Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 05:59:15.520 00:00:10.365 TCP 23.104.0.1:48474 -> 1.101.0.1:3000 11 1507 1 2025-08-01 05:59:28.730 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50080 10 6452 1 2025-08-01 06:00:15.923 00:00:10.390 TCP 23.104.0.1:46994 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:00:28.942 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:58668 10 6452 1 2025-08-01 06:01:16.356 00:00:10.386 TCP 23.104.0.1:54752 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:01:35.794 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 06:01:35.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 06:01:29.180 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:53360 10 6452 1 2025-08-01 06:02:16.782 00:00:10.366 TCP 23.104.0.1:47806 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:02:29.425 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54278 10 6452 1 2025-08-01 06:03:17.186 00:00:10.363 TCP 23.104.0.1:35494 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:03:29.645 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36594 10 6452 1 2025-08-01 06:04:17.580 00:00:10.361 TCP 23.104.0.1:50296 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:04:29.824 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60728 12 6556 1 2025-08-01 06:00:04.406 00:06:00.018 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 06:00:04.420 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 06:05:17.983 00:00:10.366 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:05:30.070 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42026 10 6452 1 2025-08-01 06:06:18.388 00:00:10.361 TCP 23.104.0.1:48548 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:06:35.750 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 06:06:35.692 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 06:06:30.237 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37796 10 6452 1 2025-08-01 06:07:18.790 00:00:10.372 TCP 23.104.0.1:56008 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:07:30.449 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41532 10 6452 1 2025-08-01 06:08:19.205 00:00:10.397 TCP 23.104.0.1:42652 -> 1.101.0.1:3000 15 1926 1 2025-08-01 06:08:30.663 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:39538 12 10367 1 2025-08-01 06:09:19.649 00:00:10.385 TCP 23.104.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:09:30.904 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58122 10 6452 1 2025-08-01 06:10:20.059 00:00:10.361 TCP 23.104.0.1:48724 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:10:31.122 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:56104 10 6452 1 2025-08-01 06:11:20.462 00:00:10.357 TCP 23.104.0.1:53856 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:11:35.680 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 06:11:35.840 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 06:11:31.289 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50824 10 6452 1 2025-08-01 06:07:04.421 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 06:07:04.409 00:06:00.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 06:12:20.861 00:00:10.372 TCP 23.104.0.1:58670 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:12:31.499 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60142 10 6452 1 2025-08-01 06:13:21.280 00:00:10.367 TCP 23.104.0.1:43656 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:13:31.708 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49726 10 6452 1 2025-08-01 06:14:21.713 00:00:10.326 TCP 23.104.0.1:52684 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:14:31.924 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56796 10 6452 1 2025-08-01 06:15:22.100 00:00:10.361 TCP 23.104.0.1:49790 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:15:32.135 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46170 10 6452 1 2025-08-01 06:16:35.818 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 06:16:22.508 00:00:10.384 TCP 23.104.0.1:35276 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:16:35.787 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 06:16:32.351 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:33698 10 6452 1 2025-08-01 06:17:22.930 00:00:10.376 TCP 23.104.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:17:32.539 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48992 10 6452 1 2025-08-01 06:18:23.347 00:00:10.400 TCP 23.104.0.1:43222 -> 1.101.0.1:3000 15 1926 1 2025-08-01 06:18:32.755 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38232 12 10365 1 2025-08-01 06:14:04.423 00:06:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 06:14:04.410 00:06:00.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 06:19:23.785 00:00:10.326 TCP 23.104.0.1:41508 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:19:33.000 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-08-01 06:20:24.147 00:00:10.363 TCP 23.104.0.1:46948 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:20:33.173 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47714 10 6452 1 2025-08-01 06:21:36.030 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 06:21:35.961 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 06:21:24.552 00:00:10.362 TCP 23.104.0.1:39608 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:21:33.382 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52098 10 6452 1 2025-08-01 06:22:24.959 00:00:10.364 TCP 23.104.0.1:41816 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:22:33.605 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53772 10 6452 1 2025-08-01 06:23:25.358 00:00:10.368 TCP 23.104.0.1:58100 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:23:33.812 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54192 10 6452 1 2025-08-01 06:24:25.764 00:00:10.368 TCP 23.104.0.1:40384 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:24:34.044 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51084 10 6452 1 2025-08-01 06:25:26.170 00:00:10.323 TCP 23.104.0.1:50320 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:25:34.270 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54402 10 6452 1 2025-08-01 06:21:04.424 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 06:21:04.411 00:06:00.015 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 06:26:35.792 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 06:26:26.531 00:00:10.359 TCP 23.104.0.1:51940 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:26:35.991 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 06:26:34.515 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57874 10 6452 1 2025-08-01 06:27:26.930 00:00:10.386 TCP 23.104.0.1:44922 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:27:34.730 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37414 10 6452 1 2025-08-01 06:28:27.353 00:00:10.369 TCP 23.104.0.1:34312 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:28:34.936 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36426 10 6452 1 2025-08-01 06:29:27.754 00:00:10.379 TCP 23.104.0.1:55540 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:29:35.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33348 10 6452 1 2025-08-01 06:30:28.171 00:00:10.324 TCP 23.104.0.1:33096 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:30:35.383 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53828 10 6452 1 2025-08-01 06:31:36.180 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 06:31:35.989 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 06:31:28.541 00:00:10.375 TCP 23.104.0.1:37020 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:31:35.597 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46748 10 6452 1 2025-08-01 06:32:28.957 00:00:10.364 TCP 23.104.0.1:40712 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:32:35.811 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37198 10 6452 1 2025-08-01 06:28:04.424 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 06:28:04.415 00:06:00.012 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 06:33:29.361 00:00:10.358 TCP 23.104.0.1:48974 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:33:36.028 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57182 10 6452 1 2025-08-01 06:34:29.758 00:00:10.376 TCP 23.104.0.1:49370 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:34:36.235 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35438 10 6452 1 2025-08-01 06:35:30.178 00:00:10.370 TCP 23.104.0.1:59922 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:35:36.449 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37494 10 6452 1 2025-08-01 06:36:36.707 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 06:36:36.529 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 06:36:30.587 00:00:10.364 TCP 23.104.0.1:47598 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:36:36.659 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38088 10 6452 1 2025-08-01 06:37:30.995 00:00:10.367 TCP 23.104.0.1:47988 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:37:36.869 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60270 10 6452 1 2025-08-01 06:38:31.401 00:00:10.361 TCP 23.104.0.1:48264 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:38:37.100 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43452 10 6452 1 2025-08-01 06:39:31.800 00:00:10.369 TCP 23.104.0.1:40498 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:39:37.310 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53638 10 6452 1 2025-08-01 06:35:04.420 00:06:00.009 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 06:35:04.427 00:06:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 06:40:32.209 00:00:10.358 TCP 23.104.0.1:39540 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:40:37.522 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46332 10 6452 1 2025-08-01 06:41:36.533 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 06:41:36.208 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 06:41:32.604 00:00:10.361 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:41:37.733 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60648 10 6452 1 2025-08-01 06:42:33.018 00:00:10.359 TCP 23.104.0.1:60084 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:42:37.948 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:40854 10 6452 1 2025-08-01 06:43:33.413 00:00:10.366 TCP 23.104.0.1:41690 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:43:38.182 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:36782 10 6452 1 2025-08-01 06:44:33.819 00:00:10.366 TCP 23.104.0.1:40588 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:44:38.346 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49296 10 6452 1 2025-08-01 06:45:34.241 00:00:10.399 TCP 23.104.0.1:57578 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:45:38.564 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42820 10 6452 1 2025-08-01 06:46:36.572 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 06:46:36.487 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 06:46:34.677 00:00:10.372 TCP 23.104.0.1:42516 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:46:38.735 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48312 10 6452 1 2025-08-01 06:42:04.421 00:06:00.009 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 06:42:04.426 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 06:47:35.099 00:00:10.368 TCP 23.104.0.1:37210 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:47:38.909 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59854 10 6452 1 2025-08-01 06:48:35.511 00:00:10.371 TCP 23.104.0.1:53836 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:48:39.127 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53396 10 6452 1 2025-08-01 06:49:35.920 00:00:10.350 TCP 23.104.0.1:59610 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:49:39.338 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53648 10 6452 1 2025-08-01 06:50:36.309 00:00:10.362 TCP 23.104.0.1:43214 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:50:39.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33052 10 6452 1 2025-08-01 06:51:36.644 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 06:51:36.543 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 06:51:36.710 00:00:10.427 TCP 23.104.0.1:48842 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:51:39.731 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41976 10 6452 1 2025-08-01 06:52:39.943 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59074 10 6452 1 2025-08-01 06:52:37.172 00:00:10.367 TCP 23.104.0.1:38630 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:53:37.573 00:00:10.361 TCP 23.104.0.1:45798 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:53:40.179 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33548 10 6452 1 2025-08-01 06:49:04.424 00:06:00.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 06:49:04.427 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 06:54:37.974 00:00:10.377 TCP 23.104.0.1:47076 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:54:40.401 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:59154 10 6452 1 2025-08-01 06:55:40.594 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39090 10 6452 1 2025-08-01 06:55:38.386 00:00:10.367 TCP 23.104.0.1:34754 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:56:36.654 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 06:56:36.706 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 06:56:40.772 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40498 10 6452 1 2025-08-01 06:56:38.791 00:00:10.364 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:57:40.944 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:50840 10 6452 1 2025-08-01 06:57:39.196 00:00:10.363 TCP 23.104.0.1:46172 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:58:39.598 00:00:10.360 TCP 23.104.0.1:60744 -> 1.101.0.1:3000 11 1507 1 2025-08-01 06:58:41.132 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60582 10 6452 1 Summary: total flows: 160, total bytes: 503222, total packets: 1514, avg bps: 1125, avg pps: 0, avg bpp: 332 Time window: 2025-08-01 05:59:15 - 2025-08-01 06:58:51 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0010s User: 0.0040s Wall: 0.0025s flows/second: 64360.7 Runtime: 0.0025s