Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 01:58:53.675 00:00:10.373 TCP 23.104.0.1:47728 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:58:59.645 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46564 10 6452 1 2025-08-23 01:59:54.102 00:00:10.368 TCP 23.104.0.1:50470 -> 1.101.0.1:3000 11 1507 1 2025-08-23 01:59:59.855 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48938 10 6452 1 2025-08-23 02:00:54.509 00:00:10.368 TCP 23.104.0.1:54104 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:01:00.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39718 10 6452 1 2025-08-23 02:01:54.917 00:00:10.335 TCP 23.104.0.1:45062 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:02:06.013 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 02:02:06.206 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 02:02:00.296 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57844 10 6452 1 2025-08-23 02:02:55.291 00:00:10.328 TCP 23.104.0.1:45384 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:03:00.468 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59930 10 6452 1 2025-08-23 01:59:15.679 00:05:00.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 02:03:55.656 00:00:10.321 TCP 23.104.0.1:52492 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:04:00.681 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54134 10 6452 1 2025-08-23 02:00:15.676 00:05:00.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 02:04:56.016 00:00:10.362 TCP 23.104.0.1:46876 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:05:00.894 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48374 10 6452 1 2025-08-23 02:05:56.417 00:00:10.443 TCP 23.104.0.1:46864 -> 1.101.0.1:3000 15 1926 1 2025-08-23 02:06:01.110 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:32986 12 10367 1 2025-08-23 02:07:06.349 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 02:06:56.902 00:00:10.370 TCP 23.104.0.1:56924 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:07:06.225 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 02:07:01.346 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47230 10 6452 1 2025-08-23 02:07:57.310 00:00:10.363 TCP 23.104.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:08:01.563 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53200 10 6452 1 2025-08-23 02:08:57.715 00:00:10.330 TCP 23.104.0.1:50916 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:09:01.734 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37682 10 6452 1 2025-08-23 02:05:15.683 00:05:00.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 02:09:58.103 00:00:10.362 TCP 23.104.0.1:38976 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:10:01.951 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44036 10 6452 1 2025-08-23 02:06:15.685 00:05:00.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 02:10:58.505 00:00:10.371 TCP 23.104.0.1:42620 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:11:02.178 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36132 10 6452 1 2025-08-23 02:12:06.519 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 02:12:06.141 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 02:11:58.914 00:00:10.390 TCP 23.104.0.1:34214 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:12:02.347 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35304 10 6452 1 2025-08-23 02:12:59.343 00:00:10.328 TCP 23.104.0.1:43754 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:13:02.526 00:00:10.278 TCP 1.101.0.1:3000 -> 22.102.0.1:53400 10 6452 1 2025-08-23 02:13:59.712 00:00:10.333 TCP 23.104.0.1:38274 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:14:02.842 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58572 10 6452 1 2025-08-23 02:15:00.104 00:00:10.372 TCP 23.104.0.1:37360 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:15:03.077 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56992 10 6452 1 2025-08-23 02:11:15.686 00:05:00.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 02:16:00.527 00:00:10.364 TCP 23.104.0.1:43770 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:16:03.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48902 10 6452 1 2025-08-23 02:12:15.685 00:05:00.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 02:17:06.587 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 02:17:06.535 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 02:17:00.931 00:00:10.355 TCP 23.104.0.1:47324 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:17:03.515 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53080 10 6452 1 2025-08-23 02:18:01.329 00:00:10.374 TCP 23.104.0.1:44904 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:18:03.727 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55656 10 6452 1 2025-08-23 02:19:03.940 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:54442 10 6452 1 2025-08-23 02:19:01.739 00:00:10.368 TCP 23.104.0.1:39868 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:20:02.144 00:00:10.364 TCP 23.104.0.1:36052 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:20:04.194 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53734 10 6452 1 2025-08-23 02:21:02.546 00:00:10.364 TCP 23.104.0.1:39588 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:17:15.688 00:05:00.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 02:21:04.412 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54922 10 6452 1 2025-08-23 02:22:06.818 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 02:22:06.384 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 02:22:02.947 00:00:10.370 TCP 23.104.0.1:46218 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:22:04.624 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50896 10 6452 1 2025-08-23 02:18:15.686 00:05:00.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 02:23:04.843 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57064 10 6452 1 2025-08-23 02:23:03.356 00:00:10.364 TCP 23.104.0.1:38072 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:24:05.081 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:41112 10 6452 1 2025-08-23 02:24:03.761 00:00:10.386 TCP 23.104.0.1:48414 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:25:05.248 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40894 10 6452 1 2025-08-23 02:25:04.185 00:00:10.368 TCP 23.104.0.1:60890 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:26:04.590 00:00:10.360 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:26:05.425 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49266 10 6452 1 2025-08-23 02:27:06.538 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 02:27:06.803 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 02:27:05.640 00:00:10.386 TCP 1.101.0.1:3000 -> 22.102.0.1:45562 10 6452 1 2025-08-23 02:27:04.988 00:00:10.364 TCP 23.104.0.1:42322 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:23:15.690 00:05:00.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 02:24:15.689 00:05:00.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 02:28:06.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40668 10 6452 1 2025-08-23 02:28:05.384 00:00:10.332 TCP 23.104.0.1:51176 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:29:06.290 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52842 10 6452 1 2025-08-23 02:29:05.756 00:00:10.382 TCP 23.104.0.1:49856 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:30:06.170 00:00:10.370 TCP 23.104.0.1:47748 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:30:06.504 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50836 10 6452 1 2025-08-23 02:31:06.572 00:00:10.358 TCP 23.104.0.1:43050 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:31:06.715 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57572 10 6452 1 2025-08-23 02:32:06.873 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 02:32:06.969 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 02:32:06.927 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50444 10 6452 1 2025-08-23 02:32:06.969 00:00:10.382 TCP 23.104.0.1:56998 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:29:15.693 00:05:00.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 02:33:07.132 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43552 10 6452 1 2025-08-23 02:33:07.403 00:00:10.365 TCP 23.104.0.1:40976 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:34:07.811 00:00:10.333 TCP 23.104.0.1:58486 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:34:07.341 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57152 10 6452 1 2025-08-23 02:30:15.691 00:05:00.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 02:35:08.181 00:00:10.368 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:35:07.565 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56250 10 6452 1 2025-08-23 02:36:08.588 00:00:10.516 TCP 23.104.0.1:59618 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:36:07.777 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52728 10 6452 1 2025-08-23 02:37:06.873 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 02:37:06.674 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 02:37:09.143 00:00:10.879 TCP 23.104.0.1:54920 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:37:07.987 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57630 10 6452 1 2025-08-23 02:38:10.066 00:00:10.322 TCP 23.104.0.1:39808 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:38:08.213 00:00:11.014 TCP 1.101.0.1:3000 -> 22.102.0.1:34416 10 6452 1 2025-08-23 02:35:15.693 00:05:00.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 02:39:10.427 00:00:10.366 TCP 23.104.0.1:35516 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:39:09.268 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53442 10 6452 1 2025-08-23 02:36:15.692 00:05:00.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 02:40:09.479 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43168 10 6452 1 2025-08-23 02:40:10.828 00:00:10.337 TCP 23.104.0.1:53436 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:41:09.687 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58134 10 6452 1 2025-08-23 02:41:11.209 00:00:10.365 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:42:07.281 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 02:42:07.304 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 02:42:11.612 00:00:10.371 TCP 23.104.0.1:55236 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:42:09.904 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45384 10 6452 1 2025-08-23 02:43:10.115 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46672 10 6452 1 2025-08-23 02:43:12.021 00:00:10.367 TCP 23.104.0.1:57730 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:44:10.281 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56008 10 6452 1 2025-08-23 02:44:12.425 00:00:10.364 TCP 23.104.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:41:15.698 00:05:00.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 02:45:10.490 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44942 10 6452 1 2025-08-23 02:45:12.828 00:00:10.360 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:46:10.715 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39772 10 6452 1 2025-08-23 02:42:15.695 00:05:00.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 02:46:13.226 00:00:10.327 TCP 23.104.0.1:39682 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:47:07.051 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 02:47:06.983 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 02:47:10.932 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:33302 10 6452 1 2025-08-23 02:47:13.590 00:00:10.372 TCP 23.104.0.1:41682 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:48:11.178 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36340 10 6452 1 2025-08-23 02:48:14.006 00:00:10.370 TCP 23.104.0.1:44180 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:49:11.388 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56388 10 6452 1 2025-08-23 02:49:14.415 00:00:10.324 TCP 23.104.0.1:44404 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:50:11.562 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47822 10 6452 1 2025-08-23 02:50:14.779 00:00:10.363 TCP 23.104.0.1:39678 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:47:15.712 00:05:00.549 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 02:51:11.738 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54264 10 6452 1 2025-08-23 02:51:15.183 00:00:10.366 TCP 23.104.0.1:50528 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:52:07.229 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 02:52:07.031 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 02:48:15.710 00:05:00.553 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 02:52:11.947 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:51838 10 6452 1 2025-08-23 02:52:15.589 00:00:10.370 TCP 23.104.0.1:50750 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:53:12.134 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40256 10 6452 1 2025-08-23 02:53:16.004 00:00:10.365 TCP 23.104.0.1:50882 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:54:12.349 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42308 10 6452 1 2025-08-23 02:54:16.410 00:00:10.329 TCP 23.104.0.1:35526 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:55:12.525 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36864 10 6452 1 2025-08-23 02:55:16.774 00:00:10.373 TCP 23.104.0.1:48612 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:56:12.734 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52512 10 6452 1 2025-08-23 02:56:17.187 00:00:10.364 TCP 23.104.0.1:35406 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:57:07.181 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 02:57:07.255 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 02:53:15.713 00:05:00.549 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 02:57:12.946 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36644 10 6452 1 2025-08-23 02:57:17.589 00:00:10.323 TCP 23.104.0.1:43074 -> 1.101.0.1:3000 11 1507 1 2025-08-23 02:54:15.712 00:05:00.554 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 02:58:13.171 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49404 10 6452 1 2025-08-23 02:58:17.956 00:00:10.368 TCP 23.104.0.1:42940 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1110, avg pps: 0, avg bpp: 318 Time window: 2025-08-23 01:58:53 - 2025-08-23 02:59:16 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0023s User: 0.0023s Wall: 0.0026s flows/second: 62239.0 Runtime: 0.0027s