Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 07:59:06.549 00:00:10.368 TCP 23.104.0.1:46736 -> 1.101.0.1:3000 11 1507 1 2025-08-28 07:54:19.502 00:06:00.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 07:59:37.882 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 07:59:37.718 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 07:59:40.533 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41054 10 6452 1 2025-08-28 08:00:06.957 00:00:10.364 TCP 23.104.0.1:60124 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:00:40.742 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35602 10 6452 1 2025-08-28 08:01:07.366 00:00:10.363 TCP 23.104.0.1:47078 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:01:40.917 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:44166 10 6452 1 2025-08-28 08:02:07.766 00:00:10.372 TCP 23.104.0.1:47426 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:02:41.108 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:32858 10 6452 1 2025-08-28 08:03:08.180 00:00:10.365 TCP 23.104.0.1:52714 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:03:41.351 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35716 10 6452 1 2025-08-28 08:04:08.579 00:00:10.367 TCP 23.104.0.1:45776 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:04:38.064 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 08:04:38.009 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 08:04:41.564 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58420 10 6452 1 2025-08-28 08:05:08.984 00:00:10.329 TCP 23.104.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:00:19.500 00:06:00.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 08:05:41.736 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50938 10 6452 1 2025-08-28 08:06:09.352 00:00:10.364 TCP 23.104.0.1:53756 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:01:19.503 00:06:00.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 08:06:41.947 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37594 10 6452 1 2025-08-28 08:07:09.754 00:00:10.383 TCP 23.104.0.1:55652 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:07:42.185 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50936 10 6452 1 2025-08-28 08:08:10.178 00:00:10.339 TCP 23.104.0.1:34368 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:08:42.406 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40774 10 6452 1 2025-08-28 08:09:10.565 00:00:10.319 TCP 23.104.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:09:38.067 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 08:09:38.184 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 08:09:42.635 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:59030 10 6452 1 2025-08-28 08:10:10.923 00:00:10.376 TCP 23.104.0.1:45266 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:10:42.877 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57972 10 6452 1 2025-08-28 08:11:11.343 00:00:10.802 TCP 23.104.0.1:54328 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:11:43.111 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37866 10 6452 1 2025-08-28 08:07:19.504 00:06:00.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 08:12:12.185 00:00:10.366 TCP 23.104.0.1:60238 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:12:43.339 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49070 10 6452 1 2025-08-28 08:08:19.507 00:06:00.126 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 08:13:12.588 00:00:10.363 TCP 23.104.0.1:39428 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:13:43.552 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59692 10 6452 1 2025-08-28 08:14:12.991 00:00:10.364 TCP 23.104.0.1:45420 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:14:38.353 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 08:14:38.261 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 08:14:43.773 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44298 10 6452 1 2025-08-28 08:15:13.393 00:00:10.362 TCP 23.104.0.1:58672 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:15:43.997 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49068 10 6452 1 2025-08-28 08:16:13.794 00:00:10.368 TCP 23.104.0.1:60396 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:16:44.221 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41768 10 6452 1 2025-08-28 08:17:14.211 00:00:10.373 TCP 23.104.0.1:48070 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:17:44.436 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38384 10 6452 1 2025-08-28 08:18:14.625 00:00:10.358 TCP 23.104.0.1:33264 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:18:44.653 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55738 10 6452 1 2025-08-28 08:14:19.506 00:06:00.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 08:19:15.025 00:00:10.365 TCP 23.104.0.1:42658 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:19:38.328 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 08:19:38.213 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 08:19:44.867 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55346 10 6452 1 2025-08-28 08:15:19.508 00:06:00.126 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 08:20:15.432 00:00:10.369 TCP 23.104.0.1:50212 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:20:45.098 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44214 10 6452 1 2025-08-28 08:21:15.848 00:00:10.392 TCP 23.104.0.1:32908 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:21:45.317 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:37182 12 10365 1 2025-08-28 08:22:16.273 00:00:10.440 TCP 23.104.0.1:46408 -> 1.101.0.1:3000 15 1926 1 2025-08-28 08:22:45.563 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60144 10 6452 1 2025-08-28 08:23:16.754 00:00:10.381 TCP 23.104.0.1:59424 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:23:45.736 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58070 10 6452 1 2025-08-28 08:24:17.172 00:00:10.367 TCP 23.104.0.1:38178 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:24:38.611 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 08:24:38.434 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 08:24:45.953 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:46506 12 6556 1 2025-08-28 08:25:17.577 00:00:10.368 TCP 23.104.0.1:49846 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:25:46.195 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36984 10 6452 1 2025-08-28 08:21:19.507 00:06:00.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 08:26:17.980 00:00:10.333 TCP 23.104.0.1:34962 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:26:46.407 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56568 10 6452 1 2025-08-28 08:22:19.511 00:06:00.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 08:27:18.348 00:00:10.361 TCP 23.104.0.1:50612 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:27:46.578 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46166 10 6452 1 2025-08-28 08:28:18.748 00:00:10.367 TCP 23.104.0.1:41998 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:28:46.752 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51430 10 6452 1 2025-08-28 08:29:19.152 00:00:10.369 TCP 23.104.0.1:52436 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:29:38.464 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 08:29:38.513 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 08:29:46.962 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46226 10 6452 1 2025-08-28 08:30:19.568 00:00:10.369 TCP 23.104.0.1:60546 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:30:47.189 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60682 10 6452 1 2025-08-28 08:31:19.976 00:00:10.322 TCP 23.104.0.1:37056 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:31:47.402 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-08-28 08:32:20.335 00:00:10.371 TCP 23.104.0.1:41922 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:32:47.614 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38476 10 6452 1 2025-08-28 08:28:19.512 00:06:00.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 08:33:20.738 00:00:10.326 TCP 23.104.0.1:52538 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:33:47.827 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33934 10 6452 1 2025-08-28 08:29:19.515 00:06:00.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 08:34:21.102 00:00:10.358 TCP 23.104.0.1:47400 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:34:38.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 08:34:38.818 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 08:34:48.074 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42444 10 6452 1 2025-08-28 08:35:21.496 00:00:10.370 TCP 23.104.0.1:44208 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:35:48.245 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49710 10 6452 1 2025-08-28 08:36:21.903 00:00:10.369 TCP 23.104.0.1:50108 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:36:48.462 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41696 10 6452 1 2025-08-28 08:37:22.308 00:00:10.367 TCP 23.104.0.1:44470 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:37:48.672 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:40980 10 6452 1 2025-08-28 08:38:22.709 00:00:10.364 TCP 23.104.0.1:44000 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:38:48.854 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55132 10 6452 1 2025-08-28 08:39:23.115 00:00:10.370 TCP 23.104.0.1:38014 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:39:38.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 08:39:38.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 08:39:49.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37196 10 6452 1 2025-08-28 08:35:19.513 00:06:00.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 08:40:23.522 00:00:10.369 TCP 23.104.0.1:53770 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:40:49.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39142 10 6452 1 2025-08-28 08:36:19.515 00:06:00.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 08:41:23.926 00:00:10.383 TCP 23.104.0.1:34352 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:41:49.513 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37878 10 6452 1 2025-08-28 08:42:24.345 00:00:10.851 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:42:49.721 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58118 10 6452 1 2025-08-28 08:43:25.230 00:00:10.373 TCP 23.104.0.1:45258 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:43:49.934 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-08-28 08:44:25.639 00:00:10.367 TCP 23.104.0.1:46184 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:44:38.601 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 08:44:38.843 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 08:44:50.125 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45742 10 6452 1 2025-08-28 08:45:26.049 00:00:10.361 TCP 23.104.0.1:46096 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:45:50.338 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53012 10 6452 1 2025-08-28 08:46:26.449 00:00:10.371 TCP 23.104.0.1:52026 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:46:50.559 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56342 10 6452 1 2025-08-28 08:42:19.522 00:06:00.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 08:47:26.864 00:00:10.788 TCP 23.104.0.1:39586 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:47:50.777 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40828 10 6452 1 2025-08-28 08:43:19.524 00:06:00.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 08:48:27.696 00:00:10.365 TCP 23.104.0.1:60198 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:48:50.948 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:55210 10 6452 1 2025-08-28 08:49:38.963 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 08:49:28.109 00:00:10.364 TCP 23.104.0.1:54104 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:49:39.137 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 08:49:51.140 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55122 10 6452 1 2025-08-28 08:50:28.514 00:00:10.362 TCP 23.104.0.1:45888 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:50:51.357 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43480 10 6452 1 2025-08-28 08:51:28.916 00:00:10.376 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:51:51.573 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60760 10 6452 1 2025-08-28 08:52:29.333 00:00:10.366 TCP 23.104.0.1:36208 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:52:51.760 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53854 10 6452 1 2025-08-28 08:53:29.734 00:00:10.368 TCP 23.104.0.1:43754 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:53:51.967 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35772 12 6556 1 2025-08-28 08:49:19.523 00:06:00.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 08:54:39.291 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 08:54:30.145 00:00:10.368 TCP 23.104.0.1:41328 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:54:39.134 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 08:54:52.190 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50096 10 6452 1 2025-08-28 08:50:19.526 00:06:00.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 08:55:30.546 00:00:10.366 TCP 23.104.0.1:32870 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:55:52.403 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55940 10 6452 1 2025-08-28 08:56:30.948 00:00:10.326 TCP 23.104.0.1:45530 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:56:52.617 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50708 10 6452 1 2025-08-28 08:57:31.313 00:00:10.374 TCP 23.104.0.1:51314 -> 1.101.0.1:3000 11 1507 1 2025-08-28 08:57:52.786 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58674 10 6452 1 2025-08-28 08:58:31.723 00:00:10.328 TCP 23.104.0.1:40618 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 496313, total packets: 1570, avg bps: 1027, avg pps: 0, avg bpp: 316 Time window: 2025-08-28 07:54:19 - 2025-08-28 08:58:42 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0044s User: 0.0011s Wall: 0.0022s flows/second: 72300.0 Runtime: 0.0022s