Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 06:59:22.402 00:00:10.326 TCP 23.104.0.1:32868 -> 1.101.0.1:3000 11 1507 1 2025-08-23 06:59:26.393 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52738 10 6452 1 2025-08-23 07:00:26.615 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39504 10 6452 1 2025-08-23 07:00:22.764 00:00:10.376 TCP 23.104.0.1:34678 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:01:26.828 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54954 10 6452 1 2025-08-23 07:01:23.182 00:00:10.325 TCP 23.104.0.1:53134 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:02:12.258 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 07:02:12.158 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 07:02:23.546 00:00:10.370 TCP 23.104.0.1:43178 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:02:27.062 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33862 10 6452 1 2025-08-23 06:59:15.828 00:05:00.515 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 07:03:23.952 00:00:10.328 TCP 23.104.0.1:40312 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:03:27.233 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60920 10 6452 1 2025-08-23 07:00:15.825 00:05:00.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 07:04:24.321 00:00:10.366 TCP 23.104.0.1:57316 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:04:27.443 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57500 10 6452 1 2025-08-23 07:05:24.730 00:00:10.367 TCP 23.104.0.1:54932 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:05:27.655 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39436 10 6452 1 2025-08-23 07:06:25.140 00:00:10.437 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 15 1926 1 2025-08-23 07:06:27.878 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:50508 12 10367 1 2025-08-23 07:07:12.329 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 07:07:12.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 07:07:25.612 00:00:10.370 TCP 23.104.0.1:46690 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:07:28.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58886 10 6452 1 2025-08-23 07:08:26.025 00:00:10.327 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:08:28.341 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:34684 10 6452 1 2025-08-23 07:05:15.832 00:05:00.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 07:09:26.385 00:00:10.362 TCP 23.104.0.1:41934 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:09:28.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-08-23 07:06:15.829 00:05:00.518 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 07:10:26.787 00:00:10.369 TCP 23.104.0.1:51080 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:10:28.752 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44186 10 6452 1 2025-08-23 07:11:27.197 00:00:10.365 TCP 23.104.0.1:56674 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:11:28.961 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45242 12 6556 1 2025-08-23 07:12:12.408 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 07:12:12.603 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 07:12:29.188 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42824 10 6452 1 2025-08-23 07:12:27.604 00:00:10.325 TCP 23.104.0.1:54822 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:13:27.963 00:00:10.332 TCP 23.104.0.1:42750 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:13:29.399 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55836 10 6452 1 2025-08-23 07:14:29.610 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39124 10 6452 1 2025-08-23 07:14:28.332 00:00:10.368 TCP 23.104.0.1:42528 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:11:15.833 00:05:00.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 07:15:29.824 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41040 10 6452 1 2025-08-23 07:15:28.741 00:00:10.370 TCP 23.104.0.1:43182 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:12:15.832 00:05:00.518 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 07:16:29.145 00:00:10.325 TCP 23.104.0.1:55346 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:16:30.057 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36004 10 6452 1 2025-08-23 07:17:12.334 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 07:17:12.515 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 07:17:29.507 00:00:10.363 TCP 23.104.0.1:42056 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:17:30.276 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37100 10 6452 1 2025-08-23 07:18:29.910 00:00:10.367 TCP 23.104.0.1:55848 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:18:30.445 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60870 10 6452 1 2025-08-23 07:19:30.654 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39512 10 6452 1 2025-08-23 07:19:30.320 00:00:10.372 TCP 23.104.0.1:59986 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:20:30.728 00:00:10.376 TCP 23.104.0.1:55150 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:20:30.881 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43946 10 6452 1 2025-08-23 07:17:15.841 00:05:00.506 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 07:21:31.109 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58722 10 6452 1 2025-08-23 07:21:31.139 00:00:10.365 TCP 23.104.0.1:33454 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:22:12.361 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 07:22:12.647 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 07:18:15.839 00:05:00.512 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 07:22:31.333 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:52022 10 6452 1 2025-08-23 07:22:31.543 00:00:10.325 TCP 23.104.0.1:32972 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:23:31.520 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34764 10 6452 1 2025-08-23 07:23:31.908 00:00:10.331 TCP 23.104.0.1:48808 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:24:31.732 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41704 10 6452 1 2025-08-23 07:24:32.284 00:00:10.557 TCP 23.104.0.1:51628 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:25:32.882 00:00:10.349 TCP 23.104.0.1:60922 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:25:31.964 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37330 10 6452 1 2025-08-23 07:26:33.278 00:00:10.370 TCP 23.104.0.1:40340 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:26:32.200 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55334 10 6452 1 2025-08-23 07:27:12.474 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 07:27:12.702 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 07:23:15.843 00:05:00.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 07:27:33.698 00:00:10.366 TCP 23.104.0.1:45270 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:27:32.374 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51706 10 6452 1 2025-08-23 07:24:15.841 00:05:00.515 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 07:28:32.593 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:59758 10 6452 1 2025-08-23 07:28:34.107 00:00:10.369 TCP 23.104.0.1:36988 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:29:34.516 00:00:10.375 TCP 23.104.0.1:47492 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:29:32.775 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48706 10 6452 1 2025-08-23 07:30:34.927 00:00:10.850 TCP 23.104.0.1:49010 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:30:32.992 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35466 10 6452 1 2025-08-23 07:31:35.817 00:00:10.437 TCP 23.104.0.1:55476 -> 1.101.0.1:3000 15 1926 1 2025-08-23 07:31:33.218 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:52824 12 10365 1 2025-08-23 07:32:12.812 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 07:32:13.404 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 07:32:33.457 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40018 10 6452 1 2025-08-23 07:32:36.297 00:00:10.357 TCP 23.104.0.1:48006 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:29:15.842 00:05:00.515 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 07:33:33.674 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60750 10 6452 1 2025-08-23 07:33:36.693 00:00:10.327 TCP 23.104.0.1:58878 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:30:15.841 00:05:00.519 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 07:34:33.899 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52584 10 6452 1 2025-08-23 07:34:37.090 00:00:10.365 TCP 23.104.0.1:42666 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:35:34.109 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39174 10 6452 1 2025-08-23 07:35:37.493 00:00:10.365 TCP 23.104.0.1:55044 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:36:34.281 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40886 10 6452 1 2025-08-23 07:36:37.900 00:00:10.705 TCP 23.104.0.1:37460 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:37:12.536 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 07:37:12.709 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 07:37:34.462 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42800 10 6452 1 2025-08-23 07:37:38.645 00:00:10.361 TCP 23.104.0.1:55320 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:38:34.671 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44804 10 6452 1 2025-08-23 07:38:39.054 00:00:10.326 TCP 23.104.0.1:53626 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:35:15.846 00:05:00.515 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 07:39:34.880 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:48776 10 6452 1 2025-08-23 07:39:39.422 00:00:10.413 TCP 23.104.0.1:59202 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:36:15.842 00:05:00.519 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 07:40:35.108 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52642 10 6452 1 2025-08-23 07:40:39.873 00:00:10.369 TCP 23.104.0.1:44738 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:41:35.316 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37588 10 6452 1 2025-08-23 07:41:40.281 00:00:10.368 TCP 23.104.0.1:55642 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:42:12.845 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 07:42:13.083 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 07:42:35.529 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50148 10 6452 1 2025-08-23 07:42:40.684 00:00:10.328 TCP 23.104.0.1:41368 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:43:35.739 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53940 10 6452 1 2025-08-23 07:43:41.050 00:00:10.329 TCP 23.104.0.1:42304 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:44:35.957 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:33932 10 6452 1 2025-08-23 07:44:41.421 00:00:10.362 TCP 23.104.0.1:44316 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:41:15.848 00:05:00.518 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 07:45:36.138 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46002 10 6452 1 2025-08-23 07:45:41.832 00:00:10.382 TCP 23.104.0.1:40232 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:42:15.846 00:05:00.523 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 07:46:36.361 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43032 10 6452 1 2025-08-23 07:46:42.251 00:00:10.366 TCP 23.104.0.1:37492 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:47:13.214 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 07:47:13.199 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 07:47:36.575 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 10 6452 1 2025-08-23 07:47:42.650 00:00:10.368 TCP 23.104.0.1:50160 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:48:36.788 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41172 10 6452 1 2025-08-23 07:48:43.065 00:00:10.363 TCP 23.104.0.1:39584 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:49:37.009 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51248 10 6452 1 2025-08-23 07:49:43.467 00:00:10.325 TCP 23.104.0.1:53150 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:50:37.234 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44068 10 6452 1 2025-08-23 07:50:43.830 00:00:10.389 TCP 23.104.0.1:55250 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:47:15.849 00:05:00.517 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 07:51:37.444 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:46096 10 6452 1 2025-08-23 07:51:44.258 00:00:10.323 TCP 23.104.0.1:53006 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:52:12.931 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 07:52:13.257 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 07:48:15.846 00:05:00.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 07:52:37.631 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38868 10 6452 1 2025-08-23 07:52:44.615 00:00:10.364 TCP 23.104.0.1:46308 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:53:37.851 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49198 10 6452 1 2025-08-23 07:53:45.029 00:00:10.364 TCP 23.104.0.1:36154 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:54:38.078 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55416 10 6452 1 2025-08-23 07:54:45.433 00:00:10.374 TCP 23.104.0.1:60762 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:55:38.323 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45458 10 6452 1 2025-08-23 07:55:45.847 00:00:10.383 TCP 23.104.0.1:55456 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:56:38.527 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38616 10 6452 1 2025-08-23 07:56:46.262 00:00:10.370 TCP 23.104.0.1:41240 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:57:13.521 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 07:57:13.399 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 07:53:15.857 00:05:00.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-23 07:57:38.742 00:00:10.622 TCP 1.101.0.1:3000 -> 22.102.0.1:60556 10 6452 1 2025-08-23 07:57:46.669 00:00:10.323 TCP 23.104.0.1:41770 -> 1.101.0.1:3000 11 1507 1 2025-08-23 07:54:15.850 00:05:00.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-23 07:58:39.405 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:37220 10 6452 1 Summary: total flows: 163, total bytes: 505611, total packets: 1575, avg bps: 1123, avg pps: 0, avg bpp: 321 Time window: 2025-08-23 06:59:15 - 2025-08-23 07:59:16 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0010s User: 0.0030s Wall: 0.0020s flows/second: 82280.8 Runtime: 0.0020s