Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 16:58:43.694 00:00:10.361 TCP 23.104.0.1:33142 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:58:54.345 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33098 10 6452 1 2025-08-01 16:59:44.102 00:00:10.337 TCP 23.104.0.1:44216 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:59:54.556 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40906 10 6452 1 2025-08-01 17:00:44.479 00:00:10.360 TCP 23.104.0.1:46058 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:00:54.728 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42174 10 6452 1 2025-08-01 17:01:48.911 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 17:01:48.718 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 17:01:44.879 00:00:10.346 TCP 23.104.0.1:35744 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:01:54.941 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58482 10 6452 1 2025-08-01 17:02:45.266 00:00:12.219 TCP 23.104.0.1:50820 -> 1.101.0.1:3000 11 1507 1 2025-08-01 16:58:04.694 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 9 601 1 2025-08-01 17:02:55.172 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44268 10 6452 1 2025-08-01 16:58:04.689 00:06:00.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 17:03:47.548 00:00:10.373 TCP 23.104.0.1:49518 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:03:55.382 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40558 10 6452 1 2025-08-01 17:04:47.952 00:00:10.375 TCP 23.104.0.1:37084 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:04:55.596 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56406 10 6452 1 2025-08-01 17:05:48.356 00:00:10.322 TCP 23.104.0.1:38116 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:05:55.808 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6452 1 2025-08-01 17:06:48.866 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 17:06:48.863 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 17:06:48.720 00:00:10.370 TCP 23.104.0.1:34866 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:06:56.039 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43312 10 6452 1 2025-08-01 17:07:49.128 00:00:10.377 TCP 23.104.0.1:55256 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:07:56.263 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42682 10 6452 1 2025-08-01 17:08:49.545 00:00:10.368 TCP 23.104.0.1:38270 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:08:56.478 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58216 10 6452 1 2025-08-01 17:09:49.948 00:00:10.326 TCP 23.104.0.1:41736 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:05:04.691 00:06:00.007 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 17:05:04.695 00:06:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 9 601 1 2025-08-01 17:09:56.698 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36054 10 6452 1 2025-08-01 17:10:50.307 00:00:10.373 TCP 23.104.0.1:43136 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:10:56.915 00:00:10.308 TCP 1.101.0.1:3000 -> 22.102.0.1:44032 10 6452 1 2025-08-01 17:11:49.204 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 17:11:49.027 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 17:11:50.721 00:00:10.326 TCP 23.104.0.1:52264 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:11:57.263 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:32810 10 6452 1 2025-08-01 17:12:51.104 00:00:10.322 TCP 23.104.0.1:37390 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:12:57.435 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48788 10 6452 1 2025-08-01 17:13:51.467 00:00:10.363 TCP 23.104.0.1:48434 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:13:57.659 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40460 10 6452 1 2025-08-01 17:14:51.868 00:00:10.372 TCP 23.104.0.1:56166 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:14:57.872 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37446 10 6452 1 2025-08-01 17:15:52.278 00:00:10.371 TCP 23.104.0.1:45396 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:15:58.090 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52612 10 6452 1 2025-08-01 17:16:49.184 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 17:16:48.859 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 17:12:04.695 00:06:00.009 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 653 1 2025-08-01 17:12:04.692 00:06:00.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 17:16:52.690 00:00:10.372 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:16:58.257 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38950 10 6452 1 2025-08-01 17:17:53.110 00:00:10.365 TCP 23.104.0.1:47370 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:17:58.427 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53984 10 6452 1 2025-08-01 17:18:53.519 00:00:10.364 TCP 23.104.0.1:44012 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:18:58.644 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35640 10 6452 1 2025-08-01 17:19:53.922 00:00:10.384 TCP 23.104.0.1:49570 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:19:58.868 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44846 10 6452 1 2025-08-01 17:20:54.342 00:00:10.362 TCP 23.104.0.1:40916 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:20:59.084 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40424 10 6452 1 2025-08-01 17:21:49.221 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 17:21:49.348 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 17:21:54.745 00:00:10.365 TCP 23.104.0.1:40708 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:21:59.299 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37308 10 6452 1 2025-08-01 17:22:55.148 00:00:10.363 TCP 23.104.0.1:41900 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:22:59.516 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6452 1 2025-08-01 17:23:55.552 00:00:10.361 TCP 23.104.0.1:59700 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:19:04.701 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 17:19:04.697 00:06:00.010 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 17:23:59.733 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43254 10 6452 1 2025-08-01 17:24:55.953 00:00:10.327 TCP 23.104.0.1:37386 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:24:59.952 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59338 10 6452 1 2025-08-01 17:25:56.321 00:00:10.364 TCP 23.104.0.1:48114 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:26:00.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49638 10 6452 1 2025-08-01 17:26:49.681 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 17:26:49.649 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 17:26:56.724 00:00:10.373 TCP 23.104.0.1:60164 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:27:00.397 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56092 10 6452 1 2025-08-01 17:27:57.133 00:00:10.363 TCP 23.104.0.1:49280 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:28:00.575 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41440 10 6452 1 2025-08-01 17:28:57.545 00:00:10.362 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:29:00.754 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40660 10 6452 1 2025-08-01 17:30:00.970 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46668 10 6452 1 2025-08-01 17:29:57.971 00:00:10.374 TCP 23.104.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:26:04.700 00:06:00.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 17:26:04.702 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-01 17:30:58.382 00:00:10.365 TCP 23.104.0.1:37924 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:31:01.197 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56910 10 6452 1 2025-08-01 17:31:49.338 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 17:31:49.396 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 17:32:01.409 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52456 10 6452 1 2025-08-01 17:31:58.793 00:00:10.366 TCP 23.104.0.1:40582 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:33:01.625 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:56170 10 6452 1 2025-08-01 17:32:59.204 00:00:10.366 TCP 23.104.0.1:60684 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:34:01.796 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53120 10 6452 1 2025-08-01 17:33:59.622 00:00:10.383 TCP 23.104.0.1:55546 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:35:00.062 00:00:10.371 TCP 23.104.0.1:41892 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:35:02.006 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48270 10 6452 1 2025-08-01 17:36:00.485 00:00:10.367 TCP 23.104.0.1:50452 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:36:02.181 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33134 10 6452 1 2025-08-01 17:36:49.565 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 17:36:49.467 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 17:37:00.886 00:00:10.380 TCP 23.104.0.1:46712 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:37:02.406 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52938 10 6452 1 2025-08-01 17:33:04.701 00:06:00.009 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 17:33:04.706 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 9 601 1 2025-08-01 17:38:01.306 00:00:10.369 TCP 23.104.0.1:41812 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:38:02.625 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49514 10 6452 1 2025-08-01 17:39:02.847 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42154 10 6452 1 2025-08-01 17:39:01.715 00:00:10.370 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:40:03.078 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41584 10 6452 1 2025-08-01 17:40:02.122 00:00:10.367 TCP 23.104.0.1:48730 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:41:03.300 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37184 10 6452 1 2025-08-01 17:41:02.535 00:00:10.319 TCP 23.104.0.1:56496 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:41:49.466 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 17:41:49.628 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 17:42:03.510 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42020 10 6452 1 2025-08-01 17:42:02.897 00:00:10.328 TCP 23.104.0.1:46710 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:43:03.277 00:00:10.322 TCP 23.104.0.1:51900 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:43:03.683 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49030 10 6452 1 2025-08-01 17:44:03.637 00:00:10.446 TCP 23.104.0.1:56742 -> 1.101.0.1:3000 15 1926 1 2025-08-01 17:44:03.896 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:42712 12 10365 1 2025-08-01 17:40:04.705 00:06:00.008 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 17:40:04.708 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 17:45:04.127 00:00:10.365 TCP 23.104.0.1:42812 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:45:04.137 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55460 10 6452 1 2025-08-01 17:46:04.533 00:00:10.329 TCP 23.104.0.1:35866 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:46:04.356 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47018 10 6452 1 2025-08-01 17:46:50.408 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 17:46:50.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 17:47:04.578 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43332 10 6452 1 2025-08-01 17:47:04.917 00:00:10.402 TCP 23.104.0.1:41492 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:48:04.794 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54100 10 6452 1 2025-08-01 17:48:05.360 00:00:10.359 TCP 23.104.0.1:39688 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:49:05.001 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:52716 12 10367 1 2025-08-01 17:49:05.758 00:00:10.449 TCP 23.104.0.1:55010 -> 1.101.0.1:3000 15 1926 1 2025-08-01 17:50:05.203 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33548 10 6452 1 2025-08-01 17:50:06.250 00:00:10.368 TCP 23.104.0.1:39574 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:51:05.417 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:40624 10 6452 1 2025-08-01 17:51:06.651 00:00:10.326 TCP 23.104.0.1:59252 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:51:49.688 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 17:51:49.915 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 17:47:04.705 00:06:00.010 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 17:47:04.711 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 17:52:05.583 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45334 10 6452 1 2025-08-01 17:52:07.016 00:00:10.366 TCP 23.104.0.1:43566 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:53:05.798 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47998 10 6452 1 2025-08-01 17:53:07.418 00:00:10.368 TCP 23.104.0.1:36544 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:54:06.010 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58412 10 6452 1 2025-08-01 17:54:07.822 00:00:10.366 TCP 23.104.0.1:57722 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:55:06.216 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50888 10 6452 1 2025-08-01 17:55:08.226 00:00:10.369 TCP 23.104.0.1:36374 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:56:06.436 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43710 10 6452 1 2025-08-01 17:56:08.630 00:00:10.327 TCP 23.104.0.1:57338 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:56:50.085 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 17:56:50.024 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 17:57:06.611 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43664 10 6452 1 2025-08-01 17:57:08.993 00:00:10.367 TCP 23.104.0.1:43756 -> 1.101.0.1:3000 11 1507 1 2025-08-01 17:58:06.780 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59410 10 6452 1 2025-08-01 17:58:09.401 00:00:10.368 TCP 23.104.0.1:38218 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 503898, total packets: 1527, avg bps: 1115, avg pps: 0, avg bpp: 329 Time window: 2025-08-01 16:58:04 - 2025-08-01 17:58:19 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0034s User: 0.0009s Wall: 0.0027s flows/second: 58370.8 Runtime: 0.0028s