Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 22:58:50.805 00:00:10.364 TCP 23.104.0.1:42678 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:59:32.678 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43218 10 6452 1 2025-08-02 22:59:51.210 00:00:10.367 TCP 23.104.0.1:42656 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:00:32.886 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:54950 12 6544 1 2025-08-02 22:56:05.465 00:06:00.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 23:00:51.624 00:00:10.367 TCP 23.104.0.1:46220 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:56:05.467 00:06:00.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 23:01:33.097 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37850 10 6452 1 2025-08-02 23:01:52.032 00:00:10.367 TCP 23.104.0.1:49402 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:02:25.060 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 23:02:24.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:02:33.311 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39570 10 6452 1 2025-08-02 23:02:52.432 00:00:10.367 TCP 23.104.0.1:48436 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:03:33.529 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:38356 12 10365 1 2025-08-02 23:03:52.835 00:00:10.461 TCP 23.104.0.1:33940 -> 1.101.0.1:3000 15 1926 1 2025-08-02 23:04:33.776 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53094 10 6452 1 2025-08-02 23:04:53.336 00:00:10.377 TCP 23.104.0.1:50222 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:05:33.992 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33774 10 6452 1 2025-08-02 23:05:53.752 00:00:10.388 TCP 23.104.0.1:47924 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:06:34.220 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53614 10 6452 1 2025-08-02 23:06:54.177 00:00:10.367 TCP 23.104.0.1:58810 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:07:24.998 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 23:07:24.838 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:07:34.432 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55826 10 6452 1 2025-08-02 23:03:05.472 00:06:00.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 23:03:05.476 00:06:00.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 23:07:54.585 00:00:10.359 TCP 23.104.0.1:39242 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:08:34.613 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57888 11 6492 1 2025-08-02 23:08:54.979 00:00:10.366 TCP 23.104.0.1:53996 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:09:34.825 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57126 10 6452 1 2025-08-02 23:09:55.383 00:00:10.366 TCP 23.104.0.1:44300 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:10:35.071 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57920 10 6452 1 2025-08-02 23:10:55.790 00:00:10.375 TCP 23.104.0.1:46094 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:11:35.243 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:41206 10 6452 1 2025-08-02 23:11:56.201 00:00:10.362 TCP 23.104.0.1:37080 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:12:24.947 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:12:25.146 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 23:12:35.448 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57640 10 6452 1 2025-08-02 23:12:56.604 00:00:10.363 TCP 23.104.0.1:59786 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:13:35.660 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41880 10 6452 1 2025-08-02 23:13:57.007 00:00:10.361 TCP 23.104.0.1:42292 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:14:35.874 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40980 10 6452 1 2025-08-02 23:10:05.474 00:06:00.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 23:10:05.476 00:06:00.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 23:14:57.403 00:00:10.364 TCP 23.104.0.1:55280 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:15:36.099 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49288 10 6452 1 2025-08-02 23:15:57.807 00:00:10.380 TCP 23.104.0.1:57554 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:16:36.313 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47904 10 6452 1 2025-08-02 23:16:58.230 00:00:10.366 TCP 23.104.0.1:37808 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:17:25.019 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 23:17:25.218 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:17:36.520 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48242 10 6452 1 2025-08-02 23:17:58.636 00:00:10.366 TCP 23.104.0.1:41098 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:18:36.728 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58988 10 6452 1 2025-08-02 23:18:59.053 00:00:10.365 TCP 23.104.0.1:56890 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:19:36.940 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:37890 10 6452 1 2025-08-02 23:19:59.455 00:00:10.362 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:20:37.177 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45484 10 6452 1 2025-08-02 23:20:59.859 00:00:10.379 TCP 23.104.0.1:38090 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:21:37.398 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38464 10 6452 1 2025-08-02 23:17:05.478 00:06:00.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 23:17:05.477 00:06:00.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 23:22:00.281 00:00:10.331 TCP 23.104.0.1:39616 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:22:25.288 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 23:22:25.188 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:22:37.619 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53456 10 6452 1 2025-08-02 23:23:00.645 00:00:10.365 TCP 23.104.0.1:42862 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:23:37.840 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37516 10 6452 1 2025-08-02 23:24:01.060 00:00:10.366 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:24:38.012 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58444 10 6452 1 2025-08-02 23:25:01.470 00:00:10.365 TCP 23.104.0.1:51830 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:25:38.229 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-08-02 23:26:01.869 00:00:10.365 TCP 23.104.0.1:39016 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:26:38.450 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41318 10 6452 1 2025-08-02 23:27:02.276 00:00:10.372 TCP 23.104.0.1:60534 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:27:25.564 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 23:27:25.377 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:27:38.685 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58976 10 6452 1 2025-08-02 23:28:02.684 00:00:10.365 TCP 23.104.0.1:37180 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:28:38.893 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49318 10 6452 1 2025-08-02 23:24:05.479 00:06:00.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 23:24:05.477 00:06:00.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 23:29:03.102 00:00:10.367 TCP 23.104.0.1:56870 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:29:39.108 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53260 10 6452 1 2025-08-02 23:30:03.509 00:00:10.325 TCP 23.104.0.1:37634 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:30:39.320 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53314 10 6452 1 2025-08-02 23:31:03.890 00:00:10.377 TCP 23.104.0.1:60098 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:31:39.536 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34144 10 6452 1 2025-08-02 23:32:04.300 00:00:10.372 TCP 23.104.0.1:46962 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:32:25.583 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 23:32:25.374 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:32:39.752 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:59228 10 6452 1 2025-08-02 23:33:04.708 00:00:10.325 TCP 23.104.0.1:43986 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:33:39.957 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49266 12 6556 1 2025-08-02 23:34:05.102 00:00:10.363 TCP 23.104.0.1:44214 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:34:40.184 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50938 10 6452 1 2025-08-02 23:35:05.506 00:00:10.366 TCP 23.104.0.1:43256 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:35:40.419 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46936 10 6452 1 2025-08-02 23:31:05.484 00:06:00.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 23:31:05.482 00:06:00.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 23:36:05.910 00:00:10.363 TCP 23.104.0.1:59468 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:36:40.633 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42288 10 6452 1 2025-08-02 23:37:06.310 00:00:10.366 TCP 23.104.0.1:36974 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:37:26.181 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:37:26.161 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 23:37:40.844 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38116 10 6452 1 2025-08-02 23:38:06.714 00:00:10.376 TCP 23.104.0.1:40378 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:38:41.079 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:46238 12 10365 1 2025-08-02 23:39:07.133 00:00:10.402 TCP 23.104.0.1:41538 -> 1.101.0.1:3000 15 1926 1 2025-08-02 23:39:41.318 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55602 10 6452 1 2025-08-02 23:40:07.573 00:00:10.365 TCP 23.104.0.1:58410 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:40:41.486 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49636 10 6452 1 2025-08-02 23:41:07.980 00:00:10.369 TCP 23.104.0.1:43680 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:41:41.699 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51742 10 6452 1 2025-08-02 23:42:08.389 00:00:10.363 TCP 23.104.0.1:36696 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:42:25.811 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:42:25.523 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 23:42:41.906 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43848 10 6452 1 2025-08-02 23:38:05.485 00:06:00.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 23:38:05.483 00:06:00.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 23:43:08.793 00:00:10.347 TCP 23.104.0.1:39460 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:43:42.093 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52390 10 6452 1 2025-08-02 23:44:09.175 00:00:10.361 TCP 23.104.0.1:41728 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:44:42.307 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38596 10 6452 1 2025-08-02 23:45:09.581 00:00:10.367 TCP 23.104.0.1:55942 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:45:42.525 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33120 10 6452 1 2025-08-02 23:46:09.985 00:00:10.373 TCP 23.104.0.1:45526 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:46:42.698 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37754 10 6452 1 2025-08-02 23:47:10.394 00:00:10.321 TCP 23.104.0.1:47316 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:47:25.528 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:47:25.879 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 23:47:42.876 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47940 10 6452 1 2025-08-02 23:48:10.759 00:00:10.334 TCP 23.104.0.1:54298 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:48:43.108 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54930 10 6452 1 2025-08-02 23:49:11.147 00:00:10.367 TCP 23.104.0.1:36362 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:49:43.328 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35402 10 6452 1 2025-08-02 23:45:05.489 00:06:00.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 23:45:05.490 00:06:00.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 23:50:11.553 00:00:10.375 TCP 23.104.0.1:57794 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:50:43.547 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37478 10 6452 1 2025-08-02 23:51:11.968 00:00:10.382 TCP 23.104.0.1:35326 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:51:43.778 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 10 6452 1 2025-08-02 23:52:25.951 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 23:52:25.783 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:52:12.388 00:00:10.370 TCP 23.104.0.1:48418 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:52:44.015 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40208 10 6452 1 2025-08-02 23:53:12.804 00:00:10.364 TCP 23.104.0.1:58090 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:53:44.239 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54884 10 6452 1 2025-08-02 23:54:13.206 00:00:10.370 TCP 23.104.0.1:34188 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:54:44.455 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55314 10 6452 1 2025-08-02 23:55:13.610 00:00:10.368 TCP 23.104.0.1:58380 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:55:44.674 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39996 10 6452 1 2025-08-02 23:56:14.017 00:00:10.370 TCP 23.104.0.1:41456 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:56:44.899 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55402 10 6452 1 2025-08-02 23:52:05.488 00:06:00.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 23:52:05.490 00:06:00.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 23:57:25.911 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 23:57:14.426 00:00:10.367 TCP 23.104.0.1:34950 -> 1.101.0.1:3000 11 1507 1 2025-08-02 23:57:26.015 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 23:57:45.123 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47124 10 6452 1 2025-08-02 23:58:14.853 00:00:10.374 TCP 23.104.0.1:46008 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 501534, total packets: 1591, avg bps: 1072, avg pps: 0, avg bpp: 315 Time window: 2025-08-02 22:56:05 - 2025-08-02 23:58:25 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0049s User: 0.0000s Wall: 0.0027s flows/second: 59764.8 Runtime: 0.0027s