Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 17:58:55.398 00:00:10.361 TCP 23.104.0.1:33720 -> 1.101.0.1:3000 11 1507 1 2025-08-24 17:59:39.076 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35004 10 6452 1 2025-08-24 17:59:55.800 00:00:10.359 TCP 23.104.0.1:52820 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:00:39.289 00:00:10.485 TCP 1.101.0.1:3000 -> 22.102.0.1:59030 10 6452 1 2025-08-24 18:00:56.199 00:00:10.363 TCP 23.104.0.1:51216 -> 1.101.0.1:3000 11 1507 1 2025-08-24 17:57:16.941 00:05:00.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 18:01:39.811 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:55768 11 6504 1 2025-08-24 18:01:56.601 00:00:10.484 TCP 23.104.0.1:58036 -> 1.101.0.1:3000 11 1507 1 2025-08-24 17:58:16.938 00:05:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 18:02:40.089 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58516 10 6452 1 2025-08-24 18:02:54.367 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 18:02:54.392 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 18:02:57.124 00:00:10.359 TCP 23.104.0.1:59160 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:03:40.306 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52758 10 6452 1 2025-08-24 18:03:57.522 00:00:10.369 TCP 23.104.0.1:55352 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:04:40.482 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54340 10 6452 1 2025-08-24 18:04:57.930 00:00:10.341 TCP 23.104.0.1:59576 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:05:40.696 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53384 10 6452 1 2025-08-24 18:05:58.311 00:00:10.364 TCP 23.104.0.1:38946 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:06:40.866 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56454 10 6452 1 2025-08-24 18:06:58.714 00:00:10.327 TCP 23.104.0.1:52790 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:03:16.943 00:05:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 18:07:41.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56998 10 6452 1 2025-08-24 18:07:54.525 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 18:07:54.397 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 18:07:59.114 00:00:10.389 TCP 23.104.0.1:52858 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:04:16.941 00:05:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 18:08:41.301 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41900 10 6452 1 2025-08-24 18:08:59.535 00:00:10.375 TCP 23.104.0.1:46732 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:09:41.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59530 10 6452 1 2025-08-24 18:09:59.949 00:00:10.370 TCP 23.104.0.1:38926 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:10:41.731 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48124 10 6452 1 2025-08-24 18:11:00.357 00:00:10.327 TCP 23.104.0.1:33120 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:11:41.945 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45202 10 6452 1 2025-08-24 18:12:00.729 00:00:10.374 TCP 23.104.0.1:58722 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:12:54.337 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 18:12:42.178 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55872 10 6452 1 2025-08-24 18:12:54.397 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 18:13:01.139 00:00:10.367 TCP 23.104.0.1:59500 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:09:16.945 00:05:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 18:13:42.349 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33932 10 6452 1 2025-08-24 18:14:01.548 00:00:10.367 TCP 23.104.0.1:34532 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:10:16.942 00:05:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 18:14:42.565 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46750 10 6452 1 2025-08-24 18:15:01.953 00:00:10.366 TCP 23.104.0.1:41208 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:15:42.775 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48726 10 6452 1 2025-08-24 18:16:02.358 00:00:10.366 TCP 23.104.0.1:46132 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:16:42.949 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:35488 10 6452 1 2025-08-24 18:17:02.764 00:00:10.329 TCP 23.104.0.1:33174 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:17:54.714 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 18:17:43.133 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42506 10 6452 1 2025-08-24 18:17:54.530 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 18:18:03.138 00:00:10.321 TCP 23.104.0.1:57664 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:18:43.352 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58744 10 6452 1 2025-08-24 18:19:03.501 00:00:10.369 TCP 23.104.0.1:33732 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:15:16.946 00:05:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 18:19:43.563 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37366 10 6452 1 2025-08-24 18:20:03.907 00:00:10.369 TCP 23.104.0.1:55418 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:16:16.943 00:05:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 18:20:43.733 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34650 10 6452 1 2025-08-24 18:21:04.314 00:00:10.365 TCP 23.104.0.1:58780 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:21:43.967 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:39754 12 10367 1 2025-08-24 18:22:04.713 00:00:10.452 TCP 23.104.0.1:38260 -> 1.101.0.1:3000 15 1926 1 2025-08-24 18:22:54.591 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 18:22:44.246 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50284 10 6452 1 2025-08-24 18:22:54.685 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 18:23:05.202 00:00:10.360 TCP 23.104.0.1:39222 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:23:44.418 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55186 10 6452 1 2025-08-24 18:24:05.598 00:00:10.367 TCP 23.104.0.1:39688 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:24:44.634 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55826 10 6452 1 2025-08-24 18:25:06.007 00:00:10.322 TCP 23.104.0.1:51718 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:21:16.948 00:05:00.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 18:25:44.844 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53468 10 6452 1 2025-08-24 18:26:06.368 00:00:10.365 TCP 23.104.0.1:55284 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:22:16.945 00:05:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 18:26:45.072 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57310 10 6452 1 2025-08-24 18:27:06.771 00:00:10.368 TCP 23.104.0.1:37514 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:27:55.149 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 18:27:45.284 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47920 10 6452 1 2025-08-24 18:27:54.929 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 18:28:07.190 00:00:10.366 TCP 23.104.0.1:39166 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:28:45.463 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60914 10 6452 1 2025-08-24 18:29:07.596 00:00:10.324 TCP 23.104.0.1:47356 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:29:45.679 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39062 10 6452 1 2025-08-24 18:30:07.952 00:00:10.341 TCP 23.104.0.1:42340 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:30:45.888 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59852 10 6452 1 2025-08-24 18:27:16.950 00:05:00.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 18:31:08.332 00:00:10.325 TCP 23.104.0.1:58364 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:31:46.110 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42736 10 6452 1 2025-08-24 18:32:08.696 00:00:10.326 TCP 23.104.0.1:42246 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:28:16.948 00:05:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 18:32:54.852 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 18:32:46.323 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51914 10 6452 1 2025-08-24 18:32:54.828 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 18:33:09.090 00:00:10.363 TCP 23.104.0.1:43428 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:33:46.539 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:55438 10 6452 1 2025-08-24 18:34:09.489 00:00:10.370 TCP 23.104.0.1:36128 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:34:46.782 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48180 10 6452 1 2025-08-24 18:35:09.895 00:00:10.384 TCP 23.104.0.1:42526 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:35:47.015 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47410 10 6452 1 2025-08-24 18:36:10.320 00:00:10.364 TCP 23.104.0.1:41790 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:36:47.185 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37132 10 6452 1 2025-08-24 18:37:10.720 00:00:10.377 TCP 23.104.0.1:33446 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:33:16.955 00:05:00.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 18:37:54.728 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 18:37:54.833 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 18:37:47.401 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49766 10 6452 1 2025-08-24 18:38:11.136 00:00:10.365 TCP 23.104.0.1:36324 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:34:16.952 00:05:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 18:38:47.612 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49244 10 6452 1 2025-08-24 18:39:11.541 00:00:10.363 TCP 23.104.0.1:60090 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:39:47.828 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33052 10 6452 1 2025-08-24 18:40:11.947 00:00:10.371 TCP 23.104.0.1:37634 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:40:48.050 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39736 10 6452 1 2025-08-24 18:41:12.370 00:00:10.377 TCP 23.104.0.1:54226 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:41:48.238 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:37808 14 14278 1 2025-08-24 18:42:12.788 00:00:10.496 TCP 23.104.0.1:54306 -> 1.101.0.1:3000 17 2241 1 2025-08-24 18:42:54.875 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 18:42:55.118 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 18:42:48.503 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39164 10 6452 1 2025-08-24 18:39:16.953 00:05:00.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 18:43:13.326 00:00:10.366 TCP 23.104.0.1:37418 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:43:48.717 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54072 10 6452 1 2025-08-24 18:40:16.951 00:05:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 18:44:13.737 00:00:10.373 TCP 23.104.0.1:56838 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:44:48.929 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:50660 10 6452 1 2025-08-24 18:45:14.143 00:00:10.362 TCP 23.104.0.1:42060 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:45:49.136 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35510 10 6452 1 2025-08-24 18:46:14.544 00:00:10.364 TCP 23.104.0.1:35210 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:46:49.352 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:50492 12 10367 1 2025-08-24 18:47:14.949 00:00:10.449 TCP 23.104.0.1:34274 -> 1.101.0.1:3000 15 1926 1 2025-08-24 18:47:55.293 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 18:47:55.215 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 18:47:49.556 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39154 10 6452 1 2025-08-24 18:48:15.436 00:00:10.332 TCP 23.104.0.1:58052 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:48:49.773 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33850 10 6452 1 2025-08-24 18:45:16.954 00:05:00.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 18:49:15.804 00:00:10.359 TCP 23.104.0.1:32786 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:49:49.988 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48008 10 6452 1 2025-08-24 18:46:16.952 00:05:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 18:50:16.204 00:00:10.367 TCP 23.104.0.1:40994 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:50:50.210 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44300 10 6452 1 2025-08-24 18:51:16.609 00:00:10.328 TCP 23.104.0.1:40830 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:51:50.432 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-08-24 18:52:16.973 00:00:10.379 TCP 23.104.0.1:48546 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:52:55.094 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 18:52:55.329 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 18:52:50.604 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43550 10 6452 1 2025-08-24 18:53:17.387 00:00:10.365 TCP 23.104.0.1:42424 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:53:50.834 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53570 10 6452 1 2025-08-24 18:54:17.792 00:00:10.371 TCP 23.104.0.1:43284 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:54:51.076 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52072 10 6452 1 2025-08-24 18:51:16.956 00:05:00.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 18:55:18.201 00:00:10.388 TCP 23.104.0.1:59588 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:55:51.296 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38328 10 6452 1 2025-08-24 18:52:16.955 00:05:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 18:56:18.625 00:00:10.358 TCP 23.104.0.1:39414 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:56:51.510 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60600 10 6452 1 2025-08-24 18:57:19.025 00:00:10.361 TCP 23.104.0.1:60558 -> 1.101.0.1:3000 11 1507 1 2025-08-24 18:57:55.482 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 18:57:55.178 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 18:57:51.724 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47210 10 6452 1 2025-08-24 18:58:19.427 00:00:10.325 TCP 23.104.0.1:37940 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 509176, total packets: 1585, avg bps: 1109, avg pps: 0, avg bpp: 321 Time window: 2025-08-24 17:57:16 - 2025-08-24 18:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0011s Wall: 0.0022s flows/second: 73521.0 Runtime: 0.0022s