 07:45:46.238 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 07:45:43.883 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43672 10 6452 1 2025-08-20 07:46:02.672 00:00:10.361 TCP 23.104.0.1:48396 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:46:44.102 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60456 10 6452 1 2025-08-20 07:47:03.101 00:00:10.371 TCP 23.104.0.1:60772 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:43:13.850 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 07:47:44.309 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52332 10 6452 1 2025-08-20 07:48:03.501 00:00:10.365 TCP 23.104.0.1:59662 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:44:13.852 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 07:48:44.481 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38398 10 6452 1 2025-08-20 07:49:03.904 00:00:10.364 TCP 23.104.0.1:40918 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:49:44.694 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53606 10 6452 1 2025-08-20 07:50:04.304 00:00:10.368 TCP 23.104.0.1:40466 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:50:46.959 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 07:50:46.633 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 07:50:44.930 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:36528 10 6452 1 2025-08-20 07:51:04.713 00:00:10.379 TCP 23.104.0.1:37234 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:51:45.173 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52206 10 6452 1 2025-08-20 07:52:05.129 00:00:10.368 TCP 23.104.0.1:56240 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:52:45.390 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32844 10 6452 1 2025-08-20 07:53:05.534 00:00:10.323 TCP 23.104.0.1:40458 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:49:13.852 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 07:53:45.602 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41596 10 6452 1 2025-08-20 07:50:13.852 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 07:54:05.897 00:00:10.366 TCP 23.104.0.1:42336 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:54:45.811 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50448 10 6452 1 2025-08-20 07:55:06.302 00:00:10.369 TCP 23.104.0.1:38366 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:55:46.621 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 07:55:46.628 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 07:55:46.035 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36302 10 6452 1 2025-08-20 07:56:06.707 00:00:10.429 TCP 23.104.0.1:59644 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:56:46.252 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54378 10 6452 1 2025-08-20 07:57:07.189 00:00:10.332 TCP 23.104.0.1:59780 -> 1.101.0.1:3000 11 1507 1 2025-08-20 07:57:46.463 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33002 10 6452 1 2025-08-20 07:58:07.558 00:00:10.715 TCP 23.104.0.1:56612 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496542, total packets: 1574, avg bps: 1049, avg pps: 0, avg bpp: 315 Time window: 2025-08-20 06:55:13 - 2025-08-20 07:58:18 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0009s Wall: 0.0027s flows/second: 60081.9 Runtime: 0.0027s