Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 16:58:56.454 00:00:10.367 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-08-28 16:59:48.635 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 16:59:48.771 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 16:59:37.734 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54106 10 6452 1 2025-08-28 16:59:56.862 00:00:10.369 TCP 23.104.0.1:35374 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:00:37.971 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59232 10 6452 1 2025-08-28 17:00:57.270 00:00:10.363 TCP 23.104.0.1:46132 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:01:38.194 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:53352 12 10367 1 2025-08-28 17:01:57.672 00:00:10.442 TCP 23.104.0.1:35428 -> 1.101.0.1:3000 15 1926 1 2025-08-28 17:02:38.434 00:00:10.563 TCP 1.101.0.1:3000 -> 22.102.0.1:42318 10 6452 1 2025-08-28 17:02:58.151 00:00:10.364 TCP 23.104.0.1:49382 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:03:39.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56500 10 6452 1 2025-08-28 17:03:58.558 00:00:10.364 TCP 23.104.0.1:34472 -> 1.101.0.1:3000 11 1507 1 2025-08-28 16:59:19.745 00:06:00.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 17:04:49.017 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 17:04:39.250 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60956 10 6452 1 2025-08-28 17:04:48.874 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 17:04:58.961 00:00:10.371 TCP 23.104.0.1:57618 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:00:19.747 00:06:00.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 17:05:39.418 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46504 10 6452 1 2025-08-28 17:05:59.366 00:00:10.361 TCP 23.104.0.1:59772 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:06:39.632 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53062 10 6452 1 2025-08-28 17:06:59.764 00:00:10.368 TCP 23.104.0.1:51298 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:07:39.848 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38862 10 6452 1 2025-08-28 17:08:00.170 00:00:10.365 TCP 23.104.0.1:49870 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:08:40.091 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43328 10 6452 1 2025-08-28 17:09:00.569 00:00:10.363 TCP 23.104.0.1:35372 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:09:48.712 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 17:09:48.849 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 17:09:40.259 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45590 10 6452 1 2025-08-28 17:10:00.973 00:00:10.367 TCP 23.104.0.1:43076 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:10:40.474 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58096 10 6452 1 2025-08-28 17:11:01.377 00:00:10.318 TCP 23.104.0.1:33622 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:06:19.748 00:06:00.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 17:11:40.695 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55578 10 6452 1 2025-08-28 17:12:01.739 00:00:10.361 TCP 23.104.0.1:55252 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:07:19.749 00:06:00.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 17:12:40.912 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-08-28 17:13:02.147 00:00:10.325 TCP 23.104.0.1:38600 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:13:41.123 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50456 10 6452 1 2025-08-28 17:14:02.514 00:00:10.379 TCP 23.104.0.1:43246 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:14:49.147 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 17:14:41.338 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54338 10 6452 1 2025-08-28 17:14:49.007 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 17:15:02.940 00:00:10.375 TCP 23.104.0.1:42392 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:15:41.548 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48924 10 6452 1 2025-08-28 17:16:03.345 00:00:10.365 TCP 23.104.0.1:50792 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:16:41.756 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43762 10 6452 1 2025-08-28 17:17:03.747 00:00:10.366 TCP 23.104.0.1:45508 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:17:41.968 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:41862 10 6452 1 2025-08-28 17:18:04.151 00:00:10.370 TCP 23.104.0.1:41788 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:13:19.750 00:06:00.173 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 17:18:42.204 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-08-28 17:19:04.566 00:00:10.369 TCP 23.104.0.1:37376 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:14:19.752 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 17:19:49.174 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 17:19:49.313 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 17:19:42.417 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33302 10 6452 1 2025-08-28 17:20:04.974 00:00:10.397 TCP 23.104.0.1:42676 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:20:42.626 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36518 10 6452 1 2025-08-28 17:21:05.416 00:00:10.364 TCP 23.104.0.1:37370 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:21:42.836 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:52066 10 6452 1 2025-08-28 17:22:05.816 00:00:10.332 TCP 23.104.0.1:47626 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:22:43.102 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44128 10 6452 1 2025-08-28 17:23:06.194 00:00:10.323 TCP 23.104.0.1:48610 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:23:43.323 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59408 10 6452 1 2025-08-28 17:24:06.553 00:00:10.370 TCP 23.104.0.1:45224 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:24:49.392 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 17:24:49.443 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 17:24:43.540 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57400 10 6452 1 2025-08-28 17:20:19.759 00:06:00.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 17:25:06.961 00:00:10.325 TCP 23.104.0.1:37184 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:25:43.724 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60856 10 6452 1 2025-08-28 17:26:07.323 00:00:10.363 TCP 23.104.0.1:57544 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:21:19.762 00:06:00.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 17:26:43.903 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48916 10 6452 1 2025-08-28 17:27:07.732 00:00:10.371 TCP 23.104.0.1:43390 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:27:44.122 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50888 10 6452 1 2025-08-28 17:28:08.140 00:00:10.362 TCP 23.104.0.1:41012 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:28:44.297 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56160 10 6452 1 2025-08-28 17:29:08.540 00:00:10.360 TCP 23.104.0.1:53904 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:29:49.794 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 17:29:49.403 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 17:29:44.506 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34470 10 6452 1 2025-08-28 17:30:08.938 00:00:10.384 TCP 23.104.0.1:47156 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:30:44.717 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48902 10 6452 1 2025-08-28 17:31:09.358 00:00:10.369 TCP 23.104.0.1:36174 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:31:44.943 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:49786 12 10367 1 2025-08-28 17:27:19.760 00:06:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 17:32:09.768 00:00:10.406 TCP 23.104.0.1:34066 -> 1.101.0.1:3000 15 1926 1 2025-08-28 17:32:45.206 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:38672 10 6452 1 2025-08-28 17:28:19.763 00:06:00.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 17:33:10.210 00:00:10.369 TCP 23.104.0.1:52836 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:33:45.382 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43576 10 6452 1 2025-08-28 17:34:10.617 00:00:10.358 TCP 23.104.0.1:50912 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:34:49.402 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 17:34:49.577 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 17:34:45.603 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36000 10 6452 1 2025-08-28 17:35:11.011 00:00:10.361 TCP 23.104.0.1:38120 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:35:45.819 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59572 10 6452 1 2025-08-28 17:36:11.406 00:00:10.368 TCP 23.104.0.1:37588 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:36:45.986 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52760 10 6452 1 2025-08-28 17:37:11.809 00:00:10.366 TCP 23.104.0.1:55290 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:37:46.201 00:00:10.414 TCP 1.101.0.1:3000 -> 22.102.0.1:49684 10 6452 1 2025-08-28 17:38:12.209 00:00:10.324 TCP 23.104.0.1:46004 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:38:46.652 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48044 10 6452 1 2025-08-28 17:34:19.762 00:06:00.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 17:39:12.568 00:00:10.364 TCP 23.104.0.1:42952 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:39:49.731 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 17:39:49.383 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 17:39:46.871 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44486 10 6452 1 2025-08-28 17:35:19.763 00:06:00.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 17:40:12.972 00:00:10.375 TCP 23.104.0.1:58494 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:40:47.091 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34838 10 6452 1 2025-08-28 17:41:13.385 00:00:10.369 TCP 23.104.0.1:47884 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:41:47.269 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39332 10 6452 1 2025-08-28 17:42:13.791 00:00:10.360 TCP 23.104.0.1:47718 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:42:47.478 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38548 10 6452 1 2025-08-28 17:43:14.194 00:00:10.382 TCP 23.104.0.1:51128 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:43:47.646 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33832 10 6452 1 2025-08-28 17:44:14.614 00:00:10.325 TCP 23.104.0.1:38024 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:44:49.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 17:44:49.773 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 17:44:47.863 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54360 10 6452 1 2025-08-28 17:45:14.977 00:00:10.367 TCP 23.104.0.1:40664 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:45:48.101 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55472 10 6452 1 2025-08-28 17:41:19.774 00:06:00.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 17:46:15.379 00:00:10.366 TCP 23.104.0.1:43928 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:46:48.319 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57184 10 6452 1 2025-08-28 17:42:19.776 00:06:00.153 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 17:47:15.789 00:00:10.387 TCP 23.104.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:47:48.533 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44968 10 6452 1 2025-08-28 17:48:16.224 00:00:10.321 TCP 23.104.0.1:37734 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:48:48.745 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49878 10 6452 1 2025-08-28 17:49:16.588 00:00:10.367 TCP 23.104.0.1:40988 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:49:50.340 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 17:49:49.741 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 17:49:48.977 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44526 10 6452 1 2025-08-28 17:50:17.021 00:00:10.321 TCP 23.104.0.1:41400 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:50:49.222 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34924 10 6452 1 2025-08-28 17:51:17.381 00:00:10.375 TCP 23.104.0.1:39652 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:51:49.397 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42470 10 6452 1 2025-08-28 17:52:17.796 00:00:10.764 TCP 23.104.0.1:45818 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:52:49.615 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36076 10 6452 1 2025-08-28 17:48:19.778 00:06:00.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 17:53:18.595 00:00:10.327 TCP 23.104.0.1:42416 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:53:49.786 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39348 10 6452 1 2025-08-28 17:49:19.780 00:06:00.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 17:54:18.962 00:00:10.371 TCP 23.104.0.1:46788 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:54:49.687 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 17:54:49.846 00:00:00.049 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 17:54:50.003 00:00:10.830 TCP 1.101.0.1:3000 -> 22.102.0.1:59712 10 6452 1 2025-08-28 17:55:19.369 00:00:10.361 TCP 23.104.0.1:43628 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:55:50.867 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60358 10 6452 1 2025-08-28 17:56:19.774 00:00:10.364 TCP 23.104.0.1:37452 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:56:51.072 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49688 10 6452 1 2025-08-28 17:57:20.184 00:00:10.325 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-08-28 17:57:51.281 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59706 10 6452 1 2025-08-28 17:58:20.551 00:00:10.362 TCP 23.104.0.1:39382 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 499580, total packets: 1558, avg bps: 1118, avg pps: 0, avg bpp: 320 Time window: 2025-08-28 16:58:56 - 2025-08-28 17:58:30 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0033s User: 0.0017s Wall: 0.0025s flows/second: 64559.0 Runtime: 0.0025s