Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 05:58:47.934 00:00:10.403 TCP 23.104.0.1:37918 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:59:08.902 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57182 10 6452 1 2025-08-23 05:59:48.382 00:00:10.326 TCP 23.104.0.1:56606 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:00:09.126 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52858 10 6452 1 2025-08-23 06:00:48.745 00:00:10.384 TCP 23.104.0.1:57056 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:01:09.343 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56844 10 6452 1 2025-08-23 06:01:49.177 00:00:10.365 TCP 23.104.0.1:41742 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:02:11.057 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 06:02:10.741 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 06:02:09.515 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 10 6452 1 2025-08-23 06:02:49.580 00:00:10.366 TCP 23.104.0.1:46784 -> 1.101.0.1:3000 11 1507 1 2025-08-23 05:59:15.806 00:05:00.517 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 06:03:09.731 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46046 10 6452 1 2025-08-23 06:03:49.987 00:00:10.332 TCP 23.104.0.1:38226 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:00:15.803 00:05:00.522 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 06:04:09.944 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49562 10 6452 1 2025-08-23 06:04:50.361 00:00:10.409 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:05:10.166 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52782 10 6452 1 2025-08-23 06:05:50.814 00:00:10.376 TCP 23.104.0.1:41508 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:06:10.378 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41682 10 6452 1 2025-08-23 06:06:51.222 00:00:10.362 TCP 23.104.0.1:54614 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:07:11.077 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 06:07:11.028 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 06:07:10.594 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44662 10 6452 1 2025-08-23 06:07:51.619 00:00:10.490 TCP 23.104.0.1:45544 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:08:10.804 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50820 10 6452 1 2025-08-23 06:08:52.148 00:00:10.366 TCP 23.104.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:09:11.016 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39924 10 6452 1 2025-08-23 06:05:15.807 00:05:00.518 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 06:09:52.554 00:00:10.367 TCP 23.104.0.1:39698 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:06:15.805 00:05:00.522 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 06:10:11.233 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38212 10 6452 1 2025-08-23 06:10:52.957 00:00:10.362 TCP 23.104.0.1:42474 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:11:11.452 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42784 10 6452 1 2025-08-23 06:11:53.359 00:00:10.363 TCP 23.104.0.1:48332 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:12:11.408 00:00:00.050 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 06:12:11.805 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 06:12:11.669 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44308 10 6452 1 2025-08-23 06:12:53.764 00:00:10.335 TCP 23.104.0.1:34422 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:13:11.897 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55150 10 6452 1 2025-08-23 06:13:54.133 00:00:10.362 TCP 23.104.0.1:52572 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:14:12.120 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42554 10 6452 1 2025-08-23 06:14:54.534 00:00:10.368 TCP 23.104.0.1:50152 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:11:15.809 00:05:00.518 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 06:15:12.334 00:00:15.006 TCP 1.101.0.1:3000 -> 22.102.0.1:49824 10 6452 1 2025-08-23 06:15:54.943 00:00:10.326 TCP 23.104.0.1:39248 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:12:15.805 00:05:00.523 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 06:16:17.390 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36872 10 6452 1 2025-08-23 06:16:55.309 00:00:10.318 TCP 23.104.0.1:34846 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:17:11.063 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 06:17:11.007 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 06:17:17.602 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60764 10 6452 1 2025-08-23 06:17:55.665 00:00:10.364 TCP 23.104.0.1:44046 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:18:17.777 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57892 10 6452 1 2025-08-23 06:18:56.098 00:00:10.364 TCP 23.104.0.1:43978 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:19:17.950 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 10 6452 1 2025-08-23 06:19:56.501 00:00:10.356 TCP 23.104.0.1:56378 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:20:18.177 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:47458 10 6452 1 2025-08-23 06:20:56.890 00:00:10.335 TCP 23.104.0.1:34834 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:17:15.812 00:05:00.515 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 06:21:18.427 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43576 10 6452 1 2025-08-23 06:22:11.456 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 06:21:57.262 00:00:10.365 TCP 23.104.0.1:50070 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:22:11.313 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 06:18:15.811 00:05:00.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 06:22:18.640 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39350 10 6452 1 2025-08-23 06:22:57.671 00:00:10.398 TCP 23.104.0.1:49324 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:23:18.853 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52092 10 6452 1 2025-08-23 06:23:58.124 00:00:12.910 TCP 23.104.0.1:60316 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:24:19.031 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60778 10 6452 1 2025-08-23 06:25:01.128 00:00:17.426 TCP 23.104.0.1:48784 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:25:19.240 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50810 10 6452 1 2025-08-23 06:26:08.586 00:00:10.332 TCP 23.104.0.1:60772 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:26:19.453 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48834 10 6452 1 2025-08-23 06:27:11.678 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 06:27:11.427 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 06:23:15.812 00:05:00.516 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 06:27:08.951 00:00:10.374 TCP 23.104.0.1:42362 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:27:19.665 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43990 10 6452 1 2025-08-23 06:24:15.810 00:05:00.522 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 06:28:09.379 00:00:10.325 TCP 23.104.0.1:45014 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:28:19.879 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45654 10 6452 1 2025-08-23 06:29:09.744 00:00:10.322 TCP 23.104.0.1:53666 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:29:20.104 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52704 10 6452 1 2025-08-23 06:30:10.109 00:00:10.320 TCP 23.104.0.1:48850 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:30:20.312 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:45310 10 6452 1 2025-08-23 06:31:10.464 00:00:10.437 TCP 23.104.0.1:46934 -> 1.101.0.1:3000 15 1926 1 2025-08-23 06:31:20.505 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:50080 12 10367 1 2025-08-23 06:32:11.611 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 06:32:11.265 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 06:32:10.943 00:00:10.333 TCP 23.104.0.1:46462 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:32:20.746 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34504 10 6452 1 2025-08-23 06:33:11.316 00:00:10.323 TCP 23.104.0.1:50666 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:29:15.818 00:05:00.515 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 06:33:20.957 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:50596 12 6556 1 2025-08-23 06:30:15.815 00:05:00.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 06:34:11.677 00:00:10.371 TCP 23.104.0.1:46608 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:34:21.320 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52026 10 6452 1 2025-08-23 06:35:12.104 00:00:10.332 TCP 23.104.0.1:36124 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:35:21.534 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37890 10 6452 1 2025-08-23 06:36:12.474 00:00:10.995 TCP 23.104.0.1:43274 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:36:21.754 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 10 6452 1 2025-08-23 06:37:11.638 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 06:37:11.658 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 06:37:13.515 00:00:10.361 TCP 23.104.0.1:53208 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:37:21.932 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54392 10 6452 1 2025-08-23 06:38:13.916 00:00:10.364 TCP 23.104.0.1:52888 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:38:22.160 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46752 10 6452 1 2025-08-23 06:35:15.818 00:05:00.516 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 06:39:14.323 00:00:10.363 TCP 23.104.0.1:48038 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:39:22.379 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53474 10 6452 1 2025-08-23 06:36:15.817 00:05:00.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 06:40:14.727 00:00:10.372 TCP 23.104.0.1:45098 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:40:22.586 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55880 10 6452 1 2025-08-23 06:41:15.133 00:00:10.371 TCP 23.104.0.1:48096 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:41:22.800 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:46276 10 6452 1 2025-08-23 06:42:11.719 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 06:42:11.583 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 06:42:15.539 00:00:10.324 TCP 23.104.0.1:40500 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:42:22.972 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38558 10 6452 1 2025-08-23 06:43:15.901 00:00:10.369 TCP 23.104.0.1:40544 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:43:23.214 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49498 10 6452 1 2025-08-23 06:44:16.308 00:00:10.366 TCP 23.104.0.1:37906 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:44:23.386 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59994 10 6452 1 2025-08-23 06:41:15.822 00:05:00.513 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 06:45:16.711 00:00:10.369 TCP 23.104.0.1:38760 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:45:23.598 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48662 10 6452 1 2025-08-23 06:42:15.821 00:05:00.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 06:46:17.117 00:00:10.361 TCP 23.104.0.1:40660 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:46:23.815 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35854 10 6452 1 2025-08-23 06:47:11.863 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 06:47:11.832 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 06:47:17.514 00:00:10.364 TCP 23.104.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:47:23.991 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-08-23 06:48:17.919 00:00:10.370 TCP 23.104.0.1:44610 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:48:24.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43580 10 6452 1 2025-08-23 06:49:18.332 00:00:10.393 TCP 23.104.0.1:59982 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:49:24.387 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35678 10 6452 1 2025-08-23 06:50:18.766 00:00:10.383 TCP 23.104.0.1:44216 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:50:24.601 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35646 10 6452 1 2025-08-23 06:47:15.825 00:05:00.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 06:51:19.189 00:00:10.372 TCP 23.104.0.1:45976 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:51:24.815 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53264 10 6452 1 2025-08-23 06:52:11.969 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 06:52:11.941 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 06:48:15.822 00:05:00.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 06:52:19.601 00:00:10.369 TCP 23.104.0.1:38742 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:52:24.989 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:43664 10 6452 1 2025-08-23 06:53:20.012 00:00:10.366 TCP 23.104.0.1:50080 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:53:25.174 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35340 10 6452 1 2025-08-23 06:54:20.414 00:00:10.324 TCP 23.104.0.1:59790 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:54:25.390 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43998 10 6452 1 2025-08-23 06:55:20.780 00:00:10.367 TCP 23.104.0.1:54654 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:55:25.566 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43478 10 6452 1 2025-08-23 06:56:21.188 00:00:10.365 TCP 23.104.0.1:41518 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:56:25.785 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50144 10 6452 1 2025-08-23 06:57:12.055 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 06:57:12.044 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 06:53:15.827 00:05:00.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 06:57:21.589 00:00:10.367 TCP 23.104.0.1:45208 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:57:25.975 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:57726 10 6452 1 2025-08-23 06:54:15.824 00:05:00.518 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 06:58:21.996 00:00:10.367 TCP 23.104.0.1:34336 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:58:26.175 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55322 10 6452 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1108, avg pps: 0, avg bpp: 318 Time window: 2025-08-23 05:58:47 - 2025-08-23 06:59:16 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0015s User: 0.0023s Wall: 0.0014s flows/second: 119172.9 Runtime: 0.0014s