Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 14:58:52.107 00:00:10.399 TCP 23.104.0.1:57650 -> 1.101.0.1:3000 15 1926 1 2025-08-01 14:59:29.117 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32922 10 6452 1 2025-08-01 14:59:52.550 00:00:10.373 TCP 23.104.0.1:60784 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:00:29.328 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42462 10 6452 1 2025-08-01 15:00:52.963 00:00:10.331 TCP 23.104.0.1:42334 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:01:29.542 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34854 10 6452 1 2025-08-01 15:01:46.475 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 15:01:46.616 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 15:01:53.336 00:00:10.368 TCP 23.104.0.1:58272 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:02:29.755 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45080 10 6452 1 2025-08-01 15:02:53.743 00:00:10.367 TCP 23.104.0.1:53874 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:03:29.931 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34908 10 6452 1 2025-08-01 15:03:54.149 00:00:10.328 TCP 23.104.0.1:45558 -> 1.101.0.1:3000 11 1507 1 2025-08-01 14:59:04.647 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-01 14:59:04.624 00:06:00.027 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 15:04:30.171 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47216 10 6452 1 2025-08-01 15:04:54.524 00:00:10.380 TCP 23.104.0.1:42968 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:05:30.385 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57658 10 6452 1 2025-08-01 15:05:54.951 00:00:10.366 TCP 23.104.0.1:33774 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:06:30.597 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52942 10 6452 1 2025-08-01 15:06:46.464 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 15:06:46.445 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 15:06:55.356 00:00:10.364 TCP 23.104.0.1:40542 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:07:30.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56968 10 6452 1 2025-08-01 15:07:55.757 00:00:10.374 TCP 23.104.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:08:31.042 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57046 10 6452 1 2025-08-01 15:08:56.179 00:00:10.362 TCP 23.104.0.1:46038 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:09:31.254 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40056 10 6452 1 2025-08-01 15:09:56.581 00:00:10.363 TCP 23.104.0.1:55670 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:10:31.450 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38590 10 6452 1 2025-08-01 15:06:04.648 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-01 15:06:04.646 00:06:00.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 15:10:56.981 00:00:10.368 TCP 23.104.0.1:37046 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:11:31.661 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49056 10 6452 1 2025-08-01 15:11:46.680 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 15:11:46.530 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 15:11:57.386 00:00:10.327 TCP 23.104.0.1:33670 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:12:31.843 00:00:10.303 TCP 1.101.0.1:3000 -> 22.102.0.1:49582 10 6452 1 2025-08-01 15:12:57.750 00:00:10.321 TCP 23.104.0.1:34648 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:13:32.188 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60710 10 6452 1 2025-08-01 15:13:58.112 00:00:10.368 TCP 23.104.0.1:54070 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:14:32.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38332 10 6452 1 2025-08-01 15:14:58.515 00:00:10.373 TCP 23.104.0.1:41616 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:15:32.611 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56636 10 6452 1 2025-08-01 15:15:58.916 00:00:10.376 TCP 23.104.0.1:50586 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:16:46.757 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 15:16:32.826 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48778 10 6452 1 2025-08-01 15:16:46.926 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 15:16:59.331 00:00:10.332 TCP 23.104.0.1:59434 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:17:33.064 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54206 10 6452 1 2025-08-01 15:13:04.650 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 15:13:04.648 00:06:00.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 15:17:59.691 00:00:10.365 TCP 23.104.0.1:60468 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:18:33.281 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49458 10 6452 1 2025-08-01 15:19:00.107 00:00:10.371 TCP 23.104.0.1:35016 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:19:33.496 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48994 10 6452 1 2025-08-01 15:20:00.522 00:00:13.854 TCP 23.104.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:20:33.668 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37384 10 6452 1 2025-08-01 15:21:04.416 00:00:10.365 TCP 23.104.0.1:48722 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:21:33.839 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35982 10 6452 1 2025-08-01 15:21:46.992 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 15:21:46.993 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 15:22:04.816 00:00:10.363 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:22:34.068 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58682 10 6452 1 2025-08-01 15:23:05.221 00:00:10.363 TCP 23.104.0.1:41350 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:23:34.280 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52986 10 6452 1 2025-08-01 15:24:05.623 00:00:10.366 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:24:34.492 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55832 10 6452 1 2025-08-01 15:20:04.651 00:06:00.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 15:20:04.654 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 757 1 2025-08-01 15:25:06.030 00:00:10.362 TCP 23.104.0.1:52362 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:25:34.663 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-08-01 15:26:06.430 00:00:10.360 TCP 23.104.0.1:46774 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:26:34.831 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41454 10 6452 1 2025-08-01 15:26:46.649 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 15:26:46.841 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 15:27:06.828 00:00:10.351 TCP 23.104.0.1:45794 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:27:35.083 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49742 12 6556 1 2025-08-01 15:28:07.220 00:00:10.359 TCP 23.104.0.1:59458 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:28:35.309 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58714 10 6452 1 2025-08-01 15:29:07.617 00:00:10.359 TCP 23.104.0.1:45298 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:29:35.521 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37546 10 6452 1 2025-08-01 15:30:08.020 00:00:10.368 TCP 23.104.0.1:43148 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:30:35.730 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48176 10 6452 1 2025-08-01 15:31:08.436 00:00:10.365 TCP 23.104.0.1:35228 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:31:35.955 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:39880 10 6452 1 2025-08-01 15:31:46.952 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 15:31:46.805 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 15:27:04.655 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 15:27:04.652 00:06:00.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 15:32:08.841 00:00:10.388 TCP 23.104.0.1:33786 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:32:36.142 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33378 10 6452 1 2025-08-01 15:33:09.271 00:00:10.364 TCP 23.104.0.1:53330 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:33:36.355 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40368 10 6452 1 2025-08-01 15:34:09.677 00:00:10.375 TCP 23.104.0.1:48860 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:34:36.563 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55706 10 6452 1 2025-08-01 15:35:10.109 00:00:10.369 TCP 23.104.0.1:55450 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:35:36.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58808 10 6452 1 2025-08-01 15:36:10.515 00:00:10.364 TCP 23.104.0.1:50000 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:36:46.978 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 15:36:36.990 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59422 10 6452 1 2025-08-01 15:36:47.037 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 15:37:10.917 00:00:10.382 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:37:37.224 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51482 10 6452 1 2025-08-01 15:38:11.339 00:00:10.363 TCP 23.104.0.1:34116 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:38:37.448 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41576 10 6452 1 2025-08-01 15:34:04.657 00:06:00.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 705 1 2025-08-01 15:34:04.652 00:06:00.010 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 705 1 2025-08-01 15:39:11.745 00:00:10.365 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:39:37.654 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45424 10 6452 1 2025-08-01 15:40:12.147 00:00:10.368 TCP 23.104.0.1:46478 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:40:37.862 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34888 10 6452 1 2025-08-01 15:41:12.558 00:00:10.365 TCP 23.104.0.1:40996 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:41:46.951 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 15:41:38.070 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44130 10 6452 1 2025-08-01 15:41:47.353 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 15:42:12.965 00:00:10.381 TCP 23.104.0.1:35722 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:42:38.281 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54690 10 6452 1 2025-08-01 15:43:13.388 00:00:10.370 TCP 23.104.0.1:43832 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:43:38.496 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51394 10 6452 1 2025-08-01 15:44:13.797 00:00:10.332 TCP 23.104.0.1:35832 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:44:38.709 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51026 10 6452 1 2025-08-01 15:45:14.168 00:00:10.331 TCP 23.104.0.1:42344 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:45:38.918 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51594 10 6452 1 2025-08-01 15:41:04.664 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-08-01 15:41:04.661 00:06:00.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 15:46:14.535 00:00:10.362 TCP 23.104.0.1:60142 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:46:47.198 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 15:46:47.423 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 15:46:39.131 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39148 10 6452 1 2025-08-01 15:47:14.932 00:00:10.380 TCP 23.104.0.1:40980 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:47:39.340 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41950 10 6452 1 2025-08-01 15:48:15.352 00:00:10.360 TCP 23.104.0.1:37720 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:48:39.558 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33970 10 6452 1 2025-08-01 15:49:15.754 00:00:10.380 TCP 23.104.0.1:34624 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:49:39.770 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51264 10 6452 1 2025-08-01 15:50:16.173 00:00:10.367 TCP 23.104.0.1:54566 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:50:39.982 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42566 10 6452 1 2025-08-01 15:51:16.575 00:00:10.362 TCP 23.104.0.1:52290 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:51:47.381 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 15:51:47.522 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 15:51:40.214 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33426 10 6452 1 2025-08-01 15:52:16.975 00:00:10.368 TCP 23.104.0.1:58598 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:52:40.427 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44620 10 6452 1 2025-08-01 15:48:04.665 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-08-01 15:48:04.661 00:06:00.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 15:53:17.379 00:00:10.368 TCP 23.104.0.1:57910 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:53:40.649 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59046 10 6452 1 2025-08-01 15:54:17.782 00:00:10.363 TCP 23.104.0.1:50270 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:54:40.861 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41562 10 6452 1 2025-08-01 15:55:18.182 00:00:10.318 TCP 23.104.0.1:38498 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:55:41.082 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51090 10 6452 1 2025-08-01 15:56:18.538 00:00:10.326 TCP 23.104.0.1:56546 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:56:47.608 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 15:56:41.261 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44736 10 6452 1 2025-08-01 15:56:47.482 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 15:57:18.900 00:00:10.365 TCP 23.104.0.1:57126 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:57:41.474 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54380 10 6452 1 2025-08-01 15:58:19.302 00:00:10.323 TCP 23.104.0.1:56174 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:58:41.708 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53584 10 6452 1 Summary: total flows: 160, total bytes: 496275, total packets: 1531, avg bps: 1102, avg pps: 0, avg bpp: 324 Time window: 2025-08-01 14:58:52 - 2025-08-01 15:58:51 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0034s User: 0.0011s Wall: 0.0025s flows/second: 63167.2 Runtime: 0.0026s