Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 03:58:45.434 00:00:10.373 TCP 23.104.0.1:35760 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:59:25.961 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34726 10 6452 1 2025-08-23 03:59:45.844 00:00:10.390 TCP 23.104.0.1:34504 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:00:26.174 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60824 10 6452 1 2025-08-23 04:00:46.266 00:00:10.371 TCP 23.104.0.1:37706 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:01:26.346 00:00:16.560 TCP 1.101.0.1:3000 -> 22.102.0.1:46984 10 6452 1 2025-08-23 04:01:46.671 00:00:10.374 TCP 23.104.0.1:37056 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:02:08.570 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 04:02:08.570 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 04:02:32.964 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35108 10 6452 1 2025-08-23 04:02:47.103 00:00:10.367 TCP 23.104.0.1:33606 -> 1.101.0.1:3000 11 1507 1 2025-08-23 03:59:15.759 00:05:00.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 04:03:33.176 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60558 10 6452 1 2025-08-23 04:03:47.508 00:00:10.322 TCP 23.104.0.1:40946 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:00:15.756 00:05:00.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 04:04:33.383 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35198 10 6452 1 2025-08-23 04:04:47.869 00:00:10.335 TCP 23.104.0.1:59568 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:05:33.595 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:59484 10 6452 1 2025-08-23 04:05:48.237 00:00:10.328 TCP 23.104.0.1:53898 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:06:33.769 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:57688 12 10365 1 2025-08-23 04:06:48.598 00:00:10.437 TCP 23.104.0.1:58460 -> 1.101.0.1:3000 15 1926 1 2025-08-23 04:07:08.777 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 04:07:08.488 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 04:07:34.012 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56618 10 6452 1 2025-08-23 04:07:49.100 00:00:10.366 TCP 23.104.0.1:52808 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:08:34.239 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51222 10 6452 1 2025-08-23 04:08:49.506 00:00:10.325 TCP 23.104.0.1:59092 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:05:15.759 00:05:00.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 04:09:34.412 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:44508 10 6452 1 2025-08-23 04:09:49.876 00:00:10.556 TCP 23.104.0.1:52058 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:06:15.758 00:05:00.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 04:10:34.676 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34296 10 6452 1 2025-08-23 04:10:50.477 00:00:10.357 TCP 23.104.0.1:42924 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:11:34.843 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33726 10 6452 1 2025-08-23 04:11:50.873 00:00:10.365 TCP 23.104.0.1:56010 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:12:08.795 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 04:12:08.786 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 04:12:35.085 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39796 10 6452 1 2025-08-23 04:12:51.276 00:00:10.366 TCP 23.104.0.1:38258 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:13:35.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45650 10 6452 1 2025-08-23 04:13:51.684 00:00:10.368 TCP 23.104.0.1:47974 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:14:35.508 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40104 10 6452 1 2025-08-23 04:14:52.104 00:00:10.365 TCP 23.104.0.1:37554 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:11:15.761 00:05:00.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 04:15:35.718 00:00:19.103 TCP 1.101.0.1:3000 -> 22.102.0.1:48658 10 6452 1 2025-08-23 04:15:52.512 00:00:10.368 TCP 23.104.0.1:52304 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:12:15.759 00:05:00.535 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 04:16:44.857 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55814 10 6452 1 2025-08-23 04:17:08.879 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 04:16:52.913 00:00:10.384 TCP 23.104.0.1:43732 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:17:08.810 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 04:17:45.087 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33986 10 6452 1 2025-08-23 04:17:53.332 00:00:10.328 TCP 23.104.0.1:60680 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:18:45.297 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37152 10 6452 1 2025-08-23 04:18:53.699 00:00:10.500 TCP 23.104.0.1:35130 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:19:45.516 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50382 10 6452 1 2025-08-23 04:19:54.232 00:00:10.369 TCP 23.104.0.1:51368 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:20:45.689 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36886 10 6452 1 2025-08-23 04:20:54.640 00:00:10.372 TCP 23.104.0.1:51498 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:17:15.770 00:05:00.521 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 04:21:45.903 00:00:10.531 TCP 1.101.0.1:3000 -> 22.102.0.1:58912 10 6452 1 2025-08-23 04:21:55.067 00:00:10.365 TCP 23.104.0.1:38638 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:22:08.972 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 04:22:09.035 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 04:18:15.767 00:05:00.527 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 04:22:46.475 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57508 10 6452 1 2025-08-23 04:22:55.471 00:00:10.329 TCP 23.104.0.1:39848 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:23:46.648 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52834 10 6452 1 2025-08-23 04:23:55.837 00:00:10.511 TCP 23.104.0.1:43388 -> 1.101.0.1:3000 13 1611 1 2025-08-23 04:24:46.864 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57720 10 6452 1 2025-08-23 04:24:56.382 00:00:10.364 TCP 23.104.0.1:52932 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:25:47.038 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49480 10 6452 1 2025-08-23 04:25:56.781 00:00:10.368 TCP 23.104.0.1:43890 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:26:47.214 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36158 10 6452 1 2025-08-23 04:27:09.224 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 04:26:57.188 00:00:10.363 TCP 23.104.0.1:58880 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:27:09.068 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 04:23:15.771 00:05:00.522 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 04:27:47.427 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45066 10 6452 1 2025-08-23 04:27:57.596 00:00:10.367 TCP 23.104.0.1:52106 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:24:15.772 00:05:00.528 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 04:28:47.642 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39938 10 6452 1 2025-08-23 04:28:58.003 00:00:10.369 TCP 23.104.0.1:60914 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:29:47.864 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36258 10 6452 1 2025-08-23 04:29:58.407 00:00:10.370 TCP 23.104.0.1:58152 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:30:48.052 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46760 10 6452 1 2025-08-23 04:30:58.810 00:00:10.324 TCP 23.104.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:31:48.272 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 10 6452 1 2025-08-23 04:32:09.302 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 04:31:59.173 00:00:10.361 TCP 23.104.0.1:47274 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:32:09.281 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 04:32:48.485 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46112 10 6452 1 2025-08-23 04:32:59.574 00:00:10.368 TCP 23.104.0.1:59130 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:29:15.775 00:05:00.521 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 04:33:48.714 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47200 10 6452 1 2025-08-23 04:33:59.992 00:00:10.366 TCP 23.104.0.1:51962 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:30:15.771 00:05:00.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 04:34:48.940 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:38844 10 6452 1 2025-08-23 04:35:00.396 00:00:10.361 TCP 23.104.0.1:57928 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:35:49.128 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42254 10 6452 1 2025-08-23 04:36:00.798 00:00:10.367 TCP 23.104.0.1:50524 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:36:49.302 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59992 10 6452 1 2025-08-23 04:37:09.061 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 04:37:01.204 00:00:10.375 TCP 23.104.0.1:34132 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:37:09.197 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 04:37:49.478 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40352 10 6452 1 2025-08-23 04:38:01.616 00:00:10.363 TCP 23.104.0.1:33682 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:38:49.690 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46796 10 6452 1 2025-08-23 04:39:02.019 00:00:10.376 TCP 23.104.0.1:41978 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:35:15.775 00:05:00.521 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 04:39:49.903 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37440 10 6452 1 2025-08-23 04:40:02.433 00:00:10.325 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:36:15.775 00:05:00.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 04:40:50.116 00:00:11.547 TCP 1.101.0.1:3000 -> 22.102.0.1:58230 10 6452 1 2025-08-23 04:41:02.795 00:00:10.372 TCP 23.104.0.1:38572 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:41:51.698 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56642 10 6452 1 2025-08-23 04:42:09.285 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 04:42:09.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 04:42:03.200 00:00:10.359 TCP 23.104.0.1:55164 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:42:51.913 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37888 10 6452 1 2025-08-23 04:43:03.611 00:00:10.365 TCP 23.104.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:43:52.128 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53810 10 6452 1 2025-08-23 04:44:04.020 00:00:10.367 TCP 23.104.0.1:54688 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:44:52.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46418 10 6452 1 2025-08-23 04:45:04.429 00:00:10.362 TCP 23.104.0.1:59122 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:41:15.778 00:05:00.521 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 04:45:52.503 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43472 10 6452 1 2025-08-23 04:42:15.776 00:05:00.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 04:46:04.835 00:00:10.392 TCP 23.104.0.1:54046 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:46:52.712 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55848 10 6452 1 2025-08-23 04:47:09.261 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 04:47:09.321 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 04:47:05.266 00:00:10.363 TCP 23.104.0.1:53540 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:47:52.881 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37214 10 6452 1 2025-08-23 04:48:05.671 00:00:10.368 TCP 23.104.0.1:46880 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:48:53.106 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41906 10 6452 1 2025-08-23 04:49:06.106 00:00:10.327 TCP 23.104.0.1:47880 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:49:53.316 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45868 10 6452 1 2025-08-23 04:50:06.471 00:00:10.368 TCP 23.104.0.1:44600 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:50:53.489 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37512 10 6452 1 2025-08-23 04:47:15.779 00:05:00.519 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 04:51:06.875 00:00:10.365 TCP 23.104.0.1:39112 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:51:53.710 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45932 10 6452 1 2025-08-23 04:52:09.453 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 04:52:09.387 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 04:52:07.280 00:00:10.330 TCP 23.104.0.1:35408 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:48:15.777 00:05:00.524 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 04:52:53.928 00:00:10.530 TCP 1.101.0.1:3000 -> 22.102.0.1:56068 10 6452 1 2025-08-23 04:53:07.651 00:00:10.324 TCP 23.104.0.1:60802 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:53:54.497 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41872 10 6452 1 2025-08-23 04:54:08.017 00:00:10.824 TCP 23.104.0.1:56270 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:54:54.711 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51854 10 6452 1 2025-08-23 04:55:08.882 00:00:10.385 TCP 23.104.0.1:42218 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:55:54.925 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46850 10 6452 1 2025-08-23 04:56:09.303 00:00:10.363 TCP 23.104.0.1:44880 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:56:55.156 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51292 10 6452 1 2025-08-23 04:57:09.624 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 04:57:09.701 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 04:57:09.707 00:00:10.363 TCP 23.104.0.1:40998 -> 1.101.0.1:3000 11 1507 1 2025-08-23 04:53:15.782 00:05:00.521 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 04:57:55.324 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36418 10 6452 1 2025-08-23 04:54:15.779 00:05:00.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 04:58:10.107 00:00:10.368 TCP 23.104.0.1:43842 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496332, total packets: 1570, avg bps: 1093, avg pps: 0, avg bpp: 316 Time window: 2025-08-23 03:58:45 - 2025-08-23 04:59:16 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0008s User: 0.0033s Wall: 0.0025s flows/second: 65966.0 Runtime: 0.0025s