Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 06:58:42.469 00:00:10.369 TCP 23.104.0.1:53352 -> 1.101.0.1:3000 11 1507 1 2025-08-28 06:59:36.653 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 06:59:36.592 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 06:59:27.171 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38694 10 6452 1 2025-08-28 06:59:42.871 00:00:10.367 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:00:27.395 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44158 10 6452 1 2025-08-28 07:00:43.272 00:00:10.368 TCP 23.104.0.1:33184 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:01:27.613 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35292 10 6452 1 2025-08-28 07:01:43.676 00:00:10.449 TCP 23.104.0.1:46638 -> 1.101.0.1:3000 15 1926 1 2025-08-28 06:57:19.445 00:06:00.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 07:02:27.837 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:55730 12 10367 1 2025-08-28 07:02:44.164 00:00:10.325 TCP 23.104.0.1:51774 -> 1.101.0.1:3000 11 1507 1 2025-08-28 06:58:19.448 00:06:00.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 07:03:28.111 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41990 10 6452 1 2025-08-28 07:03:44.528 00:00:10.327 TCP 23.104.0.1:46618 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:04:36.887 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 07:04:36.881 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 07:04:28.357 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56038 10 6452 1 2025-08-28 07:04:44.896 00:00:10.327 TCP 23.104.0.1:59310 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:05:28.531 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41638 10 6452 1 2025-08-28 07:05:45.263 00:00:10.327 TCP 23.104.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:06:28.742 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51464 10 6452 1 2025-08-28 07:06:45.632 00:00:10.365 TCP 23.104.0.1:49004 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:07:28.952 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2025-08-28 07:07:46.045 00:00:10.319 TCP 23.104.0.1:43364 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:08:29.188 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33534 10 6452 1 2025-08-28 07:08:46.405 00:00:10.367 TCP 23.104.0.1:53138 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:04:19.449 00:06:00.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 07:09:36.856 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 07:09:29.410 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35566 10 6452 1 2025-08-28 07:09:37.020 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 07:09:46.816 00:00:10.365 TCP 23.104.0.1:54206 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:05:19.452 00:06:00.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 07:10:29.591 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57978 10 6452 1 2025-08-28 07:10:47.227 00:00:10.361 TCP 23.104.0.1:39272 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:11:29.806 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40484 10 6452 1 2025-08-28 07:11:47.634 00:00:10.369 TCP 23.104.0.1:55412 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:12:30.027 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55496 10 6452 1 2025-08-28 07:12:48.042 00:00:10.372 TCP 23.104.0.1:42350 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:13:30.247 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40412 10 6452 1 2025-08-28 07:13:48.463 00:00:10.363 TCP 23.104.0.1:33370 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:14:30.423 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35134 10 6452 1 2025-08-28 07:14:37.053 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 07:14:37.112 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 07:14:48.865 00:00:10.368 TCP 23.104.0.1:56218 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:15:30.632 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55720 10 6452 1 2025-08-28 07:15:49.267 00:00:10.323 TCP 23.104.0.1:42042 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:11:19.468 00:06:00.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 07:16:30.799 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56788 10 6452 1 2025-08-28 07:16:49.631 00:00:10.373 TCP 23.104.0.1:41434 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:12:19.471 00:06:00.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 07:17:30.967 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50664 10 6452 1 2025-08-28 07:17:50.057 00:00:10.367 TCP 23.104.0.1:33574 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:18:31.196 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49868 10 6452 1 2025-08-28 07:18:50.460 00:00:10.325 TCP 23.104.0.1:38216 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:19:36.878 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 07:19:36.992 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 07:19:31.407 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45992 10 6452 1 2025-08-28 07:19:50.823 00:00:10.370 TCP 23.104.0.1:59296 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:20:31.621 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43450 10 6452 1 2025-08-28 07:20:51.224 00:00:10.366 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:21:31.843 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40386 10 6452 1 2025-08-28 07:21:51.626 00:00:10.371 TCP 23.104.0.1:38148 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:22:32.078 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42454 10 6452 1 2025-08-28 07:22:52.050 00:00:10.364 TCP 23.104.0.1:42580 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:18:19.485 00:06:00.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 07:23:32.290 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52120 10 6452 1 2025-08-28 07:23:52.451 00:00:10.366 TCP 23.104.0.1:59292 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:19:19.488 00:06:00.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 07:24:37.348 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 07:24:37.043 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 07:24:32.506 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60264 10 6452 1 2025-08-28 07:24:52.857 00:00:10.333 TCP 23.104.0.1:55650 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:25:32.721 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45880 10 6452 1 2025-08-28 07:25:53.229 00:00:10.439 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:26:32.946 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:35748 10 6452 1 2025-08-28 07:26:53.708 00:00:10.381 TCP 23.104.0.1:60344 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:27:33.210 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46354 10 6452 1 2025-08-28 07:27:54.126 00:00:10.365 TCP 23.104.0.1:48064 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:28:33.420 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44182 10 6452 1 2025-08-28 07:28:54.527 00:00:10.364 TCP 23.104.0.1:40886 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:29:37.212 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 07:29:37.133 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 07:29:33.632 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45300 10 6452 1 2025-08-28 07:29:54.941 00:00:10.392 TCP 23.104.0.1:50112 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:25:19.487 00:06:00.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 07:30:33.847 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47004 10 6452 1 2025-08-28 07:30:55.368 00:00:10.366 TCP 23.104.0.1:44394 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:26:19.490 00:06:00.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 07:31:34.034 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44318 10 6452 1 2025-08-28 07:31:55.774 00:00:10.371 TCP 23.104.0.1:50526 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:32:34.243 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51900 10 6452 1 2025-08-28 07:32:56.189 00:00:10.365 TCP 23.104.0.1:33136 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:33:34.454 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44616 10 6452 1 2025-08-28 07:33:56.594 00:00:10.369 TCP 23.104.0.1:52354 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:34:37.145 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 07:34:37.370 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 07:34:34.669 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48296 10 6452 1 2025-08-28 07:34:57.006 00:00:10.367 TCP 23.104.0.1:60582 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:35:34.843 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36824 10 6452 1 2025-08-28 07:35:57.403 00:00:10.363 TCP 23.104.0.1:33216 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:36:35.079 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49100 10 6452 1 2025-08-28 07:36:57.805 00:00:10.374 TCP 23.104.0.1:44934 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:32:19.489 00:06:00.136 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 07:37:35.291 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55470 10 6452 1 2025-08-28 07:37:58.234 00:00:10.363 TCP 23.104.0.1:41110 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:33:19.492 00:06:00.131 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 07:38:35.516 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44188 10 6452 1 2025-08-28 07:38:58.636 00:00:10.322 TCP 23.104.0.1:38178 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:39:37.520 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 07:39:37.836 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 07:39:35.743 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54458 10 6452 1 2025-08-28 07:39:59.001 00:00:10.366 TCP 23.104.0.1:35206 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:40:35.957 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44928 12 6556 1 2025-08-28 07:40:59.411 00:00:10.341 TCP 23.104.0.1:34084 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:41:36.187 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58750 10 6452 1 2025-08-28 07:41:59.789 00:00:10.367 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:42:36.358 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54818 10 6452 1 2025-08-28 07:43:00.193 00:00:10.365 TCP 23.104.0.1:51528 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:43:36.586 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33142 10 6452 1 2025-08-28 07:44:00.599 00:00:10.365 TCP 23.104.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:39:19.490 00:06:00.137 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 07:44:37.670 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 07:44:37.718 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 07:44:36.814 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52594 10 6452 1 2025-08-28 07:45:00.997 00:00:10.331 TCP 23.104.0.1:33328 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:40:19.493 00:06:00.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 07:45:37.024 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:48132 10 6452 1 2025-08-28 07:46:01.364 00:00:10.322 TCP 23.104.0.1:35392 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:46:37.190 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:43286 12 10367 1 2025-08-28 07:47:01.727 00:00:10.443 TCP 23.104.0.1:59324 -> 1.101.0.1:3000 15 1926 1 2025-08-28 07:47:37.426 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51596 10 6452 1 2025-08-28 07:48:02.212 00:00:10.359 TCP 23.104.0.1:54602 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:48:37.638 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-08-28 07:49:02.614 00:00:10.362 TCP 23.104.0.1:39002 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:49:38.064 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 07:49:38.220 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 07:49:37.856 00:00:10.505 TCP 1.101.0.1:3000 -> 22.102.0.1:38190 10 6452 1 2025-08-28 07:50:03.011 00:00:10.360 TCP 23.104.0.1:46172 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:50:38.409 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:42336 10 6452 1 2025-08-28 07:51:03.414 00:00:10.360 TCP 23.104.0.1:32862 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:46:19.493 00:06:00.136 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 07:51:38.613 00:00:10.321 TCP 1.101.0.1:3000 -> 22.102.0.1:37910 10 6452 1 2025-08-28 07:52:03.816 00:00:10.327 TCP 23.104.0.1:34460 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:47:19.496 00:06:00.131 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 07:52:38.975 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:51000 10 6452 1 2025-08-28 07:53:04.187 00:00:10.366 TCP 23.104.0.1:50592 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:53:39.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53394 10 6452 1 2025-08-28 07:54:04.590 00:00:10.372 TCP 23.104.0.1:38032 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:54:37.845 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 07:54:37.864 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 07:54:39.430 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54268 10 6452 1 2025-08-28 07:55:05.001 00:00:10.338 TCP 23.104.0.1:60848 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:55:39.654 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40114 10 6452 1 2025-08-28 07:56:05.370 00:00:10.328 TCP 23.104.0.1:59640 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:56:39.877 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52236 10 6452 1 2025-08-28 07:57:05.732 00:00:10.368 TCP 23.104.0.1:60598 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:57:40.115 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41052 10 6452 1 2025-08-28 07:58:06.138 00:00:10.369 TCP 23.104.0.1:51240 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:53:19.502 00:06:00.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 07:58:40.326 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55672 10 6452 1 Summary: total flows: 161, total bytes: 506997, total packets: 1584, avg bps: 1090, avg pps: 0, avg bpp: 320 Time window: 2025-08-28 06:57:19 - 2025-08-28 07:59:19 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0027s User: 0.0014s Wall: 0.0021s flows/second: 75442.2 Runtime: 0.0022s