Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 04:58:51.506 00:00:10.367 TCP 23.104.0.1:49052 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:59:15.973 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:33600 10 6452 1 2025-08-01 04:59:51.918 00:00:10.372 TCP 23.104.0.1:50970 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:00:16.173 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56966 10 6452 1 2025-08-01 05:00:52.328 00:00:10.366 TCP 23.104.0.1:32916 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:01:16.396 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58250 10 6452 1 2025-08-01 05:01:34.465 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 05:01:34.648 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 05:01:52.730 00:00:10.368 TCP 23.104.0.1:56592 -> 1.101.0.1:3000 11 1507 1 2025-08-01 04:57:04.392 00:06:00.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 04:57:04.393 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 05:02:16.635 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55666 10 6452 1 2025-08-01 05:02:53.137 00:00:10.366 TCP 23.104.0.1:48312 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:03:16.852 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50284 10 6452 1 2025-08-01 05:03:53.550 00:00:10.368 TCP 23.104.0.1:58090 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:04:17.083 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35268 10 6452 1 2025-08-01 05:04:53.961 00:00:10.379 TCP 23.104.0.1:55224 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:05:17.263 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57560 10 6452 1 2025-08-01 05:05:54.376 00:00:10.368 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:06:17.482 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35660 10 6452 1 2025-08-01 05:06:34.304 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 05:06:34.585 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 05:06:54.778 00:00:10.365 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:07:17.687 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37374 10 6452 1 2025-08-01 05:07:55.183 00:00:10.364 TCP 23.104.0.1:52820 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:08:17.895 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:44602 10 6452 1 2025-08-01 05:04:04.393 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 05:08:55.604 00:00:10.343 TCP 23.104.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:04:04.394 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 05:09:18.096 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40092 10 6452 1 2025-08-01 05:09:55.993 00:00:10.375 TCP 23.104.0.1:37134 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:10:18.271 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42612 10 6452 1 2025-08-01 05:10:56.409 00:00:10.363 TCP 23.104.0.1:55676 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:11:18.482 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47338 10 6452 1 2025-08-01 05:11:34.711 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 05:11:34.686 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 05:11:56.812 00:00:10.332 TCP 23.104.0.1:38436 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:12:18.697 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34036 10 6452 1 2025-08-01 05:12:57.182 00:00:10.321 TCP 23.104.0.1:56356 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:13:18.908 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41980 10 6452 1 2025-08-01 05:13:57.544 00:00:10.359 TCP 23.104.0.1:40610 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:14:19.130 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46702 10 6452 1 2025-08-01 05:14:57.942 00:00:10.374 TCP 23.104.0.1:40678 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:15:19.348 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41474 10 6452 1 2025-08-01 05:11:04.394 00:06:00.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 05:11:04.395 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 05:15:58.358 00:00:10.324 TCP 23.104.0.1:59716 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:16:19.565 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45830 10 6452 1 2025-08-01 05:16:34.601 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 05:16:34.704 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 05:16:58.719 00:00:10.366 TCP 23.104.0.1:36406 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:17:19.784 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33844 10 6452 1 2025-08-01 05:17:59.123 00:00:10.326 TCP 23.104.0.1:57634 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:18:20.000 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44784 10 6452 1 2025-08-01 05:18:59.495 00:00:10.367 TCP 23.104.0.1:53220 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:19:20.221 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57890 10 6452 1 2025-08-01 05:19:59.901 00:00:10.337 TCP 23.104.0.1:48342 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:20:20.440 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60064 10 6452 1 2025-08-01 05:21:00.270 00:00:10.367 TCP 23.104.0.1:52764 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:21:20.658 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40084 10 6452 1 2025-08-01 05:21:34.761 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 05:21:34.978 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 05:22:00.675 00:00:10.373 TCP 23.104.0.1:43926 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:22:20.882 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35782 10 6452 1 2025-08-01 05:18:04.395 00:06:00.014 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 705 1 2025-08-01 05:18:04.396 00:06:00.015 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 05:23:01.106 00:00:10.365 TCP 23.104.0.1:35828 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:23:21.104 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38880 10 6452 1 2025-08-01 05:24:01.507 00:00:10.369 TCP 23.104.0.1:38340 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:24:21.319 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53128 10 6452 1 2025-08-01 05:25:01.912 00:00:10.367 TCP 23.104.0.1:48784 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:25:21.531 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37838 10 6452 1 2025-08-01 05:26:02.313 00:00:10.369 TCP 23.104.0.1:43400 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:26:21.749 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55578 10 6452 1 2025-08-01 05:26:34.931 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 05:26:34.823 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 05:27:02.719 00:00:10.368 TCP 23.104.0.1:47592 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:27:21.975 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60930 10 6452 1 2025-08-01 05:28:03.127 00:00:10.360 TCP 23.104.0.1:60334 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:28:22.222 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58160 10 6452 1 2025-08-01 05:29:03.526 00:00:10.361 TCP 23.104.0.1:42658 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:29:22.396 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49952 10 6452 1 2025-08-01 05:25:04.409 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 05:25:04.397 00:06:00.015 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 05:30:03.937 00:00:10.373 TCP 23.104.0.1:54198 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:30:22.601 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40844 10 6452 1 2025-08-01 05:31:04.349 00:00:10.364 TCP 23.104.0.1:56054 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:31:22.820 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41756 10 6452 1 2025-08-01 05:31:34.962 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 05:31:34.784 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 05:32:04.752 00:00:10.340 TCP 23.104.0.1:59424 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:32:23.055 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43534 10 6452 1 2025-08-01 05:33:05.134 00:00:10.367 TCP 23.104.0.1:53220 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:33:23.222 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52970 10 6452 1 2025-08-01 05:34:05.539 00:00:10.363 TCP 23.104.0.1:54002 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:34:23.446 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-08-01 05:35:05.943 00:00:10.366 TCP 23.104.0.1:41476 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:35:23.622 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58058 10 6452 1 2025-08-01 05:36:06.348 00:00:10.361 TCP 23.104.0.1:55788 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:36:35.137 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 05:36:23.797 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42394 10 6452 1 2025-08-01 05:36:35.410 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 05:32:04.411 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 05:32:04.400 00:06:00.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 05:37:06.748 00:00:10.393 TCP 23.104.0.1:52300 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:37:24.061 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35986 10 6452 1 2025-08-01 05:38:07.176 00:00:10.375 TCP 23.104.0.1:59540 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:38:24.277 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47040 10 6452 1 2025-08-01 05:39:07.585 00:00:10.367 TCP 23.104.0.1:42792 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:39:24.499 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:54170 10 6452 1 2025-08-01 05:40:07.993 00:00:10.369 TCP 23.104.0.1:54498 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:40:24.670 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57730 10 6452 1 2025-08-01 05:41:08.421 00:00:10.329 TCP 23.104.0.1:36522 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:41:35.150 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 05:41:24.882 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33064 10 6452 1 2025-08-01 05:41:35.142 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 05:42:08.794 00:00:10.365 TCP 23.104.0.1:60952 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:42:25.100 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56256 10 6452 1 2025-08-01 05:43:09.196 00:00:10.370 TCP 23.104.0.1:58164 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:43:25.304 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49826 10 6452 1 2025-08-01 05:39:04.402 00:06:00.014 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 05:39:04.413 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 05:44:09.608 00:00:10.323 TCP 23.104.0.1:32824 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:44:25.523 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39616 10 6452 1 2025-08-01 05:45:09.975 00:00:10.381 TCP 23.104.0.1:60058 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:45:25.746 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53512 10 6452 1 2025-08-01 05:46:10.395 00:00:10.367 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:46:35.362 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 05:46:35.300 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 05:46:25.969 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:47712 10 6452 1 2025-08-01 05:47:10.797 00:00:10.365 TCP 23.104.0.1:37884 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:47:26.196 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45688 10 6452 1 2025-08-01 05:48:11.204 00:00:10.327 TCP 23.104.0.1:34978 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:48:26.406 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38430 10 6452 1 2025-08-01 05:49:11.570 00:00:10.364 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:49:26.617 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41038 10 6452 1 2025-08-01 05:50:11.972 00:00:10.327 TCP 23.104.0.1:44672 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:50:26.833 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-08-01 05:46:04.405 00:06:00.014 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 05:46:04.417 00:05:59.999 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 05:51:12.343 00:00:10.323 TCP 23.104.0.1:56896 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:51:35.445 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 05:51:35.502 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 05:51:27.066 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46574 10 6452 1 2025-08-01 05:52:12.706 00:00:10.363 TCP 23.104.0.1:43450 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:52:27.236 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40412 10 6452 1 2025-08-01 05:53:13.137 00:00:10.363 TCP 23.104.0.1:59650 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:53:27.452 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35520 10 6452 1 2025-08-01 05:54:13.539 00:00:10.369 TCP 23.104.0.1:47960 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:54:27.670 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37172 10 6452 1 2025-08-01 05:55:13.945 00:00:10.326 TCP 23.104.0.1:38740 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:55:27.881 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:52470 10 6452 1 2025-08-01 05:56:14.317 00:00:10.367 TCP 23.104.0.1:57000 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:56:35.537 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 05:56:35.560 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 05:56:28.123 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55776 10 6452 1 2025-08-01 05:57:14.721 00:00:10.367 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:57:28.334 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47562 10 6452 1 2025-08-01 05:53:04.417 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 05:53:04.407 00:06:00.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 05:58:15.124 00:00:10.365 TCP 23.104.0.1:60692 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:58:28.509 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46530 10 6452 1 Summary: total flows: 162, total bytes: 497110, total packets: 1546, avg bps: 1069, avg pps: 0, avg bpp: 321 Time window: 2025-08-01 04:57:04 - 2025-08-01 05:59:04 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0015s User: 0.0030s Wall: 0.0021s flows/second: 77512.8 Runtime: 0.0021s