Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 12:58:52.649 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33848 10 6452 1 2025-08-23 12:55:16.036 00:04:00.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-23 12:59:02.183 00:00:10.328 TCP 23.104.0.1:51390 -> 1.101.0.1:3000 11 1507 1 2025-08-23 12:59:52.870 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42126 10 6452 1 2025-08-23 13:00:02.548 00:00:10.363 TCP 23.104.0.1:55518 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:00:53.094 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6452 1 2025-08-23 13:01:02.956 00:00:10.438 TCP 23.104.0.1:33474 -> 1.101.0.1:3000 15 1926 1 2025-08-23 13:01:53.264 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:56112 12 10367 1 2025-08-23 13:02:19.304 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 13:02:03.439 00:00:10.366 TCP 23.104.0.1:53006 -> 1.101.0.1:3000 11 1507 1 2025-08-23 12:58:16.042 00:04:00.450 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-23 13:02:19.373 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 13:02:53.462 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38798 10 6452 1 2025-08-23 13:03:03.846 00:00:10.336 TCP 23.104.0.1:40060 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:03:53.678 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59994 12 6556 1 2025-08-23 13:04:04.221 00:00:10.324 TCP 23.104.0.1:47804 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:00:16.040 00:04:00.455 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-23 13:04:53.901 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34498 10 6452 1 2025-08-23 13:05:04.585 00:00:10.322 TCP 23.104.0.1:36574 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:05:54.114 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59728 10 6452 1 2025-08-23 13:06:04.954 00:00:10.438 TCP 23.104.0.1:40162 -> 1.101.0.1:3000 15 1926 1 2025-08-23 13:06:54.335 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46014 12 10367 1 2025-08-23 13:07:05.438 00:00:10.367 TCP 23.104.0.1:43414 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:07:20.167 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 13:07:19.950 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 13:07:54.538 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50242 10 6452 1 2025-08-23 13:08:05.843 00:00:10.387 TCP 23.104.0.1:42538 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:03:16.044 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-23 13:08:54.707 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41932 10 6452 1 2025-08-23 13:09:06.269 00:00:10.363 TCP 23.104.0.1:35818 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:09:54.922 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44570 10 6452 1 2025-08-23 13:05:16.041 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-23 13:10:06.673 00:00:10.365 TCP 23.104.0.1:35980 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:10:55.139 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39886 10 6452 1 2025-08-23 13:11:07.104 00:00:10.322 TCP 23.104.0.1:35472 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:11:55.305 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41250 10 6452 1 2025-08-23 13:12:19.714 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 13:12:19.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 13:12:07.467 00:00:10.367 TCP 23.104.0.1:41406 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:12:55.481 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47688 10 6452 1 2025-08-23 13:13:07.873 00:00:10.364 TCP 23.104.0.1:50228 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:13:55.694 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42632 10 6452 1 2025-08-23 13:09:16.493 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-23 13:14:08.284 00:00:10.364 TCP 23.104.0.1:44616 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:14:55.866 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35508 10 6452 1 2025-08-23 13:15:08.692 00:00:10.365 TCP 23.104.0.1:55160 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:15:56.088 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54562 10 6452 1 2025-08-23 13:11:16.496 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-08-23 13:16:09.111 00:00:10.363 TCP 23.104.0.1:55126 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:16:56.300 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44156 10 6452 1 2025-08-23 13:17:19.582 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 13:17:19.747 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 13:17:09.517 00:00:10.367 TCP 23.104.0.1:48140 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:17:56.512 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48588 10 6452 1 2025-08-23 13:18:09.925 00:00:10.375 TCP 23.104.0.1:44848 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:18:56.723 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50388 10 6452 1 2025-08-23 13:19:10.339 00:00:10.363 TCP 23.104.0.1:45932 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:19:56.938 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:49472 10 6452 1 2025-08-23 13:20:10.745 00:00:10.367 TCP 23.104.0.1:49220 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:20:57.170 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34530 10 6452 1 2025-08-23 13:16:16.070 00:06:00.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-23 13:21:11.146 00:00:10.323 TCP 23.104.0.1:54846 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:21:57.380 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45804 10 6452 1 2025-08-23 13:22:20.899 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 13:22:21.026 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 13:22:11.508 00:00:10.371 TCP 23.104.0.1:36842 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:22:57.590 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42648 10 6452 1 2025-08-23 13:18:16.069 00:06:00.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-23 13:23:11.913 00:00:10.363 TCP 23.104.0.1:52066 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:23:57.803 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57638 10 6452 1 2025-08-23 13:24:12.315 00:00:10.368 TCP 23.104.0.1:43414 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:24:58.018 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57888 10 6452 1 2025-08-23 13:25:12.722 00:00:10.328 TCP 23.104.0.1:40558 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:25:58.229 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34980 10 6452 1 2025-08-23 13:25:16.069 00:01:00.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 4 246 1 2025-08-23 13:26:13.112 00:00:10.388 TCP 23.104.0.1:42878 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:26:58.402 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 10 6452 1 2025-08-23 13:27:19.709 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 13:27:19.705 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 13:27:13.542 00:00:10.363 TCP 23.104.0.1:44562 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:27:58.616 00:00:10.499 TCP 1.101.0.1:3000 -> 22.102.0.1:52944 10 6452 1 2025-08-23 13:23:16.072 00:06:00.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-23 13:28:13.944 00:00:10.368 TCP 23.104.0.1:34688 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:28:59.153 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:48688 10 6452 1 2025-08-23 13:29:14.349 00:00:10.392 TCP 23.104.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:29:59.358 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:34818 10 6452 1 2025-08-23 13:30:14.780 00:00:10.363 TCP 23.104.0.1:41904 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:30:59.551 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40848 10 6452 1 2025-08-23 13:27:16.070 00:04:00.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-23 13:31:15.183 00:00:10.371 TCP 23.104.0.1:39380 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:31:59.775 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52268 10 6452 1 2025-08-23 13:32:20.177 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 13:32:20.210 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 13:32:15.593 00:00:10.365 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:32:59.987 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:57226 10 6452 1 2025-08-23 13:33:15.993 00:00:10.398 TCP 23.104.0.1:58538 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:34:00.168 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42650 10 6452 1 2025-08-23 13:30:16.077 00:04:00.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-23 13:34:16.398 00:00:10.362 TCP 23.104.0.1:34478 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:35:00.339 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60182 10 6452 1 2025-08-23 13:35:16.800 00:00:10.363 TCP 23.104.0.1:55704 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:36:00.557 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43650 10 6452 1 2025-08-23 13:32:16.076 00:04:00.439 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-23 13:36:17.202 00:00:10.372 TCP 23.104.0.1:40750 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:37:00.770 00:00:10.551 TCP 1.101.0.1:3000 -> 22.102.0.1:47912 10 6452 1 2025-08-23 13:37:20.219 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 13:37:19.991 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 13:37:17.614 00:00:10.364 TCP 23.104.0.1:48948 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:38:01.361 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38084 10 6452 1 2025-08-23 13:38:18.019 00:00:10.363 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:39:01.571 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:42324 10 6452 1 2025-08-23 13:35:16.082 00:04:00.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-23 13:39:18.422 00:00:10.369 TCP 23.104.0.1:49608 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:40:01.807 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52424 10 6452 1 2025-08-23 13:40:18.828 00:00:10.364 TCP 23.104.0.1:42340 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:37:16.081 00:04:00.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-23 13:41:02.025 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41274 10 6452 1 2025-08-23 13:41:19.226 00:00:10.364 TCP 23.104.0.1:42628 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:42:02.196 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41130 10 6452 1 2025-08-23 13:42:20.382 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 13:42:20.393 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 13:42:19.626 00:00:10.361 TCP 23.104.0.1:39464 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:43:02.424 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60814 10 6452 1 2025-08-23 13:43:20.027 00:00:10.379 TCP 23.104.0.1:45752 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:44:02.639 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53556 10 6452 1 2025-08-23 13:44:20.441 00:00:10.339 TCP 23.104.0.1:59228 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:45:02.855 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54782 10 6452 1 2025-08-23 13:40:16.085 00:06:00.430 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-23 13:45:20.820 00:00:10.363 TCP 23.104.0.1:44450 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:46:03.083 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39990 10 6452 1 2025-08-23 13:46:21.223 00:00:10.363 TCP 23.104.0.1:54388 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:42:16.083 00:06:00.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-23 13:47:03.297 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37276 10 6452 1 2025-08-23 13:47:20.251 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 13:47:20.335 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 13:47:21.626 00:00:10.363 TCP 23.104.0.1:50414 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:48:03.470 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53562 11 6492 1 2025-08-23 13:48:22.029 00:00:10.360 TCP 23.104.0.1:55444 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:49:03.643 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43624 10 6452 1 2025-08-23 13:49:22.439 00:00:10.368 TCP 23.104.0.1:56242 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:50:03.853 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56276 10 6452 1 2025-08-23 13:50:22.852 00:00:10.377 TCP 23.104.0.1:37320 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:51:04.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40150 10 6452 1 2025-08-23 13:51:23.267 00:00:10.322 TCP 23.104.0.1:59218 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:52:04.293 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34164 10 6452 1 2025-08-23 13:47:16.085 00:06:00.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-23 13:52:20.488 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 13:52:20.630 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 13:52:23.627 00:00:10.365 TCP 23.104.0.1:49384 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:53:04.508 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50254 10 6452 1 2025-08-23 13:53:24.032 00:00:10.799 TCP 23.104.0.1:42304 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:54:04.722 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55000 10 6452 1 2025-08-23 13:49:16.089 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-23 13:54:24.866 00:00:10.368 TCP 23.104.0.1:47752 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:55:04.935 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:49352 10 6452 1 2025-08-23 13:55:25.267 00:00:10.366 TCP 23.104.0.1:38622 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:56:05.130 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:43914 10 6452 1 2025-08-23 13:56:25.670 00:00:10.363 TCP 23.104.0.1:52160 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:57:05.300 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36328 10 6452 1 2025-08-23 13:57:20.633 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-23 13:57:20.372 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-23 13:57:26.127 00:00:10.368 TCP 23.104.0.1:34546 -> 1.101.0.1:3000 11 1507 1 2025-08-23 13:53:16.515 00:06:00.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-23 13:58:05.517 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60028 10 6452 1 2025-08-23 13:58:26.536 00:00:10.369 TCP 23.104.0.1:37374 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 165, total bytes: 507477, total packets: 1592, avg bps: 1057, avg pps: 0, avg bpp: 318 Time window: 2025-08-23 12:55:16 - 2025-08-23 13:59:16 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0021s User: 0.0021s Wall: 0.0017s flows/second: 97693.4 Runtime: 0.0017s