Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 12:58:47.352 00:00:10.364 TCP 23.104.0.1:45650 -> 1.101.0.1:3000 11 1507 1 2025-08-02 12:54:05.184 00:06:00.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 12:54:05.189 00:06:00.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 12:59:19.576 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55574 10 6452 1 2025-08-02 12:59:47.754 00:00:10.390 TCP 23.104.0.1:52240 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:00:19.753 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48336 10 6452 1 2025-08-02 13:00:48.181 00:00:10.365 TCP 23.104.0.1:46178 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:01:19.975 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34644 10 6452 1 2025-08-02 13:01:48.584 00:00:10.360 TCP 23.104.0.1:47280 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:02:12.848 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 13:02:12.746 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 13:02:20.211 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58968 10 6452 1 2025-08-02 13:02:48.984 00:00:10.367 TCP 23.104.0.1:37502 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:03:20.384 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48822 12 10365 1 2025-08-02 13:03:49.390 00:00:10.443 TCP 23.104.0.1:45236 -> 1.101.0.1:3000 15 1926 1 2025-08-02 13:04:20.624 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57756 10 6452 1 2025-08-02 13:04:49.876 00:00:10.320 TCP 23.104.0.1:45914 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:05:20.842 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33912 10 6452 1 2025-08-02 13:05:50.253 00:00:10.327 TCP 23.104.0.1:36232 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:01:05.187 00:06:00.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 13:01:05.189 00:06:00.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 13:06:21.084 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58832 10 6452 1 2025-08-02 13:06:50.615 00:00:10.368 TCP 23.104.0.1:59968 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:07:12.887 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 13:07:12.973 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 13:07:21.293 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45094 11 6504 1 2025-08-02 13:07:51.024 00:00:10.366 TCP 23.104.0.1:44130 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:08:21.516 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51726 10 6452 1 2025-08-02 13:08:51.425 00:00:10.361 TCP 23.104.0.1:41660 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:09:21.727 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36818 10 6452 1 2025-08-02 13:09:51.826 00:00:10.362 TCP 23.104.0.1:34424 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:10:21.900 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50272 10 6452 1 2025-08-02 13:10:52.226 00:00:10.369 TCP 23.104.0.1:47754 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:11:22.117 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47876 10 6452 1 2025-08-02 13:11:52.631 00:00:10.367 TCP 23.104.0.1:40124 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:12:12.881 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 13:12:13.184 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 13:12:22.334 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34994 10 6452 1 2025-08-02 13:12:53.031 00:00:10.361 TCP 23.104.0.1:49806 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:08:05.191 00:06:00.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 13:08:05.188 00:06:00.137 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 13:13:22.545 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-08-02 13:13:53.432 00:00:10.367 TCP 23.104.0.1:43144 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:14:22.764 00:00:15.213 TCP 1.101.0.1:3000 -> 22.102.0.1:54138 10 6452 1 2025-08-02 13:14:53.839 00:00:10.386 TCP 23.104.0.1:40360 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:15:28.030 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36626 10 6452 1 2025-08-02 13:15:54.266 00:00:10.359 TCP 23.104.0.1:59592 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:16:28.239 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33138 10 6452 1 2025-08-02 13:16:54.665 00:00:10.417 TCP 23.104.0.1:44762 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:17:13.069 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 13:17:13.249 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 13:17:28.454 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32946 10 6452 1 2025-08-02 13:17:55.120 00:00:10.363 TCP 23.104.0.1:42066 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:18:28.626 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56154 10 6452 1 2025-08-02 13:18:55.523 00:00:10.322 TCP 23.104.0.1:34494 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:19:28.844 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40522 10 6452 1 2025-08-02 13:19:55.883 00:00:10.369 TCP 23.104.0.1:45426 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:15:05.195 00:06:00.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 13:15:05.193 00:06:00.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 13:20:29.080 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55464 12 6556 1 2025-08-02 13:20:56.290 00:00:10.322 TCP 23.104.0.1:44848 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:21:29.293 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55858 10 6452 1 2025-08-02 13:21:56.647 00:00:10.364 TCP 23.104.0.1:48620 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:22:13.304 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 13:22:13.169 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 13:22:29.498 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6452 1 2025-08-02 13:22:57.055 00:00:10.367 TCP 23.104.0.1:48726 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:23:29.712 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:46272 10 6452 1 2025-08-02 13:23:57.462 00:00:10.320 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:24:29.922 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51976 10 6452 1 2025-08-02 13:24:57.825 00:00:10.346 TCP 23.104.0.1:33402 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:25:30.139 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36614 10 6452 1 2025-08-02 13:25:58.224 00:00:10.375 TCP 23.104.0.1:52550 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:26:30.353 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54320 10 6452 1 2025-08-02 13:22:05.193 00:06:00.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 13:22:05.195 00:06:00.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 13:26:58.636 00:00:10.371 TCP 23.104.0.1:37638 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:27:13.431 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 13:27:13.487 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 13:27:30.535 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34954 10 6452 1 2025-08-02 13:27:59.047 00:00:10.372 TCP 23.104.0.1:43404 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:28:30.749 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48126 10 6452 1 2025-08-02 13:28:59.455 00:00:10.324 TCP 23.104.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:29:30.961 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37500 10 6452 1 2025-08-02 13:29:59.823 00:00:10.418 TCP 23.104.0.1:48508 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:30:31.178 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39486 10 6452 1 2025-08-02 13:31:00.287 00:00:10.381 TCP 23.104.0.1:43458 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:31:31.353 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55098 10 6452 1 2025-08-02 13:32:00.696 00:00:10.368 TCP 23.104.0.1:60920 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:32:13.507 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 13:32:13.290 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 13:32:31.565 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56494 10 6452 1 2025-08-02 13:33:01.107 00:00:10.368 TCP 23.104.0.1:60806 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:33:31.780 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46394 10 6452 1 2025-08-02 13:29:05.203 00:06:00.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 13:29:05.201 00:06:00.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 13:34:01.512 00:00:10.326 TCP 23.104.0.1:57960 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:34:31.992 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53986 10 6452 1 2025-08-02 13:35:01.872 00:00:10.372 TCP 23.104.0.1:52918 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:35:32.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36874 10 6452 1 2025-08-02 13:36:02.281 00:00:10.320 TCP 23.104.0.1:42080 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:36:32.417 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38552 10 6452 1 2025-08-02 13:37:13.623 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 13:37:13.600 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 13:37:02.641 00:00:10.367 TCP 23.104.0.1:48198 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:37:32.637 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42390 10 6452 1 2025-08-02 13:38:03.054 00:00:10.366 TCP 23.104.0.1:34908 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:38:32.848 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35716 10 6452 1 2025-08-02 13:39:03.462 00:00:10.368 TCP 23.104.0.1:54742 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:39:33.082 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53804 10 6452 1 2025-08-02 13:40:03.868 00:00:10.328 TCP 23.104.0.1:60144 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:40:33.300 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50688 10 6452 1 2025-08-02 13:36:05.204 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 13:36:05.206 00:06:00.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 13:41:04.232 00:00:10.363 TCP 23.104.0.1:56354 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:41:33.519 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55726 10 6452 1 2025-08-02 13:42:13.703 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 13:42:04.635 00:00:10.363 TCP 23.104.0.1:37870 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:42:13.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 13:42:33.741 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57304 10 6452 1 2025-08-02 13:43:05.053 00:00:10.366 TCP 23.104.0.1:59178 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:43:33.952 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-08-02 13:44:05.462 00:00:10.328 TCP 23.104.0.1:59488 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:44:34.186 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60920 10 6452 1 2025-08-02 13:45:05.833 00:00:10.393 TCP 23.104.0.1:34400 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:45:34.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47850 10 6452 1 2025-08-02 13:46:06.263 00:00:10.329 TCP 23.104.0.1:39496 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:46:34.616 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41786 10 6452 1 2025-08-02 13:47:06.625 00:00:10.326 TCP 23.104.0.1:47530 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:47:13.789 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 13:47:13.741 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 13:47:34.828 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36902 10 6452 1 2025-08-02 13:43:05.203 00:06:00.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 13:43:05.206 00:06:00.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 13:48:06.987 00:00:10.332 TCP 23.104.0.1:57092 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:48:35.070 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47454 10 6452 1 2025-08-02 13:49:07.353 00:00:10.358 TCP 23.104.0.1:58976 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:49:35.283 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41140 10 6452 1 2025-08-02 13:50:07.755 00:00:10.382 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:50:35.456 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53248 10 6452 1 2025-08-02 13:51:08.180 00:00:10.361 TCP 23.104.0.1:39850 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:51:35.671 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43616 10 6452 1 2025-08-02 13:52:13.867 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 13:52:13.865 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 13:52:08.582 00:00:10.369 TCP 23.104.0.1:44168 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:52:35.888 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54890 10 6452 1 2025-08-02 13:53:08.995 00:00:10.324 TCP 23.104.0.1:60740 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:53:36.100 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59710 10 6452 1 2025-08-02 13:54:09.357 00:00:10.364 TCP 23.104.0.1:39370 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:54:36.308 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58062 10 6452 1 2025-08-02 13:50:05.207 00:06:00.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 13:50:05.209 00:06:00.138 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 13:55:09.763 00:00:10.379 TCP 23.104.0.1:39434 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:55:36.525 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32838 10 6452 1 2025-08-02 13:56:10.178 00:00:10.365 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:56:36.740 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59254 10 6452 1 2025-08-02 13:57:13.923 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 13:57:13.856 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 13:57:10.581 00:00:10.364 TCP 23.104.0.1:47178 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:57:36.916 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41744 10 6452 1 2025-08-02 13:58:10.983 00:00:10.723 TCP 23.104.0.1:50238 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:58:37.130 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55836 10 6452 1 Summary: total flows: 162, total bytes: 503574, total packets: 1593, avg bps: 1037, avg pps: 0, avg bpp: 316 Time window: 2025-08-02 12:54:05 - 2025-08-02 13:58:47 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0021s User: 0.0028s Wall: 0.0031s flows/second: 51510.7 Runtime: 0.0032s