Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 13:59:11.741 00:00:10.367 TCP 23.104.0.1:55350 -> 1.101.0.1:3000 11 1507 1 2025-08-02 13:59:37.354 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43268 10 6452 1 2025-08-02 14:00:12.148 00:00:10.365 TCP 23.104.0.1:34702 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:00:37.568 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33736 10 6452 1 2025-08-02 14:01:12.550 00:00:10.332 TCP 23.104.0.1:49510 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:01:37.735 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6452 1 2025-08-02 13:57:05.214 00:06:00.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 13:57:05.212 00:06:00.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 14:02:14.451 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 14:02:14.686 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 14:02:12.936 00:00:10.393 TCP 23.104.0.1:60062 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:02:37.953 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35388 12 6556 1 2025-08-02 14:03:13.377 00:00:10.386 TCP 23.104.0.1:42216 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:03:38.189 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50776 10 6452 1 2025-08-02 14:04:13.800 00:00:10.365 TCP 23.104.0.1:45200 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:04:38.409 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59432 10 6452 1 2025-08-02 14:05:14.200 00:00:10.368 TCP 23.104.0.1:60570 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:05:38.628 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38272 10 6452 1 2025-08-02 14:06:14.604 00:00:10.365 TCP 23.104.0.1:34254 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:06:38.838 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49262 10 6452 1 2025-08-02 14:07:14.156 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 14:07:14.029 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 14:07:15.006 00:00:10.325 TCP 23.104.0.1:51950 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:07:39.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50536 10 6452 1 2025-08-02 14:08:15.366 00:00:10.364 TCP 23.104.0.1:36952 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:08:39.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43752 10 6452 1 2025-08-02 14:04:05.213 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 14:04:05.216 00:06:00.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 14:09:15.780 00:00:10.368 TCP 23.104.0.1:53506 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:09:39.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59790 10 6452 1 2025-08-02 14:10:16.188 00:00:10.321 TCP 23.104.0.1:37958 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:10:39.726 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6452 1 2025-08-02 14:11:16.550 00:00:10.364 TCP 23.104.0.1:38758 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:11:39.895 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46518 10 6452 1 2025-08-02 14:12:14.331 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 14:12:14.329 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 14:12:16.955 00:00:10.327 TCP 23.104.0.1:47518 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:12:40.119 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47322 10 6452 1 2025-08-02 14:13:17.318 00:00:10.369 TCP 23.104.0.1:49024 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:13:40.334 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57856 10 6452 1 2025-08-02 14:14:17.729 00:00:10.372 TCP 23.104.0.1:45400 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:14:40.569 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45642 10 6452 1 2025-08-02 14:15:18.136 00:00:10.364 TCP 23.104.0.1:34904 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:15:40.787 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51426 10 6452 1 2025-08-02 14:11:05.217 00:06:00.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 14:11:05.216 00:06:00.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 14:16:18.534 00:00:10.366 TCP 23.104.0.1:52872 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:16:40.955 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48994 10 6452 1 2025-08-02 14:17:14.383 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 14:17:14.282 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 14:17:18.949 00:00:10.367 TCP 23.104.0.1:42278 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:17:41.178 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60270 10 6452 1 2025-08-02 14:18:19.354 00:00:10.366 TCP 23.104.0.1:51320 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:18:41.352 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34936 10 6452 1 2025-08-02 14:19:19.761 00:00:10.383 TCP 23.104.0.1:54548 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:19:41.524 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47664 10 6452 1 2025-08-02 14:20:20.188 00:00:10.332 TCP 23.104.0.1:37720 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:20:41.755 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52918 10 6452 1 2025-08-02 14:21:20.562 00:00:10.366 TCP 23.104.0.1:52068 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:21:41.964 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:42460 10 6452 1 2025-08-02 14:22:14.659 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 14:22:14.605 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 14:22:20.963 00:00:10.334 TCP 23.104.0.1:40534 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:22:42.143 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48822 10 6452 1 2025-08-02 14:18:05.219 00:06:00.137 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 14:18:05.220 00:06:00.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 14:23:21.335 00:00:10.369 TCP 23.104.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:23:42.316 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42990 10 6452 1 2025-08-02 14:24:21.747 00:00:10.361 TCP 23.104.0.1:37704 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:24:42.536 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37508 10 6452 1 2025-08-02 14:25:22.141 00:00:10.361 TCP 23.104.0.1:46932 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:25:42.749 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48346 10 6452 1 2025-08-02 14:26:22.536 00:00:10.321 TCP 23.104.0.1:33294 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:26:42.966 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:57444 10 6452 1 2025-08-02 14:27:14.378 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 14:27:14.478 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 14:27:22.902 00:00:10.370 TCP 23.104.0.1:58202 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:27:43.155 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41422 10 6452 1 2025-08-02 14:28:23.313 00:00:10.365 TCP 23.104.0.1:35038 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:28:43.371 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57396 10 6452 1 2025-08-02 14:29:23.720 00:00:10.372 TCP 23.104.0.1:37454 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:29:43.585 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51198 10 6452 1 2025-08-02 14:25:05.221 00:06:00.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 14:25:05.219 00:06:00.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 14:30:24.134 00:00:10.367 TCP 23.104.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:30:43.811 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 10 6452 1 2025-08-02 14:31:24.545 00:00:10.412 TCP 23.104.0.1:49660 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:31:44.028 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33126 10 6452 1 2025-08-02 14:32:14.710 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 14:32:14.546 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 14:32:25.001 00:00:10.368 TCP 23.104.0.1:34426 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:32:44.239 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45482 10 6452 1 2025-08-02 14:33:25.418 00:00:10.369 TCP 23.104.0.1:33668 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:33:44.449 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:57490 10 6452 1 2025-08-02 14:34:25.829 00:00:10.344 TCP 23.104.0.1:40342 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:34:44.616 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37432 10 6452 1 2025-08-02 14:35:26.211 00:00:10.372 TCP 23.104.0.1:60850 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:35:44.785 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40942 10 6452 1 2025-08-02 14:36:26.613 00:00:10.368 TCP 23.104.0.1:59326 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:36:44.995 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54474 10 6452 1 2025-08-02 14:32:05.223 00:06:00.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 14:32:05.225 00:06:00.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 14:37:15.186 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 14:37:15.059 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 14:37:27.021 00:00:10.414 TCP 23.104.0.1:55830 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:37:45.225 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46310 10 6452 1 2025-08-02 14:38:27.473 00:00:10.365 TCP 23.104.0.1:55070 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:38:45.451 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46820 10 6452 1 2025-08-02 14:39:27.880 00:00:10.328 TCP 23.104.0.1:36564 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:39:45.668 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48098 10 6452 1 2025-08-02 14:40:28.250 00:00:10.366 TCP 23.104.0.1:50234 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:40:45.877 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54674 12 6556 1 2025-08-02 14:41:28.646 00:00:10.371 TCP 23.104.0.1:38524 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:41:46.106 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42778 10 6452 1 2025-08-02 14:42:14.804 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 14:42:14.861 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 14:42:29.059 00:00:10.368 TCP 23.104.0.1:46822 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:42:46.330 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38332 10 6452 1 2025-08-02 14:43:29.465 00:00:10.366 TCP 23.104.0.1:52546 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:43:46.543 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51502 10 6452 1 2025-08-02 14:39:05.225 00:06:00.136 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 14:39:05.228 00:06:00.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 14:44:29.868 00:00:10.364 TCP 23.104.0.1:33232 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:44:46.755 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56068 10 6452 1 2025-08-02 14:45:30.274 00:00:10.320 TCP 23.104.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:45:46.970 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45798 13 6608 1 2025-08-02 14:46:30.630 00:00:10.359 TCP 23.104.0.1:35112 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:46:47.180 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54512 10 6452 1 2025-08-02 14:47:15.640 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 14:47:15.181 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 14:47:31.029 00:00:10.364 TCP 23.104.0.1:36148 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:47:47.401 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6452 1 2025-08-02 14:48:31.432 00:00:10.324 TCP 23.104.0.1:43234 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:48:47.616 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34450 10 6452 1 2025-08-02 14:49:31.804 00:00:10.335 TCP 23.104.0.1:51550 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:49:47.803 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43760 10 6452 1 2025-08-02 14:50:32.184 00:00:10.321 TCP 23.104.0.1:51016 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:50:47.978 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:33534 10 6452 1 2025-08-02 14:46:05.230 00:06:00.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 14:46:05.227 00:06:00.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 14:51:32.539 00:00:10.344 TCP 23.104.0.1:54274 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:51:48.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42572 10 6452 1 2025-08-02 14:52:15.035 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 14:52:15.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 14:52:32.902 00:00:10.368 TCP 23.104.0.1:37884 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:52:48.385 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40914 10 6452 1 2025-08-02 14:53:33.309 00:00:10.365 TCP 23.104.0.1:47418 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:53:48.599 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:34992 10 6452 1 2025-08-02 14:54:33.711 00:00:10.374 TCP 23.104.0.1:60694 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:54:48.806 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44752 10 6452 1 2025-08-02 14:55:34.125 00:00:10.368 TCP 23.104.0.1:40970 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:55:49.023 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49882 10 6452 1 2025-08-02 14:56:34.540 00:00:10.375 TCP 23.104.0.1:40714 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:56:49.229 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50320 10 6452 1 2025-08-02 14:57:14.987 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 14:57:15.244 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 14:57:34.965 00:00:10.373 TCP 23.104.0.1:55284 -> 1.101.0.1:3000 11 1507 1 2025-08-02 14:57:49.443 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36272 10 6452 1 2025-08-02 14:53:05.229 00:06:00.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 14:53:05.232 00:06:00.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 14:58:35.375 00:00:10.364 TCP 23.104.0.1:42986 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 492998, total packets: 1581, avg bps: 1060, avg pps: 0, avg bpp: 311 Time window: 2025-08-02 13:57:05 - 2025-08-02 14:59:05 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0039s User: 0.0008s Wall: 0.0030s flows/second: 54484.7 Runtime: 0.0030s