Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-30 09:58:46.872 00:00:10.382 TCP 23.104.0.1:33224 -> 1.101.0.1:3000 11 1507 1 2025-08-30 09:58:56.051 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55462 10 6452 1 2025-08-30 09:59:47.276 00:00:10.363 TCP 23.104.0.1:42560 -> 1.101.0.1:3000 11 1507 1 2025-08-30 09:59:56.221 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36292 10 6452 1 2025-08-30 10:00:38.485 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 10:00:38.382 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 10:00:47.675 00:00:10.331 TCP 23.104.0.1:43428 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:00:56.433 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57900 10 6452 1 2025-08-30 09:56:21.002 00:06:00.247 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-30 10:01:48.052 00:00:10.330 TCP 23.104.0.1:40670 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:01:56.660 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33968 10 6452 1 2025-08-30 09:57:21.002 00:06:00.252 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-30 10:02:48.417 00:00:10.367 TCP 23.104.0.1:35614 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:02:56.838 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42616 10 6452 1 2025-08-30 10:03:48.821 00:00:10.373 TCP 23.104.0.1:34380 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:03:57.075 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36136 10 6452 1 2025-08-30 10:04:49.220 00:00:10.359 TCP 23.104.0.1:53512 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:04:57.248 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39454 10 6452 1 2025-08-30 10:03:21.037 00:02:00.213 TCP 179.1.22.22:39396 -> 179.1.22.1:179 6 369 1 2025-08-30 10:05:38.410 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 10:05:38.280 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 10:05:49.619 00:00:10.369 TCP 23.104.0.1:45976 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:05:57.469 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:52530 10 6452 1 2025-08-30 10:06:50.026 00:00:10.364 TCP 23.104.0.1:59526 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:06:57.661 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39038 10 6452 1 2025-08-30 10:07:50.425 00:00:10.374 TCP 23.104.0.1:50176 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:07:57.877 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40006 10 6452 1 2025-08-30 10:08:50.839 00:00:10.394 TCP 23.104.0.1:55488 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:08:58.108 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39874 10 6452 1 2025-08-30 10:04:21.035 00:06:00.219 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-30 10:09:51.267 00:00:10.365 TCP 23.104.0.1:56678 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:09:58.321 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44628 10 6452 1 2025-08-30 10:06:21.038 00:04:00.214 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 10:10:38.608 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 10:10:38.733 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 10:10:51.668 00:00:10.324 TCP 23.104.0.1:35722 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:10:58.497 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33680 10 6452 1 2025-08-30 10:11:52.032 00:00:10.361 TCP 23.104.0.1:38792 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:11:58.707 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59996 10 6452 1 2025-08-30 10:12:52.428 00:00:10.368 TCP 23.104.0.1:33474 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:12:58.879 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51104 10 6452 1 2025-08-30 10:13:52.834 00:00:10.342 TCP 23.104.0.1:49130 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:13:59.100 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56776 10 6452 1 2025-08-30 10:14:53.215 00:00:10.369 TCP 23.104.0.1:46412 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:14:59.314 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59552 10 6452 1 2025-08-30 10:15:38.316 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 10:15:38.509 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 10:15:53.622 00:00:10.324 TCP 23.104.0.1:41672 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:15:59.533 00:00:10.515 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 10 6452 1 2025-08-30 10:11:21.040 00:06:00.214 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-30 10:11:21.037 00:06:00.219 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-30 10:16:53.988 00:00:10.365 TCP 23.104.0.1:40704 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:17:00.090 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52520 10 6452 1 2025-08-30 10:17:54.394 00:00:10.367 TCP 23.104.0.1:47874 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:18:00.303 00:00:10.904 TCP 1.101.0.1:3000 -> 22.102.0.1:43884 10 6452 1 2025-08-30 10:18:54.800 00:00:10.366 TCP 23.104.0.1:33604 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:19:01.243 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46132 10 6452 1 2025-08-30 10:19:55.205 00:00:10.364 TCP 23.104.0.1:40894 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:20:01.453 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33292 10 6452 1 2025-08-30 10:20:38.528 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 10:20:38.379 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 10:20:55.609 00:00:10.366 TCP 23.104.0.1:56578 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:21:01.660 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47410 10 6452 1 2025-08-30 10:21:56.020 00:00:10.366 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:22:01.872 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:40018 12 10367 1 2025-08-30 10:22:56.425 00:00:10.416 TCP 23.104.0.1:42274 -> 1.101.0.1:3000 15 1926 1 2025-08-30 10:23:02.122 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39942 10 6452 1 2025-08-30 10:18:21.042 00:06:00.213 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-30 10:18:21.040 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-30 10:23:56.896 00:00:10.378 TCP 23.104.0.1:32944 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:24:02.337 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56922 10 6452 1 2025-08-30 10:24:57.311 00:00:10.366 TCP 23.104.0.1:43570 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:25:02.548 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:49828 10 6452 1 2025-08-30 10:24:21.259 00:01:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 3 175 1 2025-08-30 10:25:38.643 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 10:25:38.714 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 10:25:57.708 00:00:10.367 TCP 23.104.0.1:40980 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:26:02.752 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52130 10 6452 1 2025-08-30 10:26:58.120 00:00:10.366 TCP 23.104.0.1:53238 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:27:02.969 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35472 10 6452 1 2025-08-30 10:25:21.044 00:02:00.211 TCP 179.1.22.22:39396 -> 179.1.22.1:179 6 369 1 2025-08-30 10:27:58.528 00:00:10.368 TCP 23.104.0.1:36580 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:28:03.194 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44258 10 6452 1 2025-08-30 10:28:58.932 00:00:10.382 TCP 23.104.0.1:42718 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:29:03.371 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44792 10 6452 1 2025-08-30 10:29:59.346 00:00:10.366 TCP 23.104.0.1:41352 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:30:03.582 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39574 10 6452 1 2025-08-30 10:26:21.044 00:04:00.216 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 10:30:39.050 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 10:30:38.870 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 10:30:59.751 00:00:10.379 TCP 23.104.0.1:44848 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:31:03.760 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33424 10 6452 1 2025-08-30 10:32:03.930 00:00:12.098 TCP 1.101.0.1:3000 -> 22.102.0.1:43554 10 6452 1 2025-08-30 10:32:00.167 00:00:16.051 TCP 23.104.0.1:58788 -> 1.101.0.1:3000 15 1926 1 2025-08-30 10:33:06.088 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:54650 12 10367 1 2025-08-30 10:33:06.262 00:00:10.322 TCP 23.104.0.1:55636 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:28:21.046 00:06:00.217 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-30 10:34:06.623 00:00:10.322 TCP 23.104.0.1:36744 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:34:06.296 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35496 10 6452 1 2025-08-30 10:35:06.470 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51158 10 6452 1 2025-08-30 10:35:06.984 00:00:10.368 TCP 23.104.0.1:52134 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:35:38.845 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 10:35:38.850 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 10:36:06.680 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36082 10 6452 1 2025-08-30 10:36:07.389 00:00:10.362 TCP 23.104.0.1:45152 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:31:21.045 00:06:00.224 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-30 10:37:07.791 00:00:10.366 TCP 23.104.0.1:50062 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:37:06.901 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60886 10 6452 1 2025-08-30 10:38:07.112 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44280 10 6452 1 2025-08-30 10:38:08.197 00:00:10.323 TCP 23.104.0.1:42798 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:39:07.329 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35904 10 6452 1 2025-08-30 10:39:08.560 00:00:10.323 TCP 23.104.0.1:60724 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:35:21.048 00:06:00.220 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-30 10:40:08.923 00:00:10.392 TCP 23.104.0.1:35028 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:40:07.542 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35860 10 6452 1 2025-08-30 10:40:39.037 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 10:40:38.810 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 10:41:09.353 00:00:10.364 TCP 23.104.0.1:46302 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:41:07.757 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53104 10 6452 1 2025-08-30 10:42:09.758 00:00:10.380 TCP 23.104.0.1:36598 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:42:07.964 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49170 12 6556 1 2025-08-30 10:43:08.186 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55084 12 6556 1 2025-08-30 10:38:21.051 00:06:00.220 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-30 10:43:10.178 00:00:10.317 TCP 23.104.0.1:33268 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:44:10.534 00:00:10.361 TCP 23.104.0.1:57194 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:44:08.403 00:00:10.723 TCP 1.101.0.1:3000 -> 22.102.0.1:48758 10 6452 1 2025-08-30 10:45:10.932 00:00:10.387 TCP 23.104.0.1:42376 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:45:09.165 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55726 10 6452 1 2025-08-30 10:45:39.007 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 10:45:38.886 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 10:46:09.384 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60048 10 6452 1 2025-08-30 10:46:11.356 00:00:10.361 TCP 23.104.0.1:50232 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:47:09.552 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58348 10 6452 1 2025-08-30 10:42:21.054 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-30 10:47:11.755 00:00:10.341 TCP 23.104.0.1:57288 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:48:09.764 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33310 10 6452 1 2025-08-30 10:48:12.131 00:00:10.322 TCP 23.104.0.1:55102 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:49:09.975 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:44856 10 6452 1 2025-08-30 10:48:21.269 00:01:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 3 194 1 2025-08-30 10:49:12.495 00:00:10.364 TCP 23.104.0.1:56900 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:45:21.054 00:06:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-30 10:50:10.214 00:00:10.271 TCP 1.101.0.1:3000 -> 22.102.0.1:50194 10 6452 1 2025-08-30 10:50:12.899 00:00:10.329 TCP 23.104.0.1:43346 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:50:39.269 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 10:50:39.345 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 10:51:10.541 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53648 10 6452 1 2025-08-30 10:51:13.272 00:00:10.331 TCP 23.104.0.1:57618 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:52:10.766 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39124 10 6452 1 2025-08-30 10:52:13.649 00:00:10.379 TCP 23.104.0.1:37734 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:53:10.982 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33712 10 6452 1 2025-08-30 10:53:14.128 00:00:10.372 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:54:11.189 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:37780 11 6504 1 2025-08-30 10:50:21.056 00:04:00.215 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 10:54:14.540 00:00:10.320 TCP 23.104.0.1:55402 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:55:11.456 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43898 10 6452 1 2025-08-30 10:55:14.902 00:00:10.369 TCP 23.104.0.1:43026 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:55:40.146 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 10:55:40.205 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 10:56:11.630 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57576 10 6452 1 2025-08-30 10:51:21.273 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-08-30 10:56:15.313 00:00:10.365 TCP 23.104.0.1:40036 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:57:15.722 00:00:10.371 TCP 23.104.0.1:34698 -> 1.101.0.1:3000 11 1507 1 2025-08-30 10:57:11.850 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50740 10 6452 1 2025-08-30 10:58:12.082 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46374 10 6452 1 2025-08-30 10:58:16.129 00:00:10.362 TCP 23.104.0.1:48236 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 165, total bytes: 507276, total packets: 1589, avg bps: 1089, avg pps: 0, avg bpp: 319 Time window: 2025-08-30 09:56:21 - 2025-08-30 10:58:26 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0036s User: 0.0018s Wall: 0.0021s flows/second: 79101.6 Runtime: 0.0021s