Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 18:58:44.914 00:00:10.347 TCP 23.104.0.1:47674 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:59:07.070 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42672 10 6452 1 2025-08-28 18:59:51.227 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 18:59:51.191 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 18:59:45.300 00:00:10.363 TCP 23.104.0.1:37524 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:00:07.283 00:00:10.387 TCP 1.101.0.1:3000 -> 22.102.0.1:34948 10 6452 1 2025-08-28 19:00:45.705 00:00:10.324 TCP 23.104.0.1:45502 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:01:07.713 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51484 10 6452 1 2025-08-28 19:01:46.096 00:00:10.327 TCP 23.104.0.1:60604 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:02:07.882 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:47032 10 6452 1 2025-08-28 19:02:46.466 00:00:10.328 TCP 23.104.0.1:41814 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:03:08.161 00:00:10.370 TCP 1.101.0.1:3000 -> 22.102.0.1:38010 10 6452 1 2025-08-28 18:58:19.836 00:06:00.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 19:03:46.832 00:00:10.445 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-08-28 18:59:19.839 00:06:00.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 19:04:08.574 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33094 10 6452 1 2025-08-28 19:04:51.125 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 19:04:51.193 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 19:04:47.318 00:00:10.319 TCP 23.104.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:05:08.751 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38450 10 6452 1 2025-08-28 19:05:47.676 00:00:10.375 TCP 23.104.0.1:36062 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:06:08.967 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45570 10 6452 1 2025-08-28 19:06:48.105 00:00:10.358 TCP 23.104.0.1:56296 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:07:09.141 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42062 10 6452 1 2025-08-28 19:07:48.501 00:00:10.360 TCP 23.104.0.1:47872 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:08:09.359 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43006 10 6452 1 2025-08-28 19:08:48.913 00:00:10.369 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:09:09.563 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42344 10 6452 1 2025-08-28 19:09:51.146 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 19:09:51.533 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 19:09:49.321 00:00:10.360 TCP 23.104.0.1:52522 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:10:09.772 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59710 10 6452 1 2025-08-28 19:05:19.838 00:06:00.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 19:10:49.725 00:00:10.363 TCP 23.104.0.1:38510 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:06:19.842 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 19:11:09.980 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36360 10 6452 1 2025-08-28 19:11:50.131 00:00:10.365 TCP 23.104.0.1:48656 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:12:10.213 00:00:10.607 TCP 1.101.0.1:3000 -> 22.102.0.1:42512 10 6452 1 2025-08-28 19:12:50.541 00:00:10.363 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:13:10.862 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37072 10 6452 1 2025-08-28 19:13:50.944 00:00:10.381 TCP 23.104.0.1:56148 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:14:11.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33636 10 6452 1 2025-08-28 19:14:51.498 00:00:00.000 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 19:14:51.437 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 19:14:51.357 00:00:10.326 TCP 23.104.0.1:43732 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:15:11.292 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33198 10 6452 1 2025-08-28 19:15:51.719 00:00:10.364 TCP 23.104.0.1:43516 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:16:11.501 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47640 10 6452 1 2025-08-28 19:16:52.124 00:00:10.367 TCP 23.104.0.1:43034 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:17:11.711 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41208 10 6452 1 2025-08-28 19:12:19.841 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 19:17:52.531 00:00:10.365 TCP 23.104.0.1:45900 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:13:19.844 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 19:18:11.879 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39090 10 6452 1 2025-08-28 19:18:52.933 00:00:10.348 TCP 23.104.0.1:47242 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:19:12.106 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53546 10 6452 1 2025-08-28 19:19:51.710 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 19:19:51.836 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 19:19:53.317 00:00:10.328 TCP 23.104.0.1:58270 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:20:12.328 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47632 10 6452 1 2025-08-28 19:20:53.681 00:00:10.372 TCP 23.104.0.1:55598 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:21:12.534 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52036 10 6452 1 2025-08-28 19:21:54.107 00:00:10.383 TCP 23.104.0.1:59646 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:22:12.744 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60480 10 6452 1 2025-08-28 19:22:54.528 00:00:10.366 TCP 23.104.0.1:41746 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:23:12.919 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55358 10 6452 1 2025-08-28 19:23:54.935 00:00:10.341 TCP 23.104.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:19:19.844 00:06:00.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 19:24:13.134 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:40740 10 6452 1 2025-08-28 19:24:51.582 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 19:24:51.728 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 19:24:55.315 00:00:10.323 TCP 23.104.0.1:54680 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:20:19.845 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 19:25:13.301 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60322 10 6452 1 2025-08-28 19:25:55.680 00:00:10.378 TCP 23.104.0.1:44498 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:26:13.513 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57104 10 6452 1 2025-08-28 19:26:56.104 00:00:10.358 TCP 23.104.0.1:35554 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:27:13.726 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55252 10 6452 1 2025-08-28 19:27:56.510 00:00:10.370 TCP 23.104.0.1:54432 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:28:13.937 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47112 10 6452 1 2025-08-28 19:28:56.915 00:00:10.329 TCP 23.104.0.1:36086 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:29:14.167 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58248 10 6452 1 2025-08-28 19:29:51.723 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 19:29:51.699 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 19:29:57.280 00:00:10.323 TCP 23.104.0.1:33010 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:30:14.378 00:00:14.362 TCP 1.101.0.1:3000 -> 22.102.0.1:51196 10 6452 1 2025-08-28 19:30:57.640 00:00:10.366 TCP 23.104.0.1:53550 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:26:19.846 00:06:00.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 19:31:18.807 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59166 10 6452 1 2025-08-28 19:31:58.051 00:00:10.364 TCP 23.104.0.1:35130 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:27:19.848 00:06:00.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 19:32:19.031 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41306 10 6452 1 2025-08-28 19:32:58.451 00:00:10.362 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:33:19.245 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60818 10 6452 1 2025-08-28 19:33:58.850 00:00:10.381 TCP 23.104.0.1:60230 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:34:19.465 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42380 10 6452 1 2025-08-28 19:34:51.917 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 19:34:51.872 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 19:34:59.277 00:00:10.367 TCP 23.104.0.1:40664 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:35:19.696 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50808 10 6452 1 2025-08-28 19:35:59.690 00:00:10.368 TCP 23.104.0.1:34218 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:36:19.915 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58124 10 6452 1 2025-08-28 19:37:00.127 00:00:10.358 TCP 23.104.0.1:60072 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:37:20.146 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48814 10 6452 1 2025-08-28 19:38:00.552 00:00:10.325 TCP 23.104.0.1:56656 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:33:19.847 00:06:00.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 19:38:20.358 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59890 10 6452 1 2025-08-28 19:39:00.917 00:00:10.386 TCP 23.104.0.1:36110 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:34:19.850 00:06:00.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 19:39:20.571 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56100 10 6452 1 2025-08-28 19:39:51.928 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 19:39:51.991 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 19:40:01.341 00:00:10.372 TCP 23.104.0.1:51970 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:40:20.784 00:00:10.649 TCP 1.101.0.1:3000 -> 22.102.0.1:44912 10 6452 1 2025-08-28 19:41:01.755 00:00:10.374 TCP 23.104.0.1:33430 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:41:21.474 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52974 10 6452 1 2025-08-28 19:42:02.169 00:00:10.366 TCP 23.104.0.1:37342 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:42:21.692 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 10 6452 1 2025-08-28 19:43:02.571 00:00:10.364 TCP 23.104.0.1:47478 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:43:21.914 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47506 10 6452 1 2025-08-28 19:44:02.977 00:00:10.371 TCP 23.104.0.1:40474 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:44:22.126 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60854 10 6452 1 2025-08-28 19:44:51.912 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 19:44:52.039 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 19:45:03.387 00:00:10.323 TCP 23.104.0.1:45304 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:40:19.853 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 19:45:22.346 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:39904 10 6452 1 2025-08-28 19:46:03.751 00:00:10.338 TCP 23.104.0.1:56620 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:41:19.856 00:06:00.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 19:46:22.631 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49366 10 6452 1 2025-08-28 19:47:04.127 00:00:10.363 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:47:22.849 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:44780 10 6452 1 2025-08-28 19:48:04.529 00:00:10.379 TCP 23.104.0.1:51152 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:48:23.099 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54632 10 6452 1 2025-08-28 19:49:04.939 00:00:10.376 TCP 23.104.0.1:58368 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:49:23.324 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53750 10 6452 1 2025-08-28 19:49:52.161 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 19:49:52.351 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 19:50:05.364 00:00:10.361 TCP 23.104.0.1:50006 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:50:23.544 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54552 10 6452 1 2025-08-28 19:51:05.764 00:00:10.328 TCP 23.104.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:51:23.765 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50872 10 6452 1 2025-08-28 19:52:06.132 00:00:10.334 TCP 23.104.0.1:40992 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:47:19.854 00:06:00.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 19:52:23.989 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:52188 10 6452 1 2025-08-28 19:53:06.502 00:00:10.370 TCP 23.104.0.1:35602 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:48:19.858 00:06:00.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 19:53:24.177 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44972 10 6452 1 2025-08-28 19:54:06.908 00:00:10.364 TCP 23.104.0.1:43416 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:54:24.354 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43932 10 6452 1 2025-08-28 19:54:51.997 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 19:54:52.542 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 19:55:07.307 00:00:10.365 TCP 23.104.0.1:46070 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:55:24.570 00:00:10.695 TCP 1.101.0.1:3000 -> 22.102.0.1:43580 10 6452 1 2025-08-28 19:56:07.704 00:00:10.362 TCP 23.104.0.1:33938 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:56:25.312 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38392 10 6452 1 2025-08-28 19:57:08.107 00:00:10.375 TCP 23.104.0.1:58620 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:57:25.542 00:00:10.716 TCP 1.101.0.1:3000 -> 22.102.0.1:36526 10 6452 1 2025-08-28 19:58:08.515 00:00:10.338 TCP 23.104.0.1:53812 -> 1.101.0.1:3000 11 1507 1 2025-08-28 19:58:26.307 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33496 10 6452 1 Summary: total flows: 160, total bytes: 497364, total packets: 1556, avg bps: 1100, avg pps: 0, avg bpp: 319 Time window: 2025-08-28 18:58:19 - 2025-08-28 19:58:36 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0029s User: 0.0022s Wall: 0.0021s flows/second: 74656.7 Runtime: 0.0022s