Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 02:59:00.178 00:00:10.362 TCP 23.104.0.1:36500 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:59:31.936 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 02:59:31.994 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 02:59:33.252 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54268 10 6452 1 2025-08-28 03:00:00.577 00:00:10.324 TCP 23.104.0.1:45764 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:00:33.473 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48284 10 6452 1 2025-08-28 03:01:00.938 00:00:10.325 TCP 23.104.0.1:46772 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:01:33.644 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53780 10 6452 1 2025-08-28 03:02:01.301 00:00:10.319 TCP 23.104.0.1:59806 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:02:33.854 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:55648 10 6452 1 2025-08-28 03:03:01.663 00:00:10.366 TCP 23.104.0.1:44582 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:03:34.100 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41642 10 6452 1 2025-08-28 03:04:02.092 00:00:10.366 TCP 23.104.0.1:46850 -> 1.101.0.1:3000 11 1507 1 2025-08-28 02:59:19.320 00:06:00.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 03:04:32.322 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 03:04:32.452 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 03:04:34.318 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60044 10 6452 1 2025-08-28 03:05:02.496 00:00:10.362 TCP 23.104.0.1:42426 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:00:19.327 00:06:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 03:05:34.529 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48444 10 6452 1 2025-08-28 03:06:02.896 00:00:10.381 TCP 23.104.0.1:53102 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:06:34.741 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50046 12 10367 1 2025-08-28 03:07:03.321 00:00:10.442 TCP 23.104.0.1:41900 -> 1.101.0.1:3000 15 1926 1 2025-08-28 03:07:34.953 00:00:10.457 TCP 1.101.0.1:3000 -> 22.102.0.1:57782 12 6556 1 2025-08-28 03:08:03.803 00:00:10.368 TCP 23.104.0.1:50124 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:08:35.468 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44346 10 6452 1 2025-08-28 03:09:04.210 00:00:10.372 TCP 23.104.0.1:49634 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:09:31.923 00:00:00.017 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 03:09:32.218 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 03:09:35.694 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52858 10 6452 1 2025-08-28 03:10:04.623 00:00:10.370 TCP 23.104.0.1:38538 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:10:35.918 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37502 10 6452 1 2025-08-28 03:11:05.035 00:00:10.351 TCP 23.104.0.1:56862 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:06:19.322 00:06:00.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 03:11:36.148 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36392 10 6452 1 2025-08-28 03:12:05.422 00:00:10.335 TCP 23.104.0.1:59268 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:07:19.340 00:06:00.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 03:12:36.364 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42708 10 6452 1 2025-08-28 03:13:05.799 00:00:10.364 TCP 23.104.0.1:34682 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:13:36.545 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32922 10 6452 1 2025-08-28 03:14:06.200 00:00:10.361 TCP 23.104.0.1:52550 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:14:32.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 03:14:32.594 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 03:14:36.758 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39364 10 6452 1 2025-08-28 03:15:06.597 00:00:10.376 TCP 23.104.0.1:46282 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:15:36.932 00:00:10.374 TCP 1.101.0.1:3000 -> 22.102.0.1:41720 10 6452 1 2025-08-28 03:16:07.012 00:00:10.421 TCP 23.104.0.1:51946 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:16:37.357 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58152 10 6452 1 2025-08-28 03:17:07.465 00:00:10.366 TCP 23.104.0.1:56918 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:17:37.535 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39082 10 6452 1 2025-08-28 03:13:19.322 00:06:00.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 03:18:07.873 00:00:10.500 TCP 23.104.0.1:35548 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:18:37.750 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45084 10 6452 1 2025-08-28 03:19:08.415 00:00:10.326 TCP 23.104.0.1:41886 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:14:19.326 00:06:00.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 03:19:32.436 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 03:19:32.242 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 03:19:37.968 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:57740 10 6452 1 2025-08-28 03:20:08.776 00:00:10.326 TCP 23.104.0.1:56096 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:20:38.150 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58384 10 6452 1 2025-08-28 03:21:09.141 00:00:10.379 TCP 23.104.0.1:35930 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:21:38.321 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36786 10 6452 1 2025-08-28 03:22:09.554 00:00:10.364 TCP 23.104.0.1:40644 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:22:38.532 00:00:10.404 TCP 1.101.0.1:3000 -> 22.102.0.1:50004 10 6452 1 2025-08-28 03:23:09.956 00:00:10.368 TCP 23.104.0.1:51340 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:23:38.973 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:37142 10 6452 1 2025-08-28 03:24:10.366 00:00:10.366 TCP 23.104.0.1:37210 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:24:32.587 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 03:24:32.449 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 03:24:39.222 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33970 10 6452 1 2025-08-28 03:20:19.326 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 03:25:10.770 00:00:10.367 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:25:39.445 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39406 10 6452 1 2025-08-28 03:26:11.174 00:00:10.374 TCP 23.104.0.1:54218 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:21:19.328 00:06:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 03:26:39.661 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44102 10 6452 1 2025-08-28 03:27:11.583 00:00:10.365 TCP 23.104.0.1:35586 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:27:39.885 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49938 10 6452 1 2025-08-28 03:28:11.983 00:00:10.376 TCP 23.104.0.1:39770 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:28:40.109 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45496 10 6452 1 2025-08-28 03:29:12.395 00:00:10.367 TCP 23.104.0.1:60260 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:29:32.809 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 03:29:32.630 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 03:29:40.337 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51042 10 6452 1 2025-08-28 03:30:12.795 00:00:10.366 TCP 23.104.0.1:44398 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:30:40.560 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44124 10 6452 1 2025-08-28 03:31:13.201 00:00:10.450 TCP 23.104.0.1:50524 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:31:40.774 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:36984 12 10367 1 2025-08-28 03:27:19.330 00:06:00.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 03:32:13.687 00:00:10.456 TCP 23.104.0.1:47766 -> 1.101.0.1:3000 15 1926 1 2025-08-28 03:32:41.038 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49298 10 6452 1 2025-08-28 03:28:19.332 00:06:00.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 03:33:14.179 00:00:10.426 TCP 23.104.0.1:35170 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:33:41.251 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41650 10 6452 1 2025-08-28 03:34:14.651 00:00:10.320 TCP 23.104.0.1:55612 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:34:32.680 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 03:34:32.747 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 03:34:41.473 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57216 10 6452 1 2025-08-28 03:35:15.008 00:00:10.374 TCP 23.104.0.1:60394 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:35:41.702 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60978 10 6452 1 2025-08-28 03:36:15.408 00:00:10.374 TCP 23.104.0.1:51120 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:36:41.943 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46582 10 6452 1 2025-08-28 03:37:15.817 00:00:10.365 TCP 23.104.0.1:59486 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:37:42.175 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50038 10 6452 1 2025-08-28 03:38:16.231 00:00:10.375 TCP 23.104.0.1:52062 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:38:42.396 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53942 10 6452 1 2025-08-28 03:34:19.332 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 03:39:32.752 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 03:39:16.648 00:00:10.374 TCP 23.104.0.1:34844 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:39:32.895 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 03:39:42.613 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45840 10 6452 1 2025-08-28 03:35:19.335 00:06:00.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 03:40:17.092 00:00:10.367 TCP 23.104.0.1:45484 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:40:42.790 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60880 10 6452 1 2025-08-28 03:41:17.504 00:00:10.365 TCP 23.104.0.1:42124 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:41:43.004 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41042 10 6452 1 2025-08-28 03:42:17.904 00:00:10.376 TCP 23.104.0.1:57974 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:42:43.227 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54068 10 6452 1 2025-08-28 03:43:18.309 00:00:14.513 TCP 23.104.0.1:53228 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:43:43.444 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-08-28 03:44:32.798 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 03:44:32.656 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 03:44:22.858 00:00:10.376 TCP 23.104.0.1:60726 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:44:43.669 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6452 1 2025-08-28 03:45:23.269 00:00:10.390 TCP 23.104.0.1:36684 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:45:43.885 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34748 10 6452 1 2025-08-28 03:41:19.335 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 03:46:23.696 00:00:10.329 TCP 23.104.0.1:56398 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:46:44.107 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:52092 10 6452 1 2025-08-28 03:42:19.337 00:06:00.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 03:47:24.089 00:00:10.363 TCP 23.104.0.1:37460 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:47:44.316 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34592 10 6452 1 2025-08-28 03:48:24.487 00:00:10.324 TCP 23.104.0.1:35774 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:48:44.535 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49152 10 6452 1 2025-08-28 03:49:33.416 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 03:49:33.194 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 03:49:24.852 00:00:10.645 TCP 23.104.0.1:55664 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:49:44.752 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35136 10 6452 1 2025-08-28 03:50:25.535 00:00:10.366 TCP 23.104.0.1:58234 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:50:44.965 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54904 12 6556 1 2025-08-28 03:51:25.939 00:00:10.383 TCP 23.104.0.1:48222 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:51:45.203 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:34000 12 10365 1 2025-08-28 03:52:26.359 00:00:10.440 TCP 23.104.0.1:53672 -> 1.101.0.1:3000 15 1926 1 2025-08-28 03:52:45.446 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49772 10 6452 1 2025-08-28 03:48:19.335 00:06:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 03:53:26.835 00:00:10.385 TCP 23.104.0.1:60098 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:53:45.656 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60612 10 6452 1 2025-08-28 03:49:19.338 00:06:00.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 03:54:32.981 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 03:54:32.873 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 03:54:27.262 00:00:10.367 TCP 23.104.0.1:36724 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:54:45.884 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51712 10 6452 1 2025-08-28 03:55:27.669 00:00:10.362 TCP 23.104.0.1:36182 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:55:46.078 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52304 10 6452 1 2025-08-28 03:56:28.092 00:00:10.363 TCP 23.104.0.1:47732 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:56:46.318 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 10 6452 1 2025-08-28 03:57:28.502 00:00:10.365 TCP 23.104.0.1:40882 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:57:46.537 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41180 10 6452 1 2025-08-28 03:58:28.906 00:00:10.362 TCP 23.104.0.1:36108 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 504120, total packets: 1568, avg bps: 1126, avg pps: 0, avg bpp: 321 Time window: 2025-08-28 02:59:00 - 2025-08-28 03:58:39 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0051s User: 0.0000s Wall: 0.0025s flows/second: 64192.4 Runtime: 0.0025s