Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-31 15:59:19.272 00:00:10.371 TCP 23.104.0.1:44308 -> 1.101.0.1:3000 11 1507 1 2025-07-31 15:59:21.895 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53038 10 6452 1 2025-07-31 15:56:03.993 00:05:00.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-31 16:00:19.688 00:00:10.368 TCP 23.104.0.1:46832 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:00:22.114 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57270 10 6452 1 2025-07-31 15:57:03.990 00:05:00.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 16:01:18.663 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 16:01:18.596 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 16:01:20.100 00:00:10.363 TCP 23.104.0.1:50598 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:01:22.333 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36076 10 6452 1 2025-07-31 16:02:20.502 00:00:10.370 TCP 23.104.0.1:56618 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:02:22.560 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33350 10 6452 1 2025-07-31 16:03:20.912 00:00:10.359 TCP 23.104.0.1:54640 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:03:22.770 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41610 10 6452 1 2025-07-31 16:04:21.319 00:00:10.366 TCP 23.104.0.1:56950 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:04:22.982 00:00:14.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34004 10 6452 1 2025-07-31 16:05:21.723 00:00:10.325 TCP 23.104.0.1:32942 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:05:27.172 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41752 10 6452 1 2025-07-31 16:02:03.994 00:05:00.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-31 16:06:18.937 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 16:06:18.924 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 16:06:22.105 00:00:10.360 TCP 23.104.0.1:49996 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:06:27.380 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43120 10 6452 1 2025-07-31 16:03:03.992 00:05:00.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 16:07:22.502 00:00:10.376 TCP 23.104.0.1:48590 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:07:27.593 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50154 10 6452 1 2025-07-31 16:08:22.920 00:00:10.388 TCP 23.104.0.1:51334 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:08:27.807 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47262 10 6452 1 2025-07-31 16:09:23.346 00:00:10.321 TCP 23.104.0.1:45850 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:09:28.036 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58810 10 6452 1 2025-07-31 16:10:23.707 00:00:10.363 TCP 23.104.0.1:33526 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:10:28.251 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35604 10 6452 1 2025-07-31 16:11:18.648 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 16:11:18.715 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 16:11:24.110 00:00:10.361 TCP 23.104.0.1:32942 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:11:28.462 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37332 10 6452 1 2025-07-31 16:08:03.997 00:05:00.088 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-31 16:12:24.512 00:00:10.362 TCP 23.104.0.1:51836 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:12:28.683 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44518 10 6452 1 2025-07-31 16:09:03.995 00:05:00.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 16:13:24.916 00:00:10.384 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:13:28.901 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50518 10 6452 1 2025-07-31 16:14:25.336 00:00:10.361 TCP 23.104.0.1:54230 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:14:29.114 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46468 10 6452 1 2025-07-31 16:15:25.739 00:00:10.325 TCP 23.104.0.1:38162 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:15:29.324 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54666 10 6452 1 2025-07-31 16:16:18.909 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 16:16:18.959 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 16:16:26.104 00:00:10.365 TCP 23.104.0.1:54092 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:16:29.534 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34328 10 6452 1 2025-07-31 16:17:26.509 00:00:10.367 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:17:29.706 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58186 10 6452 1 2025-07-31 16:18:29.932 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:40922 10 6452 1 2025-07-31 16:18:26.913 00:00:10.360 TCP 23.104.0.1:56028 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:15:03.998 00:05:00.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-31 16:14:04.002 00:06:00.087 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 16:19:30.177 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34594 10 6452 1 2025-07-31 16:19:27.321 00:00:10.365 TCP 23.104.0.1:58044 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:20:30.356 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40884 10 6452 1 2025-07-31 16:20:27.727 00:00:10.370 TCP 23.104.0.1:39642 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:21:19.329 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 16:21:19.179 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 16:21:28.140 00:00:10.364 TCP 23.104.0.1:37944 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:21:30.569 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42396 10 6452 1 2025-07-31 16:22:28.543 00:00:10.362 TCP 23.104.0.1:47644 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:22:30.779 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53296 10 6452 1 2025-07-31 16:23:28.952 00:00:10.329 TCP 23.104.0.1:44278 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:23:30.981 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:44980 10 6452 1 2025-07-31 16:24:29.315 00:00:10.371 TCP 23.104.0.1:42286 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:24:31.219 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:43458 10 6452 1 2025-07-31 16:25:29.724 00:00:10.378 TCP 23.104.0.1:43376 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:25:31.413 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44312 10 6452 1 2025-07-31 16:21:04.035 00:06:00.057 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 16:21:04.037 00:06:00.053 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 16:26:19.344 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 16:26:19.209 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 16:26:31.627 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35196 10 6452 1 2025-07-31 16:26:30.139 00:00:10.367 TCP 23.104.0.1:53204 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:27:30.543 00:00:10.367 TCP 23.104.0.1:45396 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:27:31.834 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38156 10 6452 1 2025-07-31 16:28:30.951 00:00:10.369 TCP 23.104.0.1:47564 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:28:32.009 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34242 10 6452 1 2025-07-31 16:29:31.357 00:00:10.366 TCP 23.104.0.1:38922 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:29:32.183 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56294 10 6452 1 2025-07-31 16:30:31.760 00:00:10.382 TCP 23.104.0.1:39474 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:30:32.352 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47360 10 6452 1 2025-07-31 16:31:19.166 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 16:31:19.351 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 16:31:32.182 00:00:10.321 TCP 23.104.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:31:32.570 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39938 10 6452 1 2025-07-31 16:32:32.789 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43878 10 6452 1 2025-07-31 16:32:32.542 00:00:10.321 TCP 23.104.0.1:42696 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:28:04.035 00:06:00.058 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 16:28:04.037 00:06:00.053 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 16:33:32.901 00:00:10.375 TCP 23.104.0.1:44378 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:33:33.000 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49026 10 6452 1 2025-07-31 16:34:33.220 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33454 10 6452 1 2025-07-31 16:34:33.313 00:00:10.373 TCP 23.104.0.1:53326 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:35:33.439 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36034 10 6452 1 2025-07-31 16:35:33.726 00:00:10.369 TCP 23.104.0.1:56910 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:36:19.681 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 16:36:19.399 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 16:36:34.137 00:00:10.370 TCP 23.104.0.1:47602 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:36:33.614 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 10 6452 1 2025-07-31 16:37:34.536 00:00:10.373 TCP 23.104.0.1:58082 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:37:33.832 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51912 10 6452 1 2025-07-31 16:38:34.946 00:00:10.381 TCP 23.104.0.1:52044 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:38:34.076 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56376 10 6452 1 2025-07-31 16:39:34.294 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35190 10 6452 1 2025-07-31 16:39:35.366 00:00:10.366 TCP 23.104.0.1:48852 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:35:04.036 00:06:00.060 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 16:35:04.038 00:06:00.055 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 16:40:35.764 00:00:10.384 TCP 23.104.0.1:58224 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:40:34.503 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52292 10 6452 1 2025-07-31 16:41:19.494 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 16:41:19.489 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 16:41:34.718 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47824 10 6452 1 2025-07-31 16:41:36.183 00:00:10.365 TCP 23.104.0.1:53146 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:42:34.933 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:55792 10 6452 1 2025-07-31 16:42:36.590 00:00:10.333 TCP 23.104.0.1:43688 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:43:35.128 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 12 10367 1 2025-07-31 16:43:36.960 00:00:10.399 TCP 23.104.0.1:34684 -> 1.101.0.1:3000 15 1926 1 2025-07-31 16:44:35.372 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49046 10 6452 1 2025-07-31 16:44:37.396 00:00:10.365 TCP 23.104.0.1:45486 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:45:35.589 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44306 10 6452 1 2025-07-31 16:45:37.799 00:00:10.368 TCP 23.104.0.1:48540 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:46:19.682 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 16:46:19.472 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 16:46:35.806 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34924 10 6452 1 2025-07-31 16:46:38.204 00:00:10.364 TCP 23.104.0.1:45130 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:42:04.044 00:06:00.054 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 16:42:04.041 00:06:00.059 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 16:47:36.033 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51664 10 6452 1 2025-07-31 16:47:38.606 00:00:10.367 TCP 23.104.0.1:60530 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:48:36.243 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:43440 12 10367 1 2025-07-31 16:48:39.015 00:00:10.395 TCP 23.104.0.1:46532 -> 1.101.0.1:3000 15 1926 1 2025-07-31 16:49:36.492 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-07-31 16:49:39.450 00:00:16.361 TCP 23.104.0.1:41220 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:50:36.713 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60206 10 6452 1 2025-07-31 16:50:45.848 00:00:10.380 TCP 23.104.0.1:38006 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:51:19.658 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 16:51:19.679 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 16:51:36.928 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:47512 10 6452 1 2025-07-31 16:51:46.272 00:00:10.375 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:52:37.116 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37766 10 6452 1 2025-07-31 16:52:46.675 00:00:10.369 TCP 23.104.0.1:55568 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:53:37.329 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51960 10 6452 1 2025-07-31 16:53:47.102 00:00:10.368 TCP 23.104.0.1:48120 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:49:04.045 00:06:00.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 16:49:04.048 00:06:00.050 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 16:54:37.554 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49834 10 6452 1 2025-07-31 16:54:47.506 00:00:10.362 TCP 23.104.0.1:47412 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:55:37.765 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53332 10 6452 1 2025-07-31 16:55:47.910 00:00:10.326 TCP 23.104.0.1:33326 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:56:19.833 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 16:56:19.900 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 16:56:37.987 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55904 10 6452 1 2025-07-31 16:56:48.266 00:00:10.361 TCP 23.104.0.1:60982 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:57:38.213 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45420 10 6452 1 2025-07-31 16:57:48.669 00:00:10.377 TCP 23.104.0.1:46022 -> 1.101.0.1:3000 11 1507 1 2025-07-31 16:58:38.430 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40964 10 6452 1 Summary: total flows: 161, total bytes: 505386, total packets: 1571, avg bps: 1073, avg pps: 0, avg bpp: 321 Time window: 2025-07-31 15:56:03 - 2025-07-31 16:58:48 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0033s User: 0.0008s Wall: 0.0020s flows/second: 79267.9 Runtime: 0.0021s