Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 11:58:50.403 00:00:10.365 TCP 23.104.0.1:58006 -> 1.101.0.1:3000 11 1507 1 2025-08-20 11:55:13.918 00:05:00.993 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 11:59:37.326 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54866 10 6452 1 2025-08-20 11:59:50.806 00:00:10.367 TCP 23.104.0.1:59218 -> 1.101.0.1:3000 11 1507 1 2025-08-20 11:56:13.920 00:05:00.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 12:00:51.513 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 12:00:51.535 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 12:00:37.542 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54888 10 6452 1 2025-08-20 12:00:51.214 00:00:10.363 TCP 23.104.0.1:33460 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:01:37.760 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55282 10 6452 1 2025-08-20 12:01:51.621 00:00:10.366 TCP 23.104.0.1:38798 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:02:37.935 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42532 10 6452 1 2025-08-20 12:02:52.032 00:00:10.328 TCP 23.104.0.1:49302 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:03:38.169 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36830 10 6452 1 2025-08-20 12:03:52.396 00:00:10.367 TCP 23.104.0.1:49550 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:04:38.397 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49310 10 6452 1 2025-08-20 12:04:52.797 00:00:10.371 TCP 23.104.0.1:33744 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:01:13.920 00:05:00.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 12:05:38.579 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47036 10 6452 1 2025-08-20 12:05:51.567 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 12:05:51.577 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 12:05:53.206 00:00:10.371 TCP 23.104.0.1:37170 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:02:13.922 00:05:00.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 12:06:38.794 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:58884 10 6452 1 2025-08-20 12:06:53.615 00:00:10.414 TCP 23.104.0.1:53838 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:07:38.979 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:52008 10 6452 1 2025-08-20 12:07:54.095 00:00:10.317 TCP 23.104.0.1:41594 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:08:39.243 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34354 10 6452 1 2025-08-20 12:08:54.456 00:00:10.329 TCP 23.104.0.1:56258 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:09:39.417 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54994 10 6452 1 2025-08-20 12:09:54.818 00:00:10.362 TCP 23.104.0.1:53930 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:10:51.786 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 12:10:39.634 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43058 10 6452 1 2025-08-20 12:10:51.727 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 12:10:55.213 00:00:10.329 TCP 23.104.0.1:57306 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:07:13.920 00:05:01.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 12:11:39.848 00:00:10.433 TCP 1.101.0.1:3000 -> 22.102.0.1:56184 10 6452 1 2025-08-20 12:11:55.578 00:00:10.365 TCP 23.104.0.1:42346 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:08:13.923 00:05:00.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 12:12:40.315 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33948 10 6452 1 2025-08-20 12:12:55.979 00:00:10.366 TCP 23.104.0.1:48438 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:13:40.532 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49378 10 6452 1 2025-08-20 12:13:56.383 00:00:10.323 TCP 23.104.0.1:59170 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:14:40.708 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55588 10 6452 1 2025-08-20 12:14:56.745 00:00:10.361 TCP 23.104.0.1:42396 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:15:40.925 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50914 10 6452 1 2025-08-20 12:15:51.926 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 12:15:52.142 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 12:15:57.144 00:00:10.366 TCP 23.104.0.1:38714 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:16:41.135 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38238 10 6452 1 2025-08-20 12:16:57.550 00:00:10.364 TCP 23.104.0.1:57518 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:13:13.922 00:05:01.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 12:17:41.352 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42304 10 6452 1 2025-08-20 12:17:57.954 00:00:10.327 TCP 23.104.0.1:38954 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:14:13.924 00:05:00.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 12:18:41.564 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43590 10 6452 1 2025-08-20 12:18:58.317 00:00:10.326 TCP 23.104.0.1:51032 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:19:41.779 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52626 10 6452 1 2025-08-20 12:19:58.679 00:00:10.367 TCP 23.104.0.1:41078 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:20:51.832 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 12:20:51.974 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 12:20:42.008 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42252 10 6452 1 2025-08-20 12:20:59.107 00:00:10.369 TCP 23.104.0.1:56414 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:21:42.234 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51038 10 6452 1 2025-08-20 12:21:59.517 00:00:10.368 TCP 23.104.0.1:41408 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:22:42.445 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57992 10 6452 1 2025-08-20 12:22:59.922 00:00:10.350 TCP 23.104.0.1:36576 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:19:13.923 00:05:01.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 12:23:42.654 00:00:11.620 TCP 1.101.0.1:3000 -> 22.102.0.1:58078 10 6452 1 2025-08-20 12:24:00.311 00:00:10.744 TCP 23.104.0.1:48856 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:20:13.926 00:05:00.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 12:24:44.314 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48756 10 6452 1 2025-08-20 12:25:01.115 00:00:10.365 TCP 23.104.0.1:33238 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:25:51.715 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 12:25:52.015 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 12:25:44.486 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43096 10 6452 1 2025-08-20 12:26:01.517 00:00:10.364 TCP 23.104.0.1:54758 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:26:44.697 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41612 10 6452 1 2025-08-20 12:27:01.921 00:00:10.384 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:27:44.917 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:54394 10 6452 1 2025-08-20 12:28:02.359 00:00:10.324 TCP 23.104.0.1:43280 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:28:45.102 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33720 10 6452 1 2025-08-20 12:25:13.924 00:05:01.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 12:29:02.723 00:00:10.330 TCP 23.104.0.1:51094 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:29:45.273 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50982 10 6452 1 2025-08-20 12:26:13.926 00:05:01.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 12:30:03.109 00:00:10.364 TCP 23.104.0.1:44282 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:30:51.986 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 12:30:52.163 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 12:30:45.486 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33002 10 6452 1 2025-08-20 12:31:03.510 00:00:10.364 TCP 23.104.0.1:45190 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:31:45.702 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60908 10 6452 1 2025-08-20 12:32:03.911 00:00:10.363 TCP 23.104.0.1:53386 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:32:45.916 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6452 1 2025-08-20 12:33:04.309 00:00:10.369 TCP 23.104.0.1:56020 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:33:46.119 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54312 10 6452 1 2025-08-20 12:34:04.713 00:00:10.320 TCP 23.104.0.1:57230 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:34:46.341 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45756 10 6452 1 2025-08-20 12:35:05.096 00:00:10.327 TCP 23.104.0.1:55718 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:31:13.925 00:05:01.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 12:35:52.111 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 12:35:52.252 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 12:36:05.462 00:00:10.359 TCP 23.104.0.1:58554 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:32:13.927 00:05:01.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 12:35:46.558 00:01:10.419 TCP 1.101.0.1:3000 -> 22.102.0.1:47828 20 12904 1 2025-08-20 12:37:05.865 00:00:10.323 TCP 23.104.0.1:53672 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:37:47.027 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:43086 10 6452 1 2025-08-20 12:38:06.226 00:00:10.376 TCP 23.104.0.1:44834 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:38:47.213 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47418 10 6452 1 2025-08-20 12:39:06.639 00:00:10.366 TCP 23.104.0.1:60008 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:39:47.425 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38626 10 6452 1 2025-08-20 12:40:07.056 00:00:10.364 TCP 23.104.0.1:37970 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:40:52.601 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 12:40:52.399 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 12:40:47.636 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56962 10 6452 1 2025-08-20 12:37:13.927 00:05:01.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 12:41:07.462 00:00:10.361 TCP 23.104.0.1:52882 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:41:47.855 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:32908 10 6452 1 2025-08-20 12:38:13.929 00:05:01.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 12:42:07.864 00:00:10.330 TCP 23.104.0.1:53204 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:42:48.035 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33746 10 6452 1 2025-08-20 12:43:08.231 00:00:10.366 TCP 23.104.0.1:39338 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:43:48.244 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50864 10 6452 1 2025-08-20 12:44:08.636 00:00:10.319 TCP 23.104.0.1:43716 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:44:48.457 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45664 10 6452 1 2025-08-20 12:45:08.990 00:00:10.323 TCP 23.104.0.1:42454 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:45:52.442 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 12:45:52.235 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 12:45:48.667 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54782 10 6452 1 2025-08-20 12:46:09.352 00:00:10.318 TCP 23.104.0.1:40436 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:46:48.835 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37214 10 6452 1 2025-08-20 12:43:13.927 00:05:01.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 12:47:09.712 00:00:10.371 TCP 23.104.0.1:52674 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:47:49.071 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34114 10 6452 1 2025-08-20 12:44:13.931 00:05:01.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 12:48:10.124 00:00:10.360 TCP 23.104.0.1:55042 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:48:49.283 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60642 10 6452 1 2025-08-20 12:49:10.523 00:00:10.321 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:49:49.499 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6452 1 2025-08-20 12:50:10.884 00:00:10.384 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:50:52.217 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 12:50:52.485 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 12:50:49.710 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52322 10 6452 1 2025-08-20 12:51:11.304 00:00:10.324 TCP 23.104.0.1:44274 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:51:49.920 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58112 10 6452 1 2025-08-20 12:52:11.667 00:00:10.375 TCP 23.104.0.1:48780 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:52:50.131 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50382 10 6452 1 2025-08-20 12:49:13.928 00:05:01.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 12:53:12.098 00:00:10.382 TCP 23.104.0.1:37114 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:53:50.345 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59994 10 6452 1 2025-08-20 12:50:13.931 00:05:01.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 12:54:12.533 00:00:10.367 TCP 23.104.0.1:50258 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:54:50.520 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38960 10 6452 1 2025-08-20 12:55:12.934 00:00:10.381 TCP 23.104.0.1:47494 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:55:52.473 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 12:55:52.531 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 12:55:50.734 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33854 12 10367 1 2025-08-20 12:56:13.362 00:00:10.449 TCP 23.104.0.1:36546 -> 1.101.0.1:3000 15 1926 1 2025-08-20 12:56:50.969 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47188 10 6452 1 2025-08-20 12:57:13.862 00:00:10.380 TCP 23.104.0.1:37246 -> 1.101.0.1:3000 11 1507 1 2025-08-20 12:57:51.196 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51524 10 6452 1 2025-08-20 12:58:14.281 00:00:10.364 TCP 23.104.0.1:54296 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 496230, total packets: 1568, avg bps: 1047, avg pps: 0, avg bpp: 316 Time window: 2025-08-20 11:55:13 - 2025-08-20 12:58:24 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0039s User: 0.0010s Wall: 0.0019s flows/second: 86304.7 Runtime: 0.0019s