Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-30 13:58:48.387 00:00:10.366 TCP 23.104.0.1:46534 -> 1.101.0.1:3000 11 1507 1 2025-08-30 13:59:01.676 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52414 10 6452 1 2025-08-30 13:59:48.791 00:00:10.377 TCP 23.104.0.1:58504 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:00:01.900 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48916 10 6452 1 2025-08-30 14:00:43.200 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 14:00:43.074 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 14:00:49.194 00:00:10.330 TCP 23.104.0.1:41086 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:01:02.123 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48954 10 6452 1 2025-08-30 13:57:21.108 00:04:00.247 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 14:01:49.564 00:00:10.359 TCP 23.104.0.1:56854 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:02:02.335 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59794 10 6452 1 2025-08-30 14:02:49.962 00:00:10.328 TCP 23.104.0.1:34766 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:03:02.565 00:00:10.248 TCP 1.101.0.1:3000 -> 22.102.0.1:41784 11 6504 1 2025-08-30 14:03:50.327 00:00:10.361 TCP 23.104.0.1:48290 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:04:02.862 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33868 10 6452 1 2025-08-30 14:00:21.106 00:04:00.251 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 14:04:50.721 00:00:10.370 TCP 23.104.0.1:44972 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:05:03.091 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55164 10 6452 1 2025-08-30 14:05:43.111 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 14:05:43.050 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 14:05:51.129 00:00:10.371 TCP 23.104.0.1:37206 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:06:03.295 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54790 10 6452 1 2025-08-30 14:02:21.108 00:04:00.247 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 14:06:51.535 00:00:10.363 TCP 23.104.0.1:33266 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:07:03.507 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34944 10 6452 1 2025-08-30 14:07:51.939 00:00:10.375 TCP 23.104.0.1:51868 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:08:03.713 00:00:15.693 TCP 1.101.0.1:3000 -> 22.102.0.1:43014 10 6452 1 2025-08-30 14:08:52.354 00:00:10.368 TCP 23.104.0.1:44886 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:09:09.442 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59998 10 6452 1 2025-08-30 14:05:21.106 00:04:00.252 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 14:09:52.758 00:00:10.338 TCP 23.104.0.1:48600 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:10:09.663 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55936 10 6452 1 2025-08-30 14:10:43.182 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 14:10:43.266 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 14:10:53.145 00:00:10.363 TCP 23.104.0.1:41400 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:11:09.879 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51596 10 6452 1 2025-08-30 14:11:53.561 00:00:10.636 TCP 23.104.0.1:49974 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:12:10.080 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58874 10 6452 1 2025-08-30 14:07:21.109 00:06:00.248 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-30 14:12:54.235 00:00:10.363 TCP 23.104.0.1:41716 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:13:10.298 00:00:10.779 TCP 1.101.0.1:3000 -> 22.102.0.1:45280 10 6452 1 2025-08-30 14:13:54.637 00:00:10.417 TCP 23.104.0.1:52966 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:14:11.115 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54618 10 6452 1 2025-08-30 14:10:21.107 00:04:00.255 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 14:14:55.101 00:00:10.370 TCP 23.104.0.1:34670 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:15:11.337 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59482 10 6452 1 2025-08-30 14:15:43.193 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 14:15:43.394 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 14:15:55.507 00:00:10.370 TCP 23.104.0.1:53882 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:16:11.560 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40786 10 6452 1 2025-08-30 14:16:55.920 00:00:10.393 TCP 23.104.0.1:34922 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:17:11.785 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47560 10 6452 1 2025-08-30 14:17:56.348 00:00:10.368 TCP 23.104.0.1:43580 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:14:21.109 00:04:00.251 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 14:18:12.008 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57506 10 6452 1 2025-08-30 14:18:56.749 00:00:10.386 TCP 23.104.0.1:35158 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:19:12.226 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55526 10 6452 1 2025-08-30 14:19:57.169 00:00:10.366 TCP 23.104.0.1:53894 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:15:21.107 00:06:00.256 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-30 14:20:12.445 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51942 10 6452 1 2025-08-30 14:20:43.488 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 14:20:43.267 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 14:20:57.575 00:00:10.321 TCP 23.104.0.1:58156 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:21:12.664 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47554 10 6452 1 2025-08-30 14:21:57.934 00:00:10.354 TCP 23.104.0.1:47486 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:22:12.835 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54478 10 6452 1 2025-08-30 14:22:58.336 00:00:10.363 TCP 23.104.0.1:56898 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:19:21.111 00:04:00.250 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 14:23:13.074 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38186 10 6452 1 2025-08-30 14:23:58.742 00:00:10.372 TCP 23.104.0.1:41910 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:24:13.295 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49764 10 6452 1 2025-08-30 14:24:59.148 00:00:10.360 TCP 23.104.0.1:41542 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:25:13.464 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55124 10 6452 1 2025-08-30 14:25:43.392 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 14:25:43.551 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 14:25:59.542 00:00:10.369 TCP 23.104.0.1:57916 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:26:13.635 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55098 10 6452 1 2025-08-30 14:26:59.947 00:00:10.371 TCP 23.104.0.1:35432 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:22:21.109 00:06:00.256 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-30 14:27:13.849 00:00:10.567 TCP 1.101.0.1:3000 -> 22.102.0.1:42964 11 6504 1 2025-08-30 14:28:00.355 00:00:10.364 TCP 23.104.0.1:44644 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:24:21.113 00:04:00.251 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 14:28:14.455 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42392 10 6452 1 2025-08-30 14:29:00.764 00:00:10.326 TCP 23.104.0.1:40812 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:29:14.631 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43110 10 6452 1 2025-08-30 14:30:01.127 00:00:10.366 TCP 23.104.0.1:57056 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:30:14.859 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55564 10 6452 1 2025-08-30 14:30:43.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 14:30:43.230 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 14:31:01.532 00:00:10.320 TCP 23.104.0.1:53484 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:29:21.112 00:02:00.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 6 369 1 2025-08-30 14:31:15.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58464 10 6452 1 2025-08-30 14:32:01.894 00:00:10.374 TCP 23.104.0.1:45678 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:32:15.319 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54108 10 6452 1 2025-08-30 14:33:02.302 00:00:10.370 TCP 23.104.0.1:39982 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:33:15.527 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53504 10 6452 1 2025-08-30 14:34:02.699 00:00:10.376 TCP 23.104.0.1:46848 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:29:21.114 00:06:00.254 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-30 14:34:15.704 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60746 10 6452 1 2025-08-30 14:35:03.115 00:00:10.327 TCP 23.104.0.1:42714 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:35:15.917 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56466 10 6452 1 2025-08-30 14:35:43.576 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 14:35:43.892 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 14:36:03.479 00:00:10.366 TCP 23.104.0.1:55106 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:32:21.115 00:04:00.255 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 14:36:16.141 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56288 10 6452 1 2025-08-30 14:37:03.882 00:00:10.338 TCP 23.104.0.1:38558 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:37:16.355 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:40788 11 6504 1 2025-08-30 14:38:04.259 00:00:10.324 TCP 23.104.0.1:54880 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:38:16.635 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59498 10 6452 1 2025-08-30 14:39:04.621 00:00:10.367 TCP 23.104.0.1:41274 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:39:16.842 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-08-30 14:40:05.028 00:00:10.380 TCP 23.104.0.1:50716 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:40:17.075 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53808 10 6452 1 2025-08-30 14:40:44.164 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 14:40:43.981 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 14:37:21.115 00:04:00.255 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 14:41:05.445 00:00:10.317 TCP 23.104.0.1:48298 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:36:21.119 00:06:00.250 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-30 14:41:17.296 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59956 10 6452 1 2025-08-30 14:42:05.803 00:00:10.369 TCP 23.104.0.1:37308 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:42:17.516 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58634 10 6452 1 2025-08-30 14:43:06.209 00:00:10.375 TCP 23.104.0.1:35318 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:43:17.728 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38986 10 6452 1 2025-08-30 14:44:06.627 00:00:10.368 TCP 23.104.0.1:50170 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:44:17.956 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:53340 10 6452 1 2025-08-30 14:45:07.050 00:00:10.365 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:43:21.119 00:02:00.250 TCP 179.1.22.22:39396 -> 179.1.22.1:179 6 369 1 2025-08-30 14:45:18.198 00:00:10.529 TCP 1.101.0.1:3000 -> 22.102.0.1:43486 10 6452 1 2025-08-30 14:45:43.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 14:45:44.173 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 14:42:21.117 00:04:00.256 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-30 14:46:07.456 00:00:10.375 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:46:18.771 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35258 10 6452 1 2025-08-30 14:47:07.876 00:00:10.386 TCP 23.104.0.1:46828 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:47:18.942 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57942 10 6452 1 2025-08-30 14:48:08.303 00:00:10.364 TCP 23.104.0.1:33268 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:48:19.168 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50632 10 6452 1 2025-08-30 14:49:08.707 00:00:10.387 TCP 23.104.0.1:57088 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:49:19.379 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44762 10 6452 1 2025-08-30 14:50:09.129 00:00:10.369 TCP 23.104.0.1:48798 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:46:21.124 00:04:00.248 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 14:50:19.600 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60794 10 6452 1 2025-08-30 14:50:43.942 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 14:50:44.265 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 14:51:09.538 00:00:10.364 TCP 23.104.0.1:60186 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:51:19.823 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40294 10 6452 1 2025-08-30 14:52:09.941 00:00:10.376 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:47:21.122 00:06:00.255 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-30 14:52:20.064 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52500 10 6452 1 2025-08-30 14:53:10.352 00:00:10.328 TCP 23.104.0.1:59042 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:53:20.286 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50138 10 6452 1 2025-08-30 14:54:10.713 00:00:10.364 TCP 23.104.0.1:53720 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:54:20.500 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51102 10 6452 1 2025-08-30 14:55:11.113 00:00:10.363 TCP 23.104.0.1:46388 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:51:21.126 00:04:00.251 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-30 14:55:20.717 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52840 10 6452 1 2025-08-30 14:55:44.169 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 14:55:44.052 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 14:56:11.515 00:00:10.367 TCP 23.104.0.1:58900 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:56:20.951 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:46156 12 6556 1 2025-08-30 14:57:11.918 00:00:10.390 TCP 23.104.0.1:45812 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:57:21.189 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43434 10 6452 1 2025-08-30 14:58:12.361 00:00:10.368 TCP 23.104.0.1:37578 -> 1.101.0.1:3000 11 1507 1 2025-08-30 14:58:21.411 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49742 10 6452 1 Summary: total flows: 165, total bytes: 497747, total packets: 1563, avg bps: 1084, avg pps: 0, avg bpp: 318 Time window: 2025-08-30 13:57:21 - 2025-08-30 14:58:31 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0011s User: 0.0034s Wall: 0.0021s flows/second: 76955.4 Runtime: 0.0022s