Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 15:58:59.754 00:00:10.391 TCP 23.104.0.1:35500 -> 1.101.0.1:3000 11 1507 1 2025-08-02 15:59:02.247 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39568 10 6452 1 2025-08-02 16:00:00.180 00:00:10.367 TCP 23.104.0.1:59332 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:00:02.458 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57450 10 6452 1 2025-08-02 15:56:05.252 00:06:00.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 15:56:05.249 00:06:00.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 16:01:00.587 00:00:10.366 TCP 23.104.0.1:58304 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:01:02.666 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32774 10 6452 1 2025-08-02 16:02:00.995 00:00:10.335 TCP 23.104.0.1:42482 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:02:02.884 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34208 10 6452 1 2025-08-02 16:02:16.470 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 16:02:16.392 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 16:03:01.371 00:00:10.372 TCP 23.104.0.1:33026 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:03:03.101 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56164 10 6452 1 2025-08-02 16:04:03.316 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59028 10 6452 1 2025-08-02 16:04:01.783 00:00:10.365 TCP 23.104.0.1:41812 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:05:02.190 00:00:10.325 TCP 23.104.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:05:03.492 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52732 10 6452 1 2025-08-02 16:06:02.562 00:00:10.330 TCP 23.104.0.1:49008 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:06:03.703 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42402 12 6556 1 2025-08-02 16:07:02.925 00:00:10.385 TCP 23.104.0.1:55622 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:07:16.484 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 16:07:03.916 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43932 10 6452 1 2025-08-02 16:07:16.502 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 16:03:05.254 00:06:00.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 16:03:05.251 00:06:00.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 16:08:03.348 00:00:10.367 TCP 23.104.0.1:55964 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:08:04.133 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53288 10 6452 1 2025-08-02 16:09:04.308 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33652 10 6452 1 2025-08-02 16:09:03.754 00:00:10.680 TCP 23.104.0.1:42582 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:10:04.525 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59446 10 6452 1 2025-08-02 16:10:04.470 00:00:10.326 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:11:04.744 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37004 10 6452 1 2025-08-02 16:11:04.828 00:00:10.397 TCP 23.104.0.1:48240 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:12:16.612 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 16:12:05.255 00:00:10.395 TCP 23.104.0.1:54248 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:12:04.961 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46696 10 6452 1 2025-08-02 16:12:17.078 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 16:13:05.190 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35334 10 6452 1 2025-08-02 16:13:05.686 00:00:10.370 TCP 23.104.0.1:41694 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:14:05.407 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38676 10 6452 1 2025-08-02 16:14:06.110 00:00:10.321 TCP 23.104.0.1:52678 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:10:05.253 00:06:00.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 16:10:05.256 00:06:00.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 16:15:05.618 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47074 10 6452 1 2025-08-02 16:15:06.471 00:00:10.368 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:16:05.829 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51102 10 6452 1 2025-08-02 16:16:06.883 00:00:10.384 TCP 23.104.0.1:55522 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:17:06.063 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:45388 10 6452 1 2025-08-02 16:17:16.828 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 16:17:07.307 00:00:10.323 TCP 23.104.0.1:57980 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:17:17.059 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 16:18:06.233 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50504 10 6452 1 2025-08-02 16:18:07.669 00:00:10.322 TCP 23.104.0.1:41878 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:19:06.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47338 10 6452 1 2025-08-02 16:19:08.036 00:00:10.364 TCP 23.104.0.1:43296 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:20:06.645 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60568 10 6452 1 2025-08-02 16:20:08.444 00:00:10.357 TCP 23.104.0.1:33786 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:21:06.858 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53308 10 6452 1 2025-08-02 16:21:08.848 00:00:10.390 TCP 23.104.0.1:48030 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:17:05.258 00:06:00.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 16:17:05.255 00:06:00.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 16:22:16.926 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 16:22:16.888 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 16:22:09.280 00:00:10.365 TCP 23.104.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:22:07.085 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52618 10 6452 1 2025-08-02 16:23:07.304 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41288 10 6452 1 2025-08-02 16:23:09.690 00:00:10.372 TCP 23.104.0.1:44554 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:24:07.513 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46840 10 6452 1 2025-08-02 16:24:10.097 00:00:10.363 TCP 23.104.0.1:53090 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:25:07.754 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37040 10 6452 1 2025-08-02 16:25:10.502 00:00:10.320 TCP 23.104.0.1:44452 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:26:07.971 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55856 10 6452 1 2025-08-02 16:26:10.862 00:00:10.325 TCP 23.104.0.1:40494 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:27:08.208 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59024 10 6452 1 2025-08-02 16:27:17.012 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 16:27:17.093 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 16:27:11.230 00:00:10.322 TCP 23.104.0.1:42084 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:28:08.432 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51110 10 6452 1 2025-08-02 16:28:11.595 00:00:10.369 TCP 23.104.0.1:55184 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:24:05.256 00:06:00.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 16:24:05.268 00:06:00.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 16:29:08.607 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40776 10 6452 1 2025-08-02 16:29:12.004 00:00:10.361 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:30:08.787 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52266 10 6452 1 2025-08-02 16:30:12.416 00:00:10.365 TCP 23.104.0.1:50340 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:31:09.009 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44226 10 6452 1 2025-08-02 16:31:12.822 00:00:10.371 TCP 23.104.0.1:45878 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:32:17.246 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 16:32:09.244 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55518 10 6452 1 2025-08-02 16:32:17.044 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 16:32:13.232 00:00:10.325 TCP 23.104.0.1:58416 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:33:09.453 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38552 10 6452 1 2025-08-02 16:33:13.592 00:00:10.361 TCP 23.104.0.1:59388 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:34:09.626 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60860 10 6452 1 2025-08-02 16:34:13.994 00:00:10.378 TCP 23.104.0.1:35624 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:35:09.836 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46698 10 6452 1 2025-08-02 16:35:14.408 00:00:10.335 TCP 23.104.0.1:38556 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:31:05.257 00:06:00.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 16:31:05.259 00:06:00.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 16:36:10.071 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40336 10 6452 1 2025-08-02 16:36:14.798 00:00:10.367 TCP 23.104.0.1:41098 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:37:17.651 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 16:37:17.106 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 16:37:10.285 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54824 10 6452 1 2025-08-02 16:37:15.203 00:00:10.363 TCP 23.104.0.1:34392 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:38:10.495 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52322 10 6452 1 2025-08-02 16:38:15.605 00:00:10.327 TCP 23.104.0.1:36482 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:39:10.676 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58876 10 6452 1 2025-08-02 16:39:15.974 00:00:10.364 TCP 23.104.0.1:55940 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:40:10.884 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50768 10 6452 1 2025-08-02 16:40:16.377 00:00:10.366 TCP 23.104.0.1:56046 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:41:11.101 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40886 10 6452 1 2025-08-02 16:41:16.780 00:00:10.387 TCP 23.104.0.1:40774 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:42:11.316 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43316 10 6452 1 2025-08-02 16:42:18.121 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 16:42:17.975 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 16:42:17.205 00:00:10.370 TCP 23.104.0.1:51126 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:38:05.260 00:06:00.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 16:38:05.261 00:06:00.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 16:43:11.528 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53706 10 6452 1 2025-08-02 16:43:17.611 00:00:10.367 TCP 23.104.0.1:45648 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:44:11.707 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41648 10 6452 1 2025-08-02 16:44:18.022 00:00:10.361 TCP 23.104.0.1:59820 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:45:11.943 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53930 10 6452 1 2025-08-02 16:45:18.427 00:00:10.372 TCP 23.104.0.1:55512 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:46:12.172 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46070 10 6452 1 2025-08-02 16:46:18.829 00:00:10.389 TCP 23.104.0.1:56562 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:47:17.483 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 16:47:17.544 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 16:47:12.341 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56902 10 6452 1 2025-08-02 16:47:19.255 00:00:10.371 TCP 23.104.0.1:36894 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:48:12.560 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60982 10 6452 1 2025-08-02 16:48:19.663 00:00:10.365 TCP 23.104.0.1:36424 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:49:12.774 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46136 10 6452 1 2025-08-02 16:49:20.092 00:00:10.365 TCP 23.104.0.1:58120 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:45:05.263 00:06:00.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 16:45:05.260 00:06:00.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 16:50:12.993 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50164 10 6452 1 2025-08-02 16:50:20.497 00:00:10.366 TCP 23.104.0.1:44598 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:51:13.228 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57800 10 6452 1 2025-08-02 16:51:20.902 00:00:10.367 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:52:17.335 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 16:52:17.591 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 16:52:13.420 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55488 10 6452 1 2025-08-02 16:52:21.315 00:00:10.368 TCP 23.104.0.1:34330 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:53:13.637 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45468 10 6452 1 2025-08-02 16:53:21.723 00:00:10.328 TCP 23.104.0.1:50322 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:54:13.853 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33458 10 6452 1 2025-08-02 16:54:22.102 00:00:10.364 TCP 23.104.0.1:50386 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:55:14.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35354 10 6452 1 2025-08-02 16:55:22.504 00:00:10.321 TCP 23.104.0.1:42638 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:56:14.296 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:59500 10 6452 1 2025-08-02 16:56:22.864 00:00:10.368 TCP 23.104.0.1:39402 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:52:05.265 00:06:00.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 16:52:05.263 00:06:00.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 16:57:17.986 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 16:57:17.836 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 16:57:14.509 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39404 10 6452 1 2025-08-02 16:57:23.266 00:00:10.335 TCP 23.104.0.1:53896 -> 1.101.0.1:3000 11 1507 1 2025-08-02 16:58:14.724 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52376 10 6452 1 2025-08-02 16:58:23.643 00:00:10.362 TCP 23.104.0.1:43284 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499190, total packets: 1586, avg bps: 1065, avg pps: 0, avg bpp: 314 Time window: 2025-08-02 15:56:05 - 2025-08-02 16:58:34 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0012s User: 0.0035s Wall: 0.0029s flows/second: 55517.4 Runtime: 0.0029s