Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 18:59:12.590 00:00:10.363 TCP 23.104.0.1:53206 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:59:41.832 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59756 10 6452 1 2025-08-02 19:00:12.999 00:00:10.373 TCP 23.104.0.1:40090 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:00:42.072 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37354 10 6452 1 2025-08-02 19:01:13.411 00:00:10.369 TCP 23.104.0.1:58344 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:01:42.288 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-08-02 19:02:20.339 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 19:02:20.197 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 19:02:13.822 00:00:10.363 TCP 23.104.0.1:53902 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:02:42.467 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42872 10 6452 1 2025-08-02 18:58:05.361 00:06:00.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 18:58:05.358 00:06:00.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 19:03:14.225 00:00:10.379 TCP 23.104.0.1:47792 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:03:42.680 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41024 10 6452 1 2025-08-02 19:04:14.644 00:00:10.371 TCP 23.104.0.1:55334 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:04:42.902 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41930 10 6452 1 2025-08-02 19:05:15.062 00:00:10.366 TCP 23.104.0.1:48916 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:05:43.117 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54626 10 6452 1 2025-08-02 19:06:15.468 00:00:10.372 TCP 23.104.0.1:57260 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:06:43.335 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39378 10 6452 1 2025-08-02 19:07:20.686 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 19:07:20.236 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 19:07:15.877 00:00:10.366 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:07:43.545 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55130 10 6452 1 2025-08-02 19:08:16.282 00:00:10.438 TCP 23.104.0.1:54756 -> 1.101.0.1:3000 15 1926 1 2025-08-02 19:08:43.762 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57486 12 10365 1 2025-08-02 19:09:16.757 00:00:10.378 TCP 23.104.0.1:52124 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:09:44.003 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49444 10 6452 1 2025-08-02 19:05:05.382 00:06:00.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 19:05:05.378 00:06:00.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 19:10:17.177 00:00:10.326 TCP 23.104.0.1:36132 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:10:44.225 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55366 10 6452 1 2025-08-02 19:11:17.541 00:00:10.567 TCP 23.104.0.1:51760 -> 1.101.0.1:3000 13 1611 1 2025-08-02 19:11:44.440 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-08-02 19:12:20.385 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 19:12:20.168 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 19:12:18.144 00:00:10.363 TCP 23.104.0.1:40858 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:12:44.647 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35184 10 6452 1 2025-08-02 19:13:18.543 00:00:10.325 TCP 23.104.0.1:36284 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:13:44.819 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60482 10 6452 1 2025-08-02 19:14:18.902 00:00:10.368 TCP 23.104.0.1:42286 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:14:45.046 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51570 10 6452 1 2025-08-02 19:15:19.310 00:00:10.368 TCP 23.104.0.1:37558 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:15:45.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57424 10 6452 1 2025-08-02 19:16:19.717 00:00:10.384 TCP 23.104.0.1:35256 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:16:45.425 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42364 10 6452 1 2025-08-02 19:12:05.382 00:06:00.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 19:12:05.380 00:06:00.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 19:17:20.442 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 19:17:20.366 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 19:17:20.136 00:00:10.357 TCP 23.104.0.1:59106 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:17:45.639 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37806 10 6452 1 2025-08-02 19:18:20.534 00:00:10.364 TCP 23.104.0.1:58846 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:18:45.845 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58600 10 6452 1 2025-08-02 19:19:20.935 00:00:10.372 TCP 23.104.0.1:52170 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:19:46.080 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37092 10 6452 1 2025-08-02 19:20:21.348 00:00:10.369 TCP 23.104.0.1:38372 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:20:46.292 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60136 10 6452 1 2025-08-02 19:21:21.763 00:00:10.375 TCP 23.104.0.1:51472 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:21:46.513 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55888 10 6452 1 2025-08-02 19:22:20.308 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 19:22:20.264 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 19:22:22.174 00:00:10.366 TCP 23.104.0.1:44300 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:22:46.732 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42948 10 6452 1 2025-08-02 19:23:22.574 00:00:10.376 TCP 23.104.0.1:44846 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:23:46.901 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59610 10 6452 1 2025-08-02 19:19:05.381 00:06:00.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 19:19:05.385 00:06:00.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 19:24:22.986 00:00:10.341 TCP 23.104.0.1:40476 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:24:47.118 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53750 10 6452 1 2025-08-02 19:25:23.369 00:00:11.627 TCP 23.104.0.1:33416 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:25:47.330 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44518 10 6452 1 2025-08-02 19:26:25.032 00:00:10.362 TCP 23.104.0.1:49732 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:26:47.546 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49690 10 6452 1 2025-08-02 19:27:20.735 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 19:27:20.688 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 19:27:25.432 00:00:10.365 TCP 23.104.0.1:33414 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:27:47.758 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41680 10 6452 1 2025-08-02 19:28:25.838 00:00:10.397 TCP 23.104.0.1:34220 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:28:47.931 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:53020 10 6452 1 2025-08-02 19:29:26.272 00:00:10.359 TCP 23.104.0.1:39148 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:29:48.197 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:60144 10 6452 1 2025-08-02 19:30:26.667 00:00:10.360 TCP 23.104.0.1:49502 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:30:48.407 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42766 10 6452 1 2025-08-02 19:26:05.385 00:06:00.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 19:26:05.383 00:06:00.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 19:31:27.087 00:00:10.374 TCP 23.104.0.1:48486 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:31:48.620 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39722 10 6452 1 2025-08-02 19:32:20.585 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 19:32:20.639 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 19:32:27.499 00:00:10.370 TCP 23.104.0.1:49318 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:32:48.828 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35232 10 6452 1 2025-08-02 19:33:27.907 00:00:10.363 TCP 23.104.0.1:35146 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:33:49.001 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55456 10 6452 1 2025-08-02 19:34:28.312 00:00:10.325 TCP 23.104.0.1:51404 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:34:49.219 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38520 10 6452 1 2025-08-02 19:35:28.679 00:00:10.369 TCP 23.104.0.1:40020 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:35:49.434 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:48076 10 6452 1 2025-08-02 19:36:29.103 00:00:10.382 TCP 23.104.0.1:50622 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:36:49.616 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39186 10 6452 1 2025-08-02 19:37:20.887 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 19:37:20.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 19:37:29.538 00:00:10.363 TCP 23.104.0.1:35660 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:37:49.825 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40066 10 6452 1 2025-08-02 19:33:05.383 00:06:00.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 19:33:05.385 00:06:00.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 19:38:29.941 00:00:10.385 TCP 23.104.0.1:42782 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:38:50.074 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35072 10 6452 1 2025-08-02 19:39:30.366 00:00:10.362 TCP 23.104.0.1:60600 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:39:50.248 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56410 10 6452 1 2025-08-02 19:40:30.772 00:00:10.370 TCP 23.104.0.1:48342 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:40:50.463 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55714 10 6452 1 2025-08-02 19:41:31.174 00:00:10.359 TCP 23.104.0.1:45936 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:41:50.676 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44534 10 6452 1 2025-08-02 19:42:20.885 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 19:42:21.196 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 19:42:31.573 00:00:10.368 TCP 23.104.0.1:51884 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:42:50.890 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46824 10 6452 1 2025-08-02 19:43:31.978 00:00:10.364 TCP 23.104.0.1:55922 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:43:51.120 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34254 10 6452 1 2025-08-02 19:44:32.389 00:00:10.362 TCP 23.104.0.1:37108 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:44:51.328 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52182 10 6452 1 2025-08-02 19:40:05.383 00:06:00.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 19:40:05.386 00:06:00.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 19:45:32.790 00:00:10.363 TCP 23.104.0.1:58270 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:45:51.542 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35718 10 6452 1 2025-08-02 19:46:33.192 00:00:10.364 TCP 23.104.0.1:49476 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:46:51.759 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57932 10 6452 1 2025-08-02 19:47:20.968 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 19:47:20.909 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 19:47:33.595 00:00:10.358 TCP 23.104.0.1:43202 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:47:51.977 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 10 6452 1 2025-08-02 19:48:33.993 00:00:10.369 TCP 23.104.0.1:38866 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:48:52.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51184 10 6452 1 2025-08-02 19:49:34.401 00:00:10.366 TCP 23.104.0.1:56286 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:49:52.426 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47872 10 6452 1 2025-08-02 19:50:34.804 00:00:10.412 TCP 23.104.0.1:54282 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:50:52.637 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59756 10 6452 1 2025-08-02 19:51:35.258 00:00:10.363 TCP 23.104.0.1:41618 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:51:52.850 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37204 10 6452 1 2025-08-02 19:47:05.384 00:06:00.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 19:47:05.387 00:06:00.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 19:52:21.302 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 19:52:21.295 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 19:52:35.660 00:00:10.364 TCP 23.104.0.1:54478 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:52:53.080 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59120 10 6452 1 2025-08-02 19:53:36.083 00:00:10.364 TCP 23.104.0.1:34840 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:53:53.292 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 10 6452 1 2025-08-02 19:54:36.486 00:00:10.367 TCP 23.104.0.1:58928 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:54:53.514 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58396 10 6452 1 2025-08-02 19:55:36.904 00:00:10.337 TCP 23.104.0.1:35340 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:55:53.748 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37872 10 6452 1 2025-08-02 19:56:37.283 00:00:10.332 TCP 23.104.0.1:45050 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:56:53.965 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51960 12 6556 1 2025-08-02 19:57:20.993 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 19:57:21.088 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 19:57:37.656 00:00:10.364 TCP 23.104.0.1:37520 -> 1.101.0.1:3000 11 1507 1 2025-08-02 19:57:54.187 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48092 10 6452 1 2025-08-02 19:58:38.065 00:00:10.365 TCP 23.104.0.1:43704 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 495452, total packets: 1556, avg bps: 1087, avg pps: 0, avg bpp: 318 Time window: 2025-08-02 18:58:05 - 2025-08-02 19:58:48 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0031s User: 0.0010s Wall: 0.0021s flows/second: 76077.4 Runtime: 0.0021s