Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-26 02:59:00.879 00:00:10.347 TCP 23.104.0.1:52838 -> 1.101.0.1:3000 11 1507 1 2025-08-26 02:55:17.873 00:05:00.178 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-26 02:59:28.976 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55886 10 6452 1 2025-08-26 03:00:01.263 00:00:10.323 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-08-26 02:56:17.875 00:05:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-26 03:00:29.213 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44330 10 6452 1 2025-08-26 03:01:01.624 00:00:10.365 TCP 23.104.0.1:57770 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:01:29.427 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35540 10 6452 1 2025-08-26 03:02:02.031 00:00:10.366 TCP 23.104.0.1:34026 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:02:29.644 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:43486 10 6452 1 2025-08-26 03:03:02.439 00:00:10.368 TCP 23.104.0.1:60478 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:03:33.976 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 03:03:34.195 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 03:03:29.837 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39532 10 6452 1 2025-08-26 03:04:02.839 00:00:10.396 TCP 23.104.0.1:53820 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:04:30.070 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56944 10 6452 1 2025-08-26 03:05:03.291 00:00:10.392 TCP 23.104.0.1:36534 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:01:17.874 00:05:00.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-26 03:05:30.289 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49538 10 6452 1 2025-08-26 03:06:03.727 00:00:10.368 TCP 23.104.0.1:60702 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:02:17.877 00:05:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-26 03:06:30.505 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44220 10 6452 1 2025-08-26 03:07:04.134 00:00:10.363 TCP 23.104.0.1:45192 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:07:30.711 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47204 10 6452 1 2025-08-26 03:08:04.537 00:00:10.367 TCP 23.104.0.1:45652 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:08:34.094 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 03:08:34.065 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 03:08:30.929 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59688 10 6452 1 2025-08-26 03:09:04.945 00:00:10.370 TCP 23.104.0.1:38218 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:09:31.165 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58698 10 6452 1 2025-08-26 03:10:05.356 00:00:10.362 TCP 23.104.0.1:50732 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:10:31.380 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56390 10 6452 1 2025-08-26 03:11:05.761 00:00:10.325 TCP 23.104.0.1:33374 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:07:17.875 00:05:00.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-26 03:11:31.596 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51864 10 6452 1 2025-08-26 03:12:06.129 00:00:10.367 TCP 23.104.0.1:42752 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:08:17.878 00:05:00.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-26 03:12:31.808 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39754 10 6452 1 2025-08-26 03:13:06.537 00:00:10.321 TCP 23.104.0.1:39818 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:13:34.108 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 03:13:34.348 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 03:13:31.980 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60488 10 6452 1 2025-08-26 03:14:06.895 00:00:10.362 TCP 23.104.0.1:48202 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:14:32.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44214 10 6452 1 2025-08-26 03:15:07.294 00:00:10.368 TCP 23.104.0.1:33492 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:15:32.431 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57656 10 6452 1 2025-08-26 03:16:07.706 00:00:10.328 TCP 23.104.0.1:53232 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:16:32.640 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42010 10 6452 1 2025-08-26 03:13:17.878 00:05:00.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-26 03:17:08.098 00:00:10.361 TCP 23.104.0.1:50916 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:17:32.859 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33746 10 6452 1 2025-08-26 03:18:08.498 00:00:10.362 TCP 23.104.0.1:40562 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:14:17.880 00:05:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-26 03:18:34.412 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 03:18:34.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 03:18:33.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42720 10 6452 1 2025-08-26 03:19:08.897 00:00:10.326 TCP 23.104.0.1:54180 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:19:33.297 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54684 10 6452 1 2025-08-26 03:20:09.263 00:00:10.364 TCP 23.104.0.1:42334 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:20:33.505 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:55260 10 6452 1 2025-08-26 03:21:09.671 00:00:10.375 TCP 23.104.0.1:40788 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:21:33.671 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35358 10 6452 1 2025-08-26 03:22:10.108 00:00:10.366 TCP 23.104.0.1:35674 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:22:33.843 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48384 10 6452 1 2025-08-26 03:19:17.878 00:05:00.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-26 03:23:10.516 00:00:10.365 TCP 23.104.0.1:51170 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:23:34.525 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 03:23:34.455 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 03:23:34.079 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38990 10 6452 1 2025-08-26 03:20:17.881 00:05:00.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-26 03:24:10.927 00:00:10.350 TCP 23.104.0.1:54546 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:24:34.293 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52738 10 6452 1 2025-08-26 03:25:11.320 00:00:10.327 TCP 23.104.0.1:56790 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:25:34.509 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52828 10 6452 1 2025-08-26 03:26:11.690 00:00:10.364 TCP 23.104.0.1:48452 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:26:34.725 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56824 10 6452 1 2025-08-26 03:27:12.106 00:00:10.326 TCP 23.104.0.1:35802 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:27:34.901 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37820 10 6452 1 2025-08-26 03:28:12.473 00:00:10.358 TCP 23.104.0.1:40082 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:28:34.744 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 03:28:34.443 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 03:28:35.087 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40012 10 6452 1 2025-08-26 03:25:17.880 00:05:00.182 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-26 03:29:12.871 00:00:10.371 TCP 23.104.0.1:54404 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:29:35.318 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37492 10 6452 1 2025-08-26 03:26:17.883 00:05:00.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-26 03:30:13.307 00:00:10.366 TCP 23.104.0.1:59110 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:30:35.534 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57204 10 6452 1 2025-08-26 03:31:13.713 00:00:10.330 TCP 23.104.0.1:40772 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:31:35.751 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42250 10 6452 1 2025-08-26 03:32:14.106 00:00:10.326 TCP 23.104.0.1:33660 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:32:35.980 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-08-26 03:33:14.474 00:00:10.368 TCP 23.104.0.1:38468 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:33:34.693 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 03:33:34.628 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 03:33:36.207 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51214 10 6452 1 2025-08-26 03:34:14.886 00:00:10.381 TCP 23.104.0.1:43278 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:34:36.429 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60504 10 6452 1 2025-08-26 03:31:17.881 00:05:00.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-26 03:35:15.304 00:00:10.365 TCP 23.104.0.1:44262 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:35:36.640 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44140 10 6452 1 2025-08-26 03:32:17.884 00:05:00.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-26 03:36:15.706 00:00:10.368 TCP 23.104.0.1:60322 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:36:36.853 00:00:10.427 TCP 1.101.0.1:3000 -> 22.102.0.1:48692 10 6452 1 2025-08-26 03:37:16.112 00:00:10.367 TCP 23.104.0.1:37044 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:37:37.315 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52300 10 6452 1 2025-08-26 03:38:16.524 00:00:10.365 TCP 23.104.0.1:41666 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:38:34.789 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 03:38:34.652 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 03:38:37.482 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34374 10 6452 1 2025-08-26 03:39:16.925 00:00:10.382 TCP 23.104.0.1:44808 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:39:37.654 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37470 10 6452 1 2025-08-26 03:40:17.346 00:00:10.322 TCP 23.104.0.1:43660 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:40:37.832 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60230 10 6452 1 2025-08-26 03:37:17.883 00:05:00.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-26 03:41:17.710 00:00:10.358 TCP 23.104.0.1:36074 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:41:38.068 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48392 10 6452 1 2025-08-26 03:38:17.885 00:05:00.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-26 03:42:18.108 00:00:10.372 TCP 23.104.0.1:59936 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:42:38.247 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52562 10 6452 1 2025-08-26 03:43:18.521 00:00:10.329 TCP 23.104.0.1:38642 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:43:34.887 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 03:43:34.821 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 03:43:38.461 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60588 10 6452 1 2025-08-26 03:44:18.890 00:00:10.374 TCP 23.104.0.1:45196 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:44:38.669 00:00:10.922 TCP 1.101.0.1:3000 -> 22.102.0.1:41554 10 6452 1 2025-08-26 03:45:19.303 00:00:10.323 TCP 23.104.0.1:58004 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:45:39.629 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50208 10 6452 1 2025-08-26 03:46:19.664 00:00:10.406 TCP 23.104.0.1:54426 -> 1.101.0.1:3000 15 1926 1 2025-08-26 03:46:39.842 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:39584 12 10367 1 2025-08-26 03:43:17.886 00:05:00.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-26 03:47:20.113 00:00:10.366 TCP 23.104.0.1:45374 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:47:40.102 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38418 10 6452 1 2025-08-26 03:44:17.888 00:05:00.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-26 03:48:34.803 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 03:48:20.516 00:00:10.325 TCP 23.104.0.1:53024 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:48:34.900 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 03:48:40.324 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43646 10 6452 1 2025-08-26 03:49:20.871 00:00:10.326 TCP 23.104.0.1:55566 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:49:40.554 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45306 10 6452 1 2025-08-26 03:50:21.232 00:00:10.364 TCP 23.104.0.1:45516 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:50:40.770 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:38962 10 6452 1 2025-08-26 03:51:21.637 00:00:10.407 TCP 23.104.0.1:43008 -> 1.101.0.1:3000 15 1926 1 2025-08-26 03:51:41.026 00:00:10.314 TCP 1.101.0.1:3000 -> 22.102.0.1:58540 12 10367 1 2025-08-26 03:52:22.106 00:00:10.370 TCP 23.104.0.1:42014 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:52:41.378 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46258 10 6452 1 2025-08-26 03:49:17.887 00:05:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-26 03:53:35.053 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 03:53:22.512 00:00:10.369 TCP 23.104.0.1:33610 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:53:35.053 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-26 03:53:41.591 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41406 10 6452 1 2025-08-26 03:50:17.890 00:05:00.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-26 03:54:22.914 00:00:10.393 TCP 23.104.0.1:45618 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:54:41.762 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58516 10 6452 1 2025-08-26 03:55:23.310 00:00:10.364 TCP 23.104.0.1:42724 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:55:41.978 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:44518 10 6452 1 2025-08-26 03:56:23.715 00:00:10.329 TCP 23.104.0.1:50188 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:56:42.209 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41120 10 6452 1 2025-08-26 03:57:24.103 00:00:10.370 TCP 23.104.0.1:42312 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:57:42.424 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59594 10 6452 1 2025-08-26 03:58:34.883 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-26 03:58:24.511 00:00:10.329 TCP 23.104.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-08-26 03:58:35.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 500564, total packets: 1574, avg bps: 1054, avg pps: 0, avg bpp: 318 Time window: 2025-08-26 02:55:17 - 2025-08-26 03:58:35 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0009s Wall: 0.0025s flows/second: 65173.6 Runtime: 0.0025s