Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 19:58:57.543 00:00:10.368 TCP 23.104.0.1:36346 -> 1.101.0.1:3000 11 1507 1 2025-08-01 19:59:32.193 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33802 10 6452 1 2025-08-01 19:59:57.949 00:00:10.367 TCP 23.104.0.1:40198 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:00:32.404 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50804 10 6452 1 2025-08-01 20:00:58.352 00:00:10.365 TCP 23.104.0.1:36192 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:01:32.623 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54582 10 6452 1 2025-08-01 20:01:52.064 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 20:01:52.506 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 20:01:58.756 00:00:10.384 TCP 23.104.0.1:52972 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:02:32.838 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52404 10 6452 1 2025-08-01 20:02:59.178 00:00:10.372 TCP 23.104.0.1:50336 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:03:33.074 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51520 10 6452 1 2025-08-01 20:03:59.594 00:00:10.377 TCP 23.104.0.1:56092 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:04:33.288 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50746 10 6452 1 2025-08-01 20:00:04.750 00:06:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 20:00:04.750 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 20:05:00.013 00:00:10.369 TCP 23.104.0.1:43638 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:05:33.506 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40896 10 6452 1 2025-08-01 20:06:00.422 00:00:10.333 TCP 23.104.0.1:51156 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:06:33.715 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47218 10 6452 1 2025-08-01 20:06:52.587 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 20:06:52.632 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 20:07:00.805 00:00:10.372 TCP 23.104.0.1:48574 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:07:33.896 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39364 10 6452 1 2025-08-01 20:08:01.214 00:00:10.366 TCP 23.104.0.1:60986 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:08:34.117 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:33868 12 10365 1 2025-08-01 20:09:01.618 00:00:10.733 TCP 23.104.0.1:34184 -> 1.101.0.1:3000 15 1926 1 2025-08-01 20:09:34.365 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53752 10 6452 1 2025-08-01 20:10:02.387 00:00:10.365 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:10:34.581 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48848 10 6452 1 2025-08-01 20:11:02.788 00:00:10.371 TCP 23.104.0.1:59678 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:11:34.808 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36488 10 6452 1 2025-08-01 20:11:52.630 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 20:11:52.812 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 20:07:04.753 00:06:00.012 TCP 179.1.22.1:179 -> 179.1.22.22:39396 9 601 1 2025-08-01 20:07:04.752 00:06:00.015 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 20:12:03.193 00:00:10.368 TCP 23.104.0.1:49656 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:12:35.034 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51564 10 6452 1 2025-08-01 20:13:03.597 00:00:10.371 TCP 23.104.0.1:49054 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:13:35.204 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37540 10 6452 1 2025-08-01 20:14:04.004 00:00:10.365 TCP 23.104.0.1:47060 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:14:35.411 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41712 10 6452 1 2025-08-01 20:15:04.405 00:00:10.361 TCP 23.104.0.1:46520 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:15:35.624 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47572 10 6452 1 2025-08-01 20:16:04.808 00:00:10.334 TCP 23.104.0.1:57064 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:16:35.810 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 10 6452 1 2025-08-01 20:16:52.671 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 20:16:52.810 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 20:17:05.182 00:00:10.359 TCP 23.104.0.1:39464 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:17:36.027 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50598 10 6452 1 2025-08-01 20:18:05.585 00:00:10.360 TCP 23.104.0.1:59304 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:18:36.202 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43400 10 6452 1 2025-08-01 20:14:04.766 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-08-01 20:14:04.754 00:06:00.015 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 20:19:05.991 00:00:10.327 TCP 23.104.0.1:52982 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:19:36.379 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35950 10 6452 1 2025-08-01 20:20:06.354 00:00:10.363 TCP 23.104.0.1:56722 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:20:36.584 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54578 10 6452 1 2025-08-01 20:21:06.756 00:00:10.381 TCP 23.104.0.1:32796 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:21:36.802 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58070 10 6452 1 2025-08-01 20:21:52.947 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 20:21:52.786 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 20:22:07.176 00:00:10.325 TCP 23.104.0.1:45746 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:22:37.015 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43260 10 6452 1 2025-08-01 20:23:07.540 00:00:10.322 TCP 23.104.0.1:56180 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:23:37.228 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51940 10 6452 1 2025-08-01 20:24:07.899 00:00:10.369 TCP 23.104.0.1:36114 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:24:37.441 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47292 10 6452 1 2025-08-01 20:25:08.308 00:00:10.369 TCP 23.104.0.1:35134 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:25:37.654 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40868 10 6452 1 2025-08-01 20:21:04.768 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-08-01 20:21:04.756 00:06:00.013 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 20:26:08.715 00:00:10.327 TCP 23.104.0.1:55018 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:26:37.869 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52516 10 6452 1 2025-08-01 20:26:52.762 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 20:26:52.786 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 20:27:09.104 00:00:10.366 TCP 23.104.0.1:51490 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:27:38.108 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49602 10 6452 1 2025-08-01 20:28:09.507 00:00:10.367 TCP 23.104.0.1:60666 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:28:38.318 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50978 10 6452 1 2025-08-01 20:29:09.912 00:00:10.364 TCP 23.104.0.1:56796 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:29:38.530 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55138 10 6452 1 2025-08-01 20:30:10.313 00:00:10.368 TCP 23.104.0.1:55112 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:30:38.740 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53126 10 6452 1 2025-08-01 20:31:10.718 00:00:10.372 TCP 23.104.0.1:39528 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:31:38.909 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45692 10 6452 1 2025-08-01 20:31:52.760 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 20:31:52.832 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 20:32:11.125 00:00:10.326 TCP 23.104.0.1:46082 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:32:39.114 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46616 10 6452 1 2025-08-01 20:28:04.759 00:06:00.013 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 20:28:04.769 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 9 601 1 2025-08-01 20:33:11.489 00:00:10.328 TCP 23.104.0.1:40936 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:33:39.338 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54554 10 6452 1 2025-08-01 20:34:11.848 00:00:10.332 TCP 23.104.0.1:33496 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:34:39.578 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44496 10 6452 1 2025-08-01 20:35:12.223 00:00:10.365 TCP 23.104.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:35:39.787 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42482 10 6452 1 2025-08-01 20:36:12.634 00:00:10.365 TCP 23.104.0.1:55884 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:36:40.002 00:00:10.495 TCP 1.101.0.1:3000 -> 22.102.0.1:34750 10 6452 1 2025-08-01 20:36:53.043 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 20:36:53.063 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 20:37:13.057 00:00:10.362 TCP 23.104.0.1:37762 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:37:40.535 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39444 10 6452 1 2025-08-01 20:38:13.453 00:00:10.320 TCP 23.104.0.1:45788 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:38:40.709 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56686 10 6452 1 2025-08-01 20:39:13.815 00:00:10.366 TCP 23.104.0.1:39996 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:39:40.923 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:34590 10 6452 1 2025-08-01 20:35:04.764 00:06:00.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 20:35:04.769 00:06:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 9 601 1 2025-08-01 20:40:14.219 00:00:10.362 TCP 23.104.0.1:54580 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:40:41.106 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57204 10 6452 1 2025-08-01 20:41:14.618 00:00:10.364 TCP 23.104.0.1:58332 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:41:41.322 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46044 10 6452 1 2025-08-01 20:41:53.641 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 20:41:53.394 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 20:42:15.026 00:00:10.426 TCP 23.104.0.1:55722 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:42:41.533 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36094 10 6452 1 2025-08-01 20:43:15.491 00:00:10.368 TCP 23.104.0.1:43754 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:43:41.743 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55272 10 6452 1 2025-08-01 20:44:15.896 00:00:10.371 TCP 23.104.0.1:59056 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:44:41.955 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:39764 12 6556 1 2025-08-01 20:45:16.307 00:00:10.365 TCP 23.104.0.1:47808 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:45:42.188 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39954 10 6452 1 2025-08-01 20:46:16.712 00:00:10.363 TCP 23.104.0.1:53280 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:46:53.433 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 20:46:42.364 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44726 10 6452 1 2025-08-01 20:46:53.356 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 20:42:04.769 00:06:00.044 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-01 20:42:04.767 00:06:00.007 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 20:47:17.113 00:00:10.362 TCP 23.104.0.1:49032 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:47:42.543 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46416 10 6452 1 2025-08-01 20:48:17.513 00:00:10.324 TCP 23.104.0.1:38074 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:48:42.754 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44630 10 6452 1 2025-08-01 20:49:17.875 00:00:10.372 TCP 23.104.0.1:36940 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:49:42.965 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56522 10 6452 1 2025-08-01 20:50:18.286 00:00:10.325 TCP 23.104.0.1:43308 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:50:43.198 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43940 10 6452 1 2025-08-01 20:51:18.649 00:00:10.369 TCP 23.104.0.1:47096 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:51:43.409 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58664 10 6452 1 2025-08-01 20:51:53.430 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 20:51:53.490 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 20:52:19.059 00:00:10.321 TCP 23.104.0.1:58088 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:52:43.622 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39744 10 6452 1 2025-08-01 20:53:19.420 00:00:10.361 TCP 23.104.0.1:35366 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:53:43.801 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44408 10 6452 1 2025-08-01 20:49:04.771 00:06:00.004 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 20:49:04.771 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 20:54:19.821 00:00:10.355 TCP 23.104.0.1:38756 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:54:44.025 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58030 10 6452 1 2025-08-01 20:55:20.217 00:00:10.363 TCP 23.104.0.1:53506 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:55:44.230 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51888 10 6452 1 2025-08-01 20:56:20.627 00:00:10.364 TCP 23.104.0.1:55018 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:56:53.716 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 20:56:44.451 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57860 10 6452 1 2025-08-01 20:56:53.765 00:00:00.008 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 20:57:21.036 00:00:10.364 TCP 23.104.0.1:45410 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:57:44.625 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55120 10 6452 1 2025-08-01 20:58:21.444 00:00:10.370 TCP 23.104.0.1:57824 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 493788, total packets: 1524, avg bps: 1105, avg pps: 0, avg bpp: 324 Time window: 2025-08-01 19:58:57 - 2025-08-01 20:58:31 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0025s User: 0.0008s Wall: 0.0017s flows/second: 92765.9 Runtime: 0.0017s