Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 15:59:19.662 00:00:10.372 TCP 23.104.0.1:55014 -> 1.101.0.1:3000 11 1507 1 2025-08-01 15:59:41.882 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46152 10 6452 1 2025-08-01 15:55:04.670 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-08-01 15:55:04.665 00:06:00.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 16:00:20.109 00:00:10.368 TCP 23.104.0.1:39936 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:00:42.102 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54666 10 6452 1 2025-08-01 16:01:20.511 00:00:10.366 TCP 23.104.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:01:47.785 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 16:01:47.386 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 16:01:42.313 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36526 10 6452 1 2025-08-01 16:02:20.916 00:00:10.365 TCP 23.104.0.1:43642 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:02:42.526 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43194 10 6452 1 2025-08-01 16:03:21.324 00:00:10.358 TCP 23.104.0.1:38792 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:03:42.742 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57678 10 6452 1 2025-08-01 16:04:21.725 00:00:10.329 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:04:42.967 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:37980 10 6452 1 2025-08-01 16:05:22.106 00:00:10.328 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:05:43.162 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60426 10 6452 1 2025-08-01 16:06:22.473 00:00:10.361 TCP 23.104.0.1:39756 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:06:47.870 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 16:06:48.039 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 16:06:43.381 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:53834 11 6492 1 2025-08-01 16:02:04.665 00:06:00.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 16:02:04.672 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-08-01 16:07:22.871 00:00:10.368 TCP 23.104.0.1:52326 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:07:43.603 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58506 10 6452 1 2025-08-01 16:08:23.278 00:00:10.432 TCP 23.104.0.1:37230 -> 1.101.0.1:3000 15 1926 1 2025-08-01 16:08:43.816 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60452 12 10367 1 2025-08-01 16:09:23.755 00:00:10.378 TCP 23.104.0.1:48004 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:09:44.083 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35122 10 6452 1 2025-08-01 16:10:24.169 00:00:10.368 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:10:44.252 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40316 10 6452 1 2025-08-01 16:11:24.575 00:00:10.364 TCP 23.104.0.1:37892 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:11:47.845 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 16:11:47.547 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 16:11:44.464 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55796 10 6452 1 2025-08-01 16:12:24.983 00:00:10.365 TCP 23.104.0.1:46244 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:12:44.676 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35752 10 6452 1 2025-08-01 16:13:25.388 00:00:10.436 TCP 23.104.0.1:51744 -> 1.101.0.1:3000 15 1926 1 2025-08-01 16:13:44.887 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:33550 12 10367 1 2025-08-01 16:09:04.672 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 9 601 1 2025-08-01 16:09:04.670 00:06:00.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 16:14:25.863 00:00:10.370 TCP 23.104.0.1:52884 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:14:45.143 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46348 10 6452 1 2025-08-01 16:15:26.283 00:00:10.364 TCP 23.104.0.1:44782 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:15:45.315 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45478 10 6452 1 2025-08-01 16:16:26.683 00:00:10.367 TCP 23.104.0.1:32806 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:16:47.922 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 16:16:47.937 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 16:16:45.491 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53948 10 6452 1 2025-08-01 16:17:27.102 00:00:10.364 TCP 23.104.0.1:59364 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:17:45.671 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41674 11 6492 1 2025-08-01 16:18:27.505 00:00:10.367 TCP 23.104.0.1:53900 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:18:45.842 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53282 10 6452 1 2025-08-01 16:19:27.907 00:00:10.325 TCP 23.104.0.1:41450 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:19:46.078 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59130 10 6452 1 2025-08-01 16:20:28.268 00:00:10.327 TCP 23.104.0.1:57430 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:20:46.307 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50558 10 6452 1 2025-08-01 16:16:04.670 00:06:00.012 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 16:16:04.676 00:06:00.004 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-08-01 16:21:28.637 00:00:10.364 TCP 23.104.0.1:51906 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:21:47.893 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 16:21:47.839 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 16:21:46.522 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52532 10 6452 1 2025-08-01 16:22:29.035 00:00:10.366 TCP 23.104.0.1:48418 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:22:46.736 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43034 10 6452 1 2025-08-01 16:23:29.438 00:00:10.372 TCP 23.104.0.1:49390 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:23:46.958 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6452 1 2025-08-01 16:24:29.846 00:00:10.384 TCP 23.104.0.1:51688 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:24:47.178 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59874 10 6452 1 2025-08-01 16:25:30.266 00:00:10.365 TCP 23.104.0.1:35104 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:25:47.356 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57186 10 6452 1 2025-08-01 16:26:30.667 00:00:10.378 TCP 23.104.0.1:45886 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:26:48.101 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 16:26:48.121 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 16:26:47.570 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50824 10 6452 1 2025-08-01 16:27:31.099 00:00:10.367 TCP 23.104.0.1:48102 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:27:47.781 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33238 10 6452 1 2025-08-01 16:23:04.673 00:06:00.015 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 16:23:04.679 00:06:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-08-01 16:28:31.515 00:00:10.327 TCP 23.104.0.1:46860 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:28:47.994 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43634 10 6452 1 2025-08-01 16:29:31.881 00:00:10.387 TCP 23.104.0.1:49818 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:29:48.180 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57838 10 6452 1 2025-08-01 16:30:32.304 00:00:10.359 TCP 23.104.0.1:46682 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:30:48.393 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53414 10 6452 1 2025-08-01 16:31:32.701 00:00:10.333 TCP 23.104.0.1:37694 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:31:47.888 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 16:31:48.214 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 16:31:48.566 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42622 10 6452 1 2025-08-01 16:32:33.098 00:00:10.388 TCP 23.104.0.1:53978 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:32:48.782 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54752 10 6452 1 2025-08-01 16:33:33.526 00:00:10.378 TCP 23.104.0.1:50972 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:33:48.998 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44534 10 6452 1 2025-08-01 16:34:33.946 00:00:10.369 TCP 23.104.0.1:41134 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:34:49.207 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37096 10 6452 1 2025-08-01 16:30:04.688 00:05:59.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 16:30:04.683 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 16:35:34.355 00:00:10.322 TCP 23.104.0.1:48332 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:35:49.417 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:41008 10 6452 1 2025-08-01 16:36:48.409 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 16:36:34.718 00:00:10.378 TCP 23.104.0.1:42814 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:36:48.278 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 16:36:49.621 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58756 10 6452 1 2025-08-01 16:37:35.138 00:00:10.375 TCP 23.104.0.1:51630 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:37:49.830 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57008 10 6452 1 2025-08-01 16:38:35.556 00:00:10.330 TCP 23.104.0.1:53412 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:38:50.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51940 10 6452 1 2025-08-01 16:39:35.919 00:00:10.394 TCP 23.104.0.1:54252 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:39:50.294 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33722 10 6452 1 2025-08-01 16:40:36.357 00:00:10.368 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:40:50.505 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52620 10 6452 1 2025-08-01 16:41:48.302 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 16:41:48.448 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 16:41:36.768 00:00:10.370 TCP 23.104.0.1:44084 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:41:50.724 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36698 10 6452 1 2025-08-01 16:37:04.686 00:06:00.042 TCP 179.1.22.1:179 -> 179.1.22.22:39396 9 601 1 2025-08-01 16:37:04.683 00:06:00.006 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 16:42:37.177 00:00:10.364 TCP 23.104.0.1:52718 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:42:50.950 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:57628 10 6452 1 2025-08-01 16:43:37.576 00:00:10.370 TCP 23.104.0.1:51864 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:43:51.136 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60674 10 6452 1 2025-08-01 16:44:37.987 00:00:10.323 TCP 23.104.0.1:43014 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:44:51.353 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54918 10 6452 1 2025-08-01 16:45:38.347 00:00:10.362 TCP 23.104.0.1:35220 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:45:51.567 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60302 10 6452 1 2025-08-01 16:46:48.270 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 16:46:48.227 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 16:46:38.757 00:00:10.324 TCP 23.104.0.1:40280 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:46:51.782 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 10 6452 1 2025-08-01 16:47:39.120 00:00:10.367 TCP 23.104.0.1:44462 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:47:51.993 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:57500 10 6452 1 2025-08-01 16:48:39.526 00:00:10.454 TCP 23.104.0.1:58324 -> 1.101.0.1:3000 15 1926 1 2025-08-01 16:48:52.177 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:57860 12 10365 1 2025-08-01 16:44:04.687 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 16:44:04.686 00:06:00.007 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 16:49:40.019 00:00:10.371 TCP 23.104.0.1:45460 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:49:52.375 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56322 10 6452 1 2025-08-01 16:50:40.431 00:00:10.365 TCP 23.104.0.1:51254 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:50:52.592 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46016 10 6452 1 2025-08-01 16:51:48.547 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 16:51:40.833 00:00:10.387 TCP 23.104.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:51:48.472 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 16:51:52.806 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51368 10 6452 1 2025-08-01 16:52:41.260 00:00:10.361 TCP 23.104.0.1:41218 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:52:53.036 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56886 10 6452 1 2025-08-01 16:53:41.664 00:00:10.370 TCP 23.104.0.1:33448 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:53:53.248 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37880 10 6452 1 2025-08-01 16:54:42.098 00:00:10.364 TCP 23.104.0.1:55918 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:54:53.475 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50842 10 6452 1 2025-08-01 16:55:42.505 00:00:10.366 TCP 23.104.0.1:49136 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:55:53.685 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35740 10 6452 1 2025-08-01 16:51:04.690 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 705 1 2025-08-01 16:51:04.689 00:06:00.007 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 16:56:48.713 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 16:56:48.701 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 16:56:42.915 00:00:10.338 TCP 23.104.0.1:54072 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:56:53.897 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:32938 10 6452 1 2025-08-01 16:57:43.291 00:00:10.366 TCP 23.104.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:57:54.129 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33216 10 6452 1 Summary: total flows: 160, total bytes: 502075, total packets: 1542, avg bps: 1062, avg pps: 0, avg bpp: 325 Time window: 2025-08-01 15:55:04 - 2025-08-01 16:58:04 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0033s User: 0.0017s Wall: 0.0026s flows/second: 60902.9 Runtime: 0.0026s