Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-31 23:58:51.136 00:00:10.329 TCP 23.104.0.1:59194 -> 1.101.0.1:3000 11 1507 1 2025-07-31 23:59:09.386 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57342 10 6452 1 2025-07-31 23:59:51.498 00:00:10.370 TCP 23.104.0.1:48770 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:00:09.599 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47990 10 6452 1 2025-07-31 23:56:04.260 00:06:00.028 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 23:56:04.280 00:06:00.006 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 00:00:51.902 00:00:10.363 TCP 23.104.0.1:42960 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:01:09.809 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37864 10 6452 1 2025-08-01 00:01:28.318 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 00:01:28.271 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 00:01:52.306 00:00:10.325 TCP 23.104.0.1:49678 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:02:10.026 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:43174 10 6452 1 2025-08-01 00:02:52.668 00:00:10.369 TCP 23.104.0.1:45484 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:03:10.231 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56438 10 6452 1 2025-08-01 00:03:53.097 00:00:10.366 TCP 23.104.0.1:58290 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:04:10.448 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34560 10 6452 1 2025-08-01 00:04:53.500 00:00:10.359 TCP 23.104.0.1:59792 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:05:10.660 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54716 10 6452 1 2025-08-01 00:05:53.901 00:00:10.328 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:06:10.840 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57310 10 6452 1 2025-08-01 00:06:28.524 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 00:06:28.478 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 00:06:54.270 00:00:10.373 TCP 23.104.0.1:39480 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:07:11.037 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:32866 10 6452 1 2025-08-01 00:07:54.680 00:00:10.369 TCP 23.104.0.1:37854 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:03:04.286 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 9 601 1 2025-08-01 00:03:04.260 00:06:00.030 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 00:08:11.202 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54932 10 6452 1 2025-08-01 00:08:55.109 00:00:10.367 TCP 23.104.0.1:40622 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:09:11.423 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41208 10 6452 1 2025-08-01 00:09:55.518 00:00:10.370 TCP 23.104.0.1:44936 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:10:11.634 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56788 10 6452 1 2025-08-01 00:10:55.926 00:00:10.385 TCP 23.104.0.1:36922 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:11:11.846 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47010 10 6452 1 2025-08-01 00:11:28.277 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 00:11:28.388 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 00:11:56.348 00:00:10.367 TCP 23.104.0.1:55702 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:12:12.093 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45236 10 6452 1 2025-08-01 00:12:56.761 00:00:10.368 TCP 23.104.0.1:33152 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:13:12.306 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:54450 12 10367 1 2025-08-01 00:13:57.169 00:00:10.435 TCP 23.104.0.1:32986 -> 1.101.0.1:3000 15 1926 1 2025-08-01 00:14:12.556 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60180 10 6452 1 2025-08-01 00:10:04.286 00:06:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 00:10:04.288 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 00:14:57.646 00:00:10.363 TCP 23.104.0.1:57940 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:15:12.766 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41470 10 6452 1 2025-08-01 00:15:58.060 00:00:10.332 TCP 23.104.0.1:55778 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:16:12.987 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58058 10 6452 1 2025-08-01 00:16:28.523 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 00:16:28.752 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 00:16:58.432 00:00:10.364 TCP 23.104.0.1:52702 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:17:13.221 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46922 10 6452 1 2025-08-01 00:17:58.855 00:00:10.334 TCP 23.104.0.1:42808 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:18:13.394 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55150 12 10365 1 2025-08-01 00:18:59.228 00:00:10.440 TCP 23.104.0.1:41462 -> 1.101.0.1:3000 15 1926 1 2025-08-01 00:19:13.637 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44810 10 6452 1 2025-08-01 00:19:59.711 00:00:10.378 TCP 23.104.0.1:39496 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:20:13.851 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42448 10 6452 1 2025-08-01 00:21:00.135 00:00:10.366 TCP 23.104.0.1:49568 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:21:14.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53868 10 6452 1 2025-08-01 00:21:28.588 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 00:21:28.825 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 00:17:04.289 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-01 00:17:04.286 00:06:00.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 00:22:00.541 00:00:10.367 TCP 23.104.0.1:51910 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:22:14.292 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33374 10 6452 1 2025-08-01 00:23:00.954 00:00:10.368 TCP 23.104.0.1:60798 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:23:14.516 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49616 10 6452 1 2025-08-01 00:24:01.361 00:00:10.364 TCP 23.104.0.1:52298 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:24:14.729 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42906 10 6452 1 2025-08-01 00:25:01.764 00:00:10.376 TCP 23.104.0.1:34734 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:25:14.901 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37948 10 6452 1 2025-08-01 00:26:02.174 00:00:10.324 TCP 23.104.0.1:33624 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:26:15.115 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59546 10 6452 1 2025-08-01 00:26:28.906 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 00:26:28.796 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 00:27:02.539 00:00:10.367 TCP 23.104.0.1:38484 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:27:15.287 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59344 10 6452 1 2025-08-01 00:28:02.943 00:00:10.375 TCP 23.104.0.1:43864 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:28:15.501 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37082 10 6452 1 2025-08-01 00:24:04.291 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 00:24:04.289 00:06:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 00:29:03.355 00:00:10.368 TCP 23.104.0.1:42884 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:29:15.713 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57970 10 6452 1 2025-08-01 00:30:03.759 00:00:10.375 TCP 23.104.0.1:48556 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:30:15.922 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:53210 10 6452 1 2025-08-01 00:31:04.172 00:00:10.327 TCP 23.104.0.1:37030 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:31:16.170 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34470 10 6452 1 2025-08-01 00:31:29.043 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 00:31:28.827 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 00:32:04.532 00:00:10.326 TCP 23.104.0.1:40900 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:32:16.381 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:52334 10 6452 1 2025-08-01 00:33:04.897 00:00:10.369 TCP 23.104.0.1:60600 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:33:16.588 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32854 10 6452 1 2025-08-01 00:34:05.304 00:00:10.371 TCP 23.104.0.1:57048 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:34:16.804 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59924 10 6452 1 2025-08-01 00:35:05.711 00:00:10.366 TCP 23.104.0.1:57980 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:35:17.054 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50764 10 6452 1 2025-08-01 00:31:04.292 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 00:31:04.290 00:06:00.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 00:36:06.113 00:00:10.320 TCP 23.104.0.1:53352 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:36:29.072 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 00:36:17.230 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46614 10 6452 1 2025-08-01 00:36:29.162 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 00:37:06.473 00:00:10.384 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:37:17.439 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52870 10 6452 1 2025-08-01 00:38:06.904 00:00:10.369 TCP 23.104.0.1:46428 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:38:17.659 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54564 10 6452 1 2025-08-01 00:39:07.308 00:00:10.368 TCP 23.104.0.1:52242 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:39:17.877 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44650 10 6452 1 2025-08-01 00:40:07.714 00:00:10.385 TCP 23.104.0.1:50018 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:40:18.095 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59004 10 6452 1 2025-08-01 00:41:08.139 00:00:10.325 TCP 23.104.0.1:50570 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:41:29.542 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 00:41:18.310 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60396 10 6452 1 2025-08-01 00:41:29.426 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 00:42:08.504 00:00:10.361 TCP 23.104.0.1:60042 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:42:18.526 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57508 10 6452 1 2025-08-01 00:38:04.294 00:06:00.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 00:38:04.295 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 00:43:08.906 00:00:10.366 TCP 23.104.0.1:41494 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:43:18.741 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6452 1 2025-08-01 00:44:09.307 00:00:10.367 TCP 23.104.0.1:48776 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:44:18.950 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52476 10 6452 1 2025-08-01 00:45:09.709 00:00:10.368 TCP 23.104.0.1:46306 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:45:19.175 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56700 10 6452 1 2025-08-01 00:46:10.121 00:00:10.365 TCP 23.104.0.1:60570 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:46:29.409 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 00:46:19.392 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52174 10 6452 1 2025-08-01 00:46:29.257 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 00:47:10.521 00:00:10.366 TCP 23.104.0.1:42136 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:47:19.599 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39372 10 6452 1 2025-08-01 00:48:10.927 00:00:10.383 TCP 23.104.0.1:49800 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:48:19.826 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55388 10 6452 1 2025-08-01 00:49:11.351 00:00:10.372 TCP 23.104.0.1:60846 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:49:20.058 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54178 10 6452 1 2025-08-01 00:45:04.296 00:06:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 00:45:04.296 00:06:00.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 00:50:11.760 00:00:10.375 TCP 23.104.0.1:50514 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:50:20.265 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57472 10 6452 1 2025-08-01 00:51:12.175 00:00:10.364 TCP 23.104.0.1:36880 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:51:20.479 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49226 10 6452 1 2025-08-01 00:51:29.359 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 00:51:29.499 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 00:52:12.594 00:00:10.368 TCP 23.104.0.1:36546 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:52:20.692 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44126 10 6452 1 2025-08-01 00:53:13.006 00:00:10.384 TCP 23.104.0.1:59506 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:53:20.917 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38396 10 6452 1 2025-08-01 00:54:13.429 00:00:10.320 TCP 23.104.0.1:53798 -> 1.101.0.1:3000 12 1559 1 2025-08-01 00:54:21.129 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33984 10 6452 1 2025-08-01 00:55:13.784 00:00:10.367 TCP 23.104.0.1:59780 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:55:21.340 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45232 10 6452 1 2025-08-01 00:56:14.186 00:00:10.374 TCP 23.104.0.1:51202 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:56:29.525 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 00:56:21.556 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57360 10 6452 1 2025-08-01 00:56:29.266 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 00:52:04.299 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 00:52:04.296 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 00:57:14.593 00:00:10.366 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:57:21.766 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44706 10 6452 1 2025-08-01 00:58:15.000 00:00:10.365 TCP 23.104.0.1:40968 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:58:21.983 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35012 10 6452 1 Summary: total flows: 162, total bytes: 507128, total packets: 1584, avg bps: 1082, avg pps: 0, avg bpp: 320 Time window: 2025-07-31 23:56:04 - 2025-08-01 00:58:32 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0012s User: 0.0035s Wall: 0.0023s flows/second: 70005.9 Runtime: 0.0023s