Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-31 17:58:47.449 00:00:10.328 TCP 23.104.0.1:51182 -> 1.101.0.1:3000 11 1507 1 2025-08-31 17:59:04.997 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55474 10 6452 1 2025-08-31 17:59:47.818 00:00:10.371 TCP 23.104.0.1:48164 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:00:05.228 00:00:10.649 TCP 1.101.0.1:3000 -> 22.102.0.1:39434 10 6452 1 2025-08-31 18:00:48.229 00:00:10.327 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:01:16.775 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 18:01:05.919 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46800 10 6452 1 2025-08-31 18:01:16.662 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 17:57:21.647 00:05:00.536 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 18:01:48.590 00:00:10.369 TCP 23.104.0.1:46610 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:02:06.129 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35538 10 6452 1 2025-08-31 18:02:48.995 00:00:10.332 TCP 23.104.0.1:34110 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:03:06.304 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45984 10 6452 1 2025-08-31 18:03:49.362 00:00:10.369 TCP 23.104.0.1:48086 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:04:06.516 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42162 10 6452 1 2025-08-31 18:00:21.644 00:05:00.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 18:04:49.770 00:00:10.375 TCP 23.104.0.1:54812 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:05:06.732 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58964 10 6452 1 2025-08-31 18:05:50.185 00:00:10.366 TCP 23.104.0.1:59246 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:06:16.925 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 18:06:06.959 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58808 10 6452 1 2025-08-31 18:06:17.151 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 18:06:50.586 00:00:10.334 TCP 23.104.0.1:53298 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:07:07.219 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50388 10 6452 1 2025-08-31 18:03:21.648 00:05:00.537 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 18:07:50.958 00:00:10.372 TCP 23.104.0.1:52878 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:08:07.433 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60766 10 6452 1 2025-08-31 18:08:51.376 00:00:10.328 TCP 23.104.0.1:57638 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:09:07.649 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38766 10 6452 1 2025-08-31 18:09:51.750 00:00:10.332 TCP 23.104.0.1:57868 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:10:07.863 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55490 10 6452 1 2025-08-31 18:06:21.647 00:05:00.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 18:10:52.121 00:00:10.369 TCP 23.104.0.1:37598 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:11:16.739 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 18:11:16.760 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 18:11:08.101 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36290 10 6452 1 2025-08-31 18:11:52.537 00:00:10.362 TCP 23.104.0.1:48384 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:12:08.325 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6452 1 2025-08-31 18:12:52.939 00:00:10.372 TCP 23.104.0.1:44088 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:13:08.541 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47370 10 6452 1 2025-08-31 18:09:21.652 00:05:00.535 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 18:13:53.352 00:00:10.366 TCP 23.104.0.1:37844 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:14:08.746 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50516 10 6452 1 2025-08-31 18:14:53.768 00:00:10.374 TCP 23.104.0.1:35936 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:15:08.966 00:00:10.938 TCP 1.101.0.1:3000 -> 22.102.0.1:60450 12 6556 1 2025-08-31 18:15:54.179 00:00:10.370 TCP 23.104.0.1:34880 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:16:09.945 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49312 10 6452 1 2025-08-31 18:16:17.047 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 18:16:16.981 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 18:12:21.650 00:05:00.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 18:16:54.588 00:00:10.366 TCP 23.104.0.1:42030 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:17:10.179 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58448 10 6452 1 2025-08-31 18:17:54.996 00:00:10.366 TCP 23.104.0.1:45018 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:18:10.393 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51528 10 6452 1 2025-08-31 18:18:55.396 00:00:10.324 TCP 23.104.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:19:10.620 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34402 10 6452 1 2025-08-31 18:15:21.657 00:05:00.532 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 18:19:55.768 00:00:10.368 TCP 23.104.0.1:51190 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:20:10.829 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43412 10 6452 1 2025-08-31 18:20:56.170 00:00:10.361 TCP 23.104.0.1:59238 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:21:17.189 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 18:21:16.956 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 18:21:11.065 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40612 10 6452 1 2025-08-31 18:21:56.573 00:00:10.363 TCP 23.104.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:22:11.286 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34950 10 6452 1 2025-08-31 18:18:21.654 00:05:00.546 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 18:22:56.977 00:00:10.374 TCP 23.104.0.1:55880 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:23:11.503 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33914 10 6452 1 2025-08-31 18:23:57.395 00:00:10.367 TCP 23.104.0.1:47960 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:24:11.712 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60560 10 6452 1 2025-08-31 18:24:57.805 00:00:10.367 TCP 23.104.0.1:60328 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:25:11.930 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:42306 10 6452 1 2025-08-31 18:21:21.658 00:05:00.540 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 18:25:58.212 00:00:10.363 TCP 23.104.0.1:39538 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:26:17.180 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 18:26:17.613 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 18:26:12.176 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41686 10 6452 1 2025-08-31 18:26:58.622 00:00:10.365 TCP 23.104.0.1:44350 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:27:12.388 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60276 10 6452 1 2025-08-31 18:27:59.026 00:00:10.367 TCP 23.104.0.1:60642 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:28:12.598 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55768 10 6452 1 2025-08-31 18:24:21.658 00:05:00.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 18:28:59.430 00:00:10.362 TCP 23.104.0.1:42786 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:29:12.810 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43368 10 6452 1 2025-08-31 18:29:59.838 00:00:10.387 TCP 23.104.0.1:35404 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:30:13.032 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33480 10 6452 1 2025-08-31 18:31:00.264 00:00:10.323 TCP 23.104.0.1:43336 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:31:17.262 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 18:31:17.170 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 18:27:21.661 00:05:00.538 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 18:31:13.248 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33066 10 6452 1 2025-08-31 18:32:00.629 00:00:10.368 TCP 23.104.0.1:57066 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:32:13.460 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59324 10 6452 1 2025-08-31 18:33:01.047 00:00:10.363 TCP 23.104.0.1:42248 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:33:13.669 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33400 10 6452 1 2025-08-31 18:34:01.453 00:00:10.376 TCP 23.104.0.1:39640 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:34:13.890 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53346 10 6452 1 2025-08-31 18:30:21.660 00:05:00.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 18:35:01.861 00:00:10.368 TCP 23.104.0.1:55622 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:35:14.080 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60290 10 6452 1 2025-08-31 18:36:02.267 00:00:10.334 TCP 23.104.0.1:49434 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:36:17.394 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 18:36:17.494 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 18:36:14.300 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59530 10 6452 1 2025-08-31 18:37:02.635 00:00:10.330 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:37:14.516 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59910 10 6452 1 2025-08-31 18:33:21.664 00:05:00.541 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 18:38:03.024 00:00:10.373 TCP 23.104.0.1:48204 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:38:14.738 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-08-31 18:39:03.430 00:00:10.362 TCP 23.104.0.1:45760 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:39:14.966 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:42582 10 6452 1 2025-08-31 18:40:03.831 00:00:10.391 TCP 23.104.0.1:42878 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:40:15.211 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50888 10 6452 1 2025-08-31 18:36:21.662 00:05:00.545 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 18:41:04.269 00:00:10.327 TCP 23.104.0.1:43362 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:41:17.816 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 18:41:17.490 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 18:41:15.425 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50464 10 6452 1 2025-08-31 18:42:04.641 00:00:10.362 TCP 23.104.0.1:43864 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:42:15.645 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34828 10 6452 1 2025-08-31 18:43:05.042 00:00:10.370 TCP 23.104.0.1:52022 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:39:21.665 00:05:00.542 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 18:43:15.856 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 10 6452 1 2025-08-31 18:44:05.454 00:00:10.376 TCP 23.104.0.1:48418 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:44:16.089 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35448 10 6452 1 2025-08-31 18:45:05.848 00:00:10.386 TCP 23.104.0.1:44614 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:45:16.308 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36894 10 6452 1 2025-08-31 18:46:06.269 00:00:10.363 TCP 23.104.0.1:45840 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:46:17.914 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 18:46:18.031 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 18:46:16.529 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:56022 10 6452 1 2025-08-31 18:42:21.663 00:05:00.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 18:47:06.671 00:00:10.322 TCP 23.104.0.1:38760 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:47:16.791 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47234 10 6452 1 2025-08-31 18:48:07.062 00:00:10.322 TCP 23.104.0.1:49758 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:48:17.028 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45994 10 6452 1 2025-08-31 18:49:07.421 00:00:10.365 TCP 23.104.0.1:44948 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:45:21.666 00:05:00.543 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 18:49:17.244 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37812 10 6452 1 2025-08-31 18:50:07.825 00:00:10.358 TCP 23.104.0.1:48046 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:50:17.474 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45000 10 6452 1 2025-08-31 18:51:17.846 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 18:51:17.689 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 18:51:08.222 00:00:10.364 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:51:17.685 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-08-31 18:52:08.632 00:00:10.363 TCP 23.104.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:48:21.665 00:05:00.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 18:52:17.908 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58700 10 6452 1 2025-08-31 18:53:09.033 00:00:10.368 TCP 23.104.0.1:59790 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:53:18.122 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37330 10 6452 1 2025-08-31 18:54:09.447 00:00:10.360 TCP 23.104.0.1:59680 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:54:18.332 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56256 10 6452 1 2025-08-31 18:55:09.849 00:00:10.377 TCP 23.104.0.1:53752 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:51:21.668 00:05:00.542 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 18:55:18.557 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50802 10 6452 1 2025-08-31 18:56:17.739 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 18:56:10.269 00:00:10.363 TCP 23.104.0.1:58248 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:56:17.803 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 18:56:18.781 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47384 10 6452 1 2025-08-31 18:57:10.670 00:00:10.363 TCP 23.104.0.1:60614 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:57:18.994 00:00:10.877 TCP 1.101.0.1:3000 -> 22.102.0.1:57564 10 6452 1 2025-08-31 18:58:11.103 00:00:10.320 TCP 23.104.0.1:46006 -> 1.101.0.1:3000 11 1507 1 2025-08-31 18:54:21.667 00:05:00.546 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 18:58:19.914 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43792 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1071, avg pps: 0, avg bpp: 316 Time window: 2025-08-31 17:57:21 - 2025-08-31 18:59:22 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0025s User: 0.0025s Wall: 0.0027s flows/second: 61543.0 Runtime: 0.0027s