Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 06:59:05.110 00:00:10.372 TCP 23.104.0.1:54960 -> 1.101.0.1:3000 11 1507 1 2025-08-03 06:59:20.089 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 10 6452 1 2025-08-03 07:00:05.521 00:00:10.371 TCP 23.104.0.1:56200 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:00:20.303 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38372 10 6452 1 2025-08-03 07:01:05.933 00:00:10.345 TCP 23.104.0.1:46956 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:01:20.477 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50356 10 6452 1 2025-08-03 07:02:06.314 00:00:10.369 TCP 23.104.0.1:42594 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:02:20.692 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41092 10 6452 1 2025-08-03 07:02:34.436 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 07:02:34.635 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 07:03:06.719 00:00:10.383 TCP 23.104.0.1:45908 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:03:20.915 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:59522 10 6452 1 2025-08-03 06:59:05.613 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 06:59:05.615 00:06:00.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 07:04:07.136 00:00:10.367 TCP 23.104.0.1:59296 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:04:21.097 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33688 10 6452 1 2025-08-03 07:05:07.542 00:00:10.379 TCP 23.104.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:05:21.313 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43926 10 6452 1 2025-08-03 07:06:07.957 00:00:10.364 TCP 23.104.0.1:48480 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:06:21.536 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39516 10 6452 1 2025-08-03 07:07:08.362 00:00:10.318 TCP 23.104.0.1:44802 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:07:21.712 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43352 10 6452 1 2025-08-03 07:07:34.755 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 07:07:34.552 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 07:08:08.719 00:00:10.366 TCP 23.104.0.1:58966 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:08:21.924 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:42764 10 6452 1 2025-08-03 07:09:09.124 00:00:10.364 TCP 23.104.0.1:44542 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:09:22.121 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33182 10 6452 1 2025-08-03 07:10:09.528 00:00:10.368 TCP 23.104.0.1:38526 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:10:22.294 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37406 10 6452 1 2025-08-03 07:06:05.617 00:06:00.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 07:06:05.620 00:06:00.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 07:11:09.940 00:00:10.387 TCP 23.104.0.1:34828 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:11:22.467 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33798 10 6452 1 2025-08-03 07:12:10.360 00:00:10.398 TCP 23.104.0.1:57580 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:12:22.646 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60810 10 6452 1 2025-08-03 07:12:34.525 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 07:12:34.708 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 07:13:10.856 00:00:10.374 TCP 23.104.0.1:56538 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:13:22.861 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52690 10 6452 1 2025-08-03 07:14:11.270 00:00:10.365 TCP 23.104.0.1:46028 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:14:23.083 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54966 10 6452 1 2025-08-03 07:15:11.677 00:00:10.371 TCP 23.104.0.1:33438 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:15:23.301 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51956 10 6452 1 2025-08-03 07:16:12.099 00:00:10.369 TCP 23.104.0.1:53270 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:16:23.513 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60558 10 6452 1 2025-08-03 07:17:12.505 00:00:10.365 TCP 23.104.0.1:37806 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:17:34.826 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 07:17:23.724 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45022 10 6452 1 2025-08-03 07:17:34.848 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 07:13:05.621 00:06:00.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 07:13:05.618 00:06:00.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 07:18:12.907 00:00:10.368 TCP 23.104.0.1:43280 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:18:23.933 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45826 10 6452 1 2025-08-03 07:19:13.311 00:00:10.367 TCP 23.104.0.1:53558 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:19:24.172 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49634 10 6452 1 2025-08-03 07:20:13.714 00:00:10.374 TCP 23.104.0.1:56236 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:20:24.393 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50522 10 6452 1 2025-08-03 07:21:14.124 00:00:10.366 TCP 23.104.0.1:55832 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:21:24.618 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43022 10 6452 1 2025-08-03 07:22:14.533 00:00:10.365 TCP 23.104.0.1:58806 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:22:34.849 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 07:22:24.832 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37552 10 6452 1 2025-08-03 07:22:34.790 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 07:23:14.941 00:00:10.363 TCP 23.104.0.1:50428 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:23:25.088 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43922 10 6452 1 2025-08-03 07:24:15.344 00:00:10.330 TCP 23.104.0.1:43672 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:24:25.262 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58486 10 6452 1 2025-08-03 07:20:05.619 00:06:00.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 07:20:05.621 00:06:00.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 07:25:15.713 00:00:10.373 TCP 23.104.0.1:43564 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:25:25.471 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60158 10 6452 1 2025-08-03 07:26:16.120 00:00:10.366 TCP 23.104.0.1:48996 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:26:25.680 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42340 10 6452 1 2025-08-03 07:27:16.525 00:00:10.370 TCP 23.104.0.1:55776 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:27:35.083 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 07:27:35.105 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 07:27:25.849 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42006 10 6452 1 2025-08-03 07:28:16.935 00:00:10.380 TCP 23.104.0.1:53840 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:28:26.037 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41158 10 6452 1 2025-08-03 07:29:17.353 00:00:10.321 TCP 23.104.0.1:33856 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:29:26.246 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57918 10 6452 1 2025-08-03 07:30:17.715 00:00:10.380 TCP 23.104.0.1:51800 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:30:26.422 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47546 10 6452 1 2025-08-03 07:31:18.133 00:00:10.364 TCP 23.104.0.1:60158 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:31:26.596 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53374 10 6452 1 2025-08-03 07:27:05.621 00:06:00.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 07:27:05.625 00:06:00.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 07:32:18.534 00:00:10.322 TCP 23.104.0.1:55564 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:32:35.235 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 07:32:26.820 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33412 10 6452 1 2025-08-03 07:32:35.278 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 07:33:18.895 00:00:10.365 TCP 23.104.0.1:51574 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:33:27.039 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35208 10 6452 1 2025-08-03 07:34:19.299 00:00:10.364 TCP 23.104.0.1:40584 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:34:27.255 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40544 10 6452 1 2025-08-03 07:35:19.702 00:00:10.364 TCP 23.104.0.1:55720 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:35:27.474 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51650 10 6452 1 2025-08-03 07:36:20.108 00:00:10.321 TCP 23.104.0.1:42618 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:36:27.650 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41540 10 6452 1 2025-08-03 07:37:20.468 00:00:10.364 TCP 23.104.0.1:33214 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:37:35.267 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 07:37:35.242 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 07:37:27.862 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58424 10 6452 1 2025-08-03 07:38:20.874 00:00:10.394 TCP 23.104.0.1:35926 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:38:28.038 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48658 10 6452 1 2025-08-03 07:34:05.623 00:06:00.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 07:34:05.625 00:06:00.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 07:39:21.309 00:00:10.375 TCP 23.104.0.1:52680 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:39:28.254 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38552 10 6452 1 2025-08-03 07:40:21.721 00:00:10.380 TCP 23.104.0.1:54696 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:40:28.472 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50412 10 6452 1 2025-08-03 07:41:22.137 00:00:10.372 TCP 23.104.0.1:49956 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:41:28.685 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45312 10 6452 1 2025-08-03 07:42:35.313 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 07:42:22.548 00:00:10.321 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:42:35.428 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 07:42:28.859 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43896 10 6452 1 2025-08-03 07:43:22.913 00:00:10.401 TCP 23.104.0.1:47640 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:43:29.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46584 10 6452 1 2025-08-03 07:44:23.354 00:00:10.332 TCP 23.104.0.1:46868 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:44:29.299 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34322 10 6452 1 2025-08-03 07:45:23.722 00:00:10.376 TCP 23.104.0.1:56754 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:45:29.514 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50264 12 6556 1 2025-08-03 07:41:05.627 00:06:00.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 07:41:05.630 00:06:00.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 07:46:24.132 00:00:10.326 TCP 23.104.0.1:52666 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:46:29.727 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54592 10 6452 1 2025-08-03 07:47:35.234 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 07:47:35.573 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 07:47:24.493 00:00:10.363 TCP 23.104.0.1:47862 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:47:29.948 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39012 10 6452 1 2025-08-03 07:48:24.888 00:00:10.367 TCP 23.104.0.1:46530 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:48:30.173 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48458 10 6452 1 2025-08-03 07:49:25.292 00:00:10.375 TCP 23.104.0.1:49076 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:49:30.390 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52570 10 6452 1 2025-08-03 07:50:25.708 00:00:10.371 TCP 23.104.0.1:56454 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:50:30.610 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48010 10 6452 1 2025-08-03 07:51:26.113 00:00:10.363 TCP 23.104.0.1:43982 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:51:30.829 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32910 10 6452 1 2025-08-03 07:52:35.937 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 07:52:26.514 00:00:10.364 TCP 23.104.0.1:52920 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:52:35.490 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 07:52:31.070 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58042 10 6452 1 2025-08-03 07:48:05.627 00:06:00.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 07:48:05.629 00:06:00.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 07:53:26.918 00:00:10.378 TCP 23.104.0.1:45508 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:53:31.285 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34358 10 6452 1 2025-08-03 07:54:31.499 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 6452 1 2025-08-03 07:54:27.342 00:00:10.370 TCP 23.104.0.1:38012 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:55:31.676 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47686 10 6452 1 2025-08-03 07:55:27.755 00:00:10.380 TCP 23.104.0.1:33046 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:56:28.177 00:00:10.367 TCP 23.104.0.1:47122 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:56:31.892 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55700 10 6452 1 2025-08-03 07:57:35.613 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 07:57:35.769 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 07:57:28.582 00:00:10.366 TCP 23.104.0.1:42074 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:57:32.110 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53956 10 6452 1 2025-08-03 07:58:28.987 00:00:10.369 TCP 23.104.0.1:34568 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:58:32.334 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36728 10 6452 1 Summary: total flows: 160, total bytes: 497468, total packets: 1558, avg bps: 1112, avg pps: 0, avg bpp: 319 Time window: 2025-08-03 06:59:05 - 2025-08-03 07:58:42 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0022s User: 0.0022s Wall: 0.0022s flows/second: 73665.1 Runtime: 0.0022s